Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:16024' (ECDSA) to the list of known hosts.
2025/06/10 07:37:40 fuzzer started
2025/06/10 07:37:41 dialing manager at localhost:40003
syzkaller login: [   93.621265] cgroup: Unknown subsys name 'net'
[   93.768336] cgroup: Unknown subsys name 'cpuset'
[   93.810013] cgroup: Unknown subsys name 'rlimit'
2025/06/10 07:37:59 syscalls: 2214
2025/06/10 07:37:59 code coverage: enabled
2025/06/10 07:37:59 comparison tracing: enabled
2025/06/10 07:37:59 extra coverage: enabled
2025/06/10 07:37:59 setuid sandbox: enabled
2025/06/10 07:37:59 namespace sandbox: enabled
2025/06/10 07:37:59 Android sandbox: enabled
2025/06/10 07:37:59 fault injection: enabled
2025/06/10 07:37:59 leak checking: enabled
2025/06/10 07:37:59 net packet injection: enabled
2025/06/10 07:37:59 net device setup: enabled
2025/06/10 07:37:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/10 07:37:59 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/10 07:37:59 USB emulation: enabled
2025/06/10 07:37:59 hci packet injection: enabled
2025/06/10 07:37:59 wifi device emulation: enabled
2025/06/10 07:37:59 802.15.4 emulation: enabled
2025/06/10 07:37:59 fetching corpus: 0, signal 0/0 (executing program)
2025/06/10 07:38:02 starting 8 fuzzer processes
07:38:02 executing program 0:
r0 = mq_open(&(0x7f0000000000)='\x00', 0xc02, 0x56, &(0x7f0000000040)={0x0, 0xca7e8c6, 0x80000000, 0x8})
write(r0, &(0x7f0000000080)="e6f8a8bbe6f025508e30615690614d3b7bef6b5e751c5a6edefa90eefd5bb7b88ea21d42402b6a45b5b363b0139dc0c88deaeb6fb97e7b77856f4a76d8c75ffa025625441878d7093f9698c190ff89d3678ca469ed6df163c4ed37fae812e89617d00d94c193fbb4a0b7aa5286f1c940f9743cadee4854a4b1211ef1", 0x7c)
r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1000, 0x400001)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000140)={{0x2, 0x9}, {0x7, 0x200}, 0xfff})
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000180))
ftruncate(r0, 0x100000001)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f00000001c0)={0x0, 0x0, 0x10})
r2 = socket(0x3, 0x4, 0x7)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "f661a37cd19a8497", "5fff9665d0703ab75c42a38be9bb62c763abeea927c760ccdbfd651ab7a47650", "4cbd93e6", "8031416d37942f1e"}, 0x38)
clock_settime(0x7, &(0x7f0000000240))
r3 = dup3(r0, 0xffffffffffffffff, 0x0)
sendmsg$AUDIT_GET(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3e8, 0x1, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008840}, 0x20000000)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000380)={0x33, 0x16, '\x00', [@hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x2}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x8}, @generic={0x7, 0x91, "bed9155d1f9182964790bbec9ea98f8c3fbc059684c186551201916081823a1a4b2f77c6e2d08d427215887244d787d9773b4364d195c15c1af98fb9c872e38eb304fba9610097bef1ab4e46f7d4ee3ce826551012c40216c1022b5e06b19c9100ca92b3304b24afd51bd1a7bc57bd83e05a3bde14c8c53a95c3c28a02e6660c39e244ee306be6cb361bf9121e0a15de99"}]}, 0xc0)
mq_timedreceive(r0, &(0x7f0000000440)=""/41, 0x29, 0x9, 0x0)
clock_gettime(0x0, &(0x7f0000000480))
ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000004c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r4=>r2, {0xee01, 0xee00}}, './file0\x00'})
listen(r4, 0xb8ab)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r4)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x234, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf687}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4008044}, 0x8d)

07:38:02 executing program 1:
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)=0xfffffffa, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'macvtap0\x00', 0x3}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
write$P9_RSTAT(r0, &(0x7f00000000c0)={0x4f, 0x7d, 0x1, {0x0, 0x48, 0x0, 0x0, {0x1, 0x45}, 0x72b6326480d2d8ea, 0x101, 0x7, 0x1, 0x9, 'macvtap0\x00', 0x0, '', 0x3, '-$$', 0x9, 'macvtap0\x00'}}, 0x4f)
write$P9_RLOPEN(r0, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x30, 0x3, 0x5}, 0x2}}, 0x18)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x20000004)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000340)={'filter\x00', 0x0, 0x3, 0x43, [0x9, 0x0, 0x8, 0x7f, 0x1e, 0x4], 0x1, &(0x7f0000000280)=[{}], &(0x7f00000002c0)=""/67}, &(0x7f00000003c0)=0x78)
r1 = dup2(r0, r0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x201, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={<r4=>0x0, @empty, @local}, &(0x7f00000005c0)=0xc)
