Warning: Permanently added '[localhost]:9317' (ECDSA) to the list of known hosts.
2025/06/21 05:23:57 fuzzer started
2025/06/21 05:23:58 dialing manager at localhost:33119
syzkaller login: [  108.620384] cgroup: Unknown subsys name 'net'
[  108.753270] cgroup: Unknown subsys name 'cpuset'
[  108.793284] cgroup: Unknown subsys name 'rlimit'
2025/06/21 05:24:24 syscalls: 2214
2025/06/21 05:24:24 code coverage: enabled
2025/06/21 05:24:24 comparison tracing: enabled
2025/06/21 05:24:24 extra coverage: enabled
2025/06/21 05:24:24 setuid sandbox: enabled
2025/06/21 05:24:24 namespace sandbox: enabled
2025/06/21 05:24:24 Android sandbox: enabled
2025/06/21 05:24:24 fault injection: enabled
2025/06/21 05:24:24 leak checking: enabled
2025/06/21 05:24:24 net packet injection: enabled
2025/06/21 05:24:24 net device setup: enabled
2025/06/21 05:24:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/21 05:24:24 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/21 05:24:24 USB emulation: enabled
2025/06/21 05:24:24 hci packet injection: enabled
2025/06/21 05:24:24 wifi device emulation: enabled
2025/06/21 05:24:24 802.15.4 emulation: enabled
2025/06/21 05:24:24 fetching corpus: 0, signal 0/0 (executing program)
2025/06/21 05:24:26 starting 8 fuzzer processes
05:24:27 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x40441)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000140)="fdffe09e39e1d68f0ddd8e29c2f13fe4caa80a87261299072c6ddedb928508d8523310d15e5dcbfa83e77a32977733cdbe08a15d794a38aac8d220374ae0b2d9d96d5e39f4a12e24398193eba25439f358deb8cbfbe721101c64aee59a9f49ecd1cdda489bf11be3c0fd7c8aef288882ae8ee640bab3d837e90e715813d5b3d5b0fa4ff3efa14e3d64a14c51b7d3597654fba559faa11d14ccc37ad5ef0d2f28039d123a29493bd0fe970dd9d874869be4d1b120c3058415519193b5a4f4f83577207912")
r1 = signalfd(r0, &(0x7f0000000240)={[0x200]}, 0x8)
r2 = accept4$unix(r0, 0x0, &(0x7f0000000280), 0x80800)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x2}}, './file0\x00'})
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300))
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x8c0)
ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000440)={0x0, "c35a82b8f015e3ca6b61c34917c3af7c41e7e307caed8af7a2ff530a516750d57f903ea82736c3c6d458c899cc3a162b51666ba1ef0481a2baf0271757303d47f1c5eea4a1820a2f729d0a20e09daae83a469a2ca2b8a0a477dfe5a1f834a2105112e5b988034ae6611412a62ce86d5df525e7bf17dfbba7d4d983742d8f5c6d289d66ecf3d0e44033ab900e0a64ad2ada7a0f283effe998f727d479d58c3ea1bac264fa1879092007aa06172ecc57e4a6a4723d87deb640ec8015d2d30a7614078f99fe9a9a74f42d851df67d1bfe8383b8b58977fddd3098c5e401f6b93dd2515bcff18f5acfba242e3387deab8d7211056501ca3496861bd74a2034c8e3885fcd633d2cbda0fc245323b008c5cd8fac31395d4b761ebb1d9f7294a7758faaff2961159e422058b6aba0b1839ba0fa9d51b176f208e99d9f42b7028e6e683b65d3f95744443d75fb99a8f2123f514d635573d33e40ccf701407852bcd2b98ea938c2241bcb41225205c5265bac0ddafa5f833dcd5eb720975b640595ce36abc297723876eb3931fbcf7edd6fceac7039ec173cdb00ff0d44d0beca37539f7d297287e900b385857cc9d8f43ddb1054f34c55199e0d723f982824191d65f481bdffb3d61e6644059cdc4e358ef1d24c86f026641b3069b01601db8d6566f2f4a6c68e13c9ce43864b249189114c956c01d82ae25e7dec26f0c4bac82e3470d5"})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r4=>r1, {0x9}}, './file0\x00'})
sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004000}, 0x1)
sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf76, 0x2c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x20)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000900), 0x28040, 0x0)
ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000940))
syncfs(r5)
ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000980)=0x1)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000009c0)={{0x1, 0x1, 0x18, <r6=>r2, {0x4}}, './file0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r3)
sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r7, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x15}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200c0}, 0x20000040)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, 0x0, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, {0x8, 0x2, @local}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x800)

05:24:27 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xffff, 0xc000)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000010)
r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80b5)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040044}, 0x780b749d2fcd2850)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x188, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb6c}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0xfffff000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x200}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4c}, {0x6, 0x11, 0x400}, {0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3f}, {0x8, 0x13, 0xbf4}, {0x5, 0x14, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x8001}, 0x800)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14)
r3 = socket$inet6(0xa, 0x4, 0x2)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000580)=0x2)
ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f00000005c0))
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000600))
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000640)={0xf20, 0x2, 0x8, 0x995})
r5 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000680))
