Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:27850' (ECDSA) to the list of known hosts.
2025/06/04 07:33:58 fuzzer started
2025/06/04 07:33:59 dialing manager at localhost:39055
syzkaller login: [   83.704085] cgroup: Unknown subsys name 'net'
[   83.847966] cgroup: Unknown subsys name 'cpuset'
[   83.899731] cgroup: Unknown subsys name 'rlimit'
2025/06/04 07:34:15 syscalls: 2214
2025/06/04 07:34:15 code coverage: enabled
2025/06/04 07:34:15 comparison tracing: enabled
2025/06/04 07:34:15 extra coverage: enabled
2025/06/04 07:34:15 setuid sandbox: enabled
2025/06/04 07:34:15 namespace sandbox: enabled
2025/06/04 07:34:15 Android sandbox: enabled
2025/06/04 07:34:15 fault injection: enabled
2025/06/04 07:34:15 leak checking: enabled
2025/06/04 07:34:15 net packet injection: enabled
2025/06/04 07:34:15 net device setup: enabled
2025/06/04 07:34:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/04 07:34:15 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/04 07:34:15 USB emulation: enabled
2025/06/04 07:34:15 hci packet injection: enabled
2025/06/04 07:34:15 wifi device emulation: enabled
2025/06/04 07:34:15 802.15.4 emulation: enabled
2025/06/04 07:34:15 fetching corpus: 0, signal 0/0 (executing program)
2025/06/04 07:34:16 starting 8 fuzzer processes
07:34:16 executing program 0:
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000))
pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)="519a54a16e58a4bda9c0dc4b46ca20e737cfa5d3679536e403cba22eb0d29ba0d6e3a9451f4a915687f6d5981fb981a71312fd14e6dc38ca9e66d2b54a96c54fb7779a60c45747a4ec10b2f949ca5e4bd5457a2e8f6a1b6e9c116320b03d19c133b8a9573937ef4aadae77f488811c8d6cea4641c46ce914465bab6a1ac9b75989b94d10c5", 0x85}, {&(0x7f0000000100)="8c7e6da589cd420235cfec21391d00a52920b87ffa1d4d2faa9bebbe5885b99a936a001258c85138ab6e6733eb074aaf1dbea49045ee2a0c9152be8c9fff2a6a38e45382bed2ebc1c1288ffb96c1372da5ca9bc097805240e34537692b1c811f09948b253934424f7158b79e234fbaca2e6395ccba993d76a70072788d612b1f9c206a1963d9b4197795725666bd06f271c0df19ec90cf880ed929358f19e1ea7f3fe100977bf27496c6e883732f9afda5cfe1ce92c618ef5256f231764fa8d281ace9cdc369be282e322f4511464fbe13d79612d13b91b1cc", 0xd9}, {&(0x7f0000000200)="ec981b3fbce4a948c50e1f9dbdb338fa89287a1e53fc4dcc2ad705e7867a943777722c1897891aa5b60d86886ba9d7062210db13e3b4d794400566952ed4251f48bfb05bde5df1ab8bf2b648b47549cd1beb8242cbdc295e529d7fd32a0bbd3d0949b140c8543f138973329efe78c6b2e72e17fe53f53a0477230788f80b27117519c88ce1d4b778a147c071f51525c3bb63b7f602097a7024f5ef16f424c2ef9fb05252df0521e8b3f8d40dbc52ae3d4eff0c64e69669a5953991315db7fc2c21e5554620c0bd4066f967f3c53a43c627b77c0605f5568cf871c0901efb9c5900b70571853e1deb83fa9bb8c9e2d95c8d", 0xf1}, {&(0x7f0000000300)="864f4866a089ef0fc382d39d9db604f87ff022dddcf222c98172009287227c1e0a5f125a1a60aef58167f957451a7e021428956c86ac7e18fa848e7b13af3ccb7e693f643c7b5c3dff050a9b5e6ab4c72395ad205e9e513cdba903b48a642d4c6d427ea1e8a5b4ea005dcc82040a3530f042d1b2e06f2aecbd714d82a9f25df89b73bf5adc40cdbb584c898c071108a47dc09ac3d2ba", 0x96}], 0x4, 0x8000, 0x8001)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000400)='illinois\x00', 0x9)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x5}}, './file0\x00'})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000480))
r2 = signalfd(r1, &(0x7f00000004c0)={[0x4]}, 0x8)
r3 = dup3(r0, r2, 0x0)
r4 = openat$cgroup_devices(r2, &(0x7f0000000500)='devices.deny\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000540)={0x0, 0x4, [0xfffffffffffffff9, 0x2000000000000, 0x3, 0x7fffffff, 0x5, 0x2]})
sendto(r3, &(0x7f0000000580)="3f55a266a535d8395ba4a875b95e090f6dab7b31a2aaa790ac680cfc5eeb5fa9d50dd545bc6aeb6c86df1724d2f6f727339e9cd06eedb604cabb82bd77683703cefaa48b702f4b1ce2ad28c89ebaa87f5cf0501d69079bef4da5a3ea31178a43b00743729d385855ab7f29882c3e0ffc89e556b16652a8c4f4d60bf582b518766762c938652f53ac9ce225ec585455dbc8395054117d057521ded29e4f9d45e0a44c362ce055aeef68cbb7c9", 0xac, 0x4, 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$KIOCSOUND(r5, 0x4b2f, 0x5d79)
pipe(&(0x7f0000000680)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000006c0)={'wlan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5, {0x40}}, './file0\x00'})
r9 = accept4$bt_l2cap(r8, &(0x7f0000000780)={0x1f, 0x0, @fixed}, &(0x7f00000007c0)=0xe, 0x80000)
ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f0000000800))
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000840), &(0x7f0000000880)=0x4)

07:34:16 executing program 1:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/25)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2842, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8564, 0x67}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x40d0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r1, {0x1}}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8)
r5 = syz_open_dev$vcsu(&(0x7f0000000380), 0x9, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f00000003c0)={'ip_vti0\x00', r4, 0x8, 0x20, 0x0, 0xf13c0000, {{0x6, 0x4, 0x3, 0x2e, 0x18, 0x64, 0x0, 0x4, 0x2f, 0x0, @remote, @multicast1, {[@end]}}}}})
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000440))
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000880)={0x6, &(0x7f0000000840)=[{0x530, 0x4, 0x6, 0x6}, {0xc1, 0x2, 0x3, 0xa273}, {0x4, 0x4, 0x1, 0x6}, {0xfffe, 0x5, 0x5, 0xfbea}, {0x80, 0x1f, 0x7, 0x1ff}, {0x3, 0x4, 0x5, 0x6}]})
