Warning: Permanently added '[localhost]:24714' (ECDSA) to the list of known hosts.
2025/05/29 03:53:28 fuzzer started
2025/05/29 03:53:29 dialing manager at localhost:36815
syzkaller login: [   93.782299] cgroup: Unknown subsys name 'net'
[   93.915216] cgroup: Unknown subsys name 'cpuset'
[   93.971426] cgroup: Unknown subsys name 'rlimit'
2025/05/29 03:53:43 syscalls: 202
2025/05/29 03:53:43 code coverage: enabled
2025/05/29 03:53:43 comparison tracing: enabled
2025/05/29 03:53:43 extra coverage: enabled
2025/05/29 03:53:43 setuid sandbox: enabled
2025/05/29 03:53:43 namespace sandbox: enabled
2025/05/29 03:53:43 Android sandbox: enabled
2025/05/29 03:53:43 fault injection: enabled
2025/05/29 03:53:43 leak checking: enabled
2025/05/29 03:53:43 net packet injection: enabled
2025/05/29 03:53:43 net device setup: enabled
2025/05/29 03:53:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/29 03:53:43 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/29 03:53:43 USB emulation: enabled
2025/05/29 03:53:43 hci packet injection: enabled
2025/05/29 03:53:43 wifi device emulation: enabled
2025/05/29 03:53:43 802.15.4 emulation: enabled
2025/05/29 03:53:43 fetching corpus: 0, signal 0/0 (executing program)
2025/05/29 03:53:44 starting 8 fuzzer processes
03:53:44 executing program 0:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000040)=""/40)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000180)={0x3, 0xc2, &(0x7f0000000080)="300559cc65461f62112ac69fb3a4fd2aafea6208cfcadecb7d13fc920d93e679a7bbd098ab78d5e20ae71abdaf9fc6c0a7fdaf37ea317bc87d791a11fdb9f8e789d601e13d090de15d4b78911c0cdae5652ff58a5590e8dfdac28ca98c5add00af053156d8a01f39e731eeedb55b35d0c37967f60f18b469f7955c265005f7e43f1ad50ed0bfb31bf5cfbef6fe120bf49ef10978d9229287cfe060da569f0729296fa83894daf2b2a98183d644cdb446dc643291f56e0efdb7ea98855cfbd374b047"})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x2}}, './file0\x00'})
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000200)={0x57, 0x1, 0x0, {0x25, 0x3}, {0x5, 0x8b65}, @ramp={0x1f, 0xfff, {0x0, 0x6, 0x0, 0x4}}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000240)={0x0, 'sit0\x00', {0x2}, 0x1000})
fcntl$addseals(r0, 0x409, 0x1)
ioprio_set$uid(0x3, 0x0, 0x4000)
r3 = openat$incfs(r2, &(0x7f0000000280)='.log\x00', 0x24800, 0x35)
fcntl$notify(r3, 0x402, 0x20)
ioctl$KDSETLED(r1, 0x4b32, 0x2)
ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000002c0)={0x4, 0x5})
ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000300)=""/189)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r3)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4)
fcntl$addseals(r3, 0x409, 0x0)
fcntl$getown(r2, 0x9)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x12100, 0x0)
ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000440)=0x8)

03:53:44 executing program 3:
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x20, 0x1, 0x3, 0x2c, 0x1, 0x5, 0x8}, 0xc)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x30, 0x800, 0x6370, 0x3f, 0x8, 0x9, 0x20}, 0xc)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0x401, 0x1ff, 0x400, 0x23, 0x6, 0x3, 0x4}, 0xc)
fcntl$notify(0xffffffffffffffff, 0x402, 0x80000000)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xfe}}, './file0\x00'})
connect$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0xffff, @none, 0x8001}, 0xe)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x80000000, 0x80000001, 0x9})
io_setup(0x6, &(0x7f0000000200)=<r2=>0x0)
r3 = dup3(r1, r0, 0x0)
io_cancel(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x80, r3, &(0x7f0000000240)="e6b5981e43d55aa5ebc17fe4f2577220bc6090f6ce4a00beb0541017a123c8b0c7b3b8264b6e892a9e", 0x29, 0x4, 0x0, 0x0, r1}, &(0x7f00000002c0))
ptrace$setopts(0x4200, 0x0, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r0, {0xc94}}, './file0\x00'})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000340)={0x0, 0x20, 0x2, 0x7, 0x0, [0x7fffffff, 0x0, 0x8]})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0xc)
bind$bt_l2cap(r4, &(0x7f0000000400)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x1}, 0xe)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x40000)
openat$incfs(0xffffffffffffffff, &(0x7f0000000600)='.pending_reads\x00', 0x282, 0x108)

03:53:44 executing program 4:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = gettid()
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x38}}, 0x51)
ptrace$peekuser(0x3, 0xffffffffffffffff, 0x6)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
ptrace$peekuser(0x3, r2, 0x8)
waitid(0x1, r2, &(0x7f0000000100), 0x1, &(0x7f0000000180))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x20a01, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x4)
r4 = gettid()
r5 = fcntl$getown(r0, 0x9)
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x18c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8800}, 0x11)
r7 = syz_open_procfs$namespace(r4, &(0x7f0000000540)='ns/cgroup\x00')
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000000580)={0x1, 0x0, 0x5})
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000005c0), 0xffffffffffffffff)
