Warning: Permanently added '[localhost]:27117' (ECDSA) to the list of known hosts.
2024/10/21 11:54:09 fuzzer started
2024/10/21 11:54:10 dialing manager at localhost:45639
syzkaller login: [   68.560966] cgroup: Unknown subsys name 'net'
[   68.707112] cgroup: Unknown subsys name 'cpuset'
[   68.729750] cgroup: Unknown subsys name 'rlimit'
2024/10/21 11:54:27 syscalls: 2217
2024/10/21 11:54:27 code coverage: enabled
2024/10/21 11:54:27 comparison tracing: enabled
2024/10/21 11:54:27 extra coverage: enabled
2024/10/21 11:54:27 setuid sandbox: enabled
2024/10/21 11:54:27 namespace sandbox: enabled
2024/10/21 11:54:27 Android sandbox: enabled
2024/10/21 11:54:27 fault injection: enabled
2024/10/21 11:54:27 leak checking: enabled
2024/10/21 11:54:27 net packet injection: enabled
2024/10/21 11:54:27 net device setup: enabled
2024/10/21 11:54:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/10/21 11:54:27 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/10/21 11:54:27 USB emulation: enabled
2024/10/21 11:54:27 hci packet injection: enabled
2024/10/21 11:54:27 wifi device emulation: enabled
2024/10/21 11:54:27 802.15.4 emulation: enabled
2024/10/21 11:54:27 fetching corpus: 50, signal 22181/23952 (executing program)
2024/10/21 11:54:27 fetching corpus: 100, signal 34007/37301 (executing program)
2024/10/21 11:54:27 fetching corpus: 150, signal 43989/48632 (executing program)
2024/10/21 11:54:28 fetching corpus: 200, signal 48264/54299 (executing program)
2024/10/21 11:54:28 fetching corpus: 250, signal 54482/61745 (executing program)
2024/10/21 11:54:28 fetching corpus: 300, signal 57198/65724 (executing program)
2024/10/21 11:54:29 fetching corpus: 350, signal 60925/70676 (executing program)
2024/10/21 11:54:29 fetching corpus: 400, signal 66919/77640 (executing program)
2024/10/21 11:54:29 fetching corpus: 450, signal 72605/84173 (executing program)
2024/10/21 11:54:30 fetching corpus: 500, signal 74217/86847 (executing program)
2024/10/21 11:54:30 fetching corpus: 550, signal 76454/90053 (executing program)
2024/10/21 11:54:31 fetching corpus: 600, signal 78622/93172 (executing program)
2024/10/21 11:54:31 fetching corpus: 650, signal 81115/96569 (executing program)
2024/10/21 11:54:31 fetching corpus: 700, signal 82989/99407 (executing program)
2024/10/21 11:54:31 fetching corpus: 750, signal 84851/102130 (executing program)
2024/10/21 11:54:31 fetching corpus: 800, signal 87003/105033 (executing program)
2024/10/21 11:54:32 fetching corpus: 850, signal 89475/108213 (executing program)
2024/10/21 11:54:32 fetching corpus: 900, signal 90908/110460 (executing program)
2024/10/21 11:54:32 fetching corpus: 950, signal 92326/112672 (executing program)
2024/10/21 11:54:32 fetching corpus: 1000, signal 94006/115104 (executing program)
2024/10/21 11:54:32 fetching corpus: 1050, signal 96717/118263 (executing program)
2024/10/21 11:54:33 fetching corpus: 1100, signal 98038/120291 (executing program)
2024/10/21 11:54:33 fetching corpus: 1150, signal 99644/122541 (executing program)
2024/10/21 11:54:33 fetching corpus: 1200, signal 101531/124987 (executing program)
2024/10/21 11:54:34 fetching corpus: 1250, signal 102885/127011 (executing program)
2024/10/21 11:54:34 fetching corpus: 1300, signal 104196/128922 (executing program)
2024/10/21 11:54:34 fetching corpus: 1350, signal 105393/130731 (executing program)
2024/10/21 11:54:35 fetching corpus: 1400, signal 106658/132551 (executing program)
2024/10/21 11:54:35 fetching corpus: 1450, signal 107798/134294 (executing program)
2024/10/21 11:54:36 fetching corpus: 1500, signal 108954/135977 (executing program)
2024/10/21 11:54:36 fetching corpus: 1550, signal 110257/137758 (executing program)
2024/10/21 11:54:36 fetching corpus: 1600, signal 111274/139319 (executing program)
2024/10/21 11:54:37 fetching corpus: 1650, signal 112086/140688 (executing program)
2024/10/21 11:54:37 fetching corpus: 1700, signal 112787/142004 (executing program)
2024/10/21 11:54:37 fetching corpus: 1750, signal 114349/143906 (executing program)
2024/10/21 11:54:37 fetching corpus: 1800, signal 116352/146045 (executing program)
2024/10/21 11:54:38 fetching corpus: 1850, signal 117103/147305 (executing program)
2024/10/21 11:54:38 fetching corpus: 1900, signal 117977/148634 (executing program)
2024/10/21 11:54:38 fetching corpus: 1950, signal 119287/150189 (executing program)
2024/10/21 11:54:39 fetching corpus: 2000, signal 120264/151593 (executing program)
2024/10/21 11:54:39 fetching corpus: 2050, signal 120953/152770 (executing program)
2024/10/21 11:54:39 fetching corpus: 2100, signal 122449/154434 (executing program)
2024/10/21 11:54:39 fetching corpus: 2150, signal 123085/155546 (executing program)
2024/10/21 11:54:40 fetching corpus: 2200, signal 123984/156791 (executing program)
2024/10/21 11:54:40 fetching corpus: 2250, signal 124769/157947 (executing program)
2024/10/21 11:54:40 fetching corpus: 2300, signal 125455/159075 (executing program)
2024/10/21 11:54:40 fetching corpus: 2350, signal 126381/160308 (executing program)
2024/10/21 11:54:40 fetching corpus: 2400, signal 127015/161350 (executing program)
2024/10/21 11:54:41 fetching corpus: 2450, signal 128736/163088 (executing program)
2024/10/21 11:54:41 fetching corpus: 2500, signal 129858/164347 (executing program)
2024/10/21 11:54:42 fetching corpus: 2550, signal 130571/165409 (executing program)
2024/10/21 11:54:42 fetching corpus: 2600, signal 131237/166396 (executing program)
2024/10/21 11:54:42 fetching corpus: 2650, signal 131823/167352 (executing program)
2024/10/21 11:54:42 fetching corpus: 2700, signal 132536/168299 (executing program)
2024/10/21 11:54:43 fetching corpus: 2750, signal 133177/169263 (executing program)
2024/10/21 11:54:43 fetching corpus: 2800, signal 133832/170197 (executing program)
2024/10/21 11:54:43 fetching corpus: 2850, signal 134392/171041 (executing program)
2024/10/21 11:54:44 fetching corpus: 2900, signal 135155/171994 (executing program)
2024/10/21 11:54:44 fetching corpus: 2950, signal 135723/172835 (executing program)
2024/10/21 11:54:44 fetching corpus: 3000, signal 136286/173719 (executing program)
2024/10/21 11:54:45 fetching corpus: 3050, signal 136771/174518 (executing program)
2024/10/21 11:54:45 fetching corpus: 3100, signal 137370/175325 (executing program)
2024/10/21 11:54:45 fetching corpus: 3150, signal 138024/176174 (executing program)
2024/10/21 11:54:46 fetching corpus: 3200, signal 138645/176997 (executing program)
2024/10/21 11:54:46 fetching corpus: 3250, signal 139430/177868 (executing program)
2024/10/21 11:54:46 fetching corpus: 3300, signal 139802/178583 (executing program)
2024/10/21 11:54:47 fetching corpus: 3350, signal 140287/179304 (executing program)
2024/10/21 11:54:47 fetching corpus: 3400, signal 140726/180027 (executing program)
2024/10/21 11:54:47 fetching corpus: 3450, signal 141443/180825 (executing program)
2024/10/21 11:54:48 fetching corpus: 3500, signal 141932/181529 (executing program)
2024/10/21 11:54:48 fetching corpus: 3550, signal 142654/182325 (executing program)
2024/10/21 11:54:48 fetching corpus: 3600, signal 143256/183090 (executing program)
2024/10/21 11:54:48 fetching corpus: 3650, signal 143930/183806 (executing program)
2024/10/21 11:54:49 fetching corpus: 3700, signal 144260/184429 (executing program)
2024/10/21 11:54:49 fetching corpus: 3750, signal 144702/185107 (executing program)
2024/10/21 11:54:49 fetching corpus: 3800, signal 145786/185871 (executing program)
2024/10/21 11:54:50 fetching corpus: 3850, signal 146311/186563 (executing program)
2024/10/21 11:54:50 fetching corpus: 3900, signal 146641/187160 (executing program)
2024/10/21 11:54:50 fetching corpus: 3950, signal 146940/187740 (executing program)
2024/10/21 11:54:51 fetching corpus: 4000, signal 147410/188335 (executing program)
2024/10/21 11:54:51 fetching corpus: 4050, signal 148107/188980 (executing program)