r7 = memfd_create(&(0x7f00000008c0)='/dev/vcsu#\x00', 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000900)={0x0, r7, 0x5, 0x1, 0x0, 0x5})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000940)={{0x1, 0x1, 0x18, <r8=>r6}, './file0\x00'})
pwritev2(r8, &(0x7f0000000f00)=[{&(0x7f0000000980)="09b542de89a5f15debf6cf954e3e90c2148a1973fcfbd85d142dfbc5e488f791aef916736c49001683d81077dcf9ee8ce87646d4376ea18bf4a605909da23428a81f894e8d00553991078f208f9c8e8ebf7259c880456a350260f2f340de392daaf010b497469c9b79ba56d1ab6f483d6218875b07cb7dbed691ab03cd24f2fa683a07462bfd2ccd3cb7c411e4bf9acbc2417da3b1f05e71e28762abbcb67b18f0750187515e0ab3", 0xa8}, {&(0x7f0000000a40)="f546a24658fa58a05019b6a7f988ff46a46c89da465266880677bd7dea2574be1fc8c6e7e707745e8548d93f062d1a2684527efc86fbf591024ebad72e2f15721387a9dbff8692c3ba68a4cf1eea4ef088bee2f852873f627972d42a8730c2f2a96da75e65758e06de577755684d93c22005796089cc9f044ad4a1a75a877ab61cc36a9fbdc7ca59049dbde6a751e9ee14fd939dfcc182f31236b4325e6acf37b971f37772004b0776f76388c045a4f734a93d22e7f2adf91710e6f6156eecd88428d18dcb75963ec5c051544fa842ccb3d98e6a852e6dcf43", 0xd9}, {&(0x7f0000000b40)="42e4e7eb9e05e7cb7abde68a9cb46edcf66bebb6ee46b639d8f83404a7a5aa4bf90d9b7757498287", 0x28}, {&(0x7f0000000b80)="deecb5239b5d776566b3aa11c1de16456469bb0ff0fadcb9b55226a14e69524e673d0d09700e991c310f58c29912c645201ada75f8ff59bd9bc398ce6f7837c00e703538f816ad7af0a981c86a2c6ca3236605a44e67845c5de0930c18ea6205edead0ba2256f2ab2b9d1e998dabd1e2d4173c298ea1b6c912f4477a4b0011da20fc7f6ba6f1bfa1fc513b7bd838414ff3f5eba4c92156aa2dc09be4a130c4d3cb57df92f665df3ae471be199c8128422a911be9c174b714394673390036710b21f613e8440a4369b2bc0d20623bc48b09aa0ec167d828b8baa9acc71a53fb754207b28d061de9ea7788", 0xea}, {&(0x7f0000000c80)="73994634179d0aa76dfefb0c468bd5", 0xf}, {&(0x7f0000000cc0)="51fd85ed0fdf4e5aff8eb83682b03177679f753351be1517cd361223f34e23f79ea06b3438cec68c88bd8276189bb7a45a95923b3ad6adc65e2e16cef28e5c5343e9d10a39e7da86bc6858", 0x4b}, {&(0x7f0000000d40)="60ed394760ce40ebb148876f374cc72165850df43c1dad9dd666cb01c96a6e536a51ea0c65a84ea547cab0cbf364058095202f671cf07b2fbbbcdd4d6572430146f5a3dc6fb65699d60632b583fb177a5eca04095c99bac3b3704633eca29436286f274d3e2b0a1a2627d1e352181c7f110f2f20820870510e0779353fc0d3c3ccd67555f597ba42cc85f9867526acdd2a061e8fa668f568b9c116cdb73d4ac4dcd5ef8778bbe4ec71ec20a4e87cb9ac10bfa0bd2c7b26cbec11f630b584adbc37a644690d6ce3254e3a3283b78ac34d25c8b62c60c687a06657e38010a08d787d91c6e18ce7", 0xe6}, {&(0x7f0000000e40)="ad7726c36a4192599d2ef74a00173141997c4c74cc08cb879158ea8e7c5632f476fe13b2da019b3d4acc25fd836a9d6216af3a1a490da637aae976af4c0da87a901c1d276ab8d8a5b9b828196e185c3e64fcc023b6fe1846db40494192e97b897957a1e633e2bc3906041312a7ae6d4750f7db364c6543e702ed6b0f00e8224810cd27c7f8bb7f982e5d121ef94d600cd2536f01eba6c850f3e3465dab961108d81a6d7cb90bd4d5a6f671d4603eac026d824b", 0xb3}], 0x8, 0x3, 0x6, 0x11)
fcntl$getflags(r8, 0x3)
write$binfmt_misc(r0, &(0x7f0000000f80)={'syz0', "9b82014b3da3ee84e42d42c73b7cf6b1ee68b7ecef91d7ecff12b0d2603a212e60c81f128d2dd8bbe074f2d3cd931aed7a649e250068fe79b52ba0d145"}, 0x41)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x4c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000800}, 0x20004000)
r9 = socket(0x1e, 0x6, 0x0)
setsockopt$inet_buf(r9, 0x0, 0x10, &(0x7f0000001140)="833ac2ba6c9e952bbd9d46d3076c3be87f5b0037d9db52cde5267fe0c0bb52ca788366282bfa14b234220546d96b5daf248356ae360ee5860596db79fdd207eab0fdde727125d9729d8e22aa7f82294a04736c3948664ca2fb368afd77b250baa397bdd237397d73613e62153db41705314079c83089e821dfeccaca779c97b5637a4b8978075f6684420e7c21aa8974cc5dfdc1bb1f9596256d5a47850548a65b429b49bbc3a9dfc078bc400d82b0fcc9d04a09e1efa8d799b15e62ea8515c264b7d73c0762cd81ac291209d4d15f0d", 0xd0)

07:34:16 executing program 2:
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r1 = creat(&(0x7f0000000480)='./file0\x00', 0x40)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000004c0)=<r2=>0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000580)={{r0}, r2, 0x4, @inherit={0x78, &(0x7f0000000500)={0x1, 0x6, 0xffffffffffffff00, 0x6, {0x0, 0x7, 0x8, 0x3708, 0x1}, [0xb07, 0x67aa, 0x9, 0x8, 0x5, 0x8]}}, @subvolid=0xffffffff00000000})
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001580), 0x10000, 0x0)
sendfile(r1, r3, &(0x7f00000015c0)=0x20, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000001600)={{0x1, 0x1, 0x18, <r4=>r3, @in_args={0x1}}, './file0\x00'})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001640)='./binderfs2/binder1\x00', 0x403, 0x0)
dup3(r1, r5, 0x80000)
getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000001680)={@ipv4={""/10, ""/2, @multicast1}}, &(0x7f00000016c0)=0x14)
fchdir(r0)
r6 = dup3(r1, r3, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000001740)={'broute\x00', 0x0, 0x0, 0x0, [0x5, 0x46, 0x4, 0x7, 0xfffffffffffffff9, 0x6], 0x6, &(0x7f0000001700)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8)
r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001840)='./binderfs2/binder-control\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000001880)={{0x0, 0x81, 0x2, 0x41d, 0x0, 0x7, 0x98, 0x10001, 0x7, 0x0, 0xcd6, 0x0, 0x1, 0x9, 0x3f}, 0x18, [0x0, 0x0, 0x0]})
getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000001940), &(0x7f0000001980)=0x30)
r8 = openat$cgroup_ro(r6, &(0x7f00000019c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
