Warning: Permanently added '[localhost]:54117' (ECDSA) to the list of known hosts.
2025/05/31 02:26:17 fuzzer started
2025/05/31 02:26:18 dialing manager at localhost:34361
syzkaller login: [   92.839572] cgroup: Unknown subsys name 'net'
[   92.988144] cgroup: Unknown subsys name 'cpuset'
[   93.039905] cgroup: Unknown subsys name 'rlimit'
2025/05/31 02:26:34 syscalls: 2214
2025/05/31 02:26:34 code coverage: enabled
2025/05/31 02:26:34 comparison tracing: enabled
2025/05/31 02:26:34 extra coverage: enabled
2025/05/31 02:26:34 setuid sandbox: enabled
2025/05/31 02:26:34 namespace sandbox: enabled
2025/05/31 02:26:34 Android sandbox: enabled
2025/05/31 02:26:34 fault injection: enabled
2025/05/31 02:26:34 leak checking: enabled
2025/05/31 02:26:34 net packet injection: enabled
2025/05/31 02:26:34 net device setup: enabled
2025/05/31 02:26:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/31 02:26:34 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/31 02:26:34 USB emulation: enabled
2025/05/31 02:26:34 hci packet injection: enabled
2025/05/31 02:26:34 wifi device emulation: enabled
2025/05/31 02:26:34 802.15.4 emulation: enabled
2025/05/31 02:26:34 fetching corpus: 0, signal 0/0 (executing program)
2025/05/31 02:26:36 starting 8 fuzzer processes
02:26:36 executing program 0:
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)=@buf={0x98, &(0x7f0000000000)="604e6ff61ca286534770a381d54b8894b6a9265714231f686d41734a5577b5f10e1c35f657104d91488afc0cb4da9419fc82613e435c4208f657e2d2c4db424f60726567330651bca86c1af94db30387b0943e871c9dd02ccdbef88e367bbcec9c030c52f5eb20817b954ed0b12ec62c90eddd4cda4197308aac43704d43a44199b8acc38a679a30dc37ae50f89ee297a7370c912066322a"})
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'veth1_virt_wifi\x00', {0x2, 0x0, @multicast1}})
ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180))
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f00000001c0)={0x2, 0x508, 0xff})
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240))
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000c0, 0x0)
ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000500))
r2 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x40001, 0x83)
r3 = openat$incfs(r1, &(0x7f0000000640)='.pending_reads\x00', 0x581000, 0x0)
r4 = accept4$unix(r1, &(0x7f0000000680)=@abs, &(0x7f0000000700)=0x6e, 0x81800)
clock_gettime(0x0, &(0x7f00000007c0)={<r5=>0x0, <r6=>0x0})
ppoll(&(0x7f0000000740)=[{r2, 0x80}, {r1, 0x4208}, {r3, 0xa0c0}, {r4, 0x4008}, {r0, 0x1020}, {r0, 0x280}, {r1, 0x8d}, {r0, 0x2c}, {r1, 0x44}], 0x9, &(0x7f0000000800)={r5, r6+10000000}, &(0x7f0000000840)={[0x1ff]}, 0x8)
sendmsg$nl_netfilter(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x6, 0x3, 0x301, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x6}, [@nested={0x20, 0x2f, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0xb, 0x44, 0x0, 0x0, @str='%%[:{\'\x00'}, @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x6031}, 0x4005)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000980)={0x2, {0x2, 0x2, 0x5, 0x20, 0x1, 0x4}})
ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0)
ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f00000009c0))
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000a00)={'nat\x00', 0x9f, "c4d3e5d17bb14d5a479c495857b35fa5d0376e0a6a1e52c9bb4de5e25436a58a45e2932ef3e098d8ac13f5f54ded741fa16ec8bcc591cd49ccdcadecdc62f3da3d6fcbcd536bb2d233d2e932a99489de644e1b779333180384f6f1770e5660ea8b555f7338505f6bd63dd2a6f60c2f32198e4bd383469c3833178266b2fa62af16529e50c1ecb4c7afe4f0f1c1d86806c0a2860027c911a63821c536142d13"}, &(0x7f0000000b00)=0xc3)

02:26:36 executing program 1:
semctl$SETVAL(0x0, 0x4, 0x10, &(0x7f0000000000)=0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040))
pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000c, 0xffffffffffffffff)
semctl$SETVAL(0x0, 0x1, 0x10, &(0x7f00000000c0)=0x7fff)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {0xffffffffffffffff, <r2=>0x0}}, './file0\x00'})
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000140)=""/178)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={<r3=>r0, 0x7fff, 0x0, 0x4})
syz_genetlink_get_family_id$team(&(0x7f0000000240), r3)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f00000002c0)=""/97)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/notes', 0x100, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000380)={{0x7f, 0x88}, {0x9, 0x1}, 0x7, 0x6, 0x1f})
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000400)=""/150)
r6 = syz_io_uring_complete(0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa4, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4917}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4d62}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4ed6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008044}, 0x400c8c9)
semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000640)=""/183)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000700)=[0x1, 0x2, 0x7])
semctl$SEM_STAT(0xffffffffffffffff, 0x4, 0x12, &(0x7f0000000740)=""/69)

02:26:36 executing program 2:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040))
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x311202, 0x12c)
tee(r1, r0, 0x43, 0x8)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0x20}}, './file0\x00'})
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x9, 0x6aa, 0xb27})
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000140)="98f3b2cd0eedce4e1b235d9dbb41aba34bb4e9229330a38b7408")
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000180))
close_range(r1, 0xffffffffffffffff, 0x0)
