Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:7040' (ECDSA) to the list of known hosts.
2025/05/31 15:11:46 fuzzer started
2025/05/31 15:11:47 dialing manager at localhost:34361
syzkaller login: [   94.349721] cgroup: Unknown subsys name 'net'
[   94.517876] cgroup: Unknown subsys name 'cpuset'
[   94.551575] cgroup: Unknown subsys name 'rlimit'
2025/05/31 15:12:02 syscalls: 2214
2025/05/31 15:12:02 code coverage: enabled
2025/05/31 15:12:02 comparison tracing: enabled
2025/05/31 15:12:02 extra coverage: enabled
2025/05/31 15:12:02 setuid sandbox: enabled
2025/05/31 15:12:02 namespace sandbox: enabled
2025/05/31 15:12:02 Android sandbox: enabled
2025/05/31 15:12:02 fault injection: enabled
2025/05/31 15:12:02 leak checking: enabled
2025/05/31 15:12:02 net packet injection: enabled
2025/05/31 15:12:02 net device setup: enabled
2025/05/31 15:12:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/31 15:12:02 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/31 15:12:02 USB emulation: enabled
2025/05/31 15:12:02 hci packet injection: enabled
2025/05/31 15:12:02 wifi device emulation: enabled
2025/05/31 15:12:02 802.15.4 emulation: enabled
2025/05/31 15:12:02 fetching corpus: 0, signal 0/0 (executing program)
2025/05/31 15:12:03 starting 8 fuzzer processes
15:12:03 executing program 0:
r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x24c, r0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x1fc, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a8a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x361c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8fdd5c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76e7}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x54fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f77}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb994}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc652}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d66ed2a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1afc9ee6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a0ac1e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x855e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61cd0ff7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd8a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa415}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x410c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f590953}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x963c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf138}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f3a}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd5a7d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x919d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x202b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa6d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37556e4b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8770}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd664}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2464}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b577aef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2274f4df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9685}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f39fedb}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78ea8ca9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53e9b0eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbcd5c27}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd55d}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a87}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3386430}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d242e97}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2241a0ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeee6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe607}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d4991fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x104d7c07}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5086896f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65541ff9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5df57d73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad76}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x35d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40bb974}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c1ac575}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6420f81c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfde3}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf3ef}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x34, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d97394a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e1d16cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8fbd}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb087}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a4a4fa1}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004040)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008008)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x58}}, 0x40840)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000880)
sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x70}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44104}, 0x0)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r2)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0xa0400404}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8830}, 0x9)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x1}}, './file0\x00'})