2024/10/21 11:54:51 fetching corpus: 4100, signal 148707/189587 (executing program)
2024/10/21 11:54:52 fetching corpus: 4150, signal 149138/190139 (executing program)
2024/10/21 11:54:52 fetching corpus: 4200, signal 149693/190692 (executing program)
2024/10/21 11:54:52 fetching corpus: 4250, signal 150719/191315 (executing program)
2024/10/21 11:54:53 fetching corpus: 4300, signal 151213/191845 (executing program)
2024/10/21 11:54:53 fetching corpus: 4350, signal 151877/192405 (executing program)
2024/10/21 11:54:53 fetching corpus: 4400, signal 152384/192949 (executing program)
2024/10/21 11:54:54 fetching corpus: 4450, signal 152732/193416 (executing program)
2024/10/21 11:54:54 fetching corpus: 4500, signal 153203/193910 (executing program)
2024/10/21 11:54:54 fetching corpus: 4550, signal 153640/194438 (executing program)
2024/10/21 11:54:55 fetching corpus: 4600, signal 154099/194928 (executing program)
2024/10/21 11:54:55 fetching corpus: 4650, signal 154436/195427 (executing program)
2024/10/21 11:54:56 fetching corpus: 4700, signal 155096/195923 (executing program)
2024/10/21 11:54:56 fetching corpus: 4750, signal 155442/196394 (executing program)
2024/10/21 11:54:56 fetching corpus: 4800, signal 155998/196823 (executing program)
2024/10/21 11:54:57 fetching corpus: 4850, signal 156379/197234 (executing program)
2024/10/21 11:54:57 fetching corpus: 4900, signal 156840/197658 (executing program)
2024/10/21 11:54:57 fetching corpus: 4950, signal 157260/197983 (executing program)
2024/10/21 11:54:57 fetching corpus: 5000, signal 157601/197983 (executing program)
2024/10/21 11:54:58 fetching corpus: 5050, signal 157954/197983 (executing program)
2024/10/21 11:54:58 fetching corpus: 5100, signal 158515/197983 (executing program)
2024/10/21 11:54:58 fetching corpus: 5150, signal 158953/197983 (executing program)
2024/10/21 11:54:59 fetching corpus: 5200, signal 159340/197983 (executing program)
2024/10/21 11:54:59 fetching corpus: 5250, signal 159714/197983 (executing program)
2024/10/21 11:54:59 fetching corpus: 5300, signal 160047/197983 (executing program)
2024/10/21 11:54:59 fetching corpus: 5350, signal 160354/197983 (executing program)
2024/10/21 11:55:00 fetching corpus: 5400, signal 160741/197983 (executing program)
2024/10/21 11:55:00 fetching corpus: 5450, signal 160963/197983 (executing program)
2024/10/21 11:55:00 fetching corpus: 5500, signal 161327/197983 (executing program)
2024/10/21 11:55:00 fetching corpus: 5550, signal 161624/197983 (executing program)
2024/10/21 11:55:01 fetching corpus: 5600, signal 162189/197983 (executing program)
2024/10/21 11:55:01 fetching corpus: 5650, signal 162431/197983 (executing program)
2024/10/21 11:55:01 fetching corpus: 5700, signal 162668/197983 (executing program)
2024/10/21 11:55:02 fetching corpus: 5750, signal 163054/197983 (executing program)
2024/10/21 11:55:02 fetching corpus: 5800, signal 163404/197986 (executing program)
2024/10/21 11:55:02 fetching corpus: 5850, signal 163819/197986 (executing program)
2024/10/21 11:55:02 fetching corpus: 5900, signal 164134/197986 (executing program)
2024/10/21 11:55:03 fetching corpus: 5950, signal 164477/197986 (executing program)
2024/10/21 11:55:03 fetching corpus: 6000, signal 164770/197986 (executing program)
2024/10/21 11:55:03 fetching corpus: 6050, signal 164994/197986 (executing program)
2024/10/21 11:55:04 fetching corpus: 6100, signal 165155/197986 (executing program)
2024/10/21 11:55:04 fetching corpus: 6150, signal 165418/197986 (executing program)
2024/10/21 11:55:04 fetching corpus: 6200, signal 165719/197986 (executing program)
2024/10/21 11:55:04 fetching corpus: 6250, signal 166173/197986 (executing program)
2024/10/21 11:55:05 fetching corpus: 6300, signal 166569/197986 (executing program)
2024/10/21 11:55:05 fetching corpus: 6350, signal 166770/197986 (executing program)
2024/10/21 11:55:06 fetching corpus: 6400, signal 167068/197986 (executing program)
2024/10/21 11:55:06 fetching corpus: 6450, signal 167362/197986 (executing program)
2024/10/21 11:55:06 fetching corpus: 6500, signal 167651/197986 (executing program)
2024/10/21 11:55:07 fetching corpus: 6550, signal 167845/197986 (executing program)
2024/10/21 11:55:07 fetching corpus: 6600, signal 168501/197986 (executing program)
2024/10/21 11:55:07 fetching corpus: 6650, signal 168757/197987 (executing program)
2024/10/21 11:55:08 fetching corpus: 6700, signal 169170/197987 (executing program)
2024/10/21 11:55:08 fetching corpus: 6750, signal 169416/197987 (executing program)
2024/10/21 11:55:08 fetching corpus: 6800, signal 169730/197987 (executing program)
2024/10/21 11:55:09 fetching corpus: 6850, signal 170047/197987 (executing program)
2024/10/21 11:55:09 fetching corpus: 6900, signal 170398/197987 (executing program)
2024/10/21 11:55:09 fetching corpus: 6950, signal 170745/197987 (executing program)
2024/10/21 11:55:10 fetching corpus: 7000, signal 170911/197987 (executing program)
2024/10/21 11:55:10 fetching corpus: 7050, signal 171418/197987 (executing program)
2024/10/21 11:55:10 fetching corpus: 7100, signal 171757/197987 (executing program)
2024/10/21 11:55:10 fetching corpus: 7150, signal 172139/197989 (executing program)
2024/10/21 11:55:10 fetching corpus: 7200, signal 172408/197989 (executing program)
2024/10/21 11:55:10 fetching corpus: 7250, signal 172684/197989 (executing program)
2024/10/21 11:55:10 fetching corpus: 7300, signal 172944/197989 (executing program)
2024/10/21 11:55:11 fetching corpus: 7350, signal 173165/197989 (executing program)
2024/10/21 11:55:11 fetching corpus: 7400, signal 173362/197989 (executing program)
2024/10/21 11:55:11 fetching corpus: 7450, signal 173619/197989 (executing program)
2024/10/21 11:55:11 fetching corpus: 7500, signal 173949/197989 (executing program)
2024/10/21 11:55:11 fetching corpus: 7550, signal 174123/197989 (executing program)
2024/10/21 11:55:12 fetching corpus: 7600, signal 174422/197989 (executing program)
2024/10/21 11:55:12 fetching corpus: 7650, signal 174613/197989 (executing program)
2024/10/21 11:55:12 fetching corpus: 7700, signal 175078/197989 (executing program)
2024/10/21 11:55:12 fetching corpus: 7750, signal 175233/197989 (executing program)
2024/10/21 11:55:12 fetching corpus: 7800, signal 175401/197989 (executing program)
2024/10/21 11:55:12 fetching corpus: 7850, signal 175786/197989 (executing program)
2024/10/21 11:55:12 fetching corpus: 7900, signal 175985/197989 (executing program)
2024/10/21 11:55:12 fetching corpus: 7950, signal 176302/197989 (executing program)
2024/10/21 11:55:12 fetching corpus: 8000, signal 176621/197989 (executing program)
2024/10/21 11:55:12 fetching corpus: 8050, signal 176845/197989 (executing program)
2024/10/21 11:55:13 fetching corpus: 8100, signal 177180/197989 (executing program)
2024/10/21 11:55:13 fetching corpus: 8150, signal 177418/197989 (executing program)
2024/10/21 11:55:13 fetching corpus: 8200, signal 177576/197989 (executing program)
2024/10/21 11:55:13 fetching corpus: 8250, signal 178209/197989 (executing program)
2024/10/21 11:55:13 fetching corpus: 8300, signal 178399/197989 (executing program)
2024/10/21 11:55:14 fetching corpus: 8350, signal 178614/197989 (executing program)
2024/10/21 11:55:14 fetching corpus: 8400, signal 178887/197989 (executing program)
2024/10/21 11:55:14 fetching corpus: 8450, signal 179237/197989 (executing program)
2024/10/21 11:55:15 fetching corpus: 8500, signal 179580/197989 (executing program)
2024/10/21 11:55:15 fetching corpus: 8550, signal 179777/197989 (executing program)
2024/10/21 11:55:15 fetching corpus: 8600, signal 180132/197989 (executing program)
2024/10/21 11:55:15 fetching corpus: 8650, signal 180369/197989 (executing program)
2024/10/21 11:55:15 fetching corpus: 8700, signal 180582/197991 (executing program)
2024/10/21 11:55:15 fetching corpus: 8750, signal 180823/197991 (executing program)
