Warning: Permanently added '[localhost]:5650' (ECDSA) to the list of known hosts.
2025/06/25 04:03:29 fuzzer started
2025/06/25 04:03:29 dialing manager at localhost:42423
syzkaller login: [  102.742482] cgroup: Unknown subsys name 'net'
[  102.886555] cgroup: Unknown subsys name 'cpuset'
[  102.933775] cgroup: Unknown subsys name 'rlimit'
2025/06/25 04:03:53 syscalls: 2214
2025/06/25 04:03:53 code coverage: enabled
2025/06/25 04:03:53 comparison tracing: enabled
2025/06/25 04:03:53 extra coverage: enabled
2025/06/25 04:03:53 setuid sandbox: enabled
2025/06/25 04:03:53 namespace sandbox: enabled
2025/06/25 04:03:53 Android sandbox: enabled
2025/06/25 04:03:53 fault injection: enabled
2025/06/25 04:03:53 leak checking: enabled
2025/06/25 04:03:53 net packet injection: enabled
2025/06/25 04:03:53 net device setup: enabled
2025/06/25 04:03:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/25 04:03:53 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/25 04:03:53 USB emulation: enabled
2025/06/25 04:03:53 hci packet injection: enabled
2025/06/25 04:03:53 wifi device emulation: enabled
2025/06/25 04:03:53 802.15.4 emulation: enabled
2025/06/25 04:03:53 fetching corpus: 0, signal 0/0 (executing program)
2025/06/25 04:03:56 starting 8 fuzzer processes
04:03:56 executing program 0:
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40004}, 0x4000881)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x118, 0x0, 0x420, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xd3, 0x3, "8345d9191733c9b76d06af578b1f1b6df69cfc4d6a7bdc3b4cbdddebebca303a3804c2f3fd71c601f1e62e0079c6e4883b0e953d20e23769a5769e65b9a3d1f65f107c5b84a38fb51987be825ba6ef8b8c8f4cad5deab88c4c4f62ea888b0e2e6a40e453078e2cd822aed7b0b0e19eb2f657a2ab6b7b755d5337162e024a8df17eb2c7c8a99c226eea89d2fc37b72eb9464b90e94a39725017e254c6072cf58193d129270e313a92c645a46b54273cd1d061f849b4d1451347760e6e038c0d42981f3dc19397f788d6c00220f7172f"}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000400))
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000800)=0x41, 0x4)
sync_file_range(r0, 0x800, 0xc3dc, 0x2)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000880)={0x304, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x50, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe8e1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_SEC_KEY={0xb0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}]}, @NL802154_ATTR_SEC_KEY={0x11c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ff28860d673b10dfcef3a380fe14e592"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb602}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf74f}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6ec4f618ea6c8f6e7c7222b1bc617d6a"}, @NL802154_KEY_ATTR_ID={0x7c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "967b7a5384af726d29b627494ff1265a"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d6384256292b1b64698994ebc3908d08"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6b9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2d8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}]}, @NL802154_ATTR_SEC_KEY={0xb0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1f}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xcab9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e7b15d044bebc2caac3a82523e425b8e"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7bdb}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x3954e2326c9d67a0}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x304}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000c40)={{0x6, @broadcast, 0x4e24, 0x3, 'lblc\x00', 0x4, 0xc0000000, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x10000, 0xffffffe1, 0x7ff}}, 0x44)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000cc0))
r1 = openat$incfs(r0, &(0x7f0000000ec0)='.log\x00', 0x80100, 0x0)
ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000f00))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000f40)={{0x1, 0x1, 0x18, <r2=>r1, {0xff}}, './file0\x00'})
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000f80)={0x6, 0x80, 0x7f})
ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000fc0))
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x48000)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x90, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf6}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0x90}}, 0x20000090)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280), 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, r3, 0x800, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000013c0)='(\x00', 0x0, r0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000001400)={'#! ', './file0', [{0x20, '802.15.4 MAC\x00'}, {0x20, 'netdevsim\x00'}, {0x20, '*('}], 0xa, "81d598bd0e7556fe7d1bb158fbbcacf166c5b3684af784969d76ed6ae7b276a05cc46512ea79c5d1dbef14f1496f9e878942939c971b0439110e8d90bdd8235027dfb12c516ebf989d3dc51f687e19ddb6987dd4aec86587da9d395fd4e94fa35fd747af9a18e0be75c7655b063804a21ea7c57592ae2c075e26f4a397743054f98e760bcf121a945aaa9f65236ba9be053df4b8a70e8ff89e86f1937d28cb8e85ade8824822f2783ff3c30bfea4b4d482f0fd2ebdd4b4f6dcf94dfdb75c83b42db1e1a1d726f45d2c7f1f54d451bf2603c08d2f91f985ab7a6a3ec41d82ac10be80de"}, 0x10a)

04:03:56 executing program 1:
syz_usb_ep_write(0xffffffffffffffff, 0x1, 0x7f, &(0x7f0000000000)="f2cee0430b4f9d5fd6dc9949415673581aa896d2fee3d580b3eb3cfa5492c35f4ec8e550bd2c2d757b3c8f527aa807a26ca335241e707e6137de1536b0517f502f8b31f0fc8adb2ff011fea7ede828dba7f86abb1b6c913b373850449a8fd95865fd0892af5a27147268b4b8252cbfc98fc93308568d34285b7d1ac34fe75e")