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80c)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000007c0)={{0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00', 0x5}, {0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, 0x24, [0x9, 0x2ce, 0x4, 0x1ff, 0x7, 0x0, 0x8, 0x9]}, 0x5c)
syz_genetlink_get_family_id$smc(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000a00)={&(0x7f0000000880), 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xec, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xec}}, 0x8040)

05:24:27 executing program 2:
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000000)={0x1, 0x4})
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x18}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x10)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x6, 0x2})
ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x5085)
fstatfs(0xffffffffffffffff, &(0x7f00000001c0)=""/252)
r0 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x800, 0x10, 0x1}, 0x18)
ioctl$TIOCNXCL(r0, 0x540d)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KIOCSOUND(r1, 0x4b2f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x100010, r1, 0x1bab7000)
ioctl$TIOCSIG(r0, 0x40045436, 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r3, 0x328, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x44001}, 0x4001)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000540)={0x7, 0x10, '\x00', 0x0, &(0x7f0000000500)=[0x0, 0x0]})
syz_open_dev$sg(&(0x7f0000000580), 0x3, 0x2)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000005c0))
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000600))
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000640))

05:24:27 executing program 3:
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c)
r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7, 0x4c080)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x8000}}, './file0\x00'})
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x4, 0x0, "2a84b3031da259e7e0f64aea23139b989469b54de64dd292c32b436ddb48b87d1f9558fc51c516e843d40d911fa8aa186a6eeb7a765a196adc0b8dce7ee3b7921fe2ffa68e83a601176c06ebd1ade0e7"}, 0xd8)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000200)=0x2)
process_madvise(r0, &(0x7f0000000800)=[{&(0x7f0000000240)="b3739a3f5faf8476f037ed0c1e63fdc9a3e40bc13ce936cce6abbb2d0660fac290ba80e7d5fd2dc17f146c522de7a010bdad250a820ba1df9a7b2fa48ff21ceec65bb931fb2811c53b1b3a20d716d4babb0a99741c82f1eda5857a9acc0e686a37e74251c594d8664c869b1134e85bafa0f313ff436f82493f6046ed18ae46a1d053d3484becd41bee27f9cc285adc481a079758b85ec574c5e2ae9482eaf6d11011d6764a9ba82c0a26d1c4167d7d6f789953012242dfa11d7bd0e11187b15ef8cd6185de", 0xc5}, {&(0x7f0000000340)="5a40e0c397b499992cd0a1d29c8c22f21ac070c493f98bbe842958b66135084dfc153d4a3cb17f16aaeb1ddd88a6812b6d4932424c934896bd79c76dbe86089b7ec4d982ce1050526f5f2db48297ea7d28e797d59a0fc5fd2d06f476714b60552643ddef47ee14592429cb38b7ba5293a664b07dd6626d44062e4d8dc8a7908b22a180fd20bd6c5c104939636b2ae0b353a702e36b9f388a6de46b93c0c6ad179a276dfa1c50fe4efe41bdea726ec0877ce570e992", 0xb5}, {&(0x7f0000000400)="b530d27ea3be23a8f789df2ca902e78aeb14c99aad0e7a9193f597d77790f15c9e5b95c3bb36944bce3452c7a75954182a18f1ad3680bf08aa6b01c70a06cbcdbac978535b2fe56cf997328b0edaac3ea92510927f6e8e09a4e312227caeb17dca3cc9a28c12356b9223b860002ddbd56bbdfc58e433c338e9279af04d5a54d8fd8be168c7abb91dc401b2e79033e11a2980a40bdb99cfc1189e59327f1fd5673ab3343a45a14095959356834f116adf6809118244ef2f17e74525dd96d671bb5b3b96d1248968327abe26f06de1a07d1f2380", 0xd3}, {&(0x7f0000000500)="9f9e5ae4d02b8417821fcfab889913efa1d1ea40b421466868dc6e78a5a77cf69394c25554735a17138f087e2993e89f303f9ce9389ed133966681db3a5489459dbd23262e6f1fc5f0aee6a445c5c3bed3b5acce156fee4c4bac6738cfb145ad2339d049cf1fd60fc48c006d69b7410fe70b8e457d35af66b66bc0cec9bcc3de7824cc40844b3a557c7d927d6e5c7f548a7d319eaf3a7c59", 0x98}, {&(0x7f00000005c0)="619482015186fb4e41b73a4bf6ffece7423347f48c60ce5ebaebb06dcbc9cd71518d03aba64cd79895e2c36f4291d9e78a0683cef64f2a01f961f1e618b90237dc85d1c767935a550557e97cdbcfee08c0c073b74d3c2b2d248f628e15ec1ca679181e78a5b5d57cad017384b5785df6e7903ffe61341e6234679e3cd46af27ffd5f0a30fe", 0x85}, {&(0x7f0000000680)="82154e300c6695e263ef17f3dc4cb9d7a0459c626f7037b8d4b7e04d3a32d6a44d670f003e779c95cf6902fc1ad0bf5fa4244e2c8b2201f71f08b0f0a471275dafb2800e26d6b891d3cb9078f2c5bd603e43eb70d55dc3cdbd57db25029664f1ff2f0fba59396c9c934c6c7ae68670adac6d2e4d22df68915c181b6af9e51e72c87527cb6eb595271a2550b8969d552fa1085f94a00f2a04d8ef69c8b3940a395f81f6b739988497eaa4e8339013466eca21f19e1c803bff", 0xb8}, {&(0x7f0000000740)="f15d00f40d141bde9f9896833e007f11e3fdd3267e0e66581658b03bac0519a4a67b862553c715dcbde3ede9a787e1e0ca32c379d72e9591a765d0a2de9bf36cd9ce224dbdbb66e7be123ba4a5b438a4ac7194025d0e05655f9aebce9ff4e5340622f434fefc7ddb73d42acc724ea6dc69b66dad95cb3dd5f1a1bb97c01647c29b9cb82ba4", 0x85}], 0x7, 0xa, 0x0)
fremovexattr(r1, &(0x7f0000000880)=@known='user.syz\x00')
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000008c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x8}}, './file0\x00'})
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000900)={'virt_wifi0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x88, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xa43e93dfc3e44a21}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0x14, 0x4, "a667c6acb5e087f3165c461a9a13b96d"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4d00771472"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000040)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000b00)={0x0, 0x66})
ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000001b00)={0x0, 0x11be, [0x170, 0x1, 0x877, 0x3, 0x80000000, 0x89]})
