Warning: Permanently added '[localhost]:13235' (ECDSA) to the list of known hosts.
2025/06/06 04:17:05 fuzzer started
2025/06/06 04:17:05 dialing manager at localhost:39689
syzkaller login: [  105.969792] cgroup: Unknown subsys name 'net'
[  106.128976] cgroup: Unknown subsys name 'cpuset'
[  106.179836] cgroup: Unknown subsys name 'rlimit'
2025/06/06 04:17:27 syscalls: 204
2025/06/06 04:17:27 code coverage: enabled
2025/06/06 04:17:27 comparison tracing: enabled
2025/06/06 04:17:27 extra coverage: enabled
2025/06/06 04:17:27 setuid sandbox: enabled
2025/06/06 04:17:27 namespace sandbox: enabled
2025/06/06 04:17:27 Android sandbox: enabled
2025/06/06 04:17:27 fault injection: enabled
2025/06/06 04:17:27 leak checking: enabled
2025/06/06 04:17:27 net packet injection: enabled
2025/06/06 04:17:27 net device setup: enabled
2025/06/06 04:17:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/06 04:17:27 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/06 04:17:27 USB emulation: enabled
2025/06/06 04:17:27 hci packet injection: enabled
2025/06/06 04:17:27 wifi device emulation: enabled
2025/06/06 04:17:27 802.15.4 emulation: enabled
2025/06/06 04:17:27 fetching corpus: 0, signal 0/0 (executing program)
2025/06/06 04:17:29 starting 8 fuzzer processes
04:17:29 executing program 0:
ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0)
ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x0, 0x1, 0x4, 0x2}, 0x401, 0xffffffff})
readahead(0xffffffffffffffff, 0x9, 0xc92)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xa17}}, './file0\x00'})
fcntl$setown(r1, 0x8, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)=""/160)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x100}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x3, 0x1, 0x6b8e, 0x7dd5941995e148b4, 0x101}})
r3 = memfd_secret(0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, 0x0, 0x7, 0x101, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x826f}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x200000002000000}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000095}, 0x4000040)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f00000003c0))
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x80, 0x3, 0x400})
readahead(r4, 0x9, 0x2)
waitid(0x1, 0x0, &(0x7f0000000500), 0x8, &(0x7f0000000580))
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x0)

04:17:29 executing program 1:
r0 = socket$inet6(0xa, 0xa, 0x6)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x7, 0x4e20, 0x0, 0x2, 0x80, 0x40, 0xc, 0x0, 0xffffffffffffffff}, {0xffff, 0x3, 0xe4f, 0x5, 0x0, 0x5, 0x8, 0x100000001}, {0x3, 0x200, 0x100000000, 0xfff}, 0xfffffffb, 0x6e6bbd, 0x0, 0x0, 0x2, 0x3}, {{@in=@empty, 0x4d3, 0x3c}, 0x8, @in6=@loopback, 0x3506, 0x4, 0x0, 0x4, 0x1, 0x5, 0xc60}}, 0xe8)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x2, 0x2, 0x9, 0x6184, 0xfff9}, &(0x7f0000000140)=0x20)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0xb619, {{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x1, 0x5, [{{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x10000}}, {{0xa, 0x4e20, 0x1, @empty, 0x5}}, {{0xa, 0x4e22, 0x1, @remote, 0x8}}, {{0xa, 0x4e24, 0x8, @local, 0x6}}, {{0xa, 0x4e20, 0x8001, @remote, 0x40}}]}, 0x310)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = accept$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000500)=0x1c)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev={0xac, 0x14, 0x14, 0x1f}, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x4e24, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x80, 0x0, 0x0, 0xee00}, {0x3, 0x6, 0x7, 0x3d, 0x6, 0x4, 0x1f, 0x70e}, {0x101, 0xbb, 0x4, 0x3}, 0x2, 0x6e6bb0, 0x1, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d2, 0x32}, 0x2, @in=@multicast1, 0x0, 0x3, 0x2, 0xef, 0x7ff, 0x0, 0x2}}, 0xe8)
r3 = socket$inet6(0xa, 0x3, 0x9)
bind$inet6(r3, &(0x7f0000000640)={0xa, 0x4e20, 0x1c7, @mcast2, 0x80}, 0x1c)
ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r4)
fcntl$setflags(r1, 0x2, 0x9ea84be4510b474)
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$getown(r5, 0x9)
r6 = accept4$inet6(r3, 0x0, &(0x7f00000007c0), 0x81000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001a00)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$inet6(r6, &(0x7f0000001b00)={&(0x7f0000000800)={0xa, 0x4e24, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000840)="98767e1d33b5fbbe15c8b81ffc4cfa85e23eacec4edb8826d677e3dfdcbeed9964cde086e372927bcc7a758fa89f88a0d95186d6d7c5a6f57868d290a23f714497db0006ec8084b0086a815f6a5d77f6ed55eccfe6c2b6b667ff0a05f2995a89fda113df326a55e2ce35047d9f433513a917a2e46c68f58cc3d580cf788a59f233ca36da00ca9a4bed83fa642c54aee4bfa93a32c35176a69c01bef29311674358f900cf6a0074c5cae4c2846d87613f7e662d", 0xb3}, {&(0x7f0000000900)="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", 0x1000}], 0x2, &(0x7f0000001a40)=[@rthdr={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x2, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00']}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7ff}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r7}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0xb8}, 0x4040000)
bind$inet6(0xffffffffffffffff, &(0x7f0000001bc0)={0xa, 0x4e23, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)

[  129.261099] audit: type=1400 audit(1749183449.329:7): avc:  denied  { execmem } for  pid=285 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
04:17:29 executing program 2:
r0 = socket$inet6(0xa, 0x800, 0x7ff)
r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c)
r2 = getpgid(0x0)
waitid(0x2, r2, &(0x7f0000000080), 0x8, &(0x7f0000000100))
ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000200)={0x6000000000000000, 0x10, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0]})
sched_getaffinity(r2, 0x8, &(0x7f0000000240))
r3 = socket$inet6(0xa, 0x2, 0xfffff777)
fcntl$setown(r3, 0x8, r2)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000880), 0x1, &(0x7f0000000900))
r4 = getpgid(0x0)
r5 = syz_open_procfs$namespace(r2, &(0x7f00000009c0)='ns/user\x00')
r6 = memfd_secret(0x80000)
ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000000a00)={{0x2, 0x100, 0x8, 0x74bbf604, 0x3, 0x9071}, 0x95, [0x3, 0x4, 0x3, 0x8, 0xcab2, 0x3, 0x8f, 0x279, 0x5, 0x360a, 0x2, 0x200, 0x37, 0x7fff, 0x7, 0xe2e2, 0x3, 0x8, 0x3, 0x6, 0x401, 0x7, 0x1000, 0x8, 0x0, 0x2, 0x12000, 0x7fffffff, 0x0, 0x5, 0x3, 0x2, 0x5, 0x7, 0xfff, 0x5, 0x3, 0x9, 0xf8cc, 0xeb, 0x9, 0x9, 0x1, 0xffff, 0xffffff8f, 0x400, 0x8f8, 0x8ba7, 0xffffb4c4, 0x3a, 0xffffff80, 0x6, 0xc0, 0x830, 0x110b, 0x59f0cab3, 0x3, 0x8000, 0x80000001, 0x1ff, 0x3ff, 0x10001, 0x9, 0x9, 0x6, 0x80000001, 0xee06, 0x0, 0x1, 0x413c, 0x1, 0x7, 0x6, 0x1, 0x2, 0x3, 0x7, 0x4, 0x1, 0x7fffffff, 0x7f, 0x8, 0xffff28d2, 0xd4, 0xedd, 0x8000, 0x9, 0xff, 0x3ff, 0x101, 0x3f, 0x55, 0x2, 0x401, 0x40, 0x80, 0x80000000, 0x2, 0x1000, 0x2, 0x81, 0x4, 0x8001, 0x401, 0x7fffffff, 0x9, 0x401, 0x7f, 0x1f, 0x81, 0x1000, 0xffff, 0x1000, 0x3, 0x2, 0x9eb9, 0x1ff, 0xfff, 0x6, 0x20, 0x6, 0xd326, 0x3f, 0x3f, 0x2, 0xff, 0x101, 0x7, 0x1, 0x0, 0xffff, 0x8, 0x0, 0x1, 0x0, 0x7, 0x0, 0x401, 0x100, 0x8, 0x39, 0x7ff, 0x3f, 0x0, 0x4, 0x4f, 0x6, 0x4000, 0xffffade0, 0x5, 0x7, 0xc, 0x8, 0x60, 0x7ff, 0x5, 0x9, 0xffff0001, 0x534f, 0x1f, 0x8, 0x6, 0x4, 0x0, 0x37, 0x57ed2030, 0x8, 0x430000, 0x8, 0x3, 0x2, 0x1, 0x2, 0x33, 0x9, 0x80, 0x8, 0x3, 0xa82e, 0x91a, 0x3, 0x3, 0x4, 0x8000, 0x0, 0x20, 0xfaf, 0xb1c1, 0x1, 0x8, 0x0, 0xbc4, 0x3, 0x7fff, 0x2, 0x8000, 0x8000, 0x6a773aad, 0x0, 0xd7f, 0xfe, 0x1, 0x6, 0x2, 0xfffffff7, 0x4, 0x9, 0x7ff, 0xb, 0x8001, 0x3, 0xffff, 0x0, 0x100, 0x30ed483e, 0x6, 0xfc000000, 0x7ff, 0x3f, 0x8001, 0x7, 0x0, 0x1, 0x0, 0x81, 0x3, 0xff, 0x40, 0x0, 0x0, 0xffff, 0x4, 0x1f, 0x3b6c, 0xfc21, 0x1f, 0x9aac, 0xfffffffa, 0x8, 0x4, 0x200, 0x60, 0x7fff, 0x6, 0x80, 0x2, 0x8, 0x4, 0x0, 0x7, 0x3, 0xe1b7, 0x8, 0x5, 0x100, 0x4, 0x9, 0x2, 0x10000, 0x3ff, 0x1000, 0xb9f5, 0x10000, 0xfff, 0x1f, 0x3, 0x80000001, 0x2, 0x9, 0x3df7, 0x21a, 0x3, 0x8000, 0x9, 0x800, 0x5, 0xff5, 0x6, 0x0, 0x6, 0xff, 0x8, 0x8d, 0x8, 0x6, 0x1, 0x8, 0x7, 0xd1f0, 0xffffffff, 0xca6, 0x1000, 0x3be3, 0x80, 0xffff, 0x6, 0x519e, 0x38, 0x2, 0x7, 0x100, 0x62, 0x5, 0x3, 0x8001, 0x10000, 0x8001, 0x9, 0x1ff, 0x9, 0x2, 0x1, 0x100, 0x4, 0x1, 0x7, 0x4, 0x2, 0x0, 0x2, 0x0, 0xfffffffc, 0x1ff, 0x52bf, 0x5, 0xfffffff9, 0x6, 0x5, 0x2, 0x81, 0x3f, 0x1, 0x101, 0x5, 0xda47, 0xffff0000, 0x1, 0x80000000, 0x4, 0xb050, 0x4, 0x9d8, 0x2, 0x7181, 0x94f, 0x3f, 0x2, 0x6, 0x32e6522b, 0x5, 0xffffffff, 0x7, 0x6, 0x80000001, 0x101, 0xfffffffa, 0x1, 0x80000001, 0x20, 0x6, 0x6, 0x401, 0x1, 0x10001, 0x5, 0x800, 0x6, 0xd6f, 0x80000000, 0x9, 0x2, 0x800, 0x4, 0x2, 0xfff, 0x3, 0x3ff, 0x5, 0x42, 0x5, 0x0, 0x1d8, 0x200, 0x3ff, 0x3bb, 0x3, 0x2, 0x7, 0x66, 0x1ff, 0x4, 0x2caa, 0x10000, 0x7fffffff, 0x7, 0x6, 0xffffffff, 0x800, 0x0, 0x9, 0xfffffff9, 0x8, 0x8, 0x400, 0x80000000, 0x7, 0x7, 0x1, 0x1, 0x7ff, 0x1, 0x80000001, 0x3, 0x7c00, 0x9, 0x0, 0x1, 0x20, 0x200, 0x1, 0x4, 0x9, 0x1, 0x3, 0xfffff800, 0x1, 0x0, 0x2, 0xff, 0x2, 0x8001, 0x8, 0x3, 0x8001, 0x7, 0x9, 0x4, 0x3, 0x8, 0xd78, 0x0, 0x1, 0x101, 0x6, 0x442, 0x5, 0x7, 0xff, 0x200, 0x3, 0x80, 0x92d5, 0x4000000, 0x2, 0x1000, 0x50, 0x20, 0xff, 0xffff7fff, 0x1, 0x8, 0x68, 0x10001, 0x7, 0x8, 0x1, 0xee, 0x0, 0x1, 0x1, 0x2, 0x61a2, 0x6, 0x101, 0x8e99, 0x1, 0x3ff, 0x5, 0x0, 0xffff66af, 0x9, 0x5, 0x80, 0x8663, 0x8, 0x4, 0x1, 0xd70a, 0x6, 0x2, 0x4, 0x1, 0x7, 0xfff, 0x4, 0xc2, 0x0, 0x6, 0x20, 0x90, 0x8, 0x2, 0x7, 0x5, 0x9, 0xe, 0x6, 0x8376, 0xfffffffe, 0x9, 0x2, 0x0, 0x7, 0xffffffff, 0x9, 0x4, 0x7, 0x401, 0x0, 0x6f, 0x5, 0x5, 0x8, 0x81, 0xce, 0x3309, 0xd647, 0xe316, 0x5, 0x10000, 0x4, 0x3f, 0x20, 0x400, 0xc15f, 0x800, 0x2, 0xfffffffa, 0x80000001, 0x0, 0x0, 0x3f, 0x8, 0x9, 0x5, 0x400, 0x1, 0x6, 0x4, 0x1, 0x7, 0x4, 0x1, 0x1cbc, 0x1, 0xd80, 0x4, 0x40, 0xfffffffe, 0x1, 0x2, 0x6, 0x800, 0x400, 0x7, 0x2, 0x100, 0xffffffdc, 0x109, 0x6700, 0x2, 0x1000, 0x7, 0x200, 0x81, 0x8, 0x9, 0xffff, 0x7, 0x6, 0x1, 0x80, 0xc7, 0x8, 0xfffff5f8, 0x1, 0x8, 0x4, 0xf7, 0x100, 0x5, 0xab, 0xb0ba, 0x5, 0xab1f, 0x9, 0x7, 0x7, 0x8000, 0x8b20, 0x1, 0x8f02, 0x7, 0x7, 0x1000, 0x7fff, 0x80, 0x5, 0x9, 0x4, 0x1569b2f9, 0x416, 0x2, 0x220be79d, 0x80000001, 0x0, 0x7fff, 0x7, 0xfffffffe, 0x7, 0xdc, 0x2, 0x2, 0x0, 0xfffffffb, 0x3ff, 0x10001, 0x0, 0x1, 0x6, 0x8000, 0x80000000, 0x4, 0xd8d2, 0x4cf8, 0x80000001, 0xe4, 0xffff, 0x6, 0xffffffff, 0x1000, 0x7, 0xfffffffe, 0x8, 0x2, 0x2, 0x4, 0x10000, 0x101, 0x55c51f2c, 0x0, 0x80000000, 0x101, 0x1000, 0x8, 0x335, 0x40, 0x7fffffff, 0x7, 0x58f6, 0x3f, 0x101, 0x5, 0x8000, 0x3, 0x8, 0x6, 0x1, 0x6, 0x5, 0x3, 0x6, 0x6, 0xffff0000, 0x2, 0x7, 0x4, 0x7, 0x6, 0x2, 0xee2, 0x10001, 0x380, 0x1f, 0x1000, 0x2, 0x400, 0x3, 0x25, 0x81, 0x6, 0x5, 0x4, 0x0, 0x8, 0x7, 0x9, 0x9, 0x400, 0x1, 0x545, 0x0, 0x20, 0x7, 0xd919, 0x260, 0xbbb, 0x8, 0x7, 0x4, 0x0, 0x6, 0x8, 0x6, 0x80000001, 0xffffffe0, 0x401, 0x8000, 0x1ff, 0x400, 0x7fff, 0x2, 0x1000, 0xffffffac, 0x6, 0x1, 0xac, 0x5, 0x7, 0x7ff, 0x80000000, 0xffffffff, 0xe0000, 0x81, 0xa34f, 0xfffffffa, 0x7, 0xc6, 0x6, 0x9, 0x253f, 0x1, 0x81, 0x15c, 0x9, 0x200, 0x6, 0xfffffff9, 0x7, 0x6, 0x4, 0x80, 0xc98, 0xfffff0b0, 0x7fff, 0x1, 0x2, 0x3, 0x8001, 0x73704947, 0x4, 0x20, 0x7, 0x6, 0x7fff, 0x6, 0x5, 0x6, 0x10001, 0x9, 0x2, 0x5, 0x9, 0x5a6b, 0x4, 0x4, 0x0, 0x9, 0x35, 0x80, 0x1, 0x3, 0x7fff, 0x5, 0xe989, 0x1000, 0x80000000, 0x358, 0x7fffffff, 0x4, 0xffffffff, 0x3, 0x100, 0x8, 0x40, 0x1, 0x9, 0xfffffffa, 0x800, 0x2, 0x3, 0x4, 0x7, 0xffff, 0x0, 0x0, 0x5, 0xfff, 0x80, 0x6, 0x2, 0xe48e, 0x6, 0x0, 0x9, 0x1, 0x0, 0x1eec, 0x2, 0x6, 0x0, 0x5, 0x101, 0x9, 0x40000000, 0x10001, 0x9, 0x3f, 0x81, 0x8, 0x7, 0x7, 0x6, 0x200, 0xf0000000, 0x2, 0x3, 0x1, 0x5, 0x6, 0x1, 0x8, 0x9, 0x1, 0x1000, 0x400, 0x401, 0x7, 0xbd77, 0xffff1aab, 0x3, 0x1000, 0xc58c, 0x0, 0x3ff, 0x3, 0x9, 0x7, 0xe9, 0x6, 0x7fff, 0x9, 0x0, 0x2, 0x98e, 0x40, 0x6, 0x3, 0x3, 0x3, 0x70, 0x5, 0x0, 0x0, 0x100, 0x8, 0x1, 0x1, 0x0, 0x7, 0x1, 0x7, 0x7ccb, 0xb, 0x6, 0x7, 0x991, 0x2, 0x0, 0x0, 0x40, 0xffff, 0x101, 0x10000, 0x1, 0x1, 0x9, 0xffffff01, 0xfffff848, 0x0, 0x7f, 0x2, 0x800, 0x6, 0xa3, 0x5, 0xda, 0xfff, 0x6, 0x1941, 0xfffffffe, 0x1, 0x10001, 0x0, 0x2, 0x2, 0x7, 0x3ff, 0x3f, 0x5, 0x7, 0x1, 0xffffffff, 0xe9, 0x70e5, 0x8, 0x101, 0x8, 0x2, 0x9, 0x10001, 0x1, 0x81, 0x5, 0xff, 0xfffffff9, 0x8, 0x2, 0x9, 0x3, 0xd23b, 0x3f, 0x200, 0x8001, 0x664, 0x1, 0x1, 0x8, 0x0, 0x4, 0x5, 0x1ff, 0x80000001, 0xffffff8b, 0x1ff, 0x401, 0x5, 0x8, 0x6a4, 0xfffffff7, 0xf918, 0x0, 0x1, 0x1, 0x7, 0x1ffe00, 0x4, 0x80, 0x9, 0x1ff, 0x20, 0x3, 0x5, 0x2, 0x1f, 0x7, 0x3, 0x45, 0x1, 0xa6a, 0x1, 0x2, 0x9, 0x1, 0x8, 0xfffff800, 0x5, 0x80000, 0x8, 0x0, 0x0, 0x3ff, 0x3ee, 0xcad, 0x7fff, 0x62b3, 0x9, 0x7fff, 0x3ff, 0xcfcf, 0x4a, 0x6a43, 0x9, 0x100, 0xfffffffa, 0x80, 0x5, 0x1df5, 0x7, 0x40, 0x80000000, 0x6, 0x2, 0xfff, 0x9, 0x7, 0x2, 0x6, 0x80000001, 0x7f, 0x0, 0x1000, 0x1, 0x4]})
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000001a40)={0x0, 0x14, 0x0, @tid=r4}, &(0x7f0000001a80))
semop(0xffffffffffffffff, &(0x7f0000001ac0)=[{0x2, 0xffff, 0x1000}, {0x0, 0x5, 0x800}, {0x3, 0x2, 0x1800}, {0x0, 0xb927, 0x1000}, {0x0, 0x6, 0x1000}], 0x5)
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000001b00)={@private1, 0x69})
fcntl$getown(0xffffffffffffffff, 0x9)
waitid(0x2, 0xffffffffffffffff, &(0x7f0000001b40), 0x20000000, &(0x7f0000001bc0))
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001c80)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})

04:17:29 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x7})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x80, 0x7, 0x745a, 0x8000, {{0x2b, 0x4, 0x2, 0x6, 0xac, 0x66, 0x0, 0x81, 0x4, 0x0, @local, @private=0xa010102, {[@cipso={0x86, 0x2f, 0x2, [{0x5, 0x9, "b7c0e4cc01fd0c"}, {0x0, 0xb, "6e308abe9443ac31c2"}, {0x6, 0x7, "f64bd85d69"}, {0x5, 0x9, "ec84230e8f2955"}, {0x5, 0x5, "07d193"}]}, @generic={0x89, 0x6, "a0350333"}, @lsrr={0x83, 0xb, 0xc3, [@private=0xa010100, @rand_addr=0x64010101]}, @timestamp={0x44, 0x28, 0x98, 0x0, 0x8, [0x401, 0x101, 0x4, 0xc8, 0x3, 0xfffffff7, 0x6, 0x4f3452aa, 0x80000000]}, @cipso={0x86, 0x2e, 0x3, [{0x1, 0xc, "822133add59313162d22"}, {0x0, 0x12, "812f4e8c6973e37874d988d2d3758ec2"}, {0x1, 0x6, "96eb83b7"}, {0x1, 0x4, "18e6"}]}]}}}}})
