Warning: Permanently added '[localhost]:15519' (ECDSA) to the list of known hosts.
2025/06/25 22:55:45 fuzzer started
2025/06/25 22:55:45 dialing manager at localhost:41253
syzkaller login: [   93.697359] cgroup: Unknown subsys name 'net'
[   93.860541] cgroup: Unknown subsys name 'cpuset'
[   93.905522] cgroup: Unknown subsys name 'rlimit'
2025/06/25 22:56:03 syscalls: 205
2025/06/25 22:56:03 code coverage: enabled
2025/06/25 22:56:03 comparison tracing: enabled
2025/06/25 22:56:03 extra coverage: enabled
2025/06/25 22:56:03 setuid sandbox: enabled
2025/06/25 22:56:03 namespace sandbox: enabled
2025/06/25 22:56:03 Android sandbox: enabled
2025/06/25 22:56:03 fault injection: enabled
2025/06/25 22:56:03 leak checking: enabled
2025/06/25 22:56:03 net packet injection: enabled
2025/06/25 22:56:03 net device setup: enabled
2025/06/25 22:56:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/25 22:56:03 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/25 22:56:03 USB emulation: enabled
2025/06/25 22:56:03 hci packet injection: enabled
2025/06/25 22:56:03 wifi device emulation: enabled
2025/06/25 22:56:03 802.15.4 emulation: enabled
2025/06/25 22:56:03 fetching corpus: 0, signal 0/0 (executing program)
2025/06/25 22:56:05 starting 8 fuzzer processes
22:56:05 executing program 0:
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200440, 0x0)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1a70)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040))
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r0, @out_args}, './file0\x00'})
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000100)={0x3c, 0xe, 0x12, 0x1a, 0x0, 0x10000, 0x5, 0xbf})
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000140))
ioctl$RTC_UIE_ON(r2, 0x7003)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file1\x00'})
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000001c0))
ioctl$RTC_UIE_ON(r0, 0x7003)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x1, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000300)="a3017ec3a30fa09edaf1ccd3dd24d71cbd278281d2c072ad9454cdfa4e7e23df7e3767a99690f7af4e1b2c4f23436565ccfbbb70608eb980581cdd7f602a96c21a77c9ee61fdf81425a9703211f66b18c0fd3ee0349ee5c11d3848784afd490b0034f5654d4193f3261479af39a43de7a9724875c7522546471fb3caf6da01ce9f5d", 0x82}], 0x820, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@hash}]})
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000480)='./file1\x00', 0x0, 0x7, &(0x7f0000000980)=[{&(0x7f00000004c0)="124c049a10c9ebabb76536daed2b199d437502eb071060174487f7d65bb8bafbaca23ebc80fdbd8c60a9767a531ea282c99e1158e88cbecd227d710a0fd46d6b405b408b9a3333fcdd6560743a2014d79c2bcd8384fda98def9e54854f066b28a37f845093cf85cc3fdb6d08d530a017cfd3ed23455c32794a3dcd07dd92cadc7936b043a5b57cddd8d44ad514bcce53ae5ea99c91981d7ea2a64537acb7c12d4f656903e670144c9bb1638e2a13f8", 0xaf, 0x9}, {&(0x7f0000000580)="2f29c2437fd52f67ba257702b09afcedb0065f889648e9125e6010f69ada7df3930362c05a53da06e9e1600270c50e6deebc5fa53e9439dda01ad923c55dade71c6a6034925800b65ba69b1ee47de85d5fb7a7d009195fc17974bd4361fbcb79f3477b5531c1b11536bc98dfe5bce5923fbfad56f59ef7cb7facf5523f117d8044cf718be5c73d52fc8600ce7d899300e6ce76", 0x93, 0x49b7779c}, {&(0x7f0000000640)="05e1dca51a5855b8260eb3643c24f630b7a8867e020e9c30a5108ce18c9e943583b6afbbc23c2b15a48808eaa338e2ffd0f1bfbd5560988d016cc1edeec3862defaa3d301f6b8b75ddf6dd945c0b5d1aa5c49eb5e27ebdaf2bd8c15024a6e9eba6e7efd7f0aa5102681be0cbec04a9609aba15b1fb82b62c6a8434b473f62590193454599def7f4596043fad83545c00a779af0363f07adaabf6e469428a9933df8537dc1e5d9e53b9e24dd32bd08ede1daa25fc9eff1a547539ffd3f09867f07e1c53c405e964fd40743b29ad618049", 0xd0, 0x410}, {&(0x7f0000000740)="c800b273e1b45b426b7aadd84b82565033daa5d0b5ec860448c9e671d5f6cfd33c83552a6bc2d5432c08907ff35805b9eb83a468eda499f18c930a503242e43fabf6da3e0ffe4117c0cb06f9e4f7e95f0b3883cb5a14324142106538b67e33460ad288b490ca8c8ebee23bc66ba7616fd701492f4f216122a61a957fe0c595f1cd7abf298fe2174e518e5336040cb6960164d0a8f67cbb2cb42eb25db326330933af9fd928eebccd335fefc88993bf3460aeeb2439cb4595112d2ee8c593026558ed0c2df0ee98c4f851a9a82826926d24", 0xd1, 0xe87}, {&(0x7f0000000840)="82ecc867b2f12ea470ae20714dd3e8401ed449bb2f5e77d6a13263dd2e23b24c9b314d0f9fd44b20483cfe3d384123296820547df2b228032338ef214affcb20ec6d855ff66b0dfd6b2e62d3a26fa8fe78cad5ad2b7ad7a13aa8531f35fbd4d99a9853197f2da8c60563b91d8d3808e83b12e4581afc44d5bffbf59081d66e21fb97dcc2680c018bc2dcd8957611", 0x8e, 0x4}, {&(0x7f0000000900)="cd0aa0063e24cb735d352e1a5eece2d3c73b54dc0054023dc7c173ea3806d448560a9eb65a468a9ecd549def67a91d42", 0x30, 0x9}, {&(0x7f0000000940)="6be8766bde7358af3cf3d6e881d9f8e07c8b88c087558b0080224f727251297582c53098b95da289dff9b5f9694795b23679da", 0x33, 0x9}], 0x0, &(0x7f0000000a40)={[{@uni_xlateno}], [{@pcr={'pcr', 0x3d, 0x35}}]})
r4 = geteuid()
lchown(&(0x7f0000000a80)='./file0/file0\x00', r4, 0xffffffffffffffff)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)

22:56:05 executing program 1:
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x3b, 0x1f, 0x14, 0x19, 0x3, 0x5, 0x2, 0xeb})
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x14, 0x1f, 0xc, 0x1a, 0x7, 0x8, 0x6, 0xd9, 0x1})
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x3, 0x31, 0x8, 0x1a, 0x3, 0x3f, 0x4, 0x102, 0x1}})
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x200400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}, {@dfltuid={'dfltuid', 0x3d, r1}}]}})