2024/10/21 11:55:16 fetching corpus: 8800, signal 181211/197991 (executing program)
2024/10/21 11:55:16 fetching corpus: 8850, signal 181479/197991 (executing program)
2024/10/21 11:55:16 fetching corpus: 8900, signal 181663/197991 (executing program)
2024/10/21 11:55:17 fetching corpus: 8950, signal 181923/197991 (executing program)
2024/10/21 11:55:17 fetching corpus: 9000, signal 182090/197991 (executing program)
2024/10/21 11:55:17 fetching corpus: 9050, signal 182317/197991 (executing program)
2024/10/21 11:55:17 fetching corpus: 9100, signal 182561/197991 (executing program)
2024/10/21 11:55:18 fetching corpus: 9150, signal 182863/197991 (executing program)
2024/10/21 11:55:18 fetching corpus: 9200, signal 183093/197991 (executing program)
2024/10/21 11:55:18 fetching corpus: 9250, signal 183368/197991 (executing program)
2024/10/21 11:55:18 fetching corpus: 9300, signal 183544/197991 (executing program)
2024/10/21 11:55:18 fetching corpus: 9350, signal 183769/197991 (executing program)
2024/10/21 11:55:18 fetching corpus: 9400, signal 183959/197991 (executing program)
2024/10/21 11:55:18 fetching corpus: 9450, signal 184146/197991 (executing program)
2024/10/21 11:55:18 fetching corpus: 9500, signal 184347/197991 (executing program)
2024/10/21 11:55:19 fetching corpus: 9550, signal 184655/197991 (executing program)
2024/10/21 11:55:19 fetching corpus: 9600, signal 184898/197991 (executing program)
2024/10/21 11:55:19 fetching corpus: 9650, signal 185033/197991 (executing program)
2024/10/21 11:55:20 fetching corpus: 9700, signal 185197/197991 (executing program)
2024/10/21 11:55:20 fetching corpus: 9750, signal 185387/197991 (executing program)
2024/10/21 11:55:20 fetching corpus: 9800, signal 185686/197991 (executing program)
2024/10/21 11:55:21 fetching corpus: 9850, signal 185874/197992 (executing program)
2024/10/21 11:55:21 fetching corpus: 9900, signal 186039/197992 (executing program)
2024/10/21 11:55:21 fetching corpus: 9950, signal 186300/197992 (executing program)
2024/10/21 11:55:21 fetching corpus: 10000, signal 186506/197992 (executing program)
2024/10/21 11:55:22 fetching corpus: 10050, signal 186638/197992 (executing program)
2024/10/21 11:55:22 fetching corpus: 10100, signal 186816/197992 (executing program)
2024/10/21 11:55:23 fetching corpus: 10150, signal 187102/197992 (executing program)
2024/10/21 11:55:23 fetching corpus: 10200, signal 187334/197992 (executing program)
2024/10/21 11:55:23 fetching corpus: 10250, signal 187534/197992 (executing program)
2024/10/21 11:55:24 fetching corpus: 10300, signal 187795/197992 (executing program)
2024/10/21 11:55:24 fetching corpus: 10350, signal 187970/197992 (executing program)
2024/10/21 11:55:24 fetching corpus: 10400, signal 188190/197992 (executing program)
2024/10/21 11:55:25 fetching corpus: 10450, signal 188297/197992 (executing program)
2024/10/21 11:55:25 fetching corpus: 10500, signal 188527/197992 (executing program)
2024/10/21 11:55:25 fetching corpus: 10550, signal 189187/197992 (executing program)
2024/10/21 11:55:26 fetching corpus: 10600, signal 189394/197992 (executing program)
2024/10/21 11:55:26 fetching corpus: 10650, signal 189518/197992 (executing program)
2024/10/21 11:55:26 fetching corpus: 10700, signal 189678/197992 (executing program)
2024/10/21 11:55:27 fetching corpus: 10741, signal 189848/197992 (executing program)
2024/10/21 11:55:27 fetching corpus: 10741, signal 189848/197992 (executing program)
2024/10/21 11:55:30 starting 8 fuzzer processes
11:55:30 executing program 0:
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{}, {0x20, '(.[-'}], 0xa, "406e07d12fd317f6170a4f6d8f0ddbb06394583873772336af30cf1030f40b89f799bdc31959023d431fc4250c4fafd0241c30f1faee0fcbbafd0fac5a02286087"}, 0x52)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x21)
read$hiddev(r0, &(0x7f0000000100)=""/163, 0xa3)
ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f00000001c0))
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200))
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000240))
r2 = openat(r0, &(0x7f0000000280)='./file0/file0\x00', 0x800, 0x100)
openat$cgroup_ro(r0, &(0x7f00000002c0)='rdma.current\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f0000000340)={<r5=>0x0, <r6=>0x0})
clock_gettime(0x0, &(0x7f0000000380)={<r7=>0x0, <r8=>0x0})
write$evdev(r1, &(0x7f00000003c0)=[{{0x77359400}, 0x1, 0x38, 0x9}, {{r3, r4/1000+10000}, 0x1f, 0x6}, {{}, 0x16, 0x2, 0x5}, {{r5, r6/1000+10000}, 0x12, 0x3, 0x7fffffff}, {{0x0, 0x2710}, 0x14, 0xfff}, {{r7, r8/1000+60000}, 0x1f, 0x88f, 0x7}], 0x90)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000480)={0x8, 0x400, 0x0, 'queue1\x00', 0x4})
r9 = openat(r1, &(0x7f0000000540)='./file0\x00', 0x2000, 0x9b)
ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f0000000580)={0x0, 0x9, 0x90000000, 0xca})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)=<r10=>0x0)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
kcmp$KCMP_EPOLL_TFD(r10, 0x0, 0x7, r1, &(0x7f0000000640)={r11, r9, 0x5})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)

11:55:30 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'})
r1 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x69a000, 0x141, 0x3}, 0x18)
syncfs(r1)
r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r3 = openat2(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x220000, 0x1b2, 0x3}, 0x18)
pipe2(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80000)
ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f00000001c0))
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x10)
recvmmsg$unix(r3, &(0x7f0000004ec0)=[{{&(0x7f0000000240), 0x6e, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/24, 0x18}, {&(0x7f0000000300)=""/153, 0x99}, {&(0x7f00000003c0)=""/239, 0xef}], 0x3, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r6=>0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r8=>0x0}}}], 0x88}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000640)=""/5, 0x5}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000e00)=[{&(0x7f00000007c0)=""/157, 0x9d}, {&(0x7f0000000880)=""/248, 0xf8}, {&(0x7f0000000980)=""/5, 0x5}, {&(0x7f00000009c0)=""/70, 0x46}, {&(0x7f0000000a40)=""/139, 0x8b}, {&(0x7f0000000b00)=""/21, 0x15}, {&(0x7f0000000b40)=""/227, 0xe3}, {&(0x7f0000000c40)=""/131, 0x83}, {&(0x7f0000000d00)=""/90, 0x5a}, {&(0x7f0000000d80)=""/74, 0x4a}], 0xa, &(0x7f0000000ec0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000f00)=@abs, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f80)=""/180, 0xb4}, {&(0x7f0000001040)}], 0x2, &(0x7f00000010c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r10=>0x0}}}], 0x20}}, {{&(0x7f0000001100), 0x6e, &(0x7f00000033c0)=[{&(0x7f0000001180)=""/196, 0xc4}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/99, 0x63}, {&(0x7f0000003300)=""/133, 0x85}], 0x5, &(0x7f0000003440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003480)=""/176, 0xb0}, {&(0x7f0000003540)=""/117, 0x75}, {&(0x7f00000035c0)=""/66, 0x42}, {&(0x7f0000003640)=""/169, 0xa9}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/235, 0xeb}, {&(0x7f0000004800)=""/145, 0x91}], 0x7}}, {{&(0x7f0000004940)=@abs, 0x6e, &(0x7f0000004e00)=[{&(0x7f00000049c0)=""/178, 0xb2}, {&(0x7f0000004a80)=""/77, 0x4d}, {&(0x7f0000004b00)=""/142, 0x8e}, {&(0x7f0000004bc0)=""/173, 0xad}, {&(0x7f0000004c80)=""/104, 0x68}, {&(0x7f0000004d00)=""/204, 0xcc}], 0x6, &(0x7f0000004e80)=[@cred={{0x1c}}], 0x20}}], 0x7, 0x40000000, &(0x7f0000005080)={0x77359400})
lchown(&(0x7f00000050c0)='./file0\x00', r10, r8)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000005100))
openat2(r9, &(0x7f0000005140)='./file0\x00', &(0x7f0000005180)={0x80000, 0x1e1, 0x4}, 0x18)
openat(r6, &(0x7f00000051c0)='./file0\x00', 0x40001, 0x1d6)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000005200)={{0x1, 0x1, 0x18, <r11=>r7, {0x5}}, './file0\x00'})
