Warning: Permanently added '[localhost]:15477' (ECDSA) to the list of known hosts.
2025/06/21 20:11:12 fuzzer started
2025/06/21 20:11:12 dialing manager at localhost:33119
syzkaller login: [  101.254419] cgroup: Unknown subsys name 'net'
[  101.398658] cgroup: Unknown subsys name 'cpuset'
[  101.433871] cgroup: Unknown subsys name 'rlimit'
2025/06/21 20:11:29 syscalls: 2214
2025/06/21 20:11:29 code coverage: enabled
2025/06/21 20:11:29 comparison tracing: enabled
2025/06/21 20:11:29 extra coverage: enabled
2025/06/21 20:11:29 setuid sandbox: enabled
2025/06/21 20:11:29 namespace sandbox: enabled
2025/06/21 20:11:29 Android sandbox: enabled
2025/06/21 20:11:29 fault injection: enabled
2025/06/21 20:11:29 leak checking: enabled
2025/06/21 20:11:29 net packet injection: enabled
2025/06/21 20:11:29 net device setup: enabled
2025/06/21 20:11:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/21 20:11:29 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/21 20:11:29 USB emulation: enabled
2025/06/21 20:11:29 hci packet injection: enabled
2025/06/21 20:11:29 wifi device emulation: enabled
2025/06/21 20:11:29 802.15.4 emulation: enabled
2025/06/21 20:11:29 fetching corpus: 0, signal 0/0 (executing program)
2025/06/21 20:11:30 starting 8 fuzzer processes
20:11:30 executing program 0:
r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="58cb29de6fdcc30471ce2ca9737aefb4d6f7e21015c9479510956a6eb5592ec474b3e90a20f0705efa1e466d07c28dd007bc2c664402a598000e482d0a30a8139f0f498717827226824f625c1dc02094666a724d7d740b2a9b68d40decfeafe48790ad6afcfc10f81ed8ce8b9d4c0cbc0cb6b83d79c9dcb1c9487c2469fbad70a008bc6b3802fabb81c86f9f2e001251fffbacfca9efc929e2fe6d5f0b8450a5e7a974e29580897de842e72122e919e2417cfa1502ac8c09373847ae0d42b334f8fb89a7a90761301e850b3ff49ecd6e105bcc3171f7d38f8acc2877fc011290dc84", 0xe2, 0x8000}], 0x9000, &(0x7f00000001c0)={[{@fat=@check_normal}, {@dots}, {@nodots}, {@dots}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ')'}}, {@pcr={'pcr', 0x3d, 0xe}}, {@subj_type={'subj_type', 0x3d, '('}}]})
linkat(r0, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1000)
r1 = openat$incfs(r0, &(0x7f00000002c0)='.pending_reads\x00', 0x2000, 0x98)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x60100, 0x0)
dup2(r0, r2)
newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}, 0x0)
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x800, 0x0)
mknodat(r1, &(0x7f0000000440)='./file0\x00', 0xc000, 0x1)
acct(0x0)
umount2(&(0x7f0000000480)='./file0\x00', 0x2)
pipe2(&(0x7f00000004c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x184000)
bind$unix(r6, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r7 = socket$unix(0x1, 0x1, 0x0)
fcntl$setown(r7, 0x8, 0x0)
recvmsg(r5, &(0x7f0000000700)={&(0x7f0000000580)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/122, 0x7a}], 0x1, &(0x7f00000006c0)=""/3, 0x3}, 0x2)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r8=>r2, {0x2}}, './file0\x00'})
r9 = openat2$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x248102, 0xa0, 0x3}, 0x18)
move_mount(r8, &(0x7f0000000780)='./file0/file0\x00', r9, &(0x7f0000000840)='./file0\x00', 0x34)
write$P9_RSTATu(r8, &(0x7f0000000880)={0x63, 0x7d, 0x2, {{0x0, 0x4d, 0x3, 0x6, {0x10, 0x1, 0x6}, 0x2200000, 0x100, 0x5, 0x1, 0x6, 'nodots', 0x9, '/dev/sr0\x00', 0xb, 'rootcontext'}, 0x1, '-', r3, r4, r3}}, 0x63)

20:11:30 executing program 1:
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r0=>0x0)
r1 = getgid()
r2 = fork()
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x2, r0, r1, 0x0, 0x0, 0x8, 0x4e}, 0x101, 0x0, 0x101, 0xfffffffffffff001, 0xffffffffffffffff, r2})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x67040f39, 0x400, 0x2, 0x6, 0x20, 0x3f})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x8, 'team_slave_1\x00', {'geneve0\x00'}, 0x400})
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000180)=0x1)
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000001c0)=0x29)
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000200)=0xffffffff)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000240)=0x80000001)
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000280))
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x80000000, 0x1}}, './file0\x00'})
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000300))
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x80)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000480)={<r5=>0x0, 0x9, 0x3, 0x1})
ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000880)={{}, 0x0, 0x2, @unused=[0x5, 0x81, 0x31f, 0x3], @devid=r5})
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000001880), 0x4)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000018c0))
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000001940)="bc256be4c6b076896899d1ac141b1cba42a899a1ba6a46c55d0506340375f9bebfdf7d0e4d41743678c0c2b99aaef57f4697afc0b605bfcbacbdbb5b6b6f5fa2edf14c4c9b3d6852bb0f71d32e3fafe02ed09771745958760ea29918cf147890914f8ce0f9662efe6e0c62f279538a0cffc65f8e92a92cdc4b955bf1010831bc5f35b96002fac059cfd2b9db9c302f68ece48d00aa724bcd51ba40acc5cb9d54bdacc548c29ccda6ded70bf1e5090215b35d00d1fad76e715a2f41fe0b7fda1c977c6b607fd40f31c14495863034cf230364c89dfb", 0xd5)

20:11:30 executing program 3:
ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000000))
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000080))
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x202100, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000100))