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x0, 0x10, 0xc1, {0xc1, 0x23, "19a4ff049fb2408a18bda57b52eb2acf1e75aeecaf9f81572a58f61a7af36b80de8e8ad0de00b38b90fe98d780270d242fb1c6e943ec6059dbac91867546266577e9d87d1d914814bd8db8f77c200f682e096eb1438b8b9993f00252f5f6d9f0e2ccd7ace216a4093661b3ec46377db991caff5e84859068edc56da668f4f1b71794d5734be1ba379c8a6bfc9e09ae53a87c139600b756c41ca682385120e2cd43f3c42f15eb18f84357cfc1fffbe18f95e5df135f9157dd7868d6ad908281"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f00000001c0)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x6, 0x5, 0x1, 0x20}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x28, 0x3f, "658b7cb2", "6ddf3106"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x0, 0x7, 0xe0, 0x0, 0xffff, 0x7ff}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x20, 0x13, 0x4d, "2b074bb10043359a8b0e6d8d20b5ccf36cbf39390cdec2f74375a310f6ca8933ece68a686037c044e37ae66033026610a322d9d1001973a9050323e2492a9c7249eaf347ee36f2454e261125fa"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xab}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0xe0, 0x80}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000004c0)={0x40, 0xb, 0x2, '?k'}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000540)={0x40, 0x13, 0x6, @random="eaaad4447ff6"}, &(0x7f0000000580)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "9675"}, &(0x7f0000000600)={0x40, 0x1a, 0x2}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x1}})
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000800), 0x2, 0x80000)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000840), 0x40, 0x0)
ppoll(&(0x7f0000000880)=[{0xffffffffffffffff, 0x8088}, {r0, 0x265}, {r1, 0x20}, {r2, 0xc000}, {0xffffffffffffffff, 0x4108}], 0x5, &(0x7f00000008c0)={0x0, 0x3938700}, &(0x7f0000000900)={[0xfffffffffffffffc]}, 0x8)
r3 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xfffffffffffffffc)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000009c0))
fallocate(r2, 0x44, 0x200, 0x2)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000a00)={0xfffd, 0x1f, 0xf000})
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000a40)={0x6ad, 0xff})
pipe(&(0x7f0000000a80)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$evdev(r5, &(0x7f0000000ac0)=[{{0x77359400}, 0x4, 0x8, 0xf186}, {{0x0, 0xea60}, 0x17, 0xe93, 0xb6}, {{}, 0x14, 0x800, 0x7fffffff}], 0x48)
ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000b40))
pipe2(&(0x7f0000000b80)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4000)
ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, &(0x7f0000000bc0)={0x3})
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000f00)={0x6, 0x8})
keyctl$search(0xa, r3, &(0x7f0000000f40)='.request_key_auth\x00', &(0x7f0000000f80)={'syz', 0x3}, r3)

04:03:56 executing program 2:
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xff}}, './file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000180)={0x5f7a, 0x10, [0x5, 0xfda, 0x0, 0x2], &(0x7f0000000140)=[0x0, 0x0]})
llistxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=""/149, 0x95)
write$P9_RREADDIR(r0, &(0x7f00000002c0)={0xa6, 0x29, 0x2, {0x4, [{{0x0, 0x0, 0x5}, 0x7, 0x6, 0x7, './file0'}, {{0x0, 0x1, 0x2}, 0x0, 0x2, 0x7, './file1'}, {{0x80, 0x2, 0x2}, 0x5, 0x5, 0x7, './file1'}, {{0x2, 0x0, 0x1}, 0x9, 0xc6, 0x7, './file0'}, {{0x8, 0x4, 0x6}, 0x3, 0xf9, 0x7, './file0'}]}}, 0xa6)
r2 = openat(r0, &(0x7f0000000380)='./file1\x00', 0x80000, 0x22)
write$P9_RATTACH(r2, &(0x7f00000003c0)={0x14, 0x69, 0x1, {0x80, 0x2}}, 0x14)
clone3(&(0x7f00000006c0)={0x800, &(0x7f0000000400)=<r3=>0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480), {0x2}, &(0x7f00000004c0)=""/143, 0x8f, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r2}}, 0x58)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000740))
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$notify(r4, 0x402, 0x20)
r5 = perf_event_open$cgroup(&(0x7f0000000780)={0x5, 0x80, 0x6, 0xff, 0x5, 0x5, 0x0, 0x20, 0x140, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000000}, 0x80, 0x7fffffff, 0x1f, 0x1, 0x9, 0xd0c, 0x5, 0x0, 0x2, 0x0, 0x2}, r1, 0xf, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x2)
r6 = mq_open(&(0x7f0000000800)='\x9a\'Q(\x00', 0x40, 0x85, &(0x7f0000000840)={0xf295, 0x6, 0x6, 0x22a})
ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000880)=0x2)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0xd8000, 0x0)
openat$incfs(r7, &(0x7f0000000900)='.pending_reads\x00', 0x200802, 0x128)
ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000940)={0x1, 0x2, @status={[0x2, 0x200, 0xfee7, 0x2, 0x0, 0x8]}, [0xe61, 0x736, 0x6, 0x100000000, 0x9, 0x5, 0x5, 0x1, 0x8, 0x7, 0x371125ac, 0x9, 0x3, 0x3f7, 0x392f, 0x7, 0x6, 0x529, 0x7, 0xbd1, 0xfff, 0x6, 0x9, 0x1, 0x2, 0x9, 0x44e29fb6, 0x0, 0x0, 0x2, 0x100, 0x101, 0xfffffffffffffffd, 0x7, 0x2, 0x6, 0x7, 0x400, 0x3f, 0x222, 0xffffffffffffffff, 0x3, 0x40, 0x5, 0x4b3a, 0x4, 0x9, 0xff, 0x3, 0x5, 0x4, 0xe8, 0x40, 0x5, 0x7, 0x0, 0x7, 0x0, 0x0, 0x8ef7, 0x4, 0x6, 0x800, 0x6]})

04:03:56 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000080)="4b6e796d4b1094e1b5c1f040887975c8720461cf5ea2b0707ffa9db4f097464f15c7ac55505a722f2464107244d51ce4488121bd6eacc176352e1549d46c52ffc91cc90eb411578e44ab801a34194299ff186729fc76e07b7b9bc61bdc0c2e80bc5e55740b63bad607133ac4da3d787ff507535fea1e606b14b752635ee494d629ce2a8e15ac733948299e", 0x8b, 0x8}, {&(0x7f0000000140)="87ebc5c7b630010c042824423c79a5fc5d4e9899b0ba793b50a37c504c6d643be56154aac5f966b3a75a96b61d1b69286d3e96f0b8b5dcbcec78c85fef341decec7916b0c4dd3074610dc42071c7a5d6e0367fe8d7cf54cb78572e19366c34352fcffce980c75e62063e5b389f2ac6deb04a6b9947dc701ab8df517d46b603443a42e50e2aa530b5278e85b5dbeda6763d4a17994677310ea34d5954bd678676371dfb323da9", 0xa6, 0x2}, {&(0x7f0000000200)="5eeab5ddb4bf90bf0894a8615a9b0fad9493bdade9484a01f0b47cc0ffdb46a2a9097cda65be83a3867d42f162fce6ceedab6a73264b2c0de962d808a580484192ba44c1b7d69d1a2b1d15802cdeb372cfe7998de34590047f6e3b0927078cad00892170d13a8202a14e310bd616508c3be9be53d40124b75028161a9690ae7170dd599ee63dcffe3ca7", 0x8a, 0xa200000000000000}], 0x14, &(0x7f0000000340)={[{@shortname_mixed}, {@shortname_lower}, {@rodir}, {@shortname_winnt}, {@shortname_lower}, {@utf8}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp862'}}], [{@appraise}, {@dont_appraise}]})
