Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:15387' (ECDSA) to the list of known hosts.
2025/06/01 20:59:03 fuzzer started
2025/06/01 20:59:03 dialing manager at localhost:34361
syzkaller login: [   93.135233] cgroup: Unknown subsys name 'net'
[   93.285179] cgroup: Unknown subsys name 'cpuset'
[   93.329548] cgroup: Unknown subsys name 'rlimit'
2025/06/01 20:59:19 syscalls: 2214
2025/06/01 20:59:19 code coverage: enabled
2025/06/01 20:59:19 comparison tracing: enabled
2025/06/01 20:59:19 extra coverage: enabled
2025/06/01 20:59:19 setuid sandbox: enabled
2025/06/01 20:59:19 namespace sandbox: enabled
2025/06/01 20:59:19 Android sandbox: enabled
2025/06/01 20:59:19 fault injection: enabled
2025/06/01 20:59:19 leak checking: enabled
2025/06/01 20:59:19 net packet injection: enabled
2025/06/01 20:59:19 net device setup: enabled
2025/06/01 20:59:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/01 20:59:19 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/01 20:59:19 USB emulation: enabled
2025/06/01 20:59:19 hci packet injection: enabled
2025/06/01 20:59:19 wifi device emulation: enabled
2025/06/01 20:59:19 802.15.4 emulation: enabled
2025/06/01 20:59:19 fetching corpus: 0, signal 0/0 (executing program)
2025/06/01 20:59:21 starting 8 fuzzer processes
20:59:21 executing program 0:
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x5)
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00000000c0)=0x5)
r1 = epoll_create1(0x80000)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000100))
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @local}, 0xc)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180))
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x111042, 0x1, 0xd}, 0x18)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x4010)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000380)={0xfff, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x1, [{{0x2, 0x4e22, @multicast1}}]}, 0x110)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000004c0)={0x7, 0x2, 0x6}, 0xc)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000ac0)=<r4=>0x0)
stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
recvmmsg$unix(r2, &(0x7f0000001640)=[{{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000c40)=""/178, 0xb2}, {&(0x7f0000000d00)=""/156, 0x9c}], 0x2, &(0x7f0000000e00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}], 0x58}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000001540)=[{&(0x7f0000000f00)=""/249, 0xf9}, {&(0x7f0000001000)=""/185, 0xb9}, {&(0x7f00000010c0)=""/143, 0x8f}, {&(0x7f0000001180)=""/217, 0xd9}, {&(0x7f0000001280)=""/53, 0x35}, {&(0x7f00000012c0)=""/220, 0xdc}, {&(0x7f00000013c0)=""/136, 0x88}, {&(0x7f0000001480)=""/37, 0x25}, {&(0x7f00000014c0)=""/5, 0x5}, {&(0x7f0000001500)=""/9, 0x9}], 0xa, &(0x7f0000001600)}}], 0x2, 0x100, &(0x7f00000016c0)={0x77359400})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000001700), 0x6e, &(0x7f0000002a00)=[{&(0x7f0000001780)=""/185, 0xb9}, {&(0x7f0000001840)=""/36, 0x24}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/225, 0xe1}, {&(0x7f0000002980)=""/75, 0x4b}], 0x5, &(0x7f0000002a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r7=>0x0}}}], 0x20}, 0x20)
recvmsg$unix(r0, &(0x7f0000004180)={&(0x7f0000002b00)=@abs, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000002b80)=""/63, 0x3f}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/105, 0x69}, {&(0x7f0000003c40)=""/198, 0xc6}, {&(0x7f0000003d40)=""/104, 0x68}, {&(0x7f0000003dc0)=""/174, 0xae}, {&(0x7f0000003e80)}, {&(0x7f0000003ec0)=""/234, 0xea}], 0x8, &(0x7f0000004040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r8=>0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x120}, 0x22)
sendmmsg$unix(r2, &(0x7f00000048c0)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000580)="60562a9edf963cc77f6f118059a2ed25761b1366843dae1d88135c29055a98cecbacb30a7b2774fdfa6ef23c39e463e38e2594be88b3ce53bba41a107d", 0x3d}, {&(0x7f00000005c0)="42c1bd7499615f7cdfb5435250f31944fd61938c1d026cd3523214c7a6db5c12f88dd3b80eb04066e343df57ee3fdd8493f8ac886e5d7efc0b39ced52c483d5944c704aeae7e9311dce129fc931d13a78988233995f263609a79c18e975c5950a4bef0996bcb22eebb278fdf0e164950a5908da476167d0f83d1cd1b6dd0d3b40c01e2accc0fd01e4c43db50eade05538c5491e084875a47a89b7a1865595394c2daebc841c7b63e4d", 0xa9}, {&(0x7f0000000680)="4bae645883878a827ee242e078bcf27921345e2ccbbc8f8a837f3ff1669f9ebdc6b071ead059", 0x26}, {&(0x7f00000006c0)="88cf2c6128a51a96eea53b35af2fad2d1c5825cd43027137a796975c509a06a34b4d13a33ba360df9a8b00ba4db14a3cf5b743c259bdbc9a0cd0cc56649457ab050afa6b5ce248cbdc565571f657f9f0dcd83be060c6dca828415ceb0111415d316ec3c8c6b74f18434b13286d448f", 0x6f}, {&(0x7f0000000740)="1e463f8affcc53ca3f832b96c5fdf6531c54c8be5a3eee96c614f9f8ab3e59f3771997a5586f1db8a0a6ecaca759693317685fdba17b70f1d5c5df77422b118e88b71fa31e6d1a7d5eef3bab548007e50d38c4a1cf2b19175b9e5d70f7fc9eceb6f2e1819094943363d1390a54d3feade149d8d05dbd632689f0d949d2b84269ec37656e7f5e0266ba623bcd0934e81a66ac434a412b0ca4c1b1682c62dce7a1408667bf8a5d8b4bd0ad6c4ce76e3d", 0xaf}, {&(0x7f0000000800)="d3a53c5b993035fa6a60b9b6929c4814c679e442a6044a3df861d72c4556e33a5cc38fed3a4a3122810374ede8cd89697ddc3cebb801cc70855cdb379efa604e3c89cc3641f60d089e0c8d69d12e6831bb03f0337b26d938bd2bcd4248c96bc26050070215fd0c00409f30265c7233d1981b0f4d58339327a88516aeab2d45aa2d5e4c33cb2fb12d79a4ba5799d0175a47b6cae158f585cd7167e6a0a90e9ac185f5cf67ab74c226f3e95ad21418c2ee62c035ed3fc1a0e3c19706ea5ffe6830b37019eceee5d822c1d3761ff6ed6909d8b8de7406b4cb", 0xd7}, {&(0x7f0000000900)="bfe83551ecbe0481dc4f32b672bb45e79919050667aa87933520306030164249b0ea362e49db008024e3b01f0dab99348eae247c077c8afaf0ebc0f2b3bd84edde9cf972140507409a19a0d3cf06cd82e5566c37bd82d8198a405e251b8ac2e373fcbd142fb20e98732a90f4367ca03289f890c4c8a450adc173cdd8535e", 0x7e}, {&(0x7f0000000980)="d8b7e5d2a4d51ce38abe7ce127ea0867c2f98c8bc47f1dea14d2e2537195984b353156de8fb4e0e6eba4ada58a7ea176f286e60da67109077475281bb23fba01ecc55c98de1297cf0d2c6c1ef21200e15c4fc854da4c84c22331eaf7edbcb9e65026306d8badbcff248306d699dc6dd660ddd718ffd60cdf36a48e8bc4cf692cdf530d55c8e47a344f66db79ab91c1aad177bd090c6123eff7cc90a6ae679968a1fe123f2b4c57bf4f378cfe8e863a45", 0xb0}], 0x8, &(0x7f0000004780)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, r5}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r0, r3, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r3, r2, r1]}}], 0x108, 0x4}}], 0x1, 0x5)