lseek(r0, 0x5, 0x2)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x20, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@dfltuid}, {@loose}, {@debug={'debug', 0x3d, 0x2}}, {@access_uid={'access', 0x3d, r1}}, {@cache_none}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, '/dev/nvram\x00'}}, {@noextend}], [{@uid_gt={'uid>', 0xee01}}, {@uid_lt={'uid<', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/nvram\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/nvram\x00'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@obj_type={'obj_type', 0x3d, '!$-]'}}]}})
sendmsg$SOCK_DESTROY(r0, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1cc, 0x15, 0xc, 0x70bd2c, 0x25dfdbfd, {0x1, 0xe}, [@INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "85fe68c0b09a42f6bf12c7dde966d924ff0ef15019c7d397ebf75882823882d0e5b780f06ae1ce0af316e2e7a0394b060a26037207d36940d88efff464daa415b70529a42521a9c210bc4c60e616f787db9757554b788f7eb9536302ec7facbd1ecac2953ffa0f68efa5b3765f7e44b72151ced36405eb66210db7a012d2d19a6b0c85727951ab12927f11010ec889806e233ff5be2da48880c051e470b2ebd21e72c0dd58c1c7876263a00f9454b2b8486c247c9f2f525461a0967db46feb8d2e54f59d67e90bb990cf07d29f55013a77e5c7ddf10214f87d1028f1489dab1aaf9a7223f6321816d4a06249e4"}, @INET_DIAG_REQ_BYTECODE={0xc1, 0x1, "ad75a9c92f9eeccb9ec55f7af36f6b44abaeba3c0fec82adba2a941ca763e5648e0c2723d74713029825528bd470563dab843241c5c4cc9df7dbdcc099c76d65613a06fac12c432fb08e4ad7682b6736bd7670a6c90582a7297cc5da3ff729a89d7080631bd43dd4d1dd5af8b649826803fa8a94d1ecb210f7dc8f8f758265c61be0a6ceff1e9b10c54f8be0e731f3b838bec8138ba0b81a598f31ab66f0c1c97edd55438eacc6c5940b93a14553b2777b67ca2d7aeb1071eaabf6dd6a"}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x1)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000700)=0xfffffffffffffff9)
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs2/binder-control\x00', 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000007c0)=<r4=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000800)={{r3}, r4, 0x10, @unused=[0x1ff, 0x6, 0x9, 0xff], @subvolid=0x1})
r5 = dup3(r0, 0xffffffffffffffff, 0x80000)
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000001800)={0x18, 0x5, {0x8, @usage=0x400, 0x0, 0xfffe0000000000, 0x20, 0x5b4c, 0x64f17e84, 0x2, 0x81, @struct={0x1, 0x2}, 0x80000001, 0x5, [0x5, 0xfffffffffffffff5, 0x100000000, 0x8, 0x817f, 0x3]}, {0x80000000, @usage=0x7f, 0x0, 0x7, 0x7f, 0x1, 0x40, 0x7, 0x0, @struct={0x4, 0x401}, 0x0, 0x5, [0x7fffffff, 0x6, 0x1c6, 0x9a15, 0x7, 0x6]}, {0x8001, @struct={0x0, 0xfff}, 0x0, 0x7, 0x5, 0x7ff, 0x0, 0x3, 0x40, @usage, 0x1, 0x101, [0x8, 0x5, 0x1, 0x1, 0xffffffff00000001, 0x100]}, {0x0, 0x80000}})
sendmsg$802154_dgram(r0, &(0x7f0000001d80)={&(0x7f0000001c00)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000001d40)={&(0x7f0000001c40)="c829440f723d8d13b7d76f03a2ec921eca0407a3b864ff45ae014d88c83599de45efedf9ce3661fb0525e4d7392b231704f797eeb4b9425bb875a67cbab0aa486442b946958b5b31553325b500dc2fe5e21e94a48cddc5c7d6f581d4af67ed6cc379eac89740710a02875b27292e218bda454eb5d50b40760f5514dab80081cc067c715cd4ce0eef9861af019b14cf2b7681b7b170c41946b295eaecda70957b7cd5c2f1085277fc7d43a8fb7fbdfb1015458ec9ea92fe49e56cdca67357850a7e", 0xc1}, 0x1, 0x0, 0x0, 0x20000000}, 0x8014)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000001dc0)={{0x1, 0x1, 0x18, <r6=>r5, {0x1}}, './file0\x00'})
r7 = syz_open_dev$vcsa(&(0x7f0000001e80), 0x7, 0x42041)
fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000001e00)='dfltuid', &(0x7f0000001e40)='./file0\x00', r7)
sendto$unix(r7, &(0x7f0000001ec0)="c678cf6e08917acd72754e4c6dfb39b72c03d4959a502ba6c8049129d9c2eda81ac49cb067d45056c8997500aa01a5c21ff5ba3d094ad456928c20af216988cd8bcbebcabb7cb601ca2dd29ec4cc2ab6480bc068af306dc997e712d604788bf754778424cce60a3454a2ab0cf63ca563be0ad2df69ba62e12d79c741c5c01fa7fd59c967c9d449636f6702dcb31446d4b40b0a4beb5e08b88e9ec9e826e73d11b3ee038915ca95a37baccfaa06454e24f427eeb18c6e6927bb9208e67404a64341bf1acf5d39edf3e42e656450657b5272aed4", 0xd3, 0x20045880, &(0x7f0000001fc0)=@file={0x1, './file0\x00'}, 0x6e)

20:11:30 executing program 2:
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000))
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x4]}, 0x8)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0x8001, 0x0, [0x8, 0x840e, 0x7, 0x4, 0x7], [0x1, 0xe7, 0x8000, 0xfffffffffffff22d, 0x8, 0x87, 0x9, 0x0, 0x2, 0x4, 0x101, 0x8, 0x7, 0x8, 0x1, 0x3, 0x6, 0x8, 0x0, 0x5, 0x13, 0x8, 0x3, 0x7, 0x3, 0x0, 0xddad, 0xd3f2, 0x1, 0x4, 0x1, 0x3, 0x9, 0x3, 0x9, 0x3f, 0x4, 0xfffffffffffffffc, 0x5, 0x2, 0x5, 0x2, 0x200, 0xadc, 0x9, 0x0, 0x800, 0xfff, 0x1701, 0x400, 0x9, 0x23, 0x3f, 0x4848, 0x6, 0x51, 0x6852, 0x2a, 0xed, 0x6c, 0x5, 0x4, 0x77, 0x3ff, 0x4, 0xffff, 0xfffffffffffffad0, 0x3, 0x7, 0x8, 0x6, 0x1, 0x4456, 0xffffffffffff8001, 0x0, 0x7, 0xffffffffffffff01, 0x2, 0x3, 0x0, 0x1, 0x76, 0x7, 0x8, 0xb22, 0x8, 0x4a, 0x8, 0x9, 0x7, 0x8, 0x800, 0x9, 0x3, 0x6, 0x5, 0x5, 0x100000000, 0x8, 0x8, 0x0, 0x5, 0x0, 0x8, 0x9, 0x800, 0x9, 0x2, 0x2, 0x36, 0x100000000, 0x7fffffff, 0x227, 0x1, 0x0, 0xffffffff00000001, 0xc1, 0x4, 0x3, 0x401, 0xc8]})
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder-control\x00', 0x800, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000500)={{r1}, "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"})
ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000001500)=""/161)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001600)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x62}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x40080)
