Warning: Permanently added '[localhost]:49326' (ECDSA) to the list of known hosts.
2025/06/21 17:09:12 fuzzer started
2025/06/21 17:09:12 dialing manager at localhost:33119
syzkaller login: [   93.153490] cgroup: Unknown subsys name 'net'
[   93.289628] cgroup: Unknown subsys name 'cpuset'
[   93.332469] cgroup: Unknown subsys name 'rlimit'
2025/06/21 17:09:26 syscalls: 203
2025/06/21 17:09:26 code coverage: enabled
2025/06/21 17:09:26 comparison tracing: enabled
2025/06/21 17:09:26 extra coverage: enabled
2025/06/21 17:09:26 setuid sandbox: enabled
2025/06/21 17:09:26 namespace sandbox: enabled
2025/06/21 17:09:26 Android sandbox: enabled
2025/06/21 17:09:26 fault injection: enabled
2025/06/21 17:09:26 leak checking: enabled
2025/06/21 17:09:26 net packet injection: enabled
2025/06/21 17:09:26 net device setup: enabled
2025/06/21 17:09:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/21 17:09:26 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/21 17:09:26 USB emulation: enabled
2025/06/21 17:09:26 hci packet injection: enabled
2025/06/21 17:09:26 wifi device emulation: enabled
2025/06/21 17:09:26 802.15.4 emulation: enabled
2025/06/21 17:09:26 fetching corpus: 0, signal 0/0 (executing program)
2025/06/21 17:09:28 starting 8 fuzzer processes
17:09:28 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', <r1=>0x0, 0x29, 0x1f, 0x3, 0xa957, 0x60, @loopback, @private1, 0x79cf472f272f4874, 0x48, 0x7f, 0x800}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', <r2=>r1, 0x29, 0x1f, 0x2, 0x7, 0x14, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, 0x20, 0x20, 0x1, 0x5}})
getsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r0, {0x1}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r4=>r1, 0x4, 0x0, 0x3, 0x40, 0x8, @loopback, @loopback, 0x7800, 0x8, 0x2, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6tnl0\x00', r4, 0x2f, 0x3, 0x4, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast2, 0x8000, 0x20, 0x0, 0x99a}})
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x40002, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000440), &(0x7f0000000480)=0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'sit0\x00', <r7=>0x0, 0x2f, 0x6, 0x7f, 0x200, 0x11, @local, @private0, 0x40, 0x8, 0x101, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r7, 0x2f, 0x3, 0x9, 0x1, 0x14, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x40, 0x3, 0x9}})
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r9 = syz_io_uring_complete(0x0)
openat$cgroup_ro(r9, &(0x7f0000000640)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
r10 = openat$cgroup_ro(r8, &(0x7f0000000680)='cgroup.stat\x00', 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r10, 0x89fb, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'sit0\x00', r2, 0x29, 0x2, 0x4, 0x8, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x700, 0x69ca4f39, 0x8}})
socket$packet(0x11, 0x2, 0x300)

17:09:28 executing program 1:
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x21}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000041}, 0x40005)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40020}, 0x4041)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x10c, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0xd4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x43}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0xa8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48802)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r1, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x44884)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r3, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8000}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004040)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r4, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xd549}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x12}, 0x4004011)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1b8, r1, 0x420, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x15c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fff}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6a}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_ID={0xc0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x54a}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9bb}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20008050}, 0x8000)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c80), r0)
sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xc4, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:hald_dccm_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:modules_dep_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40890}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r1, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x40)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000f40)={'wpan3\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000f80)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x7fff}}, './file0\x00'})
ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)

17:09:28 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffff}}, './file0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', <r3=>0x0})
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x1010, r0, 0x10000000)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x141a02, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r5=>r0, {0x2}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', r3, 0x2b, 0xe3, 0x1d, 0x7, 0x12, @mcast1, @local, 0x7800, 0x40, 0x3, 0x9}})
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x121680)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f0000000380))
r7 = inotify_add_watch(r5, &(0x7f0000000400)='./file0\x00', 0x40000000)
inotify_rm_watch(r5, r7)
r8 = syz_io_uring_complete(0x0)
openat$cgroup_int(r8, &(0x7f0000000440)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r9, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {0x7fff}}, './file0\x00'})
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xfffffffffffffffc)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'})

17:09:28 executing program 3:
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="bf8a63264a4f"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="68af2a200eca"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d55a0bec8126"}]}, 0x70}, 0x1, 0x0, 0x0, 0x40040}, 0x8810)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x10000005)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xfffffffc, 0x800, 0x7, 0x2}}}, ["", "", "", "", ""]}, 0x30}}, 0x80)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}]}, 0x24}}, 0x20008000)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa0, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a3dda55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c32217e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xaf55e43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75f8bfbc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d0ed866}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56db90c7}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58f1a976}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72b97e3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30aadceb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2598049a}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2}, 0x20040005)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dbusd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2f}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:groupadd_exec_t:s0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c8c4}, 0x8040)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20040004)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x8c, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000e00), r4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x40)

17:09:28 executing program 4:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x34880, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040))
ioctl$RTC_WIE_OFF(r0, 0x7010)
ioctl$RTC_VL_CLR(r0, 0x7014)
r1 = io_uring_setup(0x270e, &(0x7f0000000080)={0x0, 0x39a2, 0x0, 0x3, 0x304, 0x0, r0})
socketpair(0x26, 0xa, 0x2, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2018200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="e1c516e8794f"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="61f42e84c78d"}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x800)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008800}, 0x10)
r3 = syz_open_dev$rtc(&(0x7f0000000380), 0x9, 0x20000)
ioctl$RTC_VL_CLR(r3, 0x7014)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r4=>r2, {0x2}}, './file0\x00'})
sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x400, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4801)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1800002, 0x810, r1, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f00000005c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000540)={0x80002, 0x32, 0xa}, &(0x7f0000000580)='./file0\x00', 0x18, 0x0, 0x31713}, 0x7)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl0\x00', <r6=>0x0, 0x2f, 0x3f, 0x40, 0x8c, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x80, 0x8, 0x7, 0xd5d6}})
symlinkat(&(0x7f00000006c0)='./file0\x00', r4, &(0x7f0000000700)='./file0\x00')
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'sit0\x00', r6, 0x4, 0x0, 0x7, 0x1, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x20, 0xffff, 0x7}})
shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'sit0\x00', r6, 0x4, 0xf5, 0xf8, 0x8001, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x10, 0x40, 0x5}})
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000008c0)={0xc, 0x36, 0x14, 0xd, 0x9, 0xe363, 0x2, 0x66, 0xffffffffffffffff})

[  108.485660] audit: type=1400 audit(1750525768.197:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
17:09:28 executing program 5:
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0}, 0x400)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
setresgid(0xffffffffffffffff, r1, r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x701800, 0x80)
newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2000)
getresuid(&(0x7f0000000300), &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000380))
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x4, &(0x7f00000003c0)={[{@huge_within_size}, {@huge_within_size}, {@uid={'uid', 0x3d, r0}}, {@huge_advise}, {@uid={'uid', 0x3d, r4}}], [{@smackfsroot={'smackfsroot', 0x3d, '\xa1}'}}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x8c}}, './file0\x00'})
r5 = syz_io_uring_complete(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5)
symlinkat(&(0x7f00000004c0)='./file0\x00', r5, &(0x7f0000000500)='./file0/file0\x00')
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r6=>r3, {0x81}}, './file0/file1\x00'})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0xa0, 0x2}, 0x18)
r7 = openat$cgroup_ro(r5, &(0x7f0000000600)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
mkdirat$cgroup(r7, &(0x7f0000000640)='syz1\x00', 0x1ff)
r8 = socket(0x2c, 0x1, 0x80000000)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r10=>r8, {0x40}}, './file0/file0\x00'})
ioctl$RTC_PIE_ON(r10, 0x7005)

17:09:28 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xfffffffb}}, './file0\x00'})
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x800000, &(0x7f00000000c0)={[{@gid={'gid', 0x3d, 0xee00}}, {@huge_never}, {@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x38, 0x37, 0x36, 0x2c, 0x0]}}}}, {@mode={'mode', 0x3d, 0x2}}, {@huge_within_size}, {}, {@nr_blocks={'nr_blocks', 0x3d, [0x33, 0x2d, 0x78, 0x70, 0x70, 0x34, 0x25]}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]})
getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))
getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0))
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r1=>r0, {0x100}}, './file0\x00'})
openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0)
r2 = syz_io_uring_complete(0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'})
r3 = syz_io_uring_complete(0x0)