20:59:21 executing program 1:
r0 = pidfd_open(0xffffffffffffffff, 0x0)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x3, 0xffff, 0x3})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@initdev, @multicast1, <r2=>0x0}, &(0x7f0000000080)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x2f, 0x3, 0x5, 0x8, 0x4d, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0xf1c2d21c4eafffe, 0x9, 0x9}})
r3 = accept(r1, &(0x7f0000000180)=@alg, &(0x7f0000000200)=0x80)
sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x1, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x10)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x111001, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000380)=0x20)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000004c0)={&(0x7f00000003c0), &(0x7f0000000400)=""/130, 0x82})
getpid()
getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000500), &(0x7f0000000540)=0xc)
fgetxattr(r1, &(0x7f0000000580)=@random={'security.', '\xff\xff'}, &(0x7f00000005c0)=""/20, 0x14)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000740)={&(0x7f0000000600), &(0x7f0000000640)=""/207, 0xcf})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000780), &(0x7f00000007c0)=0xc)
r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000800), 0x10040, 0x0)
fstat(r6, &(0x7f0000000840))
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3bd0}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x98}]}, 0x54}, 0x1, 0x0, 0x0, 0x2800}, 0x15)

20:59:22 executing program 2:
execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000040)='![%T&\xcd', &(0x7f0000000080)='\x00', &(0x7f00000000c0)='-\x00', &(0x7f0000000100)='!],\xd5:\',}(\x00', &(0x7f0000000140)='@:\x00', &(0x7f0000000180)='!(^/\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='!\'h\x00'], &(0x7f0000000440)=[&(0x7f0000000280)='-\xbd(\x00', &(0x7f00000002c0)='#\x00', &(0x7f0000000300)='))+[\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='#(\x00', &(0x7f00000003c0)='.]%$(]\x00', &(0x7f0000000400)='\xd7\x00'], 0x100)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000480)='.log\x00', 0xa140, 0x100)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0xbad1ecab720956ba)
r1 = syz_open_dev$vcsn(&(0x7f0000000500), 0x3ff, 0x20100)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x400900, 0x0)
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000580)=""/102)
lseek(r0, 0x40000000000000, 0x1)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000640)={0x10000001})
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "7a4a747988f18644", "46a5b2922e78258a2d386216af148a84", "f868f17a", "f78eea6405e8983f"}, 0x28)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000006c0)={0x1f, 0x99e5, 0x6, {0xd5b, 0xfffffff7}, 0x4, 0x4})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x0, 0x100, 0x0, @empty, @remote, 0x40, 0x8057, 0x8, 0x4}})
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000800)=0x9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000840))
ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000880))
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x581040, 0x0)
write$sndseq(r5, &(0x7f0000000900)=[{0xf4, 0x0, 0x35, 0xc0, @time={0x3f, 0x29aa}, {0x1f, 0x71}, {0x7, 0x3f}, @control={0x3f, 0x7f8}}, {0x1f, 0x7f, 0x9, 0x3f, @time={0x80000001, 0xffffffff}, {0xd7, 0x6}, {0x2, 0x5}, @result={0x3, 0x400}}], 0x38)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8001}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2004c410)

20:59:22 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x90}, {0x5, 0x5}, 0x0, 0x1, 0x4})
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000000c0)={0x7fffffff, 0x10001, 0x1})
fcntl$addseals(r1, 0x409, 0x5)
sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x220, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc0814}, 0x20000000)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000200)=0x7, &(0x7f0000000240)=0x1)
finit_module(r1, &(0x7f0000000280)='\x00', 0x1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80400, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000640)={{'\x00', 0x3}, {0xa033}, 0x109, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="f26ab39047b11c86a2f60e00a807c9aaceaaf0d53dfd66583f44618c2344fe809cb7f753f766eda20cecbdc3b810848b9c33bef6640244eeff9d5d5ebda13dcd1c76cd0abe47a13f18a3724c82a2f281a97fc4117e7c03286e31b4912772d556f2eacbc350458aa896647b075cf97075daccd44dd7e70b0649765bbc802689af905e682274c426f6a03c89007cc43acc4dcea3e97ae3b10149aec50944939e485f4b80ff0207", 0xa6, 0x0, &(0x7f0000000440)={0x2, 0x13f, {0x0, 0xc, 0xe5, "2e73a9c8178a2b7047036721debc0a73be4c5222ee8a54a4f0a31d8c59981474cf122ceadba698b96a33ab2fccc5da27077dc0d4d88cb716476a1b1997e37bcb4e94652e36d0df563d0b08fe3ab574e00a24c5324cfe745513aa34dfeeedfdc1602d5357e5e499b1f043a79807448fe5c43c02238642df1f87d2e6cd829edaf8933e1c7f8f4f03bb12d3dbc83e22c09efdafc2f73af13b342f05ebbc2a1fd87097430ae50979f4b793241356148eda6fe20f4d34617947d91c334fe4139fb92551adb22501354e9ab0c43b89480a0b65f1b8cfdf8f0637194dab2a6bbf19983db0eb73ccd6", 0x4d, "ef69d480107d52891ddc1cfe5ec4d34bcd846eb57e0048f099a0ef8481ad99e03313dc0c367fa4fd74a72b36f5afa6f5934834783a06fee40a3f707ee4b09be9b2d9c6b65f17b80c6557c2c92c"}, 0x78, "0028cd66ce1956e9b13220b4dee8458cfe38894e802df58ef079a09d8c780c35b6e086a4006bccb8e276f770aabd10b6bf78b4a29ff3d6044f71c995b3cff48d13e99c2453f4f1e292b429c920e8fb228876f30883e7c308691ac82b94ada111592a5c7cd55773d193c25285dd83f43d8cf17e7e327707e2"}, 0x1c3})