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, 0x14, 0x120, 0x70bd26, 0x25dfdbfb, {0x9, 0x3f}, [@INET_DIAG_REQ_BYTECODE={0x79, 0x1, "90445359a7e1664745c5c25ef89d5d4f256415ec8dcd9e328ee7e67451b160fc09142b754cb9eab9738ecd1ec6852642950a9df62a43de35246ab2a9cfb688b7f1f2408101f83bfc06866d74f79caba5d7770c10f068bc1b8f4b57de78c6bd138fc1b53ac55131949faff705e13a25be9a80e01560"}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', <r2=>r1, 0x700, 0x7800, 0x5b30, 0x5ed00000, {{0x25, 0x4, 0x1, 0x31, 0x94, 0x67, 0x0, 0x80, 0x4, 0x0, @loopback, @broadcast, {[@end, @generic={0x83, 0xd, "2bbb3d8ffc16fd6bf92f48"}, @end, @cipso={0x86, 0xa, 0x3, [{0x6, 0x4, "ea52"}]}, @cipso={0x86, 0x4b, 0xffffffffffffffff, [{0x2, 0x2}, {0x6, 0x7, "ad15296498"}, {0x0, 0x8, "4233ffcd0bae"}, {0x7, 0x11, "29377d054213a17a585bce1bd3c70c"}, {0x2, 0x12, "7279d09b75ab5aa47cf35ae436cdd956"}, {0x2, 0x11, "63972afb869c3945acdf401ee93916"}]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x6, 0x2}, {0x5, 0x10, "e51b22dd3b47b25d004373736530"}]}, @noop]}}}}})
fcntl$setflags(r0, 0x2, 0x1)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x28040, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f00000004c0)={0x62b3, 0xbdbe, 0x75, 0x9})
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x40)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540), 0x101001, 0x0)
ppoll(&(0x7f0000000580)=[{r5, 0x440}, {r6}, {0xffffffffffffffff, 0x1184}, {r4}], 0x4, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600)={[0xef]}, 0x8)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x200, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'gre0\x00', <r8=>r2, 0x7800, 0x7, 0x7f, 0x789d, {{0x17, 0x4, 0x2, 0x11, 0x5c, 0x65, 0x0, 0x7, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@end, @rr={0x7, 0xb, 0x65, [@broadcast, @empty]}, @timestamp_prespec={0x44, 0xc, 0x54, 0x3, 0x1, [{@multicast2, 0x4}]}, @timestamp_prespec={0x44, 0xc, 0x38, 0x3, 0x6, [{@multicast1, 0x4286}]}, @rr={0x7, 0x23, 0xb6, [@loopback, @broadcast, @local, @local, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x33}, @empty]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000b40)={'tunl0\x00', &(0x7f0000000ac0)={'tunl0\x00', r8, 0x1, 0x700, 0x78, 0xf0, {{0xe, 0x4, 0x3, 0x19, 0x38, 0x66, 0x0, 0xf8, 0x29, 0x0, @empty, @private=0xa010100, {[@timestamp_addr={0x44, 0x24, 0x8a, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast1, 0x5}, {@multicast2, 0x9}, {@broadcast, 0x7}]}]}}}}})
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
r10 = getpgid(0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000)

04:17:29 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000000)=0x1)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2040)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x6}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1)
r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0xffffffffffffffe1, 0x10001)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000140)={0x1, 0xffffffff, 0x0, 0x7f6, 0x2, 0xffffffff})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x2840)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f00000001c0))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x0, 0x0, 0x3000, 0x2, 0xfffffffe}})
r4 = socket$inet6(0xa, 0x800, 0x7fff)
recvmsg(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/225, 0xe1}, {&(0x7f0000001a40)=""/59, 0x3b}], 0x3, &(0x7f0000001ac0)=""/4096, 0x1000}, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002b00), 0x4480)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000002b40)={{0x1, 0x1, 0x18, <r6=>r0, {0xf3ee33fb}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000002b80)={{0x1, 0x0, 0x5, 0x1}, 0x401, 0x5, 'id1\x00', 'timer1\x00', 0x0, 0x3, 0xc1, 0x6, 0x1000})
syz_open_dev$hiddev(&(0x7f0000002c80), 0x8001, 0x10000)
ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000002cc0)={{0x1, 0x2, 0xe228, 0x101, 0x7, 0x74}, 0x52, [0x0, 0x5, 0x0, 0x8000, 0x9, 0x0, 0x4, 0x9, 0xff, 0xcf91, 0x1, 0x22, 0x8, 0x8, 0x179, 0x81, 0xd, 0x80000000, 0x8, 0x7, 0x2, 0x5, 0x0, 0x8000, 0x4, 0x9, 0x9, 0x7fff, 0x80000000, 0x1, 0x8, 0x20000, 0x7, 0x8, 0xfe, 0x4, 0x0, 0x0, 0x7feb, 0xfff, 0x0, 0x8, 0x9, 0x61c5, 0x1000, 0x675f, 0x1000, 0x7fff, 0x2, 0x7, 0x7, 0x5, 0x200, 0xb, 0x7, 0x2, 0x20, 0x8, 0x4000, 0x81, 0x44, 0x7, 0x400, 0x1, 0x0, 0x3, 0xffffffff, 0x1, 0x4, 0x6, 0xfffffff8, 0x492, 0xfffffffd, 0x9, 0x48, 0x3, 0x9, 0x2, 0x2, 0x4, 0xe2, 0x1af, 0x80, 0x80, 0x7, 0x3ff, 0x7fff, 0x61b4, 0x1ff, 0x2, 0x8001, 0x7, 0x3, 0x81, 0x1a4e, 0x0, 0x2, 0x1c32, 0x1, 0x7ff, 0x3, 0x4, 0x879, 0x7fff, 0xbc, 0x1ff, 0xfff, 0x6, 0x4208, 0x0, 0x7fff800, 0x1, 0x1, 0x8, 0x5b3, 0x800, 0x8, 0x7, 0x80000001, 0x10000, 0x10001, 0x27bc, 0x0, 0x1, 0x1ff, 0x80000000, 0x5, 0x6c, 0x8, 0xfffffffa, 0x0, 0x40000, 0x3ff, 0x6, 0x10001, 0x9, 0x3, 0x3f, 0x26, 0x6, 0x3f, 0x9, 0xffffffc1, 0x400, 0xe5b, 0xe6, 0x855, 0x1, 0xb3, 0x2, 0x200, 0x6, 0x6cb, 0x2, 0x3, 0x3, 0x4, 0x4, 0x1, 0x8, 0x3, 0x400, 0x1f, 0x1, 0x7, 0x6, 0x2, 0x1, 0x1, 0xffff, 0x400, 0xc8, 0x2, 0x1f, 0x2, 0x6, 0x1, 0x4e, 0x101, 0x1, 0x7, 0x7, 0x8, 0xfffffc01, 0x7, 0x109, 0x8, 0x8001, 0x787, 0x3, 0xfff, 0x4, 0x20, 0x8, 0x1, 0x5, 0x7, 0x9, 0x1ff, 0x81, 0x9, 0x1, 0x2, 0x8000, 0x9, 0x2, 0x8, 0x4, 0x8, 0x7, 0x9, 0x2, 0x0, 0xfba, 0x0, 0x10001, 0x8, 0x400, 0xffffff99, 0x6, 0x5, 0x5, 0x7, 0x3f, 0xef1, 0x5f, 0x6, 0x0, 0x8, 0xfffffff9, 0x6, 0x1, 0x6, 0x9, 0x6, 0x3f, 0x6, 0x5, 0x20, 0x2, 0x2, 0x9, 0x36, 0x2, 0x0, 0x8, 0x1de98189, 0x9, 0xfffffffe, 0xaef81a2, 0x0, 0x6, 0x92, 0x2, 0x800, 0xfffffffa, 0x8000, 0x7, 0x7, 0x7fffffff, 0x6, 0xa328, 0x1, 0x48, 0x0, 0xff, 0x2, 0x800, 0x4ec9130f, 0x7, 0xffffffff, 0x9606, 0x3, 0x9, 0x101, 0x3, 0x2, 0xcd8, 0x3, 0x2, 0xffff8cf8, 0x800, 0x0, 0x1, 0xe70e, 0x1, 0xffffffff, 0x5, 0x6, 0x3, 0x5, 0x3, 0x40, 0x7, 0x0, 0x4, 0x800, 0x8, 0x163, 0x10001, 0x7fff, 0x1000, 0x212, 0xfffffffb, 0x8000, 0x9, 0x60f3, 0x8, 0x476, 0x1, 0x6, 0x3f, 0x100, 0x0, 0x101, 0x3, 0xab2, 0xffff, 0x0, 0x5f7b, 0x1f, 0x7, 0xba00, 0x8001, 0x5, 0xff, 0x3, 0xfff, 0x7, 0x1ff, 0x5cd, 0x1e1c032c, 0x9, 0x1, 0x5, 0x8, 0x1f, 0x261e, 0x5, 0xe8, 0x8, 0x7, 0x200, 0xfff, 0x200, 0x5, 0x2, 0x6, 0x401, 0x101, 0x800000, 0x1, 0x3, 0x378, 0x6, 0x4, 0xffffd45e, 0xf4, 0x401, 0x9, 0xb8a, 0x2bdb, 0x14000, 0x7fff, 0x100, 0x9, 0x5, 0x7fff, 0x20, 0x2, 0x0, 0x1, 0x1f, 0xfd4, 0x2, 0x5, 0x40, 0x7ff, 0x4c, 0xfffffffd, 0x400, 0x2, 0x86, 0x7, 0x8001, 0x81, 0x0, 0x1, 0x2, 0x10000, 0x3e85, 0xfffffffd, 0x3, 0x86aa, 0x1, 0x2, 0x2, 0x6, 0x101, 0x7, 0x9, 0x5, 0x10000, 0xdfb8, 0x1, 0x10000, 0x400, 0x4, 0xcb, 0x1, 0x80000001, 0xfffffbff, 0xfffffffa, 0xfb, 0x0, 0x1, 0x171f, 0x3, 0x0, 0x401, 0x6, 0x5, 0x20, 0x21f, 0x399, 0x3, 0x3, 0xfffff001, 0x0, 0x53, 0x4, 0x4, 0xfffffffc, 0x5, 0x366, 0x1, 0x3f, 0x3ff, 0x9, 0x2, 0x8000, 0x7ff, 0x0, 0x37a, 0x9, 0x8, 0xa3c, 0x2, 0x0, 0x10001, 0x1, 0x0, 0xfc0, 0x200, 0x5, 0x7fffffff, 