Warning: Permanently added '[localhost]:1459' (ECDSA) to the list of known hosts.
2025/06/03 05:27:07 fuzzer started
2025/06/03 05:27:07 dialing manager at localhost:34361
syzkaller login: [   94.724180] cgroup: Unknown subsys name 'net'
[   94.848375] cgroup: Unknown subsys name 'cpuset'
[   94.893778] cgroup: Unknown subsys name 'rlimit'
2025/06/03 05:27:22 syscalls: 2214
2025/06/03 05:27:22 code coverage: enabled
2025/06/03 05:27:22 comparison tracing: enabled
2025/06/03 05:27:22 extra coverage: enabled
2025/06/03 05:27:22 setuid sandbox: enabled
2025/06/03 05:27:22 namespace sandbox: enabled
2025/06/03 05:27:22 Android sandbox: enabled
2025/06/03 05:27:22 fault injection: enabled
2025/06/03 05:27:22 leak checking: enabled
2025/06/03 05:27:22 net packet injection: enabled
2025/06/03 05:27:22 net device setup: enabled
2025/06/03 05:27:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/03 05:27:22 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/03 05:27:22 USB emulation: enabled
2025/06/03 05:27:22 hci packet injection: enabled
2025/06/03 05:27:22 wifi device emulation: enabled
2025/06/03 05:27:22 802.15.4 emulation: enabled
2025/06/03 05:27:22 fetching corpus: 0, signal 0/0 (executing program)
2025/06/03 05:27:24 starting 8 fuzzer processes
05:27:24 executing program 0:
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}})
symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00')
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e)
mknodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8000, 0x1)
fchdir(r0)
chmod(&(0x7f0000000200)='./file0\x00', 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x700, 0x1f, 0x0, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x65, 0x0, 0x56, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@end]}}}}})
r1 = accept$unix(r0, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000003c0)={'veth0_to_hsr\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4d, 0x6, 0x2, 0x1f, 0x97, 0x1, 0x6, 0x0, 0x8, 0x40, [0x5, 0x40, 0x5, 0x0, 0x8, 0x7fff, 0x0, 0x2], [0x8, 0xfffffff9]}})
unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
r2 = dup2(r0, r0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
renameat(r3, &(0x7f0000000480)='./file0\x00', r4, &(0x7f0000000500)='./file0/file0\x00')
setxattr$trusted_overlay_origin(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000580), &(0x7f00000005c0), 0x2, 0x1)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000600)=0x28, 0x4)
renameat2(r4, &(0x7f0000000640)='./file0/file0\x00', r4, &(0x7f0000000680)='./file0\x00', 0x2)
r5 = syz_open_procfs(0x0, &(0x7f0000000740)='net/anycast6\x00')
r6 = getuid()
mount$9p_fd(0x0, &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000700), 0x800, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0x1}}, {@cache_mmap}, {@privport}, {@mmap}, {@cache_none}, {@posixacl}, {@fscache}, {@mmap}, {@dfltuid}], [{@fowner_gt={'fowner>', r6}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfsdef}, {@appraise}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@appraise_type}]}})

05:27:24 executing program 1:
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1520000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x3, 0x7, 0x0, {0x8, 0xde0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x400, 0x1, 0x1}}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}]]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c805}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x802, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x1c}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x38}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x779}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3ff}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x800}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x8000)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x10, 0x70bd25, 0x6, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555f}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20004841)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000080}, 0x24050080)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0xc}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3b}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x10, 0x0, 0x3, 0x0, {0x8000, 0x28, 0x0, 0x6}, 0x400, 0x1, 0x4}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x43}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x48000}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x9d}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r2, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x57}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x214}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
r3 = openat$cgroup_ro(r1, &(0x7f0000000800)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1)
sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x62}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x8042}, 0x20000004)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000009c0)={{0x1, 0x1, 0x18, <r5=>r1, {0x0, 0xffffffffffffffff}}, './file0\x00'})
sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)={0x1c4, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x27, 0x45, "67e36013578449476f0c38a701bdcb32d1ee9593d53980fbdfd1e55198a4bc32959050"}, @NL80211_ATTR_TESTDATA={0x35, 0x45, "e45dfc82c657e9ecefc40ead9276ed20ca2200282caa0b3e843fcb683fd822ddcebca39bd46c88f913fa706753cc206357"}, @NL80211_ATTR_TESTDATA={0xea, 0x45, "78b499a53236832327ce67a0129e47daae4d580cd9099e64e83f51fedb003c2b86a54e00221fb2bcf374f6c28eaaa21d1a96462ccc43ceed7d2a164b3b1e45ee1936e52eb8ef90a2898b0dbee2d1898a4fb0dae1ad1e183ea4fb39d9488e41473790c4fbaa74904090e221cb6750a1825de5d757742ed9a72ccac550779cda6301caa797efd7543eed1956257c6e6617b4a0373c94f472a0322ab10610c1998e25b238c7e5c620050add9ae2dc68deda8e57fefc6cbabd107b56580a434cfdd6d17ffe59e7f9759211d46fb7b7763889628a8e2472ee47f7d7933d504038ec1ce93034b625a3"}, @NL80211_ATTR_TESTDATA={0x61, 0x45, "c518ff8112b770d8a4cc7684cc7737f10e50a963133fca7c0216360ef4eed3c720c31e21c6cc64194c11cf6970148c5265e6985debd5b7ed3f7758b5be1b4c80fff0a8a844c5505caeaa59d87eb0f92876364830799dac22b885aac754"}]}, 0x1c4}}, 0x44141)
ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000cc0))
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x130, r6, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x21}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xb7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3ff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe1}]}, 0x130}, 0x1, 0x0, 0x0, 0x40014}, 0x20000000)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, r4, 0x702, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x14a000, 0x77}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x4000000)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0xac, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x37eea92d}]}]}, 0xac}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000001200)={0x5, 0x39, &(0x7f00000011c0)="866622fb16f2e6edddf7ca128f806a64ba2399f79d9fcb17dc3c6821997b53ada6923cc173743c5e70b8972ce7cf79809b2018a188525c7559"})

05:27:24 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x400, 0x3ff, 0xffff, 0x80000000, 0x800, 0x3, 0x6}, 0x1c)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0x7ff, 0x101, 0x171, 0x6})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0x0, {0x29, 0x5, 0x0, 0x0, 0x7}})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000180)={0x1})
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\'+\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc014}, 0x4000000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x1})
ioctl$SG_IO(r1, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffd, 0x78, 0x0, @buffer={0x0, 0x4e, &(0x7f0000000700)=""/78}, &(0x7f0000000780)="e0fd345cb1bed667716f562a66fe2c8cc3f64745b365d9ff61c5805d9e42bbdd999b9d121257b8d5d56dd3ad261692ab03d01e2834b3c8c9b73b77e3a15e200e559b4469f474489df81a69497ad9766971a0099b62f6e3a719712df996fec383fece300a20aba4962eb5d5f871f2f99ffdde98e4c80aaa7f", &(0x7f0000000800)=""/72, 0xe965, 0x32, 0xffffffffffffffff, &(0x7f0000000880)})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000940)={0x1, 'veth1_virt_wifi\x00', {}, 0x1d})
r3 = request_key(&(0x7f0000000980)='blacklist\x00', &(0x7f00000009c0)={'syz', 0x0}, &(0x7f0000000a00)='\x00', 0xfffffffffffffffc)
keyctl$read(0xb, r3, &(0x7f0000000a40)=""/222, 0xde)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000b40), 0x1, 0x0)
fallocate(r4, 0x10, 0x0, 0x884)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000b80)={'raw\x00', 0x0, [0x6, 0x7, 0x6, 0x3]}, &(0x7f0000000c00)=0x54)
fchmod(0xffffffffffffffff, 0x100)

05:27:24 executing program 3:
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x64, 0x4)
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x3, 0x1, 0x6, 0x5, 0x3})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@initdev, <r0=>0x0}, &(0x7f00000000c0)=0x14)
ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x1}}, './file0\x00'})
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000180)=""/105, &(0x7f0000000200)=0x69)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000240)={0x4, 0x5, 0x2, 0x0, 0x3, [0xd0f, 0x4, 0x100, 0x2]})
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x10882, 0x0)
fcntl$setlease(r2, 0x400, 0x2)
getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
r3 = memfd_secret(0x0)
ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000340)=""/69)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={0x0, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @private=0xa010102}, @xdp={0x2c, 0x8, r0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)='sit0\x00', 0x1, 0x40, 0x2})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000480)={0x6, 0x1, 0x40, 0x90}, 0xc)
accept$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000540)={'TPROXY\x00'}, &(0x7f0000000580)=0x1e)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x21}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008044}, 0x4000004)
