Warning: Permanently added '[localhost]:58717' (ECDSA) to the list of known hosts.
2025/06/02 23:40:34 fuzzer started
2025/06/02 23:40:35 dialing manager at localhost:34361
syzkaller login: [   92.963160] cgroup: Unknown subsys name 'net'
[   93.112002] cgroup: Unknown subsys name 'cpuset'
[   93.158350] cgroup: Unknown subsys name 'rlimit'
2025/06/02 23:40:51 syscalls: 201
2025/06/02 23:40:51 code coverage: enabled
2025/06/02 23:40:51 comparison tracing: enabled
2025/06/02 23:40:51 extra coverage: enabled
2025/06/02 23:40:51 setuid sandbox: enabled
2025/06/02 23:40:51 namespace sandbox: enabled
2025/06/02 23:40:51 Android sandbox: enabled
2025/06/02 23:40:51 fault injection: enabled
2025/06/02 23:40:51 leak checking: enabled
2025/06/02 23:40:51 net packet injection: enabled
2025/06/02 23:40:51 net device setup: enabled
2025/06/02 23:40:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/02 23:40:51 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/02 23:40:51 USB emulation: enabled
2025/06/02 23:40:51 hci packet injection: enabled
2025/06/02 23:40:51 wifi device emulation: enabled
2025/06/02 23:40:51 802.15.4 emulation: enabled
2025/06/02 23:40:51 fetching corpus: 0, signal 0/0 (executing program)
2025/06/02 23:40:53 starting 8 fuzzer processes
23:40:53 executing program 0:
r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x40, 0x20, 0x9, 0x4, 0x0, 0x7, 0x10800, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9ed, 0x8}, 0x40000, 0x0, 0x80000000, 0x0, 0x1000, 0x9, 0x7f, 0x0, 0x40, 0x0, 0x1c0000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00')
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x400, 0x10000}}, './file0\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1)
socketpair(0x10, 0x6, 0x1f, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0xc0, 0x0)
socketpair(0x25, 0x1, 0x80000001, &(0x7f00000008c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r2}, {0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x30040880}, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0xba)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, <r6=>r3, {0x6, 0x1}}, './file0\x00'})
sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x80)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r8, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x667d9458b9f63e46, 0x11, 0xffffffffffffffff, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d40)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000000)
ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x10, 0x3fb, 0x200, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44084}, 0x40008)

23:40:53 executing program 2:
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), 0xffffffffffffffff)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000000c0)='NET_DM\x00', &(0x7f0000000100))
prctl$PR_SET_TIMERSLACK(0x1d, 0x1)
r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$search(0xa, r1, &(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x3}, r2)
keyctl$get_keyring_id(0x0, 0x0, 0x7fff)
times(&(0x7f00000002c0))
r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$unlink(0x9, r3, r1)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2a}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040004}, 0x8000)
r4 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, r3)
keyctl$search(0xa, r0, &(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={'syz', 0x3}, r4)
r5 = socket$inet6(0xa, 0x5, 0x9)
setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000580)={0x674e}, 0x4)
keyctl$negate(0xd, r3, 0x1c1b, r0)
r6 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, r3)
keyctl$search(0xa, r6, &(0x7f0000000640)='.dead\x00', &(0x7f0000000680)={'syz', 0x3}, r0)
keyctl$KEYCTL_MOVE(0x1e, r3, r6, r0, 0x0)

[  110.806566] audit: type=1400 audit(1748907653.355:7): avc:  denied  { execmem } for  pid=276 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:40:53 executing program 1:
r0 = socket$inet6(0xa, 0x6, 0x9)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x6, 0xff}}, './file0\x00'})
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)={0x454, 0x3f4, 0x100, 0x70bd28, 0x25dfdbfb, {0x2, 0x0, 0x2e, [0x2000, 0x4, 0x7, 0x4b, 0x0, 0x251, 0x81, 0x64, 0x200, 0x401, 0x4, 0x9, 0x7, 0x9, 0x7de, 0x5, 0x1, 0x3ff, 0x1f, 0x6, 0x8, 0x6, 0x1b5d5b5b, 0x7fffffff, 0xffffffff, 0xd6, 0x3ff, 0x4, 0xffffff00, 0x7, 0x3f000000, 0x7, 0x4, 0xffff05de, 0x5a, 0x3, 0xe84, 0x5, 0x7fff, 0x2, 0xa8e4, 0x101, 0x378, 0x40008, 0x4, 0x1, 0x4c40, 0x2, 0x8000, 0x4, 0x2, 0x2000, 0x9, 0x81, 0x8, 0x27f2, 0x4, 0xd2, 0x6, 0xfc30, 0x8, 0x6, 0xffffff9c, 0x7], [0x6, 0xff, 0x7ff, 0x1000000, 0x4, 0x8, 0x7f, 0x4, 0x1, 0x80000001, 0x3, 0x2, 0x3, 0x72, 0x7ff, 0x4, 0x8, 0x0, 0xfffffffe, 0x3, 0xffffbbc5, 0xd, 0x0, 0x3ff, 0x6, 0xffffffff, 0x1, 0x7, 0x6, 0x5, 0x8, 0x4, 0x0, 0x9, 0x52, 0x0, 0x7, 0x1ff, 0x8, 0x6, 0x1f, 0x6190, 0x3, 0x18b7, 0xc2ee, 0x2, 0x100, 0xb0, 0x5, 0x5b3, 0x96, 0x20, 0x19, 0x1, 0x0, 0x7, 0x8, 0xb3, 0x40, 0x8, 0x6, 0x332, 0x6], [0x915, 0x3e18d392, 0x2, 0x800, 0x0, 0x8001, 0x7ff, 0x81, 0xffffff80, 0x80000000, 0x81, 0x9, 0x0, 0x1000, 0x9, 0x56ed, 0xff, 0x2c6b, 0x4, 0xdf36, 0x5, 0x9, 0x5, 0x81, 0x0, 0x8001, 0x400, 0x8, 0x1, 0x3, 0x0, 0xffffff26, 0x5, 0x3, 0xfffffff9, 0x1f, 0x200, 0xc0c8, 0x3, 0xe7, 0xb53, 0x1, 0x5, 0x0, 0x7, 0x7fff, 0x9, 0x1, 0x65b3, 0x7ff, 0x4, 0x7b3, 0x8, 0x5, 0x2, 0x3, 0x6, 0x40, 0x7f, 0x10001, 0x5, 0x8, 0xffffffff, 0x10], [0x6, 0x9, 0x9, 0x0, 0x7, 0x91c0, 0x5, 0xe137, 0x3, 0x10000, 0x100, 0x200, 0x6, 0x1, 0x3b1, 0x1, 0x1, 0x7f, 0x6, 0xffffffb9, 0x0, 0xff, 0x9, 0x3f, 0x8, 0x9, 0x9, 0x10000, 0x8001, 0x80000000, 0x4, 0x7, 0x80000001, 0x8, 0x3, 0x8, 0x7, 0xff, 0x7, 0x2, 0x1, 0x9, 0xfffffffe, 0x101, 0x2, 0x56, 0x6, 0x10000, 0x0, 0x9, 0x40, 0x0, 0xe0bb, 0x280, 0xff, 0x8, 0x4, 0x5, 0x1, 0x81, 0x1, 0x3ff, 0xfffffffd, 0x7], 0x32, ['\x00', '+(\x00', '*\x99*-+#\x00', '!