ioctl$TCSBRKP(r8, 0x5425, 0x80000000)

07:34:16 executing program 3:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x111102, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x0, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0x4000)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000200))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x54, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0x2}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@handle={0x73682a85, 0x1100, 0x2}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}], 0xa5, 0x0, &(0x7f0000000380)="c0116e38ea1732dd05fee37863d598e1d963fd620d62dd1efb8ed9bfe5d6daaa225913b190abd3ad6ec6adcf4260b8d647c24a7eaf950fc26b02a437404b85ae2d413daf359eac8d779bb572f4220b943c9c6372b812f1f2739ac0881020f0803beb97ee8e45024e03f13e84e516ba71711ae3febf559586d0ffaac044e928fe66f3fefc6313c4cd7dc41eb3a76f9026f77f9d1133daa8f1690e7930e0cac3641ab7c6dfdf"})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000480)={<r2=>r0, 0x6, 0x4, 0x7})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xf3}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x2}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x94)
flistxattr(r0, &(0x7f0000000700)=""/228, 0xe4)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000800)=<r4=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000840)={{}, r4, 0x0, @unused=[0x3, 0xfff, 0x5, 0x5], @devid})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000001840)={0x40000010})
ioctl$VT_RELDISP(r0, 0x5605)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x50, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x43}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f00000019c0))
r5 = fspick(r0, &(0x7f0000001a00)='./file0\x00', 0x1)
dup3(r5, r1, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x58, 0x0, 0x20, 0xffffffff, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x58}}, 0x50)

[  101.041549] audit: type=1400 audit(1749022456.831:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
07:34:16 executing program 4:
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)
recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/168, 0xa8}, {&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/103, 0x67}], 0x4, &(0x7f0000000300)=""/152, 0x98}, 0x20)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000400))
ioctl$FIOCLEX(0xffffffffffffffff, 0x5451)
fchdir(0xffffffffffffffff)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @private=0xa010100}, 0x10)
connect(r0, &(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
write$P9_RWSTAT(r1, &(0x7f00000005c0)={0x7, 0x7f, 0x1}, 0x7)
r2 = accept$inet6(r1, 0x0, &(0x7f0000000600))
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000640)="6486fe5d5f72dc3a4f19249d7d9326af", 0x10)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000680)=<r3=>0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000740)={{r1}, r3, 0x4, @inherit={0x58, &(0x7f00000006c0)={0x1, 0x2, 0x1ff, 0x0, {0x8, 0x9, 0x401, 0x0, 0xd20}, [0x71, 0x0]}}, @subvolid=0x1})
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x38, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4004)
r4 = syz_open_dev$vcsa(&(0x7f0000001840), 0x7, 0x80000)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x7c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x26}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x7c}}, 0x8034)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r1)
sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008011)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0x90, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4040044)

07:34:16 executing program 5:
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe4, r0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffe0}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0xc005}, 0x8000)
r1 = syz_open_dev$vcsn(&(0x7f0000000300), 0x7, 0x1)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r2=>r1, {0xee01, 0xee01}}, './file0\x00'})
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x120, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20040081}, 0x240040c4)
clock_gettime(0x0, &(0x7f0000003180)={<r3=>0x0, <r4=>0x0})
recvmmsg(r1, &(0x7f0000003100)=[{{&(0x7f0000000680)=@alg, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000700)=""/179, 0xb3}, {&(0x7f00000007c0)=""/208, 0xd0}, {&(0x7f00000008c0)=""/109, 0x6d}, {&(0x7f0000000940)=""/59, 0x3b}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/58, 0x3a}, {&(0x7f00000019c0)=""/162, 0xa2}, {&(0x7f0000001a80)=""/202, 0xca}, {&(0x7f0000001b80)=""/227, 0xe3}], 0x9, &(0x7f0000001d40)=""/59, 0x3b}, 0x9}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)=""/253, 0xfd}, {&(0x7f0000001e80)=""/22, 0x16}, {&(0x7f0000001ec0)=""/31, 0x1f}, {&(0x7f0000001f00)=""/46, 0x2e}, {&(0x7f0000001f40)=""/240, 0xf0}, {&(0x7f0000002040)=""/7, 0x7}], 0x6, &(0x7f0000002100)=""/4096, 0x1000}, 0x8001}], 0x2, 0x2002, &(0x7f00000031c0)={r3, r4+10000000})
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000003200)={0x1ff, 0x8, 0x7, 0x6, 0x9})
sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000003240)=0x9)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000032c0), r2)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000003400)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003300)={0xb0, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3311}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x15}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x1)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000003440), &(0x7f0000003480)='./file0\x00', 0x8, 0x3)
