Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:42226' (ECDSA) to the list of known hosts.
2025/06/21 09:45:23 fuzzer started
2025/06/21 09:45:24 dialing manager at localhost:33119
syzkaller login: [   93.551506] cgroup: Unknown subsys name 'net'
[   93.685915] cgroup: Unknown subsys name 'cpuset'
[   93.717337] cgroup: Unknown subsys name 'rlimit'
2025/06/21 09:45:39 syscalls: 2214
2025/06/21 09:45:39 code coverage: enabled
2025/06/21 09:45:39 comparison tracing: enabled
2025/06/21 09:45:39 extra coverage: enabled
2025/06/21 09:45:39 setuid sandbox: enabled
2025/06/21 09:45:39 namespace sandbox: enabled
2025/06/21 09:45:39 Android sandbox: enabled
2025/06/21 09:45:39 fault injection: enabled
2025/06/21 09:45:39 leak checking: enabled
2025/06/21 09:45:39 net packet injection: enabled
2025/06/21 09:45:39 net device setup: enabled
2025/06/21 09:45:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/21 09:45:39 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/21 09:45:39 USB emulation: enabled
2025/06/21 09:45:39 hci packet injection: enabled
2025/06/21 09:45:39 wifi device emulation: enabled
2025/06/21 09:45:39 802.15.4 emulation: enabled
2025/06/21 09:45:39 fetching corpus: 0, signal 0/0 (executing program)
2025/06/21 09:45:41 starting 8 fuzzer processes
09:45:41 executing program 0:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x20, 0x5, 0x20, 0xae8, 0x2, 0x3e, 0xa3, 0x12c, 0x40, 0x39a, 0x0, 0x401, 0x38, 0x1, 0x1, 0x69, 0x7f}, [{0x5, 0xfffffff5, 0x100, 0x8, 0x3, 0x0, 0x8, 0x2}], "14f51f5b0a5c8eb2461441ee454889a6562807f443f21ee4e2e82b90236483110e3e5557d71b51a2e5063dec5cb4946acb65a70157f6af1883bf12c052a2661cc887976ebfe480f97303a1afd78628069b64c8cfb56b6036505803e04d8eb3df092c038d2b5edccf4f9f9de80e5e0c8d55fe7621ba57f8ca186ac406f9e2385578c8394b701918789249c46d5555b89a14513c697b3636", ['\x00', '\x00', '\x00']}, 0x40f)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000440)={0x2000})
io_setup(0xffffffff, &(0x7f0000000480)=<r1=>0x0)
io_cancel(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f00000004c0)="8a992532dee160497781be98618ba3c833e70d881d9189d78d5df27b769e009d3b981ad07b5ecd46499a03000f6587a75f95bb3b974ee21f729a0b6db3df43b4835ac79e64fc3d725499648d861d6e07143993feb33ede1b2ca528b53a2fb601b1817e7a040b8d3ceba7d5544f87c19ee8d124bed97e1b10eccbe176b5fca71327034976351148f37c57c9e35a0211b30dab75e9d608b8635de67c78d23ba88481e6f6ae1b1b1e24ad7ba4e0a4645fd3851bb328c01c8d392e862c58b4f6d9", 0xbf, 0x9, 0x0, 0x1, r0}, &(0x7f00000005c0))
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000600)={'ipvlan0\x00'})
fgetxattr(r0, &(0x7f0000000640)=@known='user.incfs.size\x00', &(0x7f0000000680)=""/176, 0xb0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000740)={0x1, 0x8, 0x33})
r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000780))
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000007c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x8, 0x137, 0x1, 0x14e, 0x7f, 0x7}, {0x64, 0x48, 0x6, 0xf423, 0x4, 0xffffffffffff8001}], ['\x00', '\x00', '\x00']})
getpeername$packet(r0, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000980)=0x14)
r4 = epoll_create(0x6)
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000b80)={0x1, 0x1, 0x1000, 0xdc, &(0x7f00000009c0)="3e281d22a58092a0fb399098b729a38cb70a36b26a2dc9269c4546120c9b37bfb992bf3b4e86376dc10ab4b9913c59f8ca9eebc2b480b6cba5bced99edab575df6383369fcf2d814357485a4b7a25f7a498bf1b0bebafb9c22a7d32daea01aedee8665d470f9b99c0fefc4234351a88da505eadf342b0feb97e22db6762dc265391dbd0e5fa99fcb869b8d4857a821ec6d94108acbdaa99aa2d70e9e9680193439e1dbc3deab606be26914cbf4282a6e6c9533ce7af7c2efbb32855e3e6e1d67428e1388a200a0a9b18f35ea214bc02089cfeca9f5776b08fed34c48", 0x94, 0x0, &(0x7f0000000ac0)="c3433a38ebce2f97b38812b423b7cef654e8e834c6649283b400a1d3faa32a5afc7f00d265b370f1414ca64af4934c81ff5f99efbb87a2be04f4949d1d1fd498aba1f09d3465a80ce553416efb4c3b5138713b103a405914735868df080919fef8e09cc3a99c339bc7b8719d644eea526b84f981a99f0d3bcb908c3d69ffbab41387f500db86c7735efa09234c00ea489f6fd47d"})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/asound/seq/timer\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'})
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000c80)=""/163)
syz_emit_ethernet(0xd1, &(0x7f0000000d40)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @random="a5612ad18e96", @val={@val={0x9100, 0x7, 0x0, 0x4}, {0x8100, 0x6, 0x1, 0x3}}, {@ipv4={0x800, @dccp={{0x10, 0x4, 0x0, 0x0, 0xbb, 0x64, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x5, 0xd, "52639b9a26fbbb968fd199"}, {0x7, 0xf, "af85c645290f92a4c7490d1be5"}, {0x5, 0x9, "a3c0a7fb829ef2"}]}]}}, {{0x4e22, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0xa, 0x2, "a21c27", 0x3, "f592a3"}, "1dbea76a0850ed0fa4411b30e737aa02312f10cb9b26f9d8e9ff4426e122a07b1afe836d94561c5d0507b6fd31c2cafd6a4575a8e2db071a15d32e5afb8123359c690542d015a4e9a7e8fa540145be7c1dd4de35a2d83cfbf0558b09a8be03e5e145b3ddd096595b6fe064"}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000)

09:45:41 executing program 1:
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000000)={0x5, 0x1, 'client0\x00', 0x2, "f3aa197076bc1934", "baca66cc4b9c4c0d84978514e95d423fb5fc273109e8d32bdb72fd1335b0632c", 0x1000, 0x100})
keyctl$set_reqkey_keyring(0xe, 0x2)
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x319040, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x2]}, 0x8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x1ff, 0x80000000}}, './file0\x00'})