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$RTC_PIE_OFF(r2, 0x7006)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10010, r0, 0x0)
r4 = syz_io_uring_setup(0x1c07, &(0x7f0000000300)={0x0, 0x5de1, 0x10, 0x1, 0x142}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=<r5=>0x0)
syz_io_uring_submit(r3, r5, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xc29, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
recvmsg$unix(r0, &(0x7f0000001640)={&(0x7f0000000440), 0x6e, &(0x7f00000015c0)=[{&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/67, 0x43}], 0x3, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000001680)={{0x1, 0x1, 0x18, <r7=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'})
recvmmsg(r6, &(0x7f0000002d00)=[{{&(0x7f0000001700)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001780)=""/100, 0x64}, {&(0x7f0000001800)=""/121, 0x79}], 0x2}, 0x1}, {{&(0x7f00000018c0)=@generic, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001940)}, {&(0x7f0000001980)=""/251, 0xfb}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/151, 0x97}, {&(0x7f0000002b40)=""/167, 0xa7}], 0x5, &(0x7f0000002c80)=""/78, 0x4e}}], 0x2, 0x20, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000002d80)={{0x1, 0x1, 0x18, <r8=>r4, @in_args={0x1}}, './file0\x00'})
ioctl$RTC_RD_TIME(r8, 0x80247009, &(0x7f0000002dc0))
ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000002e00)={0x17, 0x5, 0x15, 0x10, 0x7, 0x1, 0x6, 0xb1, 0xffffffffffffffff})
ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000002e40)={0x0, 0x1, {0x2b, 0x2, 0x12, 0x8, 0x8, 0xfff, 0x4, 0x3c, 0x1}})

22:56:05 executing program 2:
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000))
read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/54, 0x36)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x44001, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000140))
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f00000001c0))
setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000200)="a17dcf9a441ce4faad31f5af0dbeddfc2bffc6cf9c219de73694678c0cbe49a39579d109e1d765d5239cdcdf827fc38c9aa2e834bbcbae5106b52deda7a1aa2261015e385db21fc6d54a5005e20c74", 0x4f)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0)
ioctl$RTC_UIE_ON(r2, 0x7003)
recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000340)=""/103, 0x67}, {&(0x7f00000003c0)=""/110, 0x6e}, {&(0x7f0000000440)=""/186, 0xba}], 0x3, &(0x7f0000000540)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}], 0x38}, 0x60)
ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f00000005c0))
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000600), 0x4)
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000640))
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0)
ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0x6)
ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000006c0)=0x8)
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x40800)

22:56:05 executing program 3:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x244, r0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8a}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c5f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf35}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x92d0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}]}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa3eb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10a0}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040800)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff)
socketpair(0xf, 0x6, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb8, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x19}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40600c4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r9=>0xffffffffffffffff})
recvmmsg(r5, &(0x7f0000003f80)=[{{&(0x7f0000000800)=@hci, 0x80, &(0x7f0000001880)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}, 0x3}, {{&(0x7f00000018c0)=@pppol2tp={0x18, 0x1, {0x0, <r10=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001940)=""/149, 0x95}, {&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/229, 0xe5}, {&(0x7f0000001c00)=""/45, 0x2d}], 0x4}, 0x1f}, {{&(0x7f0000001c80)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001d00)=""/201, 0xc9}, {&(0x7f0000001e00)=""/235, 0xeb}, {&(0x7f0000001f00)=""/211, 0xd3}, {&(0x7f0000002000)=""/228, 0xe4}, {&(0x7f0000002100)=""/201, 0xc9}, {&(0x7f0000002200)=""/59, 0x3b}, {&(0x7f0000002240)=""/214, 0xd6}], 0x7}, 0xbaa9}, {{&(0x7f00000023c0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000003780)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/154, 0x9a}, {&(0x7f0000003500)=""/86, 0x56}, {&(0x7f0000003580)=""/125, 0x7d}, {&(0x7f0000003600)=""/20, 0x14}, {&(0x7f0000003640)=""/32, 0x20}, {&(0x7f0000003680)=""/245, 0xf5}], 0x7, &(0x7f0000003800)=""/30, 0x1e}, 0x5c4d}, {{&(0x7f0000003840)=@isdn, 0x80, &(0x7f0000003a00)=[{&(0x7f00000038c0)=""/182, 0xb6}, {&(0x7f0000003980)=""/73, 0x49}], 0x2, &(0x7f0000003a40)=""/222, 0xde}, 0xbdd5}, {{&(0x7f0000003b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003bc0)=""/11, 0xb}, {&(0x7f0000003c00)=""/127, 0x7f}, {&(0x7f0000003c80)=""/30, 0x1e}, {&(0x7f0000003cc0)=""/243, 0xf3}, {&(0x7f0000003dc0)=""/168, 0xa8}, {&(0x7f0000003e80)=""/63, 0x3f}], 0x6, &(0x7f0000003f40)=""/32, 0x20}, 0x81}], 0x6, 