Warning: Permanently added '[localhost]:41001' (ECDSA) to the list of known hosts.
2025/06/12 02:04:24 fuzzer started
2025/06/12 02:04:25 dialing manager at localhost:45945
syzkaller login: [  102.284562] cgroup: Unknown subsys name 'net'
[  102.443523] cgroup: Unknown subsys name 'cpuset'
[  102.485750] cgroup: Unknown subsys name 'rlimit'
2025/06/12 02:04:41 syscalls: 2214
2025/06/12 02:04:41 code coverage: enabled
2025/06/12 02:04:41 comparison tracing: enabled
2025/06/12 02:04:41 extra coverage: enabled
2025/06/12 02:04:41 setuid sandbox: enabled
2025/06/12 02:04:41 namespace sandbox: enabled
2025/06/12 02:04:41 Android sandbox: enabled
2025/06/12 02:04:41 fault injection: enabled
2025/06/12 02:04:41 leak checking: enabled
2025/06/12 02:04:41 net packet injection: enabled
2025/06/12 02:04:41 net device setup: enabled
2025/06/12 02:04:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/12 02:04:41 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/12 02:04:41 USB emulation: enabled
2025/06/12 02:04:41 hci packet injection: enabled
2025/06/12 02:04:41 wifi device emulation: enabled
2025/06/12 02:04:41 802.15.4 emulation: enabled
2025/06/12 02:04:41 fetching corpus: 0, signal 0/0 (executing program)
2025/06/12 02:04:42 starting 8 fuzzer processes
02:04:42 executing program 0:
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x81, "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"})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x978, 0x2, 0x3, 0x2, 0x5, 0xfffe}, 0x20)
r1 = memfd_secret(0x0)
openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
fcntl$getflags(r0, 0x40a)
r2 = fspick(r1, &(0x7f0000000300)='./file0\x00', 0x1)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6e4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2690eb91}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000081)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @mcast2, 0x81}, 0x1c)
r3 = dup3(0xffffffffffffffff, r1, 0x80000)
ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f00000004c0)=0x4)
r4 = syz_open_dev$mouse(&(0x7f0000000500), 0xa8e0, 0x3c1801)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0)
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000580))
r5 = syz_mount_image$nfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x2f, 0x5, &(0x7f0000000940)=[{&(0x7f0000000640)="c1b846440d143f352a4376ad2ef9720e58f50d277a03f9ee5fe4fc76eb96fe6a4aab9f3f4bcf060613aeb27a1898d11bc3cb1c8818ab9c0fa1b9e0bd1d1cbce4304ce64ec96cfe241a5f803ac735468da80d34e461a0d18843a85812ac788893e03f58c6f1b11e669fb71d6440bb494e8f9c780bea51c754367f5d91554727deb6c86a5750d16a6eeede3aa895b20316e3dd1c3781c89c4c55aa7ecafcbf7f76495d20e90c8324d7a3074b256b5bec84f7db1025e8579be28ad6c2a83874ded47d03e12e105f2810642983587775f09d6e95007ea77d2da8b07b4ab7d4", 0xdd, 0x5927}, {&(0x7f0000000740)="8acc006e7422903e4333f4ffebb574e5335f80e4f5b4245effba133ea795152233a5764be70ddd1cbf3e8534e2014afbbd32aae33e0c4a0f945226134eb48e00fd546acfd617fc56754106dc9b8aec90", 0x50}, {&(0x7f00000007c0)="f11c2b1eb17ed95bad577f0ca340d55601cf285342aef005081f3831ac0dd2b91b9ddcaeaa18f14ebdc9888888a6e778b415470cd559180fb1172bff2d33d6abf4c53b", 0x43, 0xc2}, {&(0x7f0000000840)="984cbe43947c9df4d5dc4664269587ab354a04eb5238fabb889401d1eae53a6685325c26268188b29177fae1f1539ce20a6bea20208b4fad60eccbb09a4a9e89739bb70b3a14c451", 0x48, 0xffffffffffffffff}, {&(0x7f00000008c0)="3cb9e221e5530ad996a991bad262a59660dcaafa6a2d75399344ceef0f55af7690406ca50cd5942dd07621308f9a7cd37b5240d6709eaf0479d7950611a6bdb4cd504dd91e92a485432da9418196d365364e3601718999e513f94997d61fc56580ede7e1a5eecc9d042672335eae8f9173b28a", 0x73, 0x6c}], 0x2001008, &(0x7f00000009c0)={[{}, {'.-:[{,+'}], [{@obj_user={'obj_user', 0x3d, 'tasks\x00'}}, {@hash}]})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r5, @in_args={0x2}}, './file0\x00'})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000010c0), 0x40, 0x0)
setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000001100)=0x6fcd, 0x2)

02:04:42 executing program 1:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x224, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x20f, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @mic={0x8c, 0x18, {0xc56, "862d617345e2", @long="fa1320bc21c6715c94f9a0a3ac4b49aa"}}, @prep={0x83, 0x1f, @not_ext={{}, 0x3, 0x0, @device_b, 0x1, "", 0xc55, 0x7fff, @device_b, 0xfffffff8}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0xf, 0x8}}, @random_vendor={0xdd, 0xed, "d2e8e64f6678678e108c44e670bf41679c7342aa8cd847623af4e5cbcbddaf0d1468a9f2608585663d86475f047e25c5a8905befb132b2a853b78997d06b94f1cd8363ada99f06878962eb42b6749fd79cf7f6354949570547510949fb0496232fc82d70f0bf1b9b43490c1ed10ec5ffa0397851c123f15fbd4542bce85f1a9fcb1d802a2de8e5f55bdf65a0ad1c663f63fc06058abf5bf22caca33194b927bfd736e622a6390177ca9c03c61b0613dc6ea26f140c7b2fcbeaa6fd4160a14682f290d8e31a6aa036aa78adb225e45acf9687b8f7c35fc4be2f3225c37e720a9909e274c2a2afd3b30082c3e3cd"}, @perr={0x84, 0xc2, {0x88, 0xc, [@not_ext={{}, @broadcast, 0x0, "", 0x29}, @ext={{}, @device_b, 0x6, @device_a, 0x10}, @not_ext={{}, @device_b, 0x40, "", 0x5}, @not_ext={{}, @device_b, 0x5, "", 0x2}, @ext={{}, @device_b, 0x5, @broadcast, 0x25}, @ext={{}, @device_b, 0x200, @device_a, 0x12}, @ext={{}, @broadcast, 0x101, @device_a, 0x30}, @not_ext={{}, @device_b, 0x2, "", 0x9}, @ext={{}, @broadcast, 0x4, @device_a, 0x2}, @not_ext={{}, @broadcast, 0xc4, "", 0x11}, @ext={{}, @device_a, 0x6, @device_a, 0x3e}, @not_ext={{}, @broadcast, 0x10001, "", 0x11}]}}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20000891}, 0x8889)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, @in_args={0x2}}, './file0\x00'})
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000005c0)=0x6, 0x4)