mount$cgroup(0x0, &(0x7f00000034c0)='./file0\x00', &(0x7f0000003500), 0x100000, &(0x7f0000003540)={[{}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@clone_children}], [{@obj_type}, {@dont_hash}]})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000035c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000036c0)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003680)={&(0x7f0000003600)={0x64, r7, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x810)
io_pgetevents(0x0, 0xc6be, 0x3, &(0x7f0000003700)=[{}, {}, {}], &(0x7f0000003780)={0x77359400}, &(0x7f0000003800)={&(0x7f00000037c0)={[0xa8]}, 0x8})

07:34:16 executing program 6:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x1010, 0xffffffffffffffff, 0x8000000)
r0 = fsmount(0xffffffffffffffff, 0x1, 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
fchdir(r0)
ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000180)={0x81})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={<r1=>r0, 0x6, 0xc1, 0xffff})
ioctl$CDROM_SELECT_DISK(r1, 0x5322, 0x7)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x80082, 0x88)
ioctl$CDROMREADAUDIO(r2, 0x530e, &(0x7f0000000280)={@lba, 0x3, 0x1d, &(0x7f0000000240)=""/29})
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000002c0)='IPVS\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c)
ioctl$CDROMREADTOCENTRY(r2, 0x5306, &(0x7f0000000340)={0x0, 0x7, 0x0, 0x2, @lba=0x5})
r3 = dup3(r2, r1, 0x0)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
ioctl$CDROMCLOSETRAY(r1, 0x5319)
getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000480)=""/219, &(0x7f0000000580)=0xdb)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x59, 0x45, "d4261a88e3ff0915058b0044dcc60a277187fea65d1448247521178fc767526f5a479fbfb615080f0789660aaa6202f49175a43fce370e44d6fd4f4ee63826070b936e41ff1f6e3e71758c476fc0f4eb0895f98d90"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008004}, 0x8000)
r4 = dup2(r2, r1)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000700)={0x3, 0x7f, 0x7, 0x3, 0x7, "3a82517584f9e4712616c1682ec4e79a8132ad"})
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

07:34:17 executing program 7:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0xfffffffffffffffd, 0x1f})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0x1)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x0, 0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000000c0))
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x90000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000001c0))
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000280)={<r2=>0x0, "147d29bed379ae8353af48993af91faa"})
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001280)={r2, 0x0, 0x8001, 0x1})
r3 = syz_open_dev$vcsa(&(0x7f0000001680), 0x6, 0x80)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000016c0)=[@mss={0x2, 0x2c7}, @mss={0x2, 0x2}, @timestamp, @mss={0x2, 0xecd1aa0}, @timestamp, @window={0x3, 0x800, 0x400}, @sack_perm, @mss={0x2, 0x800}, @timestamp], 0x9)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001740), 0xa0000, 0x0)
r5 = gettid()
fcntl$setown(r4, 0x8, r5)
r6 = openat$cgroup_subtree(r4, &(0x7f0000001780), 0x2, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f00000017c0)={0x2, 0x3c, "149d64ce042e0cd56b900442f802dc40411fa3312469a3d69f94703f1ccd383c00b1ec3bd533bfd3e1ca7f443eab0297c59c1da2e6a7041499f22687"})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000001840)={0x7, &(0x7f0000001800)=[{0x81, 0x9, 0xc0, 0x1fe}, {0x2abc, 0x4, 0x81, 0x8}, {0x9, 0x9, 0x1f, 0x2}, {0x9, 0x8, 0x2}, {0x9, 0x8, 0x1, 0xfffffffc}, {0x9, 0x6, 0x5, 0x800}, {0x8, 0x0, 0x3, 0x80000001}]})
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000001880))
r7 = openat$full(0xffffffffffffff9c, &(0x7f00000018c0), 0x105000, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000007a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007a40)={&(0x7f0000007900)={0x110, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x10000040}, 0x4)

[  102.397834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  102.404912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  102.407015] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  102.412248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  102.415191] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  102.419886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  102.431821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  102.437190] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  102.442025] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  102.467743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  102.469378] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  102.477020] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  102.483141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  102.506157] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  102.507939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  102.519253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  102.521159] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  