r4 = syz_io_uring_complete(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc8, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7231}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40855}, 0x4000080)
r5 = fsmount(0xffffffffffffffff, 0x1, 0x8)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/202, 0xca, 0x0, &(0x7f0000000540)}, &(0x7f00000005c0)=0x40)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000000600)={0x1be, 0x52, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000003000)={{0x1, 0x1, 0x18, r4, {<r7=>r3}}, './file0\x00'})
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r7, 0x10000000)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000003040)=0x2, 0x4)
lgetxattr(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)=@random={'osx.', '\x00'}, &(0x7f0000003100)=""/214, 0xd6)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000003200))
ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003240)=""/193})
r8 = syz_open_dev$vcsa(&(0x7f00000033c0), 0x10000, 0x103000)
ioctl$AUTOFS_IOC_SETTIMEOUT(r8, 0x80049367, &(0x7f0000003400)=0x1)

09:45:41 executing program 2:
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0xd01, 0x0, 0x0, {0xc, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x814}, 0x24048081)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0xa01, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x80040)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1b}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xd}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0xc090}, 0x10)
syz_usb_connect$uac1(0x6, 0xdb, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x80, 0xc0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1000, 0x7f}, [@feature_unit={0x11, 0x24, 0x6, 0x3, 0x2, 0x5, [0x7, 0xa, 0x5, 0x6, 0x3], 0x9}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0x80, "0ab116fd"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x101, 0x2, 0x6, 0xe0}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x6, 0x7, "350680445a"}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x4, 0x3f, 0x2, "3c31fa776c0e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1f, 0x7, 0x2, {0x7, 0x25, 0x1, 0x3, 0x7, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf3, 0x4, 0x6, 0x3, "40edc24726ea8be394"}, @as_header={0x7, 0x24, 0x1, 0x7b, 0x80, 0x1002}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xff, 0x4, 0x0, 0x7, "74d4969228e619f8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x81, 0x4, {0x7, 0x25, 0x1, 0x2, 0x4, 0xbd08}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x110, 0x8, 0x5, 0x7, 0xff, 0x7}, 0x40, &(0x7f0000000700)={0x5, 0xf, 0x40, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x1000, 0xf, 0x6, [0xff0000, 0xff00, 0xff0000, 0xff0030, 0xff0000, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0xec, "73401bb17213b1422541fe97bf9fa761"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x22}}, {0x95, &(0x7f0000000780)=@string={0x95, 0x3, "616f3e69d5489c099cd325f5dd08ed3609142a923099a44b25de3f05964d658e58c84cc33423f4a52e08ad82920d913f66929889744d3b61c0de79fb0d4e0fb529ac5cb3e6d68bc7a06a97cd2b9933520e3b5c2b0e1199645f7acb260c419ed1848dcfa9ef65c9e36250ed02a155fca27736303619c835773d2959a6277a7d0689ebf075897c702488cdbb6dbe3a88e25645fd"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0xc09}}, {0x62, &(0x7f0000000880)=@string={0x62, 0x3, "aaca2e1ef717f1f5bb14b6dcb2485bb2d3b84bcfbfec847c45fae08769c9dff98060257548dde7844b4ecbe3ef22cffdafc116724d28030b93143de346b15ea864ddccf781861bde1c30312bf273d1a520384e222cf164e090118fba539676ed"}}]})
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000009c0), 0xffffffffffffffff)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b00)=0x14)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004004d}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, 0x0, 0x4, 0x70bd2d, 0xcec, {{}, {@void, @val={0xc, 0x99, {0x1, 0xb}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000a0)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x110884}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x90)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000e80)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x9}}, './file0\x00'})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000f80)={&(0x7f0000000ec0), 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x1)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000)
ioctl$int_in(r3, 0x5452, &(0x7f0000001100)=0x8)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x50, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20000004)
socketpair(0x26, 0x5, 0x5, &(0x7f0000001280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000001300), r3)
sendmsg$FOU_CMD_ADD(r4, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r5, 0x20, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_TYPE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000c40}, 0x4000)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000001400)={0x1, 0x3}, 0x8)

[  110.171997] audit: type=1400 audit(1750499141.289:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:45:41 executing program 3:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x80000001, 0x0, 0x14, 0x14, "8faf2437c593d52c4f3a58d73c5a114b9a5acfb6da516ca311b0c3adba73fd966a4a5f73082a3748bfe165fdf026c7b823a0e09c5a6cf5db7ca287f2a57cfb45", "647ec208c1ab29d7289df1c7db9fcfd3824234243533e7faa7f156d5a6738c0c", [0xfff, 0x2]})
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x54}, 0x1, 0x0, 0x0, 0xc844}, 0x24004004)