0x40, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000041c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004180)={&(0x7f0000004100)={0x64, r1, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x4000800)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f00000042c0)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004280)={&(0x7f0000004240)={0x20, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040840}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000053c0)={'batadv0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000005400)={'team0\x00', <r13=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000005440)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000005580)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005540)={&(0x7f0000005480)={0x98, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4844}, 0x720c6c9d8d94e186)
sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000005680)={&(0x7f00000055c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005640)={&(0x7f0000005600)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x727bfe9, 0x70}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044110}, 0x800)

[  113.369915] audit: type=1400 audit(1750892165.524:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
22:56:05 executing program 4:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xa0080, 0x0)
r1 = accept4(r0, &(0x7f00000028c0)=@ieee802154={0x24, @short}, &(0x7f0000002940)=0x80, 0x80000)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000002980)={0x5, 0x7, 0x0, 0x8, 0x80000000}, 0x14)
ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f00000029c0)={0x9, 0x2, 0x7ff, 0x1, 0xbfe, 0x8, 0xff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe8a}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002b80)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000002c80)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x7c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r0}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xbb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4080)
accept4(0xffffffffffffffff, &(0x7f0000002cc0)=@ax25={{0x3, @netrom}, [@netrom, @bcast, @default, @rose, @bcast, @remote, @null, @bcast]}, &(0x7f0000002d40)=0x80, 0x800)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000002d80))
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x8000000)
syz_io_uring_submit(r5, 0x0, &(0x7f0000002e00)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000002dc0)='./file0\x00', 0x80, 0x10000, 0x23456}, 0xb4)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000002e40), 0x181001, 0x0)
setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000002e80)=@ccm_128={{0x303}, "a19a03c85609a47d", "71af79a0ff63defe9573d6783e780785", '&\fP1', "59fc52073e2222c5"}, 0x28)
ioctl$RTC_PIE_OFF(r6, 0x7006)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r7 = accept4(r0, &(0x7f0000002f00)=@nfc_llcp, &(0x7f0000002f80)=0x80, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002ec0), r7)
mount$tmpfs(0x0, &(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000), 0x4, &(0x7f0000003040)={[{@huge_advise}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}], [{@smackfsroot={'smackfsroot', 0x3d, '\\]@*%'}}]})
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000003080)={0x4, 0x4, 0x0, 0x401}, 0x14)

22:56:05 executing program 5:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x7ff, 0x6d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', <r2=>r1, 0x4, 0x97, 0x5, 0x8, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x40, 0xa0, 0x4, 0x1f}})
r3 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@xdp={0x2c, 0x0, <r4=>0x0}, &(0x7f0000000400)=0x80, 0x80000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', <r5=>r1, 0x4, 0x8, 0x4, 0xfffffffd, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x8, 0x7800, 0x6, 0xff}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x8a0, 0x0, 0x908, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa42}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7832}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x4, 0x5, 0x9}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r4}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x400, 0x81, 0x0, 0x4}, {0x8000, 0x6, 0x80, 0x1}]}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa0000}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5f3d}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x100, 0xfa, 0x9, 0x7ff}, {0x9, 0x99, 0x9, 0x5}, {0x7, 0x2, 0x2, 0x3}, {0x40, 0x3, 0x9, 0xfffffffd}, {0xe22, 0xf9, 0x0, 0x69}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8623, 0x0, 0x3, 0x8}, {0xeee1, 0x4, 0x35, 0x1}, {0x6, 0x7f, 0x7, 0x1}, {0xc, 0x0, 0x2, 0xffffffc0}, {0x1, 0x3b, 0x7d, 0x9d}, {0x1000, 0x8, 0x80, 0x8}, {0x8, 0xd7, 0x8, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe577}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x8a0}}, 0x20004001)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000f00), r3)
sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x64, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xf7}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x81, 0x8, 0x8, 0xfffffffd, 0x5778]}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe7}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0x2]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8081}, 0x2008000)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001040), 0x400, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001180), 0x200, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3f}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xfd}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040880}, 0x800)