%-*@.\x00', ',\'},+-):)\x00', '\x00', '$/\\]%-+\'\'*(.\x00', ':\x00', '&!{@$\x00']}, [""]}, 0x454}, 0x1, 0x0, 0x0, 0x8854}, 0x8000)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008804}, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7)
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x101}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000044}, 0x60000050)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000c80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000800)={0x438, 0x3f3, 0x8, 0x70bd28, 0x25dfdbfd, {0x4, 0x1, 0x3, [0x9, 0x5, 0x400, 0x10000, 0x3838, 0x1f, 0x7fffffff, 0xffff7fff, 0x8, 0x8, 0x8406, 0x1, 0x8001, 0x800, 0x4, 0x80, 0x2, 0x8, 0x9, 0x1, 0x2ac3, 0x3f, 0x80, 0x7fff, 0x6, 0x2, 0x8130, 0x1, 0x7fff, 0x8, 0x2, 0xa2e, 0x3, 0x9, 0x5, 0x4, 0x9, 0x9, 0x1, 0x8, 0x10001, 0x1ff, 0x400, 0x3, 0x2, 0x3, 0x7, 0x7, 0x6, 0x9, 0xbcbb, 0x7, 0x7, 0x9, 0x392, 0x54, 0x20, 0x414381bc, 0x3, 0xca, 0x1, 0x40, 0xffb8, 0xffffff01], [0x800, 0x10000, 0xaa, 0xfb1a, 0x7, 0x800, 0x10001, 0x3, 0x978d, 0x8, 0x8, 0x9, 0x1000, 0x101, 0x4, 0x4, 0xfffffeff, 0x6, 0x6, 0x4d, 0x5, 0x9, 0xfd, 0x7, 0x3, 0x401, 0x100, 0x7fff, 0x8, 0x4, 0x0, 0x2, 0x4, 0x8c0, 0x80000001, 0xff, 0x401, 0x3, 0xf7, 0xffff, 0x0, 0x800, 0x40, 0x0, 0xb6, 0x4000, 0x4, 0x2, 0x7f, 0xffffffff, 0x4, 0x0, 0x0, 0xc2, 0x5f, 0xbc, 0x5, 0x7, 0x2, 0x8, 0x4, 0x10001, 0x5, 0x200], [0x5, 0xffffb57a, 0x9, 0x2, 0x6, 0x0, 0x8, 0x40, 0x3, 0x5, 0x3, 0xffff, 0x7fffffff, 0xf22a, 0x5, 0x400, 0x3ff, 0xfffffffe, 0x1, 0x100, 0x8, 0x4, 0x4, 0x7, 0xfffffff7, 0x3f, 0x7fffffff, 0x81, 0x9a, 0x9, 0x4, 0x966, 0x20000, 0x3f, 0x5, 0xffffffff, 0xffffffe0, 0x3, 0x272, 0x6, 0x5, 0x5, 0xff, 0x6, 0x3, 0x0, 0x58, 0x1, 0x3ff, 0x8, 0x2, 0x2000000, 0xe092, 0xb43, 0x1ff, 0x80, 0x7ff, 0x9761, 0x8, 0x6, 0x101, 0x6, 0xffff, 0x2], [0xa92, 0x895, 0x1, 0x9, 0x2, 0x6, 0x0, 0x3, 0x4, 0x7, 0x5, 0x1, 0x20, 0x8000, 0x87f6, 0x2, 0xcc, 0x8, 0x504, 0x101, 0x1ff, 0x8000, 0x0, 0x470, 0xdb, 0x4, 0x0, 0x7, 0x6, 0x200000, 0x3, 0x5, 0x7fff, 0x8870, 0x8, 0x2, 0x0, 0x7f, 0x80000001, 0x3, 0x800, 0xc9b, 0xf008, 0x4, 0x3, 0x7, 0x9, 0x499, 0x101, 0x4d03, 0x0, 0x0, 0x8, 0x1f, 0x264b7b82, 0x8, 0x2, 0x3, 0x3, 0x80, 0x6, 0xfffffeff, 0x0, 0x10001], 0x16, [',\'},+-):)\x00', '$@\x00', '&&-}:\\*{\x00']}, ["", "", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x20000810}, 0x40000)
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffb}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x10)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1c1}, 0x1)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000001000)={0x14, &(0x7f0000000ec0)={0x40, 0xb, 0xd0, {0xd0, 0x10, "69c14b9d83d97513347eb61c4e4bc0c733eb94f0190d695423b554d0f1ba7fc5c65d82612144c2ff4a5edc14c4b451aa9a84bbf93bc5f948e7ed8b3e313dfe7a2837bceeed1bead4baeedf1aa1ba956ff18190e3d29c3dd37653d8bf638487bf6c7551b2e6ba34b893c9ee22793158f8a8b7519e506a8680acbc9a21560fcb51d316f9be622f87706fddaf2d849e3e8e0b270b490653d2f79f853a135c0fdb13a3ba786aba83f7cb40d9a41ed04b9ac26fcf7a80444cbb3baf396c49e2086f4415b2ca0aaf1eb333c8ed4a8c6ef2"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001140)={0x1c, &(0x7f0000001040)={0x20, 0xf, 0x61, "e968b746e8606cd8489c79c35671b0d7bb37c5cff25df25b1b7a23783486f9094bfc9afdbcc32bf96f9dcf1c662445c02f51de39b125f4834fe4d9271175f395304848e7611339e72436fccf83f5d51d88f1af0f7acc6c387c3543fc23e2e967af"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0x7}})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002300), 0x20000, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), r1)
ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000023c0)={0x0, @xdp={0x2c, 0x2, <r4=>0x0, 0x3e}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3}, @ax25={0x3, @bcast, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x3, 0x92a})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002580)={'ip_vti0\x00', &(0x7f0000002500)={'ip_vti0\x00', <r5=>0x0, 0x8000, 0x7, 0xdd, 0x0, {{0xe, 0x4, 0x3, 0x6, 0x38, 0x66, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, {[@cipso={0x86, 0x24, 0x0, [{0x6, 0x10, "734c689acee5cf306ba0145b4adf"}, {0x2, 0xe, "90faa098821098290176c7c3"}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000002700)={'batadv0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002740)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000002900)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002780)={0x124, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4000000)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002940), 0x2000, 0x0)
sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4010)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

23:40:53 executing program 3:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r0=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000400)={"b16f22c4415ede81910ba06ded5b08e6", r0, r1, {0x3, 0x6}, {0x6, 0x7}, 0x4, [0x705d, 0x4, 0xff, 0x80, 0x80, 0x8001, 0x8a1, 0x94, 0x1, 0x7, 0x6, 0x80, 0x2, 0x5, 0x5, 0x7]})
epoll_create(0x7)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x60e202, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x48000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000006c0)={0x3, 0x1, 0x0, 'queue1\x00', 0x59e})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4895}, 0x80)
epoll_create1(0x80000)
syz_genetlink_get_family_id$wireguard(&(0x7f00000008c0), r2)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x100010, r2, 0x8000000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x810)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, r3, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x4400)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x80, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x4040090)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), r2)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e40), r2)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r6, 0x20c, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0xc885)

23:40:53 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x5, 0xffffff2d}}, './file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x4, 0x4, 0xfff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname(r1, &(0x7f0000000100)=@caif=@dbg, &(0x7f0000000180)=0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r3, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044)
r4 = timerfd_create(0x9, 0x80800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000340))
ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000540)="81e1767377f843720a2083df924e69c29e227c646e4944c996027a50e39ff100dc6a843e39bf8a4b2e88d8a5ccdf473be8f554f7d8de995d4469ce35cf5416c419edd0307e4ee0132c847e1b584be1ab0d60f597e98dbafedd0ba7ffe5b9d80b750a26e415a8954ee187e535e7c34d5f4568c5cf7dded43fd1c54eba9b63c7f06704c5234b093b025b9993eb4bc4ea6c26469dc1bd8c03aa26dc72a6a30f3888219582dce7c2bb08bb5a1fe2691ecba17eebf7f0ca9b3ab62d59d14d93bbdf0d4bb4b66f6ec1957d73c0a2b33c223225e63ef120d6e87c4e3eb2b1a1c714cd23")
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}}, 0x4000)
times(&(0x7f0000000780))
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'syztnl0\x00', <r6=>r5, 0x2f, 0xc0, 0x7, 0x8, 0x22, @private2, @mcast1, 0x8, 0x40, 0x2, 0x4}})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x929}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8416}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x4000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x94)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x309, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc966}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, &(0x7f0000000d80))

23:40:53 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, r0, &(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x3}, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9)
r2 = request_key(&(0x7f0000000180)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='\x00', r0)
keyctl$KEYCTL_MOVE(0x1e, r2, r0, r0, 0x1)
keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000240)='\x00', &(0x7f0000000280))
r3 = request_key(&(0x7f00000002c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='\x00', r0)
keyctl$unlink(0x9, r2, r3)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000380)={0x0, 0x7, 0x0, 'queue0\x00', 0x6})
keyctl$search(0xa, r1, &(0x7f0000000440)='trusted\x00', &(0x7f0000000480)={'syz', 0x1}, r0)
r4 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000540))
keyctl$link(0x8, r2, r3)
keyctl$KEYCTL_MOVE(0x1e, r3, r1, r4, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, r6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000680)={0x6, 0x7, 0x1, 'queue0\x00', 0x200})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000a40)={"894643dc0f0aad9f53e6c7844a4f5151", r7, 0x0, {0xe, 0x4800}, {0x2, 0x2}, 0x220a, [0x9, 0x5, 0x5, 0x3, 0xffffffff, 0x6, 0x7f, 0xa735, 0x2d, 0x100, 0x2, 0x7ff, 0x2, 0x4872bb8e, 0xaf, 0x5]})

23:40:53 executing program 6:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x183080, 0x0, 0xc}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345}, 0xfff)
getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@isdn, &(0x7f0000000140)=0x80)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000180)={'gre0\x00', <r0=>0x0, 0x8000, 0x8, 0x8, 0x1, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x64, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback}}}})
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x1}}}, @nfc={0x27, 0x1, 0x1, 0x4}, @xdp={0x2c, 0x4, <r1=>r0, 0x8}, 0xff, 0x0, 0x0, 0x0, 0x6f55, &(0x7f0000000200)='macvlan1\x00', 0xffffffffffffffe0, 0x200, 0xf4})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', <r3=>r1, 0x29, 0x8, 0x40, 0x38000, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, @local, 0x7, 0x80, 0xfffffe83, 0x20}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r3, 0x2f, 0x57, 0x7, 0x20, 0x71, @remote, @mcast2, 0x8, 0x10, 0x87, 0x10001}})
