Warning: Permanently added '[localhost]:37050' (ECDSA) to the list of known hosts.
2025/06/19 01:26:45 fuzzer started
2025/06/19 01:26:46 dialing manager at localhost:36157
syzkaller login: [  110.473807] cgroup: Unknown subsys name 'net'
[  110.607262] cgroup: Unknown subsys name 'cpuset'
[  110.647781] cgroup: Unknown subsys name 'rlimit'
2025/06/19 01:27:06 syscalls: 2214
2025/06/19 01:27:06 code coverage: enabled
2025/06/19 01:27:06 comparison tracing: enabled
2025/06/19 01:27:06 extra coverage: enabled
2025/06/19 01:27:06 setuid sandbox: enabled
2025/06/19 01:27:06 namespace sandbox: enabled
2025/06/19 01:27:06 Android sandbox: enabled
2025/06/19 01:27:06 fault injection: enabled
2025/06/19 01:27:06 leak checking: enabled
2025/06/19 01:27:06 net packet injection: enabled
2025/06/19 01:27:06 net device setup: enabled
2025/06/19 01:27:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/19 01:27:06 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/19 01:27:06 USB emulation: enabled
2025/06/19 01:27:06 hci packet injection: enabled
2025/06/19 01:27:06 wifi device emulation: enabled
2025/06/19 01:27:06 802.15.4 emulation: enabled
2025/06/19 01:27:06 fetching corpus: 0, signal 0/0 (executing program)
2025/06/19 01:27:08 starting 8 fuzzer processes
01:27:08 executing program 0:
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x4)
lseek(0xffffffffffffffff, 0x80, 0xd5df64baddba027c)
execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000040)='\').@-\x00', &(0x7f0000000080)='\x00', &(0x7f00000000c0)='[![\x00', &(0x7f0000000100)='*,\x00'], &(0x7f0000000240)=[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='/.$(]:.\x00', &(0x7f0000000200)='@\x00'], 0x100)
pread64(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x4)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000001280))
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x28, 0x15, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001400)={{0x1, 0x1, 0x18, <r1=>r0}, './file1\x00'})
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)={0xc0, 0x9, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xc, 0x1a, '/.$(]:.\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x20000080)
ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000001640)={0x1, &(0x7f0000001600)=[{0x745b172f, 0x29, &(0x7f00000015c0)="4b17d8b200633f0f9c53928889d8bb6094f64a59724a652baced3eaba02e818e89ea09d115e83d15b0", 0x1}]})
ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000001680)={0x3, 0xffffffff, 0x19, 0x2, 0x2, 0x1})
r2 = inotify_add_watch(r1, &(0x7f00000016c0)='./file0\x00', 0x70001d0)
inotify_rm_watch(r1, r2)
r3 = fsmount(r1, 0x1, 0x0)
ioctl$CDROM_CLEAR_OPTIONS(r3, 0x5321, 0xa)
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000001700)={{r1}, {@void, @actul_num={@void, 0x1e2, 0x5e2d5d310a40b823}}})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001740)={@remote, @mcast1, @loopback, 0xb89, 0x6, 0x7, 0x100, 0x100000000, 0x28})
recvmsg$unix(r3, &(0x7f0000002ec0)={&(0x7f00000017c0)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000001840)=""/2, 0x2}, {&(0x7f0000001880)=""/226, 0xe2}, {&(0x7f0000001980)=""/194, 0xc2}, {&(0x7f0000001a80)=""/86, 0x56}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/225, 0xe1}, {&(0x7f0000002c00)=""/53, 0x35}, {&(0x7f0000002c40)=""/51, 0x33}, {&(0x7f0000002c80)=""/91, 0x5b}], 0x9, &(0x7f0000002dc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x20001)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000003040)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)={0x4c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800)

01:27:08 executing program 1:
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x49}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000095}, 0x4010)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4)
personality(0x4000009)
fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'trusted.', 'tls\x00'})
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
ioctl$BLKROGET(r0, 0x125e, &(0x7f00000001c0))
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '/dev/zero\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x8051)
timer_getoverrun(0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0xc900, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000380))
r2 = openat$incfs(r1, &(0x7f00000003c0)='.pending_reads\x00', 0x242000, 0x8)
sendto$packet(r2, &(0x7f0000000400)="6898e03d618280f021", 0x9, 0x80, &(0x7f0000000440)={0x11, 0x10, 0x0, 0x1, 0x67}, 0x14)
syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r1)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x2c0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r2)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x80, r4, 0x300, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x47}, {0x6, 0x11, 0x200}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x401}, {0x6}}]}, 0x80}, 0x1, 0x0, 0x0, 0x240080c0}, 0x0)
sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x464, 0x100, 0x70bd2c, 0x25dfdbfb, "0611a7d3a3e76d43a02cc96bee5c245a5eaf0bf9807f1d3742c867a2", ["", "", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008015}, 0x8011)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000780), &(0x7f00000007c0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x2, 0x40, 0x0, @empty, @private1, 0x7, 0x7, 0x9, 0x1}})

01:27:08 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40001)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x0, 0x103)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x43}, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r3, 0x401, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x7f}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfffd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)
r5 = accept4(r1, &(0x7f0000000580), &(0x7f0000000600)=0x80, 0x800)
ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000000640))
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x5004000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, 0x15, 0xa, 0x201, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x80)
r6 = openat$cgroup_ro(r1, &(0x7f0000000b80)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xff, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}}, 0x22008090)
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d00), 0x200a00, 0x0)
write$P9_RGETLOCK(r7, &(0x7f0000000d40)={0x21, 0x37, 0x2, {0x0, 0xfffffffffffffffa, 0xff00000000, 0x0, 0x3, 's#\xc9'}}, 0x21)
accept(r5, &(0x7f0000000d80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000e00)=0x80)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040)
r8 = dup2(r5, r6)
ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000001040)={0x11, 0xc3, &(0x7f0000000f40)="dfe7adc1d9a714d10eb65afcf01227d9900ff440e9d724d84b2d85cae35b55f02158c2c7501f96930651ebfd74a85b81a0a03677766036a3f81f33fcf495ce7d2a446b1118ae2e5ef0db7fd3c8107b932a27369f196a3a7bb2a332f15f2fdc5bd67e54b250f58c7dca3dd68ea06d5f7696187de2275c963a4adef022eceb20297f614dbbf376b317f42addf1376ef3966087b82219e4c4ed67276183dfa39dd0462d92eb15ba27781d8adbc5702c3df35c5568825dbc21557e08faeea7a8662306439e"})

01:27:08 executing program 3:
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x80, 0x29, 0x1, {0xffff5ed7, [{{0x4, 0x0, 0x1}, 0x27, 0x9, 0x7, './file0'}, {{0x40, 0x2, 0x3}, 0x3, 0x3, 0x7, './file0'}, {{0x40, 0x0, 0x4}, 0x641d, 0x5e}, {{0x40, 0x3, 0x5}, 0xe5c, 0x1f, 0x7, './file0'}]}}, 0x80)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x64, 0x6f, 0x1, {0x7, [{0x20}, {0x71, 0x2, 0x5}, {0x10, 0x4, 0x1}, {0x10, 0x2, 0x4}, {0x1, 0x2, 0x8}, {0x2, 0x1, 0x1}, {0x2, 0x4, 0x7}]}}, 0x64)
r0 = syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000180)="a5b8f37052b70f7b69e15986f8919c6c3f42427d9c0359d71950e2ecfd2a6af6cd3f294d8fd21638a9d98983384e0edeba643125277764066d0b17bbc5320495bf3dd7a8e451990b730feed571a72f57e2fd3786ef5d883ac882b75af9913148f82537af5c52a6cfbed56216876f481823863863a468ef53e201624ce9163b15f708b8be5b1fe714a793ccfce7555e334e517923347efe28e8e00f5245d4b42b0c694c9809c2b3fe8ec44f129b5e02", 0xaf, 0x100000000}, {&(0x7f0000000240)="f5421202f80014d98b6f9374f3559761c590faa3d673b142b9ac5136fae4ae33895bd2eff0eb2b02382bccf2536f99dbe1479640b1d1d9ef5a01de9f76247014b62209026f961bfc7cb9889fc176857ddebe5c84849fd76d8e23", 0x5a, 0x80000001}], 0x0, &(0x7f0000000300)={[{@utf8}, {@cruft}, {@unhide}, {@mode={'mode', 0x3d, 0x7}}, {@nocompress}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@check_relaxed}, {@map_acorn}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xee00}}]})
readlinkat(r0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/1, 0x1)
ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000440)={0x4})
r1 = open(&(0x7f0000000900)='./file0\x00', 0x1e080, 0xb)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r1, 0x0)
r2 = dup2(r0, r0)
ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000940)={0x1ff, 0x9, 0x4})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000b00)={&(0x7f00000009c0), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x90, 0x0, 0x4, 0x0, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000081}, 0x20040800)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000b40)={{0x1, 0x1, 0x18, <r3=>r2, {0x66c}}, './file0\x00'})
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x22, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000400)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc00)
ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000e00)={'\x00', 0x1, 0x2, 0x3e690000})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000e80)={{0x1, 0x1, 0x18, <r5=>r1, {0x81, 0x7}}, './file0\x00'})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xd4, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0xd4}}, 0x20000000)
r6 = fcntl$dupfd(r5, 0x406, r1)
sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x908ddf1f0e5b8a31}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x5c, 0xf, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000000)

[  132.611055] audit: type=1400 audit(1750296428.830:7): avc:  denied  { execmem } for  pid=286 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
01:27:08 executing program 4:
keyctl$negate(0xd, 0x0, 0x6, 0xffffffffffffffff)
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x400)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x800, 0x1, 0x0]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1bc9}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffff9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x2)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000001c0)=0x1)
request_key(&(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='/dev/input/mouse#\x00', 0xfffffffffffffffc)
write$P9_RVERSION(r0, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x80000000, 0x8, '9P2000.L'}, 0x15)
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x57}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x55a}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff39f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc004)
pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0)
r4 = inotify_init()
pipe2(&(0x7f00000006c0)={<r5=>0xffffffffffffffff}, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/vmcoreinfo', 0x180000, 0x22)
r7 = openat$cgroup_procs(r0, &(0x7f0000000740)='cgroup.threads\x00', 0x2, 0x0)
r8 = fork()
fstat(r0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
sendmsg$netlink(r0, &(0x7f0000001ac0)={&(0x7f0000000440)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)=[{&(0x7f0000000480)={0x174, 0x25, 0x10, 0x70bd2d, 0x25dfdbff, "", [@typed={0x16, 0x48, 0x0, 0x0, @str='/dev/input/mouse#\x00'}, @nested={0x6e, 0x3d, 0x0, 0x1, [@generic="26aa8239cb44fa310075771e7ae96599df8e2d7ad78948bf47e5af8c43f9f14e7cc0f08d139e62af1c3af52c", @generic="cd4e5657e19ecfc0149785ec05b33cefba513ca7a3a75d14ed559b87b18ab87ca782887fd9de226fe26e316fb514cae7c4d0a0ea4946abed56f3b39d98ab"]}, @typed={0x8, 0x44, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x59, 0x0, 0x0, @fd=r0}, @generic="a90841f52cd53b9b31a7a9df1c16123e1a6e8d826cd752", @generic="a8e1d636991f1f7764aab5435c58b3d31151b0ce5effe8aa587a7fd409cbec91ce0b02c7531d15cd8480671d838d9416c2ac8ae05c94a738789710af7312e139c5aa3dff703f2078febfa9749926121dedb2531f73fdb62c139173a969534ab578625dc25030dfb1920ac66edd281f6d7a0f43e7bde12356a83aa3c01434a043bc7e616283e643d3f8ee2f82fd0eea5877b69b72735085034d62ae223a8f953dffcbe6743d48cf747dbfbb123df8338f06a006062b"]}, 0x174}], 0x1, &(0x7f0000001a00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r2]}}, @rights={{0x28, 0x1, 0x1, [r0, r3, r0, r4, r0, r5]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r6, r7, r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r9}}}], 0xc0, 0x91}, 0x8000)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001b00)=[@window={0x3, 0x9}, @window={0x3, 0x3, 0xffe1}, @window={0x3, 0x101, 0x6}], 0x3)
r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
fstatfs(r10, &(0x7f0000001b80)=""/9)

01:27:08 executing program 5:
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000))
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/cpuid', 0x100, 0x16)
write$P9_ROPEN(r0, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x1, 0x4}, 0x2}}, 0x18)
r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x95, 0x2, 0x8, 0x3f, 0x0, 0x7ff, 0x410, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x9}, 0x22c2, 0x1, 0x6, 0x1, 0x3bc, 0x5, 0x1f, 0x0, 0x254, 0x0, 0x3}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000180))
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580), 0x200000, 0x0)