r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x1ff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x3}, @free_buffer={0x40086303, r3}, @request_death={0x400c630e, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done], 0xbd, 0x0, &(0x7f0000000240)="511207a8a8618e37d84ddf36797836c1946f9c47ff2a6d9bc18aff4aeaba55dace14e950baf57bf149939fbaecb16f45eab5c1288e7a0a9f61284b44f3897337b20d0bb9365c42b1d86a6e99ea030ac6e462b9d9cf276b69039c8442ee71f475c286e836a7f45b56d033953b541674ebb0015712e870746991cd0d3a241446fd8dca2817ac06de4402ff76280cb88e696c08a5cddac526d89d5c3daadf283eabd61678285feba5aca9d1050882fc645cd06377b99feaa942f05ecb9803"})
connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r2)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r5 = syz_io_uring_complete(0x0)
write$P9_RRENAMEAT(r5, &(0x7f00000008c0)={0x7, 0x4b, 0x2}, 0x7)

[  110.458688] audit: type=1400 audit(1748658396.176:7): avc:  denied  { execmem } for  pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
02:26:36 executing program 3:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfc}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2e}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x29c9394c}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x14c}}, 0x40040)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup2(0xffffffffffffffff, r1)
fchmod(r2, 0x40)
r3 = open(&(0x7f0000000340)='./file0\x00', 0x200, 0x64)
getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000380), &(0x7f00000003c0)=0x8)
ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000400)={0x5ba, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000008d80), &(0x7f0000008dc0)=0x8)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000008e00)={'bond_slave_1\x00'})
ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000008e80)={0x4, 0x8, '\x00', 0x1, &(0x7f0000008e40)=[0x0]})
r5 = syz_open_dev$vcsn(&(0x7f0000008ec0), 0x7, 0xd0080)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000008f00)=0x40, 0x4)
syz_emit_vhci(&(0x7f0000008f40)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x1ffc00}}}, 0xd)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000008f80))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009000), r3)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000009040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000009140)={&(0x7f0000008fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000009100)={&(0x7f0000009080)={0x54, r6, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xf}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x40}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x80}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x54}}, 0x20000054)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000009240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000, 0x7fd7, 0x40, 0x500, 0x1, 0x220})

02:26:36 executing program 4:
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x0, 0x383c1d8a, 0x3f, 0x26, 0xfffff35b}}, 0x4400)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
faccessat2(r0, &(0x7f0000000080)='./file0\x00', 0x6, 0x2100)
sendmsg$802154_dgram(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)="8db308946c4734d407cbb1a1dcc919d987a316b3fad7b203df17772ed1b0e7a542b4b1ac05b1b02e2ed94003ba97f562f8a81bc194cae2787f4feb14182f64be94325f9e4d98cd0b5ab20eeb599167111b9fcd3ae37b288e9cf4bd5e140389e72abbb253e77182633b79d6699e15f6dc801d85a43f7e0efcb7fc06f3d9e72063d94a7663", 0x84}, 0x1, 0x0, 0x0, 0xc0004}, 0x8840)
pipe2(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000240)={{<r3=>0x0, 0x2, 0x7e11a9ee, 0xfffffffffffffffa, 0x6, 0x3ff6, 0xb458, 0x8b, 0x7fff, 0x0, 0xbfa9, 0xfffffffffffffff7, 0x4, 0xc0a, 0x5}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000300)={{r3, 0xfffffffffffffffe, 0x1, 0x9, 0x4, 0x7, 0xcb, 0x402, 0x80000000, 0x1ff, 0x200, 0x6, 0x12, 0x10000, 0x8001}, 0x10, [0x0, 0x0]})
r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000380)='.pending_reads\x00', 0x40040, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000003c0)={0x40}, 0x4)
sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x14, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x8}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x2}]}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7fff}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xe6a}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
getpeername$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000580))
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r5=>r1, {0x6, 0x4}}, './file0\x00'})
mknodat(r1, &(0x7f0000000600)='./file0\x00', 0x400, 0x2)
ioctl$EXT4_IOC_MIGRATE(r4, 0x6609)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000640)={@remote, 0x3, 0x0, 0x2, 0x1, 0x5d9, 0x101}, &(0x7f0000000680)=0x20)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r6=>r5, {0x9}}, './file0\x00'})
fchownat(r6, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x400)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3e, 0x45}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x811)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x1dc, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_IE={0x1a8, 0x2a, [@perr={0x84, 0x114, {0x7, 0x10, [@ext={{}, @device_b, 0x7, @device_b, 0x15}, @ext={{}, @broadcast, 0x80000000, @device_a, 0x8}, @ext={{}, @broadcast, 0xf45, @device_a, 0x24}, @not_ext={{}, @device_b, 0x7, "", 0x1f}, @ext={{}, @device_a, 0x3, @device_a, 0x35}, @ext={{}, @broadcast, 0x1f, @broadcast, 0x30}, @ext={{}, @device_b, 0x64, @device_a, 0x3a}, @ext={{}, @broadcast, 0x9, @broadcast, 0xb}, @not_ext={{}, @device_a, 0x8, "", 0x5}, @ext={{}, @broadcast, 0xbff9, @broadcast, 0x34}, @ext={{}, @device_b, 0xb7b0, @broadcast, 0x1b}, @not_ext={{}, @device_a, 0x1, "", 0x1b}, @not_ext={{}, @device_a, 0x6, "", 0x11}, @not_ext={{}, @device_b, 0x2, "", 0x14}, @ext={{}, @device_b, 0x0, @device_a, 0x1b}, @ext={{}, @broadcast, 0x7f, @device_a, 0x1f}]}}, @tim={0x5, 0x6c, {0x4d, 0x32, 0x0, "47e3af1948e1bb89288b01d4dde94c18f606d7e404c29bcc0abad9db8eaab1dbdbe9c5d5b6aaef2a1903fc63d0016a79026b01b42002f9679c208fa17c8f013c4e8f4869d16c7a76d9c557abf3eaa9a87b0b55466c97bf5147cd776bd1340fbeb5b345f51d6e40ccad"}}, @mic={0x8c, 0x18, {0xea8, "8bc8b1964381", @long="28c90c2c8eb632bfd268bcddd878b384"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0x8}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40}, 0x80c0)