sendmsg$nl_netfilter(r1, &(0x7f0000003600)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000035c0)={&(0x7f0000003300)={0x2b0, 0xd, 0xa, 0x101, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0xa}, [@typed={0xc, 0x5d, 0x0, 0x0, @u64=0xdfd7}, @typed={0x8, 0x8d, 0x0, 0x0, @pid}, @generic="d44330bd03cb3d90b90b65461b43d3a8d9ee7fccf6220e00792090470b13104d64c9df8b0a459105db239753f1fa9520abf43433f11709", @nested={0x8, 0x17, 0x0, 0x1, [@typed={0x4, 0x74}]}, @generic="1b7a6c92003d0c6139a0b4bf6612b70809ae621fac", @nested={0x193, 0x30, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @uid}, @generic="ccc95920b2159737c3aa1b4356bdc627310b4c2aa5517cb581a5643e7d240d57982aa240c29c2af1f52a21611af9bf90ffcec25383f33c1a579c8c3b081d5cb56a29dfe6a40e97bc5b8e403d51d9c3519a54a5fb29ec236046b351bf6088bc3854012c6487abd2d43f1ffe84f40e95cb0392e7d7eae07a7926e2c2adebdd8ce9f7ae51d69ba8a20780c1d54a94736d92e829d64c23", @typed={0x14, 0x46, 0x0, 0x0, @ipv6=@local}, @generic="331a50de6e8de7cf85a1c8b65d755fe808740b5a363bd8df6a6a50bda200efe14942cfab8dadf2aa89897c755af4cfe81f6f4eb178fd8163b055d363a88d8b8d02146b7109975b9c14270d6ba5057e0bb9e8ee5308fc735d085157fd26ae7e5739b41d76cbce9dc4a6e16df8c9382a19656e792dc27ca68401a7b170be65f88f6244d2197d5a99294b20f9d875bdffca5e4c8286528ec9980b7339fe95a7bbf0c7d73027f9dc9f08bb3fdc7d0a1a", @typed={0xa, 0x29, 0x0, 0x0, @str='+-${*\x00'}, @typed={0x8, 0x83, 0x0, 0x0, @pid}, @typed={0xc, 0x7e, 0x0, 0x0, @u64=0x164}, @typed={0x8, 0x1, 0x0, 0x0, @uid}, @typed={0x8, 0x38, 0x0, 0x0, @uid=0xee01}]}, @typed={0x9, 0x7c, 0x0, 0x0, @str='sit0\x00'}, @generic="b197b7becb42b5f94031aaecc062bdce90a5a73bcaf70aaafe33d9c6cc883e01c006dd3b296f223ab9316558275a098382abc8ddd95509768439cc85c979bfa975c4736e5d1d1d296086f717337f7ab1a584a9882adadb628fff5f4d01978298364db0227188d47d7070ef5f60a52dbfc241e4", @generic="ecf5e690fce3ce4bee0a846eb99a3df3bd09a36a5a350711c3c4f278bda7d8fc92"]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4044005}, 0x100)

[  110.559712] audit: type=1400 audit(1748928444.068:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:27:24 executing program 4:
r0 = socket$unix(0x1, 0x7, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x3, 0x5, [{0xa6ea, 0x7, 0x2, '\x00', 0x202}, {0x8000, 0x1, 0x8c40, '\x00', 0xc}, {0x7fff, 0xfffffffffffffc01, 0x7, '\x00', 0x2486}, {0x0, 0x8, 0x7, '\x00', 0x3004}, {0x0, 0x6624, 0x770}]})
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x7, 0x4)
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x1, 0x4)
r1 = accept4(r0, &(0x7f00000001c0)=@tipc, &(0x7f0000000240)=0x80, 0x180800)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000280)=0x636, 0x4)
r2 = signalfd(r0, &(0x7f00000002c0)={[0x7f]}, 0x8)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r3, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xffffffff}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}]}, 0x68}, 0x1, 0x0, 0x0, 0x40014}, 0x800)
getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000480)=""/15, &(0x7f00000004c0)=0xf)
pipe(&(0x7f0000000500)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
read$rfkill(r2, &(0x7f0000000940), 0x8)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000980)={r6, 0x8, 0x6})
io_cancel(0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x1, 0x7f80, r1, &(0x7f0000000d80)="9f6ba1b089973e3a75049c3b29c9ec06903195dae0d102091122cd769f0b1071a9e6eb18ef3e2790c41720f9bb1ca98e595e890ebea428ac32f9e82f96139c320b94b7b697fd7fc73fffc75ced9fc238a0c250a7f4d2960a9b863e853e8f764d5df48d37ee062e81ec107427882f454444867b7dee4fb36e8e5ccf3682c22feaecfa55728af489ed5f432edb599f027ccfd905ce77a24ca5e9e4b7d631fd7260995876d2845aac4fbd098cea6a1e", 0xae, 0xfffffffffffffff9, 0x0, 0x3, r4}, &(0x7f0000000e80))
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = accept(r7, 0x0, &(0x7f0000000ec0))
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0x400c6615, &(0x7f0000000f00)={0x0, @aes128})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000f40)={{0x1, 0x1, 0x18, <r9=>r8, {0x5}}, './file0\x00'})
ioctl$BLKBSZGET(r9, 0x80081270, &(0x7f0000000f80))

05:27:24 executing program 5:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2d}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004004}, 0x40000)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x40400a1)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x41)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x8]}, 0x8, 0x800)
sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x100}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x20040044)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000814}, 0x4041)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r5)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000)
clock_gettime(0x6, &(0x7f00000007c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r7=>r4, {0x0, 0xee01}}, './file0\x00'})
setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000840)='wg1\x00', 0x4)
r8 = openat$cgroup_ro(r7, &(0x7f0000000880)='cgroup.stat\x00', 0x0, 0x0)
ioctl$IOC_PR_CLEAR(r8, 0x401070cd, &(0x7f00000008c0))
sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x80)
sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000)

05:27:24 executing program 6:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x0, 0x9}}, './file0\x00'})
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2)
r2 = dup(r1)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0xee00}}, './file0\x00'})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000140)={0x101, 0x0, &(0x7f0000000100)=[r0, r0, r3, r1, r0]}, 0x5)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='blkio.bfq.group_wait_time\x00')
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r4=>r0, {0xf, 0xffffffff}}, './file0\x00'})
r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x101)
r6 = fcntl$dupfd(r5, 0x406, r0)
r7 = signalfd(r6, &(0x7f0000000200)={[0x80]}, 0x8)
ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x4)
syz_open_dev$vcsn(&(0x7f0000000240), 0x5, 0x400400)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000280)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7)
sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x168, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x55}}}}, [@NL80211_ATTR_TESTDATA={0xd6, 0x45, "e650af9302f214d12c61b12edcffd439bedf14f3244a1d5877b5c14694ee36c56b96bc9059c1d654cb1d29cf8683b50d93a0ec6031d9edbd8a5fd26f713a17cde8ba7686238299bf8594a1dd9b3d642611b32a0d747e675e99790de72f83d97e7eff937da7e167f4abbed581816ae34f661a0c772ff0c81e83ee45cced85838bf7cd57887e01116ff8768f8530c236579bb56210ca071f6447dc494b1383d409a3df6345b667b433f44104092fe45c5eeee6c914a4bf886e89990479635e02b8c6518ec8f5e9d7647e839f30a324f4e5a728"}, @NL80211_ATTR_TESTDATA={0x6f, 0x45, "1138599058cc9675afbb3499a60a3649c622d08f38c2d67ac74629f4b389b775363dd14090e4d3ef6113e677a32e4850eac415b7656ab7c98ef3570e8d7038ee27e70d0b17c3cce1c9316fd75e6a766a776f395fe3373f69c33b294b82961fdd64c477ae43db94b0401017"}]}, 0x168}, 0x1, 0x0, 0x0, 0x20008000}, 0x20048840)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffffd}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x230}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x810)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/185, 0xb9, 0x1, &(0x7f0000000740)=""/116, 0x74}, &(0x7f0000000800)=0x40)
ioctl$TCSETA(r6, 0x5406, &(0x7f0000000840)={0x1000, 0x9, 0xfe01, 0x0, 0xc, "4a897ebc792fc0eb"})
fcntl$lock(r3, 0x25, &(0x7f0000000880)={0x2, 0x0, 0x8, 0x110a, 0xffffffffffffffff})

05:27:24 executing program 7:
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x800, 0x70bd28, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8010}, 0x400)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1101)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x840}, 0x20000040)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/tty/ldiscs\x00', 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008050}, 0x48000)
ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000440)=""/40)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendmsg$nl_netfilter(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x8, 0x5, 0x3, 0x70bd28, 0x25dfdbfb, {0x5, 0x0, 0x6}, [@typed={0x8, 0x5d, 0x0, 0x0, @fd=r3}, @generic="ed312b0dd75bedc8d7b6c9ea0d0a4d5ff13881c5c097204821a85e19643a5844cb7be1de", @typed={0x14, 0x3f, 0x0, 0x0, @str='veth1_to_batadv\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4080)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000640)={@desc={0x1, 0x0, @desc2}})
r4 = creat(&(0x7f00000006c0)='./file1\x00', 0x8)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xc0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)
sendmsg$nl_generic(r0, &(0x7f0000000a00)={&(0x7f0000000840), 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x128, 0x20, 0x1, 0x70bd27, 0x25dfdbfe, {0x1d}, [@typed={0x8, 0x4c, 0x0, 0x0, @fd=r4}, @typed={0x14, 0x49, 0x0, 0x0, @ipv6=@local}, @generic="32b59454ecbe7d165e96aa7699fbe3c873a7ea2a715533a4b81e60044fac9e519214ee25a40898dd9d480db01542f1b5da4753216744f16a6fcb8afeb28bb7fbd62660ccd03db03fb7dee19a0cf0b8561872533cb9b1c9278d2ec3373daa92846e32e82c5745c8399ccd585544426c54cf9790ee25ea7f9d77555f9ea8fc36be556186c7ce131d738c536436beb65aeb5e42784e633c428b7fb680d4b9a1cd1c36642046610b400eb3a037e6bbd5c4a76a0ecd9db5a03c249665cbb54e5e1e1f823df1a6e3a55eeddfd1bdeb220039ee6fa1224195ae691bee86a8b4dbc817e889b6891b986d0dd3fecf484384385da12ece47ffa0fd87"]}, 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x20009044)
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000000a40)={0x3, 0x8, 0x3f, 0xc0, 0x4, 0x7f})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000015c0)={{0x1, 0x1, 0x18, <r5=>r3, @in_args={0x2}}, './file1\x00'})
copy_file_range(r5, &(0x7f0000001600)=0x9f, r0, &(0x7f0000001640)=0x6, 0x400, 0x0)
fsync(r0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x44091)

[  112.052470] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.059593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.062702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.072674] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.078476] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.101277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.104625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.107305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.114559] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.134317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.139322] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.164339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.166461] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.171383] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.177356] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.190339] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.202682] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.208490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.221155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.229121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  112.233373] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  112.236275] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  