socketpair(0x2a, 0xa, 0xe6bd, &(0x7f0000000600)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1f}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xffffff99}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x800)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x158, 0xa, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x80, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="e7e826e589a3"}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x90, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1f}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r1)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x12c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x81}, @ETHTOOL_A_LINKMODES_OURS={0x100, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfc, 0x4, "e90acc49a3d165b0fa8761e3b6e5760478d7e3e46ce08982d81bb8deead56e638fe0f388f717aa07a2f823536b4556d39c779a70714d446657649ed8fb1267fdb9433f567438bfee4d05ff47360a6b8587bbb8694bb7630cb1a17f4ed2aca22b66b39e1a63e64aed4f1f0466de1eb20875b6fea80fda20c1a18a08b2eb8d51d18dfae977fb48eff9959fc194b13cb281eb84032d2e5d25eb07d74be990df2515e563fe1c519eea081ecedec4c30db2f01cd1a75555eb2a0b427207dca914a17dfbf50cfd85aee7ca3d4338d596470b972a5cd5622d453f6584b900fa2ec19bd7f528267d75dfa06bb1cdb5f32430b71df842036c08a83a3d"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xff}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x44800)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000c00)={'syztnl0\x00', <r8=>r4, 0x2f, 0x81, 0xd9, 0x0, 0x39, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x80, 0x5, 0x4}})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x7c, r7, 0x20, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)

07:38:02 executing program 2:
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000080)={{}, 0x0, 0x14, @inherit={0x68, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x3, {0x12, 0x81, 0x0, 0x0, 0x80000001}, [0x9, 0xfffffffffffffffa, 0x80000001, 0x0]}}, @devid})
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001080)='syz0\x00', 0x200002, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000010c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x2}}, './file0\x00'})
ioctl$CDROM_SELECT_DISK(r2, 0x5322, 0x2)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001100), 0x1, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001140), 0x161400, 0x0)
ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000001180)={0x6, 0x401, 0x7f})
rt_sigtimedwait(&(0x7f00000011c0)={[0x5]}, &(0x7f0000001200), &(0x7f0000001280), 0x8)
getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000012c0)=""/1, &(0x7f0000001300)=0x1)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000001340))
ioctl$FIBMAP(r2, 0x1, &(0x7f0000001380)=0x10001)
ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000013c0))
prctl$PR_SET_PDEATHSIG(0x1, 0x26)
r4 = accept4$inet6(r3, &(0x7f0000001400)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001440)=0x1c, 0x80000)
ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000001480))
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000014c0)="3f00eef9ca4d1e8bc1dc9e685ef3ad30b1004122d7a95018e034930d2881420e2e6b6a9f7b286051ce01959a8b", 0x2d)
syz_open_dev$vcsa(&(0x7f0000001500), 0x8, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001540), 0x80, 0x0)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001580)={0x2, {0x2, 0x7ff, 0xfa19, 0x7, 0x40, 0x4}})

07:38:02 executing program 3:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30)
write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0), 0xf)
getpeername$netlink(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0xc)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', <r3=>0x0, 0x4, 0xfe, 0x3f, 0x9, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x0, 0x2}})
accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14)
accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14, 0x80000)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000004c0)={0x478, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x1f8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x32a, 0x9, 0x1e, 0x1ff}, {0x7, 0x81, 0x3, 0xfffffeff}, {0x2ab, 0x0, 0x6, 0x7f}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2a}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4a2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5e7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1aa}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f00000009c0), 0x2040, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000a00)="0d3fb82fb7afd6d70b9cdddcbcd2b005", 0x10)
write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000a40)={0x14, 0x49, 0x2, {0x2, 0x3, 0x4}}, 0x14)
r7 = signalfd(r6, &(0x7f0000000a80)={[0x2]}, 0x8)
sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0xf, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x1)
r8 = signalfd4(r6, &(0x7f0000000c00)={[0x10001]}, 0x8, 0x80000)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x400}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x863}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8801)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000d80)={{0x0, 0x7, 0x66, 0xffffffffffffffe0, 0x3, 0x3ff, 0xc90, 0x7, 0x7fffffff, 0x9, 0x5, 0x2, 0x5, 0x100, 0x1}})
getsockopt$inet6_int(r8, 0x29, 0x46, &(0x7f0000001d80), &(0x7f0000001dc0)=0x4)

[  114.204036] audit: type=1400 audit(1749541082.262:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
07:38:02 executing program 4:
io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000000)={0x7, 0x1, {0x3, 0x1, 0x7, 0x1, 0x6}, 0x9})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, @in_args={0x4}}, './file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000000c0)={{0x1}, 'port1\x00', 0x8, 0x21, 0x6, 0x80000000, 0x7, 0x7, 0x7ff, 0x0, 0x4, 0x8})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r0, {0x9}}, './file0\x00'})
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[r0, r1, r2, r0], 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x4000001)
