Debian GNU/Linux 11 syzkaller ttyS0

syzkaller login: [   82.782580] sshd (229) used greatest stack depth: 24992 bytes left
Warning: Permanently added '[localhost]:53834' (ECDSA) to the list of known hosts.
2025/06/02 22:50:44 fuzzer started
2025/06/02 22:50:45 dialing manager at localhost:34361
[   85.522059] cgroup: Unknown subsys name 'net'
[   85.663577] cgroup: Unknown subsys name 'cpuset'
[   85.717978] cgroup: Unknown subsys name 'rlimit'
2025/06/02 22:51:00 syscalls: 2214
2025/06/02 22:51:00 code coverage: enabled
2025/06/02 22:51:00 comparison tracing: enabled
2025/06/02 22:51:00 extra coverage: enabled
2025/06/02 22:51:00 setuid sandbox: enabled
2025/06/02 22:51:00 namespace sandbox: enabled
2025/06/02 22:51:00 Android sandbox: enabled
2025/06/02 22:51:00 fault injection: enabled
2025/06/02 22:51:00 leak checking: enabled
2025/06/02 22:51:00 net packet injection: enabled
2025/06/02 22:51:00 net device setup: enabled
2025/06/02 22:51:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/02 22:51:00 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/02 22:51:00 USB emulation: enabled
2025/06/02 22:51:00 hci packet injection: enabled
2025/06/02 22:51:00 wifi device emulation: enabled
2025/06/02 22:51:00 802.15.4 emulation: enabled
2025/06/02 22:51:00 fetching corpus: 0, signal 0/0 (executing program)
2025/06/02 22:51:01 starting 8 fuzzer processes
22:51:01 executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1})
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000080))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0)
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000100))
openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000180)={{}, {@val, @max}})
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f00000001c0)=0x2)
r2 = syz_open_procfs$userns(0x0, &(0x7f0000000200))
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000240)=0x1)
ioprio_set$uid(0x0, 0xee01, 0x0)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x1)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioprio_get$uid(0x0, r3)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480))
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x490080a0}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffbade}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x802, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000680), 0x614001, 0x0)
ioctl$TCGETS2(r4, 0x802c542a, &(0x7f00000006c0))
write$P9_RUNLINKAT(r1, &(0x7f0000000700)={0x7, 0x4d, 0x2}, 0x7)

22:51:01 executing program 1:
r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:cert_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:var_lock_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
alarm(0x81)
sched_getparam(0x0, &(0x7f0000000200))
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12)
ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x1, 0x4}, &(0x7f00000002c0)=[{}, {}, {}, {}])
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb0, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffc01}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x70}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xdb19}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xcace}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8a7c0000}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000000)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000640)=0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000740)={0x0, 0x17, 0x0, @thr={&(0x7f0000000680)="72386a047ce0089a38673005fb59a7df9f654cc0e8b3e4e0a451e2ac5602853925072d343e33974ffe97b1a6b5c6562e69e9286826332319b047788411d5d4714455d6147e5a4eb83932b40f16627f3cb67a002bca92da1346ec26f8e0d05fdeba7d66b1a54784a363ad0a90be310d2a32473ef35bce", &(0x7f0000000700)="28b398adfd5e5cda1c4ec26646ca8e2f78e5228c8def28b24625dc2c3c2121a4c57509db1a876ba249a2d75f93e3f36fc0fbfb20e70de427c9"}}, &(0x7f0000000780))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000007c0), &(0x7f0000000800)=0x4)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000001}, 0x800)
setxattr$incfs_id(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), &(0x7f0000000a00)={'0000000000000000000000000000000', 0x30}, 0x20, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000a40))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000a80)={{0x0, 0x0, 0x141a1aa9, 0x3, 0x3f}, 0x1, 0x8, 0x2})
splice(0xffffffffffffffff, &(0x7f0000000b00)=0x6435, r2, &(0x7f0000000b40)=0xca29, 0x3, 0x3)

22:51:01 executing program 2:
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x0, 0x70bd2c, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040)
r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000811}, 0x20004041)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xfa69a0fb1cea7847}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\'\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000810}, 0x8c0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), r1)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r5, 0xb02, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000110}, 0x845)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000880)={'nr0\x00', 0x7})
sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x48c7)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000009c0), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r1)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000a80)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', <r8=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x2040005)

[  101.756198] audit: type=1400 audit(1748904661.558:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
22:51:01 executing program 3:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}}, 0x44008041)
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000140)={0x7, "d116d1dd91f7ff94161e7f13acdc728909b068735ebe912d44b10dd507cd25b7806e71e6157ec26feefd778ea69bad2df733ff58ee7c98354963ea159d8226db68b1877728d7424ff2b2f3df544384b0757a7ef435c82a0dce42b1f8d337a8562a0220f594aa054024ab74bf108ff6001ca6a292d536b4954166c2acc535e72642d9e162fc4352390cd7f6c7e85cbf6fd1757567773d7e51123c60378ce1b759e6380844ad1737d6b08ac6033d3756f0177844a40128d87bd3565cb64d3d03287cd3ba53563c7d3d6fe6c58944b0eb275889f88424bbbcd7bf0ded689c22506e983932e4cb2ea591da6bad0ca69b4c9f9010c0ecdd1c054840f389199bb99993c3e94a5514f727c24add3ee018e1c87b96302a3a6c0e8e66b3c6172a96a410bebab84c402969698cc034e0c2019cc48a1cd94bb26915aaac3c62234a6fd7f19c1b551d8332ce3c1f6792a8c54264d92ad439d93dd84047c4f73f142ab0ae7ba10c6f4b36e1d49542b794e1f9c59e7c7156a9bfca7316c6ece608507659d2cd57e6499523c556142941ecf1364c721dfcd6f002eecf6277865c2d91bddf2e1e02c6d9cddbae20d246505b0614b4700f29eead9b236fa1f9aedc7008704537a143240aa6ce794e16151f680b93b42ffe925341b2770e824046aa5752daef29ad58dc571235494c87efbf8ab2acc6b7bca5e6ae2c985e54fa49d6a8311194e9aaf3"})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x2c}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ab}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x844)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4000)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000600)={'filter\x00', 0x89, "72c79e9a2b1fc13f8d7d11a3ddeef2daaf952aabd39dac6e49eadac26bac6f97b7d1061c067a4214109946f4387477e1bf036bf5392e62e4de9f5e0b9767648988f35824de831e69b1107024e14591488b06dda8a856fb6867ba433d1e10f29bf62ad971c2b73581a0c0b80e5213bc5da0f7877583214622209a2845db6be08379c33d8723faa1e965"}, &(0x7f00000006c0)=0xad)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000700), 0x400, 0x0)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), 0xffffffffffffffff)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000007c0), 0xb657f27bb87cbe9d, 0x0)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x40000)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000900)={0x5, &(0x7f00000008c0)=[{0x7, 0xfd, 0xd8, 0x1}, {0x0, 0x7, 0x4, 0x6}, {0x6, 0x80, 0x36, 0xffff7bbc}, {0x8, 0x4, 0x7, 0x7fff}, {0x3f, 0x3f, 0x6, 0x8}]}, 0x10)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000ac0)={0x53, 0xfffffffffffffff5, 0x42, 0x5, @buffer={0x0, 0x32, &(0x7f0000000940)=""/50}, &(0x7f0000000980)="8b264af04f234ff959d3a7972541391704de94d33df18a61eaf1bff39fbafb1558e19aa7b1ce9ff5103199c57894059f8a1cc20fdefef4cf2b196c6b8363513a997c", &(0x7f0000000a00)=""/88, 0x401, 0x72, 0x1, &(0x7f0000000a80)})
ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000b40))
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xbc, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10001, 0x4b}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0xc1c9b29872aef165}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, 0xbc}}, 0x10)
fcntl$getflags(0xffffffffffffffff, 0x1)
r6 = signalfd(r4, &(0x7f0000000d40)={[0x40]}, 0x8)
sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x38}}, 0x8040)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000ec0)={0x7e, 0x20, 0x6, 0x2})

22:51:01 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x300, 0x70bd29, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8008}, 0x24000114)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/114, 0x72}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/52, 0x34}, {&(0x7f0000000240)=""/150, 0x96}, {&(0x7f0000000300)=""/231, 0xe7}, {&(0x7f0000000400)=""/194, 0xc2}], 0x6, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}, 0x12000)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xd4, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x54}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x48080)
stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940))
ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x2)
r4 = syz_open_dev$vcsu(&(0x7f00000009c0), 0x3f, 0x40000)