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000001b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r4 = syz_open_dev$usbmon(&(0x7f0000001d80), 0x1, 0x400080)
ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000001dc0)={0x2, 0x2, 0x1})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000001e00)={0x6, 'lo\x00', {0x35bf}, 0xff80})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000001e40)={'veth1_to_batadv\x00', 0x9})
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001e80)={'filter\x00', 0x0, [0x11f03edc, 0x1, 0x4, 0x1, 0x1]}, &(0x7f0000001f00)=0x54)

[  137.274732] audit: type=1400 audit(1750483467.106:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:24:27 executing program 4:
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000))
recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/41, 0x29, 0x60, &(0x7f0000000080)=@isdn={0x22, 0x0, 0x9, 0x20, 0x7f}, 0x80)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {<r2=>0xee01, 0xffffffffffffffff}}, './file0\x00'})
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@private0, @in6=@private1, 0x4e23, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x87, 0x0, r2}, {0xff, 0x100, 0x2, 0x6, 0x0, 0x7, 0x40, 0x6}, {0x7, 0x0, 0x80000001, 0x5}, 0x8001, 0x6e6bbf, 0x2, 0x0, 0x2}, {{@in=@multicast1, 0x4d2, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x34ff, 0x1, 0x1, 0x4, 0x200, 0x8, 0xff}}, 0xe8)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)={0x5, 0xbc, 0x4, 0x0, 0x3, [{0x9, 0x4, 0x3, '\x00', 0x180}, {0x401, 0x6000000, 0x1ff, '\x00', 0x328b}, {0x8, 0x9, 0x3a, '\x00', 0x200}]})
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xddbc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffff7f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10230e0}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x58}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "796ec6ca858c387a2cbf974f6f"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5cd1f410d0"}]}, 0x40}, 0x1, 0x0, 0x0, 0x814}, 0x80c0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl0\x00', <r4=>0x0, 0x2f, 0x7f, 0x0, 0x3, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8000, 0x80, 0x8000, 0x20}})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000640)={@mcast2, 0x15, r4})
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000680), 0x4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x725a02, 0x80)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x0, 0x9, 0x372a9f3d, 0x1, 0x8001, 0x3}, {0x853d, 0x5, 0x8, 0x2, 0x401, 0xfffffffffffffff7}], ['\x00', '\x00']})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r6=>r5, {0x6, 0x8}}, './file0\x00'})
ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000880))
lseek(r3, 0x6, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xd8, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000a80)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000ac0)=0x28)
prctl$PR_SET_FP_MODE(0x2d, 0x1)

05:24:27 executing program 5:
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x9c, 0x8, 0x65, 0x20, 0xfff, 0x2, 0x3e, 0x9b, 0x30, 0x38, 0x1db, 0x5, 0x100, 0x20, 0x1, 0xc2, 0xff80, 0x9}, [{0x7, 0x0, 0x3, 0x7, 0xfffff001, 0x2b61, 0x4, 0x3}, {0x5, 0x9, 0xca, 0x6, 0x8, 0x1, 0x800}], "ea978cf6560aa96968c6d2657cc2fb919344cdf55c1c189dcc6c7b8f2a963d130e84eb1e2286", ['\x00', '\x00', '\x00']}, 0x39e)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pwritev2(r0, &(0x7f0000000640)=[{&(0x7f0000000400)="d8fc99162fc2f2dd9a24bfe4f47278292c9bbf2e49742718fd58fb21265529bcdc321d1888efe82066dfb38e57ce241ecdb01b2c91c6a46e450e1fa7a73074dfbdf9062921c32f5b5487c5d841eb10d674b7f505d436621474376e51abc4cc8dad1f", 0x62}, {&(0x7f0000000480)="5f894547c80e017e2f8e2b9b286d8de8e2b7f3989b58787021e75edba96a755d6381812c01c870c388f149cd697c8f60af03e508d0", 0x35}, {&(0x7f00000004c0)="84f7be17d45bc029aee581810aa81ce3e41b0b2e38dc6564f1c649de0cfb6795b8d50cb6c2fc31ec1f5fa08e8988fe124a497db2e4db7c731251269fe21e369151c4e81c344d7ad39313d8b315e9d6c1951c90a14f8a4efc17dd21bec91178537ce0bc9389f243a73aaef1676446bd9594e0c738599fb28bc5dc6506d4eedf30", 0x80}, {&(0x7f0000000540)="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", 0xfc}], 0x4, 0x5, 0x7, 0x7)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
pipe2$9p(&(0x7f00000008c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000900)={0x1, 'syz_tun\x00'}, 0x18)
setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000940)=0x7, 0x4)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0)
r4 = getuid()
mount$9p_fd(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x510002, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@cache_loose}, {@mmap}], [{@subj_user={'subj_user', 0x3d, 'syz_tun\x00'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@audit}, {@obj_user={'obj_user', 0x3d, 'syz_tun\x00'}}, {@obj_role={'obj_role', 0x3d, ':$-t^D:-('}}, {@obj_user={'obj_user', 0x3d, '&'}}, {@obj_user}, {@audit}, {@uid_gt={'uid>', r4}}]}})
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000b40))
fchmod(r0, 0x20)
socketpair(0x22, 0x2, 0x18, &(0x7f0000000b80)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000bc0), 0x20000, 0x0)
sendfile(r6, r7, 0x0, 0x643)
r8 = syz_io_uring_complete(0x0)
fcntl$notify(r8, 0x402, 0x1)
sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000890)
sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x12c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x19}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c004)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0)