openat$cgroup_int(r3, &(0x7f00000003c0)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000440), 0x1000, &(0x7f0000000480)={[{@huge_advise}, {@huge_never}, {@huge_never}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x35, 0x66, 0x34, 0x38, 0x35, 0x61, 0x64], 0x2d, [0x36, 0x37, 0x38, 0x63], 0x2d, [0x34, 0x65, 0x65, 0x31], 0x2d, [0x65, 0x35, 0x38, 0x32], 0x2d, [0x35, 0x66, 0x39, 0x66, 0x38, 0x64, 0x36, 0x65]}}}, {@pcr={'pcr', 0x3d, 0x9}}, {@smackfshat={'smackfshat', 0x3d, 'mode'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@measure}, {@dont_appraise}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '-$)'}}, {@obj_user={'obj_user', 0x3d, '^MAY_READ'}}]})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe0}}, './file0\x00'})
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x2010, r2, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000600)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r1], 0x1}, 0x1ac3)
inotify_add_watch(r2, &(0x7f0000000640)='./file0\x00', 0x80000400)
openat$cgroup_freezer_state(r0, &(0x7f0000000680), 0x2, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000700), 0x800)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz0\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r5, &(0x7f00000007c0), 0x2, 0x0)
geteuid()

17:09:28 executing program 7:
r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:dhcpd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x36}}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x40008c0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000300), 0x0, 0x4)
r2 = syz_io_uring_complete(0x0)
shmget(0x1, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r0, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x0)
sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r0, 0x230, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x4}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x20000010)
syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000580), 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x40, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c717d213a0530f688fa12b6dfa7c09dd"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "222ebdb615e5f3207960fd78fd2c7802"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2)
sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x94, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040881}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
socketpair(0x18, 0x2, 0x5, &(0x7f0000000a00)={<r5=>0xffffffffffffffff})
sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x88, r4, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008001}, 0x40000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:useradd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x4)

[  110.139998] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  110.143694] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  110.149844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  110.152728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  110.160229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  110.166856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  110.169815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  110.180315] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  110.182874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  110.201269] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  110.264928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  110.276110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  110.278267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  110.292824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  110.310266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  110.316056] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  110.321853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  110.324287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  110.328183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  110.338193] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  110.339036] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  110.347052] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  110.354166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  110.357567] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  110.369794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  110.377162] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  110.381898] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  110.386243] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  110.394257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  110.407267] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  110.412343] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  110.445102] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  110.453257] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  110.455266] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  110.465316] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  110.468167] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  110.479159] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  110.536790] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  110.553284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  110.580905] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  112.271718] Bluetooth: hci1: command tx timeout
[  112.272837] Bluetooth: hci0: command tx timeout
[  112.397607] Bluetooth: hci5: command tx timeout
[  112.525019] Bluetooth: hci3: command tx timeout
[  112.525051] Bluetooth: hci2: command tx timeout
[  112.588880] Bluetooth: hci7: command tx timeout
[  112.652855] Bluetooth: hci6: command tx timeout
[  112.717230] Bluetooth: hci4: command tx timeout
[  114.316585] Bluetooth: hci0: command tx timeout
[  114.317810] Bluetooth: hci1: command tx timeout
[  114.444654] Bluetooth: hci5: command tx timeout
[  114.573857] Bluetooth: hci3: command tx timeout
[  114.573981] Bluetooth: hci2: command tx timeout
[  114.637744] Bluetooth: hci7: command tx timeout
[  114.700723] Bluetooth: hci6: command tx timeout
[  114.766586] Bluetooth: hci4: command tx timeout
[  116.367784] Bluetooth: hci1: command tx timeout
[  116.367849] Bluetooth: hci0: command tx timeout
[  116.492575] Bluetooth: hci5: command tx timeout
[  116.620638] Bluetooth: hci2: command tx timeout
[  116.623531] Bluetooth: hci3: command tx timeout
[  116.684652] Bluetooth: hci7: command tx timeout
[  116.748860] Bluetooth: hci6: command tx timeout