getsockname$unix(r2, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write$binfmt_aout(r4, &(0x7f0000000400)={{0x107, 0x1, 0x5, 0x5, 0x15c, 0xf5, 0x104, 0x3f}, "9744163bf5a2035b83c8d3f0b9c31e1e52699ee912e86179bf2d2ec83d41dbbc65b1a1cbf0c1bb22b8d8a05dcaf3c41d16efc4337c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x855)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x7)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
copy_file_range(r5, &(0x7f0000000c80)=0x7e, r2, 0x0, 0x100000001, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000cc0)=0x8)
r6 = dup(r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x12940c0}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x6c, r3, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x8044)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000e80))

07:38:02 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', &(0x7f00000000c0)='\x00', 0x1, 0x3)
write$P9_RATTACH(r0, &(0x7f0000000100)={0x14, 0x69, 0x1, {0x10, 0x0, 0x2}}, 0x14)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0xbe0f, 0x2, 0x5, 0x0, 0x0, [{{r0}, 0x7}, {{r0}, 0x5}, {{r0}, 0x4}, {{r0}, 0x9}, {{r0}, 0x138e0b85}]})
fsetxattr(r0, &(0x7f0000000200)=@known='com.apple.FinderInfo\x00', &(0x7f0000000240)='\x00', 0x1, 0x0)
r1 = memfd_secret(0x0)
r2 = syz_mount_image$nfs4(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000300)="2e0c208e36bec7f3659a45a78e0fc8b82c1e10ca5dd5116f295b6cf2fb05bd5ea405d9df048b0b8a33357515b8b5d32c4d70ed18e70ea7266acbdc829940a6f45b5178a856a9574867aee6aba96a1ca81728ef5c3b6729c01acc352ab4763c6cc131ce450ccfe12a737ace0a43e4ceb0602e9ba584070bf63ee4095da16378cf666aff5c221ed608009d11edb724e808bb2e068cabfc4aa91d6fcf16b0f55ae525a42941a8c757843f9e75bbba369f9f4d11cbd5050210d3a4a4b558765ac345e027cf880cc2b793438b84c8f43a67041c4bac01eefe02214180f4b087", 0xdd, 0x6}, {&(0x7f0000000400)="f363acaeb5fd22afd100a8", 0xb, 0x100}, {&(0x7f0000000440)="fbcf80c8bd64f3e2501006bf5357eee07fcdd484867e66e0856d8a3513dd1dbc79dac0a72afe6ba7a22fe351cdf5c7751ec5cd51f3d369d381977d89543758dd14adaeeafb4c3becccf38d5759e9417dec32e287bf756443f7049182d124a808fb90f3b85580a121403353a88b0bbd6e98ac6ddfe902", 0x76, 0xffffffff7fffffff}], 0x1, &(0x7f0000000540)={[{'com.apple.FinderInfo\x00'}, {'-)-'}, {'^\'\xc8)'}, {'com.apple.FinderInfo\x00'}, {'com.apple.FinderInfo\x00'}, {'trusted.overlay.nlink\x00'}, {'\x00'}, {'com.apple.FinderInfo\x00'}, {'com.apple.FinderInfo\x00'}, {'\x00'}], [{@smackfsroot={'smackfsroot', 0x3d, 'com.apple.FinderInfo\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ','}}, {@audit}, {@appraise}, {@uid_gt={'uid>', 0xee00}}, {@smackfshat}, {@dont_appraise}, {@fowner_gt={'fowner>', 0xee00}}]})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r3=>r2, @in_args={0x2}}, './file0\x00'})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r5 = epoll_create1(0x80000)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x3ff)
r7 = accept4$inet6(r0, &(0x7f00000006c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000700)=0x1c, 0x80800)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000780)={0x5, 0x0, &(0x7f0000000740)=[r2, r2, r4, r5, r1, r0, r6, r7, r0, r0]}, 0xa)
r8 = timerfd_create(0x3, 0x0)
pwritev2(r8, &(0x7f0000000ac0)=[{&(0x7f00000007c0)="4f1892c74099170ea3413782c71d38ce3f51feb17d9d7ae7c9059e68e5a66000ef5841b2024623f40c4eda077c47dec172c99fee4fb2b0f34c04be8e0650237c7b9c84f9eb1f0311e0b51113ae2c1f5016aa1a81afaecc12640fd2e669eb820c0708b9ab76c651d046fa0b3ad58757c0daa6a4f2c4d6e179b8fc88c924507f51dd5230133c33ec1fd9f38357c028567e403f", 0x92}, {&(0x7f0000000880)="2faf8c8bab4977ce04f84761a3014f6af2b8a1bad0010726e998cbe4b07e91bafbd6bf4ac69f472f0ee8fa148d09195a793a9790ddcc371bb59e23ec983dddee1e9c42aa4111b779", 0x48}, {&(0x7f0000000900)="67d416a3b8eae8c0a93c9b51b56a53a956c64ade540131c10d87b2f478a596347845d37c8ee2f254e23cde8f22cecbd8ffda4da6a45d5691e863e9628033c4dbfd23a2cba6441299ad9657923b4e7ae2986de295ea5a2337a1ba38d653b733aab40021f9d8912f9d252f8b7e036a931b800c1e561d9328ffa1d46d6693504d5f846a52a68c6d1c64bfd1efbce8c5d5026e", 0x91}, {&(0x7f00000009c0)="44379d2a9694c17fec49893348e0e8af7c4d5809b5acc133f8457aa42d8093f8cee665bc85443693cef816113d8687941c40c68a35bd9df78e19d932bb014ae576c7bfe4a2b0c1baae8595a3ca516e497cf5cec9ea728777f81a813bcf05ab66fc7ab61c2d31780c85dec7d7a651e422e35d397774711bbbca9c8199510e77b1d71a064306f62ce54a333c3952e37e34e26fa84208dd5cfd97939254b684de9624e2e74b57251d2c292a70b714eeca6920a588a3f218571a4961e6b4e6ad78e005b2f02d852d4b18dd8e10c743894da750af982a21d7ceeb8a371f73bedd36150bada697f72dd3f36956fce33413d35fef35a1cb", 0xf4}], 0x4, 0x200, 0x8000, 0x0)
dup(r7)
r9 = openat$incfs(r1, &(0x7f0000000b00)='.log\x00', 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r9, 0x80489439, &(0x7f0000000b40))
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8007}, 0x4000000)

07:38:02 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1f}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040))
readlinkat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/35, 0x23)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68)
r1 = fsmount(r0, 0x1, 0x7e)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000240)={'netdevsim0\x00', {0x2, 0x0, @private}})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r2=>r0, {<r3=>r0}}, './file0/file0\x00'})
