Warning: Permanently added '[localhost]:7903' (ECDSA) to the list of known hosts.
2025/06/10 05:14:00 fuzzer started
2025/06/10 05:14:00 dialing manager at localhost:40003
syzkaller login: [  105.588025] cgroup: Unknown subsys name 'net'
[  105.734998] cgroup: Unknown subsys name 'cpuset'
[  105.781675] cgroup: Unknown subsys name 'rlimit'
2025/06/10 05:14:20 syscalls: 203
2025/06/10 05:14:20 code coverage: enabled
2025/06/10 05:14:20 comparison tracing: enabled
2025/06/10 05:14:20 extra coverage: enabled
2025/06/10 05:14:20 setuid sandbox: enabled
2025/06/10 05:14:20 namespace sandbox: enabled
2025/06/10 05:14:20 Android sandbox: enabled
2025/06/10 05:14:20 fault injection: enabled
2025/06/10 05:14:20 leak checking: enabled
2025/06/10 05:14:20 net packet injection: enabled
2025/06/10 05:14:20 net device setup: enabled
2025/06/10 05:14:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/10 05:14:20 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/10 05:14:20 USB emulation: enabled
2025/06/10 05:14:20 hci packet injection: enabled
2025/06/10 05:14:20 wifi device emulation: enabled
2025/06/10 05:14:20 802.15.4 emulation: enabled
2025/06/10 05:14:20 fetching corpus: 0, signal 0/0 (executing program)
2025/06/10 05:14:22 starting 8 fuzzer processes
05:14:22 executing program 0:
modify_ldt$read(0x0, &(0x7f0000000000)=""/4096, 0x1000)
modify_ldt$read(0x0, &(0x7f0000001000), 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000001040)='./file0\x00', 0x8)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001080)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = fcntl$getown(r0, 0x9)
mount$9p_fd(0x0, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100), 0x280040, &(0x7f0000001140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}, {@cache_mmap}, {@cachetag}, {@posixacl}, {@afid={'afid', 0x3d, 0x9}}, {@cache_loose}], [{@permit_directio}, {@audit}]}})
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f0000001240)={0x290, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_DESC={0x27c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1b0, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcce}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x33fb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x17c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xca}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfd2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0xb8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbe75}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf157}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7fff}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x8806}, 0x48000)
modify_ldt$read(0x0, &(0x7f0000001580)=""/173, 0xad)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000001640), 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000001680))
r3 = getpgid(r1)
clone3(&(0x7f00000018c0)={0x4040000, &(0x7f00000016c0), &(0x7f0000001700), &(0x7f0000001740), {0x3d}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/53, &(0x7f0000001880)=[r1, r3], 0x2, {r0}}, 0x58)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001940)=<r4=>0x0)
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001980)={r4}, 0xc)
modify_ldt$read(0x0, &(0x7f00000019c0)=""/4096, 0x1000)
pipe2$9p(&(0x7f00000029c0), 0x186000)
r5 = socket(0x23, 0x5, 0x9)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000002b00), r5)

05:14:22 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000100))
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x7, 0x18, 0x5, 0x10000, 0x7ff}, 0x14)
bind$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0x6, 0x2, 0x6, 0x8, 0xfffffff8}, 0x14)
ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'})
socket$unix(0x1, 0x1, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r3)
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x2b0, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @mcast2, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private1, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5e20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "b24a7c6317b581e52ed0dbc3fcc8d40d455449573fddde0af08843"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "e44ebb51a31afbc6acd3ae37f471209b58fec896901f3f19d3"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "749f78d4e4d616c171e57012eaf055ac706db1aca0a4"}}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbb4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff00000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xad}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x40840}, 0x4000)
getpeername$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14)
r5 = syz_open_dev$vcsn(&(0x7f00000007c0), 0x2, 0x200000)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000800)='bic\x00', 0x4)

[  126.178253] audit: type=1400 audit(1749532462.157:7): avc:  denied  { execmem } for  pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:14:22 executing program 5:
r0 = geteuid()
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}], [{@smackfshat={'smackfshat', 0x3d, '-'}}, {@uid_eq={'uid', 0x3d, r0}}, {@smackfshat={'smackfshat', 0x3d, '\xf8%,+'}}, {@subj_user}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@seclabel}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}})
geteuid()
lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180))
getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
geteuid()
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300))
r1 = geteuid()