0xed76, 0x4, 0x2, 0x8000, 0x4, 0xd7, 0x0, 0x8, 0x3f5d, 0x49, 0x0, 0x7, 0x31a3, 0x8, 0x6, 0xfffffa2d, 0x8a, 0x40, 0x5, 0x7, 0xfffffffb, 0xfff, 0xd84c, 0x2, 0x7, 0x0, 0x3f, 0x4, 0x9, 0xa146, 0x1f, 0x5, 0x7ff, 0x5, 0x3ff, 0xfffffffc, 0x6, 0x3335, 0x1, 0x8, 0x0, 0x7fffffff, 0x9, 0x7fff, 0x8000, 0xd84, 0x7fff, 0xfff, 0x5, 0x400, 0x1ff, 0x4, 0x1, 0x0, 0x2, 0x4, 0x5, 0x384, 0x2, 0x100, 0x3, 0x10000, 0x0, 0x3ff, 0x7fff, 0xfffff000, 0x1000, 0x9, 0x100, 0x7fffffff, 0x7fffffff, 0x8, 0x1, 0x1000, 0x54c8, 0x1, 0x9, 0x8, 0x7b1cf9e2, 0x401, 0x7f, 0xba, 0x8, 0x6, 0x1, 0x9, 0x101, 0x4, 0x0, 0xe, 0x5, 0xff, 0xfffffffc, 0x1, 0x2, 0x1, 0x8d, 0x1, 0x10001, 0xa3b6, 0x18000000, 0xffffffff, 0x7, 0x2, 0x2ab, 0x7, 0x80, 0x7, 0x3, 0x9, 0x6, 0x3, 0x6642, 0x7fffffff, 0x400, 0x98ed, 0x550, 0x8, 0x3ff, 0x800, 0x1, 0x0, 0x0, 0x1f, 0x7fff, 0x3, 0x4178b4bc, 0x0, 0x2, 0x5, 0x4, 0x1, 0x3, 0x9, 0x1, 0x3953, 0x200, 0x1, 0x7f, 0x7f, 0x80000000, 0x5, 0x1200, 0x9, 0x4, 0x8001, 0xa99, 0x10001, 0x2, 0x0, 0x3, 0x4, 0x4, 0x2, 0x6, 0x5e06, 0x5, 0x9, 0x7, 0x2, 0x80000000, 0x3ff, 0x2, 0x200, 0x7fff, 0x0, 0xffffffff, 0x6, 0x0, 0x9, 0x8, 0x80000000, 0x9, 0x92, 0x1, 0x2, 0x0, 0x0, 0x6, 0x0, 0x56eb, 0x4, 0x7, 0x4, 0x101, 0x7a, 0x2, 0xffff3047, 0x9, 0x1a, 0x2072, 0x7, 0x0, 0x0, 0x0, 0x710, 0x8c, 0x7f, 0x8, 0x200, 0xffffffff, 0xb9, 0x5, 0x5, 0x4, 0x1000, 0x5, 0xfffffff8, 0xfffffff7, 0x5, 0x7ff, 0x4236, 0xcee3, 0x101, 0x7fffffff, 0xc62a, 0x40, 0xfae8, 0x6739, 0xfffffabb, 0x2, 0x0, 0xc3c, 0x4, 0xffffff00, 0x5, 0x6, 0x7fff, 0x8001, 0xffff, 0x6, 0x7, 0x8000, 0x54, 0x3, 0x54, 0xcde763a, 0x2, 0x3, 0x8, 0x8001, 0x9, 0x100, 0x9, 0x2, 0xbdf4000, 0x7, 0x0, 0x4, 0x0, 0x4, 0x3, 0x7f, 0x0, 0x7fff, 0x8000, 0x3ff, 0x2, 0x401, 0x5, 0x5a5, 0xb2d, 0x1ff, 0x7f, 0x9, 0x7, 0x8, 0x4, 0x8, 0x9, 0x69b, 0x7, 0x8, 0x9, 0x7f, 0x82d5, 0x7fffffff, 0x1, 0x8000, 0x8, 0x4, 0x0, 0x3, 0x5, 0x8, 0x4, 0x1, 0x0, 0xffffffff, 0x8, 0x8, 0x8, 0x8, 0x0, 0x8000, 0x6b6, 0x1, 0x8, 0x10001, 0x4, 0x40, 0x8, 0x10001, 0x8, 0x5, 0x9, 0x9, 0x20, 0xff, 0x0, 0x9, 0x3d31, 0x6, 0x5, 0x400, 0x1, 0x80, 0x6, 0x5, 0x4, 0xfff, 0x6c9, 0xffff, 0x2, 0x7, 0x3, 0x400, 0x8, 0x100, 0x3f, 0x200, 0x80, 0x0, 0x3f, 0x7ff, 0xf571, 0x5, 0x3ff, 0x10001, 0x2d18, 0x2, 0x80, 0x2, 0x0, 0x3ff, 0x2, 0x3, 0x6, 0x1ff, 0x401, 0xf2, 0xfffffffa, 0x7f, 0x7, 0x8, 0x5, 0x7, 0x0, 0xffffffff, 0x7, 0x4, 0x8, 0x8, 0x7, 0x6, 0x3, 0x3, 0x0, 0x5, 0x7f5d, 0x8, 0xc8f, 0x9, 0x3ff, 0x20, 0x6, 0x8001, 0xf0, 0x8, 0x92, 0x5, 0x1, 0x4, 0x800, 0xffffff9c, 0x0, 0x3, 0x6, 0xc02, 0x0, 0x2, 0x2, 0x8, 0x0, 0x7, 0x5, 0x3, 0x3, 0x10001, 0x3, 0x2, 0xfffffff8, 0x0, 0x50d9, 0x6, 0x1, 0x101, 0x4, 0x10001, 0xffff, 0x1, 0x7ff, 0x9, 0x80000001, 0x5, 0x400, 0xcb0, 0x0, 0xcc, 0x1ff, 0x4, 0x1000, 0x69, 0x7f, 0x7fffffff, 0x2dd2bfc7, 0x5, 0xc72, 0xffffffff, 0xffffffe1, 0xf3, 0x5, 0xd1, 0x1, 0x3f, 0x8, 0xfff, 0x5, 0x8, 0x4, 0x73, 0x401, 0x8e2a, 0x6, 0xfff, 0x0, 0x671, 0x100, 0x1, 0x1f, 0x0, 0x9, 0x7, 0x8, 0x9, 0x8, 0x2, 0x1f, 0x3, 0xffffffc1, 0x5, 0x2, 0x0, 0x5d2, 0x8001, 0x200, 0x3, 0x3, 0x4, 0x0, 0x8, 0x3, 0x4, 0x100, 0x9, 0x0, 0x1, 0x10000, 0x4, 0x964, 0x58000000, 0x7f, 0x9, 0x4, 0x7, 0x0, 0x2, 0xfe000000, 0x2, 0x200, 0xbc4, 0x7f, 0x9f, 0x6, 0x10001, 0x5, 0xd0, 0x0, 0x7, 0x3f, 0x9, 0x0, 0x7, 0x36b, 0x80, 0x6, 0x4, 0x7, 0x8, 0x2, 0x5, 0x73, 0x2, 0x3, 0x3f, 0x8, 0x101, 0x0, 0xffffffe0, 0xffff, 0x0, 0xfffffff9, 0x271, 0x0, 0x0, 0x9, 0x5, 0x1, 0x8, 0x213e, 0x2, 0x1, 0x3, 0x1, 0x80000000, 0x1, 0xe32, 0x101, 0x200, 0x2, 0x80000000, 0x1, 0x200, 0x3ff, 0xd9f, 0x22, 0x63f, 0x152, 0x8000, 0x8, 0x6, 0x74, 0x2ddb, 0x3, 0x80000001, 0x1f, 0x400, 0x3ff, 0x7, 0x2, 0x4, 0x7f, 0x8, 0xfff, 0x5, 0x3f, 0x0, 0x9]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000003d40)={{0x1, 0x1, 0x18, r5, {0x1000}}, './file0\x00'})

04:17:29 executing program 5:
r0 = memfd_secret(0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x793, 0x9, 0x3, 0x100, 0x6, 0x6608000})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000001c0)={{0x3, 0x3, 0x4, 0x0, 0x51d}, 0x9, 0x3ff, 'id0\x00', 'timer1\x00', 0x0, 0x100000000, 0x96, 0x7, 0x2})
ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r2 = memfd_secret(0x80000)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}]}, 0x20}}, 0x4000001)
r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
fcntl$setflags(r3, 0x2, 0x1)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001cc0)={'batadv0\x00', <r5=>0x0})
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x54, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x800)
ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000001e00))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001e40)={{0x1, 0x2, 0x4, 0x2, 0x1}})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001ec0), 0xffffffffffffffff)
r7 = getpgid(0x0)
r8 = getpgid(0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x4c, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5528544cdf8aea14}, 0x4800)

04:17:29 executing program 6:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x22281, 0x0)
r0 = getpgid(0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x81)
socketpair(0x18, 0x5, 0x2, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x1, 0x3, 0x3, 0x0, 0x0, {0xc, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20004091}, 0x8000)
getitimer(0x1, &(0x7f0000000280))
getitimer(0x2, &(0x7f00000002c0))
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1f0, 0x13, 0x809953a03fa25f50, 0x70bd25, 0x25dfdbfd, {0xb, 0x7, 0x4, 0xf8, {0x4e22, 0x4e21, [0x8, 0x7f, 0xffff, 0x80000000], [0x8, 0x7, 0x400, 0xffff], 0x0, [0x80, 0x6]}, 0x401, 0x10000}, [@INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "373a7040156af3012129f550e98927e3436d1c206aa56175b5bc57a341a204c1e8a9ba15ed64c0542889f093248b5470f079921c9b12251a40e5fc3473aca9c8597d4f81f8cb82a4614aabcd7a2bc79691604f92f8515acd81f2d4e77f0bf89541ef89b4bf2229ef59487bc2ca4eee3d9a9a7c3f616c5b3638467fce14e521a33834df3549fa7b824c180190b24b646a092a00a44cbd3ca4e6c3c7d2a957b8886be321c1f2273333430a5f22ae50bb50ef26140a269482d7822417ef860ec6631a0992f9141ec1f763c78299664cc6"}, @INET_DIAG_REQ_BYTECODE={0x14, 0x1, "67f73e8d991616c19cbc3c7c6acda0ea"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "a66d41b4bc0351a2a7ff8ae0525eb823cf8e83850c15ecc73c47587249b149f5b775e8bb2b81eaf82984f4c2c8e0aeb6a984e46a0f8af2ad3846b07c1e3d6fbf744864b7c5062f4acc4ec901e16ec7811f5c894d156e4f5d576308af87c210730e3e3961fbc173d9c768cf0d56751c7287272718edeed4fe2eae08209add6eac3650f69bab2c9b167444fbce78e63314f0b0664ce8a070f670fc315532b83290a34325a72198e3ca35d7755de9d66457c897a293b0d634"}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4841}, 0x4004011)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x100000001}}, './file0\x00'})