recvmmsg(r4, &(0x7f0000004fc0)=[{{&(0x7f0000000a00)=@nfc, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/226, 0xe2}], 0x1, &(0x7f0000000bc0)=""/85, 0x55}, 0x81}, {{&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000cc0)=""/98, 0x62}, {&(0x7f0000000d40)=""/52, 0x34}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x3, &(0x7f0000001dc0)=""/93, 0x5d}, 0x5}, {{&(0x7f0000001e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001ec0)=""/151, 0x97}, {&(0x7f0000001f80)=""/2, 0x2}, {&(0x7f0000001fc0)=""/127, 0x7f}], 0x3, &(0x7f0000002080)=""/79, 0x4f}, 0x20}, {{&(0x7f0000002100)=@phonet, 0x80, &(0x7f00000034c0)=[{&(0x7f0000002180)=""/103, 0x67}, {&(0x7f0000002200)=""/138, 0x8a}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/147, 0x93}, {&(0x7f0000003380)=""/32, 0x20}, {&(0x7f00000033c0)=""/193, 0xc1}], 0x6, &(0x7f0000003540)=""/207, 0xcf}, 0x8000}, {{&(0x7f0000003640)=@sco={0x1f, @none}, 0x80, &(0x7f0000003740)=[{&(0x7f00000036c0)=""/126, 0x7e}], 0x1, &(0x7f0000003780)=""/130, 0x82}, 0x3f}, {{&(0x7f0000003840)=@pppol2tp, 0x80, &(0x7f00000039c0)=[{&(0x7f00000038c0)=""/195, 0xc3}], 0x1, &(0x7f0000003a00)=""/207, 0xcf}, 0x8001}, {{&(0x7f0000003b00)=@pppol2tpv3in6, 0x80, &(0x7f0000004f40)=[{&(0x7f0000003b80)=""/159, 0x9f}, {&(0x7f0000003c40)=""/219, 0xdb}, {&(0x7f0000003d40)=""/236, 0xec}, {&(0x7f0000003e40)=""/120, 0x78}, {&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/124, 0x7c}], 0x6}, 0x7}], 0x7, 0x2000, 0x0)
r5 = syz_open_dev$vcsu(&(0x7f0000009e80), 0xff, 0x80)
syz_genetlink_get_family_id$ipvs(&(0x7f0000005180), r5)
r6 = memfd_create(&(0x7f0000009ec0)='\x00', 0x0)
fsetxattr(r6, &(0x7f0000009f00)=@random={'security.', ')\xa2\'\x00'}, &(0x7f0000009f40)='\x00', 0x1, 0x1)
openat$hpet(0xffffffffffffff9c, &(0x7f0000009f80), 0x82b82, 0x0)
r7 = memfd_secret(0x0)
sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f000000a180)={&(0x7f0000009fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f000000a140)={&(0x7f000000a000)={0x140, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x108, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x636}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x15e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x51}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffff81}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xd6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xed7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x2000c894}, 0x4000)
recvmsg(0xffffffffffffffff, &(0x7f000000b580)={&(0x7f000000a1c0)=@caif=@dgm, 0x80, &(0x7f000000b440)=[{&(0x7f000000a240)=""/204, 0xcc}, {&(0x7f000000a340)=""/217, 0xd9}, {&(0x7f000000a440)=""/4096, 0x1000}], 0x3, &(0x7f000000b480)=""/194, 0xc2}, 0x240)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b600), r4)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f000000b7c0)={&(0x7f000000b5c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f000000b780)={&(0x7f000000b640)={0x140, r8, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x118, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9f1b}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x26f7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4ff7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x200}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc154}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x4060000)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f000000b940)={&(0x7f000000b840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f000000b900)={&(0x7f000000b880)={0x58, 0x0, 0xb, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_COMPAT_NAME={0x7, 0x1, ')]\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x9, 0x1, 'IPVS\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x7, 0x1, '}/\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, ')\xa2\'\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001)

22:51:01 executing program 5:
r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff9)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000100)={@id, 0x40, r0, '\x00', @a})
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x129000, 0x44)
ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xcf0)
r2 = accept4$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10, 0x80000)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000280)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000300))
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000340)="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")
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.pending_reads\x00', 0x800, 0x6)
ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000004c0)={0x7, &(0x7f0000000480)=[{0x5}, {0x9, 0x1}, {0x5, 0x4}, {0x40, 0x26c2}, {0x1, 0x81}, {0x3, 0x1}, {0x9, 0x3}]})
keyctl$link(0x8, r0, 0xffffffffffffffff)
ioctl$KDENABIO(r3, 0x4b36)
connect$packet(r3, &(0x7f0000000500)={0x11, 0x2, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc)
r4 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000640)={0x0, "467521f2f6effa62abcbd5a396a14955cd49d62841632ba3479b0a07e9d508ee4e7c617bfae0a7c504cc8bdca76f5ec94c1770034b92719d4950246abdc893a3", 0x12}, 0x48, r4)
ioctl$TCSBRK(r1, 0x5409, 0x2)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000740)={'macvlan0\x00', {0x2, 0x0, @local}})
add_key$fscrypt_provisioning(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000800)={0x1, 0x0, @a}, 0x48, 0x0)

22:51:01 executing program 6:
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x0, 0x200, 0x0, 'queue1\x00', 0x1f})
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00')
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000580)={{}, 0x0, 0x1e, @inherit={0x60, &(0x7f0000000100)={0x1, 0x3, 0x5, 0xfffffffffffffffe, {0x4, 0x4, 0x10000, 0x63c, 0x3}, [0x3, 0xd2, 0x4]}}, @devid=r1})