clock_gettime(0x0, &(0x7f0000001040)={<r2=>0x0, <r3=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)=""/246, 0xf6}], 0x2, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r4=>0x0}}}, @rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000000700), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000780)=""/199, 0xc7}, {&(0x7f0000000880)=""/244, 0xf4}, {&(0x7f0000000980)=""/234, 0xea}], 0x3, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r8=>0x0}}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000b80)=""/27, 0x1b}, {&(0x7f0000000bc0)=""/178, 0xb2}, {&(0x7f0000000c80)=""/245, 0xf5}, {&(0x7f0000000d80)=""/58, 0x3a}, {&(0x7f0000000dc0)=""/40, 0x28}, {&(0x7f0000000e00)=""/67, 0x43}], 0x6, &(0x7f0000000f00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x3, 0x40012042, &(0x7f0000001080)={r2, r3+60000000})
r9 = getgid()
setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000010c0)={r6, r4, r9}, 0xc)
getegid()
pipe2$9p(&(0x7f0000001180)={<r10=>0xffffffffffffffff}, 0x0)
lstat(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
mount$9p_fd(0x0, &(0x7f0000001100)='./file0/file0\x00', &(0x7f0000001140), 0x18000, &(0x7f0000001280)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\xf8%,+'}}], [{@uid_gt={'uid>', r8}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '*/9-'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fowner_gt={'fowner>', r1}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fowner_lt={'fowner<', r11}}]}})
r12 = geteuid()
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000000}, 0xc, &(0x7f0000001440)=[{&(0x7f00000013c0)={0x1c, 0x32, 0x100, 0x70bd25, 0x25dfdbfc, "", [@typed={0xc, 0x8e, 0x0, 0x0, @u64=0x80}]}, 0x1c}, {&(0x7f0000001400)={0x18, 0x29, 0x200, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x55, 0x0, 0x0, @uid=r12}]}, 0x18}], 0x2, 0x0, 0x0, 0x4000}, 0x20040851)
r13 = syz_open_dev$vcsn(&(0x7f0000001540), 0x1, 0x20000)
mount$9p_fd(0x0, &(0x7f00000014c0)='./file0/file0\x00', &(0x7f0000001500), 0x19000, &(0x7f0000001700)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {}, 0x2c, {[{@access_uid}], [{@subj_user={'subj_user', 0x3d, '}]'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_user={'obj_user', 0x3d, '*/9-'}}, {@subj_role={'subj_role', 0x3d, 'mask'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@uid_gt}]}})

05:14:22 executing program 6:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x204400, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"1516c250d82331f934d1cc242799b7b2", 0x0, 0x0, {0x382e, 0x7}, {0xd4a, 0xff}, 0x3, [0x7, 0x98f, 0xfffffffffffffc00, 0x4, 0x7f8aff0800000000, 0x9, 0xbb13, 0x7, 0x8001, 0xffff, 0x1, 0x9, 0xfff, 0x3ff, 0x1f, 0x80]})
ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f0000000180)={0xde, 0x80})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000001c0)=0x18, 0x4)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x841, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x101042, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000002c0)={0xff, 0xe853, 0x7ff, 0x1, 0x3}, 0x14)
sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x84, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x70, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0xbc, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64b62753}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6433729c}]}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve1\x00'}]}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x81}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}]}]}], {0x14}}, 0x1d4}, 0x1, 0x0, 0x0, 0x40004}, 0x4)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000005c0)=<r4=>0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000600)="2d924400d2dfc3dd8f9c1ac21271dc8c43feb633d26de72c7b9dbc11b14d849a626308df8632adcc12c00f6d64ae39a2f3e321ed21813b6964c72c4916f3dac892a5b201dc12017453ba5c11719a78d18b3e8636a5a768a79b2b213098afadd869376a4bbff712fde5f4740d311a7929a687fbfc0745cd71f555fe6604fde84ec9f45b9037489fe93f2a28a23105269f195d014c1d94aab84e41b624e9129bc76a041eac3c902098decd004918edca650a44715e0a4f9836f8664267f11827e6b31a9749", 0xc4)
recvmmsg$unix(r0, &(0x7f0000001d80)=[{{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000880)=""/115, 0x73}, {&(0x7f0000000900)=""/231, 0xe7}, {&(0x7f0000000a00)=""/171, 0xab}], 0x4, &(0x7f0000000b00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r5=>0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000c00)=""/94, 0x5e}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x2, &(0x7f0000001cc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}], 0x2, 0x0, &(0x7f0000001e00)={0x0, 0x3938700})
setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001e40)={r4, 0xffffffffffffffff, r5}, 0xc)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f0000001e80))
sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14, 0x10, 0xa, 0x80, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040085}, 0x1)
r7 = accept$packet(0xffffffffffffffff, &(0x7f0000001fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002000)=0x14)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000002040)=0x2, 0x4)

05:14:22 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x10000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x404000c)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1ec, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3f, @local, 0x4000000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @empty, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @private0, 0x40000}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8671}]}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbcc7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x801}, 0x4)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20001081)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000600)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x5, "3f8c9a19132f86"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001600)={0x0, ""/256, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001800)={0x0, ""/256, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001a00)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r7=>0x0}], 0xff, "74c4db8b069fd5"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002a00)={0x0, ""/256, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000002c00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x0, "ac44b3857499b0"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000003c00)={0x0, ""/256, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000003e00)={0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000004000)={<r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000004200)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r13=>0x0}], 0x0, "e18e6132eb0f8a"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000005200)={0x0, ""/256, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000006da00)={0x7, [{r4, r5}, {r6}, {r7}, {0x0, r8}, {}, {r9}, {0x0, r10}, {}, {}, {0x0, r11}, {r12, r13}, {r14}], 0xfc, "89f6c1194da821"})