05:24:27 executing program 6:
r0 = syz_io_uring_complete(0x0)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000000)={r0, r1, 0xdf})
fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0xffff, 0x1)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @local}, {0x6}, 0x28, {0x2, 0x4e20, @remote}, 'veth0_to_bridge\x00'})
r2 = socket$inet(0x2, 0x6, 0x5)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000100)={{0x2, 0x4e23, @rand_addr=0x64010101}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, {0x2, 0x4e24, @broadcast}, 'gretap0\x00'})
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'wlan0\x00', 0x2}, 0x18)
recvmsg$unix(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000001c0)=""/121, 0x79}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x40)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000001900)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000018c0)={&(0x7f00000014c0)={0x3ec, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x7}}}}, [@NL80211_ATTR_NAN_FUNC={0x3ac, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x338, 0xd, 0x0, 0x1, [{0xfa, 0x0, "db244358d785f9e3b56adcec808906990012499e374380073806438456d1bcb65002ed95a349bd068a3614aeb152551ee0deca877fb626227bef6fd0c305806f6e804083684d4fe95df1debecca8f57b4a5f71a24fc852ee7860a9b79c42f337a952863a3123f2e15006d38eb85042f5cdc57d79782aaa42c3e91d60df740701f652bed2cb0f301570b87706457bbb15ac173f07ebe6c3910161bc585790d365c7b4b1030d1bca652b785c1a455f9bf4a01ce3e427321fe051a6bcc23cacea66c0f7333e862134cdf83825ee784bca600fbe7edb3db2b053da349fdd445468650784c3a468c63d4c530316adcbf3dba7de8d5bf403a9"}, {0xc4, 0x0, "03cc36a9d19979ef72e1e6c4691bfeac48fe85c31184c815f6f8c6fd1e764786d756ff58996bbbd78d6174aee3396eb0b73e1885e016edb2cbddd063ea861a3efaffc3d9ce4f1684573aebcd32b691ab1889c9f152219f24e736f3173dd0994c6737ce4db49cda90ef1d4a0e91a8766ec9ad1363c2b50fa59a380391bab2ed4d565ec8c33de838a6281abdf39b558e9a0ab948ba793dca56e362c7036b63bcc629056ea0e901351192f6388f0bb2634de1cdfc7123f1a1f6ed39825e681d751d"}, {0x98, 0x0, "9978b653aa11a7c9cb5130a2be205d89037b0ee1586b8971e4dfae95dd66b8a7e9c855e5556ae9dc05c8d0719ae7fca85cb897eee5b5e447c46ee4a4fff30be404d906cb5c5505f0484e7483a2357652d515ef968c1adf5391e3f179f940f3f453927a9a90ec946baf22ea80afe9d50250d4ef614f5e955f6f6286690abc84562cbfe0157c9470014823b7bc177592b93fecef74"}, {0x6, 0x0, 'Cs'}, {0xd1, 0x0, "7765f7fb6c30d6cda7ac85ccf13e684ec6e679c8339e524798ecfbc49a6acab3c5a3a448e3f6091bf0c79bffa9b3e6a31bb3c025df41e06e8bc45f5d1039b729fa7e4dbe31b2b0615c417a93d2fbe9ea4972d8605b4827076c5b1be923c1341a7577dc27112c64af6ef004d50bb06ef15a16f22f7d54536ab2e9b20f16c62154dcc24ddaf18880f9295ce5f411997b64bf29cf41cc19fceb3dc12028026d4cc35c0dbba50aaf1b0fbf20882a049ae8ac01e8be2efe7b3557960510b0308c9b3749095376b8c1e8d78bb7d26ac4"}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x59}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_SERVICE_INFO={0x2f, 0xb, "322e5fd15aeed546c6ae8c718e98dc44968d5cf0c16a4e4d142d84dbcc49d8d4099d73da3de1818cb548a3"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "8235b9a00bfa"}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x8000080}, 0x4000014)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000019c0)={{0x1, 0x1, 0x18, <r7=>r1, {0x400, 0x8}}, './file0/file0\x00'})
r8 = openat$cgroup(r6, &(0x7f0000001a00)='syz1\x00', 0x200002, 0x0)
mount$9p_fd(0x0, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980), 0x800, &(0x7f0000001a40)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_L}, {@debug={'debug', 0x3d, 0xffffffff7fffffff}}, {@version_L}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'gretap0\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '}'}}]}})
r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001b00), 0x2000, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, &(0x7f0000001b40))
ioctl$FIBMAP(r3, 0x1, &(0x7f0000001f40)=0x20)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000001f80))

05:24:27 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x820)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x222, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x20004014)
r1 = syz_open_dev$vcsa(&(0x7f0000000200), 0x2, 0x4202)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x12c, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFQA_CT={0x118, 0xb, 0x0, 0x1, [@CTA_ZONE={0x6}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TUPLE_MASTER={0x78, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffff801}]}, @CTA_LABELS_MASK={0x14, 0x17, [0x80000001, 0x1, 0x10000, 0x8]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20044004}, 0x2400c095)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}}, 0x48800)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
r3 = fsmount(r1, 0x0, 0xf9)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x8050)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), r3)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x19}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000804}, 0x4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000940))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000980)={0x5, 0x80, 0xde7, {0x1, 0x5dd93128}, 0x6})
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, 0xd, 0x6, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b40), 0x208180, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000000b80)={{0x0, 0x6, 0x200, 0x101, 0x7fff, 0x0, 0x100000000, 0x840, 0xfffffff9, 0x5f4a, 0x3, 0x2, 0xd6c, 0x4, 0x85e}})
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000)