readv(r2, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/255, 0xff}], 0x1)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000700)='cubic\x00', 0x6)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x13, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r3=>r0, @in_args={0x1}}, './file0\x00'})
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}}, 0x4000000)
getpeername$packet(r0, &(0x7f00000009c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a00)=0x14)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x80}, @ETHTOOL_A_RINGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x40}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40001)
r5 = dup3(r0, r1, 0x0)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000b40)={0x0, @multicast2}, &(0x7f0000000b80)=0xc)
write$P9_RLINK(r2, &(0x7f0000000bc0)={0x7, 0x47, 0x1}, 0x7)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000c00)={{0xa, 0x4e20, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4c6}, {0xa, 0x4e24, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}, 0x6, [0x1ff, 0x4, 0xfc, 0x8, 0x3ff, 0x9, 0x1c]}, 0x5c)
r6 = clone3(&(0x7f0000000e80)={0x80000, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00), {0x22}, &(0x7f0000000d40)=""/108, 0x6c, &(0x7f0000000dc0)=""/127, &(0x7f0000000e40)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
syz_open_procfs(r6, &(0x7f0000000f00)='sched\x00')
fsetxattr$security_ima(r5, &(0x7f0000000f40), &(0x7f0000000f80)=@ng={0x4, 0xb, "97433142e26a19ac26"}, 0xb, 0x2)

01:27:08 executing program 6:
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
fcntl$addseals(r0, 0x409, 0x8)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x2, 0x1})
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000040)={0xe51, "3da514464bfaca601c7716a059dd51fbaf45a6f6fbb470f12368256a3306044fc7e17c324c1ce7ebec69f793d262990f75717125d85392fc76ab13b83f517cd0c01ac6faea07aa63da7a9965079abfdbc7f29d7e0f73f7d8da77aed87b05887f04d3534c7280b037e1479230f25cb7cf89b56df1d606a975eb7f0c4bffc3e28a93efae984c3542c2484ee8da8cbe2fe495d911780529e471f7a77791d73f1bc22f741ff0cd52c3d22605fbf56f1a7d7925f6890db745905152e66fc51c1232fccd1d1371ca99a46fce9b71156c7e4557e8322b02c382e3ae2f29bb9c1df466cd07abf5470e01c15429615a971dd934ba5bb05454e8e124a11afafb87d0e3e15a4bf4a6d69508929060401d2d493cbdf62a29eae90b3aa4a900ad50c0c11ca03647b75189bcc9021fa234e388392ce3989e0fd24cd6ebce64dea2cc1a330dd1220e0a6c8c8ee959588b12a01d621749c351f931fa19ddb8e5298b0c48a42fb48530420664e9f950e89f6ff0200e01a92b439319da4c228bb3fa2f11eb14bea1a2903da86d4504f2a1a8bdbe9fb791e2fba56444b28b539c1d3d45ec4533d936183978ec3e713d009c58d817902ce24b0f66e63f4a4cf7e58dd0f61977809f45372fdbe799283d4300b14cf4a67206629cb05ea245e86c0f3daad8031ebb9f430d9caefbcabd9aeb803ba9237a36b870b6d47eb972ae5579268cbeb315b55b252b620091a137250cc6c6c086bd48663b961c9e3ff9c1351d4db174062fc314b082360a3275c8f560d1a6cb455b5def43925b8c30a7608f00f60305b0308e02d6b0faea402285a187126f40e1fafdfc79e8de9fc4c312c0688e918cf7a55f622e8769653f7cf5e43ed45d402b6625f52b63cad639011859eb7350c4da24261350700cbfc666f6330d781cf1c2e44eadcd1613026381c1d701694dbb75fef13362a2166c5e2fb935b77697d7aaf3dff2b4fd0bd7f6fcb26815db1307b19296b5614fe3b932b1cbfc2ec7d463270cd3386eceed9dccbea0d2b32e7fbd97f36a5590f68c5ff7ef7b2b2e588b93b28fdceb84d8e6ad2701f4a20ce327b33afbb9517aa02af46f87c471279f2c88b4223033d54b22eb0e49e7c7765fac3686a2cf7a6308b3300f0a9365a4ece9228a72ae096b98b4620df6f8aba490fb6268624fc4bc4b3e51d43ea922e42a585d9dcd0ac2bc32604e3e2904aa43a20d6bc7b1ddde56c4dd857659cba550c9cfafba41e21d5959b0544f4bb7998d3e81ad00ed82c62c721b1c5ff6cb1b798da8334c135009abef80df0c9c52c597eb1be90bf6f11fcfdc21808ef26b1a308d7bedd9d8163af7b39b4766780d711be101a41f4e239477e540113bdff60251b44a0427c0933fe0a5e3fd947ed356af28f6e64e3bcb75daff0c960b12c293745bec3e5c4f854d50365ad111824217486c9d78d8e5691204be51d3ec983ef53e65bb3e4467dd0561e086693ebb7faafef896450034c1766b0426098536862ac728aca0dcf9a9321714675675f876a3a24fc4ec404512f1160847b02ccb91e32ce0391fdc9e1bc07a90c9f8c38293224871e90b7353292fee1e32f1f0754e1070096394290f18197472621d7f378fe9f2023ed5df7d55929f9064e3c91741176b340ac7085edcc55888ff4bc4c085cb117c935864db1527baa5d9c001923dd9d7072bfce309f26a08ae7be543a1b2d3a9c2197293393b44c26019dbc45c5c4b4678212d0a45444ef842bb79135439e176a17924284dd3e4afec64a9648ab2e0cecc1ab9ca9ce8988bee017017cceac4fcc117623d4d82e7ef67a3b900cab7fa8de043486cb8d81e100f9647d09f0153d0526c6cd1da1d3f55449ab81a09b7ae71d35bbd52d46c304458a2f3c72509395947e54494474e3a28a3735e45f123a5fc2ee2777c1d3197cafdb66eb1216d9dc65394741a96f09560a585397f88f4bbc274f99d2ea486fe7a100a413ad73dc5701c3fea37f98a7b2128a27227129c34d6dc25c8488e87c12a53f272d9c1c3e6a76796722a5722981196d9d3896de36af669da30266e9dd2591af418e9053c817ce573f2adc1e7492ee533f13e0f46039d7872d3b47556959d72b568267bf6ea89c825221b8c0b70c1135f1b70de6fb26f1ed4c53879577fd32fcc7046b64f4acbe9b526afbbbcb875ad6e906282e71a5278aef13a5388799a8bae0a310d3cd2db8f8462978f4c50035121d226c6a152081b56932d6419fde438422e37ee6067d668baaaf81d49462f51eead058ab87d954585429319949f70837484e188086b1199a6bb5de62f36561bd1a206ef16ac038292d8dcf89b5176e70fc4f4ff32f3b358baf9d2f01af102a11a9078c10105ed1cbd1ce3e02ba28f887e186a9eb63f839bc9650e5b7f9ec971041f3d6aa5efc6e186721145179d29db8f9c561d902bdbdf754d834f9d8cf18c0ce48d3716ad8bdf799c02c6da5cbb9103b229cef93906db4d51510907f62501567e7f6892611e938f2d80f75264f8c05e23dcf6aa802e027739a04da01125acefce0383902752f7e6992fa125c466f092b231155690dd6bea422a76974adab36672668e59824bfcbd8fa8dbdd4593bfca35265fa817f3813f7ee10048c9ea49e2a6b9eace2f34f1218446e1b6d53431c1067aef4fb53eaca7c29015018407133c754e9982964c54e2127335054046ec63a2410843e6fe6fef63b3f937f09610a02acdacada3c60e150dcd3e205f4aa594e1b581fb5b4dd3605264321a544502e7c30a8e43b26d6612468240f24a9c7fe0b640ab086c435b56a00802da7843af140e244ad852a0d57da3f20a4d189dfccd47bbcbfd86cacac9b0968d41fc845e042bc5c502cf152ba496dfd9ca324a18742f40434e3ac8b405b985a39063fbd194e891bf60a0ea09339da73e20fa2c19c4d9d340050d0cc5ea935a16ea54aa9ae2d1c17818f3094f3f9eb7810b35bd901c8dee5c78e24a701fd81bb44b9e58f2da3b1396121736c84777f8397f1cf9b6b9285d08359a18e917d040039a2b82a3c12388620aa12ded9ee216198f9b0fb51e6d838b6c5d25d1b779a2c086089167be8968e35a4b0255031cc8ccf61c29d83fd8182e14840b80b90e2b178550b038539a6b6efe90a0d216f36bf9d28bd8ba87c84c12f9544c14226f2cb27649656d22e6a556580ceed5333299a45350605273080e573e8bab5bcf4f930cfb50bab78c4508bdd1eaa288e7ad91c22fd18403776fc97c05856adf90b2f15f7794a44e37b19ae533151c4e2717fe9d40ba3e8a6dea0521eb3b805f56b7ec45cb118638fe5211eaed90ec8662ec5a3573a6e6ad4d0b9fbbb11fcf57a190a8be773037130f9cf580bd9775d99e9fd06d18435fb616b731be17411aad01e7c5994ba4c9e984bdaced308792ff82477266c7011c1455f338dff3e70c182fc858ad636a4f762884fcdc0db75ae3605f547f0519c85c9ce5e911fb4ecc41d3e51d1196e1650b7ff8c2e65d48752d05fff0e2ecba81713fce8abb233d3d4895a6096c7dd99f142fd562cea946a82e2796a531f3bc35c