02:26:36 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'U+', 0x6}, 0x16, 0x3)
r1 = fsmount(r0, 0x0, 0x4)
r2 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10)
setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000140)={0x1c0, {{0x2, 0x4e24, @multicast1}}}, 0x88)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x0, [0x2, 0x5]}, &(0x7f0000000280)=0x44)
r4 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000300)=0x1c, 0x80800)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@local}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x4, {{0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}}}, 0x88)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x8100, 0x0)
sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x8, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000006c0))
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000700))
ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000740)={'veth0_to_hsr\x00', 0x1})
write$tcp_congestion(r1, &(0x7f0000000780)='scalable\x00', 0x9)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xd0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x56}}}}, [@NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@beacon_params, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0xe3, 0x4, 0x41, 0x7ff, 0x1, 0xcf]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x143}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x268}], @NL80211_ATTR_CSA_IES={0x20, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0xffff, 0x1, 0xae, 0x1000]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x7, 0x1, 0x0, 0x366d, 0x7, 0xc9e7]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5d}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a2}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x3]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x840)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000980)={0x2, 0xbf, "1f86e91f879338f0f407cee4ce52f53383f16814bee5fcabdf42f8374508d47829ba26d242e1209cf250387ca487660c05550df11d7573396a06a004743179a4c2374c687c48b2959c7d257da124be2ef5f61e32405230dbfc8aeb168c3ac4eb03afdc268131cfb5c7340345e0bff0cca72b144d502943a49bac0126dffc18d5a2623c49f57684ee22e9ce9b52214ccea4c700f63afcefe0065ee7f04e43454126f27a774f0c3bbb1e6d40c695e352e404d8bbd0d37ec7f5edd8383940958f"})

02:26:36 executing program 6:
r0 = syz_open_pts(0xffffffffffffffff, 0x250100)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9ffa)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/50)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x2)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGICOUNT(r1, 0x545d, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x2, 0x40}, {0x8, 0xff}, {0x5}, {0x9, 0x7}, {0x9, 0xaf}]})
ioctl$VT_WAITACTIVE(r0, 0x5607)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
recvfrom$unix(r2, &(0x7f0000000240)=""/170, 0xaa, 0x40002100, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r4 = openat$cgroup_ro(r3, &(0x7f00000003c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
ioctl$VT_ACTIVATE(r4, 0x5606, 0x4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r5=>r2, {0x800}}, './file0\x00'})
r6 = syz_open_pts(r5, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000440)=0x10000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, <r7=>0xee00}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r6, {0x0, r7}}, './file0\x00'})
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb, 0x50, r6, 0xf405000)

02:26:36 executing program 7:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040))
fcntl$setflags(r0, 0x2, 0x0)
fcntl$setpipe(r0, 0x407, 0x4)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000080)={0x7, 0x6, 0x2, 0x2, 0x1, [{0x80000001, 0x8, 0xb5, '\x00', 0x884}]})
ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000100))
ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000140)={0x0, 0x3f})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x4, 0x81, 0x8, 0x9, 0x18, @ipv4={'\x00', '\xff\xff', @loopback}, @private0, 0x7800, 0x7, 0x725, 0x10000}})
r1 = dup3(r0, r0, 0x80000)
ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000000240)=@hsc={0x1, 0x1, "f222150724ad7f51c242"})
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x280, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xff9e}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x404}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x440d2)
r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x0, 0x200)
getsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000400), &(0x7f0000000440)=0x4)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000480)=@v2={0x2, @aes256, 0x10, '\x00', @a})
semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f00000004c0)=""/4096)
sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x4c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2804}, 0x10)
r4 = pidfd_open(0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000001600)={0x9, 0x401})