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001580))
r2 = getpgrp(0x0)
fstat(r0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001700)={r2, r3, 0xffffffffffffffff}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001740)={{0x1, 0x1, 0x18, <r4=>r0, {0xfffffffffffffffc}}, './file0\x00'})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001780)={<r5=>r0, 0x4, 0x7ff, 0x7feb0ed5})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000017c0)={{0x1, 0x1, 0x18, <r6=>r0}, './file0\x00'})
r7 = syz_io_uring_setup(0x1a59, &(0x7f0000001b80)={0x0, 0x15d3, 0x8, 0x0, 0x93}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001c00), &(0x7f0000001c40))
r8 = pidfd_open(r2, 0x0)
ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000001c80)={0x10000, 0x32f, 0x8, 0x0, 0x0, [{{r5}, 0x7}, {{r6}, 0x74}, {{r0}, 0xe6a8}, {{r0}}, {{r7}, 0x5}, {{}, 0x3}, {{r8}, 0x6}, {{r0}, 0xfff}]})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r4)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001e40)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x34, r9, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800)
r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001f40), 0x400, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r11, 0x89f5, &(0x7f0000002000)={'ip6tnl0\x00', &(0x7f0000001f80)={'syztnl2\x00', 0x0, 0x17, 0x70, 0x0, 0x0, 0x0, @mcast2, @remote, 0x8, 0x1, 0xdf3}})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x50, r9, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x4008881)

22:51:01 executing program 7:
msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil)
ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000000)={0x8, 0xe, 0x22, 0x6, 0x6, 0x7})
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffffb, 0x9}}, './file0\x00'})
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'bond_slave_0\x00', {0x1}, 0x2})
munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000140)=0x57f57972)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000180)={{0x0, 0x3, 0x80000001, 0x3, 0x7140}, 0x2e5c8fbd, 0x7fff})
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf0, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0xc8, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd141}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe38}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000001}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5d2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x24f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x92}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8008}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5c}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x81}, 0x240400d0)
r2 = dup3(r1, r1, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r2)
r3 = syz_open_dev$mouse(&(0x7f0000000400), 0xff, 0x102000)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f00000004c0)={0x2, 0x7d7d4e9d, 0x7b, &(0x7f0000000440)=""/123})
r4 = accept4$packet(r3, &(0x7f0000000500), &(0x7f0000000540)=0x14, 0x80800)
getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000580), 0x10)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000005c0)=""/100, &(0x7f0000000640)=0x64)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000680)={0x8, '\x00', {'veth0_virt_wifi\x00'}, 0x47})

[  103.104375] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  103.110167] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  103.113142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  103.121960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  103.125928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  103.141676] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  103.144840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  103.147238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  103.156396] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  103.172814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  103.174794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  103.182222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  103.187944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  103.201045] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  103.211972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  103.256509] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  103.268383] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  103.284208] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  103.319005] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  103.320878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  103.331020] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  103.335697] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  103.360189] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  103.371173] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  103.385747] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  103.410622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  103.413237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  103.415601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  