Warning: Permanently added '[localhost]:3466' (ECDSA) to the list of known hosts.
2025/06/17 23:59:16 fuzzer started
2025/06/17 23:59:17 dialing manager at localhost:34087
syzkaller login: [  102.292590] cgroup: Unknown subsys name 'net'
[  102.450531] cgroup: Unknown subsys name 'cpuset'
[  102.495484] cgroup: Unknown subsys name 'rlimit'
2025/06/17 23:59:39 syscalls: 2214
2025/06/17 23:59:39 code coverage: enabled
2025/06/17 23:59:39 comparison tracing: enabled
2025/06/17 23:59:39 extra coverage: enabled
2025/06/17 23:59:39 setuid sandbox: enabled
2025/06/17 23:59:39 namespace sandbox: enabled
2025/06/17 23:59:39 Android sandbox: enabled
2025/06/17 23:59:39 fault injection: enabled
2025/06/17 23:59:39 leak checking: enabled
2025/06/17 23:59:39 net packet injection: enabled
2025/06/17 23:59:39 net device setup: enabled
2025/06/17 23:59:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/17 23:59:39 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/17 23:59:39 USB emulation: enabled
2025/06/17 23:59:39 hci packet injection: enabled
2025/06/17 23:59:39 wifi device emulation: enabled
2025/06/17 23:59:39 802.15.4 emulation: enabled
2025/06/17 23:59:39 fetching corpus: 0, signal 0/0 (executing program)
2025/06/17 23:59:40 starting 8 fuzzer processes
23:59:40 executing program 0:
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfe}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x38}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'})
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0xb96e1a30850d5d09, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="85bff154ac21"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d8074474d7ff"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}}, 0xe0fce938c2773221)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000002c0)={0x6, 0x10, '\x00', 0x0, &(0x7f0000000280)=[0x0, 0x0]})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={'caif0\x00', {0x2, 0x0, @initdev}})
r1 = accept4$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c, 0x800)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000003c0), &(0x7f0000000400)=0x30)
bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6539}, 0x1c)
write$P9_RRENAMEAT(r0, &(0x7f0000000480)={0x7, 0x4b, 0x2}, 0x7)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000004c0)=0x7)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000580)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x804f, 0x3, 0x7fff, 0x3, 0xda], 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000680))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000740)={r2, 0x3, r1, 0x4d, 0x80000})
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000780)={{0x77359400}, {0x77359400}}, &(0x7f00000007c0))
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000800)={<r3=>r1, 0x100, 0x1f, 0x10000})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r4, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6f}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000980)={0xffff, {{0xa, 0x4e24, 0xc6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7}}}, 0x88)

23:59:40 executing program 1:
fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/75)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xbfb, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4855}, 0x40000)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000200)=0xffff, 0x4)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)={0x2fc, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2389}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8a0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @mcast2, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xb16, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7f, @local, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x762d188f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe0000000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x800}, 0x20040000)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000640), 0x400, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4c}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x12001081}, 0x80)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000780)=0x3f)
r4 = dup3(r0, r0, 0x80000)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8084)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000008c0)={{0x1, 0x1, 0x18, <r5=>r2, {0x8}}, './file0\x00'})
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000d80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000940)={0x3ec, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35ca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffff6cd}}}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x900000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}]}, @TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5ca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x97d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x107b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x59f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x24}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x45d3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbd0e4cd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x38aa}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xac4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x22}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c084)
r6 = openat(r5, &(0x7f0000000e00)='./file0\x00', 0x5a1100, 0x20)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r6)