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x82, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl2\x00', <r6=>r3, 0x29, 0xcd, 0x81, 0x6, 0x34e0c9251a931dd5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x20, 0x20, 0x2, 0x7ff}})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, r5, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0xc880)
getsockname(r2, &(0x7f0000000700)=@nfc, &(0x7f0000000780)=0x80)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xd0)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x64002, 0x0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r7)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r9, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x8c0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0)

23:40:53 executing program 7:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x159000, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x614402, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)={<r2=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000280)={0x101, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}], 0x1, "57b1813ea450a5"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001280)={0x80000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r4=>0x0}], 0x3, "5127ebe6be92ea"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002280)={<r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002480)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}], 0x5, "ab98f30ec22ad4"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000003480)={0x1ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}], 0x20, "cd7fd96c958734"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000004480)={0x1ba6c90e, [{}, {}, {}, {<r8=>0x0}], 0x9, "982740e3cb8b10"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000005480)={0x0, ""/256, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000005680)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r10=>0x0}], 0xe0, "80d8f5c2f2dd36"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000006680)={0x0, ""/256, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000006880)={0x3f1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r12=>0x0}], 0xf9, "80f003c64958ad"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000007880)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000007a80)={0x0, ""/256, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007c80)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}], 0x7f, "e7bad7d534db23"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000008c80)={0x0, ""/256, 0x0, <r16=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000008e80)={0xfffffffffffffff8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r17=>0x0}], 0x5, "fd9d433cfcfd07"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000009e80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r18=>0x0}], 0xfc, "b64293f93efb28"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000064480)={0x4, [{r2}, {}, {r3}, {0x0, r4}, {}, {}, {r5}, {r6}, {}, {}, {}, {}, {0x0, r7}, {}, {r8, r9}, {0x0, r10}, {}, {r11}, {r12}, {0x0, r13}, {}, {}, {}, {}, {r14, r15}, {0x0, r16}, {r17, r18}], 0x40, "dfa83963e6941b"})

[  112.172731] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.176926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.184904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.190946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.200009] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.255507] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.269040] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.275733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.300078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.309142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.373454] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.385532] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.403205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.405380] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.408355] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.421040] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.434897] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.436982] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.440161] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  112.443220] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  112.461185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.467230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.474077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.481580] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.483194] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  112.485150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.493907] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  112.498792] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  112.516393] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  