ptrace$setopts(0x4206, r1, 0xba3, 0x100028)
fcntl$notify(r7, 0x402, 0x1)
syz_open_procfs$userns(r2, &(0x7f0000000600))

03:53:44 executing program 1:
mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={0x82}, 0x20)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x20000, 0x10)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x1)
r1 = openat$incfs(r0, &(0x7f0000000140)='.pending_reads\x00', 0x40, 0x52)
r2 = openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0x90000, 0xb1)
bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x0, 0xfb853d8f2bef432a}, 0x6)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000200)={0x5605, 0x2, 0x2, 0x8588, 0x3, [{0x3, 0xbff, 0x7fffffff, '\x00', 0x1}, {0x9, 0x4, 0xffffffff, '\x00', 0x8}, {0x74, 0x3, 0x6, '\x00', 0x8}]})
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x20080, 0x0)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000340)="8d439b5d8e5ad16d84e689363413f30d49b9285c033d02bcff2d93d24300c66f589c11372ba77582c8aefd85dfc307d86baa377f0d1b11da49e3a281fb3763b330c9a278e03d4853e879a64176c88ecde9db6ea36f4b05e8fa9b597f6a13a538ba996cfe3da83429ac08bc91ac57c9d0099398dc760de3bdbf1f2d45af38361fe0", 0x81}, {&(0x7f0000000400)="63add0c1c3c85d", 0x7}], 0x2)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r4=>r0, {0x2}}, './file0\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r5=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'})
fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x8, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x101)
setregid(0xffffffffffffffff, 0xee00)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x20044010)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f00000006c0), &(0x7f0000000700)=0x40)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)

03:53:44 executing program 2:
r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x3, 0x1, 0x3f, 0x0, 0x920, 0x20, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000000), 0xe}, 0x4a0c0, 0x4, 0x2, 0x5, 0x4, 0x9, 0x1, 0x0, 0xffffff01, 0x0, 0x76}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'veth1_to_hsr\x00', {0x2, 0x0, @local}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r2, {0x100}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r2, {0x5}}, './file0\x00'})
ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x6)
ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000180)=""/165)
r5 = openat$incfs(r3, &(0x7f0000000240)='.pending_reads\x00', 0x101040, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000000280))
r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000300))
mount_setattr(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x100, &(0x7f0000000340)={0x6, 0x2, 0x80000, {r6}}, 0x20)
r7 = syz_open_dev$vcsa(&(0x7f0000000380), 0x3ff, 0xffbb02d60309c843)
ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f0000000440)={0xd67334f224b382b2, 0x80000001, 0x68, &(0x7f00000003c0)=""/104})
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/kexec_crash_loaded', 0x200, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x6)
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xcc, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x94}, 0x0)
fcntl$addseals(r2, 0x409, 0x8)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000740)={0x0, 0x9, 0x2})

03:53:44 executing program 6:
set_mempolicy(0x8000, &(0x7f0000000000)=0x9, 0xf3e)
r0 = socket$netlink(0x10, 0x3, 0x15)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"bfbfe87accd98f25240dcfd35fd4681d", 0x0, <r1=>0x0, {0x6, 0x40}, {0x5, 0x8}, 0x4, [0x100000000, 0x4, 0x4, 0x1ff, 0xf73c, 0x4a76, 0x3, 0x10000, 0x80000001, 0xf7, 0x3, 0xe023, 0xffff, 0x6, 0x2]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"40194baa870045d36e3560a4fa6c16e8", r1, 0x0, {0x80, 0x4}, {0x400, 0x3}, 0xd82, [0xd4, 0x81, 0x9, 0x39a, 0x4, 0x8, 0x400, 0x1, 0x5, 0x10000000, 0x400, 0xfffffffffffff070, 0x2f, 0x4, 0x1, 0x3]})
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x14000, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x411029}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf4, r3, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x62}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bbfef1d9c647deae62195a02bba0a6035ce58fde5b60aa34"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42f003433235ce428fa3ab704a19aa551b69027841839952"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r4 = dup3(r0, r2, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048044}, 0x4048081)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r7=>r0}, './file0\x00'})
r8 = syz_open_dev$vcsn(&(0x7f00000006c0), 0x7, 0x1)
ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000000700)=""/98)
ioctl$EVIOCGPROP(r7, 0x80404509, &(0x7f0000000780)=""/85)
dup3(r4, r8, 0x0)
syz_open_dev$vcsa(&(0x7f0000000800), 0x8, 0x8000)
io_cancel(0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, &(0x7f0000000880)="e9f54479322271526f5d734d6188f68c862e50a2c048a69be7553c3de1c23d334b49396bff898416041f55f213d1e97db2b04bdcccf42e163aede0b5cf2f63335e67d21600e11a4f90d7abd620687cf46d9e6265c855679cce34588683cc953f18f89f405b6cc97baabee1fa67720c0d31aae1a8b38ea0e2", 0x78}, &(0x7f0000000940))