[  116.812821] Bluetooth: hci4: command tx timeout
[  118.412734] Bluetooth: hci1: command tx timeout
[  118.415563] Bluetooth: hci0: command tx timeout
[  118.540579] Bluetooth: hci5: command tx timeout
[  118.669660] Bluetooth: hci3: command tx timeout
[  118.669687] Bluetooth: hci2: command tx timeout
[  118.733572] Bluetooth: hci7: command tx timeout
[  118.798535] Bluetooth: hci6: command tx timeout
[  118.860686] Bluetooth: hci4: command tx timeout
[  172.682654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  172.685836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  172.688210] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  172.694390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  172.698111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  172.831819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  172.839432] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  172.841463] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  172.844143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  172.850637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  172.854077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  172.864144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  172.868885] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  172.868904] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  172.875173] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  172.896319] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  172.899313] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  172.903934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  172.912881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  172.915214] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  172.936139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  172.961935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  172.985968] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  172.989278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  172.990015] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  172.997431] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  173.013458] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  173.036379] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  173.050377] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  173.055844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  173.058719] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  173.060995] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  173.064167] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  173.076378] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  173.080728] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  173.085218] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  173.087029] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  173.094646] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  173.133369] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  173.139229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  174.732819] Bluetooth: hci0: command tx timeout
[  174.927708] Bluetooth: hci2: command tx timeout
[  174.989010] Bluetooth: hci1: command tx timeout
[  175.053127] Bluetooth: hci3: command tx timeout
[  175.116641] Bluetooth: hci5: command tx timeout
[  175.244594] Bluetooth: hci4: command tx timeout
[  175.309675] Bluetooth: hci7: command tx timeout
[  175.310340] Bluetooth: hci6: command tx timeout
[  176.780822] Bluetooth: hci0: command tx timeout
[  176.974548] Bluetooth: hci2: command tx timeout
[  177.037720] Bluetooth: hci1: command tx timeout
[  177.101838] Bluetooth: hci3: command tx timeout
[  177.164939] Bluetooth: hci5: command tx timeout
[  177.293831] Bluetooth: hci4: command tx timeout
[  177.359340] Bluetooth: hci6: command tx timeout
[  177.360139] Bluetooth: hci7: command tx timeout
[  178.829583] Bluetooth: hci0: command tx timeout
[  179.021894] Bluetooth: hci2: command tx timeout
[  179.087531] Bluetooth: hci1: command tx timeout
[  179.149972] Bluetooth: hci3: command tx timeout
[  179.212609] Bluetooth: hci5: command tx timeout
[  179.340736] Bluetooth: hci4: command tx timeout
[  179.405570] Bluetooth: hci7: command tx timeout
[  179.406084] Bluetooth: hci6: command tx timeout
[  180.877573] Bluetooth: hci0: command tx timeout
[  181.070530] Bluetooth: hci2: command tx timeout
[  181.133850] Bluetooth: hci1: command tx timeout
[  181.197616] Bluetooth: hci3: command tx timeout
[  181.262870] Bluetooth: hci5: command tx timeout
[  181.388830] Bluetooth: hci4: command tx timeout
[  181.452651] Bluetooth: hci6: command tx timeout
[  181.453128] Bluetooth: hci7: command tx timeout
[  235.234113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  235.240891] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  235.245353] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  235.253158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  235.259319] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  235.291813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  235.305207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  235.307933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  235.317980] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  235.323436] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  235.388962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  235.391932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  235.399312] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  235.408240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  235.415204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  235.505667] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  235.515953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  235.517383] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  235.546136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  235.550881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  235.552733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  235.565957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  235.568040] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  235.570933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  