mknodat(r2, &(0x7f0000000600)='./file0\x00', 0x2, 0x8)
ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000640)=0x3)
ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000680))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000700)={0x9, 0x2, 0x1})
mount$9p_rdma(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x228602c, &(0x7f0000000800)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@common=@version_9p2000}, {@sq={'sq', 0x3d, 0x1ad1fb7d}}, {@common=@aname}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '\''}}, {@permit_directio}, {@measure}]}})
syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r3)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000900)={{0x1, 0x1, 0x18, <r4=>r0, {0x8001}}, './file0\x00'})
write$P9_RLCREATE(r4, &(0x7f0000000940)={0x18, 0xf, 0x2, {{0x2, 0x0, 0x8}, 0x4}}, 0x18)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r4)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40080)
r6 = open(&(0x7f0000000ac0)='./file0\x00', 0x400, 0xe)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'})
sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0804}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000c40)=[@mss={0x2, 0xb1aa}], 0x1)

[  119.728836] audit: type=1400 audit(1749693882.978:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
02:04:42 executing program 2:
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x36}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x48000)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x54}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x80}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x225}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
r1 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000002c0)=""/119)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000340))
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='freezer.self_freezing\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x22c, 0x0, 0x600, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x12fb, 0x43}}}}, [@NL80211_ATTR_VENDOR_DATA={0xf0, 0xc5, "8665ef24b4c104a700b1932fb0970ad06e4a1dcc3b465c23e79c6bc7645b3aa58433c4e857350b949bd223b19c51b6fb92cba5f14c678fd917a032223f7b4140660dc038eba168db0f743f81dbccdac2bf62a16314b37e3859ebadfcd3c56aa05295c80c07e803e9d16bfb37ee079658959869c918805116c9a603580a5143da6bf78af5da9e910ce7a35faeeaa6fc4ac7c08fa05e50e5e7ff71bd512c4ef5fccf93a8c6bf9eeafd52ebb39bc98f559d537e81d48dd0d9e83f60b15631e984f4aec188e1b5c123fc69bd8225efedb27a456ab40a0c9b7111d7b1c1b8e15b236a372e96ccc84977ee525280bf"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_DATA={0xfa, 0xc5, "d8015c1ed4f01e4bc8b70f6c6e1262b00c931d969aebefc9c954bce58ee2b8e110e4c09156b8963052b755d77eb80a75ab1f779a6071d3fea9e7b52d79c15a5078d3efd28793d9661cc0afda104e0104de1884a9ceb7bb375f3328465c8d15b7b05846263063d198319243f94d86cca9604090af89d5927a62bd33272602c3088e097bb4ba0f54814d988ae59c493db3ea6e50fe73b28d525d07015c3a17ae6a0e8787ae141a1f5d687e83b61018a61c2abd6814685bb38ee2c8f0ecdbd51334a1b004e3087c2febdc4125f185b0e8e61bced429de4b8b26fa8736336cda4b5d7831088dc3cd7af63a1abd8863fe656fc69c1bedab78"}]}, 0x22c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000)
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000700)=""/157)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x5)
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xf0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6026}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbdc3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x104, 0x14, 0x1, 0x70bd27, 0x25dfdbfc, {0xa, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "7ec4e961be252c9e9eaf41fac28ae926697ba206ac19d4ed88f938b5dd59c1809a3df0c6e4c10c2951244a796906cc2ec180086722253a6640a60a3a62e5e94dd65f4507975e040fd296f2b77f1a4a1f22db9e845b8d1cc81aa00c4fcf873ad669134a40c2b09c94b86f0ae37c6a7462deb8160daa4bb2b4ad087c5520ffe17aad69b40d6b8be3e3e4c94fd5ff7956da8b226f44c6ac0a210860bb5712f5c1526b9c7c003b1f3db6e604e88200f96922c7b51132cad6599036529317aaf1c9a141b0c9bf2cd215d774a593cc3f8cd8317d60b70c1fcb6501"}, @INET_DIAG_REQ_BYTECODE={0x14, 0x1, "1bbb8422603949a77169799032306608"}]}, 0x104}, 0x1, 0x0, 0x0, 0x20040010}, 0x40051)
r5 = socket$inet(0x2, 0xa, 0xe2)
getsockopt$sock_timeval(r5, 0x1, 0x34, &(0x7f0000000bc0), &(0x7f0000000c00)=0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x60, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd76}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1373}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1176}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5b0}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x37}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x44150}, 0x20000041)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), r2)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xd4, r6, 0x211, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x11}, 0x8000)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0)

02:04:43 executing program 3:
syz_usb_connect$uac1(0x1, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x40, 0x90, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0x80, 0x40, "41d3", ':'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x2, 0x0, 0xfc, "989e792850c8"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x0, 0x7, "bdd82c", "b91d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x9, 0x0, {0x7, 0x25, 0x1, 0x80, 0xfa, 0xa9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x22, 0x3, 0x8, 0x5, "709f", "f22233"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x4, 0x3f, {0x7, 0x25, 0x1, 0x2, 0x7, 0x6}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x7, 0x0, 0x80, 0x10, 0x81}, 0x65, &(0x7f0000000100)={0x5, 0xf, 0x65, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xe4, 0x3, 0x5d, 0xfc01, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x67, 0x800}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x6, 0xfe60}, @ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0xffff, 0xf00, 0x7, [0xffc0, 0xf, 0xf, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "d9bf257006d744cac2bc991ce025d28a"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "14c0380fbc5c39e9810ddd61d12d3963"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3001}}]})