process_mrelease(r11, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000005240)={{0x1, 0x1, 0x18, <r12=>r7}, './file0\x00'})
pwrite64(r12, &(0x7f0000005280)="4ee2d7d70a7e615c271df073785e917b0571823ba90243176c147bed213d895efb64dfa1", 0x24, 0x7)
write$binfmt_script(r0, &(0x7f00000052c0)={'#! ', './file1', [{0x20, '\\&[/'}, {}, {0x20, '#:\x04'}], 0xa, "041e9ef1d09aa6545d253f1302d9808a86b0a7a5666bea060f917fee19f3a7034dd44f313c33"}, 0x3b)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000053c0)=<r13=>0x0)
perf_event_open(&(0x7f0000005340)={0x5, 0x80, 0x1, 0x6, 0xfe, 0x40, 0x0, 0xc7, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc72, 0x2, @perf_bp={&(0x7f0000005300), 0x2}, 0x80, 0x7ff, 0x6b, 0x6, 0xfd9e, 0xf3, 0xf221, 0x0, 0x4, 0x0, 0x1}, r13, 0x1, 0xffffffffffffffff, 0x8)

11:55:30 executing program 2:
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000100), &(0x7f0000000140)=0x4)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xff}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x68}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8001}, @ETHTOOL_A_RINGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x16b}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x8}}, './file0\x00'})
sendto$unix(r0, &(0x7f0000000340)="ec16d8e6", 0x4, 0x40040, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000005}, 0xc040)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x1c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x48, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x89}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10000, 0x9}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24044841}, 0x4000)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000880)={r4, 0x400, 0x3, 0xfffffffffffff8c7})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000980)={&(0x7f00000008c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008880}, 0x40)
lsetxattr$security_capability(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)=@v1={0x1000000, [{0x3f000000, 0x9}]}, 0xc, 0x1)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000a80)={0x0, 'caif0\x00', {0x4}, 0x9})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan0\x00'})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b00), 0x44401, 0x0)
sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x3fa, 0x400, 0x70bd2a, 0x25dfdbfc, {0x1, 0x1, 0x1, 0x1}, ["", "", "", ""]}, 0x20}}, 0x20040800)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000c40)=0x7)

11:55:30 executing program 3:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm', 0x50001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x8000}}, './file0\x00'})
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r1, {0x4, 0x6}}, './file0\x00'})
setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4)
ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0)
read$hiddev(r0, &(0x7f0000000100)=""/34, 0x22)
r4 = memfd_secret(0x0)
ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000140))
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
recvfrom(r5, &(0x7f0000000180)=""/73, 0x49, 0x10000, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x4, 0x0, {0xa, 0x4e23, 0x9, @private0, 0x5}}}, 0x80)
r6 = syz_open_dev$vcsu(&(0x7f0000000280), 0x6, 0x4481)
ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f00000002c0))
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x14000, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000340)={0x1000, 0xffffffe0, 0x6, "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"})
r8 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82)
getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000001380)=""/231, &(0x7f0000001480)=0xe7)
creat(&(0x7f00000014c0)='./file0/file0\x00', 0x100)

[  148.559073] audit: type=1400 audit(1729511730.531:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
11:55:30 executing program 4:
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x4, 0x4b450589, 0x1)
mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x440001, 0x0)
r1 = syz_io_uring_setup(0x387e, &(0x7f0000000080)={0x0, 0xaab9, 0x0, 0x3, 0x3b6, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140))
io_uring_enter(r0, 0x55ab, 0x51c9, 0x3, &(0x7f0000000180)={[0x7fffffff]}, 0x8)
r2 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x3, 0x900)
lseek(r2, 0x5, 0x2)
pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000200)="8b51e97bf1d5f0807a35c2e448404531be678c3873fbbd30d2b8b9e41954768dfc409b77454f1620a6c2429bb372e20ae8d4214a84d9733dd447f1969ddb21453bc0263fbb62e8e84899270c2247c2b21f834b66118fdae0c00bc7c3dc66d9cac2a9a63d1dcba4003d8e72bd0a65eaf2aef34ee3a8a95b45b786986839097ee841794814a48ec20a0bf02cd325247b44b7c2b0a77ba43fdd8a6911677a2ae24b955f40d4bac4f3defd6093ff41d615d801d86866bd", 0xb5}, {&(0x7f00000002c0)="1fb48cf7a1060017926462cc7f9752a715c66b4d2933c2ef7a3b62afaada36c916eb826695837e924005c86e1e43d469f8fdaea99cf05bb4b3a39e2d42b32ff179c9449fa37438e0bacac4fc0eab6dcbbc74e89adf9ab970447dadeb21a52e53cc76f536d1d6b8eb16849c5dbe7f2be6350b92f1f27b0d979afddc90d5a723c4f245013dd4c8cf427cd90b68d3950eb8cf5b232a5a7fb42652418fd15dc95ee2eda3e3f0d7a0497e7d0ba81f91680bf0fafc523d59f6bfd2595260455424bf8c9252f47b9c7944daf3b4d0aca846c7733fa57119ccc00c4a1158", 0xda}, {&(0x7f00000003c0)="f776e206f8272096052bb7a62bff17f7bca16a63abf4c832d54fedb4332244e22884d0a8208b2f48ce0551736b42b3184beeff29462a57bfe57c60791fcc9d55a99a6f6298e1b610fa26abc3147574466be16ba67aa08c820d815f89f1586a272f7d9fa8df95580bad925df38019200df9b1a4eb", 0x74}], 0x3, 0x5, 0x5)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000480)={0x0, r0, 0xffffffffffff7fff, 0x7fff, 0x1, 0x1ff})
write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '/dev/vcsu\x00'}, {0x20, '/dev/vcsu\x00'}, {0x20, '/'}, {0x20, '-\xb0^+:++'}, {0x20, ')'}], 0xa, "d107e509431b1a4f99dea9b4e06c91cf84bc13f5c9a6946a45664ed4"}, 0x49)
readv(r1, &(0x7f0000001580)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)}], 0x2)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x410881, 0x0)
sendfile(r0, r3, 0x0, 0x100000001)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000001600), 0x3, 0xdf265b58f2afc765)
get_mempolicy(&(0x7f0000001640), &(0x7f0000001680), 0x400, &(0x7f0000ffc000/0x4000)=nil, 0x3)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f00000016c0), 0x4)
connect(r0, &(0x7f0000001700)=@llc={0x1a, 0x336, 0x6, 0x0, 0x2a, 0x9, @local}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000001780))

11:55:30 executing program 5:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip_tables_matches\x00')
ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000080))
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x80000)
ioctl$TIOCNOTTY(r2, 0x5422)
r3 = syz_open_dev$vcsu(&(0x7f0000000380), 0x1, 0x40100)
r4 = syz_open_dev$vcsn(&(0x7f0000000600), 0x1, 0x80)