235.588784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  235.725183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  235.726456] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  235.737197] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  235.761983] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  235.767219] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  235.776265] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  235.780397] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  235.792866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  235.805383] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  235.828137] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  235.831031] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  235.832795] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  235.845053] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  235.846960] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  235.871966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  237.324592] Bluetooth: hci0: command tx timeout
[  237.390274] Bluetooth: hci1: command tx timeout
[  237.453597] Bluetooth: hci2: command tx timeout
[  237.645017] Bluetooth: hci3: command tx timeout
[  237.645768] Bluetooth: hci4: command tx timeout
[  237.900865] Bluetooth: hci6: command tx timeout
[  237.964760] Bluetooth: hci7: command tx timeout
[  237.965592] Bluetooth: hci5: command tx timeout
[  239.372793] Bluetooth: hci0: command tx timeout
[  239.437731] Bluetooth: hci1: command tx timeout
[  239.500599] Bluetooth: hci2: command tx timeout
[  239.692755] Bluetooth: hci4: command tx timeout
[  239.692867] Bluetooth: hci3: command tx timeout
[  239.948888] Bluetooth: hci6: command tx timeout
[  240.012578] Bluetooth: hci5: command tx timeout
[  240.012680] Bluetooth: hci7: command tx timeout
[  241.420615] Bluetooth: hci0: command tx timeout
[  241.484977] Bluetooth: hci1: command tx timeout
[  241.549684] Bluetooth: hci2: command tx timeout
[  241.740572] Bluetooth: hci4: command tx timeout
[  241.740610] Bluetooth: hci3: command tx timeout
[  241.998632] Bluetooth: hci6: command tx timeout
[  242.061829] Bluetooth: hci5: command tx timeout
[  242.062029] Bluetooth: hci7: command tx timeout
[  243.469066] Bluetooth: hci0: command tx timeout
[  243.532558] Bluetooth: hci1: command tx timeout
[  243.596656] Bluetooth: hci2: command tx timeout
[  243.788588] Bluetooth: hci4: command tx timeout
[  243.789843] Bluetooth: hci3: command tx timeout
[  244.045733] Bluetooth: hci6: command tx timeout
[  244.108596] Bluetooth: hci7: command tx timeout
[  244.110559] Bluetooth: hci5: command tx timeout
[  297.569475] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  297.574908] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  297.581152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  297.592926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  297.604987] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  297.774289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  297.787489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  297.791925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  297.808137] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  297.810257] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  297.812751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  297.824786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  297.828428] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  297.831720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  297.837299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  297.949994] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  297.956867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  297.963760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  297.978755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  297.993713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  298.123740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  298.137984] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  298.170903] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  298.177658] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  298.182003] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  298.210770] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  298.230312] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  298.230673] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  298.239337] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  298.239598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  298.257789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  298.268396] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  298.290158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  298.322024] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  298.350580] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  298.358938] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  298.368813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  298.383271] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  298.389354] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  298.393734] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  299.661644] Bluetooth: hci0: command tx timeout
[  299.853768] Bluetooth: hci2: command tx timeout
[  299.981984] Bluetooth: hci1: command tx timeout
[  300.108578] Bluetooth: hci3: command tx timeout
[  300.236642] Bluetooth: hci4: command tx timeout
[  300.429627] Bluetooth: hci7: command tx timeout
[  300.430248] Bluetooth: hci5: command tx timeout
[  300.493791] Bluetooth: hci6: command tx timeout
[  301.709592] Bluetooth: hci0: command tx timeout
[  301.901614] Bluetooth: hci2: command tx timeout
[  302.029547] Bluetooth: hci1: command tx timeout
[  302.157580] Bluetooth: hci3: command tx timeout
[  302.285918] Bluetooth: hci4: command tx timeout
[  302.478917] Bluetooth: hci7: command tx timeout
[  302.479365] Bluetooth: hci5: command tx timeout
[  302.543557] Bluetooth: hci6: command tx timeout
[  303.757561] Bluetooth: hci0: command tx timeout
[  303.949555] Bluetooth: hci2: command tx timeout