102.532598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  102.542943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  102.581419] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  102.587340] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  102.593170] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  102.597117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  102.650280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  102.662690] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  102.671250] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  102.677566] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  102.686254] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  102.688053] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  102.691202] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  102.701119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  102.748289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  102.756255] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  102.767979] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  102.779915] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  102.783042] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  102.797017] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  102.851845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  102.886122] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  102.898234] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  104.518519] Bluetooth: hci0: command tx timeout
[  104.518645] Bluetooth: hci1: command tx timeout
[  104.582571] Bluetooth: hci2: command tx timeout
[  104.646403] Bluetooth: hci3: command tx timeout
[  104.774658] Bluetooth: hci5: command tx timeout
[  104.838065] Bluetooth: hci6: command tx timeout
[  104.901640] Bluetooth: hci4: command tx timeout
[  105.029780] Bluetooth: hci7: command tx timeout
[  106.565537] Bluetooth: hci1: command tx timeout
[  106.567661] Bluetooth: hci0: command tx timeout
[  106.629623] Bluetooth: hci2: command tx timeout
[  106.693575] Bluetooth: hci3: command tx timeout
[  106.823656] Bluetooth: hci5: command tx timeout
[  106.886514] Bluetooth: hci6: command tx timeout
[  106.949742] Bluetooth: hci4: command tx timeout
[  107.077644] Bluetooth: hci7: command tx timeout
[  108.615502] Bluetooth: hci0: command tx timeout
[  108.615523] Bluetooth: hci1: command tx timeout
[  108.677693] Bluetooth: hci2: command tx timeout
[  108.741655] Bluetooth: hci3: command tx timeout
[  108.869786] Bluetooth: hci5: command tx timeout
[  108.934784] Bluetooth: hci6: command tx timeout
[  108.998502] Bluetooth: hci4: command tx timeout
[  109.127855] Bluetooth: hci7: command tx timeout
[  110.661621] Bluetooth: hci0: command tx timeout
[  110.662564] Bluetooth: hci1: command tx timeout
[  110.726787] Bluetooth: hci2: command tx timeout
[  110.790556] Bluetooth: hci3: command tx timeout
[  110.917545] Bluetooth: hci5: command tx timeout
[  110.982732] Bluetooth: hci6: command tx timeout
[  111.046581] Bluetooth: hci4: command tx timeout
[  111.175837] Bluetooth: hci7: command tx timeout
[  165.034853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  165.039435] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  165.041819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  165.048244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  165.051152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  165.075827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  165.078912] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  165.081170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  165.097152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  165.099441] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  165.147329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.153905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.156646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  165.166374] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  165.170891] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  165.181606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  165.184605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  165.187144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  165.196252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  165.211431] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  165.285396] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  165.298889] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  165.310285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  165.324290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  165.332357] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  165.332484] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  165.339866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  165.356043] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  165.376662] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  165.410249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  165.412186] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  165.414697] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  165.416815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  165.419135] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  165.420785] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  165.423851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  165.429931] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  165.431963] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  165.444481] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  165.444665] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  167.109543] Bluetooth: hci0: command tx timeout