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x1f)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x20, 0x2, 0x7, 0x1, 0x2, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x3, 0x1f, 0x20}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x0, 0x7}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x40, 0x80, 0x6, 0x10, 0x4}, 0xfc, &(0x7f0000000280)={0x5, 0xf, 0xfc, 0x2, [@generic={0xdf, 0x10, 0x2, "c9b028519e0c8e0cb646fa233f654585186e9287b22f4ec49d30a6979c69ea335d790144ccfae5f74d423f745d22c85d2db62e305963fef1b7a75f6ce8e422567e442f3295ac279521f690bc88d2fc5ecc5f32d2a6b12ec600629e0412d89e77e33bbc34aa42c6b246a15e02a4e327539f364cbc0f37eff7adb3b8b9ea11d0171063bc6142cb257cba548c60c31d229c9d86ce9cd6b813cc40eb7eb55d3ca9566e4634fad563b77dcdaa6aaa12b0c999a345daf172ff58a251a25444d425cad53e5ae39b7524759de2fbd2a496043e3975eeb963a0edf88846eb2e84"}, @generic={0x18, 0x10, 0xa, "acd133875d6deb7fc8d75dfa6d3604b028a680c7a0"}]}, 0x2, [{0x2a, &(0x7f0000000380)=@string={0x2a, 0x3, "399c8265dc41455db10b00dd35564f34c9698421d7fda25be4f1c5ab3b675cbf187ba0dfbb076048"}}, {0x1b, &(0x7f00000003c0)=@string={0x1b, 0x3, "4d7e4accb8cce12314f4cd74a52acbce8636c32c389d33ffec"}}]})
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000440)={0x0, 0x8f})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000001440)={0x12})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001900)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000001940)={0x3, 0x100, 0x6, 0x47eb, 0x453, 0x4})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001980)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000019c0)={0x1, 0x1, 0x6, 0x1, 0x3b24, 0x3})
sendto(r1, &(0x7f0000001a00)="61fe32f6041ba33ee4d5ec0462fd4bc55fb040b589e31a225fd55c8d1cc44247e99761adcb36ff90ec5d766b8304e903c870cbae5f1b3854e17245a6c12bf0d6859221d0f86d54550cf50522b25a2e7bc3582dd5ecee75ca1c8d8914d9accec296e1d70cb7f998030c15a18e5f8de0858e9561d1659d774168c71f0e4dbeafb134f063c2deece89dd248dd70fdaf309ef989be6591fac909976cd4a240aff721e0bfc02a856c93134c4cd02772a8f1b6c8373830d9c00de218d4df09009285", 0xbf, 0x40000, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001b80)={'sit0\x00', &(0x7f0000001b00)={'syztnl0\x00', <r2=>0x0, 0x4, 0x0, 0x8, 0x1a5c0, 0x50, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7, 0x8000, 0x2, 0x3}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001bc0)={'bond_slave_1\x00', <r3=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001c00)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000001d00)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001d40)={'batadv_slave_0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001e40)={'team0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001e80)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000021c0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002180)={&(0x7f0000001ec0)={0x298, 0x0, 0x50b, 0x4, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa002a5f57643a5b2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4050}, 0x4008010)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0xc0, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "8d4cb45af15a5b322952286b0a09ea7d"}, @NL80211_ATTR_PMK={0x14, 0xfe, "61350fb8f491f177a710981008bcbfd4"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f797a55c29606e93a7625a1fafaac43c"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "907ccb76fad8243f14da3ce6cb8dbf39"}, @NL80211_ATTR_PMK={0x14, 0xfe, "a7d8c7aeb7a090e0970355e1665d408b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "0990ab1186e17bbe2922860c85d19fd0"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "1d5311dde74df629e1a2fc829adbd96d"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4880}, 0x48095)
lsetxattr$trusted_overlay_nlink(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0), &(0x7f0000002400)={'L-', 0xf18}, 0x16, 0x1)

02:04:43 executing program 4:
read(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000001000)={0x5, 0x1000, 0x3, 0x0, 0x6, [{0x0, 0x5, 0x6971a07d, '\x00', 0x2}, {0x2, 0x800, 0x6, '\x00', 0x2}, {0x9, 0x7ff, 0x8, '\x00', 0x1902}, {0x8, 0x101, 0x6, '\x00', 0xd08}, {0x2, 0x8, 0x6aa, '\x00', 0x4}, {0x227, 0x0, 0xc65e, '\x00', 0x1000}]})
r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close_range(r1, r2, 0x2)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000011c0)={0xf, 0x1f, 0x2, 0xfae0}, 0xf)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000001200)=@abs, &(0x7f0000001280)=0x6e, 0x80000)
ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x5)
setxattr$trusted_overlay_opaque(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300), &(0x7f0000001340), 0x2, 0x1)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380), 0xb00, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000001480)={&(0x7f00000013c0), 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000001500)={{0x1, 0x1, 0x18, <r6=>r3, {0xffffffffffffffff, 0xee00}}, './file0\x00'})
linkat(r5, &(0x7f00000014c0)='./file0\x00', r6, &(0x7f0000001540)='./file0\x00', 0x1400)
ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000001580))
ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000015c0))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r7, 0x40049421, 0x2)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x74, 0x1, 0x8, 0x101, 0x0, 0x0, {0xd, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x89}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4040041)

02:04:43 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x3a081, 0x0)
openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x349441, 0x0)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000080)="34ad972d607073867d6cfcea22633c41bee3dcb8b006c1832e980a7d80c53b8330e29fce57f82ec49ec2f178019072fb305977f839d1642c54b67c6af92a1412dfd1431fdb4654ec5af6223aea4e191671ba30d0ab9452805a533d7df32055d3649c179c863020b5266741e57d19b22f80f03c64e888f781879308bc2e430b955578a891a429de4be4a6b50878d42b9250d12e740a8027")
pipe2(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000180)={0x50000001})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x3}}, './file0\x00'})
ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000200))
move_mount(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
lseek(r0, 0xbb2e, 0x2)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f00000002c0)={0x2, 0x1, 0x1d})
setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000300)={0x3f, 0x9, 0x7}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000340)={'syz0', "92cc615ccac2edba5411511aec4f7ff888415e79ba9089fc281209611cb459b6c1d0090987af27c65aa9ea036a7c743d435c543da370f614c412cfc4f203bd3a4965342ca8b047505e6438191c506a651a1afaee901d41dd13f07fe43299a72086e48dc9286194e83dfa712fbeb7a32d4ea44d69672b321f3a87e90ff4ce2d23fb645e775164c20471c98493a1693810963fd040475c9c2a1359d3f70747ab061f9f7fdf6b"}, 0xa9)
r4 = accept4$bt_l2cap(r0, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80800)
close(r4)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file0\x00'})
sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x3f2, 0x200, 0x70bd29, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000801}, 0x2400c000)
ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000005c0))
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x101002, 0x0)
ioctl$KDGKBMETA(r6, 0x4b62, &(0x7f0000000640))
write$cgroup_pressure(r6, &(0x7f0000000680)={'some', 0x20, 0x1, 0x20, 0x8001}, 0x2f)

02:04:43 executing program 6:
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000))
vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)="42877557597ca4ccaa1d643d022e4e5cb564b1d94748af75aa040c4ebcdae1606daacffcdb1372cb4328fd3f26b3d4e917869d5d0570e0fb20c5aa3e54740b6f2ebef5aebf766782ce2e3e44463072496dcc31954398583dfc1cb14f8fba5e655e6e3a1f842601f72cb3411059d6245282655f0a06154224e56aba8b5ce29f08f49248adc3943a408c5e107be03e685a5a2eca3520fb4cac8ecc41324e314c37b1a19ab923d4c85fa47d6f6aaf2c0caf9ccad19712b16c59ebc1249d6919b69cbf0a99ae6b3898623b167edc1a62ffe9044c5d3ad54072647640ddccbdd81161ff16088f9f54d90948e60e", 0xeb}], 0x1, 0x9)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x4, 0x2}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200))
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000300)={0x3f, 0x1, 0x8, 0x8, 0x4, 0x4})
fchmod(0xffffffffffffffff, 0x160)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000380)=0x101, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000003c0)='}]\x00', &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000440)={0x0, 0xffffffffffff7f85, 0x3, 0x0, 0x0, [{{r2}, 0x100000001}, {}, {{r1}, 0x2a}]})
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000004c0)=0x90)
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000500)={'veth1_virt_wifi\x00', {0x2, 0x0, @local}})
write$P9_RRENAME(r0, &(0x7f0000000540)={0x7, 0x15, 0x2}, 0x7)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
write$P9_RXATTRWALK(r0, &(0x7f0000000580)={0xf, 0x1f, 0x1, 0x1000}, 0xf)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000005c0)=<r3=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={<r4=>0x0}, &(0x7f0000000640)=0xc)
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000680)={r2, r1, 0x6})
write$P9_RLERROR(r2, &(0x7f00000006c0)={0x9, 0x7, 0x2}, 0x9)

02:04:43 executing program 7:
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000000))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={<r0=>0x0}, &(0x7f0000000080)=0xc)
kcmp(r0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10, 0x80000)
getsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000001c0))
getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000240)=0x28)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/hid_sunplus', 0x200, 0x0)
ioctl$TCSETSW(r2, 0x5403, &(0x7f00000002c0)={0xffffffff, 0x8000, 0x7, 0x1ff, 0x19, "878a281912820e741b2b48831cd84ab544d2f8"})
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000300)={0x3, 0x1, 0x1000, 0x401, 0x2, 0x5})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340))
r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000400)=0x80, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000440), &(0x7f0000000480)=0xc)
sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x758c35057ccf4bc6}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3e}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5be}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x2004c090)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000600))
r4 = syz_open_dev$loop(&(0x7f0000000640), 0xa6, 0x80200)
write(r4, &(0x7f0000000680)="93d0ac994441fddb0d7e67a92b91a536668fcb2b83348597b2e7fbde19753d64c85e8595d7db1cd93d8b1209ba12a072889e0bfccd79c74d06ce3fd68a72c134a149198ee58817986e9b451e097ce0ccb3fbc52000c5ad8b371c639af39cbc2485afc7b1e89d67a5138aa53df0242d4ed1663d8768fd275dbf83285a86f2e0f3a51af71d5fb112c01eacf6a6a8011475f3fa7fa2a05f9fbb9a8edf2227875fb9cc01775adb7375ae4602305d313ab221f91fc70f500b99ef51246712cbe21a7bcc", 0xc1)
sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x60004090}, 0xc040)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x40})
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000008c0)={0x1, 0x1000}, 0x8)

[  121.045921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  121.048931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  121.051490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  121.057949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  121.066503] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  121.224354] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  121.232057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  121.234232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  121.237008] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  121.243279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  121.245039] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  121.245777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  121.247871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  121.251822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  121.260896] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  121.271702] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  121.284806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  121.286689] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  121.290854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  121.299412] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  121.303146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  121.315096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  121.327748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  121.332945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  121.334510] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  121.339443] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  121.342253] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  121.343959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  121.358138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  121.360863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  121.403098] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  121.409461] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  121.414866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  121.417260] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  121.420856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  121.489377] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  121.494418] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  121.499978] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  121.536171] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  121.546183] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  123.116569] Bluetooth: hci0: command tx timeout
[  123.306690] Bluetooth: hci2: command tx timeout
[  123.370825] Bluetooth: hci3: command tx timeout
[  123.370864] Bluetooth: hci1: command tx timeout
[  123.434934] Bluetooth: hci5: command tx timeout
[  123.435080] Bluetooth: hci4: command tx timeout
[  123.499658] Bluetooth: hci6: command tx timeout
[  123.627676] Bluetooth: hci7: command tx timeout
[  125.162849] Bluetooth: hci0: command tx timeout
[  125.354686] Bluetooth: hci2: command tx timeout
[  125.418753] Bluetooth: hci3: command tx timeout
[  125.420739] Bluetooth: hci1: command tx timeout
[  125.482706] Bluetooth: hci4: command tx timeout
[  125.483765] Bluetooth: hci5: command tx timeout
[  125.547178] Bluetooth: hci6: command tx timeout
[  125.676570] Bluetooth: hci7: command tx timeout
[  127.211701] Bluetooth: hci0: command tx timeout
[  127.402901] Bluetooth: hci2: command tx timeout
[  127.466713] Bluetooth: hci1: command tx timeout
[  127.466746] Bluetooth: hci3: command tx timeout
[  127.530693] Bluetooth: hci5: command tx timeout
[  127.530713] Bluetooth: hci4: command tx timeout
[  127.595025] Bluetooth: hci6: command tx timeout
[  127.722811] Bluetooth: hci7: command tx timeout
[  129.258860] Bluetooth: hci0: command tx timeout
[  129.451007] Bluetooth: hci2: command tx timeout
[  129.514974] Bluetooth: hci1: command tx timeout
[  129.516470] Bluetooth: hci3: command tx timeout
[  129.578870] Bluetooth: hci5: command tx timeout
[  129.578918] Bluetooth: hci4: command tx timeout
[  129.643863] Bluetooth: hci6: command tx timeout
[  129.773140] Bluetooth: hci7: command tx timeout
[  183.548136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  183.549801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  183.556933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  183.564112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  183.568347] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  183.756709] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  183.762770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  183.769932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  183.779347] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  183.788856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  183.820311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  183.831115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  183.839955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  183.843102] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  183.849702] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  183.857125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  183.882399] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  