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x1, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000844)
r5 = signalfd(r4, &(0x7f0000001240)={[0x2]}, 0x8)
sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x6c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8880}, 0x20048040)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x58, r3, 0xe20, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040804}, 0x4)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000010)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x6c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:var_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2400c081}, 0x4000080)

15:12:03 executing program 1:
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'rose0\x00', {0x7}, 0x200})
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)=0x4)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000200)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', <r1=>0x0, 0x0, 0x20, 0x1, 0xfffffffb, 0x0, @remote, @private2, 0x700, 0x8, 0x4, 0x9}})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl2\x00', <r3=>r1, 0x29, 0xff, 0x20, 0xfff, 0x8, @loopback, @loopback, 0x700, 0x731, 0x800, 0x3}})
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x38, 0x5, "dca2315a5ca654200e9f5f58954902b1510668a265af46de8e6323e363276f108b42a9e7eab8dfff5fd34a6db1832dbe7d1ea1b7"}]}, @ETHTOOL_A_WOL_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x40040)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r4=>r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x104, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000850)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000680)=0x5, 0x4)
r5 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x6, 0x4040)
ppoll(&(0x7f0000000700)=[{0xffffffffffffffff, 0x1510}, {r4, 0x200}, {r4, 0x440}, {r0, 0x23}, {0xffffffffffffffff, 0x1110}, {r5, 0xa100}], 0x6, &(0x7f0000000740), &(0x7f0000000780)={[0x3]}, 0x8)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000007c0)=0x1, 0x4)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000800))
ioctl$RTC_AIE_ON(r0, 0x7001)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000840), 0x200, 0x0)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000880)={@multicast1, @rand_addr=0x64010102, 0x0, 0x1, [@remote]}, 0x14)
rt_sigreturn()

15:12:03 executing program 2:
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1fc, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfda8, 0x74}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7fff}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '\\'}], @NL80211_ATTR_IE={0xfc, 0x2a, [@tim={0x5, 0xf6, {0x4, 0x57, 0xfe, "56d826971aacf3aa182e8ed4a5c817ad1dcb08da679919a0cf64f9eebbb17fc253e610ef2996b97c244642ae62d53aac81112e50a2514b723a98ffca5b53a9668ff12887a3332a73ec06d34c40e2ef30042541829c708f0b1a87070c551630f72db61f89d196726f0ba021f9da71aabd95be45b4df190470daf3b60abdeab1a4f7483c34a628cf8f06818754cd8641f25f1326ccd6eeb2665ae6456b1d9388f8ae269c28a330256de9498548ebf90d69eb1280e2e71b664e2eab82adcdce147d9b7efb0b97a9b7121ab3a2fcfeefa1e3bae9a7b79c5c85f2936f129f1bf7c6d3e31a0ca2591c857aa822946b34401067e89fec"}}]}, @NL80211_ATTR_IE={0xce, 0x2a, [@mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0x7, 0x4}}, @tim={0x5, 0xaf, {0x5, 0xcc, 0x40, "44a517966ac2168f64bd16c4ca55bdae06c91e5b47ab7bacef0a5a5a82fdf25a92b29d8148baf26e306727a2ef5bde40b289d7c525fa0943af393c3929e77288248c268a58da9dd1e2040209c9234d3bb420d8421d6d41b20c33a71acd1b3aa4f31f7225bcf865e4c3ce2fc8de92837ecdd8f91d32f660691929003f0d859f4ab6e49060b468d41968d746cfdfb6a2b8d17634e2b656440351e2896cab0a7a670f1891365729c6d1e3f092d4"}}, @dsss={0x3, 0x1, 0xb6}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x10}, 0x2004c800)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000002c0))
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000300)=0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000340)=""/182)
ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000400))
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000000440)={@id={0x2, 0x0, @b}})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000004c0)=0x4)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2)
ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000500))
fsetxattr(r1, &(0x7f0000000540)=@random={'osx.', '}@:+&:\'..\x00'}, &(0x7f0000000580)='\x91*\xe5\x10\xa4Xr:\x83\x9a\x9f\xadp\x158\xac', 0x10, 0x3)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x88, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4801)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000740)={0x5, 0x6, 0x1, 0x81})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780))
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000007c0)='.pending_reads\x00', 0xe000, 0x4)
ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000800)={0xe2, 0x8b, 0x0, 0x3f, 0xbfe})
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)=<r4=>0x0)
fcntl$setownex(r3, 0xf, &(0x7f0000000880)={0x3, r4})
write$binfmt_script(r0, &(0x7f00000008c0)={'#! ', './file0', [{0x20, '}'}, {0x20, '.pending_reads\x00'}, {0x20, '/'}, {0x20, '\x03\x03\x03\x03\x03\x03'}], 0xa, "50d97488763352b534db961c634e93adf4f305898bfce7bb8a8227eef6795b67cd7b197ea0568a717a99b5bd22ef1bae1ad9c4193f59bcfed68c1ba14662ad7f23ba69278c2871297081f487414ac2ad39f8ea1a7850c6a02b6e4397ca93cf511a05987287c2dc6136bfe2ee1253cba33a0d780f75061f8bdd5ed3"}, 0xa1)