ioctl(0xffffffffffffffff, 0x2, &(0x7f0000001680)="1fbb27b36195dc725703d3a13715dcff21301e47de9bb06fd53430613364668c61e03ac95d8a7e8429441f4544666d5478a5887e5ca7f9")

[  111.934878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  111.937879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  111.940588] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  111.950706] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  111.953771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  111.957126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  111.962673] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  111.964004] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  111.985662] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.013991] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.018220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.023889] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.028267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.053542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.058996] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.064642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.068609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.070195] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.075074] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.083745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.088859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.097878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.111674] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.113543] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  112.117971] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  112.129457] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  112.130794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  112.132156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  112.140116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  112.150124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  112.153556] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  112.168006] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  112.172090] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  112.173793] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  112.191810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  112.192176] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  112.204943] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.242479] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  112.273509] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  112.279751] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  114.019053] Bluetooth: hci0: command tx timeout
[  114.083018] Bluetooth: hci1: command tx timeout
[  114.147573] Bluetooth: hci2: command tx timeout
[  114.210838] Bluetooth: hci6: command tx timeout
[  114.210894] Bluetooth: hci3: command tx timeout
[  114.276472] Bluetooth: hci4: command tx timeout
[  114.277495] Bluetooth: hci5: command tx timeout
[  114.338509] Bluetooth: hci7: command tx timeout
[  116.066491] Bluetooth: hci0: command tx timeout
[  116.131503] Bluetooth: hci1: command tx timeout
[  116.194420] Bluetooth: hci2: command tx timeout
[  116.259541] Bluetooth: hci6: command tx timeout
[  116.259570] Bluetooth: hci3: command tx timeout
[  116.322442] Bluetooth: hci4: command tx timeout
[  116.322829] Bluetooth: hci5: command tx timeout
[  116.386706] Bluetooth: hci7: command tx timeout
[  118.116622] Bluetooth: hci0: command tx timeout
[  118.179408] Bluetooth: hci1: command tx timeout
[  118.244066] Bluetooth: hci2: command tx timeout
[  118.306940] Bluetooth: hci3: command tx timeout
[  118.308137] Bluetooth: hci6: command tx timeout
[  118.370978] Bluetooth: hci4: command tx timeout
[  118.371381] Bluetooth: hci5: command tx timeout
[  118.434460] Bluetooth: hci7: command tx timeout
[  120.163465] Bluetooth: hci0: command tx timeout
[  120.228380] Bluetooth: hci1: command tx timeout
[  120.290709] Bluetooth: hci2: command tx timeout
[  120.356374] Bluetooth: hci6: command tx timeout
[  120.356400] Bluetooth: hci3: command tx timeout
[  120.418465] Bluetooth: hci4: command tx timeout
[  120.418951] Bluetooth: hci5: command tx timeout
[  120.482412] Bluetooth: hci7: command tx timeout
[  174.399824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  174.407657] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  174.409874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  174.416895] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  174.428727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  174.431176] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  174.433126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  174.437018] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  174.439143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  174.441703] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  174.447020] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  174.447151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  174.452396] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  174.482698] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  174.486416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  174.562060] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  174.566535] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  174.570598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  174.597371] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  174.601043] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  