io_submit(0x0, 0x7, &(0x7f0000000840)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xd0, r1, &(0x7f0000000140)="103eac5aefdfe115f95346c51085ae96ee95cb8cc31596d15172ae293da621dbd4adbf00ec27049287286dbec1ef5a55fb1ea6f5dd126b6321352828739f59907e344440bf6314780859cc8ca9adee2383f36701091cdaff04049c722ecdc636fcebea49e7b5bbf9c51eeaa618bdc9bcb15024976944d0f1421d33358ff49e707ecf7e590026dad5d26a5385ca710ae24ab29fd5668f96979a5968421461e805fdb25b0840a379602694cfc7780080d45b9c55f72ea67f5cde9a135bf79c5c9c68940a52ac637d82ee1cbb31e7df2bd463ed9f", 0xd3, 0x7f, 0x0, 0x2, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x4, r2, &(0x7f0000000280)="08c84886b8e94b9305aee0719f652c35be9e95e7ef0f6d64106a1424e1dcadad5fc9e50d45063e9bb3c91b857724b035162b2884fadd157fadcc01a05db9014f6020e2adfa78add9b25cea161007b8f57306b001e46cd073ec6b06a09f50fcd2b771eb2aea4a64b8e78a1d4e2adec9ab9f562548dca3c770344f88190a64f31be9f286868bdae0c102ff139eebb7e53ab5d1d411d7917538860ef1297f3e59e6ed8e", 0xa2, 0x101, 0x0, 0x1, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x1, r3, &(0x7f00000003c0)="581a115c8108c649e8", 0x9, 0x5a6, 0x0, 0x6}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x273, 0xffffffffffffffff, &(0x7f0000000440)="9dc7e5afbf409d1eaf30d582a89db828d470d4e73d8849074c723649c17f6e505d038794c17954f5b0d6db648f83ca70baba582bbd82aad3240f8aa3bf6906ea23c0eed762f4cece89ec850d4bc9f825000b3c381736b07b5a663f792f1b3671a16e81e1ae914cc61e1178e7764553bc65f2185e1715a2319fe5162a2c9a846d862843116526e01b59150543be77b263c03e06417b8100fa15699f88170d047f425d825fbd3764a5b6722a7ccd6fe13dcc900e4eefdd362f9369f4c787b44fc5a10ee12b7bc3b0564705d48592da46d47911f9331200143a65c4fc576e56df7f77e399dc50a4e5d0e1a78a82572b9020bfdfd69daddc", 0xf6, 0x1c4560, 0x0, 0x1, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x531, r2, &(0x7f0000000580)="be9f675bb352", 0x6, 0x5, 0x0, 0x2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000640)="2006461ddf6bd1539d11f8e41e013867eef3988b62d2db946ded6903f27c1d40e211f3b8b14cb217cb8a5486bce64926bf609f8ef50b72f059cf7e6a583345b7435feed16d01d5a528b65e0051f9cf6e8aa882c85d9dfd48caf74dabe86ce63397cb81fd9fc8b97ce0911943e08b0168b1079d91174a05e8247d922b0f2ee3cd44ea928972ecd2ed81ee94396664720379be5e6c10138c43a89b33024467b7f60920bead3b714c65c8d3ac5d32d2f77891cde4ee485f96a8c42945cfe992021120efb97dce03a5952711cdf19f840684d6", 0xd1, 0x4, 0x0, 0x1, r1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000780)="7332ddc00818d572db4877fb398d4a37114204371404952fa7e859690d928f15b492d30b6155e8a596fae042e849623d376a17385e24bd4aa7dbc38ce518c83bf07281d2747746abbdac1a8d2e287a7b19beba51f47f76946c5cedf3db4837", 0x5f, 0x3, 0x0, 0x2}])
r5 = accept4$unix(r1, 0x0, &(0x7f0000000880), 0x80000)
ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f00000008c0)={0x715, 0x1c483a91, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
writev(r1, &(0x7f000000b600)=[{&(0x7f000000b300)="79affde09be640ae1c542958bf72915e88706369988a7861336e34bbdc63913a17e2733a41d4af08a7bb0598744e241da173525c94b2f4c3c5aa9a8a2921c986f374a6a351f440ee62b5a0496cda15f78067544045ea4d404f2a9886a4e3378fb79678a1df53dfb0b8de2d12cd853bb0afb547f53cf9b822a79bd6636e1525668a4d4ac71d2fe32de88e98caacc666109ec776379a15382df766b615c9e101af8edbde0e1be315c4178f628f98806d02a5733965c4164d29e734d3eeaee875306459b31f2a9c90f0b920d32d56c77cbd71cb4131db2fac97d5b330f657", 0xdd}, {&(0x7f000000b400)="9226cee3430b3fcfa4e14ccf643ebe74076a725767a7d0b5ca278142c9a66511c485e458e085352c53ba712a2863db3b1ae0037f1e1f81da98329a942eb46442cb520afdb362f1a5bad3518996315bf7890da05d960c8b42ecc660a99286553756d4e5be780e204bb24e3bacae2f4fc40f7dbb1a884eb5a0e444ba6d0f8290c86dc6de8be0b19c866e802acaf038095a8c3d7aec940cbdfd399b8dba26ba5a601caea14d0e8e82bccaaae695e92c7438b4ce756c23d26dd70b308bf35f6f318fda3ab85e43b9aeb317ce2279508c7e1e", 0xd0}, {&(0x7f000000b500)="d3e270faf9551c9b837a51051c1da8fda0d5b463f0e464a6057f8348e8e67e7ee3a3b8a452836ff97b7f1fba1cb97b81cc88a29c62544d7c554405654d43e22d2748c7373f7e1b2e1b74b883a45f5d649708f2b809810c85551b4d4b1dd402dccfaa207df337e5a169aadd9f514d3861bd693965ed9510257994e577db29708b87f8f997a39e481852a1e2a626504487c28f5fe3117fe309ab454d3ea60afd4e0218f47cac3e21759a28200dc9730d5d5601c8fdd2f40d9c7adfa1e01939d13076165812d0f4a33c062e8273203cff78bbc0431564b83f3301094b", 0xdb}], 0x3)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f000000b640))
r6 = syz_open_procfs$userns(r0, &(0x7f000000b680))
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f000000b6c0))
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f000000b700)={0x3, 0x4, 0x401, 0x7, 0x9})
r7 = syz_open_procfs(r0, &(0x7f000000b740)='net/ip6_mr_cache\x00')
ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f000000b780)={{0x2, 0x4e21, @multicast2}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10, {0x2, 0x4e21, @loopback}, 'veth0_to_bridge\x00'})
sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f000000b8c0)={&(0x7f000000b800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f000000b880)={&(0x7f000000b840)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4040)

11:55:30 executing program 6:
shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/225)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000100)=""/137)
r0 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil)
r1 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmctl$IPC_RMID(r0, 0x0)
r2 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil)
shmctl$IPC_RMID(r2, 0x0)
r3 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil)
shmctl$IPC_RMID(r3, 0x0)
r4 = shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x6000)
shmdt(r4)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x1000)
r5 = getegid()
shmctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x3, 0xee01, 0xffffffffffffffff, 0xee01, r5, 0x8, 0x5}, 0x27a13e51, 0x8001, 0x80, 0x100000001, 0xffffffffffffffff, 0xffffffffffffffff})
r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil)
shmctl$SHM_LOCK(r6, 0xb)
shmat(r2, &(0x7f0000fff000/0x1000)=nil, 0x5000)
shmctl$IPC_RMID(r2, 0x0)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil)

11:55:30 executing program 7:
r0 = fork()
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r1=>0x0)
ptrace$poke(0x5, r1, &(0x7f0000000040), 0x8001)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=<r2=>0x0)
tgkill(r0, r0, 0x35)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f00000000c0))
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0xffff, 0x7, 0xfc01, 0x0, 0xfff9, 0x5d5})
ptrace$peek(0x3, r0, &(0x7f0000000140))
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x4300, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f00000001c0)={0xd, 0x8000})
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000200)={0x5, 0x6, 0x8, 0x3e9, 0x8, "c859d9789f58e16960e73c60a856b8b5467eb8", 0x8, 0xa2af})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ptrace$poke(0x5, r2, &(0x7f0000000240), 0xfffffffffffffffb)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000280)={0x7f, 0x2, 0x200, 0x1, 0x3, "86813b27199159c2efc11e87f84b16d48f681d", 0x7, 0x5})
r5 = geteuid()
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2080, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0x14d}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@version_u}, {@version_9p2000}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@access_client}, {@cache_loose}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/sr0\x00'}}]}})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000440)={0x0, <r6=>0x0})
fcntl$setown(r3, 0x8, r6)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0))
sendfile(r4, 0xffffffffffffffff, &(0x7f0000000580)=0x8, 0x8)

[  149.902450] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  149.911123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  149.912444] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  149.917632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  149.919418] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  149.920706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  150.035380] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  150.037810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  150.039499] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  150.049241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  150.051517] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  150.052656] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  150.089808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  150.091421] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  150.094856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  150.096111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  150.097405] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  150.103180] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  150.104487] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  150.106541] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  150.107448] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  150.109330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  150.110672] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  