[  167.174730] Bluetooth: hci1: command tx timeout
[  167.303594] Bluetooth: hci2: command tx timeout
[  167.304370] Bluetooth: hci3: command tx timeout
[  167.429542] Bluetooth: hci4: command tx timeout
[  167.493596] Bluetooth: hci5: command tx timeout
[  167.494300] Bluetooth: hci7: command tx timeout
[  167.495757] Bluetooth: hci6: command tx timeout
[  169.157592] Bluetooth: hci0: command tx timeout
[  169.221553] Bluetooth: hci1: command tx timeout
[  169.349581] Bluetooth: hci3: command tx timeout
[  169.350083] Bluetooth: hci2: command tx timeout
[  169.477907] Bluetooth: hci4: command tx timeout
[  169.541603] Bluetooth: hci7: command tx timeout
[  169.542102] Bluetooth: hci6: command tx timeout
[  169.542650] Bluetooth: hci5: command tx timeout
[  171.205694] Bluetooth: hci0: command tx timeout
[  171.269512] Bluetooth: hci1: command tx timeout
[  171.397548] Bluetooth: hci2: command tx timeout
[  171.398014] Bluetooth: hci3: command tx timeout
[  171.525540] Bluetooth: hci4: command tx timeout
[  171.590781] Bluetooth: hci5: command tx timeout
[  171.591239] Bluetooth: hci6: command tx timeout
[  171.591863] Bluetooth: hci7: command tx timeout
[  173.253550] Bluetooth: hci0: command tx timeout
[  173.318231] Bluetooth: hci1: command tx timeout
[  173.445602] Bluetooth: hci3: command tx timeout
[  173.446052] Bluetooth: hci2: command tx timeout
[  173.573553] Bluetooth: hci4: command tx timeout
[  173.637774] Bluetooth: hci7: command tx timeout
[  173.639597] Bluetooth: hci6: command tx timeout
[  173.640048] Bluetooth: hci5: command tx timeout
[  227.155795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  227.159759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  227.160882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  227.170394] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  227.174065] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  227.282538] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  227.290097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  227.292025] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  227.299900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  227.307823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  227.524773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  227.532296] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  227.535185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  227.539423] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  227.541405] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  227.585111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  227.588855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  227.590227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  227.595592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  227.598007] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  227.703252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  227.725119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  227.732140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  227.737815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  227.741734] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  227.746592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  227.752425] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  227.756056] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  227.758963] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  227.773982] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  227.785015] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  227.799977] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  227.804048] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  227.915998] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  227.938990] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  227.945247] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  227.957731] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  228.000941] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  228.050949] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  228.072528] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  229.189794] Bluetooth: hci0: command tx timeout
[  229.382030] Bluetooth: hci1: command tx timeout
[  229.639121] Bluetooth: hci2: command tx timeout
[  229.703721] Bluetooth: hci3: command tx timeout
[  229.894803] Bluetooth: hci6: command tx timeout
[  229.894847] Bluetooth: hci4: command tx timeout
[  230.021698] Bluetooth: hci5: command tx timeout
[  230.278593] Bluetooth: hci7: command tx timeout
[  231.237700] Bluetooth: hci0: command tx timeout
[  231.429690] Bluetooth: hci1: command tx timeout
[  231.687479] Bluetooth: hci2: command tx timeout
[  231.750541] Bluetooth: hci3: command tx timeout
[  231.941830] Bluetooth: hci4: command tx timeout
[  231.941913] Bluetooth: hci6: command tx timeout