r3 = fsopen(&(0x7f00000006c0)='jfs\x00', 0x1)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000700)={"747394469fc3fe24d14a691d552db487", 0x0, <r4=>0x0, {0xe}, {0x101}, 0x2, [0x3f, 0x5, 0x1ff, 0x389, 0xfffffffffffffffc, 0xc9d0, 0x200, 0x101, 0x0, 0x1, 0x6387, 0x800, 0x2402, 0x1f, 0xea14, 0x8]})
ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000880)={{r2}, r4, 0x10, @inherit={0x60, &(0x7f0000000800)={0x1, 0x3, 0x6, 0x2ae, {0x0, 0x23003ff4, 0x80000000, 0x1f, 0x11}, [0x3, 0xf949, 0x855]}}, @devid})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000001880)={0x2, 0x401, 0x1, 'queue0\x00', 0x5})
ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000001940)=""/59)
ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000001980)="97563c4151dab821103f88621b0f4a07abc0caac748ff5d8bb993e49f8d5e7a0")
ppoll(&(0x7f00000019c0)=[{r0, 0x2}, {r1, 0x2013}, {r2, 0x1000}], 0x3, &(0x7f0000001a00)={0x0, 0x3938700}, &(0x7f0000001a40)={[0x4]}, 0x8)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000001a80)={0x5, 0x8, 0x5, 0x1})
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001ac0), 0xa100, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000001b00)=0x42)

[  111.286487] audit: type=1400 audit(1748811562.070:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
20:59:22 executing program 4:
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x4a, &(0x7f0000000000)=0x6d0a, 0x4)
getsockname$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, 0x0, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x100}}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2ae}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080)
write$binfmt_misc(r0, &(0x7f0000000280)={'syz1', "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"}, 0xfe)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0)
ioctl$CDROMPLAYTRKIND(r1, 0x5304, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1})
getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000)
r2 = syz_mount_image$tmpfs(&(0x7f0000001400), &(0x7f0000001440)='./file0\x00', 0x4, 0x5, &(0x7f0000001740)=[{&(0x7f0000001480)="fbb6f4db7bd1ffb59e6d1a2815653a2ec5d1fe0653e42f9f12d384cecb45299886473f2390d938dc09ee3a15824e73777204e1597c5f4d492b9a5aa8d54012507557298ef7e09eb5720ae4ad6ac433b3e53369574b4b35c1d2dca2f856f65346a4114ab7381a4dfd04f38d91e85329bd858fd15a24831878c0a29b0b54a6c5008ad821b0f2947de8d0d122031080d85ed0db18b8ee0705a95cb23c286726baad2a70d70d116dd38b32365201f927760f49e594dc68e3ed1a5ebf0b0ddeef5bdce913fe2cf6967b1caecc71d13900d832b3a4e4c7c6", 0xd5, 0x4}, {&(0x7f0000001580)="0eb6321c33e56eb870a183f017a15078ae66bfda095e9bab7aa48697046e9c6606cf9134156b6af787a5b55b66b3155037dfc0d9dc01e4624f371f2bb40652bc09105ac9174c715319680c6e", 0x4c, 0x9}, {&(0x7f0000001600)="b71c0780ee134e7b12fba2285063a63dbfe4b1e232d019f74d8d2348653d98c10d656831bd", 0x25, 0x8}, {&(0x7f0000001640)="555d4524e01ead535ca61e7a180972c1213f826c7454c68605196faa1f315fcb3d3a57c42b9d3c22a98818ff11d0beff73528cb1b871a1bbbe2ac22fa5e15ef18b65d031a50a2368daf784adf873b4a79b30843c672572850b8c8e8ae2ac9ebac8e8fa33c83258686477ccd93374f580d1fcca76216de802dcdbc28880fbb5074572366253e4bad7800cbecb7c4a70", 0x8f, 0x9}, {&(0x7f0000001700)="794aa440363cda3b29fb4595935a", 0xe, 0xfffffffffffffc01}], 0x20444, &(0x7f00000017c0)={[{@mode={'mode', 0x3d, 0xff}}, {@huge_advise}], [{@obj_type={'obj_type', 0x3d, 'syz1'}}, {@hash}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x1e}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]})
move_mount(r2, &(0x7f0000001880)='./file0\x00', r0, &(0x7f00000018c0)='./file0\x00', 0x13)
r3 = syz_open_dev$evdev(&(0x7f0000001900), 0x100000001, 0x2400)
ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001940)={<r4=>0x0, "691af2bb94e916df524bb30e6c744d8c"})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000002940)={{0x1, 0x1, 0x18, <r5=>r0, @in_args={0x4}}, './file0\x00'})
openat(r2, &(0x7f0000002980)='./file0\x00', 0x123043, 0xa0)
pipe(&(0x7f00000029c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000002a00)="521eb917c54b95332efd73c5871267272e86984e640d808459e5865b1214c16e108d2bf56d0ba2a49882a1cb2974a15446a46ae0e1473035c350de6c8f16af6d18cecfa13d6dfe45b7722b4b4569efc5acb254b6e9bee46d", 0x58)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000002a80)={0x3, 'batadv_slave_1\x00', {0x2}, 0x9})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002ac0)={0x0, 0x0, {0x0, @usage, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002ec0)={0x4241d9a72e8d2121, 0x0, {0x1, @usage=0xffffffffffff8000, r4, 0x4, 0x1f, 0x8, 0x40, 0x6, 0x12, @struct={0x8, 0x55}, 0x2, 0x8, [0x2, 0x8, 0x6, 0x6, 0x1f, 0xffffffffffffffff]}, {0x4, @struct={0x3, 0x3f}, r4, 0x3, 0x6, 0x6, 0x80000001, 0x4, 0x408, @struct={0x0, 0x4}, 0x3, 0x1, [0xfffffffffffff000, 0x7fff, 0x7c6b, 0x9, 0x80, 0x6]}, {0x7, @struct={0x3, 0x9}, r7, 0x40e5, 0x5, 0x5, 0x2, 0x5, 0x20, @struct={0x7524}, 0x5, 0x101, [0xadf, 0x1, 0x2, 0x80000001, 0xa070, 0x9]}, {0x8, 0x6, 0x9}})
syz_mount_image$nfs(&(0x7f00000032c0), &(0x7f0000003300)='./file0\x00', 0x1, 0x1, &(0x7f0000003380)=[{&(0x7f0000003340)="ed26d4e4d702165f2dbd78d312f6912d31dc34229e569bf0b4b3901655947983", 0x20, 0x6}], 0x1, &(0x7f00000033c0)={[{'\x00'}, {'(#\''}, {'root'}, {'%]/#'}, {'batadv_slave_1\x00'}, {'batadv_slave_1\x00'}, {'fscontext'}, {'#\'%={/@'}], [{@euid_lt={'euid<', 0xee00}}, {@euid_lt}, {@hash}]})