r8 = openat$cgroup_ro(r5, &(0x7f0000000e40)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r8, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x144, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5a}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x999a}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x7ff}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x6}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0xfff}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x7fc4}, {0x8}, {0x5, 0x14, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000010c0)={{0x1, 0x1, 0x18, <r9=>r4}, './file0\x00'})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r9, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, r7, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x45}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x30}, 0x1, 0x0, 0x0, 0x40005}, 0x10)

[  125.526794] audit: type=1400 audit(1750204780.869:7): avc:  denied  { execmem } for  pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:59:40 executing program 2:
vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="6f18d716fc4e76151ef96aeae9fa0bb5641829a11cbaa26b2c2b51dab10a987d89336a8289a37a9ac059827cd6cff71ed920ebe89eade51019046242508b573a946dd05e1615db7d3ae84a524dfec77bd60f886f928df496b155c38ca9896eebc1ce0e87cba45fd70a3b23491b2b6311eb9a805af9ccb8a2dc5a599915d72f17cb4ce76f0d71c1317114cf5a37fc271afc1c31d15649c1396868b8c0634ccdf4a28c1392ac5e7bf258727775660d44038663728f07043dfb5dbd3695c597e52d15018e87a25102d5c5c857d561e00de970113b6f1043afdf7c3929eb8c9aa266d204", 0xe2}, {&(0x7f0000000100)="4ffb3b521a815453ae3dca70979104dc9b299d576a5fbe0d28c70268507c6ac557a9a15cf33d1b6d8db544d7febe26fef5c6272ba145e1c0098735a530fd003a1bcd56190ba33f5889aef895625dc26d2ee27b23f0055fff164ecb4543bfd5d570078f03dfabc6c592b488f59db03068b1e78b409abf48efaaea7a8ed4e387a13b2eb232b5790dda0740627a337a62bba184933da88a52a1d3", 0x99}, {&(0x7f00000001c0)="1450fcd1f32953104e4ccf985426c2bdaaf6223c08a91ba40dea3909", 0x1c}, {&(0x7f0000000200)="ed5b32a11d31b12017f4120c5ad0446ed0fcedcb83c8c38a5af5ef9f8036fe3a", 0x20}, {&(0x7f0000000240)="2dd5e5760b2a4fec74bde81555f14836958144a4699c26fc5239e2a5510d7763a8db2cb23badbdadee9e0f1308231027852e3a5047059835c65c689eb81168a87abaed66b1300e113286853e8bc0e1f4b39a86e54817b8568f3ab9bb1fea15bbd71cc07795bc19981b6cef63e4d61f9988c79fde9b0f7590c15d51061fbaaacb12f916dc6320591aae86882f889da1e099aec42bfb166f172166f57523a1ccb3ac7fdec70584", 0xa6}], 0x5, 0x0)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000380))
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2840, 0x8)
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000480)={0x3, 0x7fffffff, @start={<r1=>0x0, 0x0, "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", "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"}, [0x1, 0x1f, 0x100000001, 0xfffffffffffff000, 0x5, 0x1f, 0x3, 0x7ff, 0x0, 0x9, 0x8, 0x0, 0x401, 0x2, 0x6, 0x59, 0xffffffff, 0x7, 0x3, 0x4, 0x2, 0x6, 0x80000001, 0x3, 0x100000001, 0x5, 0x7fff, 0x6, 0x2, 0x8, 0x8, 0x1f, 0x81, 0x0, 0x2, 0x80, 0x4, 0xff, 0x100000000, 0xaca, 0x12dd29ae, 0x7, 0x947, 0x6, 0x4, 0x8000000000000000, 0x5, 0x8000, 0x4, 0x7b8, 0xffffffff, 0x51, 0x6, 0xffff, 0x401, 0x8743, 0x3, 0xfffffffffffffff9, 0xe5e, 0x5, 0xfffffffffffffffa, 0x100000000, 0x1000, 0x2]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000ec0)={{}, 0x0, 0x2, @inherit={0x50, &(0x7f0000000400)={0x0, 0x1, 0x3, 0x6, {0x4, 0x3, 0x9, 0x0, 0xb78}, [0x200]}}, @devid=r1})
copy_file_range(r0, &(0x7f0000001ec0)=0x4, r0, 0x0, 0xfffffffffffffff9, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000001f00)={{0xfffffffffffffffe, 0x1, 0x10000, 0x0, 0x5}, 0x80000000, 0x7})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001f80), 0x100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001fc0)={{0x1, 0x1, 0x18, <r3=>r2, {0x4, 0x7}}, './file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000002000)={0x25, @time={0x0, 0xa6b5}, 0x40, {0x7, 0x3}, 0x81, 0x1, 0x1f})
setxattr$security_capability(&(0x7f0000002040)='./file0\x00', &(0x7f0000002080), &(0x7f00000020c0)=@v3={0x3000000, [{0x0, 0x5}, {0x8001, 0x3}], 0xee00}, 0x18, 0x0)
fadvise64(r3, 0x100000000, 0x200000000000000, 0x1)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0)
sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f00000023c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002380)={&(0x7f0000002180)={0x1dc, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x48811}, 0x840)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0xc15f4280cf44c31b}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x1c, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000841)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat2(0xffffffffffffff9c, &(0x7f0000002500)='./file0\x00', &(0x7f0000002540)={0x200000, 0x88, 0x5}, 0x18)
sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20044840)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000002680)={0x1000, 0x5, 0x3, 0x1, 0x5})

23:59:40 executing program 3:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x1, 0x0, [0x0]})
write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7)
r1 = perf_event_open$cgroup(&(0x7f0000000080)={0xb, 0x80, 0x9, 0x3, 0x3, 0x4, 0x0, 0x5, 0x4010, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x9, 0x1}, 0x80, 0x8c, 0x800, 0x4, 0xda, 0x85, 0x400, 0x0, 0x5, 0x0, 0xffffffff}, r0, 0xc, r0, 0x2)
ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2)
bind$802154_raw(r0, &(0x7f0000000100)={0x24, @short={0x2, 0xffff}}, 0x14)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4040)
r2 = accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280))