ioctl$int_out(r0, 0x5460, &(0x7f0000000400))
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000004c0)={0x1, 0x2, 0x1000, 0x39, &(0x7f0000000440)="b7fce12a06afa63f17f0ded82bd31d3506d13c7b0cf31867d88df5a8e6a4a8fb66fdef88ffc7d8112600e706035b4f9206aecaaed2ed0cff32", 0x3e, 0x0, &(0x7f0000000480)="b9d0da7a78449af9020c2bf9fadc2bb7b2a5bc4978510f14ad6b4c39076ef322811bf6e1fa4336e4b457c0c380be5b314e724b4c7a9c2c8914db012f6498"})
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000540)={0x7, 0x2ed64414})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000740)=0xe8)
r2 = geteuid()
mount$9p_virtio(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x20000, &(0x7f0000000780)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r1}}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@access_user}, {@access_client}, {@fscache}], [{@obj_role={'obj_role', 0x3d, ',)'}}, {@fowner_lt={'fowner<', 0xee00}}]}})
r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000840), &(0x7f00000008c0)=0x6e)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001980)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000001a80)=0xe8)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000001ac0)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x7e, r4})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001b00)={{0x1, 0x1, 0x18, <r5=>r0, {0x2}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001bc0)={'sit0\x00', &(0x7f0000001b40)={'syztnl1\x00', r4, 0x55b044b391ccc4be, 0x81, 0x5f, 0x1ff, 0x30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x80, 0x80, 0x6, 0x100}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001c00)={<r6=>0x0, 0x6, 0x0, [0x10001, 0x8, 0x80000000, 0x0, 0x4], [0x3, 0xfff, 0x80000001, 0x9, 0x2, 0xe156, 0xfe88, 0x0, 0x40, 0x39, 0x81, 0x1, 0x4, 0x8, 0x4, 0x100000001, 0x9, 0x7, 0x4, 0xf8e, 0x10000, 0x7, 0x2, 0x85, 0x2d3c5158, 0x1ff, 0xaf5, 0x6828, 0xd0cf, 0x4, 0x1ff, 0xffffffffffffff00, 0x0, 0x1, 0xf957, 0x1, 0x0, 0x2, 0x5, 0x9, 0xc0, 0x1, 0x9, 0x100000000, 0x600000000, 0xe0, 0x3f, 0x8000, 0x4, 0x9, 0x22d, 0x97a, 0x81, 0x2, 0x0, 0x3a, 0x0, 0x4b, 0x8, 0x5, 0x7fff, 0x0, 0x81, 0x2, 0x9, 0xd28, 0x1, 0x0, 0x9d77, 0x6, 0x100000000, 0x6f6, 0x7bd, 0x100000000, 0x0, 0x3, 0x6bf, 0x9, 0x9, 0x101, 0x100000000, 0x3, 0x0, 0x5, 0xffff, 0x1ff, 0x6c2, 0x0, 0x5, 0x1, 0x7fffffff, 0x0, 0x3, 0xfff, 0x9, 0x7, 0x81, 0x2, 0x80000001, 0x200, 0x7f, 0x6, 0x0, 0x0, 0x6, 0x7fffffff, 0x5951, 0xfffffffffffffffb, 0x2, 0xfff, 0x8, 0x7, 0xf82, 0x4, 0x7, 0xb33, 0x0, 0x100000001, 0x401, 0x3ff, 0xa17]})
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000002040)={r6, 0x2, 0x0, [0x7fffffff, 0x0, 0x6, 0x8e, 0x22], [0x3, 0x1, 0x80, 0x3, 0x100000001, 0x5, 0x534c, 0x59, 0x3, 0x0, 0x5, 0x7, 0xca2, 0x10000, 0x6, 0x0, 0x5, 0x100, 0x1, 0x0, 0x2, 0x2, 0xe813, 0x8000, 0x8, 0x5, 0x7fffffff, 0x0, 0x1d, 0x0, 0x20, 0xffff, 0xffffffffffffff7b, 0x6, 0x3, 0x7c8, 0x3, 0x4, 0x4, 0x5, 0x2, 0x4, 0x8, 0x1ff, 0x8000, 0x7f, 0x0, 0x8000, 0x2a, 0x8, 0x0, 0x6, 0x9, 0x4, 0x0, 0x5e275d56, 0x7, 0x5020000000000, 0x3, 0x8000, 0x70d, 0x7, 0x8, 0x5, 0xffff, 0x7, 0x400, 0x39, 0x5b5, 0xec5, 0x2, 0x3ff, 0x4, 0xfc7, 0x9, 0x4, 0xffffffffffffffb0, 0x6, 0xffff, 0x40, 0x9d00000000000, 0x80000001, 0x8, 0x0, 0x6, 0x2, 0xfffffffffffffff7, 0x4, 0x3, 0x9, 0xf, 0x5, 0x9, 0x3, 0x401, 0xff, 0x1, 0x9, 0x8, 0x7, 0x10000, 0x92, 0xffffffffffff8001, 0x400, 0x7, 0xfffffffffffffffe, 0x4, 0x6, 0x24000, 0x1, 0x40, 0x3, 0x3, 0x74, 0xf1, 0x77, 0x6, 0x85, 0x8000, 0x1f56, 0xfffffffffffffffa]})
ftruncate(r3, 0x100000001)
write$binfmt_script(r0, &(0x7f0000002480)={'#! ', './file0', [{0x20, 'fowner<'}, {}, {0x20, 'syz\x00'}], 0xa, "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"}, 0x1019)
pivot_root(&(0x7f00000034c0)='./file0\x00', &(0x7f0000003500)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000003540)={{0x1, 0x1, 0x18, <r7=>r3, {0x7}}, './file0\x00'})
name_to_handle_at(r7, &(0x7f0000003580)='./file0\x00', &(0x7f00000035c0)=@FILEID_INO32_GEN={0x8, 0x1, {0xfffffff8, 0x5}}, &(0x7f0000003600), 0x400)
fcntl$dupfd(r0, 0x406, r0)

[  129.195708] audit: type=1400 audit(1750824236.514:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
04:03:56 executing program 4:
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r0 = socket$inet6(0xa, 0x3, 0x5)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_cmd={0x15, 0x1, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x81, 0x2, 0x7ff, 0x1, 0x1, 0x6, [0x1, 0x6]}})
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e23, 0x9, @empty, 0xff}, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x22}, 0x4}, 0x5982, [0xa4, 0x9, 0x6, 0x0, 0xfffffffa, 0xffffff36, 0x6, 0x4ead]}, 0x5c)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000180)={0x912, {{0xa, 0x4e21, 0x2, @mcast2, 0x2}}}, 0x88)
fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, <r2=>0x0})
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000280)=r2)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r3=>r0, {0x4}}, './file0\x00'})
ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000300))
ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f00000003c0))
setsockopt$inet_tcp_buf(r3, 0x6, 0x0, &(0x7f0000000400)="fbdf15cdfd3cbd9f1a7e0beb75954a0ef6796488d912c706a96a22ec5546720039a27ba752034dc0607de963f644364b65a954d1d6e2e1d21ce1305c5f9604baa412cccc20c42d034b8c713beff05e7843", 0x51)
setxattr$incfs_size(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=0x1, 0x8, 0x0)
mq_notify(r3, &(0x7f0000000540)={0x0, 0x34, 0x2, @tid=r2})
r4 = syz_open_procfs(r2, &(0x7f0000000580)='net/bnep\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0, <r5=>0x0})
fcntl$setownex(r4, 0xf, &(0x7f0000000640)={0x2, r5})
r6 = syz_open_dev$vcsu(&(0x7f0000000680), 0x4, 0x181000)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f00000006c0))
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0)

04:03:56 executing program 6:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000))
r1 = fsmount(r0, 0x1, 0x71)
epoll_pwait2(r1, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x6]}, 0x8)
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000100)={0x1, 0x0, 0xb266})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x600000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x2010, r2, 0x10000000)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0x3)
r5 = syz_io_uring_setup(0x3e62, &(0x7f00000001c0)={0x0, 0x3cfe, 0x10, 0x0, 0x28}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000280))
syz_io_uring_setup(0x2d27, &(0x7f00000002c0)={0x0, 0x710f, 0x4, 0x3, 0x37b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)=<r7=>0x0)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_io_uring_submit(r6, r7, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000002940)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000500)=""/208, 0xd0}, {&(0x7f0000000600)=""/224, 0xe0}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/219, 0xdb}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/166, 0xa6}], 0x8}, 0x0, 0x100, 0x1, {0x1, r4}}, 0x1)
r9 = accept4$unix(0xffffffffffffffff, &(0x7f00000029c0)=@abs, &(0x7f0000002a40)=0x6e, 0x80000)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000002a80))
fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000002ac0), &(0x7f0000002b00), 0x2, 0x0)
r10 = inotify_init1(0x80000)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r10, 0x40089413, &(0x7f0000002b40)=0x2d2d)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000002b80))

04:03:56 executing program 5:
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000))
r0 = inotify_init()
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r1=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x4004000)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20008080)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x9c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "f930e1940c314fa30beb17191e8badb5"}, @NL80211_ATTR_PMKID={0x14, 0x55, "8a35d6571d3603ea1f85223c8a4cb5ea"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8000}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7fffffff}, @NL80211_ATTR_PMK={0x14, 0xfe, "df181c2eb6861427cbf50a93726801df"}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="d06a3575e12170b124947942e323dd1d585c91b3763c50039b0a11"}, @NL80211_ATTR_PMKID={0x14, 0x55, "f95d8a8f285f9802f92dc79dd3898489"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44081}, 0x20000000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000480), &(0x7f00000004c0)=0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r3, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x16}, 0x1)
r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14)
getpeername$packet(r4, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000740)=0x14)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/devices/LNXSYSTM:00', 0x173b42, 0x0)
ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f00000007c0))
sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x8c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000)
sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0x2}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20040001)
ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000d40)={0xc0, 0x20, [0x1f, 0x4, 0x80000001, 0x579], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0]})

04:03:56 executing program 7:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x391a00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, <r1=>0x0})
fcntl$setown(r0, 0x8, r1)
io_uring_enter(0xffffffffffffffff, 0x69d1, 0xcf2a, 0x1, &(0x7f00000000c0)={[0x8]}, 0x8)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', <r3=>0x0, 0x29, 0x2, 0x1, 0x3, 0x3, @empty, @empty, 0x8000, 0x7800, 0xfffffffd, 0x2}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x108, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x4004080}, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000400))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0)
ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r4, &(0x7f0000000480)={0x40000000})
ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000004c0))
r5 = open(&(0x7f0000000500)='./file0\x00', 0x40a00, 0x28)
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x500, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1f}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xe0}, @NL80211_ATTR_STA_FLAGS={0x28, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0x18, 0x1}, {}, {0x48}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x570}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x4000)
rt_sigprocmask(0x0, &(0x7f0000000680)={[0x3]}, &(0x7f00000006c0), 0x8)
