Warning: Permanently added '[localhost]:6373' (ECDSA) to the list of known hosts.
2025/06/23 23:10:22 fuzzer started
2025/06/23 23:10:22 dialing manager at localhost:37113
syzkaller login: [   93.660531] cgroup: Unknown subsys name 'net'
[   93.792349] cgroup: Unknown subsys name 'cpuset'
[   93.835175] cgroup: Unknown subsys name 'rlimit'
2025/06/23 23:10:49 syscalls: 2214
2025/06/23 23:10:49 code coverage: enabled
2025/06/23 23:10:49 comparison tracing: enabled
2025/06/23 23:10:49 extra coverage: enabled
2025/06/23 23:10:49 setuid sandbox: enabled
2025/06/23 23:10:49 namespace sandbox: enabled
2025/06/23 23:10:49 Android sandbox: enabled
2025/06/23 23:10:49 fault injection: enabled
2025/06/23 23:10:49 leak checking: enabled
2025/06/23 23:10:49 net packet injection: enabled
2025/06/23 23:10:49 net device setup: enabled
2025/06/23 23:10:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/23 23:10:49 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/23 23:10:49 USB emulation: enabled
2025/06/23 23:10:49 hci packet injection: enabled
2025/06/23 23:10:49 wifi device emulation: enabled
2025/06/23 23:10:49 802.15.4 emulation: enabled
2025/06/23 23:10:49 fetching corpus: 0, signal 0/0 (executing program)
2025/06/23 23:10:52 starting 8 fuzzer processes
23:10:52 executing program 0:
prctl$PR_CAPBSET_DROP(0x18, 0x8)
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1f, 0x8000)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000009, 0x40010, r0, 0x10000000)
prctl$PR_SET_DUMPABLE(0x4, 0x3)
r1 = memfd_secret(0x80000)
write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7)
ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000080)={'\x00', 0x1, 0x3, 0x2})
ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000100)={0x6, 0xc0})
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000140))
ioctl$CDROM_GET_CAPABILITY(r0, 0x5331)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x14)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8202080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040880}, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000002c0)=0x7f)
ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000340)={0x1, 0x8, [0x6, 0x9, 0x80000000, 0xffffffffffff0000], &(0x7f0000000300)=[0x0]})
write$P9_ROPEN(r1, &(0x7f0000000380)={0x18, 0x71, 0x1, {{0x2, 0x4, 0x5}, 0x1}}, 0x18)
setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f00000003c0)=0x6, 0x4)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x1b, 0xd, 0x19, 0xfffffffffffffffe})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', <r2=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@ipv4}, 0x0, @in=@initdev}}, &(0x7f0000000680)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000f00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000980)={0x50c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r3}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4b5, 0x8, 0x63, 0xfff}, {0x97b, 0x7, 0x49, 0x9}, {0x1000, 0x7, 0x80, 0x3}, {0x1ffd, 0x9, 0x1, 0x3}, {0x7f, 0x7, 0x1, 0x5}, {0x0, 0x4, 0x7, 0x8000}, {0x80, 0xff, 0x9, 0x4000}, {0x1ff, 0x8, 0xf9, 0x1a}]}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ea}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa210}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xc1, 0x9, 0x9, 0x3}, {0x3, 0x20, 0xd2, 0x7ff}]}}}]}}]}, 0x50c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040c4)

23:10:52 executing program 1:
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8d0d)
write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "663c3c91563b46d52612315de1ff84dba2785eba4886e3614742169cc95416fd09d03e1740dd573fbc7575a86ecb915c15fd8fc96d897a39b6faa272ddd32086278f1892fb4de61cd46d54a2b2eb427c5d30e3a3cf5fcc1d2f2521d1ecea13b9e7d1512fe0c873f9ee30bc4464d1109a27828426db424cc948af70ed05a3c9fc54587df006c44995457a479d55b66918a2835fdafd6e73409278fb2a"}, 0xa0)
ioctl$TIOCSIG(r0, 0x40045436, 0x10)
r1 = signalfd4(r0, &(0x7f00000000c0)={[0x7ff]}, 0x8, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {<r3=>r0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r2, {0x10000}}, './file0\x00'})
finit_module(r1, &(0x7f0000000180)='syz0', 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, 'syz0'}], 0xa, "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"}, 0x10c)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file0\x00'})
mknodat$null(r5, &(0x7f0000000340)='./file0\x00', 0x1, 0x103)
ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000540)={0x2, &(0x7f0000000500)=[{0x4000000, 0xef, &(0x7f0000000380)="bf91053ed58fcab4ef073268ffdd3e7e368850a4069babcd56daab28e29e8905ea746c962250582814a6c051c80e88c3bfc25518daadeb301b2ddc63ce839bfbded272938d04e744d1f4a689264217faa08377e2c3a2bf32444383dc069488b48506cc0143d5987739b9516ede8cefd40835ac1fb9ed8ba0a8df9a2c3fbe6194d6b0bffaa6182129a7fddc6bbcc32ea9da57965dc2068f80278b5b6d427456d2fab022a0c77ba956800361b1d27811d1c849f8934f0299018abe2db0e9478e3abed7e6cde7489c2ccbb5ebf027752cb8486eb38d3345307f92c37eb554f26876c0392be14c775794a84f822ad9a3c4"}, {0x4, 0x61, &(0x7f0000000480)="ff6705af2e20de1038abc7454d7acf5024619dc2bc48ed731c34cfa2a6eb56b82d78d757704a65fa8445d4931222ce310974d5097469c291dd74d27c622dab1620d922dbc5b486231934c303f55b8764bfcd1c3eb83371e210956627e296b944b3", 0x1}]})
pipe2(&(0x7f0000000580)={<r6=>0xffffffffffffffff}, 0x800)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000005c0)="ed32d15733165ddc8999192f2cd35ff7", 0x10)
lsetxattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@random={'osx.', '(]/\\\\\x00'}, &(0x7f0000000680)='*%.,\x00', 0x5, 0x4)
fsetxattr(r6, &(0x7f00000006c0)=@random={'system.', '-:\x00'}, &(0x7f0000000700)='(]/\\\\\x00', 0x6, 0x0)
r7 = accept$inet6(r5, &(0x7f0000000740)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000780)=0x1c)
fstatfs(r7, &(0x7f00000007c0)=""/106)
r8 = socket(0x6, 0x3, 0x4)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r8, 0x2344d000)
ioctl$KDENABIO(r4, 0x4b36)

23:10:52 executing program 2:
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x200100, 0x60)
write$P9_RXATTRWALK(r0, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x80000001}, 0xf)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000080)=""/83)
sendmsg$sock(r0, &(0x7f0000000900)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0xfd, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000180)="a7bbd44e127a8d810295cfd52ff7840822ea0e062b17689807c723e70b1f3fa0ab8944abd6d1fd51c97161d428ad7b4c38094bcf513193d33e50645423686d0233834e6d47e06e250f7ed3cfee597acb3a7d72a0269a1dab9a11cb7ddeea5a71962fddaf34a22f9ee5c78fe46779693038c7d88fceb3afd8c96df476fc1da9d332bb7a3adf63e9b60bcbd8107c103d6bb1e49e1c70e31cf90c17d0a8aeb77f5202262a16245da63fd46cff7541c0e41622586d93576dc7fb5fd04c909c11cbe225cc1dcf583217431e94f0d34101bb329860426cf24f99c0d1936c46e7e24944405696823c227143cd31cdd44a4cc0e7fef4a3954ac2146da6c620b8", 0xfc}, {&(0x7f0000000280)="468a36198d0d4895b01e2856250433bf0623143ca42eb9065cdf546671c72d229c3a90227c72ce3b6d72880c9a7275d4799660a95a997c92a215a507bb98e8557286120036812f596f3367435e077ca2296ef410cb21f725469c39726ccb9f94cd0b43c3c90e67de8e2410cf7857907085a2cb85be934e5de9fa45fc6a2ab5b312d58df2a13b480e0d860fc0c5528dc8112c5c72e7940df69df307d85c2529fd5d27832fc1a0c7b20a2b26a68a3b104abd5264e081fa34c8516e928940879d47bd4c2ec4712c230152fb864e97c211c2ad49f43ff32d12071e643b494a14d538b13826ba385772912f8cb979", 0xec}, {&(0x7f0000000380)="84b32d6368888eebad0b", 0xa}, {&(0x7f00000003c0)="6342bcdd1e45a17d074ca6b4d169e3523ed68d6902d42fa4381682f3a23805039e3d9c3daba53937149a61ab003202c20d7ab8604e3732c6a6b634f5572a3719604cfde831cecb8d412d0ef79c9352cd37fdda1a072b9f1cc546fa15746a12a7c6b75c784ae442432245af7827dc6c0fa2634fa7b7b71949efe176ffe65548f8db9797301b0fe7765c9091a0275b5c192518a501ec1b", 0x96}, {&(0x7f0000000480)="d2cf1b4c5dea63e32ebf8ffb947bc9bac80333051cc6d6c6b69ff537da9923565bbd724d1bf7a385759582e0ec2f1314232ad2ae19fe76f1baf0cd7f8425bd9324dcfb", 0x43}, {&(0x7f0000000500)="fc4bb46be5f469c32f1e5617c912e93d4bc55a5141ea96d7422a1b746c9d465c6227a63d5d87d958798ce5342a81778e9fd82426d2ff76b335d47514a213a2b673ee50a2708fcef1fffd6b2ec6123628d9459ff9cfd60ce8a52a6334217d949e49a9f0c4fca0a5cdb502c82878c289f70b64ac0ce4e6267160d703417b9d63b40ab2eee920a43e452c2a0ddbab339dc138acf977629b5e21e771dc4c0c587c43ded6d086ebe248da95bcbd1de4726e62e26b506b10c67cb94210d92233b5cd6317b20d6e1888fe1c58de732c3e4fb4a1496b5fd1e8fdf0a447ebb1ed49cf3f8e33a2654a6c007a9d6232bd394b965eeb", 0xf0}, {&(0x7f0000000600)="e51b25ac72eea7638113cdf31668a0a76d03a30d76", 0x15}, {&(0x7f0000000640)="32e981da80b64ed97d7d1150dbabc42c4db4bc1ac19970ef57ae686dc698e2f1ce7e98c3ece79d38f0fab0ebbada74c1ae86991301ce26766be41f2d3b2462f776669d99f14d35ff1250b9840de42c0f724c2a4d7f72ed1ad7aa07fcc620fd9df463ad370d8d07b475782a030d5643ed753408ec205b4e20892b2a88a379ac7db713e581b5f2e14058ecf5d4e37e42ad017ee439a05f7549372208d4963582d2884c3e5b3e51588e30d523140e804cf1b2740ea988c22e68399dde9109fa6f1ed0bfc7079a9a158d277644271be29fd989a1a9615c6701c7d71bcd", 0xdb}, {&(0x7f0000000740)="8c9b2915253c4e3197f10d022419c48d44a9bd20a1de57c7079246012a0c22cf7e3803a96f290d3b8146a95a1fc56aba9ac8f67f476c3e63e50e6878118d1a9573c75f53d083f0884f10e48e8902911cf39f641c9a8f67725c33bad1e7e0ffcefd9e945ca0978af3891743ea6844ebcf493ef341268e963d02a1e407b97db42c3a43d88535689845cd3f5bc241de3ef03b710a92aa0a9a35334411fc51837c9a3c7818f7ab968bf87f75f388a2ddbd77eec01fcbb59bf4a34384b0e7bae6d3e0e9707314b40d12", 0xc7}], 0x9}, 0x800)
fstat(r0, &(0x7f0000000940))
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x140000000000)
r1 = signalfd(r0, &(0x7f00000009c0)={[0x4a3a]}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r2=>r1, {<r3=>r0}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'sit0\x00', 0x0, 0x29, 0x1, 0x2, 0xfffffff9, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0x8001, 0xe4ac}})
r4 = openat(r0, &(0x7f0000000b00)='./file0\x00', 0x44000, 0x60)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x401)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000b40)={'wg0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000c00)={'ip6tnl0\x00', &(0x7f0000000b80)={'ip6tnl0\x00', r5, 0x29, 0x9, 0x98, 0x128f, 0x7, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x7, 0x9, 0x6}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000c40)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x5}}, './file0\x00'})
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000c80), 0x602000, 0x0)
ioctl$LOOP_SET_FD(r6, 0x4c00, r7)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0xac, 0x0, 0x300, 0x8, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x243}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2bea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x404c884}, 0x20000018)

23:10:52 executing program 3:
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x340, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x340}, 0x1, 0x0, 0x0, 0x14}, 0x4000000)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x1, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000010)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048004}, 0x4080)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x140, r0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9bab, 0x2c}}}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8001]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x7fffffff, 0x3, 0x7, 0x20]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x701}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x6, 0x501]}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x6, 0x40]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xca}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x101}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x672}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x20000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4cb}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x36}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x6, 0x80000001]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x20}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5fe}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x70}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000a00))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r2, 0x375833f59fd8b376, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "b0170c49020fd52e2d88e68f3ea6b4aa"}, @NL80211_ATTR_PMK={0x14, 0xfe, "8d3da8b1c5ce808724f3d2ccf4cd6f18"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000081}, 0x40800)
r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x500, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x0)
fchown(r3, 0xee00, r4)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20020008}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40045)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r3)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x58, r5, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7fffffff, 0x41}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x11)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001000)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x200}}, './file0\x00'})
syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0), r6)

[  123.048707] audit: type=1400 audit(1750720252.623:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:10:52 executing program 4:
r0 = syz_io_uring_complete(0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1)
vmsplice(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="443dbdda416e743ac7c6aa8614621832a827d4d55bd2", 0x16}, {&(0x7f0000000100)="2609806019d26751a7a36de9c0548bd090ab5ae5a27b5f06f5c88e45cbfa9917d37a0e336d03b645191872ac42aa4b1892a170e20a2c5e15ad90e41a71b089b32342adca06537d1d8e48b65407ed2d51b95cbd28423abb7b8525e4c0e3b362eaf8b6a1e3b485f30298429cc7d0559c7093d4ce4810be", 0x76}, {&(0x7f0000000180)="48afa389b71173f45e0100beccff8dae4c31e37a34a16c98c11bc5d3d39e436c26fa64ac0df9043be6b38f2a5eea3f1f6f74aa6be8206d63ec96362dee263cb2fe3cf889de", 0x45}], 0x3, 0x1)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x80, 0xcd, 0xfff, 0x63, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x0, 0x800, 0x7d20}})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @rand_addr, @broadcast}, &(0x7f0000000440)=0xc)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
setxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=@ng={0x4, 0x14, "93224b7eaaba588432e097d1b28f2a1b"}, 0x12, 0x1)
fsync(r0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x8, 0x0)
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000005c0)=""/104)
r2 = timerfd_create(0x5, 0x80800)
fcntl$setownex(r2, 0xf, &(0x7f0000000640)={0x1})
r3 = openat$cgroup_ro(r0, &(0x7f0000000680)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
openat$cgroup_subtree(r3, &(0x7f00000006c0), 0x2, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000700), 0x49c0, 0x0)
r4 = inotify_init1(0x80800)
ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x85518000)

23:10:52 executing program 5:
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
setns(r0, 0x20000)
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x6, 0x6, 0x5, 0x0, 0x0, {0x6, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
fstatfs(r0, &(0x7f0000000240)=""/149)
r1 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x400, 0x120)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r2=>r1, {0x4}}, './file0\x00'})
chmod(&(0x7f0000000380)='./file0\x00', 0x40)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r3=>r0, {0x7}}, './file0\x00'})
fstatfs(r3, &(0x7f0000000400)=""/104)
r4 = syz_open_dev$evdev(&(0x7f0000000480), 0x9, 0x204000)
ioctl$int_in(r4, 0x5421, &(0x7f00000004c0)=0x3)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x96}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x79}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xf0}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000)
getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000600), &(0x7f0000000640)=0xc)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x8182, 0x0)
getpeername$unix(r5, &(0x7f00000006c0)=@abs, &(0x7f0000000740)=0x6e)