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000002c0)={0x1, 0x40})
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000300)={'veth1_to_batadv\x00', {0x2, 0x0, @loopback}})
r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
r4 = add_key(&(0x7f00000003c0)='trusted\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)="d0fc60baf3b177323ac6e2174dfed0689101f0134b4cf6e10445c9a55f177c68ec43172576836bad9ef8d31b56a5d62e2bfb9d68efa574f958976dbf18821d84bcf038e2615d624f00f5aa3732556788ed2d749fe9fb09a997787e7d1898c57c0be39b398c2a194561c9b36d3968e0228bb99fc045ec82f5577cde73a47317cb8bf18643d79f2f0db49a119a34168318d2d8463156abe3dac6f764227158b00910aa18e6db41d5a9cf065dede0f2e5f9732d0596a2cc65c0a00f6e15a9ef9a69f4d3e3fcb404d9f6473f835d5607a7f8b108ce16bb664bf8b33fe564", 0xdc, 0xfffffffffffffffc)
keyctl$reject(0x13, r3, 0x4, 0x7fffffff, r4)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2)
r6 = memfd_secret(0x80000)
ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000580)={0x9, 0x4, 0x4})
ioctl$RTC_PIE_OFF(r6, 0x7006)

23:59:40 executing program 4:
sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8050100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x42}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x38}, 0xaa}, 0x1c)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x48}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc048}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0xfeba}}, './file0\x00'})
ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000003c0))
r3 = openat(r2, &(0x7f0000000540)='./file0\x00', 0x101000, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x174, 0x2, 0x2, 0xcb99e5ad9a44d395, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}, @CTA_EXPECT_NAT={0x2c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x104, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}]}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010100}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x10}, 0x4008801)
r4 = openat$incfs(r2, &(0x7f00000007c0)='.pending_reads\x00', 0x40, 0x40)
connect(r4, &(0x7f0000000800)=@x25, 0x80)
umount2(&(0x7f0000000880)='./file0\x00', 0x6)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', <r5=>0x0, 0x29, 0xa7, 0x26, 0x4, 0x4a, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x10, 0x7800, 0x5, 0x9}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wg2\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0xf8ae10e17ab15421}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r7, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa6cf}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40081}, 0xc1)
recvfrom$packet(r2, &(0x7f0000000b40)=""/23, 0x17, 0x2000, &(0x7f0000000b80)={0x11, 0x19, r6, 0x1, 0xff, 0x6, @broadcast}, 0x14)
mount$cgroup(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x80000, &(0x7f0000000c40)={[{@xattr}, {@cpuset_v2_mode}, {@noprefix}, {@subsystem='devices'}, {@clone_children}, {@none}], [{@seclabel}]})
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80010003}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8840}, 0x1)

23:59:41 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x522800, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = dup2(r1, r0)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x4, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x100)
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x9, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000002c0)={<r3=>r2, 0x4, 0x100})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2)
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010004}, 0x20040000)
r5 = syz_mount_image$nfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x7ff, 0x4, &(0x7f00000006c0)=[{&(0x7f00000004c0)="234a6b9de6be795f1b8fdda96d31bf1e773060847eccbe9cf69b3aa961de", 0x1e, 0x9339}, {&(0x7f0000000500)="1ea19942b3841b338f35509c34d97b3d9c66e34fee10c7437a0e958f0dd057315670276db4deb442961fc292ecbb847a0b97f61cc4099fc4247eb3eaf5e905f3e0792ff27b82d3ffe64f9e0755272f3a6e17cbc861e9cc13c390da37a877", 0x5e}, {&(0x7f0000000580)="329c2f564bbdf230bf7cf36bf5e5eea0d1c708dfbc0ef088f224bc8e7c53ba3a529971679f357aaa9d884ecd6348b60a1bc0950dc4c85be0f8a5f1865a90f5aeb09cf317dc8f99512ef9a5019c7ab4718a4d9883312c63f291b9fac21a93c05e0815d7f6ca79962af2b15b0172621212a784e344cfd6afb512c2e0183aeabf616fc958f3feba24aa18bffc8a0b3ff64fdfbaf2f930cbce8609aacaf9eac950bbe95dd99fd1eae9057443ad715fc73cf4382c30e7f4d1f55bd4c27d2d024d74dd842d6df1cc313e9c32f23cc96d625abbe6dc16bcc5fe7759e1d1067c92ce45d468bf438580a980309700c9b80480fd0d79df4b6cb47c20", 0xf7, 0x6}, {&(0x7f0000000680)="815157912f6f82fcedfbe6992e469cfc7454368970ef87ae68cf324a9e94d78814a9ecdcf013b29b295264c25f3e37a5cd1f0dbcb74b18", 0x37, 0xffffffffffffd756}], 0x2000000, &(0x7f0000000740)={[{}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x66, 0x34, 0x31, 0x6b, 0x34, 0x63, 0x63], 0x2d, [0x33, 0x39, 0x32, 0x39], 0x2d, [0x39, 0x37, 0x37, 0x30], 0x2d, [0x33, 0x33, 0x39, 0x36], 0x2d, [0x65, 0x31, 0x30, 0x32, 0x61, 0xfc, 0x33, 0x63]}}}, {@subj_type}, {@audit}]})
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='attr/sockcreate\x00')
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r6=>r5}, './file0\x00'})
r7 = syz_open_dev$evdev(&(0x7f0000000a00), 0x1, 0x8000)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r7, {r0}}, './file0\x00'})
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a80), 0x1ab8c0, 0x0)
fremovexattr(r8, &(0x7f0000000ac0)=@known='trusted.overlay.impure\x00')
r9 = creat(&(0x7f0000000b00)='./file1\x00', 0x0)
openat$cgroup_ro(r9, &(0x7f0000000b40)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