r3 = syz_open_dev$vcsu(&(0x7f0000001700), 0x7, 0x400)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000001740))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x58, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x42}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa145}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c000}, 0x40)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000001900)={0x7, 'ip6tnl0\x00', {0x800}, 0x3})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001980)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, r4, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}]}, 0x34}}, 0x4004884)
mq_timedsend(r0, &(0x7f0000001a80)="d43e80718cbea7010edc6537d41e3af1aec137", 0x13, 0x7fff, &(0x7f0000001ac0))
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x58, 0xc, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x14)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x40, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "95ee371ca9a1adb291b80b77d29844fc"}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24000845)

[  119.363501] audit: type=1400 audit(1750536691.031:7): avc:  denied  { execmem } for  pid=270 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
20:11:31 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r0, 0x4b3a, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_complete(r1)
write$P9_RGETATTR(r2, &(0x7f0000000000)={0xa0, 0x19, 0x2, {0x0, {0x0, 0x3}, 0x149, 0x0, 0xee00, 0x200, 0x5, 0xb269, 0x80000001, 0x5, 0xffe0000000000000, 0x3f, 0x2, 0x1, 0x1, 0x0, 0xc8, 0x3, 0x7, 0x2}}, 0xa0)
waitid$P_PIDFD(0x3, r2, &(0x7f00000000c0), 0x2, 0x0)
write$P9_RAUTH(r2, &(0x7f0000000140)={0x14, 0x67, 0x1, {0x0, 0x3, 0x1}}, 0x14)
r3 = openat$incfs(r2, &(0x7f0000000180)='.log\x00', 0x0, 0x11)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x10, r3, 0x8000000)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {0x0, @struct, <r4=>0x0}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000005c0)={r4, 0x4, 0x1, [0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfff, 0x9b89], [0x0, 0x0, 0x3, 0x9, 0x6, 0xd263, 0x3, 0x71fcd0e9, 0x7f, 0x3, 0x10000, 0x840, 0x6, 0x1ff, 0x3, 0x8, 0x80, 0x101, 0xffff, 0x100000001, 0xfffffffffffffffb, 0x101, 0x95f8, 0x7, 0x7ca, 0x3, 0xffffffff, 0x5, 0x2, 0x9, 0x0, 0xa1, 0x6, 0xee5, 0x93ca, 0x8001, 0x1, 0xffffffffffffffc0, 0x5, 0x9, 0x0, 0x3, 0xff, 0x7, 0x14000, 0x0, 0x1, 0x3f, 0xc2, 0x3, 0x8001, 0x200, 0x5, 0x20, 0x2, 0x4, 0xfffffffffffffffe, 0xffff, 0x100, 0x0, 0xfff, 0x7, 0x247, 0x3f5, 0x100, 0x7fff, 0x3, 0x7, 0x7, 0xfff, 0x8, 0x2, 0xfff, 0x9, 0x6, 0xfffffffffffffffa, 0x3, 0x5, 0x866, 0x7d2f, 0xc3ef, 0x100, 0xfffffffffffffff9, 0x9, 0x7, 0x3, 0x8, 0x20, 0x8001, 0x1, 0xf31, 0x7, 0x0, 0x10001, 0x5, 0x3, 0x0, 0x80000000, 0x7, 0x0, 0x1, 0x7, 0x8001, 0x100000000, 0x101, 0x4, 0x1, 0x5, 0x0, 0x5, 0x3, 0x200, 0x92, 0x4, 0x0, 0x3, 0x7fff, 0x5, 0xfffffffffffffff8, 0x9f63, 0xfffffffffffffffc]})
setxattr$trusted_overlay_origin(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), &(0x7f0000000a80), 0x2, 0x2)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffff9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x110)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000c40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x3c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048084}, 0x8000)
open(&(0x7f0000000f80)='./file0\x00', 0x20002, 0x8c)
r7 = openat$cgroup_ro(r2, &(0x7f0000000fc0)='io.stat\x00', 0x0, 0x0)
write$P9_RRENAME(r7, &(0x7f0000001000)={0x7, 0x15, 0x2}, 0x7)

20:11:31 executing program 5:
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=0x7, 0x4)
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040), 0x4)
clock_gettime(0x0, &(0x7f0000000080)={<r0=>0x0, <r1=>0x0})
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x77359400}, {r0, r1+60000000}}, &(0x7f0000000100))
r2 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0xd2, 0x7, &(0x7f0000000540)=[{&(0x7f00000001c0)="a64a534040db0f6ae04ed54338da2e8cccb02e7ca78ba6aa597ddb24aa3fb2cebf154d71412899154da2c74ef12c53dc0bff486e08fe7f6fe6f9d8", 0x3b, 0x1ff}, {&(0x7f0000000200)="af3740b0a51602e4", 0x8, 0x757}, {&(0x7f0000000240)="9d83ee0c6532dec013ab89dab285eef5641063d8f11773c2ae475be469d6e8697f3e5f5c177e6eca74d53befc8922968c7035cee806b2d33c840c9e375a3261221323add87aed023f41c6a020af86797aa14025f1b87756f89eb270cee9207d896f48615b66766e326e36c9833e96ced0b96932351fa017a743f30887f3027d6ebe1f1be469154cd8823569e410a702d179f4d4220e4e029b032c266fa5ed50775d54e8a9e563fae8f791c1801c6e846a9016fe91faea5f66dfdf0ddce465120572c5389c375c66fb84abfbe9bda2d3c8bd93ff6ee5e6b18230e4a71e0f77dba95e165", 0xe3, 0x101}, {&(0x7f0000000340)="6ba6a4a537e6e90f6f", 0x9, 0x5}, {&(0x7f0000000380)="84321779e3f95553199d6bd1d878fbf8be61f2c2b70d8c47735cfb7fd5d544f54a16398b6d70a33b7df140819258910f66e40d05168599bf6e33169996a62512d2ec2b77feab62b399d81b2f20f340b5a597d7a4916e5585e11e3452744ed00feb996f7c1c529fb2a0d84d08e13d3c40b7161e39109da3e24ec8407df45f0c03b5f4d088c1f8cb4f058836f2f7b28ff2e837b42ad1a5e864aba61a1218a4e4bfbd8e183f512fd8e8a77358597242a2c7e6835469c58e2f9265fa57e438ae4b", 0xbf, 0x1}, {&(0x7f0000000440)="1badfe961f450ce2f891ced22f5ae0f13e8f552dbf81ad23f8d7499c41407c117097c5e1fc612362d8a27e9e2e8c577c83421dccd0597a4c589ee7594d26718a4b9903326c11d91432c4ffc50d26e4c3482a9651789a5ea528297565ec986d11", 0x60, 0x6}, {&(0x7f00000004c0)="94ea91668c3fd3a0bb126a896f1d945d9e57da7d6fe28c75fd7e719bf3b533a942c38d1b81246b27a3c165982e7475cc943521ed6c7a7427807abab7c0df47fdfe298294da8ed38d7f2b91c9139a", 0x4e, 0x6}], 0x1004400, &(0x7f0000000600)={[{@mode={'mode', 0x3d, 0xffffffff}}, {@nocompress}], [{@fsmagic={'fsmagic', 0x3d, 0x97}}, {@hash}, {@dont_appraise}, {@obj_type}, {@fsname}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]})
r3 = open_tree(r2, &(0x7f0000000680)='./file0\x00', 0x88101)
ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f00000006c0))
ioctl$CDROMREADCOOKED(r3, 0x5315, &(0x7f0000000700))