mq_timedsend(0xffffffffffffffff, &(0x7f0000000200)="29b64cd52eed3f14b5ac372a94be9bc67047e26f6d0d3d70f73af41b4549a8a2fbfa6b9ec731aad7213a961052cacf00fbc0f7ab2019618f1f316ef3fc1fd4bae17b009177aaab91431cfbc6cf020b04080bcb9170c98a879e384b33bb440d36d7f5efcf99c23234ac4653f151fd2330ec7ff979dbb2ab458f6756a318a03c3db5de6d1ca724846e2d80b158", 0x8c, 0x9, &(0x7f00000002c0)={0x0, 0x3938700})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4}}, './file0\x00'})
waitid$P_PIDFD(0x3, r1, &(0x7f0000000340), 0x2, &(0x7f00000003c0))
unlinkat(r0, &(0x7f0000000480)='./file0\x00', 0x200)
ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f00000004c0))
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_aout(r2, &(0x7f0000000500)={{0x10b, 0x7f, 0x0, 0x35f, 0x32d, 0x2, 0x2ee}, "af179cff9ad608884dbe", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x82a)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000d40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f0000000f80)={0x4, 0x7f, 0x6, 0x7f})
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000fc0))
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
fsetxattr$security_capability(r3, &(0x7f0000001000), &(0x7f0000001040)=@v1={0x1000000, [{0xffffffff, 0x1eb}]}, 0xc, 0x3)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000001080))
ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f00000010c0))
getsockname$packet(r1, &(0x7f0000001140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001180)=0x14)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000011c0)={@mcast1, <r5=>0x0}, &(0x7f0000001200)=0x14)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001740)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001700)={&(0x7f00000014c0)={0x220, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x80}, 0x40c00)

09:45:41 executing program 4:
ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x5, 0x341, 0x1f, 0x8, 0x7})
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, <r0=>0x0})
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x8, 0x7fff}, {0xfba7, 0x9}, {0x7, 0x4}, {0x7, 0x101}, {0x7f, 0x8}]})
r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x200, 0x420000)
fsetxattr(r1, &(0x7f0000000140)=@known='user.incfs.id\x00', &(0x7f0000000180)='\x00', 0x1, 0x1)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x1}, 0xf)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/haltpoll', 0x80, 0x2)
sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0xe, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x40800)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r2)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000500)={&(0x7f0000000380), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb0, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x9}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = syz_open_procfs(r0, &(0x7f0000000540)='comm\x00')
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r5=>r4, {0x400}}, './file0\x00'})
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}}, 0x20044013)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x81, 0x76}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dbd80c774f"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "953fa6a592d9f9b9795b969244"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x6c}}, 0x800)
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x1, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11df4eafb580e567}, 0x0)
getpeername(r2, &(0x7f0000000980)=@l2={0x1f, 0x0, @none}, &(0x7f0000000a00)=0x80)
socketpair(0x1e, 0x2, 0x7fff, &(0x7f0000000a40)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3ff, 0x43}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4)

09:45:41 executing program 6:
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000000)={0x0, 0x8, 0x2})
lseek(0xffffffffffffffff, 0x9, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r0=>0xffffffffffffffff, 0x5, 0xc80000000000, 0x2})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x8001, 0x9, 0x5, {0x3, 0xffff}, 0x891, 0xfffffffd})
ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000100)={0x3ff, 0x80000000, 0x3, 0xa30f000, 0x10001, 0x0, 0x4})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000140)={0x2f, @rand_addr=0x64010100, 0x4e22, 0x0, 'dh\x00', 0x2, 0x1, 0x3a}, 0x2c)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', <r1=>0x0, 0x4, 0x48, 0x7b, 0xf, 0x60, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x40, 0x692a, 0x5}})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000340)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1}, 0x10, {0x2, 0x4e23, @multicast1}, 'ip_vti0\x00'})
r3 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x1, 0x73, 0xa2, 0x1, 0x0, 0x100, 0x30080, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0xd592, 0xff}, 0x888, 0x1, 0x1, 0x0, 0x4, 0x0, 0x34c, 0x0, 0x6, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x2)
fadvise64(r3, 0x4, 0xfffffffffffffffc, 0x5)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000440)=""/163)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000500)=0xfffffffe, 0x4)
shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000540))
ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000580))
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000005c0)={r1, 0x1, 0x6, @local}, 0x10)

09:45:41 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x3, 0x3f}}, './file0\x00'})
ioctl$int_out(r1, 0xfca2, &(0x7f0000000080))
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000100)={{0xffffff7f, 0xfffffe01}, 0x100, './file0\x00'})