20:59:22 executing program 5:
fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'user.', '$@:\x00'}, &(0x7f0000000040)='!\xb0{\x00', 0x4, 0x1)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
r0 = socket$inet(0x2, 0x4, 0x7fff)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x18, 0x1f, 0x4, 0x800, 0xffff, 0x80}, {0x5, 0x7, 0x10001, 0xffffffff, 0x9, 0x6}], ['\x00', '\x00', '\x00']})
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000200)={@private1, <r2=>0x0}, &(0x7f0000000240)=0x14)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000280))
setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)=0x1, 0x4)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f00000003c0)={0x7, 'team_slave_0\x00', {0xff}, 0x1})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r5=>r0, {0x8}}, './file0\x00'})
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockname$unix(r4, &(0x7f0000000440), &(0x7f00000004c0)=0x6e)
r6 = syz_open_dev$hiddev(&(0x7f0000000500), 0x0, 0x101000)
fcntl$getownex(r6, 0x10, &(0x7f0000000540))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'sit0\x00', <r7=>r2, 0x29, 0x80, 0xda, 0x3, 0x4d, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x10, 0x7f, 0x7e5}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000640)={'gre0\x00', r7, 0x8000, 0x8000, 0x0, 0x3, {{0x37, 0x4, 0x3, 0x0, 0xdc, 0x65, 0x0, 0x3, 0x29, 0x0, @local, @broadcast, {[@rr={0x7, 0x13, 0x15, [@remote, @rand_addr=0x64010101, @remote, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0x4b, 0x3, 0x2, [{@rand_addr=0x64010101, 0x280000}, {@empty, 0x72d}, {@remote, 0xfff}, {@rand_addr=0x64010100, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffe}]}, @lsrr={0x83, 0x3, 0x13}, @cipso={0x86, 0x6}, @timestamp_prespec={0x44, 0x34, 0xcf, 0x3, 0x5, [{@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3b}}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x42}}, {@multicast2, 0xffff12a2}]}, @rr={0x7, 0x23, 0x6d, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @local, @private=0xa010100]}, @cipso={0x86, 0x27, 0x1, [{0x1, 0x4, "1d23"}, {0x6, 0xd, "663c787ef45e11edbc6851"}, {0x1, 0x10, "1eae323fec1bf0124f96493efff2"}]}]}}}}})
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)

20:59:22 executing program 6:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x110, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000}, {0x6, 0x16, 0xc84}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x5}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffe00}, {0x6, 0x16, 0xff}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6, 0x16, 0x7}, {0x5}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4004}, 0x4001)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2)
write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0xb2, 0x1f, 0x0, 0x7, 0x3, 0x3e, 0x40000000, 0x124, 0x40, 0x39e, 0x8, 0x4, 0x38, 0x2, 0x4, 0x800, 0x6}, [{0x0, 0xf5, 0x4, 0x358dd192, 0x2, 0x20, 0x1f, 0x1000}], "efa2caebe9b92f99fc07b96f21ab2dfce5970362f7d956e712c2eed0f7219475eebe16f4d356584da015d5b4d6e68cb795d4cf04b9ac84ccce4fd87560c716b4124a5555888e10c0a5205560f5929ae68618acc2d41b301a04ecb126439a988029081f5df321086821e78d32e8c7c4d208aaaaa8512898752ba3ac92cb35a29086309367638c8f7d2646cabb247d8dd597cb318520f9f3521d57fea2b0974afb0fb0ae740508de25ea355d7c1678869c916dbbfff54ac599b6ba5370259d31e70d878d6898578656a7e8bfed5550ad0454", ['\x00', '\x00', '\x00']}, 0x449)
ioctl$TCSBRKP(r0, 0x5425, 0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000006c0), 0xc0a82, 0x0)
r2 = socket(0x5, 0x80000, 0x6e3)
r3 = fcntl$dupfd(r1, 0x406, r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x0, 0x100010, r1, 0x8591e000)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:var_auth_t:s0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x65c3d010f786f1e5}, 0x20000844)
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000880), 0x21c000, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f00000008c0))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000900)={{0x1, 0x1, 0x18, <r6=>r3, {0x100}}, './file0\x00'})
ioctl$SCSI_IOCTL_SYNC(r6, 0x4)
r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000940)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r7, 0x40049421, 0x2)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$sock_ifreq(r0, 0x8926, &(0x7f0000000a80)={'veth0\x00', @ifru_flags})

20:59:22 executing program 7:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40054}, 0xc000)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1c0, r0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x32}}}}, [@NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x498}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x1, 0x0, 0x3, 0x7ff, 0x8, 0x1, 0x4, 0x7fff]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9e}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x30}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5ad}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x64}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x344}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7c4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x749d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x63f0c86f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x24}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x4, 0x9f7d, 0x8, 0x7, 0x0, 0x6, 0x7, 0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x9b7, 0x401, 0x0]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xb57c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3f}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x64b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x51}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xc}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x167}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20040004}, 0x14080)