utime(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)={0xffffffffffffffff, 0xfffffffffffffeff})
syz_mount_image$iso9660(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x9, 0x1, &(0x7f0000001300)=[{&(0x7f0000001280)="65cfa0f628e1736b48a928da0fcaf1010a50e56453384c0ba05dc130e41d63c404a2a27772ad0779c6d736bfbb9806ca89e447d4b406b344e34b8033888ea7c28121141a725e0dedb8a991221a1a0147bf32fb07657df7da03", 0x59, 0x9}], 0x2002000, &(0x7f0000001340)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@utf8}, {@overriderock}, {@map_off}], [{@obj_user={'obj_user', 0x3d, '\'^#+$}&,'}}, {@euid_gt={'euid>', 0xee00}}]})
setxattr$incfs_metadata(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400), &(0x7f0000001440)="3e5eff92938726a14214f4052fcbbe25c51f81d907a779266d87002ef1ae3949d2ded4a7fc72604d78cfc6f688f5ddf20846152f53af77207abf23365a2a3bbc13eb89c37fc7faf91b88b8b3fb04d4ff7dee36aeae5655bc6b3291376c1bf041b20e1d3dbd233033b356438e720167ee35bc075bc0d33aabc65691c7a2385fdf6f54dcf5ad6146e21e88e244cd5bc3385a21943b8469b7719e503748d010b3a5fa7fe12c8e1cce4886a4bdf7101f25bb6b364dde000ccc58e0cbada88d2c7b9e5ef216f202596e789d440d1d340b", 0xce, 0x2)
ioctl$TIOCNXCL(r3, 0x540d)
ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000001540)={0x7, 0xd0})
r4 = open(&(0x7f0000001580)='./file0\x00', 0x420440, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x28, 0x3f7, 0x300, 0x70bd2c, 0x25dfdbff, {0x7, 0x7, './file0', './file1'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000016c0)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
write$cgroup_pid(r5, &(0x7f0000001700), 0x12)
rt_sigpending(0xfffffffffffffffd, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000001740), 0x2000, 0x0)
rt_sigprocmask(0x2, &(0x7f0000001780)={[0x6]}, &(0x7f00000017c0), 0x8)

20:11:31 executing program 6:
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000a000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x7}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4008804)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000001c0))
ioctl$DVD_WRITE_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000200)=@copyright={0x1, 0x3, 0xb6, 0x1f})
r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000a40)='.pending_reads\x00', 0x2000, 0x8)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x47}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x440)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x404c0c1)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1f}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1f}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x4000)
write(r2, &(0x7f0000000e40)="7fde88329404f82eef6bbe800f122f813158da5980f44b786955098cf2b5ed6f2440eeb56010634e4cb457a26aea9e4977e29e926f6bc9ff8dc80592040e240232a94b7063fd1640933b869da15d29a3d726ad22ee8baad7b543804c9978421d52ab6174ceb0f3b0787d83d3fbfc", 0x6e)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f40), 0x58d200, 0x0)
io_cancel(0x0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, &(0x7f0000000ec0)="ff22288403f11e794900dcec264b1a40d36e7e35af85e35bd8857747339406e434783ecbb392d5197ccd7e482a05c522421cfb11bebfbd37763b62d02f3b79e62d7a1634f940630c5e6ab90caf95c576451bae202d19ac0bf5fe4da3ceac8cb6902a0534bd9cbdef30fc6f023bc61503a238a8390fcdbc3270bee3", 0x7b, 0x2, 0x0, 0x1, r5}, &(0x7f0000000fc0))
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000001000)='wg1\x00', 0x4)
sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x890}, 0x880)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000001140))
r6 = pidfd_getfd(r4, r4, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000001180)={0x2bf, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})

20:11:31 executing program 7:
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='id_resolver\x00', 0x0)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040))
keyctl$set_timeout(0xf, 0x0, 0x5)
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100))
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x6)
setsockopt(r0, 0x7fffffff, 0x400, &(0x7f0000000140)="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", 0xfd)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000240)={0x4, {{0xa, 0x4e23, 0x7f, @empty, 0xac87}}}, 0x88)
r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000340))
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000380)={0x0, 0xa5, 0xe0}, &(0x7f00000003c0)={'enc=', 'pkcs1', ' hash=', {'sha384-ssse3\x00'}}, &(0x7f0000000440)="39e3ca561054673f505b9586df9c07de6e439400f4568170dc756c66a84e6d1b6138a61762f058e9c4cd4e22b6bb9088320a5a9fb855705487292cc4ed8ff0596f6e557cff01dfb36316320fbc0208112ccb1bfa0eba2703f7b97bb13ca81ce9d1b114522461e98a2f1c3f2e2e3b5071b225803cdb5d47ee0143b2de41f2c9ff9a91a851875828c346949a3a3e7ab45a1bc175a29163d25a3cb6c02d70d1f43cef190ae7f2", &(0x7f0000000500)=""/224)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000680))
getsockname$netlink(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000700)=0xc)
r2 = creat(&(0x7f0000000740)='./file0\x00', 0x24)
ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000780))
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x72}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfff}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x7, 0x1, 0x7ff, 0x9, {{0x29, 0x4, 0x1, 0x2, 0xa4, 0x66, 0x0, 0x4e, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@lsrr={0x83, 0x23, 0x79, [@loopback, @broadcast, @remote, @rand_addr=0x64010100, @multicast2, @broadcast, @empty, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x24, 0x47, 0x3, 0x2, [{@rand_addr=0x64010102, 0x80}, {@rand_addr=0x64010100, 0x1f}, {@remote, 0x3}, {@multicast2, 0x843}]}, @generic={0x44, 0x12, "934325220b24e0909b1592cc3b7708ad"}, @timestamp_prespec={0x44, 0x24, 0xec, 0x3, 0x2, [{@multicast2, 0x4cf}, {@local, 0x9}, {@loopback, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}]}, @rr={0x7, 0xf, 0xac, [@remote, @broadcast, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x6c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x58}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0xc890)