r6 = epoll_create(0x80000000)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000780))
fstatfs(r4, &(0x7f00000007c0)=""/54)
ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000800)={'batadv_slave_1\x00'})

23:10:52 executing program 6:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008004}, 0x1)
sendmsg$AUDIT_TRIM(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f6, 0x1, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x404c000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x2}}, './file0\x00'})
sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={0x29c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x84}, 0x8004)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000740)={{r0}, 0x0, 0x0, @inherit={0x58, &(0x7f00000006c0)={0x0, 0x2, 0x1, 0x80000000, {0x4, 0x1a, 0x7fffffff, 0x7fffffff, 0x9}, [0x8, 0x123]}}, @subvolid=0x9})
r4 = syz_open_dev$mouse(&(0x7f0000001740), 0x6, 0x103000)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000001900)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000018c0)={&(0x7f00000017c0)={0xc8, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2000c884}, 0x40810)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000001940)={0x8, 'macvlan0\x00', {'bridge_slave_0\x00'}, 0x8})
socketpair(0x27, 0x5, 0x80, &(0x7f0000001980)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a00), r0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000001ac0)={'syztnl1\x00', &(0x7f0000001a40)={'ip6_vti0\x00', <r7=>0x0, 0x2f, 0x0, 0x1, 0x8, 0x41, @mcast1, @mcast1, 0x20, 0x8, 0x1, 0x7}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000001c80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b00)={0x108, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x108}}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001d00)={'wpan3\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40010000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x48, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4880}, 0x0)
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000001e40))
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c040}, 0x48800)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000001fc0)={0x2a, 0x29, 0x2, {0x22, [{{0x2, 0x4, 0x5}, 0x986d, 0x8, 0x7, './file0'}]}}, 0x2a)

23:10:52 executing program 7:
r0 = syz_io_uring_complete(0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x800)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x675}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffff14}}]}, 0x88}, 0x1, 0x0, 0x0, 0x22004850}, 0x40000)
sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x0)
mq_getsetattr(r0, &(0x7f00000003c0)={0xbfa5, 0x5, 0x7ff, 0x6a8}, &(0x7f0000000400))
r2 = syz_open_dev$vcsu(&(0x7f0000000440), 0xfffffffffffffffa, 0x3c0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', <r3=>0x0, 0x4, 0x9, 0x1, 0x7, 0x1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8111, 0x8000, 0x8001, 0x5}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000540)={@remote, 0x15, r3})
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa8, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="87cab814ad30"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x41}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="9700fa45c639"}, @NL80211_ATTR_SSID={0x21, 0x34, @random="aaf7583381ad2209ece09979b5bf021e70fec74a8181f3968d452cd6c3"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="58911a1995a5"}, @NL80211_ATTR_PMKID={0x14, 0x55, "7f91e6d5400867e629fbab6c40d6429f"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x28}, @NL80211_ATTR_SSID={0x12, 0x34, @random="6e98bb535127591a1400c1ef8e33"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x48000}, 0x44000)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000014)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000880), 0x2200, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000900)={<r8=>r7, 0x40, 0x1, 0x5})
ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f0000000940)=0x80000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000980))

[  124.528375] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  124.532983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  124.539231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  124.547292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  124.552987] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  124.575761] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  124.582806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  124.584986] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  124.610076] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  124.618053] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  124.622227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  124.626510] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  124.630534] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  124.643126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  124.649190] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  124.650709] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  124.655581] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  124.661529] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  124.669338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  124.690298] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  