112.237924] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.241325] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.249426] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  112.250822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  112.252786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  112.254146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.271803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.280623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  112.282290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  112.286714] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  112.305922] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  112.307405] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  112.309113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  112.311602] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  112.336414] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.340488] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  112.374071] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  112.381479] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  114.175233] Bluetooth: hci0: command tx timeout
[  114.237690] Bluetooth: hci1: command tx timeout
[  114.302885] Bluetooth: hci2: command tx timeout
[  114.364916] Bluetooth: hci4: command tx timeout
[  114.365955] Bluetooth: hci3: command tx timeout
[  114.429930] Bluetooth: hci6: command tx timeout
[  114.492951] Bluetooth: hci5: command tx timeout
[  114.493061] Bluetooth: hci7: command tx timeout
[  116.220985] Bluetooth: hci0: command tx timeout
[  116.285872] Bluetooth: hci1: command tx timeout
[  116.350149] Bluetooth: hci2: command tx timeout
[  116.412967] Bluetooth: hci3: command tx timeout
[  116.413042] Bluetooth: hci4: command tx timeout
[  116.477927] Bluetooth: hci6: command tx timeout
[  116.541073] Bluetooth: hci7: command tx timeout
[  116.541953] Bluetooth: hci5: command tx timeout
[  118.268928] Bluetooth: hci0: command tx timeout
[  118.333172] Bluetooth: hci1: command tx timeout
[  118.396995] Bluetooth: hci2: command tx timeout
[  118.462891] Bluetooth: hci3: command tx timeout
[  118.462945] Bluetooth: hci4: command tx timeout
[  118.526065] Bluetooth: hci6: command tx timeout
[  118.591121] Bluetooth: hci5: command tx timeout
[  118.591144] Bluetooth: hci7: command tx timeout
[  120.318187] Bluetooth: hci0: command tx timeout
[  120.381908] Bluetooth: hci1: command tx timeout
[  120.445996] Bluetooth: hci2: command tx timeout
[  120.508916] Bluetooth: hci3: command tx timeout
[  120.508956] Bluetooth: hci4: command tx timeout
[  120.572929] Bluetooth: hci6: command tx timeout
[  120.637258] Bluetooth: hci5: command tx timeout
[  120.638198] Bluetooth: hci7: command tx timeout
[  172.590040] syz-executor.1 (283) used greatest stack depth: 24576 bytes left
[  174.995940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  174.998666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.000359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.008255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.012314] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.047942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.055009] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.058228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.065879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  175.072578] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.072721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  175.076483] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  175.077754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  175.084271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  175.089326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  175.149671] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  175.154243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  175.158748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  175.173778] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  175.175041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  175.187646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  175.191003] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  175.196625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  175.199125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  175.202897] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  175.206277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  175.213182] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  175.219571] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  175.223333] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  175.224128] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  175.226635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  175.236979] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  175.238184] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  175.243256] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  175.245009] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  175.257188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  175.258996] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  175.266253] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  175.317815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  175.322503] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  177.085476] Bluetooth: hci0: command tx timeout