socketpair(0x23, 0x4, 0x1d41, &(0x7f0000001300)={<r10=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r10)
recvmsg$unix(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/115, 0x73}, {&(0x7f00000023c0)=""/205, 0xcd}, {&(0x7f00000024c0)=""/232, 0xe8}, {&(0x7f00000025c0)=""/121, 0x79}, {&(0x7f0000002640)=""/171, 0xab}, {&(0x7f0000002700)=""/219, 0xdb}], 0x7, &(0x7f0000002880)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}, 0x2102)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002980), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000029c0)={'batadv0\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_EEE_GET(r11, &(0x7f0000002b80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002a40)={0xe0, r12, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x90}, 0x4)

22:56:05 executing program 6:
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)=""/12, &(0x7f0000000080)=0xc)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/200, 0xc8, 0x1, &(0x7f0000000240)=""/174, 0xae}, &(0x7f0000000340)=0x40)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, @in_args={0x1}}, './file0\x00'})
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000003c0), 0x4)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000400)=@gcm_256={{0x304}, "b8bf010f1a380b36", "79099c1f1d540cd5fb84441b87a29cdb73ffbe037a41e35b90f3f116618223a1", "b00c5569", "2b72d702457e074b"}, 0x38)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x145a80, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1a, &(0x7f0000000480)=0x7fff, 0x4)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r2=>r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'})
ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000500))
sendmsg$802154_raw(r2, &(0x7f0000000600)={&(0x7f0000000540), 0x14, &(0x7f00000005c0)={&(0x7f0000000580)="314d16488d0bc0780f2cced5b75fd9bba9eb638a9223d2384fbfaa337a6a97d2d0d4a0cb3f69a9356c39e07884fffd2aeba644f0cdfb932295cf", 0x3a}, 0x1, 0x0, 0x0, 0x20008001}, 0x24040040)
r3 = socket$inet(0x2, 0x80000, 0x1)
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000640)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0xc)
socket$inet(0x2, 0x80000, 0x5)
getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000680), &(0x7f00000006c0)=0x4)
openat$zero(0xffffffffffffff9c, &(0x7f0000000700), 0x80100, 0x0)
ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000740))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780))
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200000000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4008000)

22:56:05 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'})
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x2})
r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x54d8, 0x0)
ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x30, 0x28, 0xd, 0x14, 0x8, 0x101, 0x6, 0x157, 0x1})
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x101)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000200)=0x2, 0x4)
mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x400a, 0x0)
ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x1)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000300), 0x4)
recvmsg$unix(r0, &(0x7f00000014c0)={&(0x7f0000000340), 0x6e, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x45)
setsockopt$inet6_tcp_buf(r5, 0x6, 0x21, &(0x7f0000001500)="53c7652e2826176661de1bd717de43e98a5e1612a4cce2c130038697563ffa2ef49ec09befcce0d26d7b24cc0a90fff173305bc1bcf2ed85442ec08b0d3672b9d9344f3cd0d91e3e0b2b1b1f3b3f3b0c27f107f95203f934f62e1bc91a8f4b6c3dbb1c39aec76f88686caf0e055dc3954d73ab6ddccd00612b3050b70bbaed2edfb48e73d995e99c437fdc4c540b356c3326dfa80524118469dc2e6611f8fd8d11c44d04800e", 0xa6)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000015c0), &(0x7f0000001600)=0x4)
sendmsg$nl_generic(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, 0x3d, 0x400, 0x70bd2d, 0x25dfdbfc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x4050)
ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x6b782)
accept4(0xffffffffffffffff, &(0x7f0000001740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000017c0)=0x80, 0x80000)

[  114.767576] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  114.773782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  114.774959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  114.782202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  114.787318] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  114.827283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  114.830301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  114.832957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  114.833688] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  114.837710] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  114.839295] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  114.842029] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  114.849145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  114.866430] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  