183.886337] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  183.888571] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  183.890940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  183.895003] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  183.895411] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  183.897124] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  183.902149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  183.904528] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  183.912419] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  183.913238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  183.918251] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  183.921758] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  183.921822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  183.927221] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  183.936099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  183.953454] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.958095] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  183.958301] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  183.965954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  183.980028] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  183.983825] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  183.998087] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  184.009763] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  185.642728] Bluetooth: hci0: command tx timeout
[  185.835862] Bluetooth: hci1: command tx timeout
[  185.963794] Bluetooth: hci2: command tx timeout
[  186.026833] Bluetooth: hci3: command tx timeout
[  186.091063] Bluetooth: hci7: command tx timeout
[  186.092252] Bluetooth: hci5: command tx timeout
[  186.092797] Bluetooth: hci4: command tx timeout
[  186.093286] Bluetooth: hci6: command tx timeout
[  187.690846] Bluetooth: hci0: command tx timeout
[  187.882683] Bluetooth: hci1: command tx timeout
[  188.010772] Bluetooth: hci2: command tx timeout
[  188.076683] Bluetooth: hci3: command tx timeout
[  188.140640] Bluetooth: hci5: command tx timeout
[  188.141069] Bluetooth: hci6: command tx timeout
[  188.141476] Bluetooth: hci4: command tx timeout
[  188.142015] Bluetooth: hci7: command tx timeout
[  189.740033] Bluetooth: hci0: command tx timeout
[  189.931272] Bluetooth: hci1: command tx timeout
[  190.058780] Bluetooth: hci2: command tx timeout
[  190.123823] Bluetooth: hci3: command tx timeout
[  190.186935] Bluetooth: hci5: command tx timeout
[  190.188039] Bluetooth: hci7: command tx timeout
[  190.189028] Bluetooth: hci4: command tx timeout
[  190.189941] Bluetooth: hci6: command tx timeout
[  191.786729] Bluetooth: hci0: command tx timeout
[  191.979711] Bluetooth: hci1: command tx timeout
[  192.106724] Bluetooth: hci2: command tx timeout
[  192.170808] Bluetooth: hci3: command tx timeout
[  192.234881] Bluetooth: hci7: command tx timeout
[  192.235283] Bluetooth: hci6: command tx timeout
[  192.235930] Bluetooth: hci4: command tx timeout
[  192.236331] Bluetooth: hci5: command tx timeout
[  245.944787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  245.950501] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  245.953036] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  245.959416] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  245.966283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  246.003854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  246.006982] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  246.009473] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  246.016043] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  246.019199] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  246.070715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  246.073452] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  246.078471] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  246.083092] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  246.085597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  246.087792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  246.092476] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  246.095975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  246.120064] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  246.143189] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  246.256783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  246.267718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  246.270583] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  246.280351] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  246.282450] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  246.305375] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  246.307786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  246.312070] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  246.316383] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  246.329581] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  246.334044] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  246.335253] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  246.337249] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  246.342251] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  246.345810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  246.363086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  246.369288] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  246.371143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  246.380443] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  246.403866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  248.042704] Bluetooth: hci0: command tx timeout