[  109.434358] audit: type=1400 audit(1748490824.994:7): avc:  denied  { execmem } for  pid=276 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:53:45 executing program 5:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00')
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pcie_aspm', 0x200500, 0x1)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x3)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100)=0x14, 0x4)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
flock(r1, 0x0)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x7c}}, 0x800)
r4 = socket(0x0, 0xa, 0x627)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4a}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1f, 0x69}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400c1)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x7c142, 0x0)
getresuid(&(0x7f0000000680)=<r7=>0x0, &(0x7f00000006c0), &(0x7f0000000700))
getresgid(&(0x7f0000000740), &(0x7f0000000780)=<r8=>0x0, &(0x7f00000007c0))
sendmmsg$unix(r6, &(0x7f0000000840)=[{{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000540)="2766cec397ab349929bed20b9c94353d310ddd1937b521f9df8cce28af1c4a86eed72443c6ad03cffcb239e6d94fd76871ec8e8f50d4fe4ca09bbb0861f2f94e885ef86709c65f7b81d675e6f871c4c337070ee767a301ef64eb9d28fa3b59791a8c0458711f7aee85509fd6e032134b22d0eb6759e0e996099912f42f2c8349a45d3dbcd0a246727d6927d40c7a1a0eb90674b195867ee391e9880bf1534869dfe17792473868144903dab1a8829ab5013b8a59ec223320d8c5f21619536d106a6eba3aaa8af70cfef27dca3aa850d91c6f2bc5c5dabb886625c6c1763dad37bcf70de26aef3baaffe01ad57145cd", 0xef}], 0x1, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, r8}}}, @rights={{0x18, 0x1, 0x1, [r4, r0]}}], 0x38, 0x20c0}}], 0x1, 0x800)
write$char_usb(r1, &(0x7f0000000880)="1c1154e1dc7965532988ee", 0xb)
r9 = syz_open_dev$evdev(&(0x7f00000008c0), 0x2, 0x80082)
ioctl$EVIOCSABS3F(r9, 0x401845ff, &(0x7f0000000900)={0xedf, 0x8, 0x2, 0x8, 0x8, 0x8})
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000940)={0xc9, [0x9, 0x1a], 0x54}, 0x10)

03:53:45 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xad7}}, './file0\x00'})
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040))
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x1)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000140)=0x200)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'})
read(r1, &(0x7f0000000200)=""/208, 0xd0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x402)
fcntl$notify(r3, 0x402, 0x40000000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000340))
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000380)='ip6gre0\x00')
r5 = dup3(r3, r2, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0/file0\x00'})
r6 = epoll_create1(0x80000)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000400))
ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000440)=[0x9f0, 0x6])
fcntl$notify(0xffffffffffffffff, 0x402, 0x4)

[  110.772808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  110.781430] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  110.784508] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  110.793105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  110.801239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  110.838420] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  110.842455] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  110.844837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  110.851879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  110.855465] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.026083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  111.054410] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  111.087469] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  111.119915] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  111.124227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  111.128185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  111.151182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  111.154075] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  111.159639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  111.190606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  111.195339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  111.198513] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  111.207537] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  111.213252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  111.227413] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  111.229243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  111.235387] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  111.240148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  111.244232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  111.251251] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  111.256707] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  111.260551] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  111.264586] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  111.276474] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  111.284822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  111.289712] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  111.296514] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  111.300466] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  111.316583] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  111.354749] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  112.853722] Bluetooth: hci0: command tx timeout