114.879359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  114.967719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  114.984408] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  114.985957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  115.000082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  115.014665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  115.024835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  115.032948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  115.035934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  115.051334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  115.057656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.096933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  115.107548] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  115.115500] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  115.163770] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  115.169878] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  115.182649] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  115.186663] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  115.190926] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  115.194628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  115.203550] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  115.211440] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  115.218302] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  115.225253] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  115.236237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  115.248516] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  116.859367] Bluetooth: hci0: command tx timeout
[  116.923129] Bluetooth: hci2: command tx timeout
[  116.923881] Bluetooth: hci1: command tx timeout
[  117.116758] Bluetooth: hci4: command tx timeout
[  117.117440] Bluetooth: hci3: command tx timeout
[  117.243120] Bluetooth: hci5: command tx timeout
[  117.307943] Bluetooth: hci7: command tx timeout
[  117.371097] Bluetooth: hci6: command tx timeout
[  118.907081] Bluetooth: hci0: command tx timeout
[  118.971292] Bluetooth: hci2: command tx timeout
[  118.971713] Bluetooth: hci1: command tx timeout
[  119.163344] Bluetooth: hci3: command tx timeout
[  119.163797] Bluetooth: hci4: command tx timeout
[  119.291224] Bluetooth: hci5: command tx timeout
[  119.357033] Bluetooth: hci7: command tx timeout
[  119.419358] Bluetooth: hci6: command tx timeout
[  120.955084] Bluetooth: hci0: command tx timeout
[  121.020014] Bluetooth: hci1: command tx timeout
[  121.020444] Bluetooth: hci2: command tx timeout
[  121.211166] Bluetooth: hci4: command tx timeout
[  121.211629] Bluetooth: hci3: command tx timeout
[  121.339110] Bluetooth: hci5: command tx timeout
[  121.403492] Bluetooth: hci7: command tx timeout
[  121.467200] Bluetooth: hci6: command tx timeout
[  123.005166] Bluetooth: hci0: command tx timeout
[  123.067423] Bluetooth: hci1: command tx timeout
[  123.067865] Bluetooth: hci2: command tx timeout
[  123.259324] Bluetooth: hci4: command tx timeout
[  123.259782] Bluetooth: hci3: command tx timeout
[  123.387052] Bluetooth: hci5: command tx timeout
[  123.451057] Bluetooth: hci7: command tx timeout
[  123.515357] Bluetooth: hci6: command tx timeout
[  174.708777] syz-executor.7 (284) used greatest stack depth: 24640 bytes left
[  177.370098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.374410] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  177.378423] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.380483] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  177.385669] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  177.387364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.399460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.402150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  177.411052] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  177.415694] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  177.435252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  177.441518] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  177.457307] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  177.461898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  177.464918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  177.467213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  177.472227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  177.475339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  177.480578] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  177.481276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  177.484146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  177.488871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  177.491830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  177.497148] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  177.501127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  177.502949] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  177.506622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  177.509359] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  177.513925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  177.517275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  177.522759] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  177.523610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  177.537188] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  177.541570] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  177.545754] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  177.550464] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  177.554044] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  177.555740] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  177.557113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  177.574590] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  179.451127] Bluetooth: hci1: command tx timeout