[  232.069572] Bluetooth: hci5: command tx timeout
[  232.325531] Bluetooth: hci7: command tx timeout
[  233.287157] Bluetooth: hci0: command tx timeout
[  233.477576] Bluetooth: hci1: command tx timeout
[  233.734537] Bluetooth: hci2: command tx timeout
[  233.798611] Bluetooth: hci3: command tx timeout
[  233.990019] Bluetooth: hci6: command tx timeout
[  233.990558] Bluetooth: hci4: command tx timeout
[  234.117879] Bluetooth: hci5: command tx timeout
[  234.373980] Bluetooth: hci7: command tx timeout
[  235.334805] Bluetooth: hci0: command tx timeout
[  235.525699] Bluetooth: hci1: command tx timeout
[  235.781692] Bluetooth: hci2: command tx timeout
[  235.845559] Bluetooth: hci3: command tx timeout
[  236.037621] Bluetooth: hci4: command tx timeout
[  236.037678] Bluetooth: hci6: command tx timeout
[  236.165513] Bluetooth: hci5: command tx timeout
[  236.421550] Bluetooth: hci7: command tx timeout
[  289.882053] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  289.889410] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  289.892989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  289.902262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  289.908228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  289.974487] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  289.982359] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  289.986033] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  289.994702] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  290.002919] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  290.100801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  290.106268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  290.130206] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  290.144934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  290.162199] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  290.362572] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  290.367063] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  290.374425] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  290.387732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  290.423632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  290.427882] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  290.438561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  290.446062] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  290.467716] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  290.477197] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  290.480006] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  290.491396] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  290.499692] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  290.504735] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  290.562369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  290.600435] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  290.624144] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  290.661937] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  290.670075] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  290.678743] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  290.692942] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  290.743234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  290.782247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  290.783174] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  290.825401] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  291.973836] Bluetooth: hci0: command tx timeout
[  292.038599] Bluetooth: hci1: command tx timeout
[  292.229701] Bluetooth: hci2: command tx timeout
[  292.614603] Bluetooth: hci3: command tx timeout
[  292.678411] Bluetooth: hci4: command tx timeout
[  292.741529] Bluetooth: hci5: command tx timeout
[  292.870532] Bluetooth: hci6: command tx timeout
[  292.933543] Bluetooth: hci7: command tx timeout
[  294.022022] Bluetooth: hci0: command tx timeout
[  294.086824] Bluetooth: hci1: command tx timeout
[  294.277809] Bluetooth: hci2: command tx timeout
[  294.661587] Bluetooth: hci3: command tx timeout
[  294.727584] Bluetooth: hci4: command tx timeout
[  294.790150] Bluetooth: hci5: command tx timeout
[  294.917793] Bluetooth: hci6: command tx timeout
[  294.981944] Bluetooth: hci7: command tx timeout
[  296.070643] Bluetooth: hci0: command tx timeout
[  296.133574] Bluetooth: hci1: command tx timeout
[  296.325754] Bluetooth: hci2: command tx timeout
[  296.710724] Bluetooth: hci3: command tx timeout
[  296.774585] Bluetooth: hci4: command tx timeout
[  296.839474] Bluetooth: hci5: command tx timeout
[  296.965700] Bluetooth: hci6: command tx timeout
[  297.030832] Bluetooth: hci7: command tx timeout
[  298.117614] Bluetooth: hci0: command tx timeout
[  298.181794] Bluetooth: hci1: command tx timeout
[  298.373805] Bluetooth: hci2: command tx timeout
[  298.758702] Bluetooth: hci3: command tx timeout
[  298.822704] Bluetooth: hci4: command tx timeout
[  298.885514] Bluetooth: hci5: command tx timeout
[  299.014795] Bluetooth: hci6: command tx timeout
[  299.078705] Bluetooth: hci7: command tx timeout