05:14:22 executing program 7:
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x3ff, 0x4)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xc0800, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140))
fcntl$getown(r0, 0x9)
recvmmsg$unix(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/177, 0xb1}, {&(0x7f0000000240)=""/101, 0x65}, {0xfffffffffffffffd}, {&(0x7f00000002c0)=""/214, 0xd6}], 0x4, &(0x7f0000000400)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r4=>0x0}}}], 0x118}}, {{&(0x7f0000000540), 0x6e, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/238, 0xee}, {&(0x7f00000006c0)=""/126, 0x7e}], 0x2, &(0x7f0000000780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000840)=""/243, 0xf3}], 0x1, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}], 0x3, 0x60, &(0x7f0000000b80)={0x77359400})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000bc0)={0x3, 'macvlan0\x00', {0xc}, 0x90})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})
syz_open_dev$tty20(0xc, 0x4, 0x1)
sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, 0xb, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000804)
openat$null(0xffffffffffffff9c, &(0x7f0000000d40), 0x10000, 0x0)
clock_gettime(0x5, &(0x7f0000000d80))
mount$9p_fd(0x0, &(0x7f0000000dc0)='\x00', &(0x7f0000000e00), 0x8000, &(0x7f0000000e40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_L}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@cache_loose}, {@access_client}, {@fscache}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'macvlan0\x00'}}, {@pcr={'pcr', 0x3d, 0x1f}}]}})
sched_rr_get_interval(r6, &(0x7f0000000f40))
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000f80), 0x80002, 0x0)
recvmmsg$unix(r9, &(0x7f0000003640)=[{{&(0x7f0000000fc0), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001040)=""/43, 0x2b}, {&(0x7f0000001080)=""/218, 0xda}, {&(0x7f0000001180)=""/68, 0x44}, {&(0x7f0000001200)=""/236, 0xec}, {&(0x7f0000001300)=""/43, 0x2b}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/131, 0x83}, {&(0x7f0000002400)}], 0x8, &(0x7f00000024c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002500)=@abs, 0x6e, &(0x7f0000003580)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1, &(0x7f00000035c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}], 0x2, 0x1, &(0x7f00000036c0)={0x0, 0x3938700})
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000037c0)={0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000039c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r12=>0x0}], 0x7f, "e055fcf17bd51e"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000049c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r13=>0x0}], 0x6, "a4d1b05ab6f07d"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f000006abc0)={0x3, [{}, {0x0, r11}, {}, {}, {r12}, {}, {0x0, r13}], 0x3, "32f270b1cb3d07"})

05:14:23 executing program 2:
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0))
getsockname(0xffffffffffffffff, &(0x7f0000000140)=@phonet, &(0x7f00000001c0)=0x80)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240))
getsockname(0xffffffffffffffff, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000340)=0x80)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000000480)=""/224, 0xe0}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f0000000680)=""/207, 0xcf}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x5, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {<r0=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r1=>0x0}}}, @rights={{0x2c, 0x1, 0x1, [<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x0)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000001940), r2)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x74, r8, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x80)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), r2)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000001e40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001b00)={0x2f4, r9, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}]}, @TIPC_NLA_BEARER={0x180, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x214, @mcast1, 0xfffffffd}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x39}, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0xfc01, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x200, @empty, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x93, @mcast1, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0xdda}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001)
bind$unix(r4, &(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e)
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001f00), 0x2000, 0x0)
setsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000001f40)={r0, 0xffffffffffffffff, r1}, 0xc)
r11 = syz_genetlink_get_family_id$fou(&(0x7f0000001fc0), r3)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002000)={0x98, r11, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)