read$snapshot(r3, &(0x7f0000000600)=""/65, 0x41)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8050)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r4)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000840)={'gretap0\x00', &(0x7f00000007c0)={'syztnl2\x00', <r6=>0x0, 0x8000, 0x1, 0x4, 0x240574b4, {{0x13, 0x4, 0x3, 0x5, 0x4c, 0x64, 0x0, 0x5, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @rr={0x7, 0x13, 0x3e, [@broadcast, @remote, @multicast2, @multicast1]}, @rr={0x7, 0x17, 0x7b, [@broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x40}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xb, 0x2a, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000008c0)={'gretap0\x00', &(0x7f0000000880)={'syztnl1\x00', r6, 0x700, 0x40, 0x9, 0x1, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x64, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}}}})
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000940)={0x7, 0x28, '\x00', 0x1, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0]})
setsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000980)=0x2, 0x4)
write$snapshot(r3, &(0x7f00000009c0)="0bbbc11095a011d93733c718be29a4f58a842e5b38e3f324b1dc3614f1407b5e954e08423a19502ebc4516aa59", 0x2d)
syz_open_procfs$namespace(0x0, &(0x7f0000000a00)='ns/net\x00')

04:17:29 executing program 7:
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)={0x88, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x18}}]}, 0x20)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x800}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20002)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x9}}, './file0\x00'})
sendmsg$SOCK_DESTROY(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x13c, 0x15, 0x100, 0x70bd2b, 0x25dfdbfb, {0xa, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "cf7e220a9796712ded27f03f4a03b724117d605753a64e0d287843d6fa9a5e1f6e5d932997c45768fbf4f3fc38a33286621fd89dfbdc41d26a94b7c3302b5b34c08faa3e15b55c2ecdca47b93617316939d33e50b36967cf8498574f02b7a2da93980ffc88071b6fd0bb012c9897cfc5a5614c1cbaa48728b6fc09d10704bcc2b494736b0dbd1d65101c8a9051c9887ac759c41a52765219d7a088d9e6677f7410e52542c6a05b04a7b07757"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "a91750a1b5afafdf559bc517b2cc979137190a7bee778f8a7989c2a3bc50ffdfbd6d414a9d75dc3d73b7234670bd9848d8701065ddf6c84218b88f4f1ad22e349ffd53a595f1a3d0f6d98f45262122fa738b1e6a9092590c313710334f9424080926c195fc7ceaea3d612a1c6be3462445"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20040080}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x6}}, './file0\x00'})
socketpair(0x25, 0xa, 0x7fffffff, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x2, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40044)
timer_create(0x3, &(0x7f0000000700)={0x0, 0x14, 0x4, @thr={&(0x7f0000000540)="3a549ef3de0a7ec98e9d2e101fdbea2e0652a348c600154d6984f31ba75a91cf5da9aa5a8760f2ebe6e71ba3692bb628dede257d91b4e009e6aed991b0be5a60dba6efbf7edef41cb32e996a9c16e2c74ce4a91dceaa3025325a6296f248209cae1fcdbace5136591fac09e3b978f3041f6f69e968bf4af5949ae9844b698258ccbddfad1e5183f13d", &(0x7f0000000600)="a31eb1ad92b0487b33cd992fca78ba4060f4dd06f878ac09bf4114548d036e6bc1a681f03ecafd769bcaf92111b101050650126f83704b6fc00ff261064e19238f05b14e402bb073ac1abebe79249af5dff6906968a65f1999a90b728298af5a85eba9b57e7b67bc4278f225521d7171f05abd0386847119ed8c96b2fea71d7450355ceaa5c4e5efbd6685452352b7818672f4c2cf8e2c8aaf467426338fc6babc025f3880d4001c6c210dcf5c8ffe6b441edb6508347aea954380779b1dc8e40d9f35e9eb5430b2623a2ef3fb709bdab53a8cbf04c09bcc633f67c96e0bca72fccf3fe9dfc7d85d0ae923658ebea95c894e6a96d51549"}}, &(0x7f0000000740))
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000780)=0x2, 0x4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r4=>r0, {0x200}}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000800))
ioctl$HIDIOCGFLAG(r4, 0x8004480e, &(0x7f0000000840))
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x37, 0x2, 0x1)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x3c}}, 0x8880)
socketpair(0x2b, 0x5, 0x7, &(0x7f0000000980)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000a00)={0x0, @qipcrtr={0x2a, 0x5, 0x4001}, @xdp={0x2c, 0x0, <r7=>0x0, 0x36}, @l2={0x1f, 0x3f, @none, 0x5, 0x2}, 0x21, 0x0, 0x0, 0x0, 0x1f, &(0x7f00000009c0)='vxcan1\x00', 0x400, 0x4, 0xa})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000b80)={'tunl0\x00', &(0x7f0000000a80)={'gre0\x00', r7, 0x40, 0x20, 0x800, 0x8, {{0x2f, 0x4, 0x0, 0x33, 0xbc, 0x66, 0x0, 0x40, 0x4, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x24, 0xd6, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@rand_addr=0x64010101, 0x7}, {@private=0xa010100, 0x4}, {@private=0xa010101, 0x4}]}, @rr={0x7, 0x7, 0x9a, [@multicast1]}, @noop, @timestamp_addr={0x44, 0x2c, 0xd9, 0x1, 0x4, [{@remote, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@multicast2, 0x4}, {@empty, 0xc8ed}, {@local, 0x800}]}, @cipso={0x86, 0x29, 0x1, [{0x0, 0x5, "32b7a8"}, {0x0, 0x11, "742cc5207193a68e82cbcc30994a14"}, {0x3, 0xd, "e3aea776fc33282bb20621"}]}, @end, @ssrr={0x89, 0x13, 0x5e, [@multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x2]}, @ssrr={0x89, 0xf, 0xe7, [@multicast1, @local, @multicast2]}, @end]}}}}})
read$hiddev(r4, &(0x7f0000000bc0)=""/164, 0xa4)
timerfd_gettime(r4, &(0x7f0000000c80))

[  130.709951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  130.713623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  130.716811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  130.731305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.736784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  130.741889] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  130.753992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.756161] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.760739] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.762664] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.769862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.781911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.786234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.790799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  130.796235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  130.894890] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  130.901969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  130.909276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  130.914253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  130.921149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  130.940652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  130.955954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  130.985769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  130.990548] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  131.000874] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  131.005684] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  131.011099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  131.012983] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  131.019902] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  131.039577] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  131.044703] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  131.047891] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  131.056741] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  131.058729] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  131.064930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  131.083887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  131.116674] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  131.126825] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  131.133048] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  131.136886] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  132.846845] Bluetooth: hci1: command tx timeout