r4 = accept4$packet(r1, &(0x7f00000002c0), &(0x7f0000000300)=0x14, 0x80800)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000340)=[r1, r4], 0x2)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r5=>r2}, './file0\x00'})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x168, r6, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x18}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x2}, @device_b, @device_b}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7}, @device_b, @device_b}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xdc, 0x33, @data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x1800}, @device_b, @device_a, @device_a, {0x3, 0xff}, @broadcast}, {0x5, 0x1, 0x0, 0x0, 0xff}}, {@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x6}, @device_a, @broadcast, @from_mac, {0x7, 0x1f}, @device_b}, {0xc, 0x0, 0x0, 0x1, 0x5}}}, @ver_80211n={0x0, 0x6, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x86, "b89a04802d36c244a18bba67ecb3438afce82c2857939b0810400fc1f279d9b54a9dcd63d78318f65ae2b7279d7b9e80bd32a6db56548e33e1c1efb9f986e212cf13af60cd85eff48123b827fe4befe35b5dabcda69eaea37fbedbe8c147a87c697ecec516afc367eb46f6908bad40f2bb6042ca1cee3b328a79eb7ed4796a464f1231732958"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x168}, 0x1, 0x0, 0x0, 0x10000}, 0x4000010)
ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000680))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r6, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x20048011)
flock(0xffffffffffffffff, 0x3)

07:38:02 executing program 7:
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80000)
recvfrom$inet(r0, &(0x7f0000000080)=""/25, 0x19, 0x40002162, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000100)={{0x0, @rand_addr=0x64010102, 0x4e23, 0x3, 'wrr\x00', 0x4, 0x5, 0x72}, {@multicast1, 0x4e20, 0x1, 0x3, 0x200, 0x9}}, 0x44)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe4, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x19, 0x2, "4d3725d582c0314d78075877bc97f509a870c422a2"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x94, 0x3, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x7f, 0x2, "2bab616398775cbb37821d78865e523fa9672f9b3771e7ec2eb13fdf96656a5a28fe91887879a47864c2e2e0758a93c7736ec02fb8d29afa322ddfcffd46968d95be1ec18c49709aa3cba2b31555235c82741b6ef034dedcbcbde0c44d58fa04e7a306dfe18f29192a0c4b8b521364300e6ea334f722de41152009"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000)
accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000380))
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000003c0)={0x9, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x1, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x88}, 0x4000004)
getsockname$inet(r0, &(0x7f0000000600)={0x2, 0x0, @broadcast}, &(0x7f0000000640)=0x10)
pipe(&(0x7f0000005300)={<r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005380), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000005480)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005440)={&(0x7f00000053c0)={0x60, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xca}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0xd8cec6a3f58dcdcd}, 0x20000000)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000005500), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000055c0)={&(0x7f00000054c0)={0x10, 0x0, 0x0, 0xf6a96ceb22edd2bc}, 0xc, &(0x7f0000005580)={&(0x7f0000005540)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
r6 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000056c0)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005680)={&(0x7f0000005640)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
socket(0x28, 0x3, 0xfffffffc)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)

[  115.672207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  115.674019] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  115.677578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  115.681592] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  115.685225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  115.695452] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  115.704516] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  115.717268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  115.722268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  115.722464] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  115.728160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  115.733172] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  115.735445] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  115.775856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  115.781959] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  115.786915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  115.789248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  115.791348] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  115.794734] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  115.797642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  115.803140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  115.804842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  