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000003c0)=0x1)
r1 = memfd_secret(0x80000)
ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x220a03, 0x0)
ioctl$KDDISABIO(r2, 0x4b37)
read$eventfd(r2, &(0x7f0000000440), 0x8)
r3 = fcntl$getown(r2, 0x9)
r4 = syz_open_procfs(r3, &(0x7f0000000480)='net/vlan/vlan0\x00')
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="52aad2748f87"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7b6f65118f09"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1efeb452e29f"}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000801}, 0x0)
pipe2(&(0x7f00000006c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x10000000)

[  112.750134] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.752313] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.756208] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.759195] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.764957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.766429] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.780821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.782503] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.787649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.797193] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.812370] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.820402] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.828160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.836928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.839633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.844521] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.851697] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.874909] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.907667] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.914340] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.924154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.927719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  112.929814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  112.936690] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  112.942210] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.945731] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.975288] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  112.978456] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.980643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  112.991251] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  112.994632] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  113.029405] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  113.034660] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  113.042387] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  113.049434] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  113.054692] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  113.059611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  113.060445] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  113.100765] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  113.124477] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  114.887573] Bluetooth: hci0: command tx timeout
[  114.888059] Bluetooth: hci1: command tx timeout
[  114.951937] Bluetooth: hci2: command tx timeout
[  115.015681] Bluetooth: hci5: command tx timeout
[  115.015968] Bluetooth: hci3: command tx timeout
[  115.144097] Bluetooth: hci4: command tx timeout
[  115.144215] Bluetooth: hci6: command tx timeout
[  115.272226] Bluetooth: hci7: command tx timeout
[  116.935094] Bluetooth: hci1: command tx timeout
[  116.936164] Bluetooth: hci0: command tx timeout
[  116.999541] Bluetooth: hci2: command tx timeout
[  117.062976] Bluetooth: hci5: command tx timeout
[  117.064335] Bluetooth: hci3: command tx timeout
[  117.191827] Bluetooth: hci6: command tx timeout
[  117.191927] Bluetooth: hci4: command tx timeout
[  117.319441] Bluetooth: hci7: command tx timeout
[  118.985247] Bluetooth: hci0: command tx timeout
[  118.985274] Bluetooth: hci1: command tx timeout
[  119.048902] Bluetooth: hci2: command tx timeout
[  119.111070] Bluetooth: hci3: command tx timeout
[  119.111228] Bluetooth: hci5: command tx timeout
[  119.238986] Bluetooth: hci6: command tx timeout
[  119.239536] Bluetooth: hci4: command tx timeout
[  119.367481] Bluetooth: hci7: command tx timeout
[  121.030963] Bluetooth: hci1: command tx timeout
[  121.031000] Bluetooth: hci0: command tx timeout
[  121.095221] Bluetooth: hci2: command tx timeout
[  121.159123] Bluetooth: hci5: command tx timeout
[  121.160937] Bluetooth: hci3: command tx timeout
[  121.287116] Bluetooth: hci4: command tx timeout
[  121.287565] Bluetooth: hci6: command tx timeout
[  121.416946] Bluetooth: hci7: command tx timeout