112.529058] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.562139] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  112.563789] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  112.600931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  112.602429] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  112.617407] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  112.652701] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  112.659084] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  112.671006] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  112.691127] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  112.732928] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  114.252292] Bluetooth: hci0: command tx timeout
[  114.381661] Bluetooth: hci1: command tx timeout
[  114.572789] Bluetooth: hci2: command tx timeout
[  114.573365] Bluetooth: hci3: command tx timeout
[  114.635726] Bluetooth: hci5: command tx timeout
[  114.700940] Bluetooth: hci4: command tx timeout
[  114.701502] Bluetooth: hci6: command tx timeout
[  114.827726] Bluetooth: hci7: command tx timeout
[  116.301064] Bluetooth: hci0: command tx timeout
[  116.427881] Bluetooth: hci1: command tx timeout
[  116.619803] Bluetooth: hci3: command tx timeout
[  116.620277] Bluetooth: hci2: command tx timeout
[  116.683827] Bluetooth: hci5: command tx timeout
[  116.748207] Bluetooth: hci6: command tx timeout
[  116.748675] Bluetooth: hci4: command tx timeout
[  116.875972] Bluetooth: hci7: command tx timeout
[  118.348690] Bluetooth: hci0: command tx timeout
[  118.475852] Bluetooth: hci1: command tx timeout
[  118.667718] Bluetooth: hci3: command tx timeout
[  118.668190] Bluetooth: hci2: command tx timeout
[  118.731726] Bluetooth: hci5: command tx timeout
[  118.795723] Bluetooth: hci4: command tx timeout
[  118.796165] Bluetooth: hci6: command tx timeout
[  118.923694] Bluetooth: hci7: command tx timeout
[  120.396930] Bluetooth: hci0: command tx timeout
[  120.524715] Bluetooth: hci1: command tx timeout
[  120.715742] Bluetooth: hci2: command tx timeout
[  120.716233] Bluetooth: hci3: command tx timeout
[  120.780969] Bluetooth: hci5: command tx timeout
[  120.843721] Bluetooth: hci6: command tx timeout
[  120.844202] Bluetooth: hci4: command tx timeout
[  120.971697] Bluetooth: hci7: command tx timeout
[  172.474067] syz-executor.4 (288) used greatest stack depth: 24912 bytes left
[  175.403955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  175.409070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.414520] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.423299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.426513] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.491317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.504059] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  175.512761] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  175.515594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  175.520151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  175.523728] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.526406] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.528127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  175.531952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.533390] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  175.537113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  175.545097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  175.551295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  175.558359] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  175.564197] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  175.566137] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  175.569456] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  175.570879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  175.585225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  175.592545] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  175.598083] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  175.618449] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  175.636357] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  175.638355] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  175.646440] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  175.685154] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  175.688463] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  175.691860] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  175.700593] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  175.717680] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  175.918759] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  175.922507] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  175.927115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  175.936567] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  175.940430] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  177.484047] Bluetooth: hci0: command tx timeout
[  177.612021] Bluetooth: hci3: command tx timeout
[  177.612290] Bluetooth: hci1: command tx timeout