[  138.803096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  138.810888] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  138.815486] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  138.823923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  138.831195] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  138.909319] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  138.914470] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  138.918325] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  138.926073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  138.932486] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  138.992951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  138.997665] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  139.000504] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  139.014736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  139.017887] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  139.019899] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  139.024081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  139.027363] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  139.065358] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  139.070722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  139.090559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  139.109378] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  139.115941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  139.123381] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  139.125609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  139.128014] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  139.163344] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  139.166693] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  139.172034] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  139.180506] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  139.184559] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  139.189576] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  139.194160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  139.196526] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  139.200768] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  139.202355] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  139.204721] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  139.223504] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  139.224420] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  139.284524] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  140.881655] Bluetooth: hci0: command tx timeout
[  141.008123] Bluetooth: hci1: command tx timeout
[  141.073525] Bluetooth: hci3: command tx timeout
[  141.200121] Bluetooth: hci2: command tx timeout
[  141.327985] Bluetooth: hci5: command tx timeout
[  141.328672] Bluetooth: hci4: command tx timeout
[  141.329383] Bluetooth: hci6: command tx timeout
[  141.393147] Bluetooth: hci7: command tx timeout
[  142.927984] Bluetooth: hci0: command tx timeout
[  143.055922] Bluetooth: hci1: command tx timeout
[  143.120119] Bluetooth: hci3: command tx timeout
[  143.247903] Bluetooth: hci2: command tx timeout
[  143.376632] Bluetooth: hci6: command tx timeout
[  143.377295] Bluetooth: hci4: command tx timeout
[  143.378618] Bluetooth: hci5: command tx timeout
[  143.440874] Bluetooth: hci7: command tx timeout
[  144.977063] Bluetooth: hci0: command tx timeout
[  145.104245] Bluetooth: hci1: command tx timeout
[  145.168776] Bluetooth: hci3: command tx timeout
[  145.298046] Bluetooth: hci2: command tx timeout
[  145.423997] Bluetooth: hci5: command tx timeout
[  145.424508] Bluetooth: hci4: command tx timeout
[  145.425432] Bluetooth: hci6: command tx timeout
[  145.488916] Bluetooth: hci7: command tx timeout
[  147.023994] Bluetooth: hci0: command tx timeout
[  147.152108] Bluetooth: hci1: command tx timeout
[  147.217445] Bluetooth: hci3: command tx timeout
[  147.344874] Bluetooth: hci2: command tx timeout
[  147.472161] Bluetooth: hci4: command tx timeout
[  147.472224] Bluetooth: hci6: command tx timeout
[  147.472864] Bluetooth: hci5: command tx timeout
[  147.539199] Bluetooth: hci7: command tx timeout
[  201.442238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  201.447224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  201.450500] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  201.459440] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  201.465078] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  201.528100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  201.533340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  201.548076] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  201.558773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  201.566301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  201.658639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  201.662621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  201.677599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  201.690445] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  201.697343] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  201.716452] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  201.723287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  201.736708] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  201.746633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  201.754425] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  