15:12:03 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x5}}, './file0\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'sit0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "66b32392f75d84d3c8310ecc9b9c5513f831c56d197c4b85"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec8a1d7077f19774daf81badd48d9bcdb2882e59ebcfc59e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x104}, 0x1, 0x0, 0x0, 0x8080}, 0x80)
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000240)={0xd, 0x6})
setxattr(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)=@random={'trusted.', '$*,${+\x00'}, &(0x7f0000000300)='\x14\x00', 0x2, 0x2)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xad6b1f23512f4c4b}, 0x440c4)
r1 = open$dir(&(0x7f0000000440)='./file0/file0\x00', 0x400100, 0x100)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r2=>r1}, './file0/file0\x00'})
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000004c0)=0x8)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000005c0)={0x1, 0xfffffffffffffff8, 0x8f, &(0x7f0000000500)=""/143})
syz_open_dev$tty1(0xc, 0x4, 0x2)
accept4(r0, &(0x7f0000000600)=@can, &(0x7f0000000680)=0x80, 0x800)
recvfrom$unix(0xffffffffffffffff, &(0x7f00000006c0)=""/33, 0x21, 0x10000, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2200180}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa4, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x24000050)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x1)
ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000900)=0x1000)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0/file0\x00', &(0x7f0000000980)={0x0, 0x2c, 0x18}, 0x18)
ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000009c0)={0x1, 0x609, @status={[0x6, 0x6, 0x9, 0x3, 0x2, 0x100000000]}, [0x7, 0xfff, 0x9, 0x2, 0x0, 0x20, 0x6, 0x10000000, 0x3, 0x5, 0x58c52078, 0x4, 0x4f1, 0x3, 0x5, 0x1, 0x3, 0x1, 0x6, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x5, 0x4, 0x1, 0x5, 0x3, 0x40, 0x3, 0xbb6c, 0x6, 0x8, 0x2, 0x2, 0x80000000, 0x80000001, 0x5, 0x400, 0x48, 0x77e8, 0x2, 0x8, 0x10000, 0x8001, 0x5, 0x9, 0x1000, 0xffffffffffff8001, 0x7fff, 0x400, 0x8e2, 0x8, 0x1, 0x1, 0x7f, 0x1f, 0xcce7, 0x80000000, 0x5, 0x0, 0x7, 0x9]})
mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x2, 0x100010, r0, 0x10000000)
faccessat(r2, &(0x7f0000001400)='./file0/file0\x00', 0x10)

15:12:03 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000040)=""/225, 0xe1}, {&(0x7f0000000140)=""/61, 0x3d}, {&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000000240)=""/25, 0x19}], 0x5, &(0x7f0000000300)=""/156, 0x9c}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000400))
r1 = creat(&(0x7f0000000440)='./file0\x00', 0x1)
r2 = open(&(0x7f0000000480)='./file0\x00', 0x20000, 0x14d)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000500)={0xffffffff, 0x0, &(0x7f00000004c0)=[r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, r2, r0]}, 0x8)
setxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x8, 0x2)
syz_genetlink_get_family_id$smc(&(0x7f0000000600), r0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x33}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000040}, 0x4008001)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r4, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000f1}, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r1)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xd}, 0x90)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept4(r6, &(0x7f0000000a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000a80)=0x80, 0x800)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, <r7=>r2}, './file0\x00'})
setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000b00)=@gcm_128={{0x304}, "a608f5b7cc1f3a60", "4536eabfd1e1b97b79aed5942144a639", "c9288615", "9f52010b26b339af"}, 0x28)
ioctl$sock_proto_private(r2, 0x89e8, &(0x7f0000000b40)="e4cd2c7b12faec8dea19c6eb7f791b6cbebd3a4c169ed72ad831769c6fad08f14ad04ade4d60faaa26ff86bad21748af387ccd672479cd9309b105a4d4dda5e8541f95c947527a549a2ee65796e3f750a56e")
mknod$loop(&(0x7f0000000bc0)='./file0\x00', 0x80, 0x0)

15:12:03 executing program 5:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080))
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000000c0))
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000140)={r2})
r3 = fcntl$dupfd(r0, 0x0, r1)
ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000680)=""/100)
r4 = open_tree(r1, &(0x7f0000000700)='./file0\x00', 0x0)
ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000740)={0x72, 0x17, 0x40, 0x5, "6a389c739f9b6cf5bb7d9e2a163c4c6e742458f2c000c0a047366aa52f0ea3b8"})
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x400000, 0x0)
ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000bc0)={0x124, 0x19, &(0x7f00000007c0)})
fsetxattr(r0, &(0x7f0000000c00)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000c40)='/dev/vcsu\x00', 0xa, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000c80)={{r4}, 0x0, 0x1a, @unused=[0x0, 0x1, 0x100000000, 0x1], @subvolid})
lremovexattr(&(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)=@known='com.apple.system.Security\x00')
ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000001d00))
setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000001d40)={0x2, "71ba1f"}, 0x6)