[  132.847483] Bluetooth: hci0: command tx timeout
[  132.910503] Bluetooth: hci2: command tx timeout
[  132.976395] Bluetooth: hci3: command tx timeout
[  133.102422] Bluetooth: hci4: command tx timeout
[  133.166425] Bluetooth: hci5: command tx timeout
[  133.230636] Bluetooth: hci7: command tx timeout
[  133.231260] Bluetooth: hci6: command tx timeout
[  134.894540] Bluetooth: hci1: command tx timeout
[  134.895052] Bluetooth: hci0: command tx timeout
[  134.960376] Bluetooth: hci2: command tx timeout
[  135.022596] Bluetooth: hci3: command tx timeout
[  135.150629] Bluetooth: hci4: command tx timeout
[  135.214389] Bluetooth: hci5: command tx timeout
[  135.278627] Bluetooth: hci6: command tx timeout
[  135.279136] Bluetooth: hci7: command tx timeout
[  136.942502] Bluetooth: hci1: command tx timeout
[  136.943609] Bluetooth: hci0: command tx timeout
[  137.006502] Bluetooth: hci2: command tx timeout
[  137.071542] Bluetooth: hci3: command tx timeout
[  137.198417] Bluetooth: hci4: command tx timeout
[  137.263394] Bluetooth: hci5: command tx timeout
[  137.326906] Bluetooth: hci7: command tx timeout
[  137.326994] Bluetooth: hci6: command tx timeout
[  138.990413] Bluetooth: hci0: command tx timeout
[  138.990468] Bluetooth: hci1: command tx timeout
[  139.055628] Bluetooth: hci2: command tx timeout
[  139.118687] Bluetooth: hci3: command tx timeout
[  139.246418] Bluetooth: hci4: command tx timeout
[  139.311772] Bluetooth: hci5: command tx timeout
[  139.374550] Bluetooth: hci6: command tx timeout
[  139.375625] Bluetooth: hci7: command tx timeout
[  190.793199] syz-executor.2 (294) used greatest stack depth: 25072 bytes left
[  193.349843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.353049] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  193.355952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.364289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  193.367986] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  193.371862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  193.379663] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  193.381841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.383934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  193.387696] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.470811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  193.479893] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  193.495677] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  193.513840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  193.518163] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  193.579127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  193.592931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  193.597809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  193.627575] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  193.648096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  193.657294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  193.673854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  193.677282] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  193.687901] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  193.696774] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  193.702609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  193.704086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  193.713648] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  193.719829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  193.730888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  193.977194] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  193.989227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  194.011649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  194.036925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  194.135835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  194.158281] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  194.171976] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  194.233849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  194.265942] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  194.390057] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  195.439371] Bluetooth: hci0: command tx timeout
[  195.440106] Bluetooth: hci1: command tx timeout
[  195.694456] Bluetooth: hci3: command tx timeout
[  195.695204] Bluetooth: hci2: command tx timeout
[  195.822430] Bluetooth: hci4: command tx timeout
[  195.823415] Bluetooth: hci7: command tx timeout
[  196.334703] Bluetooth: hci5: command tx timeout
[  196.526400] Bluetooth: hci6: command tx timeout
[  197.486519] Bluetooth: hci1: command tx timeout
[  197.486981] Bluetooth: hci0: command tx timeout
[  197.742459] Bluetooth: hci2: command tx timeout
[  197.742937] Bluetooth: hci3: command tx timeout
[  197.870537] Bluetooth: hci7: command tx timeout
[  197.871008] Bluetooth: hci4: command tx timeout
[  198.382603] Bluetooth: hci5: command tx timeout
[  198.575454] Bluetooth: hci6: command tx timeout
[  199.534509] Bluetooth: hci0: command tx timeout
[  199.534972] Bluetooth: hci1: command tx timeout
[  199.790591] Bluetooth: hci2: command tx timeout
[  199.791073] Bluetooth: hci3: command tx timeout
[  199.918515] Bluetooth: hci4: command tx timeout
[  199.919196] Bluetooth: hci7: command tx timeout
[  200.430487] Bluetooth: hci5: command tx timeout
[  200.622692] Bluetooth: hci6: command tx timeout
[  201.582413] Bluetooth: hci1: command tx timeout
[  201.582905] Bluetooth: hci0: command tx timeout
[  201.839035] Bluetooth: hci2: command tx timeout
[  201.839572] Bluetooth: hci3: command tx timeout
[  201.966609] Bluetooth: hci4: command tx timeout
[  201.967102] Bluetooth: hci7: command tx timeout
[  202.478395] Bluetooth: hci5: command tx timeout
[  202.670620] Bluetooth: hci6: command tx timeout
[  253.094841] syz-executor.0 (2920) used greatest stack depth: 24832 bytes left