r3 = accept4$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r4, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x1b}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d22dd63e8c6af09f5f230c21c9551dc6"}, @NL80211_ATTR_PMK={0x14, 0xfe, "823b2a8042afe2f76139b2d80c649577"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2155cbd1b43e6bfc19229f3706e3dc27"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2c2b6f47d27f63156d166702061ac6fa"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "809347f21028f6621b1e8848eaca3c95"}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000044)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vxcan1\x00', <r5=>0x0})
ustat(0x4, &(0x7f00000004c0))
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000b00)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000b40)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x6, 0x4e24, 0xd691, 0xa, 0xa0, 0xa0, 0x0, r5, r6}, {0xffffffffffffff7f, 0xfffffffffffff8be, 0x5, 0x5, 0x80, 0xffffffffffff725d, 0xfffffffffffff800, 0x10000}, {0x6, 0x1, 0x2, 0x8}, 0x8000, 0x6e6bbb, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x33}, 0x2, @in6=@mcast1, 0x3503, 0x3, 0x3, 0x1, 0x2, 0x2, 0x1}}, 0xe8)
sendmsg$sock(r0, &(0x7f0000000f00)={&(0x7f0000000c40)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="353370537540d14ca768d94bf6080e84064aa480a59c52b25d85156854f202d4b3d223ac5bcbf83a19f043486e97c9a9a737d053adee5a7cab23acd2979205e6c19a714fa32c7c3c299ca32693033005326fb2431bc4b532b2caba7f58b1a1f59c7401727db2dbd3c0333d1eea37c965774e69aa11984374521a65237ef9131d956e58750221715d21c1a1633249f829b2f1afac7f84d3d2fe1674bf84a7d2bcabc7030c98d46a658f07a238e1033835fd03d971076532c8c71b70d7aad734335e6dac22313a79a69772837f4f8892c41ba966842e1aa8d66eccc2d349fc37ca685c", 0xe2}, {&(0x7f0000000dc0)="d6d38f90debf183ae9ddbf68563186cdd3c00861382a022b1fb31213ad", 0x1d}], 0x2, &(0x7f0000000e40)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x20}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xe6e9}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x90}, 0x24008010)
r7 = accept4$bt_l2cap(r1, &(0x7f0000000f40), &(0x7f0000000f80)=0xe, 0x800)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000fc0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r8=>0x0}], 0x81, "12013e76ccaf79"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000001fc0)={0x0, r8, "8cf8a443e4580960d7f4ac7b73cfe76c78af84eff5ffbd849c22014a7afac0f31079fc3c2991afa0684431aef9c2d326d264ba3caca51a4878aa5aa48b89854b437e30bf06a6d583b3b5260c5a5ad473dfa5987aefa65789f0ba28f0cda099b853daf48019c12f00562203bb596c4bdd1d49016f61848866aa83b2d49244abcc52145607b93c89fbf0447fc42f985b04b89f25cfe80858ffe7d3126372299120b5691c0f56180f5629f10745766760b1d7a24a9a9a1650eb2fdd0b5a38be036ff80abd8e2a5ac9c9b3a6501bd453d7840aae799f87633bbf8db9082e08e23f311b634b78a98401111cec9c24636f72e2ac7da1a3a2bb5e67700e6957f422fb71", "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"})
r9 = openat$cgroup_pressure(r1, &(0x7f0000002fc0)='memory.pressure\x00', 0x2, 0x0)
fcntl$getflags(r9, 0x40a)

09:45:41 executing program 7:
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'bond_slave_0\x00', {0xffffff01}, 0x4})
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x6)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x4c}}, 0x400c044)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r2, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x52}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fb}]}, 0x40}, 0x1, 0x0, 0x0, 0x4850}, 0x4000000)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r3, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
r4 = dup2(0xffffffffffffffff, r0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, r2, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000884)
ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r8=>r4, {0x5}}, './file0\x00'})
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x2, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1008e4c534f2061}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xd8, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1438}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9cafb53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b254aca}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x285db2b1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11287e9b}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f8ed435}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x310}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x922e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeaf7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfbed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56b2a229}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54bff90e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb76b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf11}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabcd}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x322e8cdb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe997916}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28113384}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3985}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7af421a5}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x408d4}, 0x8804)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