sync_file_range(0xffffffffffffffff, 0x3, 0xa0000000000, 0x3)

23:59:41 executing program 6:
ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000))
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x9}}, './file0\x00'})
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000180)=""/137, &(0x7f0000000240)=0x89)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000380)=""/11, 0xb}, {&(0x7f00000003c0)=""/156, 0x9c}], 0x3, &(0x7f00000004c0)=""/220, 0xdc}, 0x10000)
io_setup(0xd1, &(0x7f0000000600)=<r1=>0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
io_cancel(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x3, r2, &(0x7f0000000640)="2dd00101073b41fac9215923f2719a0b13d758c5830f82bf5f58577fadb4a6aea849eeeac974a4458cc8f4ebf7fab56d6e3a3a9a09d4ca257d821855fcb28d2d3a012401", 0x44, 0xffffffffffffff80, 0x0, 0xb31127d2863301d6, r0}, &(0x7f0000000700))
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendto(r0, &(0x7f0000000880)="f0a82476de6b9cb3b4fea8975c8cc195cfaf6ef5bb7c918fca516db4a2e28ebf23b444da28f153600b42dec9d42d9f5f3a744d78be975b4899686b67d08b60601d5e5e608516a12cc27049f80283a4b71e7904998bd4b4c4d9b9b6249645922c192ce73881ffbd8272745f2d8f0ea188e9f205589e0805246a84890698ea0cdac94e22e8819c2d10b7fed85134b9566c814361d9dba6869c345c7bd23048c7d5cf95c7f3f2d60f2a2fcb1fee79c3bcf132e2273e58f22159da5e290cd8f8b8923ee434b53553c6a49cdfa3b6ec37b51f3dbef0c7", 0xd4, 0x4081, &(0x7f0000000980)=@pppoe={0x18, 0x0, {0x3, @empty, 'syz_tun\x00'}}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl0\x00', <r3=>0x0, 0x4, 0xa7, 0x3f, 0x9, 0x45, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x10, 0x0, 0x1}})
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b00), r0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000020}, 0x4)
fcntl$setsig(r0, 0xa, 0x38)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40), r0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/asound/seq/clients\x00', 0x0, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000001500)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000014c0)={&(0x7f00000012c0)={0x1e4, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xed7}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1a}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe93}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @loopback, 0x8000}}}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4800}, 0x1)
r6 = syz_open_dev$vcsu(&(0x7f0000001540), 0x4, 0x100)
ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000001580)=0x200)
io_cancel(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x3, 0x1, r5, &(0x7f00000015c0)="aeb4721f8d12280ef231db6f388770829ae95bf0b818b0af92fef216852d18dd", 0x20, 0x2, 0x0, 0x1}, &(0x7f0000001680))

23:59:41 executing program 7:
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
read$snapshot(0xffffffffffffffff, &(0x7f0000000000)=""/75, 0x4b)
connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
clock_gettime(0x0, &(0x7f0000001900)={<r0=>0x0, <r1=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001880)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f0000000280)=""/5, 0x5}], 0x2, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)=""/80, 0x50}, {&(0x7f00000003c0)=""/102, 0x66}, {&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000540)=""/4, 0x4}, {&(0x7f0000000580)=""/117, 0x75}, {&(0x7f0000000600)=""/131, 0x83}, {&(0x7f00000006c0)=""/145, 0x91}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x8, &(0x7f0000001800)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x2, 0x12143, &(0x7f0000001940)={r0, r1+10000000})
ioctl$EVIOCSABS0(r8, 0x401845c0, &(0x7f0000001980)={0x400, 0xde47, 0x8, 0x0, 0x20, 0x49})
ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f00000019c0))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001b40)={0x18, 0x0, &(0x7f0000001a00)=[@dead_binder_done, @free_buffer], 0xe7, 0x0, &(0x7f0000001a40)="31740f9c1d70160019f0635ab39bfeed5569db445184fd672d32460986455d6bfc7e3719e355785cb5776bf09fda6cf30199a86a614234ef72576d2be7e83d512eaa1898fc1f5de6549e0b4d40f847057be096de8b9db944448032a33cf696d83c9df8e64915966a0758487f782ed95f53e37db8df459e24c2da92877a0809dc1b9ce50e4955eea5e852eb896ce455fea6dd4193f46871647bc4aef958cd492c1eec75a4de4889ff6d2b0ac1af06abbf3d3bba64b9ae0fa602fa2639aa6f7359a2694168862823e810a60ca5b0f25a47b49c325143fa2620f2969aa01808d0cf13f423c75d6006"})
ioctl$KIOCSOUND(r9, 0x4b2f, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000001b80)={0x655, 0xa0, 0x9, 0x0, 0x7ff}, 0x14)
r10 = openat(r2, &(0x7f0000001bc0)='./file1\x00', 0x42, 0x180)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000001c00)={{0x1, 0x1, 0x18, <r11=>r9, {0x2}}, './file1\x00'})
write$P9_RREAD(r11, &(0x7f0000001c40)={0xc0, 0x75, 0x1, {0xb5, "6e100b67ad8f9f43435189ce65d8a14ed44849daecfd8ea4479297c8ade582478f4313d5e6cb27be2602d54da409155af74d1e44213877c8b3167e94af554d75d9caebae13ac89a0b09d548b37682e1f16f491f9326649b1ba8b4bea6a53672b32fb9ead5129b670b90c248ac696735125b54b5abcad34b671478b81e58dedb19c8ebe9f527a57e355918ae092c43d6b03f56b77b9a5d5563d5a7de8df8e58cbfdfc277c0b04a64762650e63866cb07e94090f0794"}}, 0xc0)
r12 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x1)
ioctl$PIO_FONTRESET(r12, 0x4b6d, 0x0)
r13 = syz_open_dev$vcsn(&(0x7f0000001d00), 0x3, 0x40000)
r14 = getpid()
write$P9_RGETLOCK(r13, &(0x7f0000001d40)={0x1e, 0x37, 0x2, {0x1, 0x0, 0xfc00000000000000, r14}}, 0x1e)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001d80))
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r10, 0x8008330e, &(0x7f0000001dc0))