[  120.682792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  120.685905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  120.690121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  120.692671] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  120.700812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  120.702458] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  120.705224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  120.711335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  120.715122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  120.720397] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  120.785574] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  120.792767] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  120.796022] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  120.797640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  120.803038] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  120.805042] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  120.808427] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  120.810848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  120.826092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  120.846178] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  120.869302] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  120.880351] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  120.891627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  120.906205] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  120.918206] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.962046] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  120.966904] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  120.984462] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  120.986114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  121.008007] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  121.008261] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  121.015912] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  121.019852] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  121.022230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  121.024237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  121.027367] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  121.037035] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  121.037193] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  121.048343] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  121.063908] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  122.754094] Bluetooth: hci1: command tx timeout
[  122.817777] Bluetooth: hci0: command tx timeout
[  122.881881] Bluetooth: hci3: command tx timeout
[  122.882920] Bluetooth: hci2: command tx timeout
[  123.009772] Bluetooth: hci4: command tx timeout
[  123.137808] Bluetooth: hci7: command tx timeout
[  123.138459] Bluetooth: hci5: command tx timeout
[  123.201780] Bluetooth: hci6: command tx timeout
[  124.803813] Bluetooth: hci1: command tx timeout
[  124.866931] Bluetooth: hci0: command tx timeout
[  124.930809] Bluetooth: hci2: command tx timeout
[  124.931211] Bluetooth: hci3: command tx timeout
[  125.059087] Bluetooth: hci4: command tx timeout
[  125.186985] Bluetooth: hci5: command tx timeout
[  125.187400] Bluetooth: hci7: command tx timeout
[  125.250765] Bluetooth: hci6: command tx timeout
[  126.850762] Bluetooth: hci1: command tx timeout
[  126.913742] Bluetooth: hci0: command tx timeout
[  126.979061] Bluetooth: hci3: command tx timeout
[  126.979490] Bluetooth: hci2: command tx timeout
[  127.106052] Bluetooth: hci4: command tx timeout
[  127.235056] Bluetooth: hci7: command tx timeout
[  127.235502] Bluetooth: hci5: command tx timeout
[  127.297769] Bluetooth: hci6: command tx timeout
[  128.898876] Bluetooth: hci1: command tx timeout
[  128.961783] Bluetooth: hci0: command tx timeout
[  129.025803] Bluetooth: hci2: command tx timeout
[  129.026242] Bluetooth: hci3: command tx timeout
[  129.154763] Bluetooth: hci4: command tx timeout
[  129.284241] Bluetooth: hci5: command tx timeout
[  129.284714] Bluetooth: hci7: command tx timeout
[  129.346757] Bluetooth: hci6: command tx timeout
[  181.389131] syz-executor.6 (282) used greatest stack depth: 24752 bytes left
[  181.391713] syz-executor.2 (286) used greatest stack depth: 24640 bytes left