r7 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001d80)={{0x1, 0x1, 0x18, r7}, './file0\x00'})

15:12:03 executing program 6:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x1000)=nil)
mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80000, &(0x7f00000000c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@msize={'msize', 0x3d, 0x7}}], [{@smackfsroot={'smackfsroot', 0x3d, '+({:,):#'}}, {@smackfstransmute}, {@measure}, {@appraise}, {@smackfshat={'smackfshat', 0x3d, '/&('}}, {@euid_eq}, {@obj_type={'obj_type', 0x3d, '@!'}}]}})
newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0}, 0x6000)
lchown(&(0x7f00000001c0)='./file0\x00', 0xee01, r1)
readlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/37, 0x25)
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
chown(&(0x7f0000000340)='./file0\x00', r0, r3)
mknod(&(0x7f0000000400)='./file0\x00', 0x200, 0x1)
accept(0xffffffffffffffff, &(0x7f0000000440)=@l2tp={0x2, 0x0, @empty}, &(0x7f00000004c0)=0x80)
r4 = open$dir(&(0x7f0000001940)='./file0\x00', 0x100, 0x82)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001980)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'})
mount$cgroup(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x40, &(0x7f0000001a40)={[{}, {@subsystem='freezer'}, {}], [{@context={'context', 0x3d, 'staff_u'}}, {@permit_directio}, {@uid_eq={'uid', 0x3d, r0}}, {@permit_directio}, {@uid_gt={'uid>', r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/&('}}, {@subj_role={'subj_role', 0x3d, ':)%.&@*!@,]:$),\x98'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'dfltgid'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/module/eeepc_laptop', 0x4c0, 0x52)
mknodat(r5, &(0x7f0000001b80)='./file0\x00', 0x1000, 0xffff)
socket$unix(0x1, 0x1, 0x0)
mount$9p_unix(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40), 0x204080, &(0x7f0000001c80)={'trans=unix,', {[{@access_uid={'access', 0x3d, r2}}, {@version_L}, {@loose}, {@cache_none}, {@version_9p2000}, {@fscache}, {@cache_mmap}, {@aname={'aname', 0x3d, 'G'}}, {@access_user}], [{@euid_lt={'euid<', r2}}, {@smackfsdef}, {@fowner_lt={'fowner<', r0}}, {@appraise}, {@subj_type={'subj_type', 0x3d, 'freezer'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'permit_directio'}}, {@smackfsroot={'smackfsroot', 0x3d, 'measure'}}, {@appraise_type}]}})
r6 = syz_open_dev$mouse(&(0x7f0000001dc0), 0x100, 0x40000)
fchownat(r6, &(0x7f0000001e00)='./file0\x00', 0xffffffffffffffff, r3, 0x1000)
getxattr(&(0x7f0000001e40)='./file0\x00', &(0x7f0000001e80)=@known='security.apparmor\x00', &(0x7f0000001ec0)=""/151, 0x97)
accept(r6, &(0x7f0000001f80)=@nfc, &(0x7f0000002000)=0x80)

[  110.647691] audit: type=1400 audit(1748704323.677:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
15:12:03 executing program 7:
lseek(0xffffffffffffffff, 0x0, 0x1)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x2)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1, 0x7, 0x8000, 0xfff, 0x18, "bf31f9695972bf9f5079f282f1505b237de931"})
r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x400001, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f00000000c0)={0x899, 0x10001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f000000cf40))
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f000000d040)={&(0x7f000000cf80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f000000d000)={&(0x7f000000cfc0)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7}, @val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x3a}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8005}, 0x41)
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x80000001)
ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f000000d0c0)={0x4, &(0x7f000000d080)=[{0x6}, {0x87, 0x800}, {0x200, 0x8}, {0x5, 0x3}]})
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$VT_GETMODE(r4, 0x5601, &(0x7f000000d100))
ioctl$TIOCSBRK(r4, 0x5427)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f000000d140)={0x7f, 0xff, 0x37, 0x2, 0x3, 0xfff8})
r5 = accept(r2, &(0x7f000000d180)=@phonet, &(0x7f000000d200)=0x80)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f000000d240)={0x3, {{0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200}}, 0x0, 0x5, [{{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x5}}, {{0xa, 0x4e22, 0x1, @private0, 0xb447}}, {{0xa, 0x4e21, 0x9, @mcast2, 0xfffff001}}, {{0xa, 0x4e24, 0x8, @local, 0x1000}}, {{0xa, 0x4e22, 0xc5, @private0, 0x7eaa1383}}]}, 0x310)
fcntl$setstatus(r1, 0x4, 0x0)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f000000d580), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f000000d5c0)="94a38ee4d390422f051e3ea302e8cf3784cf2508c49225025a8729db7fa0c96e0d87cf49d5766067e3964541010ca64dae0d147d7af1c866da686ae5107358112d20a110d401b5301cf1702e6d2a6868431026a893dbe4ec58b6812adf91e814724615556fa749fb9beaf7dcb71e39430ae1ad878a59")