[  352.230032] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  352.239005] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  352.246166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  352.251977] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  352.261207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  352.264219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  352.264819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  352.271069] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  352.301992] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  352.308025] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  352.492180] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  352.501176] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  352.506705] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  352.512388] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  352.517056] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  352.592433] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  352.602276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  352.608499] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  352.630873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  352.636206] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  352.677857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  352.685313] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  352.688892] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  352.724575] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  352.736506] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  352.741945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  352.746094] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  352.752532] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  352.753619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  352.766797] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  352.773787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  352.782736] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  352.784810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  352.791425] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  352.801795] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  352.820891] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  352.837053] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  352.844391] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  352.888913] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  352.899841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  354.309748] Bluetooth: hci0: command tx timeout
[  354.374942] Bluetooth: hci1: command tx timeout
[  354.565539] Bluetooth: hci2: command tx timeout
[  354.758505] Bluetooth: hci3: command tx timeout
[  354.887728] Bluetooth: hci5: command tx timeout
[  354.949792] Bluetooth: hci6: command tx timeout
[  355.013538] Bluetooth: hci7: command tx timeout
[  355.333546] Bluetooth: hci4: command tx timeout
[  356.358549] Bluetooth: hci0: command tx timeout
[  356.421779] Bluetooth: hci1: command tx timeout
[  356.613569] Bluetooth: hci2: command tx timeout
[  356.806699] Bluetooth: hci3: command tx timeout
[  356.933839] Bluetooth: hci5: command tx timeout
[  356.997530] Bluetooth: hci6: command tx timeout
[  357.061772] Bluetooth: hci7: command tx timeout
[  357.381694] Bluetooth: hci4: command tx timeout
[  358.405581] Bluetooth: hci0: command tx timeout
[  358.469513] Bluetooth: hci1: command tx timeout
[  358.662651] Bluetooth: hci2: command tx timeout
[  358.853573] Bluetooth: hci3: command tx timeout
[  358.981681] Bluetooth: hci5: command tx timeout
[  359.046317] Bluetooth: hci6: command tx timeout
[  359.109889] Bluetooth: hci7: command tx timeout
[  359.429525] Bluetooth: hci4: command tx timeout
[  360.454521] Bluetooth: hci0: command tx timeout
[  360.517541] Bluetooth: hci1: command tx timeout
[  360.709652] Bluetooth: hci2: command tx timeout
[  360.902516] Bluetooth: hci3: command tx timeout
[  361.029825] Bluetooth: hci5: command tx timeout
[  361.093555] Bluetooth: hci6: command tx timeout
[  361.157557] Bluetooth: hci7: command tx timeout
[  361.478098] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
07:39:17  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffffffff81604940 RCX=ffff8880163373bc RDX=0000000000000000
RSI=ffffffff85c1cd40 RDI=ffff88801846567c RBP=ffff888016337500 RSP=ffff888016337468
R8 =ffffffff86875bc2 R9 =ffff8880163374a8 R10=000000000003b6bd R11=0000000000024a90
R12=ffff888016337530 R13=0000000000000000 R14=ffff888018465280 R15=0000000000092800
RIP=ffffffff812d971c RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb94542e540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe3b00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffeb2e61fd8 CR3=0000000034193000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=00000000005b99af RBX=00000000000c0712 RCX=ffffffff81621d71 RDX=ffff888015a51b80
RSI=ffffffff81621d7f RDI=0000000000000006 RBP=0000005d62667372 RSP=ffff88806cf08ea0
R8 =0000000000000001 R9 =0000000000000000 R10=000002848e100549 R11=0000000000000001
R12=00000000000dddee R13=dffffc0000000000 R14=ffffffffffffffff R15=000002848e100549
RIP=ffffffff81621d85 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe2c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f05be36c6f4 CR3=000000002d4d6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f05be37b47000007f05be37af20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000