[  179.516213] Bluetooth: hci0: command tx timeout
[  179.645102] Bluetooth: hci2: command tx timeout
[  179.645737] Bluetooth: hci4: command tx timeout
[  179.647339] Bluetooth: hci6: command tx timeout
[  179.708127] Bluetooth: hci7: command tx timeout
[  179.708850] Bluetooth: hci5: command tx timeout
[  179.709830] Bluetooth: hci3: command tx timeout
[  181.499069] Bluetooth: hci1: command tx timeout
[  181.564394] Bluetooth: hci0: command tx timeout
[  181.691181] Bluetooth: hci4: command tx timeout
[  181.691690] Bluetooth: hci6: command tx timeout
[  181.692665] Bluetooth: hci2: command tx timeout
[  181.756112] Bluetooth: hci5: command tx timeout
[  181.756626] Bluetooth: hci3: command tx timeout
[  181.757596] Bluetooth: hci7: command tx timeout
[  183.547081] Bluetooth: hci1: command tx timeout
[  183.611035] Bluetooth: hci0: command tx timeout
[  183.739231] Bluetooth: hci2: command tx timeout
[  183.739707] Bluetooth: hci4: command tx timeout
[  183.740163] Bluetooth: hci6: command tx timeout
[  183.804172] Bluetooth: hci7: command tx timeout
[  183.804644] Bluetooth: hci3: command tx timeout
[  183.805179] Bluetooth: hci5: command tx timeout
[  185.595044] Bluetooth: hci1: command tx timeout
[  185.659352] Bluetooth: hci0: command tx timeout
[  185.788167] Bluetooth: hci2: command tx timeout
[  185.788643] Bluetooth: hci6: command tx timeout
[  185.789399] Bluetooth: hci4: command tx timeout
[  185.852132] Bluetooth: hci7: command tx timeout
[  185.852573] Bluetooth: hci5: command tx timeout
[  185.853028] Bluetooth: hci3: command tx timeout
[  239.573490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  239.579781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  239.585520] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  239.596401] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  239.604448] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  239.642367] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  239.648300] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  239.653567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  239.665616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  239.672946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  239.688375] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  239.691530] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  239.695521] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  239.711925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  239.723465] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  239.784115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  239.807827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  239.811460] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  239.824047] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  239.832739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  239.862465] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  239.869545] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  239.873551] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  239.882490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  239.888243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  240.190305] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  240.197498] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  240.207440] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  240.211566] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  240.219537] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  240.221305] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  240.224271] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  240.234491] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  240.261800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  240.269561] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  240.272181] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  240.275763] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  240.289230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  240.296881] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  240.299519] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  241.659208] Bluetooth: hci0: command tx timeout
[  241.787201] Bluetooth: hci2: command tx timeout
[  241.788136] Bluetooth: hci1: command tx timeout
[  241.916788] Bluetooth: hci4: command tx timeout
[  242.044084] Bluetooth: hci3: command tx timeout
[  242.363249] Bluetooth: hci7: command tx timeout
[  242.363879] Bluetooth: hci5: command tx timeout
[  242.493020] Bluetooth: hci6: command tx timeout
[  243.707136] Bluetooth: hci0: command tx timeout
[  243.835057] Bluetooth: hci2: command tx timeout