201.762582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  201.771074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  201.776731] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  201.793720] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  201.804307] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  201.810687] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  201.817293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  201.822381] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  201.824333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  201.828353] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  201.845224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  201.847428] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  201.847615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  201.851742] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  201.885728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  201.888753] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  201.888978] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  201.928199] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  201.936119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  201.973104] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  203.536975] Bluetooth: hci0: command tx timeout
[  203.663962] Bluetooth: hci1: command tx timeout
[  203.791935] Bluetooth: hci6: command tx timeout
[  203.983915] Bluetooth: hci2: command tx timeout
[  203.984933] Bluetooth: hci3: command tx timeout
[  204.047912] Bluetooth: hci4: command tx timeout
[  204.112618] Bluetooth: hci7: command tx timeout
[  204.112669] Bluetooth: hci5: command tx timeout
[  205.583896] Bluetooth: hci0: command tx timeout
[  205.712077] Bluetooth: hci1: command tx timeout
[  205.840055] Bluetooth: hci6: command tx timeout
[  206.031916] Bluetooth: hci3: command tx timeout
[  206.032207] Bluetooth: hci2: command tx timeout
[  206.097841] Bluetooth: hci4: command tx timeout
[  206.159939] Bluetooth: hci5: command tx timeout
[  206.159971] Bluetooth: hci7: command tx timeout
[  207.633084] Bluetooth: hci0: command tx timeout
[  207.760958] Bluetooth: hci1: command tx timeout
[  207.888147] Bluetooth: hci6: command tx timeout
[  208.079913] Bluetooth: hci2: command tx timeout
[  208.080962] Bluetooth: hci3: command tx timeout
[  208.144128] Bluetooth: hci4: command tx timeout
[  208.207980] Bluetooth: hci5: command tx timeout
[  208.209292] Bluetooth: hci7: command tx timeout
[  209.681201] Bluetooth: hci0: command tx timeout
[  209.808215] Bluetooth: hci1: command tx timeout
[  209.937126] Bluetooth: hci6: command tx timeout
[  210.128040] Bluetooth: hci3: command tx timeout
[  210.128285] Bluetooth: hci2: command tx timeout
[  210.192882] Bluetooth: hci4: command tx timeout
[  210.258874] Bluetooth: hci7: command tx timeout
[  210.259232] Bluetooth: hci5: command tx timeout
[  263.592933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  263.599953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  263.604381] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  263.605931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  263.609671] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  263.612649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  263.619641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  263.627973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  263.632350] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  263.650332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  263.803697] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  263.808345] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  263.810664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  263.816524] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  263.819963] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  263.943251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  263.961174] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  263.971468] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  263.981259] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  263.989306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  264.001421] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  264.026758] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  264.042316] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  264.054031] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  264.059093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  264.082107] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  264.086254] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  264.091460] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  264.095554] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  264.097050] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  264.123512] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  264.136445] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  264.140388] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  264.147543] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  264.161423] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  264.164440] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  264.168232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  264.175465] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  264.180790] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  264.195520] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  265.743907] Bluetooth: hci0: command tx timeout