174.605977] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  174.609264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  174.617168] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  174.620855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  174.625555] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  174.689675] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  174.719057] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  174.722979] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  174.729770] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  174.733520] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  174.734938] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  174.737079] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  174.739857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  174.744743] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  174.746750] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  174.752276] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  174.772200] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  174.772979] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  174.776028] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  174.779986] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.549390] Bluetooth: hci0: command tx timeout
[  176.550135] Bluetooth: hci1: command tx timeout
[  176.550838] Bluetooth: hci2: command tx timeout
[  176.675415] Bluetooth: hci3: command tx timeout
[  176.739489] Bluetooth: hci4: command tx timeout
[  176.802490] Bluetooth: hci5: command tx timeout
[  176.866439] Bluetooth: hci6: command tx timeout
[  176.866614] Bluetooth: hci7: command tx timeout
[  178.594812] Bluetooth: hci1: command tx timeout
[  178.594870] Bluetooth: hci2: command tx timeout
[  178.595834] Bluetooth: hci0: command tx timeout
[  178.723564] Bluetooth: hci3: command tx timeout
[  178.788401] Bluetooth: hci4: command tx timeout
[  178.850439] Bluetooth: hci5: command tx timeout
[  178.914396] Bluetooth: hci6: command tx timeout
[  178.914826] Bluetooth: hci7: command tx timeout
[  180.642769] Bluetooth: hci1: command tx timeout
[  180.644124] Bluetooth: hci0: command tx timeout
[  180.645476] Bluetooth: hci2: command tx timeout
[  180.772351] Bluetooth: hci3: command tx timeout
[  180.834727] Bluetooth: hci4: command tx timeout
[  180.898527] Bluetooth: hci5: command tx timeout
[  180.964405] Bluetooth: hci7: command tx timeout
[  180.964897] Bluetooth: hci6: command tx timeout
[  182.690614] Bluetooth: hci1: command tx timeout
[  182.690775] Bluetooth: hci2: command tx timeout
[  182.691186] Bluetooth: hci0: command tx timeout
[  182.820362] Bluetooth: hci3: command tx timeout
[  182.882555] Bluetooth: hci4: command tx timeout
[  182.949624] Bluetooth: hci5: command tx timeout
[  183.011386] Bluetooth: hci6: command tx timeout
[  183.011872] Bluetooth: hci7: command tx timeout
[  237.233149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.237211] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.248776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.260064] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.265675] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  237.371817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  237.377166] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  237.379432] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  237.386265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  237.391415] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  237.583099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  237.589861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  237.592190] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  237.614874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  237.619861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  237.642419] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  237.648995] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  237.663730] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  237.671215] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  237.672886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  237.681075] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  237.683531] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  237.688915] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  237.699169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  237.703755] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  237.712387] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  237.715048] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  237.721005] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  237.726290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  237.730613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  237.771798] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  237.775001] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  237.777277] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  237.782222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  237.786280] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  237.813941] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  237.836642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  237.839898] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  237.874897] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  237.882616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  239.332164] Bluetooth: hci0: command tx timeout
[  239.459571] Bluetooth: hci1: command tx timeout