[  112.238812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.248170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.251813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.261084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.266899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.370048] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.378774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.382011] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.384728] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.392937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.397070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.405344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.433689] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.435357] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.442620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.449367] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.464277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.478303] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.483980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.500508] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  112.511688] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  112.514279] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  112.516861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  112.518648] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  112.520208] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  112.522777] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  112.526458] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  112.532533] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  112.534576] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  112.537809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  112.542812] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  112.544447] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.546821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  112.556015] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.558891] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.577858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.583438] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  112.590509] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.600505] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  112.609881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  114.322397] Bluetooth: hci0: command tx timeout
[  114.513689] Bluetooth: hci1: command tx timeout
[  114.514309] Bluetooth: hci2: command tx timeout
[  114.577493] Bluetooth: hci7: command tx timeout
[  114.641351] Bluetooth: hci6: command tx timeout
[  114.641369] Bluetooth: hci5: command tx timeout
[  114.706575] Bluetooth: hci4: command tx timeout
[  114.706609] Bluetooth: hci3: command tx timeout
[  116.370259] Bluetooth: hci0: command tx timeout
[  116.561308] Bluetooth: hci1: command tx timeout
[  116.562510] Bluetooth: hci2: command tx timeout
[  116.625502] Bluetooth: hci7: command tx timeout
[  116.689487] Bluetooth: hci5: command tx timeout
[  116.689524] Bluetooth: hci6: command tx timeout
[  116.753318] Bluetooth: hci4: command tx timeout
[  116.753788] Bluetooth: hci3: command tx timeout
[  118.418332] Bluetooth: hci0: command tx timeout
[  118.609661] Bluetooth: hci2: command tx timeout
[  118.609760] Bluetooth: hci1: command tx timeout
[  118.674448] Bluetooth: hci7: command tx timeout
[  118.737557] Bluetooth: hci6: command tx timeout
[  118.737711] Bluetooth: hci5: command tx timeout
[  118.801335] Bluetooth: hci3: command tx timeout
[  118.801830] Bluetooth: hci4: command tx timeout
[  120.466591] Bluetooth: hci0: command tx timeout
[  120.658279] Bluetooth: hci2: command tx timeout
[  120.658361] Bluetooth: hci1: command tx timeout
[  120.722858] Bluetooth: hci7: command tx timeout
[  120.785556] Bluetooth: hci6: command tx timeout
[  120.786576] Bluetooth: hci5: command tx timeout
[  120.851260] Bluetooth: hci3: command tx timeout
[  120.851338] Bluetooth: hci4: command tx timeout
[  174.558943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  174.563698] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  174.570701] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  174.578821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  174.587734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  174.707449] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  174.712511] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  174.717640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  174.726533] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  174.732323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  174.766465] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  174.769524] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  174.772456] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  174.796862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  174.803054] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  174.805725] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  174.809512] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  174.828557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  174.829915] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  174.831920] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  174.836159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  174.848637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  174.854146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  174.866714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  174.876634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  174.889017] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  174.902753] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  174.916625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  174.948766] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  174.956701] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  175.016341] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  175.022839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  175.034209] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  175.050087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  175.051946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  175.201476] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  175.204117] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  175.205597] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  175.210652] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  175.263713] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.658375] Bluetooth: hci0: command tx timeout