81063eee93d567cde39e62bd195ea61007c41b5bbfb049ac0699d8db46b45f54e9842c603181ebe03da4ce0ac1674d46cc781fd0d2f73ec7d2513f2e4a914148404775da352767072ef3019d916846953999235dd748c10fd0349c13a5e680d547fb91e0e71b85bb637f87a9b32f705ead813d1a18bc74a73ed806973f0c148ab434fdf44bb864c7b92244360d11314f39ea776915f024a4e4aa926e59377be8dc258fdb1fa3d4c7c93dd5d5dba729bffe5176b51d2fc364cb7e64a64e321fa6c0316e075be582879bb7b139f1e5e0ca297b07bfb29311714b9cc1e9d2d8f971f33dc01f78176318dfd45038a0d6e5d4395c830945c512adb2bacc098088d8fbd82b261cf2bcf175fa7c9562b3a8424f452784749353fab7ffa01b322edbec3a1d8956fc93f078553cf94b413041c7e49e904b0c594b9f1d4f64545b337ef2e5b351394f7627b870eed51c6682e0f81366aaacdb6af404ca3a488d46d2976d6dc5ca7e973691fe7df4c9755bd8a181f9a9a8877eff813404364c9baa96db7fb7d5aa28fd627f6a7db26dfe0e10795107f5dde351359d7d5749291c1841b0f9e82dea4c861ccdf61a10537eef2f71aafbce0d342eb41e7c4af69ed13d003a11fe90b85d21d70a253d7dc5fa5c1941a340908f9979e0c3431c7198be92ce27d15225ac96f933d43df19fc7e656941f6781cdcdfc9327e1375b4d470acca8b2a83b236cea7237c69695aa4845923035803b7417f8f6e8685b278bffb495c4402e1c1da3c8a429802817f641813490452ca429a9b7ccd11b4348b53bf76a0cd868ebd1773bfd402d101877b00b2c38cd6045e3197e13d3d0aaaafa49283b92564d8919a59930b0c2c1e858ad05969578b76531d1162e47804e0517cda4bc1038067b8dc608b8f0eb7171a8f4475d11e4123c2fe57afbf491373ccee18c489f51c1914f7bb81878ac949c5a4ac6ad8088563371414813ceedddd65eac7714c5a056f2f76fee1b3a39c9dfba8e38945c8098cf8fcdc265de5bb15405846d29683ddc57859e83d532459afc4eb5cecba40f771b3c9d05ace95879129c22264f8e100843b75d991c46fcb8f089231cd663c272969c9a2207a1fb3b52041eee83d44fdc507ce21f44ec6afff6df3d39a67bb51a579715638b374af163a4c83b541d99c72fd1e9b93fd43434131d1564a840f2ac9238547081c252dad2d333b98bb501b94871192660c0c556a5279fbbdbd3e49582b0ae2a3c84bb8ab19873ef347281b2d4ee98ddba1ebfe57afe530ed4fdd82c950bd8c262049ff8b0d60d4f7acc14d9c58d6934e113bd122601db581f299775384bec57131c8d66dee4e7819944edf61bfdffe88eb5cd5bd29fc3f85fc647a9f09b7edeedac7e4e002c4628df6fcc486e69a8cb34d538c963b203928da2b935d22568efb962bfacd4255ade008cade794f58923227aef7289761b0145c1391bd650eb8c5d2ab347bf8f6a502d1075c1035ee9bc0911c728b927fe6b07c577907cd0066bf0082f87618f9ddff7de5d073ff42e1e975f753c812b9b1edf73752b84edde8ce1110b9f715a27d21d6ae93dc00f22d6b84858e8751b18d5f9c1454d3d506a001ed92becd2a4dc35802bf200a3368"})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, <r1=>r0, {0x200}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000f00)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file0\x00'})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000f40), 0x8801, 0x0)
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000f80)={0x0, 0x7, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="1fc4327fd041", @remote, @random="034701887ccb", @remote]})
sendfile(r0, r2, &(0x7f0000000fc0)=0x3f, 0x1)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x3c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1f}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40000)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001280)={'nat\x00', 0x0, 0x4, 0xa2, [0x8a, 0x5, 0x7ff, 0x2, 0x3d2, 0x4], 0x5, &(0x7f0000001140)=[{}, {}, {}, {}, {}], &(0x7f00000011c0)=""/162}, &(0x7f0000001300)=0x78)
ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000001340)=0x9)
getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000001380)=0x1e1e, &(0x7f00000013c0)=0x4)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1c}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008010}, 0x8885)
write$tun(r2, &(0x7f0000001500)={@val={0x0, 0x8917}, @void, @llc={@llc={0x4, 0x80, "c2", "52e4cf61e9018b782152cb334c4f4bf4866a75e890617aef9ac5624c32e26dd31d002da8c7b84048eeb2d4e4de2774121054ee621eeea6dcce02c45d762520de3b4a7abd60b4219ce5ed4159725899b82f4a40ebba0e0dea42"}}}, 0x60)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r5, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8d5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff8}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x34}}, 0x4000000)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x30d18}, 0xc, &(0x7f0000001940)={&(0x7f00000017c0)={0x16c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9306}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5da43140}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x840}, 0x0)

01:27:09 executing program 7:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc2)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x7fffffff, 0x80)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000080)={0x4, 0x3c3, 0x4, 0x1ff, 0x3, [{0xfffffffffffffff7, 0x6, 0x64c, '\x00', 0x180}, {0x9, 0x101, 0x0, '\x00', 0x2409}, {0x5, 0x5, 0x6}]})
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4)
r3 = openat$incfs(r2, &(0x7f0000000200)='.log\x00', 0x410202, 0x111)
ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000240)={'\x00', 0xcaa, 0x3, 0xff})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x28c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x401, 0x16}}}}, [@NL80211_ATTR_TX_RATES={0x26c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x8}, {0x4, 0x3}, {0x5, 0x4}, {0x4}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0x7}, {0x7, 0x4}, {0x0, 0xa}, {0x4}, {0x1, 0x7}, {0x1, 0x8}, {0x1, 0x7}, {0x1, 0x4}, {0x2, 0x4}, {0x5, 0xa}, {0x6, 0x7}, {0x0, 0x7}, {0x3, 0x1}, {}, {0x0, 0x6}, {0x1}, {0x1}, {0x3, 0x7}, {0x3, 0x4}, {0x1, 0x3}, {0x6, 0x5}, {0x5, 0x7}, {0x5, 0x6}, {0x7, 0x4}, {0x7, 0x9}, {0x2}, {0x7, 0x3}, {0x2, 0x5}, {0x5, 0x1}, {0x1, 0x9}, {0x6, 0x7}, {0x1, 0x2}, {0x6, 0x5}, {0x7, 0x3}, {0x5, 0x8}, {0x5, 0x5}, {0x5, 0x7}, {0x2, 0xa}, {0x0, 0x1}, {0x5, 0x2}, {0x7, 0x5}, {0x4, 0x3}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0xa}, {0x5, 0x6}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x3}, {}, {0x3, 0x9}, {0x0, 0x6}, {0x6, 0xa}, {0x3, 0x1}, {0x5, 0x8}, {0x0, 0x9}, {0x4, 0x3}, {0x1}, {0x6, 0x4}, {0x0, 0x7}, {0x1, 0x1}]}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x6}, {0x6, 0x8}, {0x4, 0x1}, {0x3, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x4}, {0x1}, {0x3, 0x2}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x5, 0xa}, {0x4}, {0x5}, {0x0, 0x6}, {0x6, 0x2}, {0x0, 0x4}, {0x5, 0x6}, {0x3}, {0x4, 0x1}, {0x0, 0x8}, {0x0, 0x5}, {0x3, 0x2}, {0x7, 0x1}, {0x7, 0x7}, {0x7, 0x8}, {0x3, 0x1}, {0x6, 0x5}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x4, 0x6}, {0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0xda17, 0x5, 0x7, 0x3, 0x9, 0x9]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x9}, {0x4, 0xa}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x20, 0x8000, 0x9, 0x5, 0x100, 0x1, 0xec]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x27, 0x6c, 0x3, 0x36, 0x1, 0x36, 0x5, 0x30, 0x9, 0x3, 0x5d66a8cafcc9d56b, 0x9, 0x16, 0x48, 0x3, 0x60, 0xc, 