lstat(&(0x7f0000002140)='./file0\x00', &(0x7f0000002180))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000002200)={0x800, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r12=>0x0}], 0x7, "6986a09060b4e2"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000003200)={0x375562e7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r13=>0x0}], 0x3f, "ec1cbaf061fe7a"})
ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000004200)={{<r14=>0x0, 0x1, 0x8, 0x80000001, 0x4, 0x1, 0x32d, 0x753, 0x7ff, 0x7, 0x2, 0x10000, 0x40, 0x3, 0x20}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000070a00)={0x101, [{0x0, r12}, {0x0, r13}, {}, {r14}], 0x66, "0a9236a663689b"})

05:14:23 executing program 3:
r0 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x1000004, r0)
pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8000, 0x101000)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0xd, 0x0, 0x6}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x6, 0x9, 0x7]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x44001}, 0x2000)
r2 = socket(0x320cadaa957fa57e, 0x7adcb4f59e2011b, 0x8)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x99}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c880)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r3, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x9, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0xc800)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000440)={'syzkaller1\x00'})
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000580)='veth1_to_bond\x00', 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r2)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x128, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x346}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x15f9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xba}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x63}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4004090}, 0x4800)
r6 = syz_open_dev$vcsa(&(0x7f0000000800), 0x9b, 0x200000)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000840)={<r8=>0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000000a40)={0x2, [{r9, r10}, {r8, r10}, {r9}, {r9, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {r8, r10}, {0x0, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {r9}, {r9, r10}, {r9}, {r8, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {0x0, r10}, {r9}, {r8, r10}, {0x0, r10}, {r8, r10}, {r9, r10}, {}, {r8, r10}, {r9, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {r8, r10}, {0x0, r10}, {r9}, {r8, <r11=>r10}, {r8}, {r9, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r8}, {r8, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r8}, {0x0, r10}, {r8, r10}, {r9, r10}, {0x0, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r9}, {r8, r10}, {r8, r10}, {r9, r10}, {r9}, {r9, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {0x0, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {0x0, r10}, {r8, r10}, {r9}, {r9, r10}, {0x0, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {r8}, {r8, r10}, {0x0, r10}, {r8, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {r8}, {r9, r10}, {r8, r10}, {0x0, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r8}, {r8, r10}, {0x0, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {r9}, {r8, r10}, {r8, r10}, {r8}, {r8, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {0x0, r10}, {r8, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {r9}, {r9, r10}, {r8, r10}, {r8, r10}, {0x0, r10}, {r8, r10}, {r8, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {0x0, r10}, {r8, r10}, {r9}, {0x0, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {}, {r8, r10}, {r9, r10}, {r9}, {r9}, {r8, r10}, {r9, r10}, {r9, r10}, {r8}, {r8}, {r9, r10}, {r9, r10}, {r9}, {r9, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {r8}, {r9, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r8, r10}, {r8, r10}, {r8, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {r8}, {r9, r10}, {0x0, r10}, {r9}, {r9, r10}, {r9, r10}, {r9, r10}, {r9, r10}], 0x2, "842fb018622b93"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000006d440)={0x3, [{r8, r10}, {r9, r10}, {r9, r10}, {r9, r10}, {r9, r11}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {r8, r10}, {0x0, r10}, {}, {r9}, {r9}, {r9}, {r8, r10}, {r9, r10}, {r9}, {r8, r10}, {0x0, r10}, {0x0, r10}, {r8}, {r9, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {r8, r10}, {r9}, {r9, r10}, {r9, r10}, {}, {r8, r10}, {r8}, {0x0, r10}, {r8, r10}, {0x0, r10}, {r9}, {0x0, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {}, {r8}, {}, {r8, r10}, {r8}, {r8}, {r9, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {}, {}, {0x0, r10}, {r9, r10}, {r9}, {r8}, {}, {r9, r10}, {r9, r10}, {r8, r10}, {}, {r8}, {r8}, {r9}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r9, r10}, {r9}, {}, {r8, r10}, {r8, r10}, {}, {r8, r10}, {r8}, {}, {r9, r10}, {r8}, {r9}, {}, {r9}, {r8}, {0x0, r10}, {0x0, r10}, {r9, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {r8, r10}, {}, {r9}, {0x0, r10}, {0x0, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r9, r10}, {}, {r8, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r9}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {}, {r9, r10}, {r8}, {r8}, {0x0, r10}, {r9}, {}, {0x0, r10}, {r9}, {r9, r10}, {r8, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8, r10}, {r9, r10}, {0x0, r10}, {}, {r8, r10}, {r9, r10}, {0x0, r10}, {0x0, r10}, {r8}, {r9}, {r9}, {r8}, {0x0, r10}, {r8, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {r9}, {0x0, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {}, {r9, r10}, {0x0, r10}, {r8, r10}, {r9}, {r9}, {r9}, {0x0, r10}, {r9, r10}, {r8}, {}, {0x0, r10}, {r8, r10}, {r8}, {r8}, {r8}, {0x0, r10}, {r8}, {}, {r9, r10}, {r9}, {}, {0x0, r10}, {r8, r10}, {0x0, r10}, {r9, r10}, {}, {r9, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {0x0, r10}, {r9}, {r9, r10}, {0x0, r10}, {r9, r10}, {r8, r10}, {r9, r10}, {0x0, r10}, {r9, r10}, {r9}, {0x0, r10}, {r8, r10}, {r9}, {r9, r10}, {0x0, r10}, {0x0, r10}, {}, {r8}, {r9}, {r9, r10}, {r8, r10}, {}, {r9, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r8}, {}, {r9, r10}, {r9, r10}, {}, {r9, r10}, {r9, r10}, {0x0, r10}, {}, {0x0, r10}, {r8, r10}, {}, {r8, r10}, {0x0, r10}, {}, {}, {0x0, r10}, {r8, r10}, {r8, r10}, {r8, r10}, {0x0, r10}, {}, {0x0, r10}, {r9, r10}, {r9, r10}, {r8, r10}, {r8}, {r9, r10}, {r8}, {r9}, {}, {0x0, r10}, {r9}, {r8, r10}, {r8}, {r8, r10}, {r9, r10}, {}, {r8, r10}, {r8, r10}, {r8, r10}, {r9, r10}, {r8, r10}, {r9}, {r8}, {r8, r10}, {r8, r10}], 0x40, "28f43023fba3cd"})