[  111.629725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  111.634751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  111.638752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  111.645318] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  111.652808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  111.753692] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  111.757505] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  111.762579] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  111.769952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  111.776663] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  111.794900] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  111.804489] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  111.821464] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  111.830488] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  111.832924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  111.847191] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  111.857500] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  111.866070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.871953] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  111.881693] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  111.890560] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  111.902566] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  111.912587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  111.916032] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  111.924402] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  111.924725] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  111.937232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  111.939918] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  111.942834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  111.944576] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  111.947884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  111.977679] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  111.980953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  111.985491] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  111.996732] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.003083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.019688] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  112.023968] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  112.034748] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  112.037048] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  113.707443] Bluetooth: hci0: command tx timeout
[  113.835821] Bluetooth: hci2: command tx timeout
[  113.898554] Bluetooth: hci1: command tx timeout
[  113.962635] Bluetooth: hci4: command tx timeout
[  114.091301] Bluetooth: hci3: command tx timeout
[  114.091397] Bluetooth: hci5: command tx timeout
[  114.155462] Bluetooth: hci6: command tx timeout
[  114.155512] Bluetooth: hci7: command tx timeout
[  115.757185] Bluetooth: hci0: command tx timeout
[  115.883562] Bluetooth: hci2: command tx timeout
[  115.947424] Bluetooth: hci1: command tx timeout
[  116.011293] Bluetooth: hci4: command tx timeout
[  116.138243] Bluetooth: hci5: command tx timeout
[  116.139431] Bluetooth: hci3: command tx timeout
[  116.203284] Bluetooth: hci7: command tx timeout
[  116.203516] Bluetooth: hci6: command tx timeout
[  117.802770] Bluetooth: hci0: command tx timeout
[  117.933219] Bluetooth: hci2: command tx timeout
[  117.994230] Bluetooth: hci1: command tx timeout
[  118.058450] Bluetooth: hci4: command tx timeout
[  118.186695] Bluetooth: hci3: command tx timeout
[  118.187447] Bluetooth: hci5: command tx timeout
[  118.250704] Bluetooth: hci6: command tx timeout
[  118.251862] Bluetooth: hci7: command tx timeout
[  119.850491] Bluetooth: hci0: command tx timeout
[  119.978263] Bluetooth: hci2: command tx timeout
[  120.042493] Bluetooth: hci1: command tx timeout
[  120.108162] Bluetooth: hci4: command tx timeout
[  120.234401] Bluetooth: hci5: command tx timeout
[  120.234442] Bluetooth: hci3: command tx timeout
[  120.299323] Bluetooth: hci6: command tx timeout
[  120.299426] Bluetooth: hci7: command tx timeout
[  174.332790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  174.339727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  174.343744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  174.352259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  174.356898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  174.430956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  174.435695] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  174.441572] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  174.470726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  174.484576] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  174.490994] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  174.496528] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  174.498665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  174.503180] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  174.508468] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  174.512704] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  174.519972] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  174.528408] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  174.531117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  174.534607] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  174.540691] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  174.551757] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  174.559674] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  174.562247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  