[  177.676898] Bluetooth: hci2: command tx timeout
[  177.742665] Bluetooth: hci5: command tx timeout
[  177.803696] Bluetooth: hci4: command tx timeout
[  177.996842] Bluetooth: hci7: command tx timeout
[  178.059727] Bluetooth: hci6: command tx timeout
[  179.532711] Bluetooth: hci0: command tx timeout
[  179.659839] Bluetooth: hci3: command tx timeout
[  179.660302] Bluetooth: hci1: command tx timeout
[  179.724646] Bluetooth: hci2: command tx timeout
[  179.787909] Bluetooth: hci5: command tx timeout
[  179.851695] Bluetooth: hci4: command tx timeout
[  180.044348] Bluetooth: hci7: command tx timeout
[  180.107706] Bluetooth: hci6: command tx timeout
[  181.580797] Bluetooth: hci0: command tx timeout
[  181.708707] Bluetooth: hci1: command tx timeout
[  181.708735] Bluetooth: hci3: command tx timeout
[  181.773646] Bluetooth: hci2: command tx timeout
[  181.835694] Bluetooth: hci5: command tx timeout
[  181.899684] Bluetooth: hci4: command tx timeout
[  182.091698] Bluetooth: hci7: command tx timeout
[  182.155745] Bluetooth: hci6: command tx timeout
[  183.628062] Bluetooth: hci0: command tx timeout
[  183.757692] Bluetooth: hci1: command tx timeout
[  183.757727] Bluetooth: hci3: command tx timeout
[  183.820853] Bluetooth: hci2: command tx timeout
[  183.885817] Bluetooth: hci5: command tx timeout
[  183.948831] Bluetooth: hci4: command tx timeout
[  184.139806] Bluetooth: hci7: command tx timeout
[  184.204737] Bluetooth: hci6: command tx timeout
[  237.784323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.788310] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.793287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.804311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.814078] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  237.847254] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  237.854704] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  237.856999] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  237.864102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  237.871030] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  237.926305] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  237.947056] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  237.951443] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  237.982351] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  237.983281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  237.985133] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  237.991023] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  237.992495] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.022426] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  238.036257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  238.069413] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  238.110516] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  238.137204] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  238.153095] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  238.175742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  238.186167] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  238.209448] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  238.219527] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  238.224418] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  238.224475] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  238.235309] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  238.236468] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  238.244448] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  238.283316] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  238.287138] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  238.301007] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  238.314886] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  238.320386] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  238.326033] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  238.361427] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  239.884524] Bluetooth: hci0: command tx timeout
[  239.947966] Bluetooth: hci1: command tx timeout
[  240.076310] Bluetooth: hci2: command tx timeout
[  240.140800] Bluetooth: hci3: command tx timeout
[  240.203885] Bluetooth: hci4: command tx timeout
[  240.331745] Bluetooth: hci5: command tx timeout
[  240.396668] Bluetooth: hci6: command tx timeout
[  240.459896] Bluetooth: hci7: command tx timeout
[  241.931704] Bluetooth: hci0: command tx timeout
[  241.997678] Bluetooth: hci1: command tx timeout
[  242.125396] Bluetooth: hci2: command tx timeout
[  242.187930] Bluetooth: hci3: command tx timeout
[  242.252776] Bluetooth: hci4: command tx timeout
[  242.379758] Bluetooth: hci5: command tx timeout
[  242.445021] Bluetooth: hci6: command tx timeout
[  242.508338] Bluetooth: hci7: command tx timeout
[  243.980718] Bluetooth: hci0: command tx timeout
[  244.045005] Bluetooth: hci1: command tx timeout
[  244.172643] Bluetooth: hci2: command tx timeout
[  244.237126] Bluetooth: hci3: command tx timeout
[  244.299683] Bluetooth: hci4: command tx timeout