124.761567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  124.767092] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  124.771475] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  124.772971] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  124.775081] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  124.776542] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  124.785077] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  124.788741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  124.814256] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  124.831654] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  124.838385] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  124.842438] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  124.852681] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  124.865284] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  124.866696] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  124.869105] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  124.904501] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  124.907302] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  124.911662] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  124.928537] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  126.604956] Bluetooth: hci0: command tx timeout
[  126.666510] Bluetooth: hci1: command tx timeout
[  126.729901] Bluetooth: hci2: command tx timeout
[  126.729962] Bluetooth: hci3: command tx timeout
[  126.858477] Bluetooth: hci4: command tx timeout
[  126.922507] Bluetooth: hci6: command tx timeout
[  126.987089] Bluetooth: hci5: command tx timeout
[  127.050902] Bluetooth: hci7: command tx timeout
[  128.651090] Bluetooth: hci0: command tx timeout
[  128.714953] Bluetooth: hci1: command tx timeout
[  128.779037] Bluetooth: hci3: command tx timeout
[  128.779056] Bluetooth: hci2: command tx timeout
[  128.907000] Bluetooth: hci4: command tx timeout
[  128.971123] Bluetooth: hci6: command tx timeout
[  129.034254] Bluetooth: hci5: command tx timeout
[  129.097919] Bluetooth: hci7: command tx timeout
[  130.698271] Bluetooth: hci0: command tx timeout
[  130.762016] Bluetooth: hci1: command tx timeout
[  130.825889] Bluetooth: hci3: command tx timeout
[  130.826845] Bluetooth: hci2: command tx timeout
[  130.954106] Bluetooth: hci4: command tx timeout
[  131.020104] Bluetooth: hci6: command tx timeout
[  131.082167] Bluetooth: hci5: command tx timeout
[  131.145848] Bluetooth: hci7: command tx timeout
[  132.746010] Bluetooth: hci0: command tx timeout
[  132.811136] Bluetooth: hci1: command tx timeout
[  132.874067] Bluetooth: hci2: command tx timeout
[  132.874104] Bluetooth: hci3: command tx timeout
[  133.001995] Bluetooth: hci4: command tx timeout
[  133.067817] Bluetooth: hci6: command tx timeout
[  133.130192] Bluetooth: hci5: command tx timeout
[  133.193847] Bluetooth: hci7: command tx timeout
[  186.846523] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  186.852998] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  186.858706] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  186.874339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  186.882477] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  186.987203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  186.991681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  186.996050] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  187.003015] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  187.008311] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  187.124310] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  187.134322] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  187.135755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  187.148053] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  187.156435] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  187.185383] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  187.193677] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  187.208476] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  187.224462] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  187.230506] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  187.272358] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  187.278902] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  187.318730] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  187.354000] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  187.362249] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  187.368538] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  187.374543] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  187.376615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  187.379082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  187.383211] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  187.390041] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  187.418164] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  187.435592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  187.443216] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  187.469448] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  187.478586] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  187.478598] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  187.494902] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  187.556001] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  187.562253] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  188.938084] Bluetooth: hci0: command tx timeout