[  175.785521] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  175.788828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.792151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.803402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.808167] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.837721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.842714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.846596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.863624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.867327] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  175.962693] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  175.966006] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  175.969945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  175.975636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  175.979191] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.023137] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  176.029416] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  176.030463] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.032408] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  176.041457] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.043687] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  176.052313] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.062651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  176.088186] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  176.090939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  176.111297] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  176.114625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  176.117170] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  176.124927] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  176.166510] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.169518] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  176.171626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  176.174970] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  176.180461] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  176.185301] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  176.205628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  176.232386] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  176.258387] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  176.270324] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  176.294390] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  177.863298] Bluetooth: hci0: command tx timeout
[  177.928486] Bluetooth: hci1: command tx timeout
[  178.054998] Bluetooth: hci2: command tx timeout
[  178.120974] Bluetooth: hci4: command tx timeout
[  178.247683] Bluetooth: hci3: command tx timeout
[  178.503422] Bluetooth: hci7: command tx timeout
[  178.568059] Bluetooth: hci6: command tx timeout
[  178.823184] Bluetooth: hci5: command tx timeout
[  179.910945] Bluetooth: hci0: command tx timeout
[  179.975756] Bluetooth: hci1: command tx timeout
[  180.103077] Bluetooth: hci2: command tx timeout
[  180.167882] Bluetooth: hci4: command tx timeout
[  180.295402] Bluetooth: hci3: command tx timeout
[  180.551529] Bluetooth: hci7: command tx timeout
[  180.614966] Bluetooth: hci6: command tx timeout
[  180.871127] Bluetooth: hci5: command tx timeout
[  181.958903] Bluetooth: hci0: command tx timeout
[  182.023221] Bluetooth: hci1: command tx timeout
[  182.150969] Bluetooth: hci2: command tx timeout
[  182.216873] Bluetooth: hci4: command tx timeout
[  182.343034] Bluetooth: hci3: command tx timeout
[  182.599047] Bluetooth: hci7: command tx timeout
[  182.663059] Bluetooth: hci6: command tx timeout
[  182.919104] Bluetooth: hci5: command tx timeout
[  184.007190] Bluetooth: hci0: command tx timeout
[  184.071183] Bluetooth: hci1: command tx timeout
[  184.199443] Bluetooth: hci2: command tx timeout
[  184.263261] Bluetooth: hci4: command tx timeout
[  184.391167] Bluetooth: hci3: command tx timeout
[  184.647768] Bluetooth: hci7: command tx timeout
[  184.711880] Bluetooth: hci6: command tx timeout
[  184.967127] Bluetooth: hci5: command tx timeout
[  237.854067] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.857055] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.859585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.868117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.872214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  237.924599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  237.933218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  237.936303] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  237.946407] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  237.948570] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  237.972491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  237.982491] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  237.986456] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  237.995255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  238.001505] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.172612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  238.185232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  238.192390] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  238.209358] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  238.228595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  238.230659] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  238.266560] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  238.284452] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  238.305739] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  238.312253] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  238.323207] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  238.331413] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  238.342000] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  238.364567] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  238.371229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  238.378820] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  238.390688] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  238.402295] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  238.412823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  238.413385] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  238.434259] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  238.443502] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  238.465881] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  238.493143] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  238.499084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  239.943079] Bluetooth: hci0: command tx timeout