[  112.915413] Bluetooth: hci1: command tx timeout
[  113.234506] Bluetooth: hci3: command tx timeout
[  113.300488] Bluetooth: hci2: command tx timeout
[  113.426210] Bluetooth: hci7: command tx timeout
[  113.427522] Bluetooth: hci5: command tx timeout
[  113.428540] Bluetooth: hci4: command tx timeout
[  113.490202] Bluetooth: hci6: command tx timeout
[  114.898301] Bluetooth: hci0: command tx timeout
[  114.962223] Bluetooth: hci1: command tx timeout
[  115.282236] Bluetooth: hci3: command tx timeout
[  115.346578] Bluetooth: hci2: command tx timeout
[  115.474469] Bluetooth: hci5: command tx timeout
[  115.474906] Bluetooth: hci4: command tx timeout
[  115.475465] Bluetooth: hci7: command tx timeout
[  115.538371] Bluetooth: hci6: command tx timeout
[  116.946044] Bluetooth: hci0: command tx timeout
[  117.011784] Bluetooth: hci1: command tx timeout
[  117.330027] Bluetooth: hci3: command tx timeout
[  117.394092] Bluetooth: hci2: command tx timeout
[  117.522060] Bluetooth: hci4: command tx timeout
[  117.522505] Bluetooth: hci7: command tx timeout
[  117.522918] Bluetooth: hci5: command tx timeout
[  117.586041] Bluetooth: hci6: command tx timeout
[  118.994244] Bluetooth: hci0: command tx timeout
[  119.058029] Bluetooth: hci1: command tx timeout
[  119.378151] Bluetooth: hci3: command tx timeout
[  119.442200] Bluetooth: hci2: command tx timeout
[  119.570069] Bluetooth: hci5: command tx timeout
[  119.570554] Bluetooth: hci7: command tx timeout
[  119.571787] Bluetooth: hci4: command tx timeout
[  119.634260] Bluetooth: hci6: command tx timeout
[  173.281052] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  173.287341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  173.288998] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  173.298645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  173.300744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  173.336593] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  173.340238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  173.342269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  173.350881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  173.354634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  173.420000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  173.425112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  173.427547] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  173.439866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  173.448924] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  173.577535] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  173.610594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  173.613888] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  173.631298] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  173.638867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  173.739913] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  173.742696] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  173.746343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  173.747365] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  173.750223] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  173.751238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  173.759920] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  173.761731] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  173.764936] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  173.766752] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  173.779374] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  173.794172] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  173.815374] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  173.822585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  173.831427] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  173.891927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  173.910374] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  173.946549] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  173.977802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  173.990661] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  175.378216] Bluetooth: hci0: command tx timeout
[  175.442086] Bluetooth: hci1: command tx timeout
[  175.506053] Bluetooth: hci2: command tx timeout
[  175.762191] Bluetooth: hci3: command tx timeout