[  176.850434] Bluetooth: hci1: command tx timeout
[  176.913663] Bluetooth: hci4: command tx timeout
[  176.914200] Bluetooth: hci3: command tx timeout
[  177.106531] Bluetooth: hci2: command tx timeout
[  177.169434] Bluetooth: hci6: command tx timeout
[  177.297691] Bluetooth: hci5: command tx timeout
[  177.362275] Bluetooth: hci7: command tx timeout
[  178.706447] Bluetooth: hci0: command tx timeout
[  178.897309] Bluetooth: hci1: command tx timeout
[  178.961497] Bluetooth: hci3: command tx timeout
[  178.961940] Bluetooth: hci4: command tx timeout
[  179.153419] Bluetooth: hci2: command tx timeout
[  179.217336] Bluetooth: hci6: command tx timeout
[  179.345370] Bluetooth: hci5: command tx timeout
[  179.409329] Bluetooth: hci7: command tx timeout
[  180.753299] Bluetooth: hci0: command tx timeout
[  180.946132] Bluetooth: hci1: command tx timeout
[  181.009780] Bluetooth: hci4: command tx timeout
[  181.010291] Bluetooth: hci3: command tx timeout
[  181.201805] Bluetooth: hci2: command tx timeout
[  181.265710] Bluetooth: hci6: command tx timeout
[  181.393750] Bluetooth: hci5: command tx timeout
[  181.458406] Bluetooth: hci7: command tx timeout
[  182.802496] Bluetooth: hci0: command tx timeout
[  182.993345] Bluetooth: hci1: command tx timeout
[  183.057343] Bluetooth: hci4: command tx timeout
[  183.057777] Bluetooth: hci3: command tx timeout
[  183.249356] Bluetooth: hci2: command tx timeout
[  183.314458] Bluetooth: hci6: command tx timeout
[  183.441306] Bluetooth: hci5: command tx timeout
[  183.506496] Bluetooth: hci7: command tx timeout
[  236.906368] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  236.909986] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  236.911088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  236.918667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  236.928600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  236.956896] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  236.960844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  236.962154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  236.967876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  236.971023] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  237.105108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  237.112520] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  237.116737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  237.126347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  237.129039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  237.221353] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  237.224500] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  237.233375] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  237.240471] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  237.241500] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  237.242568] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  237.248044] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  237.249969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  237.254013] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  237.254895] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  237.364782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  237.367269] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  237.368350] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  237.371604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  237.374333] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  237.444077] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  237.445837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  237.467394] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  237.545123] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  237.545600] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  237.568731] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  237.571540] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  237.578393] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  237.599969] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  237.648575] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  238.993347] Bluetooth: hci1: command tx timeout
[  238.994116] Bluetooth: hci0: command tx timeout
[  239.185311] Bluetooth: hci2: command tx timeout
[  239.313409] Bluetooth: hci3: command tx timeout
[  239.314201] Bluetooth: hci4: command tx timeout
[  239.505308] Bluetooth: hci5: command tx timeout
[  239.697525] Bluetooth: hci6: command tx timeout
[  239.761426] Bluetooth: hci7: command tx timeout
[  241.041362] Bluetooth: hci1: command tx timeout
[  241.041859] Bluetooth: hci0: command tx timeout
[  241.235551] Bluetooth: hci2: command tx timeout