[  240.006994] Bluetooth: hci1: command tx timeout
[  240.071540] Bluetooth: hci2: command tx timeout
[  240.327882] Bluetooth: hci3: command tx timeout
[  240.455081] Bluetooth: hci4: command tx timeout
[  240.839924] Bluetooth: hci6: command tx timeout
[  240.839952] Bluetooth: hci7: command tx timeout
[  240.966967] Bluetooth: hci5: command tx timeout
[  241.991313] Bluetooth: hci0: command tx timeout
[  242.055150] Bluetooth: hci1: command tx timeout
[  242.119095] Bluetooth: hci2: command tx timeout
[  242.374929] Bluetooth: hci3: command tx timeout
[  242.503014] Bluetooth: hci4: command tx timeout
[  242.887146] Bluetooth: hci6: command tx timeout
[  242.887261] Bluetooth: hci7: command tx timeout
[  243.014920] Bluetooth: hci5: command tx timeout
[  244.040184] Bluetooth: hci0: command tx timeout
[  244.103186] Bluetooth: hci1: command tx timeout
[  244.167127] Bluetooth: hci2: command tx timeout
[  244.423066] Bluetooth: hci3: command tx timeout
[  244.550986] Bluetooth: hci4: command tx timeout
[  244.936904] Bluetooth: hci6: command tx timeout
[  244.937365] Bluetooth: hci7: command tx timeout
[  245.064918] Bluetooth: hci5: command tx timeout
[  246.088005] Bluetooth: hci0: command tx timeout
[  246.151941] Bluetooth: hci1: command tx timeout
[  246.215339] Bluetooth: hci2: command tx timeout
[  246.470903] Bluetooth: hci3: command tx timeout
[  246.599149] Bluetooth: hci4: command tx timeout
[  246.984147] Bluetooth: hci6: command tx timeout
[  246.984301] Bluetooth: hci7: command tx timeout
[  247.110922] Bluetooth: hci5: command tx timeout
[  300.312201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  300.318638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  300.322221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  300.335469] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  300.344561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  300.580004] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  300.583524] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  300.599714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  300.605410] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  300.619451] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  300.655506] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  300.659756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  300.664425] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  300.676739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  300.685309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  300.784995] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  300.804724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  300.818495] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  300.822124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  300.824001] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  300.828401] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  300.870560] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  300.876753] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  300.883416] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  300.895435] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  300.900497] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  300.915630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  300.935356] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  300.939067] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  300.940903] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  300.946685] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  300.964947] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  300.966467] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  300.966947] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  300.982130] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  300.988912] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  301.008099] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  301.015553] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  301.025334] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  301.029624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  302.406928] Bluetooth: hci0: command tx timeout
[  302.663340] Bluetooth: hci1: command tx timeout
[  302.727074] Bluetooth: hci2: command tx timeout
[  302.919981] Bluetooth: hci4: command tx timeout
[  302.983923] Bluetooth: hci3: command tx timeout
[  303.175922] Bluetooth: hci7: command tx timeout
[  303.176572] Bluetooth: hci5: command tx timeout
[  303.176617] Bluetooth: hci6: command tx timeout
[  304.454904] Bluetooth: hci0: command tx timeout
[  304.710899] Bluetooth: hci1: command tx timeout
[  304.776939] Bluetooth: hci2: command tx timeout
[  304.970037] Bluetooth: hci4: command tx timeout
[  305.032021] Bluetooth: hci3: command tx timeout
[  305.222972] Bluetooth: hci6: command tx timeout
[  305.224590] Bluetooth: hci7: command tx timeout
[  305.226110] Bluetooth: hci5: command tx timeout
[  306.503916] Bluetooth: hci0: command tx timeout
[  306.759918] Bluetooth: hci1: command tx timeout
[  306.823878] Bluetooth: hci2: command tx timeout
[  307.017885] Bluetooth: hci4: command tx timeout
[  307.079922] Bluetooth: hci3: command tx timeout
[  307.270926] Bluetooth: hci5: command tx timeout
[  307.272156] Bluetooth: hci7: command tx timeout
[  307.272459] Bluetooth: hci6: command tx timeout
[  308.551929] Bluetooth: hci0: command tx timeout