115.818371] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  115.820383] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  115.837241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  115.864124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  115.872281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  115.874941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  115.901476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  115.908055] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  115.908191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.915494] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  115.918198] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  115.920961] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  115.923200] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  115.930930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  115.947971] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  115.952901] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  115.967187] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  115.974769] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  117.802098] Bluetooth: hci0: command tx timeout
[  117.802832] Bluetooth: hci1: command tx timeout
[  117.862728] Bluetooth: hci3: command tx timeout
[  117.928704] Bluetooth: hci2: command tx timeout
[  117.929390] Bluetooth: hci5: command tx timeout
[  117.991634] Bluetooth: hci4: command tx timeout
[  117.992307] Bluetooth: hci7: command tx timeout
[  118.054727] Bluetooth: hci6: command tx timeout
[  119.848116] Bluetooth: hci1: command tx timeout
[  119.848608] Bluetooth: hci0: command tx timeout
[  119.910968] Bluetooth: hci3: command tx timeout
[  119.974961] Bluetooth: hci5: command tx timeout
[  119.975450] Bluetooth: hci2: command tx timeout
[  120.038788] Bluetooth: hci7: command tx timeout
[  120.039274] Bluetooth: hci4: command tx timeout
[  120.103850] Bluetooth: hci6: command tx timeout
[  121.894835] Bluetooth: hci0: command tx timeout
[  121.895329] Bluetooth: hci1: command tx timeout
[  121.958720] Bluetooth: hci3: command tx timeout
[  122.023777] Bluetooth: hci5: command tx timeout
[  122.024252] Bluetooth: hci2: command tx timeout
[  122.087975] Bluetooth: hci4: command tx timeout
[  122.088443] Bluetooth: hci7: command tx timeout
[  122.150725] Bluetooth: hci6: command tx timeout
[  123.942753] Bluetooth: hci1: command tx timeout
[  123.943225] Bluetooth: hci0: command tx timeout
[  124.008118] Bluetooth: hci3: command tx timeout
[  124.070739] Bluetooth: hci2: command tx timeout
[  124.071193] Bluetooth: hci5: command tx timeout
[  124.134786] Bluetooth: hci7: command tx timeout
[  124.135267] Bluetooth: hci4: command tx timeout
[  124.201745] Bluetooth: hci6: command tx timeout
[  178.231194] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  178.232540] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  178.233726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  178.243303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  178.247159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  178.304934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  178.307925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  178.312463] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  178.321035] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  178.324432] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  178.326169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  178.326183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  178.328248] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  178.330139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  178.351267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  178.445220] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  178.446526] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  178.450309] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  178.466497] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  178.468954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  178.510776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  178.514581] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  178.523016] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  178.525247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  178.527583] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  178.544211] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  178.548028] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  178.551872] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  178.552916] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  178.554490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  178.562081] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  178.566394] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  178.573303] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  178.574895] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  178.581547] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  178.586084] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  178.586406] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  178.593525] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  178.612563] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  178.615978] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  180.326763] Bluetooth: hci0: command tx timeout