[  239.715660] Bluetooth: hci2: command tx timeout
[  239.779665] Bluetooth: hci4: command tx timeout
[  239.843364] Bluetooth: hci6: command tx timeout
[  239.907631] Bluetooth: hci5: command tx timeout
[  239.970367] Bluetooth: hci7: command tx timeout
[  240.036358] Bluetooth: hci3: command tx timeout
[  241.378420] Bluetooth: hci0: command tx timeout
[  241.506590] Bluetooth: hci1: command tx timeout
[  241.763563] Bluetooth: hci2: command tx timeout
[  241.826369] Bluetooth: hci4: command tx timeout
[  241.890562] Bluetooth: hci6: command tx timeout
[  241.954357] Bluetooth: hci5: command tx timeout
[  242.019390] Bluetooth: hci7: command tx timeout
[  242.082825] Bluetooth: hci3: command tx timeout
[  243.428089] Bluetooth: hci0: command tx timeout
[  243.556333] Bluetooth: hci1: command tx timeout
[  243.810383] Bluetooth: hci2: command tx timeout
[  243.874385] Bluetooth: hci4: command tx timeout
[  243.939366] Bluetooth: hci6: command tx timeout
[  244.003355] Bluetooth: hci5: command tx timeout
[  244.066593] Bluetooth: hci7: command tx timeout
[  244.131859] Bluetooth: hci3: command tx timeout
[  245.474371] Bluetooth: hci0: command tx timeout
[  245.603466] Bluetooth: hci1: command tx timeout
[  245.858621] Bluetooth: hci2: command tx timeout
[  245.923728] Bluetooth: hci4: command tx timeout
[  245.987643] Bluetooth: hci6: command tx timeout
[  246.050397] Bluetooth: hci5: command tx timeout
[  246.115366] Bluetooth: hci7: command tx timeout
[  246.178366] Bluetooth: hci3: command tx timeout
[  299.521370] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  299.525988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  299.529866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  299.548014] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  299.555887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  299.596183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  299.601901] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  299.604275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  299.616890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  299.623863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  299.792279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  299.797844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  299.817044] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  299.836864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  299.871452] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  299.874548] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  299.884119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  299.899867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  299.906610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  299.910069] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  299.948012] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  299.951144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  299.951787] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  299.955159] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  299.955591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  299.962650] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  299.962679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  299.970022] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  299.972357] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  299.976738] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  299.981689] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  300.023570] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  300.031715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  300.048810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  300.064743] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  300.087574] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  300.114020] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  300.119977] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  300.127101] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  300.131742] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  301.602466] Bluetooth: hci0: command tx timeout
[  301.666435] Bluetooth: hci1: command tx timeout
[  301.986406] Bluetooth: hci4: command tx timeout
[  302.050535] Bluetooth: hci2: command tx timeout
[  302.050830] Bluetooth: hci3: command tx timeout
[  302.051765] Bluetooth: hci6: command tx timeout
[  302.178409] Bluetooth: hci5: command tx timeout
[  302.244410] Bluetooth: hci7: command tx timeout
[  303.652324] Bluetooth: hci0: command tx timeout
[  303.715407] Bluetooth: hci1: command tx timeout
[  304.037578] Bluetooth: hci4: command tx timeout
[  304.098539] Bluetooth: hci3: command tx timeout
[  304.101413] Bluetooth: hci2: command tx timeout
[  304.101839] Bluetooth: hci6: command tx timeout
[  304.227594] Bluetooth: hci5: command tx timeout
[  304.291394] Bluetooth: hci7: command tx timeout
[  305.699597] Bluetooth: hci0: command tx timeout
[  305.764161] Bluetooth: hci1: command tx timeout
[  306.083471] Bluetooth: hci4: command tx timeout
[  306.149333] Bluetooth: hci6: command tx timeout
[  306.149803] Bluetooth: hci2: command tx timeout
[  306.150169] Bluetooth: hci3: command tx timeout
[  306.275397] Bluetooth: hci5: command tx timeout
[  306.339770] Bluetooth: hci7: command tx timeout
[  307.746459] Bluetooth: hci0: command tx timeout
[  307.810450] Bluetooth: hci1: command tx timeout
[  308.130487] Bluetooth: hci4: command tx timeout
[  308.194492] Bluetooth: hci3: command tx timeout
[  308.195411] Bluetooth: hci6: command tx timeout