0x1, 0xc, 0x6, 0xc, 0x30, 0x3, 0x9, 0x9, 0x6c, 0x0, 0x24, 0x6, 0x1]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x8001, 0xfff7, 0x1d, 0x1, 0x5, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x36, 0x30, 0x4, 0x1, 0x6c, 0xb, 0x36, 0x2, 0x6, 0x4, 0x3, 0x9]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x60, 0x24, 0x9, 0x3, 0x15, 0x50, 0x0, 0xb, 0x3, 0x36]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x16, 0x3, 0x6c, 0x1b, 0x24, 0x36, 0xc, 0x1, 0x5]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0xf209, 0x7, 0xa8, 0x7ff, 0x1484, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x40, 0x8b, 0x20, 0x2, 0xff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x100, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x7}, {0x5, 0x9}, {0x2, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x7ff, 0x4, 0x3, 0x2, 0xff, 0x6, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x3, 0x1b, 0x18, 0x12, 0x1, 0x16, 0x3, 0x3, 0x2, 0x1b, 0x24, 0x2, 0x3, 0x4, 0x18, 0x60, 0x0, 0x6c, 0x2, 0x16, 0x30, 0x18, 0x6, 0xc, 0x12, 0x1, 0x4, 0x60, 0x66, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xb02b, 0x0, 0x3f, 0x1000, 0x6, 0x40, 0x2]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x4, 0x18, 0x2, 0x6c, 0x2, 0x18, 0x24, 0x1, 0x4, 0x60, 0x4, 0x12, 0xc, 0xc, 0x36, 0x1b, 0x0, 0x6, 0x4, 0x16]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0x7}, {0x0, 0x3}, {0x5, 0x8}, {0x6, 0x3}, {0x3, 0x6}, {0x7, 0x7}, {0x7}, {0x5, 0x2}, {0x6, 0xa}, {0x3, 0x9}, {0x3, 0x1}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x2, 0x5}, {0x7}, {0x1, 0x8}, {0x4}, {0x2, 0x1}, {0x6, 0x8}, {0x5, 0x1}, {0x5, 0x2}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x7}, {0x6, 0x3}, {0x4}, {0x0, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0xff0a, 0x5, 0xe5c5, 0x8001, 0x29, 0x8]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x18, 0x60, 0x71bb2853f754e93a, 0x16, 0x13, 0x2, 0x24, 0x12, 0x6c, 0x18, 0x6c, 0xb, 0x6, 0x6c, 0xc, 0xc]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x4}, {0x0, 0xa}, {0x3, 0x7}, {0x3}, {0x6, 0x3}, {0x1, 0x3}, {0x7, 0x7}, {0x0, 0xa}, {0x4, 0x4}, {0x7, 0x4}, {0x7, 0x1}, {0x6, 0x1}, {0x7, 0x8}, {0x5, 0x2}, {0x7, 0x1}, {0x4, 0x7}, {0x3, 0x9}, {0x1, 0x5}, {0x1, 0x9}, {0x1}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x1}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x6}, {0x6, 0x4}, {0x7, 0x7}, {0x5, 0x4}, {0x5, 0x2}, {0x6, 0x3}, {0x6, 0xa}, {0x4}, {0x2, 0x1}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x1}, {0x2, 0x2}, {0x4, 0x8}, {0x6, 0x6}, {0x0, 0x6}, {0x4, 0x9}]}]}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r4 = openat$cgroup_int(r2, &(0x7f0000000640)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000700)={{r4}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000680)={0x0, 0x3, 0xffffffff, 0x1, {0x1, 0x80000000, 0xffffffff, 0x9f, 0x8}, [0x3, 0x0, 0x5fb]}}, @devid})
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001700)={0x8b3, 0xd5cf, 0x3, 0x3, 0x3, [{0x1, 0x7, 0x1, '\x00', 0x2002}, {0x9, 0x81, 0x0, '\x00', 0x400}, {0x3eaa, 0x7ff, 0x6, '\x00', 0x3402}]})
r5 = socket$inet(0x2, 0x8, 0x8d)
writev(r5, &(0x7f0000001a40)=[{&(0x7f0000001800)="73b39e4ce002c0f546ea6573d54f7f4d60f5a3f2425051bc03681a4c26a4e8620adedf30b765d84cf4941d2681f462ed3f33ded28fda708a87a6fb6d2c803660ca1938c84967ec1b64bd799bbb90cc9a95c88e9fcfb1f3c5cc9a852afbdfc64ed93bdd6e07b94e885be711a8141ea8dd5c0f087d84a91dd5ec49e16d2ddd20389a302084610ad8c3db559f35401d56d4010893234c8387c657b62066aadae34af17061d1e447cbd4c5c2e6be2131e794c93912944d1b9cce43526c4e1df51246061a53dd7d440d1cc47eed0fdcccdb5376bda6f6a7ce19ec4863e1ffde4f79133004af80f7259629576cc3", 0xeb}, {&(0x7f0000001900)="61bc0003803e26349b3068a86a301950b57708d5c6da428054ed9bad7a9f275bf27ecef75dfeb0498801569b73dece963af705bb02f9b729b8c8b2900127b0cb41d238c40f17cef385801f20ce788d0b3def5477a8b8c64a796e7ce1b345d4cf71deee8634b1310c783f4f4c71456a3f723b668b78c71563a5c0e22cdbbff2b470831b95", 0x84}, {&(0x7f00000019c0)="9fd95e18a1972c3de817cd1e0097151e98", 0x11}, {&(0x7f0000001a00)="5395ae8cc5da849bf56673af818b7c5a6e87260968e73f5e0d54d21c2cd0553fa4f75ddaf55957d54a8b7faead32ac79a615f33b", 0x34}], 0x4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000001a80))
r6 = accept4(r2, &(0x7f0000001ac0)=@sco={0x1f, @fixed}, &(0x7f0000001b40)=0x80, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c810}, 0x8800)
r7 = syz_open_dev$evdev(&(0x7f0000001c80), 0x1c0000000, 0x10000)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r7, 0xf50f, 0x0)

[  134.250456] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.256830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.259651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  134.266622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.279805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  134.284323] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  134.297672] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  134.308246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  134.329234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  134.338911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  134.364920] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  134.367977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  134.371496] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  134.373241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  134.376292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  134.383696] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  134.384924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  134.391334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  134.396463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  134.405255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  134.421498] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  134.426360] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  134.428620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  134.438419] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  134.442423] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  134.450478] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  134.459652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  134.483742] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  134.524282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  134.533582] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  134.539227] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  134.539344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  134.544092] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  134.548605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  134.552367] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  134.557471] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  134.569078] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  134.587456] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  134.603500] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  134.620464] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  136.389067] Bluetooth: hci1: command tx timeout