[  175.890107] Bluetooth: hci4: command tx timeout
[  175.890129] Bluetooth: hci5: command tx timeout
[  176.146101] Bluetooth: hci6: command tx timeout
[  176.274333] Bluetooth: hci7: command tx timeout
[  177.426036] Bluetooth: hci0: command tx timeout
[  177.490219] Bluetooth: hci1: command tx timeout
[  177.554188] Bluetooth: hci2: command tx timeout
[  177.810198] Bluetooth: hci3: command tx timeout
[  177.938088] Bluetooth: hci5: command tx timeout
[  177.939028] Bluetooth: hci4: command tx timeout
[  178.194609] Bluetooth: hci6: command tx timeout
[  178.324019] Bluetooth: hci7: command tx timeout
[  179.474744] Bluetooth: hci0: command tx timeout
[  179.539353] Bluetooth: hci1: command tx timeout
[  179.604376] Bluetooth: hci2: command tx timeout
[  179.858108] Bluetooth: hci3: command tx timeout
[  179.986194] Bluetooth: hci4: command tx timeout
[  179.987034] Bluetooth: hci5: command tx timeout
[  180.242177] Bluetooth: hci6: command tx timeout
[  180.370543] Bluetooth: hci7: command tx timeout
[  181.522032] Bluetooth: hci0: command tx timeout
[  181.586120] Bluetooth: hci1: command tx timeout
[  181.650245] Bluetooth: hci2: command tx timeout
[  181.906059] Bluetooth: hci3: command tx timeout
[  182.035022] Bluetooth: hci5: command tx timeout
[  182.035139] Bluetooth: hci4: command tx timeout
[  182.291055] Bluetooth: hci6: command tx timeout
[  182.418092] Bluetooth: hci7: command tx timeout
[  235.625272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  235.627305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  235.628541] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  235.636424] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  235.645252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  235.747394] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  235.750359] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  235.752298] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  235.770518] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  235.774031] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  235.852786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  235.856426] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  235.860368] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  235.866428] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  235.878390] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  235.951616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  235.958668] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  235.959863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  235.967246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  235.968229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  235.974814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  236.000378] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  236.001041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  236.005227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  236.055094] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  236.063599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  236.106627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  236.139436] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  236.139601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  236.150593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  236.155719] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  236.168278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  236.175841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  236.193391] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  236.201482] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  236.203529] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  236.235613] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  236.305274] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  236.328135] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  236.352615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  237.715681] Bluetooth: hci0: command tx timeout
[  237.843197] Bluetooth: hci1: command tx timeout
[  237.970500] Bluetooth: hci2: command tx timeout
[  238.099179] Bluetooth: hci4: command tx timeout
[  238.226037] Bluetooth: hci6: command tx timeout
[  238.227208] Bluetooth: hci3: command tx timeout
[  238.354057] Bluetooth: hci5: command tx timeout
[  238.483133] Bluetooth: hci7: command tx timeout
[  239.764102] Bluetooth: hci0: command tx timeout
[  239.890035] Bluetooth: hci1: command tx timeout
[  240.019213] Bluetooth: hci2: command tx timeout
[  240.148988] Bluetooth: hci4: command tx timeout
[  240.276003] Bluetooth: hci3: command tx timeout
[  240.276356] Bluetooth: hci6: command tx timeout
[  240.404003] Bluetooth: hci5: command tx timeout
[  240.532023] Bluetooth: hci7: command tx timeout
[  241.811347] Bluetooth: hci0: command tx timeout
[  241.938084] Bluetooth: hci1: command tx timeout
[  242.069242] Bluetooth: hci2: command tx timeout
[  242.195042] Bluetooth: hci4: command tx timeout