r6 = creat(&(0x7f0000000700)='./file0\x00', 0x105)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x61e}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x40}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x6}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x40}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040010}, 0x40)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r4)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r8, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)

[  130.772678] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  130.777188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  130.780122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  130.791521] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  130.797990] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  130.842108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.858024] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.862321] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.871371] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.886508] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.888548] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  130.889210] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  130.902314] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.905111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  130.906700] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.909590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  130.917305] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.932619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  130.933741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  130.951035] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  130.974262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  130.975111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  130.978544] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  130.978769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  130.982665] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  130.987507] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  131.011310] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  131.020587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  131.027664] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  131.043872] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  131.047124] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  131.055348] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  131.058273] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  131.064923] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  131.071479] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  131.075091] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  131.078272] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  131.089229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  131.096049] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  131.108059] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  132.851426] Bluetooth: hci0: command tx timeout
[  132.979061] Bluetooth: hci2: command tx timeout
[  132.979907] Bluetooth: hci1: command tx timeout
[  133.043070] Bluetooth: hci3: command tx timeout
[  133.106028] Bluetooth: hci5: command tx timeout
[  133.106656] Bluetooth: hci4: command tx timeout
[  133.170967] Bluetooth: hci7: command tx timeout
[  133.171664] Bluetooth: hci6: command tx timeout
[  134.897876] Bluetooth: hci0: command tx timeout
[  135.025973] Bluetooth: hci1: command tx timeout
[  135.026410] Bluetooth: hci2: command tx timeout
[  135.090692] Bluetooth: hci3: command tx timeout
[  135.154106] Bluetooth: hci4: command tx timeout
[  135.154533] Bluetooth: hci5: command tx timeout
[  135.218969] Bluetooth: hci6: command tx timeout
[  135.219399] Bluetooth: hci7: command tx timeout
[  136.945957] Bluetooth: hci0: command tx timeout
[  137.073927] Bluetooth: hci2: command tx timeout
[  137.074385] Bluetooth: hci1: command tx timeout
[  137.137961] Bluetooth: hci3: command tx timeout
[  137.202656] Bluetooth: hci5: command tx timeout
[  137.203131] Bluetooth: hci4: command tx timeout
[  137.266844] Bluetooth: hci7: command tx timeout
[  137.267269] Bluetooth: hci6: command tx timeout
[  138.994203] Bluetooth: hci0: command tx timeout
[  139.121880] Bluetooth: hci1: command tx timeout
[  139.122343] Bluetooth: hci2: command tx timeout
[  139.186016] Bluetooth: hci3: command tx timeout
[  139.250057] Bluetooth: hci4: command tx timeout
[  139.250496] Bluetooth: hci5: command tx timeout
[  139.314931] Bluetooth: hci6: command tx timeout
[  139.315362] Bluetooth: hci7: command tx timeout
[  193.296780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.305640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  193.310766] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  193.315689] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  193.318149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.320094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  193.328793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.330866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  193.338471] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  193.345722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.365644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  193.378761] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  193.390251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  193.398308] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  193.403390] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  193.418576] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  