[  189.066061] Bluetooth: hci1: command tx timeout
[  189.257858] Bluetooth: hci2: command tx timeout
[  189.322453] Bluetooth: hci3: command tx timeout
[  189.449920] Bluetooth: hci4: command tx timeout
[  189.513926] Bluetooth: hci6: command tx timeout
[  189.642180] Bluetooth: hci7: command tx timeout
[  189.642455] Bluetooth: hci5: command tx timeout
[  190.986171] Bluetooth: hci0: command tx timeout
[  191.113883] Bluetooth: hci1: command tx timeout
[  191.305873] Bluetooth: hci2: command tx timeout
[  191.370833] Bluetooth: hci3: command tx timeout
[  191.498030] Bluetooth: hci4: command tx timeout
[  191.562020] Bluetooth: hci6: command tx timeout
[  191.690132] Bluetooth: hci7: command tx timeout
[  191.693122] Bluetooth: hci5: command tx timeout
[  193.033960] Bluetooth: hci0: command tx timeout
[  193.162997] Bluetooth: hci1: command tx timeout
[  193.354843] Bluetooth: hci2: command tx timeout
[  193.417840] Bluetooth: hci3: command tx timeout
[  193.545835] Bluetooth: hci4: command tx timeout
[  193.611811] Bluetooth: hci6: command tx timeout
[  193.738924] Bluetooth: hci5: command tx timeout
[  193.739398] Bluetooth: hci7: command tx timeout
[  195.082081] Bluetooth: hci0: command tx timeout
[  195.210120] Bluetooth: hci1: command tx timeout
[  195.404818] Bluetooth: hci2: command tx timeout
[  195.468865] Bluetooth: hci3: command tx timeout
[  195.595022] Bluetooth: hci4: command tx timeout
[  195.658840] Bluetooth: hci6: command tx timeout
[  195.785851] Bluetooth: hci7: command tx timeout
[  195.786263] Bluetooth: hci5: command tx timeout
[  249.629995] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  249.634849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  249.640139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  249.650108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  249.655675] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  249.790353] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  249.804261] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  249.807552] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  249.825244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  249.830061] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  249.853683] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  249.877330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  249.882494] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  249.888849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  249.895243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  249.897253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  249.897605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  249.902033] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  249.904660] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  249.911768] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  249.973001] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  249.992152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  249.999462] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  250.006591] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  250.014676] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  250.039246] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  250.056253] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  250.064465] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  250.071030] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  250.079296] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  250.086361] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  250.088331] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  250.092983] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  250.101485] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  250.108644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  250.112942] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  250.119382] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  250.124282] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  250.145004] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  250.163158] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  251.723929] Bluetooth: hci0: command tx timeout
[  251.914671] Bluetooth: hci1: command tx timeout
[  251.978355] Bluetooth: hci3: command tx timeout
[  251.979645] Bluetooth: hci2: command tx timeout
[  252.042262] Bluetooth: hci4: command tx timeout
[  252.234992] Bluetooth: hci5: command tx timeout
[  252.235006] Bluetooth: hci6: command tx timeout
[  252.362036] Bluetooth: hci7: command tx timeout
[  253.770191] Bluetooth: hci0: command tx timeout
[  253.962203] Bluetooth: hci1: command tx timeout
[  254.025933] Bluetooth: hci3: command tx timeout
[  254.026197] Bluetooth: hci2: command tx timeout
[  254.089971] Bluetooth: hci4: command tx timeout
[  254.283003] Bluetooth: hci6: command tx timeout
[  254.283962] Bluetooth: hci5: command tx timeout
[  254.411802] Bluetooth: hci7: command tx timeout
[  255.817869] Bluetooth: hci0: command tx timeout