174.562590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  174.565671] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  174.567938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  174.570323] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  174.588877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  174.590883] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  174.615974] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  174.617680] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  174.626785] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  174.645366] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  174.650824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  174.652090] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  174.699030] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  174.702549] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  174.722722] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  174.750862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.427375] Bluetooth: hci0: command tx timeout
[  176.618544] Bluetooth: hci1: command tx timeout
[  176.682231] Bluetooth: hci2: command tx timeout
[  176.682949] Bluetooth: hci3: command tx timeout
[  176.747193] Bluetooth: hci4: command tx timeout
[  176.747900] Bluetooth: hci5: command tx timeout
[  176.874330] Bluetooth: hci7: command tx timeout
[  176.875048] Bluetooth: hci6: command tx timeout
[  178.475201] Bluetooth: hci0: command tx timeout
[  178.666529] Bluetooth: hci1: command tx timeout
[  178.730331] Bluetooth: hci2: command tx timeout
[  178.730830] Bluetooth: hci3: command tx timeout
[  178.795304] Bluetooth: hci5: command tx timeout
[  178.795795] Bluetooth: hci4: command tx timeout
[  178.923380] Bluetooth: hci6: command tx timeout
[  178.923872] Bluetooth: hci7: command tx timeout
[  180.522217] Bluetooth: hci0: command tx timeout
[  180.714240] Bluetooth: hci1: command tx timeout
[  180.778218] Bluetooth: hci3: command tx timeout
[  180.778718] Bluetooth: hci2: command tx timeout
[  180.843431] Bluetooth: hci4: command tx timeout
[  180.843915] Bluetooth: hci5: command tx timeout
[  180.972165] Bluetooth: hci7: command tx timeout
[  180.972632] Bluetooth: hci6: command tx timeout
[  182.570369] Bluetooth: hci0: command tx timeout
[  182.764186] Bluetooth: hci1: command tx timeout
[  182.827378] Bluetooth: hci3: command tx timeout
[  182.827856] Bluetooth: hci2: command tx timeout
[  182.890249] Bluetooth: hci5: command tx timeout
[  182.890734] Bluetooth: hci4: command tx timeout
[  183.019542] Bluetooth: hci6: command tx timeout
[  183.020026] Bluetooth: hci7: command tx timeout
[  236.553726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  236.558325] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  236.560986] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  236.563466] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  236.565956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  236.567675] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  236.576672] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  236.578725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  236.583478] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  236.585092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  236.593836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  236.596774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  236.607643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  236.622194] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  236.627256] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  236.632082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  236.635968] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  236.638699] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  236.653901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  236.681564] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  236.682443] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  236.687429] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  236.690019] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  236.703307] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  236.710327] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  236.744306] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  236.748518] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  236.769627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  236.785884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  236.797402] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  236.801854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  236.807407] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  236.819736] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  236.825351] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  236.825426] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  236.837454] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  236.841226] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  236.843885] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  236.869785] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  236.869795] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  238.634384] Bluetooth: hci0: command tx timeout
[  238.699254] Bluetooth: hci2: command tx timeout
[  238.699997] Bluetooth: hci1: command tx timeout
[  238.762301] Bluetooth: hci4: command tx timeout
[  238.762981] Bluetooth: hci3: command tx timeout