150.113320] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  150.114602] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  150.116991] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  150.121610] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  150.129432] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  150.133411] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  150.134568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  150.140525] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  150.143203] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  150.144659] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  150.147699] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  150.151782] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  150.160205] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  150.160248] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  150.165005] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  150.165121] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  150.165702] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  150.171412] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  150.190395] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  150.204393] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  150.205917] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  150.210321] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  150.214963] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  150.216790] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  150.217818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  151.991446] Bluetooth: hci0: command tx timeout
[  152.118936] Bluetooth: hci1: command tx timeout
[  152.183021] Bluetooth: hci2: command tx timeout
[  152.183798] Bluetooth: hci5: command tx timeout
[  152.184536] Bluetooth: hci4: command tx timeout
[  152.247081] Bluetooth: hci6: command tx timeout
[  152.248240] Bluetooth: hci7: command tx timeout
[  152.248811] Bluetooth: hci3: command tx timeout
[  154.038939] Bluetooth: hci0: command tx timeout
[  154.168007] Bluetooth: hci1: command tx timeout
[  154.231888] Bluetooth: hci4: command tx timeout
[  154.232448] Bluetooth: hci5: command tx timeout
[  154.233699] Bluetooth: hci2: command tx timeout
[  154.295897] Bluetooth: hci3: command tx timeout
[  154.296441] Bluetooth: hci6: command tx timeout
[  154.297257] Bluetooth: hci7: command tx timeout
[  156.088914] Bluetooth: hci0: command tx timeout
[  156.216052] Bluetooth: hci1: command tx timeout
[  156.278936] Bluetooth: hci2: command tx timeout
[  156.279076] Bluetooth: hci4: command tx timeout
[  156.279481] Bluetooth: hci5: command tx timeout
[  156.344938] Bluetooth: hci6: command tx timeout
[  156.344980] Bluetooth: hci3: command tx timeout
[  156.345465] Bluetooth: hci7: command tx timeout
[  158.134974] Bluetooth: hci0: command tx timeout
[  158.263880] Bluetooth: hci1: command tx timeout
[  158.327053] Bluetooth: hci5: command tx timeout
[  158.327236] Bluetooth: hci4: command tx timeout
[  158.327602] Bluetooth: hci2: command tx timeout
[  158.390999] Bluetooth: hci3: command tx timeout
[  158.391554] Bluetooth: hci6: command tx timeout
[  158.392847] Bluetooth: hci7: command tx timeout
[  210.107046] syz-executor.7 (283) used greatest stack depth: 23568 bytes left
[  212.681891] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  212.686062] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  212.688612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  212.693079] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  212.711775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  212.713992] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  212.812555] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  212.818747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  212.822097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  212.825136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  212.834302] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  212.836374] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  212.841916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  212.843304] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  212.845194] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  212.852238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  212.856003] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  212.857475] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  212.907596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  212.910093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  212.912754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  212.918465] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  212.937117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  212.939499] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  212.941468] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  212.944997] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  212.947352] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  212.956208] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  212.958543] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  212.963059] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  212.967441] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  212.968305] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  212.969407] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  212.976841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  212.983525] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  212.989043] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  212.990317] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  213.005147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  213.005154] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  213.009410] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  213.009422] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  213.015063] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  213.025607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  213.029734] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  213.032291] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  213.047036] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  213.057498] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  213.059932] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  214.777458] Bluetooth: hci0: command tx timeout
[  214.902971] Bluetooth: hci2: command tx timeout
[  214.904566] Bluetooth: hci1: command tx timeout
[  215.030919] Bluetooth: hci3: command tx timeout
[  215.096109] Bluetooth: hci7: command tx timeout
[  215.096746] Bluetooth: hci6: command tx timeout
[  215.097496] Bluetooth: hci4: command tx timeout
[  215.098196] Bluetooth: hci5: command tx timeout
[  216.824927] Bluetooth: hci0: command tx timeout
[  216.951039] Bluetooth: hci1: command tx timeout
[  216.951524] Bluetooth: hci2: command tx timeout
[  217.079048] Bluetooth: hci3: command tx timeout
[  217.143987] Bluetooth: hci4: command tx timeout
[  217.144065] Bluetooth: hci5: command tx timeout
[  217.144450] Bluetooth: hci6: command tx timeout
[  217.145871] Bluetooth: hci7: command tx timeout
[  218.871861] Bluetooth: hci0: command tx timeout
[  218.998921] Bluetooth: hci1: command tx timeout
[  219.000672] Bluetooth: hci2: command tx timeout
[  219.128951] Bluetooth: hci3: command tx timeout
[  219.190937] Bluetooth: hci6: command tx timeout
[  219.191507] Bluetooth: hci5: command tx timeout
[  219.191553] Bluetooth: hci4: command tx timeout
[  219.192774] Bluetooth: hci7: command tx timeout
[  220.921907] Bluetooth: hci0: command tx timeout
[  221.047928] Bluetooth: hci2: command tx timeout
[  221.048455] Bluetooth: hci1: command tx timeout