[  241.361575] Bluetooth: hci4: command tx timeout
[  241.362077] Bluetooth: hci3: command tx timeout
[  241.553287] Bluetooth: hci5: command tx timeout
[  241.748268] Bluetooth: hci6: command tx timeout
[  241.809622] Bluetooth: hci7: command tx timeout
[  243.089508] Bluetooth: hci0: command tx timeout
[  243.090001] Bluetooth: hci1: command tx timeout
[  243.281426] Bluetooth: hci2: command tx timeout
[  243.409328] Bluetooth: hci3: command tx timeout
[  243.409834] Bluetooth: hci4: command tx timeout
[  243.601464] Bluetooth: hci5: command tx timeout
[  243.793317] Bluetooth: hci6: command tx timeout
[  243.858254] Bluetooth: hci7: command tx timeout
[  245.137390] Bluetooth: hci1: command tx timeout
[  245.137889] Bluetooth: hci0: command tx timeout
[  245.329291] Bluetooth: hci2: command tx timeout
[  245.457514] Bluetooth: hci4: command tx timeout
[  245.457967] Bluetooth: hci3: command tx timeout
[  245.649422] Bluetooth: hci5: command tx timeout
[  245.841387] Bluetooth: hci6: command tx timeout
[  245.905553] Bluetooth: hci7: command tx timeout
[  299.426961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  299.434138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  299.438836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  299.449983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  299.455913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  299.562803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  299.571939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  299.587877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  299.601121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  299.606831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  299.623922] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  299.626435] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  299.630798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  299.660878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  299.663559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  299.680880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  299.689845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  299.691586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  299.717991] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  299.753849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  299.755590] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  299.758174] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  299.794407] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  299.800912] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  299.806583] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  299.854629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  299.858812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  299.894824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  299.908046] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  299.916286] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  299.931873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  299.937187] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  299.972068] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  299.985278] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  300.003961] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  300.008040] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  300.010644] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  300.013450] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  300.020710] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  300.025014] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  301.521401] Bluetooth: hci0: command tx timeout
[  301.649683] Bluetooth: hci1: command tx timeout
[  301.777597] Bluetooth: hci2: command tx timeout
[  301.906491] Bluetooth: hci4: command tx timeout
[  301.969326] Bluetooth: hci3: command tx timeout
[  302.097318] Bluetooth: hci6: command tx timeout
[  302.097434] Bluetooth: hci7: command tx timeout
[  302.162359] Bluetooth: hci5: command tx timeout
[  303.570503] Bluetooth: hci0: command tx timeout
[  303.697460] Bluetooth: hci1: command tx timeout
[  303.826970] Bluetooth: hci2: command tx timeout
[  303.954296] Bluetooth: hci4: command tx timeout
[  304.017495] Bluetooth: hci3: command tx timeout
[  304.145412] Bluetooth: hci7: command tx timeout
[  304.148255] Bluetooth: hci6: command tx timeout
[  304.209613] Bluetooth: hci5: command tx timeout
[  305.617645] Bluetooth: hci0: command tx timeout
[  305.745637] Bluetooth: hci1: command tx timeout
[  305.874240] Bluetooth: hci2: command tx timeout
[  306.001509] Bluetooth: hci4: command tx timeout
[  306.065291] Bluetooth: hci3: command tx timeout
[  306.194387] Bluetooth: hci6: command tx timeout
[  306.194470] Bluetooth: hci7: command tx timeout
[  306.257292] Bluetooth: hci5: command tx timeout
[  307.665468] Bluetooth: hci0: command tx timeout
[  307.793289] Bluetooth: hci1: command tx timeout
[  307.921338] Bluetooth: hci2: command tx timeout
[  308.049321] Bluetooth: hci4: command tx timeout
[  308.114348] Bluetooth: hci3: command tx timeout
[  308.241634] Bluetooth: hci6: command tx timeout
[  308.244531] Bluetooth: hci7: command tx timeout
[  308.306323] Bluetooth: hci5: command tx timeout