[  127.372377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  127.375944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  127.379191] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  127.385227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  127.391221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  127.614616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.623106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.628226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.633469] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  127.638060] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.645376] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.648860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  127.650131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  127.664999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  127.683708] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  127.781476] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  127.793867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  127.806664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  127.835638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  127.837452] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  128.043821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  128.057352] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  128.064091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  128.075102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  128.097013] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  128.264379] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  128.284096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  128.300052] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  128.331971] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  128.355938] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  128.359021] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  128.363029] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  128.372609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  128.373934] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  128.377977] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  128.440620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  128.477208] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  128.487787] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  128.514383] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  128.533179] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  129.450903] Bluetooth: hci0: command tx timeout
[  129.706141] Bluetooth: hci2: command tx timeout
[  129.707754] Bluetooth: hci1: command tx timeout
[  129.961683] Bluetooth: hci3: command tx timeout
[  130.154914] Bluetooth: hci4: command tx timeout
[  130.412619] Bluetooth: hci5: command tx timeout
[  130.473642] Bluetooth: hci6: command tx timeout
[  130.602748] Bluetooth: hci7: command tx timeout
[  131.498165] Bluetooth: hci0: command tx timeout
[  131.754315] Bluetooth: hci2: command tx timeout
[  131.755567] Bluetooth: hci1: command tx timeout
[  132.009631] Bluetooth: hci3: command tx timeout
[  132.201876] Bluetooth: hci4: command tx timeout
[  132.458485] Bluetooth: hci5: command tx timeout
[  132.521709] Bluetooth: hci6: command tx timeout
[  132.650632] Bluetooth: hci7: command tx timeout
[  133.545853] Bluetooth: hci0: command tx timeout
[  133.801613] Bluetooth: hci1: command tx timeout
[  133.802100] Bluetooth: hci2: command tx timeout
[  134.058809] Bluetooth: hci3: command tx timeout
[  134.249945] Bluetooth: hci4: command tx timeout
[  134.505596] Bluetooth: hci5: command tx timeout
[  134.569601] Bluetooth: hci6: command tx timeout
[  134.697678] Bluetooth: hci7: command tx timeout
[  135.593627] Bluetooth: hci0: command tx timeout
[  135.849616] Bluetooth: hci2: command tx timeout
[  135.851876] Bluetooth: hci1: command tx timeout
[  136.105946] Bluetooth: hci3: command tx timeout
[  136.298563] Bluetooth: hci4: command tx timeout
[  136.553953] Bluetooth: hci5: command tx timeout
[  136.617946] Bluetooth: hci6: command tx timeout
[  136.745775] Bluetooth: hci7: command tx timeout
[  187.907828] syz-executor.6 (289) used greatest stack depth: 24784 bytes left