[  221.175916] Bluetooth: hci3: command tx timeout
[  221.239038] Bluetooth: hci7: command tx timeout
[  221.239538] Bluetooth: hci5: command tx timeout
[  221.240163] Bluetooth: hci6: command tx timeout
[  221.240306] Bluetooth: hci4: command tx timeout
[  275.019332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  275.026999] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  275.028880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  275.039682] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  275.043166] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  275.051513] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  275.396082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  275.403711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  275.405051] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  275.408724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  275.411143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  275.414172] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  275.460672] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  275.469562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  275.471247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  275.474070] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  275.478278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  275.479679] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  275.480757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  275.487570] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  275.489179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  275.496656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  275.501065] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  275.502666] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  275.534177] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  275.540553] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  275.546118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  275.549224] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  275.550741] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  275.550924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  275.552974] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  275.554214] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  275.554280] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  275.558622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  275.561617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  275.561748] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  275.563746] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  275.570060] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  275.572038] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  275.573327] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  275.577130] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  275.581061] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  275.586187] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  275.599237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  275.601843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  275.603002] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  275.611122] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  275.612246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  277.111918] Bluetooth: hci0: command tx timeout
[  277.432031] Bluetooth: hci1: command tx timeout
[  277.558948] Bluetooth: hci3: command tx timeout
[  277.560594] Bluetooth: hci2: command tx timeout
[  277.624102] Bluetooth: hci6: command tx timeout
[  277.624935] Bluetooth: hci7: command tx timeout
[  277.688927] Bluetooth: hci4: command tx timeout
[  277.814932] Bluetooth: hci5: command tx timeout
[  279.159236] Bluetooth: hci0: command tx timeout
[  279.478933] Bluetooth: hci1: command tx timeout
[  279.608008] Bluetooth: hci2: command tx timeout
[  279.608050] Bluetooth: hci3: command tx timeout
[  279.671592] Bluetooth: hci7: command tx timeout
[  279.671617] Bluetooth: hci6: command tx timeout
[  279.742859] Bluetooth: hci4: command tx timeout
[  279.863031] Bluetooth: hci5: command tx timeout
[  281.206973] Bluetooth: hci0: command tx timeout
[  281.526972] Bluetooth: hci1: command tx timeout
[  281.654952] Bluetooth: hci2: command tx timeout
[  281.654974] Bluetooth: hci3: command tx timeout
[  281.719062] Bluetooth: hci6: command tx timeout
[  281.720391] Bluetooth: hci7: command tx timeout
[  281.782995] Bluetooth: hci4: command tx timeout
[  281.911678] Bluetooth: hci5: command tx timeout
[  283.255890] Bluetooth: hci0: command tx timeout
[  283.575011] Bluetooth: hci1: command tx timeout
[  283.702996] Bluetooth: hci2: command tx timeout
[  283.704839] Bluetooth: hci3: command tx timeout
[  283.766958] Bluetooth: hci7: command tx timeout
[  283.767453] Bluetooth: hci6: command tx timeout
[  283.830963] Bluetooth: hci4: command tx timeout
[  283.958870] Bluetooth: hci5: command tx timeout
[  337.739312] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  337.740921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  337.743453] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  337.748469] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  337.753589] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  337.762980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  338.055256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  338.060055] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  338.065949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  338.067451] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  338.069754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  338.073557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  338.077999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  338.083581] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  338.086633] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  338.088392] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  338.089387] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  338.090959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  338.122248] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  338.130098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  338.133226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  338.135349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  338.140416] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  338.148046] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  338.158938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  338.159036] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  338.161963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  338.168041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  338.171189] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  338.173242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  338.174466] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  338.178507] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  338.182683] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  338.185670] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  338.187375] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  338.189036] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  338.190408] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  338.209488] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  338.214029] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  338.215249] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  338.218944] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  338.222139] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  338.224082] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  338.225252] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  338.228667] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  338.247472] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  338.250048] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  338.252526] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  339.830931] Bluetooth: hci0: command tx timeout