193.423326] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  193.423498] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  193.435135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  193.437066] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  193.440521] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  193.443970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  193.446022] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  193.449600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  193.451144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  193.452162] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  193.462105] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  193.462444] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  193.473089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  193.490676] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  193.576411] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  193.578319] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  193.582604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  193.584028] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  193.586786] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  193.590357] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  193.595885] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  193.597972] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  193.600457] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  193.603445] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  195.442905] Bluetooth: hci0: command tx timeout
[  195.443727] Bluetooth: hci1: command tx timeout
[  195.506204] Bluetooth: hci4: command tx timeout
[  195.570882] Bluetooth: hci5: command tx timeout
[  195.571558] Bluetooth: hci2: command tx timeout
[  195.572350] Bluetooth: hci3: command tx timeout
[  195.633901] Bluetooth: hci7: command tx timeout
[  195.697895] Bluetooth: hci6: command tx timeout
[  197.490439] Bluetooth: hci1: command tx timeout
[  197.490600] Bluetooth: hci0: command tx timeout
[  197.553896] Bluetooth: hci4: command tx timeout
[  197.618130] Bluetooth: hci3: command tx timeout
[  197.618405] Bluetooth: hci2: command tx timeout
[  197.618617] Bluetooth: hci5: command tx timeout
[  197.683938] Bluetooth: hci7: command tx timeout
[  197.747024] Bluetooth: hci6: command tx timeout
[  199.537984] Bluetooth: hci0: command tx timeout
[  199.540841] Bluetooth: hci1: command tx timeout
[  199.603015] Bluetooth: hci4: command tx timeout
[  199.668155] Bluetooth: hci2: command tx timeout
[  199.668223] Bluetooth: hci3: command tx timeout
[  199.668590] Bluetooth: hci5: command tx timeout
[  199.730998] Bluetooth: hci7: command tx timeout
[  199.793885] Bluetooth: hci6: command tx timeout
[  201.587323] Bluetooth: hci1: command tx timeout
[  201.587369] Bluetooth: hci0: command tx timeout
[  201.651112] Bluetooth: hci4: command tx timeout
[  201.714209] Bluetooth: hci5: command tx timeout
[  201.714687] Bluetooth: hci3: command tx timeout
[  201.714743] Bluetooth: hci2: command tx timeout
[  201.779127] Bluetooth: hci7: command tx timeout
[  201.842154] Bluetooth: hci6: command tx timeout
[  255.305060] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  255.309753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  255.314870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  255.322566] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  255.328552] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  255.506296] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  255.511377] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  255.513881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  255.523436] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  255.532020] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  255.571239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  255.578462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  255.581408] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  255.597666] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  255.614219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  255.622990] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  255.629360] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  255.633277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  255.643762] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  255.648792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  255.662738] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  255.675138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  255.686353] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  255.689533] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  255.703537] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  255.705530] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  255.739614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  255.800419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  255.801325] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  255.809749] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  255.827009] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  255.847749] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  255.856162] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  255.891584] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  255.899274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  255.906085] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  255.944266] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  255.944407] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  255.975420] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  256.048484] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  257.394918] Bluetooth: hci0: command tx timeout