[  265.743974] Bluetooth: hci1: command tx timeout
[  265.874242] Bluetooth: hci2: command tx timeout
[  266.129303] Bluetooth: hci4: command tx timeout
[  266.256112] Bluetooth: hci6: command tx timeout
[  266.256396] Bluetooth: hci7: command tx timeout
[  266.257517] Bluetooth: hci3: command tx timeout
[  266.383910] Bluetooth: hci5: command tx timeout
[  267.792135] Bluetooth: hci1: command tx timeout
[  267.793665] Bluetooth: hci0: command tx timeout
[  267.920003] Bluetooth: hci2: command tx timeout
[  268.175934] Bluetooth: hci4: command tx timeout
[  268.303911] Bluetooth: hci7: command tx timeout
[  268.304320] Bluetooth: hci3: command tx timeout
[  268.304378] Bluetooth: hci6: command tx timeout
[  268.432167] Bluetooth: hci5: command tx timeout
[  269.839906] Bluetooth: hci0: command tx timeout
[  269.840373] Bluetooth: hci1: command tx timeout
[  269.967885] Bluetooth: hci2: command tx timeout
[  270.224145] Bluetooth: hci4: command tx timeout
[  270.351894] Bluetooth: hci6: command tx timeout
[  270.352382] Bluetooth: hci7: command tx timeout
[  270.352789] Bluetooth: hci3: command tx timeout
[  270.480182] Bluetooth: hci5: command tx timeout
[  271.888234] Bluetooth: hci0: command tx timeout
[  271.888700] Bluetooth: hci1: command tx timeout
[  272.016137] Bluetooth: hci2: command tx timeout
[  272.271927] Bluetooth: hci4: command tx timeout
[  272.400116] Bluetooth: hci3: command tx timeout
[  272.400580] Bluetooth: hci7: command tx timeout
[  272.401858] Bluetooth: hci6: command tx timeout
[  272.529899] Bluetooth: hci5: command tx timeout
[  325.991614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  326.000531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  326.007979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  326.017377] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  326.025428] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  326.178550] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  326.182468] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  326.184475] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  326.194691] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  326.207564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  326.277323] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  326.290457] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  326.294331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  326.300938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  326.304744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  326.388370] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  326.407019] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  326.415159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  326.418365] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  326.423307] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  326.440102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  326.445600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  326.447572] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  326.504435] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  326.516853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  326.527712] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  326.535377] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  326.537381] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  326.544350] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  326.550606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  326.561457] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  326.564407] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  326.569420] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  326.572858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  326.600406] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  326.629514] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  326.655966] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  326.692360] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  326.708352] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  326.749647] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  328.081149] Bluetooth: hci0: command tx timeout
[  328.271982] Bluetooth: hci1: command tx timeout
[  328.400903] Bluetooth: hci2: command tx timeout
[  328.528920] Bluetooth: hci4: command tx timeout
[  328.656899] Bluetooth: hci6: command tx timeout
[  328.657566] Bluetooth: hci3: command tx timeout
[  328.721037] Bluetooth: hci5: command tx timeout
[  328.848887] Bluetooth: hci7: command tx timeout
[  330.129097] Bluetooth: hci0: command tx timeout
[  330.320996] Bluetooth: hci1: command tx timeout
[  330.448870] Bluetooth: hci2: command tx timeout
[  330.577174] Bluetooth: hci4: command tx timeout
[  330.704134] Bluetooth: hci6: command tx timeout
[  330.704603] Bluetooth: hci3: command tx timeout
[  330.768905] Bluetooth: hci5: command tx timeout
[  330.899120] Bluetooth: hci7: command tx timeout
[  332.177005] Bluetooth: hci0: command tx timeout
[  332.368028] Bluetooth: hci1: command tx timeout
[  332.496242] Bluetooth: hci2: command tx timeout
[  332.625054] Bluetooth: hci4: command tx timeout
[  332.752935] Bluetooth: hci6: command tx timeout
[  332.753400] Bluetooth: hci3: command tx timeout
[  332.817148] Bluetooth: hci5: command tx timeout
[  332.944996] Bluetooth: hci7: command tx timeout