[  183.592615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  183.599140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  183.605426] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  183.615115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  183.620258] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  183.708179] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  183.711047] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  183.714489] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  183.725572] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  183.743270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  183.810533] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  183.818164] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  183.828275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  183.828317] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  183.836457] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  183.850707] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  183.851496] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  183.859867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  183.862159] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  183.870404] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  183.894422] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  183.922990] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  183.927279] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  183.932112] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  183.936012] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  183.937669] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  183.937988] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  183.949109] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  183.949101] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  183.958103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  183.962080] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  183.964388] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  183.967315] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  183.974201] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  183.980463] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  183.983374] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  183.989922] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  183.994399] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  183.998789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  184.022192] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  185.666023] Bluetooth: hci0: command tx timeout
[  185.794088] Bluetooth: hci1: command tx timeout
[  185.922259] Bluetooth: hci2: command tx timeout
[  185.986781] Bluetooth: hci3: command tx timeout
[  186.051744] Bluetooth: hci4: command tx timeout
[  186.052025] Bluetooth: hci7: command tx timeout
[  186.113935] Bluetooth: hci6: command tx timeout
[  186.177794] Bluetooth: hci5: command tx timeout
[  187.714256] Bluetooth: hci0: command tx timeout
[  187.841789] Bluetooth: hci1: command tx timeout
[  187.970794] Bluetooth: hci2: command tx timeout
[  188.033804] Bluetooth: hci3: command tx timeout
[  188.097930] Bluetooth: hci4: command tx timeout
[  188.100748] Bluetooth: hci7: command tx timeout
[  188.161752] Bluetooth: hci6: command tx timeout
[  188.225753] Bluetooth: hci5: command tx timeout
[  189.762101] Bluetooth: hci0: command tx timeout
[  189.889750] Bluetooth: hci1: command tx timeout
[  190.018754] Bluetooth: hci2: command tx timeout
[  190.081956] Bluetooth: hci3: command tx timeout
[  190.146773] Bluetooth: hci7: command tx timeout
[  190.146810] Bluetooth: hci4: command tx timeout
[  190.209959] Bluetooth: hci6: command tx timeout
[  190.273779] Bluetooth: hci5: command tx timeout
[  191.810762] Bluetooth: hci0: command tx timeout
[  191.939759] Bluetooth: hci1: command tx timeout
[  192.066990] Bluetooth: hci2: command tx timeout
[  192.131036] Bluetooth: hci3: command tx timeout
[  192.193791] Bluetooth: hci7: command tx timeout
[  192.194221] Bluetooth: hci4: command tx timeout
[  192.257805] Bluetooth: hci6: command tx timeout
[  192.321902] Bluetooth: hci5: command tx timeout
[  245.847876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  245.850169] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  245.853409] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  245.855528] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  245.857069] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  245.861248] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  245.864201] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  245.868058] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  245.874583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  245.879282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  245.927343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  245.932048] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  245.935095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  245.939738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  245.950096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  246.032598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  246.035012] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  246.052945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  246.061983] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  246.069787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  246.103508] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  246.114007] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  246.118320] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  246.138963] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  246.145270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  246.182559] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  246.191325] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  246.197147] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  246.198327] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  246.202142] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  246.203323] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  246.212120] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  246.213115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  246.240899] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  246.241857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  246.395732] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  246.441016] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  246.473010] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  246.507019] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  246.514131] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  247.937797] Bluetooth: hci0: command tx timeout