[  256.009875] Bluetooth: hci1: command tx timeout
[  256.074223] Bluetooth: hci2: command tx timeout
[  256.074280] Bluetooth: hci3: command tx timeout
[  256.137834] Bluetooth: hci4: command tx timeout
[  256.330042] Bluetooth: hci5: command tx timeout
[  256.331528] Bluetooth: hci6: command tx timeout
[  256.459808] Bluetooth: hci7: command tx timeout
[  257.867621] Bluetooth: hci0: command tx timeout
[  258.059800] Bluetooth: hci1: command tx timeout
[  258.121840] Bluetooth: hci3: command tx timeout
[  258.121876] Bluetooth: hci2: command tx timeout
[  258.186126] Bluetooth: hci4: command tx timeout
[  258.378053] Bluetooth: hci6: command tx timeout
[  258.378137] Bluetooth: hci5: command tx timeout
[  258.506674] Bluetooth: hci7: command tx timeout
[  311.962906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  311.966751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  311.969667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  311.976383] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  311.981554] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  312.119292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  312.124520] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  312.128356] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  312.134457] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  312.143954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  312.145634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  312.162241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  312.164170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  312.172011] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  312.173601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  312.219005] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  312.227688] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  312.232127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  312.244310] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  312.250007] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  312.256546] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  312.272319] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  312.278211] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  312.286258] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  312.299408] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  312.301278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  312.309155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  312.322736] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  312.342486] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  312.347575] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  312.350646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  312.353741] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  312.355908] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  312.368442] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  312.380542] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  312.409085] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  312.411734] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  312.414272] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  312.419416] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  312.445472] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  314.060147] Bluetooth: hci0: command tx timeout
[  314.249925] Bluetooth: hci1: command tx timeout
[  314.250917] Bluetooth: hci2: command tx timeout
[  314.314032] Bluetooth: hci3: command tx timeout
[  314.377930] Bluetooth: hci5: command tx timeout
[  314.378480] Bluetooth: hci4: command tx timeout
[  314.443105] Bluetooth: hci6: command tx timeout
[  314.569927] Bluetooth: hci7: command tx timeout
[  316.107151] Bluetooth: hci0: command tx timeout
[  316.299134] Bluetooth: hci2: command tx timeout
[  316.299203] Bluetooth: hci1: command tx timeout
[  316.363819] Bluetooth: hci3: command tx timeout
[  316.425998] Bluetooth: hci4: command tx timeout
[  316.427179] Bluetooth: hci5: command tx timeout
[  316.489921] Bluetooth: hci6: command tx timeout
[  316.617985] Bluetooth: hci7: command tx timeout
[  318.155842] Bluetooth: hci0: command tx timeout
[  318.345844] Bluetooth: hci2: command tx timeout
[  318.347795] Bluetooth: hci1: command tx timeout
[  318.410975] Bluetooth: hci3: command tx timeout
[  318.473862] Bluetooth: hci5: command tx timeout
[  318.474285] Bluetooth: hci4: command tx timeout
[  318.537853] Bluetooth: hci6: command tx timeout
[  318.665922] Bluetooth: hci7: command tx timeout
[  320.204020] Bluetooth: hci0: command tx timeout
[  320.395057] Bluetooth: hci1: command tx timeout
[  320.395462] Bluetooth: hci2: command tx timeout
[  320.458936] Bluetooth: hci3: command tx timeout
[  320.521898] Bluetooth: hci5: command tx timeout
[  320.522887] Bluetooth: hci4: command tx timeout
[  320.586901] Bluetooth: hci6: command tx timeout
[  320.714855] Bluetooth: hci7: command tx timeout