[  177.149341] Bluetooth: hci2: command tx timeout
[  177.149369] Bluetooth: hci1: command tx timeout
[  177.276958] Bluetooth: hci3: command tx timeout
[  177.340988] Bluetooth: hci4: command tx timeout
[  177.404946] Bluetooth: hci7: command tx timeout
[  177.405560] Bluetooth: hci6: command tx timeout
[  177.406208] Bluetooth: hci5: command tx timeout
[  179.133262] Bluetooth: hci0: command tx timeout
[  179.197091] Bluetooth: hci1: command tx timeout
[  179.197621] Bluetooth: hci2: command tx timeout
[  179.325001] Bluetooth: hci3: command tx timeout
[  179.388961] Bluetooth: hci4: command tx timeout
[  179.453212] Bluetooth: hci5: command tx timeout
[  179.453258] Bluetooth: hci6: command tx timeout
[  179.453656] Bluetooth: hci7: command tx timeout
[  181.182084] Bluetooth: hci0: command tx timeout
[  181.245067] Bluetooth: hci2: command tx timeout
[  181.245545] Bluetooth: hci1: command tx timeout
[  181.372945] Bluetooth: hci3: command tx timeout
[  181.437063] Bluetooth: hci4: command tx timeout
[  181.500945] Bluetooth: hci7: command tx timeout
[  181.501451] Bluetooth: hci6: command tx timeout
[  181.502599] Bluetooth: hci5: command tx timeout
[  183.229269] Bluetooth: hci0: command tx timeout
[  183.293056] Bluetooth: hci1: command tx timeout
[  183.293094] Bluetooth: hci2: command tx timeout
[  183.423080] Bluetooth: hci3: command tx timeout
[  183.486789] Bluetooth: hci4: command tx timeout
[  183.549993] Bluetooth: hci5: command tx timeout
[  183.550037] Bluetooth: hci6: command tx timeout
[  183.550565] Bluetooth: hci7: command tx timeout
[  237.650489] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.655551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.658985] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.664542] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.668747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  237.868408] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  237.883593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  237.885901] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  237.907377] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  237.912385] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  238.040093] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  238.045742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  238.050489] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  238.053583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  238.056185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  238.065259] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  238.065808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  238.076108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  238.089947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  238.097407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.125385] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  238.145100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  238.162116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  238.166041] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  238.170609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  238.176296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  238.183396] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  238.195324] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  238.203313] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  238.208990] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  238.265056] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  238.280768] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  238.314528] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  238.369651] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  238.370245] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  238.384549] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  238.397413] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  238.412442] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  238.465783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  238.507494] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  239.740924] Bluetooth: hci0: command tx timeout
[  239.997141] Bluetooth: hci1: command tx timeout
[  240.189118] Bluetooth: hci2: command tx timeout
[  240.189960] Bluetooth: hci3: command tx timeout
[  240.316952] Bluetooth: hci5: command tx timeout
[  240.318130] Bluetooth: hci4: command tx timeout
[  240.509070] Bluetooth: hci6: command tx timeout
[  240.638912] Bluetooth: hci7: command tx timeout
[  241.789015] Bluetooth: hci0: command tx timeout
[  242.046126] Bluetooth: hci1: command tx timeout
[  242.238118] Bluetooth: hci3: command tx timeout
[  242.238339] Bluetooth: hci2: command tx timeout
[  242.366093] Bluetooth: hci4: command tx timeout
[  242.366138] Bluetooth: hci5: command tx timeout
[  242.556937] Bluetooth: hci6: command tx timeout
[  242.685172] Bluetooth: hci7: command tx timeout
[  243.836959] Bluetooth: hci0: command tx timeout
[  244.092983] Bluetooth: hci1: command tx timeout