[  238.891226] Bluetooth: hci5: command tx timeout
[  238.954239] Bluetooth: hci7: command tx timeout
[  238.954936] Bluetooth: hci6: command tx timeout
[  240.682466] Bluetooth: hci0: command tx timeout
[  240.746405] Bluetooth: hci1: command tx timeout
[  240.746900] Bluetooth: hci2: command tx timeout
[  240.810540] Bluetooth: hci3: command tx timeout
[  240.810983] Bluetooth: hci4: command tx timeout
[  240.940160] Bluetooth: hci5: command tx timeout
[  241.003232] Bluetooth: hci6: command tx timeout
[  241.003673] Bluetooth: hci7: command tx timeout
[  242.732171] Bluetooth: hci0: command tx timeout
[  242.796195] Bluetooth: hci1: command tx timeout
[  242.796699] Bluetooth: hci2: command tx timeout
[  242.858590] Bluetooth: hci4: command tx timeout
[  242.859085] Bluetooth: hci3: command tx timeout
[  242.986585] Bluetooth: hci5: command tx timeout
[  243.050566] Bluetooth: hci6: command tx timeout
[  243.051007] Bluetooth: hci7: command tx timeout
[  244.778222] Bluetooth: hci0: command tx timeout
[  244.843477] Bluetooth: hci2: command tx timeout
[  244.844506] Bluetooth: hci1: command tx timeout
[  244.906294] Bluetooth: hci3: command tx timeout
[  244.907055] Bluetooth: hci4: command tx timeout
[  245.034241] Bluetooth: hci5: command tx timeout
[  245.098258] Bluetooth: hci6: command tx timeout
[  245.098960] Bluetooth: hci7: command tx timeout
[  298.941110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  298.952399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  298.956644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  298.964781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  298.970322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  299.146376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  299.151731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  299.154111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  299.162718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  299.168879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  299.265625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  299.274498] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  299.280076] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  299.294916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  299.302094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  299.355810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  299.359699] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  299.361991] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  299.369914] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  299.389439] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  299.432515] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  299.443420] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  299.449280] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  299.468713] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  299.473658] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  299.476000] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  299.484420] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  299.488548] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  299.495673] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  299.520738] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  299.533548] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  299.534878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  299.545002] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  299.581752] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  299.583204] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  299.589706] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  299.591424] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  299.622906] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  299.628637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  299.685311] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  301.034476] Bluetooth: hci0: command tx timeout
[  301.226622] Bluetooth: hci1: command tx timeout
[  301.354441] Bluetooth: hci2: command tx timeout
[  301.482242] Bluetooth: hci3: command tx timeout
[  301.610378] Bluetooth: hci7: command tx timeout
[  301.739203] Bluetooth: hci6: command tx timeout
[  301.739244] Bluetooth: hci4: command tx timeout
[  301.994253] Bluetooth: hci5: command tx timeout
[  303.082227] Bluetooth: hci0: command tx timeout
[  303.274344] Bluetooth: hci1: command tx timeout
[  303.402518] Bluetooth: hci2: command tx timeout
[  303.531325] Bluetooth: hci3: command tx timeout
[  303.658329] Bluetooth: hci7: command tx timeout
[  303.786792] Bluetooth: hci4: command tx timeout
[  303.786852] Bluetooth: hci6: command tx timeout
[  304.044517] Bluetooth: hci5: command tx timeout
[  305.130768] Bluetooth: hci0: command tx timeout
[  305.322206] Bluetooth: hci1: command tx timeout
[  305.450543] Bluetooth: hci2: command tx timeout
[  305.578353] Bluetooth: hci3: command tx timeout
[  305.706256] Bluetooth: hci7: command tx timeout
[  305.834413] Bluetooth: hci4: command tx timeout
[  305.836383] Bluetooth: hci6: command tx timeout
[  306.090256] Bluetooth: hci5: command tx timeout
[  307.178433] Bluetooth: hci0: command tx timeout
[  307.371195] Bluetooth: hci1: command tx timeout
[  307.498220] Bluetooth: hci2: command tx timeout
[  307.626415] Bluetooth: hci3: command tx timeout
[  307.754195] Bluetooth: hci7: command tx timeout
[  307.882458] Bluetooth: hci6: command tx timeout