[  242.322242] Bluetooth: hci3: command tx timeout
[  242.322326] Bluetooth: hci6: command tx timeout
[  242.450046] Bluetooth: hci5: command tx timeout
[  242.578136] Bluetooth: hci7: command tx timeout
[  243.858036] Bluetooth: hci0: command tx timeout
[  243.986355] Bluetooth: hci1: command tx timeout
[  244.114061] Bluetooth: hci2: command tx timeout
[  244.242119] Bluetooth: hci4: command tx timeout
[  244.371048] Bluetooth: hci3: command tx timeout
[  244.371500] Bluetooth: hci6: command tx timeout
[  244.499025] Bluetooth: hci5: command tx timeout
[  244.626205] Bluetooth: hci7: command tx timeout
[  298.024255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  298.030660] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  298.036636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  298.042871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  298.051764] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  298.221351] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  298.225060] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  298.228327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  298.236103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  298.240607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  298.418855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  298.435563] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  298.444068] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  298.461495] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  298.469491] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  298.476187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  298.489429] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  298.492006] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  298.500766] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  298.510614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  298.573652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  298.579636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  298.590911] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  298.598578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  298.603252] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  298.608069] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  298.616817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  298.622921] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  298.631870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  298.637833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  298.694196] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  298.720622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  298.724490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  298.732034] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  298.742435] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  298.767594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  298.774856] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  298.790481] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  298.811437] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  298.852267] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  300.115103] Bluetooth: hci0: command tx timeout
[  300.306095] Bluetooth: hci1: command tx timeout
[  300.562083] Bluetooth: hci3: command tx timeout
[  300.690054] Bluetooth: hci2: command tx timeout
[  300.754046] Bluetooth: hci4: command tx timeout
[  300.754736] Bluetooth: hci5: command tx timeout
[  300.882036] Bluetooth: hci6: command tx timeout
[  300.946786] Bluetooth: hci7: command tx timeout
[  302.162057] Bluetooth: hci0: command tx timeout
[  302.355201] Bluetooth: hci1: command tx timeout
[  302.611005] Bluetooth: hci3: command tx timeout
[  302.739225] Bluetooth: hci2: command tx timeout
[  302.804033] Bluetooth: hci5: command tx timeout
[  302.804528] Bluetooth: hci4: command tx timeout
[  302.931916] Bluetooth: hci6: command tx timeout
[  302.994165] Bluetooth: hci7: command tx timeout
[  304.213021] Bluetooth: hci0: command tx timeout
[  304.402277] Bluetooth: hci1: command tx timeout
[  304.658008] Bluetooth: hci3: command tx timeout
[  304.786193] Bluetooth: hci2: command tx timeout
[  304.850229] Bluetooth: hci4: command tx timeout
[  304.850701] Bluetooth: hci5: command tx timeout
[  304.979200] Bluetooth: hci6: command tx timeout
[  305.043408] Bluetooth: hci7: command tx timeout
[  306.258042] Bluetooth: hci0: command tx timeout
[  306.450006] Bluetooth: hci1: command tx timeout
[  306.707272] Bluetooth: hci3: command tx timeout
[  306.835035] Bluetooth: hci2: command tx timeout
[  306.899267] Bluetooth: hci5: command tx timeout
[  306.899734] Bluetooth: hci4: command tx timeout
[  307.027273] Bluetooth: hci6: command tx timeout
[  307.090234] Bluetooth: hci7: command tx timeout