[  244.285583] Bluetooth: hci3: command tx timeout
[  244.285912] Bluetooth: hci2: command tx timeout
[  244.412988] Bluetooth: hci4: command tx timeout
[  244.413494] Bluetooth: hci5: command tx timeout
[  244.605260] Bluetooth: hci6: command tx timeout
[  244.734215] Bluetooth: hci7: command tx timeout
[  245.884998] Bluetooth: hci0: command tx timeout
[  246.142744] Bluetooth: hci1: command tx timeout
[  246.332979] Bluetooth: hci3: command tx timeout
[  246.333272] Bluetooth: hci2: command tx timeout
[  246.461431] Bluetooth: hci5: command tx timeout
[  246.462393] Bluetooth: hci4: command tx timeout
[  246.653045] Bluetooth: hci6: command tx timeout
[  246.781188] Bluetooth: hci7: command tx timeout
[  300.265219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  300.265230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  300.272544] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  300.273219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  300.276264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  300.282214] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  300.285519] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  300.300143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  300.316215] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  300.320655] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  300.389736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  300.400409] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  300.403167] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  300.419387] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  300.425474] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  300.508086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  300.561546] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  300.564369] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  300.584002] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  300.599494] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  300.607748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  300.620358] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  300.647695] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  300.650607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  300.663492] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  300.687102] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  300.694458] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  300.701360] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  300.706765] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  300.708618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  300.714087] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  300.721116] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  300.725966] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  300.729096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  300.758397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  300.760178] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  300.760787] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  300.807591] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  300.817781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  300.829329] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  302.460919] Bluetooth: hci1: command tx timeout
[  302.461545] Bluetooth: hci0: command tx timeout
[  302.525147] Bluetooth: hci2: command tx timeout
[  302.781338] Bluetooth: hci3: command tx timeout
[  302.844916] Bluetooth: hci4: command tx timeout
[  302.908932] Bluetooth: hci6: command tx timeout
[  302.909194] Bluetooth: hci5: command tx timeout
[  302.978646] Bluetooth: hci7: command tx timeout
[  304.510097] Bluetooth: hci1: command tx timeout
[  304.510186] Bluetooth: hci0: command tx timeout
[  304.573133] Bluetooth: hci2: command tx timeout
[  304.829274] Bluetooth: hci3: command tx timeout
[  304.893028] Bluetooth: hci4: command tx timeout
[  304.957163] Bluetooth: hci6: command tx timeout
[  304.958900] Bluetooth: hci5: command tx timeout
[  305.022184] Bluetooth: hci7: command tx timeout
[  306.556973] Bluetooth: hci1: command tx timeout
[  306.557008] Bluetooth: hci0: command tx timeout
[  306.621398] Bluetooth: hci2: command tx timeout
[  306.877217] Bluetooth: hci3: command tx timeout
[  306.940961] Bluetooth: hci4: command tx timeout
[  307.005224] Bluetooth: hci5: command tx timeout
[  307.005273] Bluetooth: hci6: command tx timeout
[  307.069587] Bluetooth: hci7: command tx timeout
[  308.606157] Bluetooth: hci1: command tx timeout
[  308.606290] Bluetooth: hci0: command tx timeout
[  308.669928] Bluetooth: hci2: command tx timeout
[  308.925121] Bluetooth: hci3: command tx timeout
[  308.990385] Bluetooth: hci4: command tx timeout
[  309.053059] Bluetooth: hci6: command tx timeout
[  309.054232] Bluetooth: hci5: command tx timeout
[  309.116927] Bluetooth: hci7: command tx timeout