103.431778] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  103.441138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  103.446056] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  103.455852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  103.457246] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  103.459473] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  103.470620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  103.499896] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  103.500976] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  103.514045] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  103.519214] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  103.552111] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  105.241323] Bluetooth: hci1: command tx timeout
[  105.241993] Bluetooth: hci0: command tx timeout
[  105.303753] Bluetooth: hci2: command tx timeout
[  105.431672] Bluetooth: hci3: command tx timeout
[  105.559899] Bluetooth: hci4: command tx timeout
[  105.623553] Bluetooth: hci5: command tx timeout
[  105.623588] Bluetooth: hci7: command tx timeout
[  105.688620] Bluetooth: hci6: command tx timeout
[  107.287578] Bluetooth: hci0: command tx timeout
[  107.287645] Bluetooth: hci1: command tx timeout
[  107.351867] Bluetooth: hci2: command tx timeout
[  107.479535] Bluetooth: hci3: command tx timeout
[  107.609478] Bluetooth: hci4: command tx timeout
[  107.671730] Bluetooth: hci7: command tx timeout
[  107.673253] Bluetooth: hci5: command tx timeout
[  107.735808] Bluetooth: hci6: command tx timeout
[  109.335778] Bluetooth: hci0: command tx timeout
[  109.338473] Bluetooth: hci1: command tx timeout
[  109.399699] Bluetooth: hci2: command tx timeout
[  109.527644] Bluetooth: hci3: command tx timeout
[  109.656503] Bluetooth: hci4: command tx timeout
[  109.721667] Bluetooth: hci7: command tx timeout
[  109.721849] Bluetooth: hci5: command tx timeout
[  109.784608] Bluetooth: hci6: command tx timeout
[  111.385534] Bluetooth: hci1: command tx timeout
[  111.385668] Bluetooth: hci0: command tx timeout
[  111.447594] Bluetooth: hci2: command tx timeout
[  111.575488] Bluetooth: hci3: command tx timeout
[  111.703518] Bluetooth: hci4: command tx timeout
[  111.767710] Bluetooth: hci5: command tx timeout
[  111.770443] Bluetooth: hci7: command tx timeout
[  111.831528] Bluetooth: hci6: command tx timeout
[  163.284119] syz-executor.3 (283) used greatest stack depth: 24544 bytes left
[  165.670125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  165.676932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  165.679648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  165.686965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  165.691357] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  165.735200] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  165.739933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  165.743611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  165.746647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  165.748716] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  165.752011] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  165.758514] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  165.761129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  165.767922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  165.769845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  165.814220] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  165.819890] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  165.824855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  165.826861] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  165.829836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  165.830630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  165.831779] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  165.837992] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  165.839054] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  165.843548] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.850741] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  165.850963] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  165.855777] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  165.860829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  165.861935] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  165.867074] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  165.869232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  165.870691] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  165.873046] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.878708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  165.878982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  165.890217] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  165.897202] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  165.898133] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  165.907236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  167.768481] Bluetooth: hci0: command tx timeout