[  189.883152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.886055] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.895099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.904251] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.915819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  190.085100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  190.088437] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  190.092019] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  190.100328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  190.109353] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  190.225930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  190.240158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  190.245059] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  190.260296] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  190.265374] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  190.345917] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  190.358421] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  190.373069] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  190.407065] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  190.415063] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  190.496181] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  190.508674] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  190.527309] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  190.585721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  190.593406] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  190.783360] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  190.788199] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  190.790710] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  190.800063] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  190.810488] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  190.822065] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  190.824398] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  190.840384] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  190.878498] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  190.881203] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  190.884946] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  190.895112] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  190.897931] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  190.924895] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  190.935351] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  191.978032] Bluetooth: hci0: command tx timeout
[  192.169607] Bluetooth: hci1: command tx timeout
[  192.297891] Bluetooth: hci2: command tx timeout
[  192.553615] Bluetooth: hci3: command tx timeout
[  192.681698] Bluetooth: hci4: command tx timeout
[  193.001721] Bluetooth: hci5: command tx timeout
[  193.001781] Bluetooth: hci7: command tx timeout
[  193.065648] Bluetooth: hci6: command tx timeout
[  194.027587] Bluetooth: hci0: command tx timeout
[  194.217878] Bluetooth: hci1: command tx timeout
[  194.345808] Bluetooth: hci2: command tx timeout
[  194.601644] Bluetooth: hci3: command tx timeout
[  194.730735] Bluetooth: hci4: command tx timeout
[  195.049620] Bluetooth: hci5: command tx timeout
[  195.050277] Bluetooth: hci7: command tx timeout
[  195.114030] Bluetooth: hci6: command tx timeout
[  196.074836] Bluetooth: hci0: command tx timeout
[  196.266030] Bluetooth: hci1: command tx timeout
[  196.395713] Bluetooth: hci2: command tx timeout
[  196.649845] Bluetooth: hci3: command tx timeout
[  196.777813] Bluetooth: hci4: command tx timeout
[  197.097619] Bluetooth: hci7: command tx timeout
[  197.097705] Bluetooth: hci5: command tx timeout
[  197.161939] Bluetooth: hci6: command tx timeout
[  198.121707] Bluetooth: hci0: command tx timeout
[  198.313662] Bluetooth: hci1: command tx timeout
[  198.441704] Bluetooth: hci2: command tx timeout
[  198.698837] Bluetooth: hci3: command tx timeout
[  198.825610] Bluetooth: hci4: command tx timeout
[  199.146931] Bluetooth: hci7: command tx timeout
[  199.146970] Bluetooth: hci5: command tx timeout
[  199.209581] Bluetooth: hci6: command tx timeout
[  252.159065] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  252.167918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  252.173109] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  252.182406] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  252.186461] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  252.477685] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  252.482016] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  252.486175] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  252.498961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  252.511326] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  252.742453] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  252.747751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  252.751830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  252.762299] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  252.769889] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  252.892082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  252.897845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  252.901413] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  252.905897] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  252.916352] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  252.924376] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  252.926702] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  252.982146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  252.989946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  252.999704] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  253.076147] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  253.104821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  253.116808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  253.170836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  253.184016] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  253.214808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  253.224786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  253.279954] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  253.297067] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  253.308209] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  253.368969] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  253.383145] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  253.461881] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  253.478384] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  253.540099] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  254.249617] Bluetooth: hci0: command tx timeout