[  340.150920] Bluetooth: hci2: command tx timeout
[  340.151964] Bluetooth: hci1: command tx timeout
[  340.279874] Bluetooth: hci5: command tx timeout
[  340.280901] Bluetooth: hci6: command tx timeout
[  340.281473] Bluetooth: hci3: command tx timeout
[  340.282692] Bluetooth: hci4: command tx timeout
[  340.342984] Bluetooth: hci7: command tx timeout
[  341.878869] Bluetooth: hci0: command tx timeout
[  342.198938] Bluetooth: hci2: command tx timeout
[  342.199275] Bluetooth: hci1: command tx timeout
[  342.327758] Bluetooth: hci3: command tx timeout
[  342.328327] Bluetooth: hci4: command tx timeout
[  342.328838] Bluetooth: hci6: command tx timeout
[  342.329288] Bluetooth: hci5: command tx timeout
[  342.391921] Bluetooth: hci7: command tx timeout
[  343.927498] Bluetooth: hci0: command tx timeout
[  344.246935] Bluetooth: hci2: command tx timeout
[  344.247451] Bluetooth: hci1: command tx timeout
[  344.374907] Bluetooth: hci4: command tx timeout
[  344.374957] Bluetooth: hci5: command tx timeout
[  344.375376] Bluetooth: hci6: command tx timeout
[  344.376424] Bluetooth: hci3: command tx timeout
[  344.439908] Bluetooth: hci7: command tx timeout
[  345.974934] Bluetooth: hci0: command tx timeout
[  346.294978] Bluetooth: hci1: command tx timeout
[  346.295529] Bluetooth: hci2: command tx timeout
[  346.422930] Bluetooth: hci3: command tx timeout
[  346.425872] Bluetooth: hci6: command tx timeout
[  346.426339] Bluetooth: hci5: command tx timeout
[  346.427329] Bluetooth: hci4: command tx timeout
[  346.488925] Bluetooth: hci7: command tx timeout
[  400.342338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  400.356259] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  400.359443] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  400.371900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  400.373936] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  400.375148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  400.673075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  400.706279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  400.713681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  400.716479] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  400.719962] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  400.721351] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  400.723064] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  400.724251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  400.726300] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  400.729428] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  400.730837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  400.731878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  400.782986] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  400.791156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  400.792947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  400.813434] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  400.817397] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  400.821702] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  400.874350] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  400.885679] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  400.889860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  400.898875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  400.901582] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  400.902703] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  401.000506] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  401.004377] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  401.006794] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  401.016263] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  401.017073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  401.019096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  401.038150] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  401.043418] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  401.044650] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  401.055560] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  401.057157] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  401.058668] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  401.062999] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  401.074985] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  401.076317] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  401.080532] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  401.087227] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  401.096358] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  402.422896] Bluetooth: hci0: command tx timeout
[  402.743065] Bluetooth: hci2: command tx timeout
[  402.744430] Bluetooth: hci1: command tx timeout
[  402.871016] Bluetooth: hci3: command tx timeout
[  402.999841] Bluetooth: hci5: command tx timeout
[  403.127028] Bluetooth: hci6: command tx timeout
[  403.190936] Bluetooth: hci7: command tx timeout
[  403.192044] Bluetooth: hci4: command tx timeout
[  404.471895] Bluetooth: hci0: command tx timeout
[  404.793060] Bluetooth: hci1: command tx timeout
[  404.793620] Bluetooth: hci2: command tx timeout
[  404.920109] Bluetooth: hci3: command tx timeout
[  405.049824] Bluetooth: hci5: command tx timeout
[  405.175989] Bluetooth: hci6: command tx timeout
[  405.240056] Bluetooth: hci7: command tx timeout
[  405.240609] Bluetooth: hci4: command tx timeout
[  406.519949] Bluetooth: hci0: command tx timeout
[  406.840192] Bluetooth: hci1: command tx timeout
[  406.840815] Bluetooth: hci2: command tx timeout
[  406.969815] Bluetooth: hci3: command tx timeout
[  407.096048] Bluetooth: hci5: command tx timeout
[  407.223844] Bluetooth: hci6: command tx timeout
[  407.287876] Bluetooth: hci7: command tx timeout
[  407.288421] Bluetooth: hci4: command tx timeout
[  408.567832] Bluetooth: hci0: command tx timeout
[  408.886982] Bluetooth: hci2: command tx timeout
[  408.887536] Bluetooth: hci1: command tx timeout
[  409.015871] Bluetooth: hci3: command tx timeout
[  409.144093] Bluetooth: hci5: command tx timeout
[  409.270843] Bluetooth: hci6: command tx timeout
[  409.335891] Bluetooth: hci4: command tx timeout
[  409.337676] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
12:00:39  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffff888030acf640 RCX=ffff888030acf5c8 RDX=ffff888030acf5a8
RSI=ffff888039808000 RDI=ffff888030acf558 RBP=ffff888039808000 RSP=ffff888030acf548
R8 =0000000000000001 R9 =0000000000000000 R10=ffff888030acf5a8 R11=0000000000000000
R12=ffff888030acf5c8 R13=ffff888030acf5d0 R14=ffff888030acf5f0 R15=ffff888030acf5a8
RIP=ffffffff8109bc66 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f3f842bd540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3f844584a1 CR3=000000003642c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff
XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffffffff87ee7d30 RCX=1ffffffff0fdac8a RDX=dffffc0000000000
RSI=0000000000000200 RDI=ffffffff87ed6450 RBP=ffff888013798000 RSP=ffff88803ea0f3a0
R8 =0000000000000000 R9 =fffffbfff0fda9d4 R10=ffffffff87ed4ea7 R11=00000000000c2f81
R12=ffff888013798a68 R13=0000000000000003 R14=dffffc0000000000 R15=0000000000000003
RIP=ffffffff812fb28a RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe1200000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff1b66b1028 CR3=00000000160e0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000