[  244.429969] Bluetooth: hci5: command tx timeout
[  244.492657] Bluetooth: hci6: command tx timeout
[  244.555794] Bluetooth: hci7: command tx timeout
[  246.027719] Bluetooth: hci0: command tx timeout
[  246.092933] Bluetooth: hci1: command tx timeout
[  246.221834] Bluetooth: hci2: command tx timeout
[  246.284709] Bluetooth: hci3: command tx timeout
[  246.347954] Bluetooth: hci4: command tx timeout
[  246.478139] Bluetooth: hci5: command tx timeout
[  246.540688] Bluetooth: hci6: command tx timeout
[  246.605072] Bluetooth: hci7: command tx timeout
[  300.138266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  300.160047] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  300.164568] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  300.178062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  300.183914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  300.377079] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  300.382902] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  300.387229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  300.399046] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  300.411490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  300.422744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  300.429965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  300.437729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  300.454831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  300.463357] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  300.509874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  300.513369] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  300.525219] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  300.536852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  300.600000] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  300.604364] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  300.606171] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  300.608020] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  300.611033] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  300.617464] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  300.625834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  300.644206] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  300.649167] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  300.651321] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  300.660938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  300.678255] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  300.681923] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  300.682843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  300.703196] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  300.718461] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  300.738191] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  300.743106] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  300.746997] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  300.753384] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  300.758227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  302.220707] Bluetooth: hci0: command tx timeout
[  302.475701] Bluetooth: hci1: command tx timeout
[  302.539983] Bluetooth: hci2: command tx timeout
[  302.731717] Bluetooth: hci5: command tx timeout
[  302.732729] Bluetooth: hci3: command tx timeout
[  302.796179] Bluetooth: hci4: command tx timeout
[  302.797060] Bluetooth: hci6: command tx timeout
[  302.987939] Bluetooth: hci7: command tx timeout
[  304.267729] Bluetooth: hci0: command tx timeout
[  304.524731] Bluetooth: hci1: command tx timeout
[  304.588718] Bluetooth: hci2: command tx timeout
[  304.779783] Bluetooth: hci3: command tx timeout
[  304.780287] Bluetooth: hci5: command tx timeout
[  304.845703] Bluetooth: hci6: command tx timeout
[  304.846167] Bluetooth: hci4: command tx timeout
[  305.035692] Bluetooth: hci7: command tx timeout
[  306.315682] Bluetooth: hci0: command tx timeout
[  306.571841] Bluetooth: hci1: command tx timeout
[  306.636308] Bluetooth: hci2: command tx timeout
[  306.827892] Bluetooth: hci5: command tx timeout
[  306.828393] Bluetooth: hci3: command tx timeout
[  306.891735] Bluetooth: hci6: command tx timeout
[  306.892212] Bluetooth: hci4: command tx timeout
[  307.083693] Bluetooth: hci7: command tx timeout
[  308.363844] Bluetooth: hci0: command tx timeout
[  308.620671] Bluetooth: hci1: command tx timeout
[  308.683724] Bluetooth: hci2: command tx timeout
[  308.875876] Bluetooth: hci3: command tx timeout
[  308.876375] Bluetooth: hci5: command tx timeout
[  308.939779] Bluetooth: hci4: command tx timeout
[  308.940321] Bluetooth: hci6: command tx timeout
[  309.132652] Bluetooth: hci7: command tx timeout
[  360.467768] syz-executor.6 (8106) used greatest stack depth: 24544 bytes left