[  362.786548] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  362.795478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  362.798767] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  362.813136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  362.820446] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  362.883038] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  362.888758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  362.893582] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  362.898470] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  362.904628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  362.911744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  362.918300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  362.928636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  362.941118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.948607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  362.957207] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  362.966411] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  362.981420] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  362.990023] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  363.003621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  363.013753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  363.017555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  363.032394] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  363.041508] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  363.050086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  363.160005] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.179191] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.188724] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  363.213566] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  363.253598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.272165] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  363.306369] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  363.309200] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  363.354992] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  363.367959] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  363.412800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  363.421771] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  363.429400] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  363.493947] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  363.502397] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  364.861499] Bluetooth: hci0: command tx timeout
[  365.117340] Bluetooth: hci1: command tx timeout
[  365.118044] Bluetooth: hci2: command tx timeout
[  365.183006] Bluetooth: hci4: command tx timeout
[  365.245185] Bluetooth: hci3: command tx timeout
[  365.309969] Bluetooth: hci5: command tx timeout
[  365.501063] Bluetooth: hci7: command tx timeout
[  365.566150] Bluetooth: hci6: command tx timeout
[  366.911197] Bluetooth: hci0: command tx timeout
[  367.164911] Bluetooth: hci1: command tx timeout
[  367.166205] Bluetooth: hci2: command tx timeout
[  367.230195] Bluetooth: hci4: command tx timeout
[  367.295139] Bluetooth: hci3: command tx timeout
[  367.357045] Bluetooth: hci5: command tx timeout
[  367.549191] Bluetooth: hci7: command tx timeout
[  367.612870] Bluetooth: hci6: command tx timeout
[  368.957285] Bluetooth: hci0: command tx timeout
[  369.213114] Bluetooth: hci2: command tx timeout
[  369.213609] Bluetooth: hci1: command tx timeout
[  369.278084] Bluetooth: hci4: command tx timeout
[  369.342851] Bluetooth: hci3: command tx timeout
[  369.404985] Bluetooth: hci5: command tx timeout
[  369.596951] Bluetooth: hci7: command tx timeout
[  369.660987] Bluetooth: hci6: command tx timeout
[  371.006300] Bluetooth: hci0: command tx timeout
[  371.261867] Bluetooth: hci1: command tx timeout
[  371.261898] Bluetooth: hci2: command tx timeout
[  371.326053] Bluetooth: hci4: command tx timeout
[  371.389066] Bluetooth: hci3: command tx timeout
[  371.454060] Bluetooth: hci5: command tx timeout
[  371.646144] Bluetooth: hci7: command tx timeout
[  371.710873] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
05:32:26  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff88802b557c40 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff85c1d1c0 RDI=ffff88802e6dc180 RBP=ffff88800c1d4000 RSP=ffff88802b557ad0
R8 =0000000000000001 R9 =fffff94000039720 R10=0000000000000000 R11=0000000000000001
R12=ffffea00001cb900 R13=ffff88802e6dc158 R14=00000000ffffffff R15=ffff88802e6dc180
RIP=ffffffff84b4097a RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f2612955540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f26129fb570 CR3=0000000037b69000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00712d3d534e4f4954504f5f45424f52
XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88806cf08ff8 RCX=ffff88806cf089cc RDX=0000000000000002
RSI=ffffffff85c1d1c0 RDI=ffff888016e12628 RBP=ffff88806cf01000 RSP=ffff88806cf08a00
R8 =ffffffff867cc9d8 R9 =ffff88806cf08ab8 R10=000000000003b6bd R11=00000000000086ac
R12=ffff88806cf08a01 R13=ffff88806cf08ac0 R14=ffff88806cf08ff8 R15=ffff88806cf08a78
RIP=ffffffff815bafa0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005635ba6de9a0 CR3=000000002ee8a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000000000000000ff0000000000ff
XMM02=000000ff000000ff000000ff000000ff XMM03=ff00000000000000ff0000000000ff00
XMM04=000000000000000000ff000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000