[  167.831736] Bluetooth: hci1: command tx timeout
[  167.832547] Bluetooth: hci3: command tx timeout
[  167.895508] Bluetooth: hci7: command tx timeout
[  167.959565] Bluetooth: hci4: command tx timeout
[  167.960553] Bluetooth: hci2: command tx timeout
[  167.961072] Bluetooth: hci5: command tx timeout
[  168.023513] Bluetooth: hci6: command tx timeout
[  169.815549] Bluetooth: hci0: command tx timeout
[  169.880521] Bluetooth: hci1: command tx timeout
[  169.881022] Bluetooth: hci3: command tx timeout
[  169.945562] Bluetooth: hci7: command tx timeout
[  170.009452] Bluetooth: hci2: command tx timeout
[  170.009952] Bluetooth: hci5: command tx timeout
[  170.010372] Bluetooth: hci4: command tx timeout
[  170.072016] Bluetooth: hci6: command tx timeout
[  171.864574] Bluetooth: hci0: command tx timeout
[  171.929688] Bluetooth: hci1: command tx timeout
[  171.930157] Bluetooth: hci3: command tx timeout
[  171.991482] Bluetooth: hci7: command tx timeout
[  172.055914] Bluetooth: hci4: command tx timeout
[  172.056378] Bluetooth: hci5: command tx timeout
[  172.057487] Bluetooth: hci2: command tx timeout
[  172.120552] Bluetooth: hci6: command tx timeout
[  173.912582] Bluetooth: hci0: command tx timeout
[  173.975609] Bluetooth: hci3: command tx timeout
[  173.976081] Bluetooth: hci1: command tx timeout
[  174.039485] Bluetooth: hci7: command tx timeout
[  174.104789] Bluetooth: hci5: command tx timeout
[  174.105282] Bluetooth: hci2: command tx timeout
[  174.105938] Bluetooth: hci4: command tx timeout
[  174.167512] Bluetooth: hci6: command tx timeout
[  227.810723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  227.813606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  227.820778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  227.828831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  227.836298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  227.945042] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  227.951026] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  227.953042] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  227.953626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  227.958393] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  227.964249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  227.965970] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  227.972691] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  227.984737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  227.992398] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  228.156785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  228.160842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  228.163838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  228.168335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  228.170855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  228.272927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  228.291119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  228.314518] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  228.328850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  228.359053] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  228.366849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  228.370946] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  228.372767] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  228.374951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  228.381639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  228.381995] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  228.390405] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  228.395315] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  228.409303] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  228.426111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  228.431322] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  228.456910] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  228.488543] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  228.521687] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  228.548065] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  229.911553] Bluetooth: hci0: command tx timeout
[  230.040067] Bluetooth: hci2: command tx timeout
[  230.041494] Bluetooth: hci1: command tx timeout
[  230.231925] Bluetooth: hci4: command tx timeout
[  230.551639] Bluetooth: hci5: command tx timeout
[  230.551689] Bluetooth: hci3: command tx timeout
[  230.552463] Bluetooth: hci7: command tx timeout
[  230.616655] Bluetooth: hci6: command tx timeout
[  231.959527] Bluetooth: hci0: command tx timeout
[  232.087584] Bluetooth: hci2: command tx timeout
[  232.090476] Bluetooth: hci1: command tx timeout
[  232.280546] Bluetooth: hci4: command tx timeout
[  232.599516] Bluetooth: hci7: command tx timeout
[  232.599580] Bluetooth: hci3: command tx timeout
[  232.599998] Bluetooth: hci5: command tx timeout
[  232.665576] Bluetooth: hci6: command tx timeout
[  234.008542] Bluetooth: hci0: command tx timeout
[  234.136542] Bluetooth: hci1: command tx timeout