[  248.106709] Bluetooth: hci1: command tx timeout
[  248.170784] Bluetooth: hci2: command tx timeout
[  248.235646] Bluetooth: hci3: command tx timeout
[  248.426730] Bluetooth: hci7: command tx timeout
[  248.427481] Bluetooth: hci5: command tx timeout
[  248.428034] Bluetooth: hci4: command tx timeout
[  248.490894] Bluetooth: hci6: command tx timeout
[  250.091787] Bluetooth: hci0: command tx timeout
[  250.154726] Bluetooth: hci1: command tx timeout
[  250.219326] Bluetooth: hci2: command tx timeout
[  250.283993] Bluetooth: hci3: command tx timeout
[  250.475927] Bluetooth: hci7: command tx timeout
[  250.476360] Bluetooth: hci4: command tx timeout
[  250.476881] Bluetooth: hci5: command tx timeout
[  250.539656] Bluetooth: hci6: command tx timeout
[  252.139841] Bluetooth: hci0: command tx timeout
[  252.204355] Bluetooth: hci1: command tx timeout
[  252.267837] Bluetooth: hci2: command tx timeout
[  252.331766] Bluetooth: hci3: command tx timeout
[  252.523709] Bluetooth: hci5: command tx timeout
[  252.524204] Bluetooth: hci4: command tx timeout
[  252.524667] Bluetooth: hci7: command tx timeout
[  252.587860] Bluetooth: hci6: command tx timeout
[  254.186678] Bluetooth: hci0: command tx timeout
[  254.250665] Bluetooth: hci1: command tx timeout
[  254.315977] Bluetooth: hci2: command tx timeout
[  254.378670] Bluetooth: hci3: command tx timeout
[  254.571742] Bluetooth: hci7: command tx timeout
[  254.572191] Bluetooth: hci4: command tx timeout
[  254.572650] Bluetooth: hci5: command tx timeout
[  254.635846] Bluetooth: hci6: command tx timeout
[  308.486571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  308.492170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  308.497939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  308.507483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  308.514947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  308.567552] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  308.574476] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  308.586333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  308.592951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  308.600496] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  308.745183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  308.751669] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  308.757275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  308.773881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  308.798459] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  308.850165] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  308.857138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  308.868278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  308.904166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  308.922849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  308.959042] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  308.978901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  308.995572] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  309.010918] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  309.020871] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  309.022566] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  309.023952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  309.039866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  309.041420] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  309.044323] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  309.057099] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  309.061450] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.069106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  309.071231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  309.084564] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.085700] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  309.091042] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  309.138319] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  309.167046] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  309.176993] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  310.570740] Bluetooth: hci0: command tx timeout
[  310.634847] Bluetooth: hci1: command tx timeout
[  310.890870] Bluetooth: hci2: command tx timeout
[  311.082703] Bluetooth: hci3: command tx timeout
[  311.147731] Bluetooth: hci4: command tx timeout
[  311.211736] Bluetooth: hci5: command tx timeout
[  311.340021] Bluetooth: hci7: command tx timeout
[  311.403533] Bluetooth: hci6: command tx timeout
[  312.618741] Bluetooth: hci0: command tx timeout
[  312.683706] Bluetooth: hci1: command tx timeout
[  312.939816] Bluetooth: hci2: command tx timeout
[  313.130868] Bluetooth: hci3: command tx timeout
[  313.195674] Bluetooth: hci4: command tx timeout
[  313.259391] Bluetooth: hci5: command tx timeout
[  313.387943] Bluetooth: hci7: command tx timeout
[  313.452625] Bluetooth: hci6: command tx timeout
[  314.667701] Bluetooth: hci0: command tx timeout
[  314.730687] Bluetooth: hci1: command tx timeout
[  314.986929] Bluetooth: hci2: command tx timeout
[  315.179933] Bluetooth: hci3: command tx timeout
[  315.242702] Bluetooth: hci4: command tx timeout
[  315.309026] Bluetooth: hci5: command tx timeout
[  315.434682] Bluetooth: hci7: command tx timeout
[  315.499920] Bluetooth: hci6: command tx timeout
[  316.714844] Bluetooth: hci0: command tx timeout
[  316.780069] Bluetooth: hci1: command tx timeout
[  317.034950] Bluetooth: hci2: command tx timeout