[  136.513155] Bluetooth: hci3: command tx timeout
[  136.514049] Bluetooth: hci0: command tx timeout
[  136.514816] Bluetooth: hci4: command tx timeout
[  136.515629] Bluetooth: hci2: command tx timeout
[  136.641113] Bluetooth: hci5: command tx timeout
[  136.642616] Bluetooth: hci6: command tx timeout
[  136.706557] Bluetooth: hci7: command tx timeout
[  138.433296] Bluetooth: hci1: command tx timeout
[  138.562338] Bluetooth: hci4: command tx timeout
[  138.562883] Bluetooth: hci2: command tx timeout
[  138.563676] Bluetooth: hci0: command tx timeout
[  138.564412] Bluetooth: hci3: command tx timeout
[  138.689981] Bluetooth: hci6: command tx timeout
[  138.690528] Bluetooth: hci5: command tx timeout
[  138.753074] Bluetooth: hci7: command tx timeout
[  140.481719] Bluetooth: hci1: command tx timeout
[  140.609180] Bluetooth: hci4: command tx timeout
[  140.610077] Bluetooth: hci0: command tx timeout
[  140.610843] Bluetooth: hci3: command tx timeout
[  140.612061] Bluetooth: hci2: command tx timeout
[  140.737332] Bluetooth: hci6: command tx timeout
[  140.738208] Bluetooth: hci5: command tx timeout
[  140.802125] Bluetooth: hci7: command tx timeout
[  142.529101] Bluetooth: hci1: command tx timeout
[  142.659089] Bluetooth: hci3: command tx timeout
[  142.659879] Bluetooth: hci2: command tx timeout
[  142.660724] Bluetooth: hci0: command tx timeout
[  142.662985] Bluetooth: hci4: command tx timeout
[  142.785287] Bluetooth: hci6: command tx timeout
[  142.787274] Bluetooth: hci5: command tx timeout
[  142.849643] Bluetooth: hci7: command tx timeout
[  194.131831] syz-executor.1 (297) used greatest stack depth: 25040 bytes left
[  196.695553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  196.698601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  196.703017] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  196.711634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  196.722183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  196.771573] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  196.776751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  196.779473] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  196.786409] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  196.791373] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  196.837758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  196.853144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  196.856327] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  196.865379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  196.875224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  196.909897] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  196.915693] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  196.926493] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  196.954713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  196.959023] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  196.965492] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  196.984833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  196.990389] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  196.995925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  197.022815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  197.026468] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  197.044373] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  197.052713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  197.061729] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  197.066204] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  197.094285] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  197.109289] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  197.111587] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  197.151572] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  197.156769] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  197.160712] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  197.162395] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  197.179861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  197.188002] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  197.194315] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  198.785983] Bluetooth: hci0: command tx timeout
[  198.849065] Bluetooth: hci1: command tx timeout
[  198.913227] Bluetooth: hci2: command tx timeout
[  199.041091] Bluetooth: hci3: command tx timeout
[  199.105085] Bluetooth: hci4: command tx timeout
[  199.169319] Bluetooth: hci5: command tx timeout
[  199.297068] Bluetooth: hci7: command tx timeout
[  199.297633] Bluetooth: hci6: command tx timeout
[  200.833040] Bluetooth: hci0: command tx timeout
[  200.897022] Bluetooth: hci1: command tx timeout
[  200.962017] Bluetooth: hci2: command tx timeout
[  201.090020] Bluetooth: hci3: command tx timeout
[  201.153057] Bluetooth: hci4: command tx timeout
[  201.217216] Bluetooth: hci5: command tx timeout
[  201.345175] Bluetooth: hci6: command tx timeout
[  201.345595] Bluetooth: hci7: command tx timeout
[  202.881372] Bluetooth: hci0: command tx timeout
[  202.945988] Bluetooth: hci1: command tx timeout
[  203.009005] Bluetooth: hci2: command tx timeout
[  203.137052] Bluetooth: hci3: command tx timeout
[  203.201051] Bluetooth: hci4: command tx timeout
[  203.265242] Bluetooth: hci5: command tx timeout
[  203.393237] Bluetooth: hci7: command tx timeout
[  203.393659] Bluetooth: hci6: command tx timeout
[  204.929997] Bluetooth: hci0: command tx timeout
[  204.993193] Bluetooth: hci1: command tx timeout
[  205.057988] Bluetooth: hci2: command tx timeout
[  205.185123] Bluetooth: hci3: command tx timeout
[  205.251306] Bluetooth: hci4: command tx timeout
[  205.313070] Bluetooth: hci5: command tx timeout
[  205.441264] Bluetooth: hci6: command tx timeout
[  205.441436] Bluetooth: hci7: command tx timeout