[  362.600329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  362.603560] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  362.608431] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  362.615286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  362.624157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  362.672225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  362.676381] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  362.680493] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  362.689347] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  362.692933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.868068] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  362.876164] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  362.886278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  362.913289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  362.931065] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  362.933428] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  362.941340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  362.952306] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  362.961168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  362.982891] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  363.038952] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  363.046973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  363.056865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  363.070297] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  363.072576] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  363.076377] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  363.086296] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.095466] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  363.098891] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  363.102860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.113339] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  363.115339] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  363.127730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  363.134495] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.164322] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  363.333389] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  363.339357] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  363.362017] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  363.387569] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  363.413950] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  364.683991] Bluetooth: hci0: command tx timeout
[  364.747704] Bluetooth: hci1: command tx timeout
[  365.004233] Bluetooth: hci2: command tx timeout
[  365.195739] Bluetooth: hci5: command tx timeout
[  365.259715] Bluetooth: hci6: command tx timeout
[  365.259780] Bluetooth: hci4: command tx timeout
[  365.323750] Bluetooth: hci3: command tx timeout
[  365.517757] Bluetooth: hci7: command tx timeout
[  366.731912] Bluetooth: hci0: command tx timeout
[  366.795878] Bluetooth: hci1: command tx timeout
[  367.051802] Bluetooth: hci2: command tx timeout
[  367.245825] Bluetooth: hci5: command tx timeout
[  367.307917] Bluetooth: hci6: command tx timeout
[  367.309647] Bluetooth: hci4: command tx timeout
[  367.371703] Bluetooth: hci3: command tx timeout
[  367.563926] Bluetooth: hci7: command tx timeout
[  368.779951] Bluetooth: hci0: command tx timeout
[  368.844651] Bluetooth: hci1: command tx timeout
[  369.099788] Bluetooth: hci2: command tx timeout
[  369.292706] Bluetooth: hci5: command tx timeout
[  369.355776] Bluetooth: hci4: command tx timeout
[  369.356245] Bluetooth: hci6: command tx timeout
[  369.419910] Bluetooth: hci3: command tx timeout
[  369.611734] Bluetooth: hci7: command tx timeout
[  370.827706] Bluetooth: hci0: command tx timeout
[  370.891803] Bluetooth: hci1: command tx timeout
[  371.147927] Bluetooth: hci2: command tx timeout
[  371.339950] Bluetooth: hci5: command tx timeout
[  371.403951] Bluetooth: hci6: command tx timeout
[  371.404451] Bluetooth: hci4: command tx timeout
[  371.467704] Bluetooth: hci3: command tx timeout
[  371.659936] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
23:46:03  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88806ce08dc8 RCX=ffffffff8687618c RDX=0000000000000000
RSI=ffffffff81354102 RDI=ffffffff85c1d1c0 RBP=ffffffff85c1d1c0 RSP=ffff88806ce089b0
R8 =ffffffff86876190 R9 =ffff88806ce08ab8 R10=000000000003b6bd R11=0000000000024aa4
R12=ffffffff81354102 R13=ffff88806ce08ac0 R14=ffff88806ce08dc8 R15=ffff88806ce08a78
RIP=ffffffff815ab9e5 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f4bbcd77540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f148c74c4a1 CR3=000000002d4fc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000
XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff88801619ff48 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88801619ff01
RSI=ffff88801619ff00 RDI=ffff88801619ff00 RBP=ffff88801619f240 RSP=ffff88801619f178
R8 =0000000000000001 R9 =ffff88801619f228 R10=000000000003b6bd R11=00000000000037c3
R12=ffff88801619f248 R13=ffff88801619f230 R14=ffff88801619ff00 R15=ffff88801619f1e8
RIP=ffffffff81355498 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f95fd71c008 CR3=0000000029175000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000