[  255.237225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  255.242976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  255.248857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  255.257791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  255.268134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  255.437683] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  255.441952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  255.444289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  255.451006] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  255.456281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  255.472245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  255.480074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  255.487073] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  255.498949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  255.502793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  255.629855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  255.636054] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  255.645800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  255.659172] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  255.689880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  255.724853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  255.734543] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  255.755255] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  255.762506] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  255.793671] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  255.795737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  255.815712] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  255.819895] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  255.827685] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  255.835217] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  255.857045] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  255.859054] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  255.864717] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  255.867208] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  255.873903] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  255.932706] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  255.938621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  255.956221] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  255.959431] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  256.024933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  257.327580] Bluetooth: hci0: command tx timeout
[  257.519404] Bluetooth: hci1: command tx timeout
[  257.582387] Bluetooth: hci2: command tx timeout
[  257.840271] Bluetooth: hci3: command tx timeout
[  257.969372] Bluetooth: hci4: command tx timeout
[  257.969945] Bluetooth: hci5: command tx timeout
[  258.094737] Bluetooth: hci6: command tx timeout
[  258.286422] Bluetooth: hci7: command tx timeout
[  259.374399] Bluetooth: hci0: command tx timeout
[  259.566378] Bluetooth: hci1: command tx timeout
[  259.630570] Bluetooth: hci2: command tx timeout
[  259.886411] Bluetooth: hci3: command tx timeout
[  260.014515] Bluetooth: hci5: command tx timeout
[  260.014983] Bluetooth: hci4: command tx timeout
[  260.142643] Bluetooth: hci6: command tx timeout
[  260.334414] Bluetooth: hci7: command tx timeout
[  261.422544] Bluetooth: hci0: command tx timeout
[  261.614396] Bluetooth: hci1: command tx timeout
[  261.678638] Bluetooth: hci2: command tx timeout
[  261.934473] Bluetooth: hci3: command tx timeout
[  262.062606] Bluetooth: hci4: command tx timeout
[  262.063136] Bluetooth: hci5: command tx timeout
[  262.190385] Bluetooth: hci6: command tx timeout
[  262.382633] Bluetooth: hci7: command tx timeout
[  263.470589] Bluetooth: hci0: command tx timeout
[  263.662579] Bluetooth: hci1: command tx timeout
[  263.728360] Bluetooth: hci2: command tx timeout
[  263.982413] Bluetooth: hci3: command tx timeout
[  264.112362] Bluetooth: hci5: command tx timeout
[  264.112857] Bluetooth: hci4: command tx timeout
[  264.238492] Bluetooth: hci6: command tx timeout
[  264.430858] Bluetooth: hci7: command tx timeout
[  315.538987] syz-executor.4 (5518) used greatest stack depth: 24544 bytes left
[  317.507171] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  317.513819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  317.517492] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  317.523882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  317.529615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  317.831922] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  317.845588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  317.847853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  317.863971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  317.875914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  317.920469] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  317.922934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  317.928196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  317.941135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  317.957393] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  317.958842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  317.963654] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  317.981150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  318.012172] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  318.018669] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  318.020994] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  318.027105] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  318.042265] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  318.046530] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  318.058698] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  318.069911] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  318.076783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  318.079173] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  318.081146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  318.096703] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  318.127191] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  318.131835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  318.132105] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  318.140266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  318.144143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  318.155626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  318.158620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  318.185822] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  318.227569] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  318.233899] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  319.599423] Bluetooth: hci0: command tx timeout
[  319.918543] Bluetooth: hci1: command tx timeout
[  320.110418] Bluetooth: hci3: command tx timeout
[  320.174781] Bluetooth: hci2: command tx timeout
[  320.174869] Bluetooth: hci5: command tx timeout
[  320.239642] Bluetooth: hci6: command tx timeout
[  320.302696] Bluetooth: hci4: command tx timeout
[  320.366712] Bluetooth: hci7: command tx timeout