[  254.569611] Bluetooth: hci1: command tx timeout
[  254.825598] Bluetooth: hci2: command tx timeout
[  255.017931] Bluetooth: hci4: command tx timeout
[  255.081641] Bluetooth: hci3: command tx timeout
[  255.529740] Bluetooth: hci5: command tx timeout
[  255.594600] Bluetooth: hci6: command tx timeout
[  255.657805] Bluetooth: hci7: command tx timeout
[  256.297871] Bluetooth: hci0: command tx timeout
[  256.617781] Bluetooth: hci1: command tx timeout
[  256.874551] Bluetooth: hci2: command tx timeout
[  257.065807] Bluetooth: hci4: command tx timeout
[  257.130477] Bluetooth: hci3: command tx timeout
[  257.577863] Bluetooth: hci5: command tx timeout
[  257.641731] Bluetooth: hci6: command tx timeout
[  257.706798] Bluetooth: hci7: command tx timeout
[  258.346823] Bluetooth: hci0: command tx timeout
[  258.665738] Bluetooth: hci1: command tx timeout
[  258.922605] Bluetooth: hci2: command tx timeout
[  259.115560] Bluetooth: hci4: command tx timeout
[  259.177583] Bluetooth: hci3: command tx timeout
[  259.627712] Bluetooth: hci5: command tx timeout
[  259.689574] Bluetooth: hci6: command tx timeout
[  259.753934] Bluetooth: hci7: command tx timeout
[  260.394952] Bluetooth: hci0: command tx timeout
[  260.713711] Bluetooth: hci1: command tx timeout
[  260.969580] Bluetooth: hci2: command tx timeout
[  261.161589] Bluetooth: hci4: command tx timeout
[  261.225825] Bluetooth: hci3: command tx timeout
[  261.674885] Bluetooth: hci5: command tx timeout
[  261.738053] Bluetooth: hci6: command tx timeout
[  261.801823] Bluetooth: hci7: command tx timeout
[  314.561694] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  314.566960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  314.573143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  314.582659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  314.590131] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  314.712157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  314.717495] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  314.725170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  314.737171] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  314.741503] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  314.815055] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  314.838804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  314.844236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  314.859807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  314.868113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  314.954028] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  314.962435] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  315.006852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  315.014076] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  315.019853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  315.023654] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  315.048324] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  315.063220] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  315.072718] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  315.081322] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  315.082841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  315.105012] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  315.108209] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  315.110863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  315.112348] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  315.134124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  315.157460] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  315.173107] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  315.201074] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  315.227077] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  315.253290] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  315.256018] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  315.269003] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  315.287207] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  315.292334] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  316.650036] Bluetooth: hci0: command tx timeout
[  316.778679] Bluetooth: hci1: command tx timeout
[  316.969783] Bluetooth: hci2: command tx timeout
[  317.225664] Bluetooth: hci4: command tx timeout
[  317.226425] Bluetooth: hci3: command tx timeout
[  317.289632] Bluetooth: hci6: command tx timeout
[  317.290734] Bluetooth: hci5: command tx timeout
[  317.353617] Bluetooth: hci7: command tx timeout
[  318.698862] Bluetooth: hci0: command tx timeout
[  318.829660] Bluetooth: hci1: command tx timeout
[  319.017698] Bluetooth: hci2: command tx timeout
[  319.274919] Bluetooth: hci4: command tx timeout
[  319.275407] Bluetooth: hci3: command tx timeout
[  319.338870] Bluetooth: hci5: command tx timeout
[  319.339329] Bluetooth: hci6: command tx timeout
[  319.402797] Bluetooth: hci7: command tx timeout
[  320.746751] Bluetooth: hci0: command tx timeout
[  320.875366] Bluetooth: hci1: command tx timeout
[  321.066590] Bluetooth: hci2: command tx timeout
[  321.322804] Bluetooth: hci3: command tx timeout
[  321.323294] Bluetooth: hci4: command tx timeout
[  321.386603] Bluetooth: hci6: command tx timeout
[  321.387055] Bluetooth: hci5: command tx timeout
[  321.450871] Bluetooth: hci7: command tx timeout
[  322.794575] Bluetooth: hci0: command tx timeout
[  322.922539] Bluetooth: hci1: command tx timeout