[  360.548787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  360.556659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  360.559513] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  360.568560] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  360.574511] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  360.698846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  360.706638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  360.710182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  360.724703] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  360.731271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  360.807299] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  360.829523] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  360.833876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  360.859554] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  360.870475] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  360.973104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  360.979418] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  360.998687] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  361.002265] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  361.007460] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  361.011111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  361.017454] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  361.020310] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  361.030232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  361.030439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  361.054617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.060606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  361.062864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  361.078050] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  361.092425] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  361.168831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  361.180564] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  361.186891] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  361.213381] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  361.231527] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  361.264608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  361.338340] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  361.351566] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  361.358437] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  361.420166] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  362.642111] Bluetooth: hci0: command tx timeout
[  362.771001] Bluetooth: hci1: command tx timeout
[  362.963173] Bluetooth: hci2: command tx timeout
[  363.155075] Bluetooth: hci4: command tx timeout
[  363.218217] Bluetooth: hci3: command tx timeout
[  363.282032] Bluetooth: hci5: command tx timeout
[  363.474266] Bluetooth: hci7: command tx timeout
[  363.538025] Bluetooth: hci6: command tx timeout
[  364.691015] Bluetooth: hci0: command tx timeout
[  364.818078] Bluetooth: hci1: command tx timeout
[  365.010347] Bluetooth: hci2: command tx timeout
[  365.202125] Bluetooth: hci4: command tx timeout
[  365.267981] Bluetooth: hci3: command tx timeout
[  365.330039] Bluetooth: hci5: command tx timeout
[  365.523777] Bluetooth: hci7: command tx timeout
[  365.586089] Bluetooth: hci6: command tx timeout
[  366.738196] Bluetooth: hci0: command tx timeout
[  366.866258] Bluetooth: hci1: command tx timeout
[  367.058624] Bluetooth: hci2: command tx timeout
[  367.250059] Bluetooth: hci4: command tx timeout
[  367.315421] Bluetooth: hci3: command tx timeout
[  367.378600] Bluetooth: hci5: command tx timeout
[  367.570236] Bluetooth: hci7: command tx timeout
[  367.634151] Bluetooth: hci6: command tx timeout
[  368.787006] Bluetooth: hci0: command tx timeout
[  368.914086] Bluetooth: hci1: command tx timeout
[  369.106199] Bluetooth: hci2: command tx timeout
[  369.298192] Bluetooth: hci4: command tx timeout
[  369.362349] Bluetooth: hci3: command tx timeout
[  369.426051] Bluetooth: hci5: command tx timeout
[  369.618346] Bluetooth: hci7: command tx timeout
[  369.682048] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
03:58:47  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff888035c13700 RCX=0000000000000200 RDX=0000000000000008
RSI=ffff888035c14180 RDI=ffff888035c13700 RBP=ffff888035c14158 RSP=ffff888029576e20
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000
R12=ffff888035c14180 R13=025e5b5f04b82380 R14=0000000000000000 R15=0000000000000001
RIP=ffffffff815191ad RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9fd9c9b1f0 CR3=000000000e735000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff88800ec71280 RCX=ffffffff8151f773 RDX=ffffed1001d8e251
RSI=0000000000000004 RDI=ffff88800ec71280 RBP=ffff88800ec71280 RSP=ffff8880171e7ba0
R8 =0000000000000000 R9 =ffffed1001d8e250 R10=ffff88800ec71283 R11=0000000000000001
R12=1ffff11002e3cf7a R13=ffff88800ec71280 R14=dffffc0000000000 R15=0000000000000000
RIP=ffffffff8151f773 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f71eadee028 CR3=000000002f8d7000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000