[  247.937831] Bluetooth: hci1: command tx timeout
[  248.001802] Bluetooth: hci2: command tx timeout
[  248.193806] Bluetooth: hci4: command tx timeout
[  248.193876] Bluetooth: hci3: command tx timeout
[  248.385779] Bluetooth: hci5: command tx timeout
[  248.449789] Bluetooth: hci6: command tx timeout
[  248.642037] Bluetooth: hci7: command tx timeout
[  249.986807] Bluetooth: hci1: command tx timeout
[  249.986829] Bluetooth: hci0: command tx timeout
[  250.049763] Bluetooth: hci2: command tx timeout
[  250.241802] Bluetooth: hci4: command tx timeout
[  250.245116] Bluetooth: hci3: command tx timeout
[  250.434776] Bluetooth: hci5: command tx timeout
[  250.498090] Bluetooth: hci6: command tx timeout
[  250.689758] Bluetooth: hci7: command tx timeout
[  252.033756] Bluetooth: hci0: command tx timeout
[  252.036710] Bluetooth: hci1: command tx timeout
[  252.097737] Bluetooth: hci2: command tx timeout
[  252.290050] Bluetooth: hci3: command tx timeout
[  252.290497] Bluetooth: hci4: command tx timeout
[  252.481782] Bluetooth: hci5: command tx timeout
[  252.547964] Bluetooth: hci6: command tx timeout
[  252.737746] Bluetooth: hci7: command tx timeout
[  254.082081] Bluetooth: hci1: command tx timeout
[  254.082168] Bluetooth: hci0: command tx timeout
[  254.145899] Bluetooth: hci2: command tx timeout
[  254.339768] Bluetooth: hci3: command tx timeout
[  254.339829] Bluetooth: hci4: command tx timeout
[  254.530055] Bluetooth: hci5: command tx timeout
[  254.594884] Bluetooth: hci6: command tx timeout
[  254.785758] Bluetooth: hci7: command tx timeout
[  308.566017] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  308.569427] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  308.572891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  308.587224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  308.593189] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  308.825393] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  308.830569] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  308.833631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  308.840041] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  308.845199] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  308.990898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  308.997118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  309.003938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  309.008439] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  309.011312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  309.014985] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  309.022208] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  309.027225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  309.030221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  309.045141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  309.115232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  309.136969] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  309.141304] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  309.143498] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  309.150299] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  309.157490] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.162830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.163261] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  309.178082] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  309.183239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  309.204591] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  309.224597] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  309.226476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  309.227496] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  309.244461] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  309.246382] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  309.246539] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  309.249589] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  309.258253] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  309.260283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  310.659501] Bluetooth: hci0: command tx timeout
[  310.914325] Bluetooth: hci1: command tx timeout
[  311.105773] Bluetooth: hci2: command tx timeout
[  311.169760] Bluetooth: hci3: command tx timeout
[  311.233787] Bluetooth: hci5: command tx timeout
[  311.427085] Bluetooth: hci7: command tx timeout
[  311.428117] Bluetooth: hci4: command tx timeout
[  311.428619] Bluetooth: hci6: command tx timeout
[  312.706028] Bluetooth: hci0: command tx timeout
[  312.961762] Bluetooth: hci1: command tx timeout
[  313.153797] Bluetooth: hci2: command tx timeout
[  313.217815] Bluetooth: hci3: command tx timeout
[  313.281763] Bluetooth: hci5: command tx timeout
[  313.473897] Bluetooth: hci6: command tx timeout
[  313.474401] Bluetooth: hci4: command tx timeout
[  313.474460] Bluetooth: hci7: command tx timeout
[  314.755710] Bluetooth: hci0: command tx timeout
[  315.009826] Bluetooth: hci1: command tx timeout
[  315.202799] Bluetooth: hci2: command tx timeout
[  315.266051] Bluetooth: hci3: command tx timeout