[  308.809870] Bluetooth: hci1: command tx timeout
[  308.871021] Bluetooth: hci2: command tx timeout
[  309.062960] Bluetooth: hci4: command tx timeout
[  309.126895] Bluetooth: hci3: command tx timeout
[  309.319864] Bluetooth: hci6: command tx timeout
[  309.319925] Bluetooth: hci7: command tx timeout
[  309.320352] Bluetooth: hci5: command tx timeout
[  362.591568] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  362.597010] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  362.601993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  362.614582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  362.623152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  362.723313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  362.727793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  362.732107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  362.739666] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  362.744931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.838020] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  362.841409] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  362.843654] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  362.849814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  362.853815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  362.918683] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  362.927126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  362.934212] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  362.960331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  362.970410] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  363.088201] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  363.116574] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  363.148934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.154331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.164648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  363.185440] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  363.206113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  363.209483] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  363.211289] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  363.220443] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  363.226334] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  363.228535] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  363.233805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  363.270584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.284383] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  363.288003] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  363.293369] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  363.298418] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  363.370534] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  363.431957] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  364.680131] Bluetooth: hci0: command tx timeout
[  364.807155] Bluetooth: hci1: command tx timeout
[  364.936296] Bluetooth: hci2: command tx timeout
[  365.062939] Bluetooth: hci3: command tx timeout
[  365.319026] Bluetooth: hci4: command tx timeout
[  365.447894] Bluetooth: hci7: command tx timeout
[  365.575933] Bluetooth: hci5: command tx timeout
[  365.704968] Bluetooth: hci6: command tx timeout
[  366.727027] Bluetooth: hci0: command tx timeout
[  366.856078] Bluetooth: hci1: command tx timeout
[  366.983904] Bluetooth: hci2: command tx timeout
[  367.111933] Bluetooth: hci3: command tx timeout
[  367.369015] Bluetooth: hci4: command tx timeout
[  367.494953] Bluetooth: hci7: command tx timeout
[  367.623947] Bluetooth: hci5: command tx timeout
[  367.751079] Bluetooth: hci6: command tx timeout
[  368.774916] Bluetooth: hci0: command tx timeout
[  368.903021] Bluetooth: hci1: command tx timeout
[  369.031966] Bluetooth: hci2: command tx timeout
[  369.159407] Bluetooth: hci3: command tx timeout
[  369.415085] Bluetooth: hci4: command tx timeout
[  369.542912] Bluetooth: hci7: command tx timeout
[  369.671035] Bluetooth: hci5: command tx timeout
[  369.799114] Bluetooth: hci6: command tx timeout
[  370.822949] Bluetooth: hci0: command tx timeout
[  370.952112] Bluetooth: hci1: command tx timeout
[  371.078960] Bluetooth: hci2: command tx timeout
[  371.208388] Bluetooth: hci3: command tx timeout
[  371.463024] Bluetooth: hci4: command tx timeout
[  371.591936] Bluetooth: hci7: command tx timeout
[  371.719927] Bluetooth: hci5: command tx timeout
[  371.847903] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
21:04:31  Registers:
info registers vcpu 0
RAX=1ffffffff0d86e2c RBX=0000000000000001 RCX=ffffffff86c3715e RDX=0000000000000000
RSI=dffffc0000000000 RDI=ffff88806ce08b00 RBP=ffff88806ce08af0 RSP=ffff88806ce08a28
R8 =ffffffff86c37162 R9 =ffff88806ce08ad8 R10=000000000003b6bd R11=00000000000c4d47
R12=ffff88806ce08af8 R13=ffff88806ce08ae0 R14=ffff8880169eff58 R15=ffff88806ce08a98
RIP=ffffffff813549e4 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb2d352e540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe4d711da0 CR3=000000002b9c6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88802e7b7ad8 RCX=ffffffff8687618c RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff85c1d1c0 RSP=ffff88802e7b76d0
R8 =ffffffff86876190 R9 =ffff88802e7b77c8 R10=000000000003b6bd R11=0000000000024aa4
R12=ffffffff81354102 R13=0000000000000202 R14=ffff88800a7cb700 R15=ffff88802e7b7788
RIP=ffffffff8151ae17 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe7400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffa246c5368 CR3=00000000072f6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000