[  180.391699] Bluetooth: hci1: command tx timeout
[  180.454735] Bluetooth: hci2: command tx timeout
[  180.582740] Bluetooth: hci3: command tx timeout
[  180.646972] Bluetooth: hci7: command tx timeout
[  180.710748] Bluetooth: hci5: command tx timeout
[  180.711997] Bluetooth: hci6: command tx timeout
[  180.774767] Bluetooth: hci4: command tx timeout
[  182.374797] Bluetooth: hci0: command tx timeout
[  182.438772] Bluetooth: hci1: command tx timeout
[  182.503001] Bluetooth: hci2: command tx timeout
[  182.630730] Bluetooth: hci3: command tx timeout
[  182.694786] Bluetooth: hci7: command tx timeout
[  182.758879] Bluetooth: hci6: command tx timeout
[  182.759156] Bluetooth: hci5: command tx timeout
[  182.822870] Bluetooth: hci4: command tx timeout
[  184.424734] Bluetooth: hci0: command tx timeout
[  184.486902] Bluetooth: hci1: command tx timeout
[  184.551714] Bluetooth: hci2: command tx timeout
[  184.678741] Bluetooth: hci3: command tx timeout
[  184.742830] Bluetooth: hci7: command tx timeout
[  184.806934] Bluetooth: hci5: command tx timeout
[  184.807699] Bluetooth: hci6: command tx timeout
[  184.872107] Bluetooth: hci4: command tx timeout
[  186.471882] Bluetooth: hci0: command tx timeout
[  186.537818] Bluetooth: hci1: command tx timeout
[  186.599739] Bluetooth: hci2: command tx timeout
[  186.727903] Bluetooth: hci3: command tx timeout
[  186.791010] Bluetooth: hci7: command tx timeout
[  186.854856] Bluetooth: hci5: command tx timeout
[  186.855728] Bluetooth: hci6: command tx timeout
[  186.918724] Bluetooth: hci4: command tx timeout
[  240.820702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  240.826615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  240.829284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  240.835714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  240.840006] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  240.947560] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  240.963097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  240.967303] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  240.989461] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  240.998074] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  241.077774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  241.084173] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  241.088026] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  241.091460] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  241.099456] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  241.104303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  241.108325] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  241.137440] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  241.139443] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  241.143062] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  241.144322] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  241.156810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  241.159499] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  241.166062] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  241.172714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  241.243064] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  241.244107] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  241.245794] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  241.249811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  241.262434] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  241.264912] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  241.268857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  241.271616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  241.306257] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  241.316415] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  241.409179] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  241.422194] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  241.426488] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  241.469100] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  241.478230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  242.918901] Bluetooth: hci0: command tx timeout
[  243.047900] Bluetooth: hci1: command tx timeout
[  243.175762] Bluetooth: hci2: command tx timeout
[  243.238783] Bluetooth: hci4: command tx timeout
[  243.303112] Bluetooth: hci5: command tx timeout
[  243.367740] Bluetooth: hci3: command tx timeout
[  243.561028] Bluetooth: hci6: command tx timeout
[  243.625040] Bluetooth: hci7: command tx timeout
[  244.968061] Bluetooth: hci0: command tx timeout
[  245.094870] Bluetooth: hci1: command tx timeout
[  245.223006] Bluetooth: hci2: command tx timeout
[  245.286772] Bluetooth: hci4: command tx timeout
[  245.350861] Bluetooth: hci5: command tx timeout
[  245.415955] Bluetooth: hci3: command tx timeout
[  245.608677] Bluetooth: hci6: command tx timeout
[  245.672043] Bluetooth: hci7: command tx timeout