[  126.718252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.722510] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.726640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.734319] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.740609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.978299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.988967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  126.990600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.993790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.998322] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  127.001895] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  127.007155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.017806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  127.024822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.031136] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  127.067336] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  127.093162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  127.097990] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  127.105943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  127.120408] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  127.123223] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  127.127160] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  127.131979] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  127.136164] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  127.139911] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  127.140140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  127.156118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  127.161283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  127.168108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  127.175269] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  127.176855] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  127.179654] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  127.186920] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  127.200426] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  127.204481] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  127.209426] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  127.213065] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  127.215619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  127.258853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  127.262211] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  128.798839] Bluetooth: hci0: command tx timeout
[  129.117060] Bluetooth: hci2: command tx timeout
[  129.117645] Bluetooth: hci1: command tx timeout
[  129.244998] Bluetooth: hci7: command tx timeout
[  129.246288] Bluetooth: hci4: command tx timeout
[  129.246825] Bluetooth: hci3: command tx timeout
[  129.308751] Bluetooth: hci5: command tx timeout
[  129.372797] Bluetooth: hci6: command tx timeout
[  130.845881] Bluetooth: hci0: command tx timeout
[  131.167720] Bluetooth: hci1: command tx timeout
[  131.168200] Bluetooth: hci2: command tx timeout
[  131.294029] Bluetooth: hci3: command tx timeout
[  131.294508] Bluetooth: hci4: command tx timeout
[  131.295182] Bluetooth: hci7: command tx timeout
[  131.357896] Bluetooth: hci5: command tx timeout
[  131.423691] Bluetooth: hci6: command tx timeout
[  132.892994] Bluetooth: hci0: command tx timeout
[  133.212802] Bluetooth: hci2: command tx timeout
[  133.212908] Bluetooth: hci1: command tx timeout
[  133.340813] Bluetooth: hci7: command tx timeout
[  133.340952] Bluetooth: hci4: command tx timeout
[  133.341287] Bluetooth: hci3: command tx timeout
[  133.404791] Bluetooth: hci5: command tx timeout
[  133.468870] Bluetooth: hci6: command tx timeout
[  134.941810] Bluetooth: hci0: command tx timeout
[  135.261042] Bluetooth: hci1: command tx timeout
[  135.261800] Bluetooth: hci2: command tx timeout
[  135.389788] Bluetooth: hci4: command tx timeout
[  135.390243] Bluetooth: hci3: command tx timeout
[  135.390649] Bluetooth: hci7: command tx timeout
[  135.452729] Bluetooth: hci5: command tx timeout
[  135.517379] Bluetooth: hci6: command tx timeout
[  189.620706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.628219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.631316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.645396] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.650487] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.783577] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  189.789351] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  189.791584] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  189.797374] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  189.808123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  189.820552] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  189.836451] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  189.842928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.850213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  189.858128] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.870884] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  189.875238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  189.878580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  189.882369] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  189.885553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.896646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  189.900617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  