[  321.646431] Bluetooth: hci0: command tx timeout
[  321.966465] Bluetooth: hci1: command tx timeout
[  322.159531] Bluetooth: hci3: command tx timeout
[  322.223233] Bluetooth: hci5: command tx timeout
[  322.223756] Bluetooth: hci2: command tx timeout
[  322.286595] Bluetooth: hci6: command tx timeout
[  322.350727] Bluetooth: hci4: command tx timeout
[  322.414557] Bluetooth: hci7: command tx timeout
[  323.695352] Bluetooth: hci0: command tx timeout
[  324.014583] Bluetooth: hci1: command tx timeout
[  324.206553] Bluetooth: hci3: command tx timeout
[  324.270441] Bluetooth: hci2: command tx timeout
[  324.270919] Bluetooth: hci5: command tx timeout
[  324.336367] Bluetooth: hci6: command tx timeout
[  324.398388] Bluetooth: hci4: command tx timeout
[  324.462518] Bluetooth: hci7: command tx timeout
[  325.742732] Bluetooth: hci0: command tx timeout
[  326.062386] Bluetooth: hci1: command tx timeout
[  326.254754] Bluetooth: hci3: command tx timeout
[  326.320385] Bluetooth: hci2: command tx timeout
[  326.320414] Bluetooth: hci5: command tx timeout
[  326.384492] Bluetooth: hci6: command tx timeout
[  326.446660] Bluetooth: hci4: command tx timeout
[  326.511515] Bluetooth: hci7: command tx timeout
[  379.975424] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  379.984672] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  379.989835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  380.011858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  380.024080] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  380.061411] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  380.065230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  380.072616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  380.088830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  380.098637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  380.245170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  380.249787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  380.256921] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  380.259773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  380.264993] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  380.268228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  380.282601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  380.288682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  380.294884] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  380.313256] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  380.319790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  380.327118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  380.329061] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  380.337395] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  380.339220] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  380.345678] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  380.360365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  380.367850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  380.409841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  380.423060] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  380.474511] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  380.482965] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  380.496062] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  380.521179] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  380.559603] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  380.566248] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  380.570637] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  380.572857] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  380.579174] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  380.582604] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  382.062506] Bluetooth: hci0: command tx timeout
[  382.127685] Bluetooth: hci1: command tx timeout
[  382.382412] Bluetooth: hci3: command tx timeout
[  382.383127] Bluetooth: hci4: command tx timeout
[  382.510895] Bluetooth: hci5: command tx timeout
[  382.830891] Bluetooth: hci6: command tx timeout
[  382.831638] Bluetooth: hci2: command tx timeout
[  382.831678] Bluetooth: hci7: command tx timeout
[  384.110755] Bluetooth: hci0: command tx timeout
[  384.174481] Bluetooth: hci1: command tx timeout
[  384.430422] Bluetooth: hci4: command tx timeout
[  384.430496] Bluetooth: hci3: command tx timeout
[  384.558452] Bluetooth: hci5: command tx timeout
[  384.880354] Bluetooth: hci6: command tx timeout
[  384.880480] Bluetooth: hci2: command tx timeout
[  384.880840] Bluetooth: hci7: command tx timeout
[  386.158692] Bluetooth: hci0: command tx timeout
[  386.223518] Bluetooth: hci1: command tx timeout
[  386.478630] Bluetooth: hci3: command tx timeout
[  386.478712] Bluetooth: hci4: command tx timeout
[  386.607563] Bluetooth: hci5: command tx timeout
[  386.926815] Bluetooth: hci2: command tx timeout
[  386.927138] Bluetooth: hci6: command tx timeout
[  386.928015] Bluetooth: hci7: command tx timeout
[  388.208726] Bluetooth: hci0: command tx timeout
[  388.272414] Bluetooth: hci1: command tx timeout
[  388.526526] Bluetooth: hci3: command tx timeout
[  388.527021] Bluetooth: hci4: command tx timeout
[  388.654497] Bluetooth: hci5: command tx timeout
[  388.975090] Bluetooth: hci7: command tx timeout
[  388.975600] Bluetooth: hci2: command tx timeout
[  388.975645] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
04:22:33  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffff88802a315280 RCX=ffffffff817bb016 RDX=0000000000000000
RSI=ffffffff812c7b3f RDI=ffff88802a3152ac RBP=ffff88802e207f48 RSP=ffff88802e207f00
R8 =0000000000000000 R9 =fffffbfff0c83dca R10=ffffffff8641ee57 R11=0000000000000000
R12=0000000000000000 R13=0000000000000003 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff812c7b58 RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fe22a587540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe0100000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe22a7224a1 CR3=000000002c253000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000ff000000ffff0000000000000000
XMM02=ffffffffffffffffffff0f0e0d0c0b0a XMM03=2d646c6f2074736f0065736100006266
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff8880e571b000 RCX=ffffffff818c9072 RDX=0000000000000000
RSI=ffffffff818c9080 RDI=ffff88806cf31850 RBP=ffff888009335600 RSP=ffff88801a9a7ad8
R8 =0000000000000001 R9 =fffff94000044ee0 R10=0000000000000000 R11=0000000000000001
R12=ffffea0000227700 R13=0000000000000000 R14=0000000000000001 R15=ffff88801a9a7d88
RIP=ffffffff815ab910 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fdf5600e540 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe0e00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdf561020f0 CR3=0000000030045000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00712d3d534e4f4954504f5f45424f52
XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000