[  247.014881] Bluetooth: hci0: command tx timeout
[  247.142711] Bluetooth: hci1: command tx timeout
[  247.270991] Bluetooth: hci2: command tx timeout
[  247.335938] Bluetooth: hci4: command tx timeout
[  247.398869] Bluetooth: hci5: command tx timeout
[  247.464073] Bluetooth: hci3: command tx timeout
[  247.654849] Bluetooth: hci6: command tx timeout
[  247.720715] Bluetooth: hci7: command tx timeout
[  249.062984] Bluetooth: hci0: command tx timeout
[  249.190773] Bluetooth: hci1: command tx timeout
[  249.319716] Bluetooth: hci2: command tx timeout
[  249.382726] Bluetooth: hci4: command tx timeout
[  249.446792] Bluetooth: hci5: command tx timeout
[  249.510730] Bluetooth: hci3: command tx timeout
[  249.703278] Bluetooth: hci6: command tx timeout
[  249.766735] Bluetooth: hci7: command tx timeout
[  304.005058] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  304.018228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  304.019398] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  304.024207] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  304.030855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  304.038192] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  304.047837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  304.054587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  304.059307] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  304.061942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  304.070947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  304.077909] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  304.088573] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  304.093073] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  304.110426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  304.110493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  304.115325] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  304.124724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  304.134517] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  304.141008] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  304.193893] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  304.215105] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  304.219054] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  304.226179] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  304.227734] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  304.241226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  304.248534] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  304.252095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  304.262938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  304.270619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  304.282537] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  304.286386] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  304.294144] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  304.303436] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  304.305233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  304.309386] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  304.315354] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  304.335433] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  304.337330] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  304.344454] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  306.150794] Bluetooth: hci0: command tx timeout
[  306.151504] Bluetooth: hci2: command tx timeout
[  306.216231] Bluetooth: hci3: command tx timeout
[  306.217034] Bluetooth: hci1: command tx timeout
[  306.345082] Bluetooth: hci5: command tx timeout
[  306.346047] Bluetooth: hci4: command tx timeout
[  306.407751] Bluetooth: hci7: command tx timeout
[  306.408370] Bluetooth: hci6: command tx timeout
[  308.200036] Bluetooth: hci0: command tx timeout
[  308.200528] Bluetooth: hci2: command tx timeout
[  308.262807] Bluetooth: hci3: command tx timeout
[  308.263277] Bluetooth: hci1: command tx timeout
[  308.391796] Bluetooth: hci4: command tx timeout
[  308.392287] Bluetooth: hci5: command tx timeout
[  308.455777] Bluetooth: hci6: command tx timeout
[  308.456249] Bluetooth: hci7: command tx timeout
[  310.246993] Bluetooth: hci2: command tx timeout
[  310.247477] Bluetooth: hci0: command tx timeout
[  310.312147] Bluetooth: hci3: command tx timeout
[  310.312607] Bluetooth: hci1: command tx timeout
[  310.438790] Bluetooth: hci5: command tx timeout
[  310.439273] Bluetooth: hci4: command tx timeout
[  310.505753] Bluetooth: hci7: command tx timeout
[  310.506217] Bluetooth: hci6: command tx timeout
[  312.294952] Bluetooth: hci0: command tx timeout
[  312.295432] Bluetooth: hci2: command tx timeout
[  312.358905] Bluetooth: hci1: command tx timeout
[  312.359372] Bluetooth: hci3: command tx timeout
[  312.486778] Bluetooth: hci4: command tx timeout
[  312.487252] Bluetooth: hci5: command tx timeout
[  312.551746] Bluetooth: hci6: command tx timeout
[  312.552217] Bluetooth: hci7: command tx timeout