189.903171] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  189.907055] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  189.909238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  189.910999] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  189.915967] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  189.921094] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  189.922141] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  189.925511] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  189.929020] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  189.936152] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  189.938058] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  189.943480] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  189.948916] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  189.958246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  189.965412] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  189.976102] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  189.979400] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  189.995970] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  191.708777] Bluetooth: hci0: command tx timeout
[  191.900872] Bluetooth: hci1: command tx timeout
[  192.028890] Bluetooth: hci3: command tx timeout
[  192.030077] Bluetooth: hci2: command tx timeout
[  192.030575] Bluetooth: hci4: command tx timeout
[  192.093241] Bluetooth: hci5: command tx timeout
[  192.093266] Bluetooth: hci7: command tx timeout
[  192.094362] Bluetooth: hci6: command tx timeout
[  193.756901] Bluetooth: hci0: command tx timeout
[  193.948979] Bluetooth: hci1: command tx timeout
[  194.076922] Bluetooth: hci2: command tx timeout
[  194.077377] Bluetooth: hci4: command tx timeout
[  194.077993] Bluetooth: hci3: command tx timeout
[  194.141962] Bluetooth: hci7: command tx timeout
[  194.142418] Bluetooth: hci6: command tx timeout
[  194.143023] Bluetooth: hci5: command tx timeout
[  195.805692] Bluetooth: hci0: command tx timeout
[  195.996770] Bluetooth: hci1: command tx timeout
[  196.124923] Bluetooth: hci4: command tx timeout
[  196.125376] Bluetooth: hci3: command tx timeout
[  196.125845] Bluetooth: hci2: command tx timeout
[  196.189728] Bluetooth: hci5: command tx timeout
[  196.190176] Bluetooth: hci6: command tx timeout
[  196.190589] Bluetooth: hci7: command tx timeout
[  197.852725] Bluetooth: hci0: command tx timeout
[  198.044728] Bluetooth: hci1: command tx timeout
[  198.173046] Bluetooth: hci2: command tx timeout
[  198.173519] Bluetooth: hci3: command tx timeout
[  198.174081] Bluetooth: hci4: command tx timeout
[  198.236790] Bluetooth: hci7: command tx timeout
[  198.237258] Bluetooth: hci6: command tx timeout
[  198.237717] Bluetooth: hci5: command tx timeout
[  251.625217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  251.630055] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  251.631970] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  251.637186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  251.641328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  251.769236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  251.779578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  251.786144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  251.797373] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  251.808474] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  251.944224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  251.948215] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  251.950200] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  251.955383] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  251.958006] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  251.962956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  251.971038] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  251.973395] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  251.977462] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.980330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  252.199220] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  252.211629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  252.222351] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  252.226383] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  252.228313] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  252.236020] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  252.243790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  252.245513] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  252.249111] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  252.257391] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  252.258166] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  252.272022] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  252.282405] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  252.302805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  252.308596] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  252.468587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  252.490150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  252.522501] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  252.607079] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  252.615231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  253.725428] Bluetooth: hci0: command tx timeout
[  253.852930] Bluetooth: hci1: command tx timeout
[  254.045389] Bluetooth: hci2: command tx timeout