[  374.306050] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  374.311885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  374.315034] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  374.325095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  374.334560] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  374.388392] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  374.395110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  374.399019] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  374.410330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  374.416149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  374.532023] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  374.537094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  374.539437] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  374.549310] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  374.553130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  374.641931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  374.646180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  374.653260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  374.696611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  374.709084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  374.719953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  374.730745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  374.748372] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  374.774200] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  374.783575] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  374.788313] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  374.790642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  374.795639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  374.814544] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  374.816073] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  374.821324] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  374.898386] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  374.912134] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  374.959714] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  374.964288] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  374.964624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  374.968214] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  374.973371] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  374.975235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  374.978389] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  376.394813] Bluetooth: hci0: command tx timeout
[  376.457928] Bluetooth: hci1: command tx timeout
[  376.585863] Bluetooth: hci2: command tx timeout
[  376.778165] Bluetooth: hci3: command tx timeout
[  376.841856] Bluetooth: hci4: command tx timeout
[  377.034350] Bluetooth: hci5: command tx timeout
[  377.162144] Bluetooth: hci6: command tx timeout
[  377.162946] Bluetooth: hci7: command tx timeout
[  378.442840] Bluetooth: hci0: command tx timeout
[  378.506983] Bluetooth: hci1: command tx timeout
[  378.635887] Bluetooth: hci2: command tx timeout
[  378.827809] Bluetooth: hci3: command tx timeout
[  378.891016] Bluetooth: hci4: command tx timeout
[  379.082813] Bluetooth: hci5: command tx timeout
[  379.209959] Bluetooth: hci6: command tx timeout
[  379.212616] Bluetooth: hci7: command tx timeout
[  380.490091] Bluetooth: hci0: command tx timeout
[  380.554136] Bluetooth: hci1: command tx timeout
[  380.682833] Bluetooth: hci2: command tx timeout
[  380.873961] Bluetooth: hci3: command tx timeout
[  380.939018] Bluetooth: hci4: command tx timeout
[  381.132037] Bluetooth: hci5: command tx timeout
[  381.259272] Bluetooth: hci7: command tx timeout
[  381.259293] Bluetooth: hci6: command tx timeout
[  382.539043] Bluetooth: hci0: command tx timeout
[  382.602991] Bluetooth: hci1: command tx timeout
[  382.732055] Bluetooth: hci2: command tx timeout
[  382.921827] Bluetooth: hci3: command tx timeout
[  382.987748] Bluetooth: hci4: command tx timeout
[  383.177868] Bluetooth: hci5: command tx timeout
[  383.305834] Bluetooth: hci6: command tx timeout
[  383.306942] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
23:16:01  Registers:
info registers vcpu 0
RAX=ffffffff867b4dc6 RBX=0000000000000001 RCX=ffffffff867b4dc6 RDX=0000000000000000
RSI=ffffffff867b4dc6 RDI=ffffffff8646e8c4 RBP=ffff888038a6f2f0 RSP=ffff888038a6f1d8
R8 =ffffffff867b4dc6 R9 =0000000000000000 R10=000000000003b53d R11=0000000000006bd3
R12=ffff888038a6f2f8 R13=ffff888038a6f2e0 R14=ffff888038a6f2d9 R15=ffff888038a6f298
RIP=ffffffff81354066 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe0600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2ce003fff0 CR3=0000000028dc7000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000005 RBX=ffff8880154b5d00 RCX=ffff88806cf08d6c RDX=0000000000000002
RSI=ffffffff85a112d8 RDI=ffff8880154b5d00 RBP=ffffffff85a112d8 RSP=ffff88806cf08d18
R8 =0000000000000001 R9 =0000000000000000 R10=00000000000013c7 R11=0000000000000001
R12=ffff8880154b5d00 R13=ffff88806cf08d6c R14=0000000000000002 R15=0000000000000002
RIP=ffffffff84b28814 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f45be4d5540 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe6000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f45be6c0620 CR3=000000002c8c7000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ff00ff00ff00ff00ff00ffffff00 XMM01=010001000100010001000100010100ff
XMM02=61305f315f315f4c53534e45504f0030 XMM03=000000000000000000000000004f0030
XMM04=504f0061305f315f315f4c53534e4550 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000