[  323.114617] Bluetooth: hci2: command tx timeout
[  323.370648] Bluetooth: hci4: command tx timeout
[  323.371138] Bluetooth: hci3: command tx timeout
[  323.434901] Bluetooth: hci6: command tx timeout
[  323.435359] Bluetooth: hci5: command tx timeout
[  323.498585] Bluetooth: hci7: command tx timeout
[  377.087077] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  377.093455] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  377.098407] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  377.106991] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  377.112285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  377.340569] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  377.344141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  377.346674] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  377.354805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  377.358976] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  377.559494] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  377.564322] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  377.571479] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  377.577495] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  377.584618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  377.656395] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  377.657687] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  377.667676] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  377.667806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  377.694986] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  377.703802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  377.712048] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  377.719024] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  377.725166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  377.737866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  377.740547] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  377.743330] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  377.760498] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  377.767997] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  377.777415] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  377.890049] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  377.938914] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  377.975340] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  378.044278] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  378.067474] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  378.192602] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  378.216103] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  378.282197] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  378.378772] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  378.459072] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  379.180703] Bluetooth: hci0: command tx timeout
[  379.434663] Bluetooth: hci1: command tx timeout
[  379.690888] Bluetooth: hci2: command tx timeout
[  379.817638] Bluetooth: hci5: command tx timeout
[  379.817691] Bluetooth: hci4: command tx timeout
[  379.818456] Bluetooth: hci3: command tx timeout
[  380.201614] Bluetooth: hci6: command tx timeout
[  380.587562] Bluetooth: hci7: command tx timeout
[  381.227103] Bluetooth: hci0: command tx timeout
[  381.482594] Bluetooth: hci1: command tx timeout
[  381.738857] Bluetooth: hci2: command tx timeout
[  381.865597] Bluetooth: hci3: command tx timeout
[  381.865693] Bluetooth: hci4: command tx timeout
[  381.866096] Bluetooth: hci5: command tx timeout
[  382.250698] Bluetooth: hci6: command tx timeout
[  382.633639] Bluetooth: hci7: command tx timeout
[  383.273670] Bluetooth: hci0: command tx timeout
[  383.529586] Bluetooth: hci1: command tx timeout
[  383.787604] Bluetooth: hci2: command tx timeout
[  383.915571] Bluetooth: hci4: command tx timeout
[  383.915601] Bluetooth: hci3: command tx timeout
[  383.916066] Bluetooth: hci5: command tx timeout
[  384.297600] Bluetooth: hci6: command tx timeout
[  384.681576] Bluetooth: hci7: command tx timeout
[  385.322636] Bluetooth: hci0: command tx timeout
[  385.578844] Bluetooth: hci1: command tx timeout
[  385.834699] Bluetooth: hci2: command tx timeout
[  385.961833] Bluetooth: hci3: command tx timeout
[  385.962194] Bluetooth: hci4: command tx timeout
[  385.962640] Bluetooth: hci5: command tx timeout
[  386.347703] Bluetooth: hci6: command tx timeout
[  386.730668] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
05:19:29  Registers:
info registers vcpu 0
RAX=0000000000000dee RBX=000000000000b99b RCX=000000000000b99b RDX=0000000000001cf1
RSI=ffff88806ce37068 RDI=ffff88806ce37068 RBP=ffff88806ce36fc0 RSP=ffff88806ce08c50
R8 =000000000041c000 R9 =0000000000107000 R10=ffffffff8641f057 R11=ffff88806ce37058
R12=0000000000000001 R13=ffff88806ce3705c R14=00000000000000ff R15=0000000000000004
RIP=ffffffff814d092d RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3cff5b1dc8 CR3=000000003206f000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e
XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249
XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff81b2244d RBX=ffffffff81604870 RCX=ffff88802d00f19c RDX=1ffff11005a01e54
RSI=ffffffff81b2244d RDI=ffffffff81b2244d RBP=ffff88802d00f2e0 RSP=ffff88802d00f248
R8 =0000000000000001 R9 =ffff88802d00f288 R10=000000000003b6cd R11=0000000000025b0a
R12=ffff88802d00f310 R13=0000000000000000 R14=ffff88801547d280 R15=0000000000092cc0
RIP=ffffffff812d97bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fee8536c540 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe2c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7f39492269 CR3=0000000032b52000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000