[  243.836255] Bluetooth: hci1: command tx timeout
[  243.964336] Bluetooth: hci4: command tx timeout
[  244.092405] Bluetooth: hci3: command tx timeout
[  244.411051] Bluetooth: hci5: command tx timeout
[  244.411166] Bluetooth: hci7: command tx timeout
[  244.539513] Bluetooth: hci6: command tx timeout
[  245.757003] Bluetooth: hci0: command tx timeout
[  245.883153] Bluetooth: hci1: command tx timeout
[  245.883180] Bluetooth: hci2: command tx timeout
[  246.011088] Bluetooth: hci4: command tx timeout
[  246.140241] Bluetooth: hci3: command tx timeout
[  246.459163] Bluetooth: hci7: command tx timeout
[  246.460994] Bluetooth: hci5: command tx timeout
[  246.587162] Bluetooth: hci6: command tx timeout
[  247.805210] Bluetooth: hci0: command tx timeout
[  247.931229] Bluetooth: hci1: command tx timeout
[  247.932231] Bluetooth: hci2: command tx timeout
[  248.060337] Bluetooth: hci4: command tx timeout
[  248.187187] Bluetooth: hci3: command tx timeout
[  248.507304] Bluetooth: hci5: command tx timeout
[  248.507348] Bluetooth: hci7: command tx timeout
[  248.636561] Bluetooth: hci6: command tx timeout
[  301.967375] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  301.973376] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  301.977701] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  301.986807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  301.993295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  302.164809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  302.167790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  302.170834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  302.177476] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  302.182377] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  302.327134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  302.336419] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  302.340171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  302.351142] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  302.358545] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  302.363275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  302.370156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  302.377315] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  302.383681] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  302.397092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  302.401865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  302.416787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  302.418943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  302.420491] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  302.421906] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  302.429224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  302.434856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  302.449518] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  302.489493] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  302.508488] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  302.612640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  302.628525] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  302.716624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  302.725674] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  302.730651] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  302.775936] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  302.805159] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  302.809360] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  302.815460] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  302.873536] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  304.059072] Bluetooth: hci0: command tx timeout
[  304.251054] Bluetooth: hci1: command tx timeout
[  304.507367] Bluetooth: hci3: command tx timeout
[  304.571507] Bluetooth: hci5: command tx timeout
[  304.572130] Bluetooth: hci2: command tx timeout
[  304.635074] Bluetooth: hci4: command tx timeout
[  304.828085] Bluetooth: hci6: command tx timeout
[  305.019070] Bluetooth: hci7: command tx timeout
[  306.107152] Bluetooth: hci0: command tx timeout
[  306.299228] Bluetooth: hci1: command tx timeout
[  306.556273] Bluetooth: hci3: command tx timeout
[  306.621036] Bluetooth: hci5: command tx timeout
[  306.621477] Bluetooth: hci2: command tx timeout
[  306.683025] Bluetooth: hci4: command tx timeout
[  306.875050] Bluetooth: hci6: command tx timeout
[  307.067121] Bluetooth: hci7: command tx timeout
[  308.155308] Bluetooth: hci0: command tx timeout
[  308.347775] Bluetooth: hci1: command tx timeout
[  308.603997] Bluetooth: hci3: command tx timeout
[  308.667167] Bluetooth: hci5: command tx timeout
[  308.667332] Bluetooth: hci2: command tx timeout
[  308.731048] Bluetooth: hci4: command tx timeout
[  308.924073] Bluetooth: hci6: command tx timeout
[  309.115070] Bluetooth: hci7: command tx timeout
[  310.203145] Bluetooth: hci0: command tx timeout
[  310.395319] Bluetooth: hci1: command tx timeout
[  310.651037] Bluetooth: hci3: command tx timeout
[  310.715358] Bluetooth: hci5: command tx timeout
[  310.716207] Bluetooth: hci2: command tx timeout
[  310.780995] Bluetooth: hci4: command tx timeout
[  310.972055] Bluetooth: hci6: command tx timeout
[  311.163401] Bluetooth: hci7: command tx timeout