[  308.196212] Bluetooth: hci2: command tx timeout
[  308.322588] Bluetooth: hci5: command tx timeout
[  308.386499] Bluetooth: hci7: command tx timeout
[  361.978170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  361.983583] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  361.987123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  361.994933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  361.999649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  362.048589] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  362.051990] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  362.055004] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  362.063160] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  362.066732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.264964] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  362.291662] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  362.301263] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  362.314555] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  362.318887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  362.322127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  362.325808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  362.328753] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  362.331982] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  362.334807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  362.337024] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  362.345015] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  362.350612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  362.355800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  362.370660] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  362.374845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  362.376922] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  362.378947] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  362.380936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  362.384481] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  362.387918] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  362.392969] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  362.394865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  362.403791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  362.431924] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  362.433745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  362.438991] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  362.459080] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  362.462261] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  362.493740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  364.066437] Bluetooth: hci0: command tx timeout
[  364.130526] Bluetooth: hci1: command tx timeout
[  364.451051] Bluetooth: hci7: command tx timeout
[  364.514418] Bluetooth: hci4: command tx timeout
[  364.578531] Bluetooth: hci6: command tx timeout
[  364.578625] Bluetooth: hci5: command tx timeout
[  364.579582] Bluetooth: hci2: command tx timeout
[  364.642434] Bluetooth: hci3: command tx timeout
[  366.114673] Bluetooth: hci0: command tx timeout
[  366.178531] Bluetooth: hci1: command tx timeout
[  366.499627] Bluetooth: hci7: command tx timeout
[  366.562387] Bluetooth: hci4: command tx timeout
[  366.626562] Bluetooth: hci5: command tx timeout
[  366.627080] Bluetooth: hci2: command tx timeout
[  366.627136] Bluetooth: hci6: command tx timeout
[  366.691358] Bluetooth: hci3: command tx timeout
[  368.164741] Bluetooth: hci0: command tx timeout
[  368.226588] Bluetooth: hci1: command tx timeout
[  368.547433] Bluetooth: hci7: command tx timeout
[  368.610392] Bluetooth: hci4: command tx timeout
[  368.674450] Bluetooth: hci6: command tx timeout
[  368.674945] Bluetooth: hci2: command tx timeout
[  368.675920] Bluetooth: hci5: command tx timeout
[  368.738427] Bluetooth: hci3: command tx timeout
[  370.210445] Bluetooth: hci0: command tx timeout
[  370.274394] Bluetooth: hci1: command tx timeout
[  370.595598] Bluetooth: hci7: command tx timeout
[  370.658405] Bluetooth: hci4: command tx timeout
[  370.723431] Bluetooth: hci5: command tx timeout
[  370.723876] Bluetooth: hci2: command tx timeout
[  370.724337] Bluetooth: hci6: command tx timeout
[  370.786693] Bluetooth: hci3: command tx timeout

VM DIAGNOSIS:
02:31:36  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff88802cd4f6a8 RCX=0000000000000001 RDX=0000000000000000
RSI=ffff88802cd4f688 RDI=ffff88806ce31850 RBP=ffff88802cd48000 RSP=ffff88802cd4f218
R8 =0000000000000001 R9 =ffff88802cd4f2c8 R10=000000000003b6bd R11=0000000000025b74
R12=ffff88802cd4f201 R13=ffff88802cd4f2d0 R14=ffff88802cd4f688 R15=ffff88802cd4f288
RIP=ffffffff8135483e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f147395c540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1473e36000 CR3=000000000da90000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff
XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69
XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff88803032fdd8 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff81354102 RDI=0000000000000001 RBP=ffffffff85c1d1c0 RSP=ffff88803032f760
R8 =0000000000000001 R9 =ffff88803032f858 R10=000000000003b6bd R11=000000000002199d
R12=ffffffff81354102 R13=ffff88803032f860 R14=ffff88803032fda8 R15=ffff88803032f818
RIP=ffffffff8151add8 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f81a77e74a1 CR3=0000000037f6d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff
XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000