[  234.137011] Bluetooth: hci2: command tx timeout
[  234.327536] Bluetooth: hci4: command tx timeout
[  234.647530] Bluetooth: hci3: command tx timeout
[  234.647834] Bluetooth: hci7: command tx timeout
[  234.648764] Bluetooth: hci5: command tx timeout
[  234.712824] Bluetooth: hci6: command tx timeout
[  236.057029] Bluetooth: hci0: command tx timeout
[  236.183712] Bluetooth: hci2: command tx timeout
[  236.183736] Bluetooth: hci1: command tx timeout
[  236.375844] Bluetooth: hci4: command tx timeout
[  236.696061] Bluetooth: hci5: command tx timeout
[  236.697473] Bluetooth: hci3: command tx timeout
[  236.697526] Bluetooth: hci7: command tx timeout
[  236.759570] Bluetooth: hci6: command tx timeout
[  290.347675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  290.350801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  290.359107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  290.371067] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  290.377359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  290.472797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  290.478054] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  290.487965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  290.507723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  290.511993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  290.612759] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  290.622554] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  290.638253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  290.648380] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  290.658012] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  290.685846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  290.696908] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  290.702782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  290.714887] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  290.763690] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  290.765181] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  290.774147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  290.788635] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  290.790995] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  290.801012] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  290.804020] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  290.807019] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  290.808514] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  290.829062] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  290.842106] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  290.843988] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  290.848283] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  290.858232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  290.864345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  290.894012] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  290.903947] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  290.910140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  290.922976] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  290.926501] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  290.928923] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  292.440578] Bluetooth: hci0: command tx timeout
[  292.567619] Bluetooth: hci1: command tx timeout
[  292.759677] Bluetooth: hci2: command tx timeout
[  293.016898] Bluetooth: hci7: command tx timeout
[  293.080198] Bluetooth: hci5: command tx timeout
[  293.144085] Bluetooth: hci4: command tx timeout
[  293.144108] Bluetooth: hci3: command tx timeout
[  293.272062] Bluetooth: hci6: command tx timeout
[  294.487852] Bluetooth: hci0: command tx timeout
[  294.615506] Bluetooth: hci1: command tx timeout
[  294.807570] Bluetooth: hci2: command tx timeout
[  295.063956] Bluetooth: hci7: command tx timeout
[  295.127598] Bluetooth: hci5: command tx timeout
[  295.193797] Bluetooth: hci3: command tx timeout
[  295.193968] Bluetooth: hci4: command tx timeout
[  295.319529] Bluetooth: hci6: command tx timeout
[  296.536536] Bluetooth: hci0: command tx timeout
[  296.665456] Bluetooth: hci1: command tx timeout
[  296.857490] Bluetooth: hci2: command tx timeout
[  297.113611] Bluetooth: hci7: command tx timeout
[  297.175724] Bluetooth: hci5: command tx timeout
[  297.239600] Bluetooth: hci4: command tx timeout
[  297.240036] Bluetooth: hci3: command tx timeout
[  297.367518] Bluetooth: hci6: command tx timeout
[  298.583492] Bluetooth: hci0: command tx timeout
[  298.712489] Bluetooth: hci1: command tx timeout
[  298.904360] Bluetooth: hci2: command tx timeout
[  299.159515] Bluetooth: hci7: command tx timeout
[  299.223480] Bluetooth: hci5: command tx timeout
[  299.288805] Bluetooth: hci3: command tx timeout
[  299.289234] Bluetooth: hci4: command tx timeout
[  299.415634] Bluetooth: hci6: command tx timeout