[  257.586036] Bluetooth: hci1: command tx timeout
[  257.714099] Bluetooth: hci2: command tx timeout
[  257.779646] Bluetooth: hci3: command tx timeout
[  257.906901] Bluetooth: hci4: command tx timeout
[  258.034003] Bluetooth: hci5: command tx timeout
[  258.162495] Bluetooth: hci7: command tx timeout
[  258.162584] Bluetooth: hci6: command tx timeout
[  259.441922] Bluetooth: hci0: command tx timeout
[  259.634983] Bluetooth: hci1: command tx timeout
[  259.763839] Bluetooth: hci2: command tx timeout
[  259.825960] Bluetooth: hci3: command tx timeout
[  259.956075] Bluetooth: hci4: command tx timeout
[  260.082902] Bluetooth: hci5: command tx timeout
[  260.210366] Bluetooth: hci6: command tx timeout
[  260.210882] Bluetooth: hci7: command tx timeout
[  261.490564] Bluetooth: hci0: command tx timeout
[  261.681898] Bluetooth: hci1: command tx timeout
[  261.809925] Bluetooth: hci2: command tx timeout
[  261.873957] Bluetooth: hci3: command tx timeout
[  262.001921] Bluetooth: hci4: command tx timeout
[  262.130010] Bluetooth: hci5: command tx timeout
[  262.258085] Bluetooth: hci6: command tx timeout
[  262.258569] Bluetooth: hci7: command tx timeout
[  263.538115] Bluetooth: hci0: command tx timeout
[  263.730716] Bluetooth: hci1: command tx timeout
[  263.857881] Bluetooth: hci2: command tx timeout
[  263.921882] Bluetooth: hci3: command tx timeout
[  264.050873] Bluetooth: hci4: command tx timeout
[  264.178182] Bluetooth: hci5: command tx timeout
[  264.305860] Bluetooth: hci7: command tx timeout
[  264.307011] Bluetooth: hci6: command tx timeout
[  317.702857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  317.708616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  317.712430] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  317.718492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  317.723974] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  317.866651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  317.869058] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  317.880509] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  317.901372] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  317.917896] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  317.920120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  317.923743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  317.928680] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  317.935732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  317.938026] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  317.941755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  317.952544] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  317.957305] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  317.961226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  317.963386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  317.971199] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  317.975351] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  317.987611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  318.002552] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  318.035703] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  318.060594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  318.084702] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  318.088913] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  318.101634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  318.103063] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  318.114336] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  318.121056] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  318.126566] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  318.131918] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  318.136274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  318.224274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  318.239002] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  318.278569] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  318.312788] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  318.330522] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  319.794055] Bluetooth: hci0: command tx timeout
[  320.050946] Bluetooth: hci4: command tx timeout
[  320.050976] Bluetooth: hci2: command tx timeout
[  320.114786] Bluetooth: hci1: command tx timeout
[  320.178878] Bluetooth: hci6: command tx timeout
[  320.561880] Bluetooth: hci7: command tx timeout
[  320.563322] Bluetooth: hci3: command tx timeout
[  320.689949] Bluetooth: hci5: command tx timeout
[  321.841914] Bluetooth: hci0: command tx timeout
[  322.098854] Bluetooth: hci2: command tx timeout
[  322.099141] Bluetooth: hci4: command tx timeout
[  322.162023] Bluetooth: hci1: command tx timeout
[  322.225882] Bluetooth: hci6: command tx timeout
[  322.611085] Bluetooth: hci3: command tx timeout
[  322.611557] Bluetooth: hci7: command tx timeout
[  322.740670] Bluetooth: hci5: command tx timeout
[  323.889964] Bluetooth: hci0: command tx timeout
[  324.147988] Bluetooth: hci4: command tx timeout
[  324.148044] Bluetooth: hci2: command tx timeout
[  324.211519] Bluetooth: hci1: command tx timeout
[  324.273876] Bluetooth: hci6: command tx timeout
[  324.658079] Bluetooth: hci7: command tx timeout
[  324.659018] Bluetooth: hci3: command tx timeout