[  366.203354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  366.209444] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  366.213360] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  366.228469] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  366.236456] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  366.399144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  366.405437] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  366.410007] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  366.419298] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  366.429674] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  366.476833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  366.481152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  366.489952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  366.499763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  366.511247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  366.543628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  366.555297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  366.575136] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  366.581773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  366.587031] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  366.703344] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  366.751194] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  366.756588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  366.794410] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  366.826341] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  366.987428] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  366.993088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  366.996183] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  366.999058] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  367.006230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  367.014212] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  367.019287] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  367.068397] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  367.140077] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  367.141449] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  367.158223] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  367.187961] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  367.199498] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  367.234276] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  367.265906] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  368.294892] Bluetooth: hci0: command tx timeout
[  368.487741] Bluetooth: hci1: command tx timeout
[  368.550949] Bluetooth: hci2: command tx timeout
[  368.614778] Bluetooth: hci3: command tx timeout
[  368.998718] Bluetooth: hci4: command tx timeout
[  369.062769] Bluetooth: hci5: command tx timeout
[  369.383017] Bluetooth: hci6: command tx timeout
[  369.446782] Bluetooth: hci7: command tx timeout
[  370.343688] Bluetooth: hci0: command tx timeout
[  370.535192] Bluetooth: hci1: command tx timeout
[  370.598710] Bluetooth: hci2: command tx timeout
[  370.662724] Bluetooth: hci3: command tx timeout
[  371.047154] Bluetooth: hci4: command tx timeout
[  371.111920] Bluetooth: hci5: command tx timeout
[  371.431889] Bluetooth: hci6: command tx timeout
[  371.494850] Bluetooth: hci7: command tx timeout
[  372.391719] Bluetooth: hci0: command tx timeout
[  372.582717] Bluetooth: hci1: command tx timeout
[  372.646797] Bluetooth: hci2: command tx timeout
[  372.710912] Bluetooth: hci3: command tx timeout
[  373.094947] Bluetooth: hci4: command tx timeout
[  373.159279] Bluetooth: hci5: command tx timeout
[  373.478722] Bluetooth: hci6: command tx timeout
[  373.544559] Bluetooth: hci7: command tx timeout
[  374.439911] Bluetooth: hci0: command tx timeout
[  374.630740] Bluetooth: hci1: command tx timeout
[  374.695198] Bluetooth: hci2: command tx timeout
[  374.758734] Bluetooth: hci3: command tx timeout
[  375.142755] Bluetooth: hci4: command tx timeout
[  375.207157] Bluetooth: hci5: command tx timeout
[  375.527014] Bluetooth: hci6: command tx timeout
[  375.591084] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
07:43:09  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff888026e6b700 RCX=ffff888016778000 RDX=ffff888016777898
RSI=ffff888026e6b700 RDI=ffff888016777848 RBP=ffff888016777898 RSP=ffff888016777800
R8 =0000000000000001 R9 =0000000000000000 R10=ffff888016777898 R11=00000000ffffffff
R12=ffff888016777848 R13=ffff8880167778c0 R14=ffff8880167778e0 R15=ffff888016777898
RIP=ffffffff84b3d744 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe5e00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9abc02f288 CR3=000000002d84e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=0000000000000002 RCX=ffffffff84b40acf RDX=000000000003b40a
RSI=000000000003b40a RDI=ffffffff86d5f0dc RBP=ffff88806cf08ad0 RSP=ffff88806cf08a08
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6cd R11=0000000000000001
R12=ffff88806cf08ad8 R13=ffff88806cf08ac0 R14=ffff88806cf08ab9 R15=ffff88806cf08a78
RIP=ffffffff81353f42 RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe2f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561931c4e2b0 CR3=00000000332ca000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000