[  254.109460] Bluetooth: hci3: command tx timeout
[  254.428798] Bluetooth: hci7: command tx timeout
[  254.492851] Bluetooth: hci4: command tx timeout
[  254.557894] Bluetooth: hci6: command tx timeout
[  254.748788] Bluetooth: hci5: command tx timeout
[  255.774209] Bluetooth: hci0: command tx timeout
[  255.900782] Bluetooth: hci1: command tx timeout
[  256.092943] Bluetooth: hci2: command tx timeout
[  256.157740] Bluetooth: hci3: command tx timeout
[  256.476855] Bluetooth: hci7: command tx timeout
[  256.542763] Bluetooth: hci4: command tx timeout
[  256.606074] Bluetooth: hci6: command tx timeout
[  256.797725] Bluetooth: hci5: command tx timeout
[  257.821637] Bluetooth: hci0: command tx timeout
[  257.948722] Bluetooth: hci1: command tx timeout
[  258.142124] Bluetooth: hci2: command tx timeout
[  258.205042] Bluetooth: hci3: command tx timeout
[  258.527929] Bluetooth: hci7: command tx timeout
[  258.590026] Bluetooth: hci4: command tx timeout
[  258.653769] Bluetooth: hci6: command tx timeout
[  258.845839] Bluetooth: hci5: command tx timeout
[  259.868729] Bluetooth: hci0: command tx timeout
[  259.998088] Bluetooth: hci1: command tx timeout
[  260.189727] Bluetooth: hci2: command tx timeout
[  260.252835] Bluetooth: hci3: command tx timeout
[  260.573774] Bluetooth: hci7: command tx timeout
[  260.637989] Bluetooth: hci4: command tx timeout
[  260.700720] Bluetooth: hci6: command tx timeout
[  260.893758] Bluetooth: hci5: command tx timeout
[  314.158504] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  314.161286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  314.167343] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  314.176933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  314.183410] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  314.363595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  314.367391] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  314.370431] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  314.377433] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  314.385143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  314.504521] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  314.540281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  314.544570] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  314.550443] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  314.577464] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  314.586389] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  314.589371] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  314.608089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  314.610828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  314.624954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  314.648124] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  314.660529] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  314.663222] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  314.691399] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  314.734419] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  314.740109] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  314.755114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  314.766580] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  314.814413] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  314.820903] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  314.832191] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  314.837367] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  314.846730] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  314.864753] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  314.876050] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  314.971488] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  314.980455] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  314.995326] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  315.009207] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  315.023411] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  316.252769] Bluetooth: hci0: command tx timeout
[  316.444959] Bluetooth: hci1: command tx timeout
[  316.766103] Bluetooth: hci2: command tx timeout
[  316.828831] Bluetooth: hci3: command tx timeout
[  316.956806] Bluetooth: hci6: command tx timeout
[  317.022247] Bluetooth: hci4: command tx timeout
[  317.084845] Bluetooth: hci5: command tx timeout
[  317.085614] Bluetooth: hci7: command tx timeout
[  318.301204] Bluetooth: hci0: command tx timeout
[  318.493817] Bluetooth: hci1: command tx timeout
[  318.813332] Bluetooth: hci2: command tx timeout
[  318.877079] Bluetooth: hci3: command tx timeout
[  319.005168] Bluetooth: hci6: command tx timeout
[  319.069211] Bluetooth: hci4: command tx timeout
[  319.132951] Bluetooth: hci7: command tx timeout
[  319.133514] Bluetooth: hci5: command tx timeout
[  320.348890] Bluetooth: hci0: command tx timeout
[  320.542245] Bluetooth: hci1: command tx timeout
[  320.860855] Bluetooth: hci2: command tx timeout
[  320.924854] Bluetooth: hci3: command tx timeout
[  321.052951] Bluetooth: hci6: command tx timeout
[  321.117135] Bluetooth: hci4: command tx timeout
[  321.180793] Bluetooth: hci5: command tx timeout
[  321.180850] Bluetooth: hci7: command tx timeout
[  322.398832] Bluetooth: hci0: command tx timeout
[  322.589879] Bluetooth: hci1: command tx timeout
[  322.909797] Bluetooth: hci2: command tx timeout
[  322.972787] Bluetooth: hci3: command tx timeout
[  323.101177] Bluetooth: hci6: command tx timeout