[  364.684549] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  364.687480] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  364.691937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  364.699413] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  364.704652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  364.819849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  364.831602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  364.835458] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  364.851786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  364.858035] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  364.968874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  364.974794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  364.979606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  364.985793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  364.997621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  365.074714] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  365.083253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  365.100495] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  365.112262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  365.141410] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  365.201216] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  365.205589] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  365.221535] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  365.223784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  365.229518] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  365.236521] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  365.266791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  365.273644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  365.281952] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  365.285014] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  365.286643] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  365.297329] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  365.300644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  365.308267] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  365.315704] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  365.352723] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  365.362098] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  365.433761] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  365.443456] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  365.454951] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  366.779191] Bluetooth: hci0: command tx timeout
[  366.907112] Bluetooth: hci1: command tx timeout
[  367.035175] Bluetooth: hci2: command tx timeout
[  367.227693] Bluetooth: hci3: command tx timeout
[  367.419464] Bluetooth: hci4: command tx timeout
[  367.420828] Bluetooth: hci5: command tx timeout
[  367.549154] Bluetooth: hci7: command tx timeout
[  367.550923] Bluetooth: hci6: command tx timeout
[  368.827416] Bluetooth: hci0: command tx timeout
[  368.955106] Bluetooth: hci1: command tx timeout
[  369.084034] Bluetooth: hci2: command tx timeout
[  369.276059] Bluetooth: hci3: command tx timeout
[  369.467388] Bluetooth: hci4: command tx timeout
[  369.468394] Bluetooth: hci5: command tx timeout
[  369.597078] Bluetooth: hci6: command tx timeout
[  369.598037] Bluetooth: hci7: command tx timeout
[  370.876162] Bluetooth: hci0: command tx timeout
[  371.003103] Bluetooth: hci1: command tx timeout
[  371.131217] Bluetooth: hci2: command tx timeout
[  371.323155] Bluetooth: hci3: command tx timeout
[  371.515538] Bluetooth: hci4: command tx timeout
[  371.516269] Bluetooth: hci5: command tx timeout
[  371.643151] Bluetooth: hci7: command tx timeout
[  371.643727] Bluetooth: hci6: command tx timeout
[  372.924338] Bluetooth: hci0: command tx timeout
[  373.051202] Bluetooth: hci1: command tx timeout
[  373.179199] Bluetooth: hci2: command tx timeout
[  373.371183] Bluetooth: hci3: command tx timeout
[  373.563128] Bluetooth: hci4: command tx timeout
[  373.563920] Bluetooth: hci5: command tx timeout
[  373.692130] Bluetooth: hci7: command tx timeout
[  373.692927] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
23:01:13  Registers:
info registers vcpu 0
RAX=ffffed10069a6ca0 RBX=0000000000000000 RCX=ffffffff825b22b6 RDX=0000000000000000
RSI=0000000000000fe0 RDI=ffff888034d35520 RBP=ffffed10069a6aa4 RSP=ffff88802dbafd00
R8 =0000000000000001 R9 =ffffed10069a6c9f R10=ffff888034d364ff R11=0000000000000000
R12=0000000000000004 R13=ffff888034d35520 R14=0000000000000fe0 R15=ffffffff85823b00
RIP=ffffffff81aefd97 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f7648c9a540 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a06a6cafa8 CR3=000000002ae97000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000040186 RBX=ffff88801ac3d280 RCX=0000000000000000 RDX=0000000000000186
RSI=0000000000000000 RDI=ffff88800ba2ac88 RBP=ffff88801ac3dcd8 RSP=ffff8880300df408
R8 =0000000000000000 R9 =0000000000000186 R10=0000000000000001 R11=0000000000000000
R12=ffff88801ac3dd00 R13=0000000000000000 R14=0000000000000001 R15=0000000000040000
RIP=ffffffff81518dc9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe2800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f88dd5f18e0 CR3=000000002a7cb000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000