[  258.842265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  258.852373] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  258.857282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  258.865706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  258.872655] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  259.099874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  259.114870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  259.117227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  259.122122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  259.125363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  259.130672] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  259.134426] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  259.144007] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  259.147926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  259.152265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  259.241776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  259.255684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  259.270325] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  259.276237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  259.291027] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  259.299524] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  259.305578] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  259.313913] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  259.325836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  259.343470] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  259.366078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  259.367272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  259.376851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  259.376877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  259.393245] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  259.404636] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  259.410687] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  259.415875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  259.423526] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  259.438382] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  259.441102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  259.467533] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  259.476432] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  259.522644] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  259.548673] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  260.929082] Bluetooth: hci0: command tx timeout
[  261.249115] Bluetooth: hci2: command tx timeout
[  261.250632] Bluetooth: hci1: command tx timeout
[  261.508945] Bluetooth: hci5: command tx timeout
[  261.509043] Bluetooth: hci4: command tx timeout
[  261.509731] Bluetooth: hci3: command tx timeout
[  261.570199] Bluetooth: hci7: command tx timeout
[  261.633241] Bluetooth: hci6: command tx timeout
[  262.977312] Bluetooth: hci0: command tx timeout
[  263.299015] Bluetooth: hci1: command tx timeout
[  263.299520] Bluetooth: hci2: command tx timeout
[  263.553083] Bluetooth: hci4: command tx timeout
[  263.553128] Bluetooth: hci5: command tx timeout
[  263.554059] Bluetooth: hci3: command tx timeout
[  263.617099] Bluetooth: hci7: command tx timeout
[  263.681323] Bluetooth: hci6: command tx timeout
[  265.027231] Bluetooth: hci0: command tx timeout
[  265.345122] Bluetooth: hci2: command tx timeout
[  265.345176] Bluetooth: hci1: command tx timeout
[  265.601181] Bluetooth: hci3: command tx timeout
[  265.601291] Bluetooth: hci5: command tx timeout
[  265.602130] Bluetooth: hci4: command tx timeout
[  265.666110] Bluetooth: hci7: command tx timeout
[  265.730258] Bluetooth: hci6: command tx timeout
[  267.076147] Bluetooth: hci0: command tx timeout
[  267.393094] Bluetooth: hci1: command tx timeout
[  267.395499] Bluetooth: hci2: command tx timeout
[  267.649037] Bluetooth: hci4: command tx timeout
[  267.651986] Bluetooth: hci5: command tx timeout
[  267.652082] Bluetooth: hci3: command tx timeout
[  267.715117] Bluetooth: hci7: command tx timeout
[  267.777226] Bluetooth: hci6: command tx timeout
[  321.238571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  321.243623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  321.248621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  321.259805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  321.267774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  321.427280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  321.431632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  321.434230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  321.439807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  321.445865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  321.502273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  321.512047] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  321.515267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  321.519419] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  321.520849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  321.525148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  321.529421] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  321.535462] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  321.550900] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  321.568020] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  321.591532] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  321.595853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  321.612438] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  321.622896] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  321.626044] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  321.778555] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  321.820991] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  321.828468] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  321.893570] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  321.919524] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  322.050748] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  322.064813] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  322.066765] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  322.123194] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  322.175754] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  322.186267] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  322.195212] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  322.199710] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  322.212830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  322.246855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  323.329994] Bluetooth: hci0: command tx timeout
[  323.521237] Bluetooth: hci1: command tx timeout
[  323.649101] Bluetooth: hci2: command tx timeout
[  323.650427] Bluetooth: hci3: command tx timeout
[  323.777186] Bluetooth: hci4: command tx timeout
[  324.034019] Bluetooth: hci5: command tx timeout
[  324.289037] Bluetooth: hci7: command tx timeout