[  323.166250] Bluetooth: hci4: command tx timeout
[  323.228960] Bluetooth: hci7: command tx timeout
[  323.229903] Bluetooth: hci5: command tx timeout
[  376.825070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.830336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.836224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  376.844113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  376.855111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  377.067584] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  377.072204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  377.075349] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  377.082034] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  377.086599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  377.147753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  377.155138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  377.169220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  377.185011] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  377.197293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  377.286305] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  377.289336] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  377.301530] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  377.318271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  377.339393] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  377.353833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  377.366060] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  377.403891] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  377.408066] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  377.409395] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  377.415393] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  377.421486] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  377.423105] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  377.427446] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  377.438255] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  377.443026] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  377.446054] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  377.447760] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  377.457064] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  377.459515] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  377.467286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  377.484191] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  377.507776] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  377.516987] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  377.548530] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  378.908766] Bluetooth: hci0: command tx timeout
[  379.164848] Bluetooth: hci1: command tx timeout
[  379.294875] Bluetooth: hci2: command tx timeout
[  379.420983] Bluetooth: hci3: command tx timeout
[  379.612816] Bluetooth: hci5: command tx timeout
[  379.612824] Bluetooth: hci4: command tx timeout
[  379.678710] Bluetooth: hci6: command tx timeout
[  379.678723] Bluetooth: hci7: command tx timeout
[  380.956862] Bluetooth: hci0: command tx timeout
[  381.212820] Bluetooth: hci1: command tx timeout
[  381.341549] Bluetooth: hci2: command tx timeout
[  381.468753] Bluetooth: hci3: command tx timeout
[  381.660735] Bluetooth: hci5: command tx timeout
[  381.662067] Bluetooth: hci4: command tx timeout
[  381.724731] Bluetooth: hci6: command tx timeout
[  381.726242] Bluetooth: hci7: command tx timeout
[  383.005240] Bluetooth: hci0: command tx timeout
[  383.260791] Bluetooth: hci1: command tx timeout
[  383.390066] Bluetooth: hci2: command tx timeout
[  383.516734] Bluetooth: hci3: command tx timeout
[  383.708965] Bluetooth: hci4: command tx timeout
[  383.709455] Bluetooth: hci5: command tx timeout
[  383.772788] Bluetooth: hci7: command tx timeout
[  383.772806] Bluetooth: hci6: command tx timeout
[  385.052871] Bluetooth: hci0: command tx timeout
[  385.309009] Bluetooth: hci1: command tx timeout
[  385.437316] Bluetooth: hci2: command tx timeout
[  385.566193] Bluetooth: hci3: command tx timeout
[  385.758413] Bluetooth: hci5: command tx timeout
[  385.758490] Bluetooth: hci4: command tx timeout
[  385.822739] Bluetooth: hci6: command tx timeout
[  385.822802] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
00:04:45  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=ffffffff81353d2d RDI=fffffbfff0b83988 RBP=ffffffff85c1cc40 RSP=ffff88806ce08990
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=00000000000226de
R12=0000000000000001 R13=ffffffff81353d2d R14=0000000000000000 R15=ffff88806ce08a98
RIP=ffffffff81aedae9 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe4300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5456411000 CR3=000000003409f000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff88806cf08a78 RCX=ffff88806cf089cc RDX=1ffff1100d9e115a
RSI=ffffffff85c1cc40 RDI=ffffffff813b68b9 RBP=ffff88806cf08ad0 RSP=ffff88806cf08a60
R8 =ffffffff867becdc R9 =ffff88806cf08ab8 R10=000000000003b53d R11=0000000000008654
R12=ffff88806cf08b40 R13=0000000000000000 R14=ffff88802a878000 R15=ffff88800d561818
RIP=ffffffff81353a2b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fa87102c540 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa871139e60 CR3=0000000033305000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000000000000000ff000000000000
XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000