[  361.833835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  361.841131] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  361.845999] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  361.857744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  361.870804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  361.922755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  361.925571] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  361.928093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  361.935768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  361.938950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.030288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  362.039771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  362.047673] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  362.060754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  362.071705] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  362.170172] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  362.180494] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  362.204340] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  362.211387] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  362.218359] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  362.236830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  362.240906] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  362.243726] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  362.246731] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  362.253887] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  362.284415] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  362.289766] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  362.293768] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  362.308827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  362.329731] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  362.532764] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  362.633063] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  362.645883] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  362.732738] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  362.756769] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  362.771833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  362.829273] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  362.839065] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  362.844266] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  362.847147] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  363.921339] Bluetooth: hci0: command tx timeout
[  363.986318] Bluetooth: hci1: command tx timeout
[  364.177551] Bluetooth: hci2: command tx timeout
[  364.369392] Bluetooth: hci5: command tx timeout
[  364.370132] Bluetooth: hci3: command tx timeout
[  364.754324] Bluetooth: hci4: command tx timeout
[  364.945348] Bluetooth: hci6: command tx timeout
[  365.009942] Bluetooth: hci7: command tx timeout
[  365.970045] Bluetooth: hci0: command tx timeout
[  366.033432] Bluetooth: hci1: command tx timeout
[  366.225523] Bluetooth: hci2: command tx timeout
[  366.418305] Bluetooth: hci5: command tx timeout
[  366.418786] Bluetooth: hci3: command tx timeout
[  366.801308] Bluetooth: hci4: command tx timeout
[  366.993592] Bluetooth: hci6: command tx timeout
[  367.057325] Bluetooth: hci7: command tx timeout
[  368.017370] Bluetooth: hci0: command tx timeout
[  368.081803] Bluetooth: hci1: command tx timeout
[  368.273505] Bluetooth: hci2: command tx timeout
[  368.465488] Bluetooth: hci3: command tx timeout
[  368.466005] Bluetooth: hci5: command tx timeout
[  368.850282] Bluetooth: hci4: command tx timeout
[  369.042261] Bluetooth: hci6: command tx timeout
[  369.105526] Bluetooth: hci7: command tx timeout
[  370.065664] Bluetooth: hci0: command tx timeout
[  370.129597] Bluetooth: hci1: command tx timeout
[  370.321564] Bluetooth: hci2: command tx timeout
[  370.514466] Bluetooth: hci5: command tx timeout
[  370.514965] Bluetooth: hci3: command tx timeout
[  370.897547] Bluetooth: hci4: command tx timeout
[  371.089301] Bluetooth: hci6: command tx timeout
[  371.153545] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
15:17:05  Registers:
info registers vcpu 0
RAX=0000000000000007 RBX=0000000000000001 RCX=ffffffff84ac07c5 RDX=000000000003ac07
RSI=000000000003ac07 RDI=ffffffff86d5df4c RBP=ffff88802c157390 RSP=ffff88802c1572c8
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6bd R11=0000000000000001
R12=ffff88802c157398 R13=ffff88802c157380 R14=ffff88802c157379 R15=ffff88802c157338
RIP=ffffffff81353f82 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f3ebefc2540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe0e00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3ebf093710 CR3=0000000032780000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00
XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=4b952e4da9267483 RDX=ffffffff81353e09
RSI=000000005e406224 RDI=0000000000104185 RBP=ffff888030bd79c8 RSP=ffff888030bd7900
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=ffff888030bd79b8 R14=ffff888030bf3700 R15=ffff888030bd7970
RIP=ffffffff81353e23 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fa5757d6540 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb7cf86f000 CR3=000000002ea6d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff
XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69
XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000