[  324.353091] Bluetooth: hci6: command tx timeout
[  325.377298] Bluetooth: hci0: command tx timeout
[  325.569968] Bluetooth: hci1: command tx timeout
[  325.697095] Bluetooth: hci3: command tx timeout
[  325.697521] Bluetooth: hci2: command tx timeout
[  325.825009] Bluetooth: hci4: command tx timeout
[  326.081276] Bluetooth: hci5: command tx timeout
[  326.337645] Bluetooth: hci7: command tx timeout
[  326.401068] Bluetooth: hci6: command tx timeout
[  327.427376] Bluetooth: hci0: command tx timeout
[  327.617603] Bluetooth: hci1: command tx timeout
[  327.745127] Bluetooth: hci2: command tx timeout
[  327.747049] Bluetooth: hci3: command tx timeout
[  327.873586] Bluetooth: hci4: command tx timeout
[  328.131140] Bluetooth: hci5: command tx timeout
[  328.385299] Bluetooth: hci7: command tx timeout
[  328.449342] Bluetooth: hci6: command tx timeout
[  329.473025] Bluetooth: hci0: command tx timeout
[  329.665157] Bluetooth: hci1: command tx timeout
[  329.793059] Bluetooth: hci2: command tx timeout
[  329.793537] Bluetooth: hci3: command tx timeout
[  329.921013] Bluetooth: hci4: command tx timeout
[  330.177163] Bluetooth: hci5: command tx timeout
[  330.434218] Bluetooth: hci7: command tx timeout
[  330.497084] Bluetooth: hci6: command tx timeout
[  383.573664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  383.576570] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  383.579472] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  383.586090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  383.591128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  383.690467] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  383.696351] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  383.697884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  383.708252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  383.713060] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  383.764588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  383.771696] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  383.774511] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  383.788079] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  383.792472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  383.883463] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  383.886716] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  383.888573] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  383.894217] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  383.896538] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  384.021186] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  384.035347] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  384.041906] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  384.055733] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  384.072235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  384.100255] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  384.103482] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  384.113489] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  384.124446] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  384.127441] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  384.131893] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  384.147314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  384.155321] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  384.158737] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  384.197882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  384.454373] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  384.456505] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  384.457658] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  384.460632] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  384.462344] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  385.665288] Bluetooth: hci0: command tx timeout
[  385.793049] Bluetooth: hci1: command tx timeout
[  385.857446] Bluetooth: hci2: command tx timeout
[  385.985018] Bluetooth: hci3: command tx timeout
[  386.241115] Bluetooth: hci6: command tx timeout
[  386.305171] Bluetooth: hci5: command tx timeout
[  386.369971] Bluetooth: hci4: command tx timeout
[  386.497199] Bluetooth: hci7: command tx timeout
[  387.713199] Bluetooth: hci0: command tx timeout
[  387.841035] Bluetooth: hci1: command tx timeout
[  387.905320] Bluetooth: hci2: command tx timeout
[  388.033975] Bluetooth: hci3: command tx timeout
[  388.289413] Bluetooth: hci6: command tx timeout
[  388.353178] Bluetooth: hci5: command tx timeout
[  388.417077] Bluetooth: hci4: command tx timeout
[  388.545463] Bluetooth: hci7: command tx timeout
[  389.761485] Bluetooth: hci0: command tx timeout
[  389.889241] Bluetooth: hci1: command tx timeout
[  389.953062] Bluetooth: hci2: command tx timeout
[  390.082095] Bluetooth: hci3: command tx timeout
[  390.337171] Bluetooth: hci6: command tx timeout
[  390.401029] Bluetooth: hci5: command tx timeout
[  390.465002] Bluetooth: hci4: command tx timeout
[  390.593014] Bluetooth: hci7: command tx timeout
[  391.809258] Bluetooth: hci0: command tx timeout
[  391.937002] Bluetooth: hci1: command tx timeout
[  392.000997] Bluetooth: hci2: command tx timeout
[  392.129131] Bluetooth: hci3: command tx timeout
[  392.385031] Bluetooth: hci6: command tx timeout
[  392.449219] Bluetooth: hci5: command tx timeout
[  392.514152] Bluetooth: hci4: command tx timeout
[  392.642044] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
01:32:14  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000
RSI=ffff88806ce36f18 RDI=ffff888031a0c180 RBP=ffff88806ce36f18 RSP=ffff88806ce08e18
R8 =00000000ffffffff R9 =ffffed100d9c11c4 R10=0000000000000000 R11=0000000000000001
R12=ffff888031a0b700 R13=ffff888031a0c158 R14=00000000ffffffff R15=ffff888031a0c180
RIP=ffffffff84b28910 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe1900000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f969640d8e0 CR3=0000000035e09000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffffea0000916880 RCX=ffffffff81a1c874 RDX=ffff888038f21b80
RSI=0000000000000000 RDI=0000000000000005 RBP=ffff888015b7b000 RSP=ffff888038f0fca8
R8 =0000000000000001 R9 =fffff94000122d16 R10=0000000000000001 R11=0000000000000001
R12=ffffea00009168b0 R13=0000000000000001 R14=000055a0d88b7000 R15=0000000000000000
RIP=ffffffff81a1c877 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f8d56387540 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe4900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a0d88b7fa8 CR3=00000000291c6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ff000000ff0000000000000000000000
XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000