[  353.192843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  353.201125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  353.204396] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  353.218107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  353.229000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  353.327399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  353.332223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  353.339112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  353.352088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  353.357212] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  353.401267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  353.405263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  353.412003] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  353.440152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  353.449971] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  353.476976] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  353.487675] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  353.493622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  353.508304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  353.514162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  353.693815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  353.711103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  353.743784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  353.755393] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  353.789909] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  354.086908] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  354.093049] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  354.114992] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  354.117218] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  354.119165] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  354.135018] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  354.137269] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  354.140337] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  354.144996] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  354.159929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  354.180353] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  354.186892] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  354.197025] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  354.199083] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  354.239048] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  355.287550] Bluetooth: hci0: command tx timeout
[  355.415630] Bluetooth: hci1: command tx timeout
[  355.543671] Bluetooth: hci3: command tx timeout
[  355.607544] Bluetooth: hci2: command tx timeout
[  355.991511] Bluetooth: hci4: command tx timeout
[  356.248491] Bluetooth: hci6: command tx timeout
[  356.311506] Bluetooth: hci7: command tx timeout
[  356.375614] Bluetooth: hci5: command tx timeout
[  357.335528] Bluetooth: hci0: command tx timeout
[  357.463476] Bluetooth: hci1: command tx timeout
[  357.592350] Bluetooth: hci3: command tx timeout
[  357.656135] Bluetooth: hci2: command tx timeout
[  358.039669] Bluetooth: hci4: command tx timeout
[  358.295527] Bluetooth: hci6: command tx timeout
[  358.361630] Bluetooth: hci7: command tx timeout
[  358.423475] Bluetooth: hci5: command tx timeout
[  359.383750] Bluetooth: hci0: command tx timeout
[  359.511678] Bluetooth: hci1: command tx timeout
[  359.640576] Bluetooth: hci3: command tx timeout
[  359.703500] Bluetooth: hci2: command tx timeout
[  360.087821] Bluetooth: hci4: command tx timeout
[  360.344585] Bluetooth: hci6: command tx timeout
[  360.407794] Bluetooth: hci7: command tx timeout
[  360.471488] Bluetooth: hci5: command tx timeout
[  361.433665] Bluetooth: hci0: command tx timeout
[  361.559627] Bluetooth: hci1: command tx timeout
[  361.687686] Bluetooth: hci3: command tx timeout
[  361.751590] Bluetooth: hci2: command tx timeout
[  362.135584] Bluetooth: hci4: command tx timeout
[  362.391509] Bluetooth: hci6: command tx timeout
[  362.456449] Bluetooth: hci7: command tx timeout
[  362.519508] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
22:56:03  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffffea00001d8348 RCX=ffffffff819c6533 RDX=ffff888033d5b700
RSI=ffffffff819c6541 RDI=0000000000000007 RBP=000000000000002a RSP=ffff8880339bf870
R8 =0000000000000000 R9 =fffff9400003b06e R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=00007fbb9c13a000 R14=ffff8880339bfce0 R15=ffff88802d5259d0
RIP=ffffffff81738bc8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe4000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe1e247b7d0 CR3=000000001693d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff81aec338 RBX=0000000000000003 RCX=0000000000000001 RDX=0000000000000000
RSI=000000000000001c RDI=ffff88806cf08b78 RBP=dffffc0000000000 RSP=ffff88806cf08ad0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=000000000000001c R13=0000000000000000 R14=ffff88806cf08b60 R15=ffff888026b74240
RIP=ffffffff81604b13 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdb2d10f000 CR3=000000000dbec000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73
XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000