[  334.225248] Bluetooth: hci0: command tx timeout
[  334.417863] Bluetooth: hci1: command tx timeout
[  334.544107] Bluetooth: hci2: command tx timeout
[  334.673095] Bluetooth: hci4: command tx timeout
[  334.801135] Bluetooth: hci3: command tx timeout
[  334.801575] Bluetooth: hci6: command tx timeout
[  334.865619] Bluetooth: hci5: command tx timeout
[  334.993054] Bluetooth: hci7: command tx timeout
[  388.964617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  388.968570] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  388.975380] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  388.983407] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  388.988339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  389.043274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  389.048235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  389.052517] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  389.059984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  389.062135] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  389.066871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  389.070694] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  389.076119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  389.090198] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  389.097285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  389.111173] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  389.120495] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  389.126766] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  389.129379] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  389.135565] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  389.137382] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  389.140429] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  389.155551] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  389.162509] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  389.167069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  389.177321] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  389.181462] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  389.189420] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  389.194192] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  389.211640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  389.227457] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  389.232712] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  389.235648] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  389.246129] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  389.252083] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  389.260322] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  389.263681] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  389.279136] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  389.280552] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  389.305219] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  391.056191] Bluetooth: hci0: command tx timeout
[  391.119878] Bluetooth: hci2: command tx timeout
[  391.247894] Bluetooth: hci3: command tx timeout
[  391.248430] Bluetooth: hci1: command tx timeout
[  391.376047] Bluetooth: hci7: command tx timeout
[  391.376675] Bluetooth: hci4: command tx timeout
[  391.377638] Bluetooth: hci5: command tx timeout
[  391.378242] Bluetooth: hci6: command tx timeout
[  393.103942] Bluetooth: hci0: command tx timeout
[  393.167895] Bluetooth: hci2: command tx timeout
[  393.296172] Bluetooth: hci1: command tx timeout
[  393.296579] Bluetooth: hci3: command tx timeout
[  393.424315] Bluetooth: hci5: command tx timeout
[  393.424719] Bluetooth: hci6: command tx timeout
[  393.425157] Bluetooth: hci4: command tx timeout
[  393.425543] Bluetooth: hci7: command tx timeout
[  395.152073] Bluetooth: hci0: command tx timeout
[  395.216551] Bluetooth: hci2: command tx timeout
[  395.344181] Bluetooth: hci1: command tx timeout
[  395.344618] Bluetooth: hci3: command tx timeout
[  395.471997] Bluetooth: hci7: command tx timeout
[  395.472436] Bluetooth: hci4: command tx timeout
[  395.473251] Bluetooth: hci6: command tx timeout
[  395.473666] Bluetooth: hci5: command tx timeout
[  397.200149] Bluetooth: hci0: command tx timeout
[  397.264842] Bluetooth: hci2: command tx timeout
[  397.391888] Bluetooth: hci3: command tx timeout
[  397.392316] Bluetooth: hci1: command tx timeout
[  397.519947] Bluetooth: hci5: command tx timeout
[  397.520380] Bluetooth: hci7: command tx timeout
[  397.521441] Bluetooth: hci6: command tx timeout
[  397.521897] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
05:29:36  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=ffffffff81353d2d RDI=fffffbfff0b83988 RBP=ffffffff85c1cc40 RSP=ffff8880377476e8
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=000000000002178a
R12=0000000000000001 R13=ffffffff81353d2d R14=0000000000000000 R15=ffff8880377477f0
RIP=ffffffff81aedae7 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe5a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055f571060868 CR3=0000000034a47000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000000 RCX=28438d498b4f5991 RDX=00000000fd3800be
RSI=00000000fbc386a6 RDI=00000000dab44b10 RBP=ffffffff85c1cc40 RSP=ffff888036be70f0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200
RIP=ffffffff8151b06f RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc9d9d0927c CR3=000000003476b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000