[  324.786050] Bluetooth: hci5: command tx timeout
[  325.938035] Bluetooth: hci0: command tx timeout
[  326.193935] Bluetooth: hci4: command tx timeout
[  326.193983] Bluetooth: hci2: command tx timeout
[  326.257964] Bluetooth: hci1: command tx timeout
[  326.322423] Bluetooth: hci6: command tx timeout
[  326.706172] Bluetooth: hci7: command tx timeout
[  326.707256] Bluetooth: hci3: command tx timeout
[  326.833895] Bluetooth: hci5: command tx timeout
[  380.295750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  380.299864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  380.305574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  380.314753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  380.321397] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  380.563605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  380.565391] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  380.567737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  380.570705] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  380.573444] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  380.576616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  380.585400] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  380.585585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  380.591711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  380.594087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  380.621372] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  380.652052] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  380.676218] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  380.686285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  380.707062] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  380.799495] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  380.814713] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  380.819509] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  380.828461] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  380.836429] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  380.848597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  380.865159] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  380.906719] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  380.910164] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  380.924321] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  380.939177] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  380.948515] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  380.953668] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  380.956752] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  380.965766] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  380.969070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  380.972331] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  380.993305] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  380.999830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  381.028374] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  382.387882] Bluetooth: hci0: command tx timeout
[  382.641912] Bluetooth: hci2: command tx timeout
[  382.641970] Bluetooth: hci1: command tx timeout
[  382.834376] Bluetooth: hci3: command tx timeout
[  382.962030] Bluetooth: hci4: command tx timeout
[  383.026263] Bluetooth: hci5: command tx timeout
[  383.089966] Bluetooth: hci7: command tx timeout
[  383.089987] Bluetooth: hci6: command tx timeout
[  384.434206] Bluetooth: hci0: command tx timeout
[  384.690279] Bluetooth: hci1: command tx timeout
[  384.690381] Bluetooth: hci2: command tx timeout
[  384.881953] Bluetooth: hci3: command tx timeout
[  385.009995] Bluetooth: hci4: command tx timeout
[  385.074092] Bluetooth: hci5: command tx timeout
[  385.138092] Bluetooth: hci6: command tx timeout
[  385.139074] Bluetooth: hci7: command tx timeout
[  386.483874] Bluetooth: hci0: command tx timeout
[  386.738099] Bluetooth: hci2: command tx timeout
[  386.739536] Bluetooth: hci1: command tx timeout
[  386.930273] Bluetooth: hci3: command tx timeout
[  387.058108] Bluetooth: hci4: command tx timeout
[  387.121872] Bluetooth: hci5: command tx timeout
[  387.186549] Bluetooth: hci7: command tx timeout
[  387.187080] Bluetooth: hci6: command tx timeout
[  388.531978] Bluetooth: hci0: command tx timeout
[  388.785907] Bluetooth: hci1: command tx timeout
[  388.786074] Bluetooth: hci2: command tx timeout
[  388.979992] Bluetooth: hci3: command tx timeout
[  389.106076] Bluetooth: hci4: command tx timeout
[  389.170136] Bluetooth: hci5: command tx timeout
[  389.233901] Bluetooth: hci7: command tx timeout
[  389.235098] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
04:08:58  Registers:
info registers vcpu 0
RAX=00000000ffffffff RBX=0000000000000000 RCX=b1ed723ddab237e7 RDX=000000008c46ad2b
RSI=000000007587a085 RDI=00000000675faab7 RBP=ffffffff85c1cc40 RSP=ffff88800960f708
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200
RIP=ffffffff8151b063 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fddeec394a1 CR3=0000000030372000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000
XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=2f916ae57e061e00 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff85c1cc40 RBP=ffffffff85c1cc40 RSP=ffff8880267076f0
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=0000000000025a07
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff8880267077d8
RIP=ffffffff8151af32 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6b19c0b368 CR3=000000002b71d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000