[  307.882526] Bluetooth: hci4: command tx timeout
[  308.138541] Bluetooth: hci5: command tx timeout
[  361.410843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  361.419019] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  361.423908] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  361.432055] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  361.438698] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  361.596373] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  361.600091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  361.603977] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  361.611644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  361.615312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  361.805106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  361.811032] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  361.814605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  361.831933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  361.837799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  361.923552] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  361.925502] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  361.931596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  361.933717] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  361.933999] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  361.936429] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  361.937072] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  361.941563] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  361.943161] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  361.949592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  361.952209] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  361.953656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  361.955806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  361.966572] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.979319] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  362.011911] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  362.015680] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  362.019932] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  362.023686] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  362.035536] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  362.036993] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  362.048568] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  362.066766] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  362.069903] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  362.077557] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  363.499364] Bluetooth: hci0: command tx timeout
[  363.690278] Bluetooth: hci1: command tx timeout
[  363.882241] Bluetooth: hci2: command tx timeout
[  364.010453] Bluetooth: hci4: command tx timeout
[  364.011100] Bluetooth: hci3: command tx timeout
[  364.074198] Bluetooth: hci5: command tx timeout
[  364.202510] Bluetooth: hci6: command tx timeout
[  364.203412] Bluetooth: hci7: command tx timeout
[  365.547198] Bluetooth: hci0: command tx timeout
[  365.739306] Bluetooth: hci1: command tx timeout
[  365.930249] Bluetooth: hci2: command tx timeout
[  366.058322] Bluetooth: hci4: command tx timeout
[  366.058444] Bluetooth: hci3: command tx timeout
[  366.122188] Bluetooth: hci5: command tx timeout
[  366.250229] Bluetooth: hci7: command tx timeout
[  366.250697] Bluetooth: hci6: command tx timeout
[  367.594496] Bluetooth: hci0: command tx timeout
[  367.786306] Bluetooth: hci1: command tx timeout
[  367.978302] Bluetooth: hci2: command tx timeout
[  368.106350] Bluetooth: hci4: command tx timeout
[  368.106589] Bluetooth: hci3: command tx timeout
[  368.170587] Bluetooth: hci5: command tx timeout
[  368.298345] Bluetooth: hci6: command tx timeout
[  368.298542] Bluetooth: hci7: command tx timeout
[  369.642469] Bluetooth: hci0: command tx timeout
[  369.834243] Bluetooth: hci1: command tx timeout
[  370.026213] Bluetooth: hci2: command tx timeout
[  370.154219] Bluetooth: hci3: command tx timeout
[  370.154246] Bluetooth: hci4: command tx timeout
[  370.218420] Bluetooth: hci5: command tx timeout
[  370.346970] Bluetooth: hci7: command tx timeout
[  370.348149] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
09:50:42  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff888038807ce0 RCX=ffffffff819f6a4d RDX=ffff88801a27d280
RSI=ffffffff819f6a5c RDI=0000000000000005 RBP=0000000000000000 RSP=ffff888038807828
R8 =0000000000000000 R9 =fffff9400003ae4e R10=0000000000000001 R11=0000000000000001
R12=000000000000011e R13=0000000000000001 R14=ffff88800dd76000 R15=000000000000011d
RIP=ffffffff81738d98 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe6a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc011b646f4 CR3=000000002a500000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fc011b7347000007fc011b72f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffffea00001dad40 RCX=ffffffff818c7a76 RDX=ffff888013fbb700
RSI=ffffffff818c7c92 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff88801845faf0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000011 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88801845fd88
RIP=ffffffff815ab8f0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f7109790540 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f710998e504 CR3=000000002c83c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000