[  304.077717] Bluetooth: hci1: command tx timeout
[  304.205887] Bluetooth: hci3: command tx timeout
[  304.333594] Bluetooth: hci4: command tx timeout
[  304.525562] Bluetooth: hci7: command tx timeout
[  304.525995] Bluetooth: hci5: command tx timeout
[  304.589716] Bluetooth: hci6: command tx timeout
[  305.806373] Bluetooth: hci0: command tx timeout
[  305.996703] Bluetooth: hci2: command tx timeout
[  306.125569] Bluetooth: hci1: command tx timeout
[  306.255529] Bluetooth: hci3: command tx timeout
[  306.380914] Bluetooth: hci4: command tx timeout
[  306.574533] Bluetooth: hci5: command tx timeout
[  306.574965] Bluetooth: hci7: command tx timeout
[  306.636594] Bluetooth: hci6: command tx timeout
[  360.926015] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  360.932925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  360.936242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  360.941997] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  360.943572] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  360.955821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  360.961096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  360.968227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  360.981773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  360.994175] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  361.172405] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  361.195052] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  361.201417] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  361.228065] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  361.246221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  361.277978] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  361.286823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  361.304244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  361.304448] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  361.313976] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  361.319386] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  361.324186] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  361.328164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  361.329722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  361.347052] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  361.361011] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  361.370081] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  361.372120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  361.381266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  361.393361] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  361.395300] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.396029] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  361.413965] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  361.422356] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  361.438437] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  361.442160] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  361.446803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  361.456340] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  361.485237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  361.492940] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  363.021079] Bluetooth: hci1: command tx timeout
[  363.088643] Bluetooth: hci0: command tx timeout
[  363.405152] Bluetooth: hci6: command tx timeout
[  363.407048] Bluetooth: hci2: command tx timeout
[  363.468817] Bluetooth: hci5: command tx timeout
[  363.596709] Bluetooth: hci3: command tx timeout
[  363.597717] Bluetooth: hci4: command tx timeout
[  363.660670] Bluetooth: hci7: command tx timeout
[  365.068637] Bluetooth: hci1: command tx timeout
[  365.133272] Bluetooth: hci0: command tx timeout
[  365.453245] Bluetooth: hci6: command tx timeout
[  365.455402] Bluetooth: hci2: command tx timeout
[  365.516764] Bluetooth: hci5: command tx timeout
[  365.645768] Bluetooth: hci4: command tx timeout
[  365.646738] Bluetooth: hci3: command tx timeout
[  365.709748] Bluetooth: hci7: command tx timeout
[  367.116563] Bluetooth: hci1: command tx timeout
[  367.181765] Bluetooth: hci0: command tx timeout
[  367.500652] Bluetooth: hci2: command tx timeout
[  367.501099] Bluetooth: hci6: command tx timeout
[  367.564991] Bluetooth: hci5: command tx timeout
[  367.693612] Bluetooth: hci4: command tx timeout
[  367.694039] Bluetooth: hci3: command tx timeout
[  367.758724] Bluetooth: hci7: command tx timeout
[  369.164648] Bluetooth: hci1: command tx timeout
[  369.228849] Bluetooth: hci0: command tx timeout
[  369.548578] Bluetooth: hci2: command tx timeout
[  369.549064] Bluetooth: hci6: command tx timeout
[  369.613862] Bluetooth: hci5: command tx timeout
[  369.741732] Bluetooth: hci4: command tx timeout
[  369.742163] Bluetooth: hci3: command tx timeout
[  369.805536] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
17:14:30  Registers:
info registers vcpu 0
RAX=0000000080000001 RBX=ffffffff86415240 RCX=1ffffffff0c82a48 RDX=0000000000000001
RSI=0000000000000008 RDI=ffff88800d7d6780 RBP=ffff88800d7d6778 RSP=ffff888034b4fa38
R8 =0000000000000000 R9 =ffffed1001afacf0 R10=ffff88800d7d6787 R11=0000000000000000
R12=ffff88800d7d6780 R13=ffff88800d7d67e0 R14=ffff88800d7d6770 R15=ffff88800f9e53f0
RIP=ffffffff8150fa69 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe97139f44e CR3=0000000031867000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff00ffff
XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000001255 RCX=ffffffff819d536b RDX=0000000000000003
RSI=ffffffff819d5518 RDI=ffffffff85c286f0 RBP=ffff8880273ed280 RSP=ffff8880275cfe68
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=00007f4e285b5000 R14=0000000000000001 R15=0000000000000000
RIP=ffffffff8159f33b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f4e280dc540 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4e285b5000 CR3=00000000358c0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=315f315f4c53534e45504f00315f315f XMM03=00000000006477746567006e65706f64
XMM04=7374656700746867696c7961645f5f00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000