[  317.226716] Bluetooth: hci3: command tx timeout
[  317.290716] Bluetooth: hci4: command tx timeout
[  317.355714] Bluetooth: hci5: command tx timeout
[  317.483673] Bluetooth: hci7: command tx timeout
[  317.546691] Bluetooth: hci6: command tx timeout
[  371.334464] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  371.337945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  371.342960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  371.350341] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  371.356104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  371.415318] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  371.418556] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  371.423456] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  371.425342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  371.429118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  371.431767] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  371.438003] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  371.439131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  371.445093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  371.447420] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  371.534437] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  371.536273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  371.537122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  371.541239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  371.546110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  371.548457] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  371.552481] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  371.586597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  371.603133] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  371.605685] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  371.612966] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  371.664687] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  371.666405] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  371.700885] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  371.723071] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  371.731321] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  371.740174] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  371.741941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  371.759131] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  371.765317] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  371.768519] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  371.781477] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  371.821389] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  371.824411] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  371.856340] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  373.419701] Bluetooth: hci0: command tx timeout
[  373.483679] Bluetooth: hci2: command tx timeout
[  373.547807] Bluetooth: hci1: command tx timeout
[  373.674927] Bluetooth: hci3: command tx timeout
[  373.802738] Bluetooth: hci4: command tx timeout
[  373.866833] Bluetooth: hci5: command tx timeout
[  373.930855] Bluetooth: hci6: command tx timeout
[  373.995652] Bluetooth: hci7: command tx timeout
[  375.468003] Bluetooth: hci0: command tx timeout
[  375.531364] Bluetooth: hci2: command tx timeout
[  375.594672] Bluetooth: hci1: command tx timeout
[  375.722667] Bluetooth: hci3: command tx timeout
[  375.850894] Bluetooth: hci4: command tx timeout
[  375.914685] Bluetooth: hci5: command tx timeout
[  375.978920] Bluetooth: hci6: command tx timeout
[  376.042663] Bluetooth: hci7: command tx timeout
[  377.514686] Bluetooth: hci0: command tx timeout
[  377.578946] Bluetooth: hci2: command tx timeout
[  377.642838] Bluetooth: hci1: command tx timeout
[  377.771298] Bluetooth: hci3: command tx timeout
[  377.898700] Bluetooth: hci4: command tx timeout
[  377.962684] Bluetooth: hci5: command tx timeout
[  378.026691] Bluetooth: hci6: command tx timeout
[  378.090741] Bluetooth: hci7: command tx timeout
[  379.562892] Bluetooth: hci0: command tx timeout
[  379.626728] Bluetooth: hci2: command tx timeout
[  379.690805] Bluetooth: hci1: command tx timeout
[  379.818698] Bluetooth: hci3: command tx timeout
[  379.946719] Bluetooth: hci4: command tx timeout
[  380.010706] Bluetooth: hci5: command tx timeout
[  380.074688] Bluetooth: hci6: command tx timeout
[  380.139132] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
02:09:43  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffffea0000e2a000 RCX=c7ba52f8fd48876b RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000001 RBP=ffff88806ce3d010 RSP=ffff8880318472d8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffffffff81a79187 R13=0000000000000002 R14=ffff88802e100000 R15=ffff888038a84400
RIP=ffffffff8151ac37 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe5000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561c6063e080 CR3=000000002d7d3000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000181 RBX=ffff8880167c1b80 RCX=0000000000000200 RDX=0000000000000008
RSI=ffff8880167c2600 RDI=ffff8880167c25d8 RBP=ffff8880167c25d8 RSP=ffff88802c8272c8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffff8880167c2600 R13=2f6a86943080f3c2 R14=0000000000000000 R15=0000000000000001
RIP=ffffffff815145e3 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f39eac5e540 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe7400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055adea5c24c8 CR3=000000000dfd7000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00
XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000