[  315.330927] Bluetooth: hci5: command tx timeout
[  315.522745] Bluetooth: hci6: command tx timeout
[  315.522790] Bluetooth: hci4: command tx timeout
[  315.523240] Bluetooth: hci7: command tx timeout
[  316.801941] Bluetooth: hci0: command tx timeout
[  317.057785] Bluetooth: hci1: command tx timeout
[  317.252381] Bluetooth: hci2: command tx timeout
[  317.315514] Bluetooth: hci3: command tx timeout
[  317.378039] Bluetooth: hci5: command tx timeout
[  317.570763] Bluetooth: hci7: command tx timeout
[  317.571254] Bluetooth: hci4: command tx timeout
[  317.571838] Bluetooth: hci6: command tx timeout
[  370.783165] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  370.789449] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  370.795511] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  370.810514] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  370.818509] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  370.975838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  370.979539] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  370.981818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  371.001302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  371.009505] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  371.173658] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  371.184510] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  371.200650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  371.211194] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  371.215922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  371.228427] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  371.267048] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  371.282991] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  371.298892] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  371.301761] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  371.315035] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  371.333203] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  371.353558] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  371.360190] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  371.363489] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  371.405586] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  371.429206] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  371.436719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  371.442733] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  371.480035] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  371.484656] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  371.494266] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  371.517865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  371.556181] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  371.578471] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  371.580136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  371.605906] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  371.624879] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  371.657298] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  371.679139] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  372.866901] Bluetooth: hci0: command tx timeout
[  373.059803] Bluetooth: hci1: command tx timeout
[  373.250191] Bluetooth: hci2: command tx timeout
[  373.441850] Bluetooth: hci3: command tx timeout
[  373.509276] Bluetooth: hci4: command tx timeout
[  373.697844] Bluetooth: hci6: command tx timeout
[  373.699215] Bluetooth: hci5: command tx timeout
[  373.762109] Bluetooth: hci7: command tx timeout
[  374.914295] Bluetooth: hci0: command tx timeout
[  375.106624] Bluetooth: hci1: command tx timeout
[  375.298024] Bluetooth: hci2: command tx timeout
[  375.489945] Bluetooth: hci3: command tx timeout
[  375.553767] Bluetooth: hci4: command tx timeout
[  375.745855] Bluetooth: hci5: command tx timeout
[  375.746326] Bluetooth: hci6: command tx timeout
[  375.811111] Bluetooth: hci7: command tx timeout
[  376.961807] Bluetooth: hci0: command tx timeout
[  377.155713] Bluetooth: hci1: command tx timeout
[  377.345868] Bluetooth: hci2: command tx timeout
[  377.537736] Bluetooth: hci3: command tx timeout
[  377.601818] Bluetooth: hci4: command tx timeout
[  377.793783] Bluetooth: hci6: command tx timeout
[  377.794300] Bluetooth: hci5: command tx timeout
[  377.859482] Bluetooth: hci7: command tx timeout
[  379.009816] Bluetooth: hci0: command tx timeout
[  379.201913] Bluetooth: hci1: command tx timeout
[  379.393853] Bluetooth: hci2: command tx timeout
[  379.586755] Bluetooth: hci3: command tx timeout
[  379.650261] Bluetooth: hci4: command tx timeout
[  379.842043] Bluetooth: hci5: command tx timeout
[  379.843422] Bluetooth: hci6: command tx timeout
[  379.906131] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
20:16:41  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000001 RCX=bde53094b5b1327e RDX=ffffffff81353d19
RSI=000000000b6dc639 RDI=00000000d61cd15b RBP=ffff88806ce08aa8 RSP=ffff88806ce089e0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=ffff88806ce08a98 R14=ffff888014ea5280 R15=ffff88806ce08a50
RIP=ffffffff81353d33 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe7400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4c3ac48028 CR3=00000000352ac000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffffffff819c2a96 RDX=ffff88800f5db700
RSI=0000000000000000 RDI=0000000000000007 RBP=1ffff1100606defd RSP=ffff88803036f7e0
R8 =0000000000000000 R9 =fffff94000036fde R10=0000000006dfc025 R11=0000000000000001
R12=ffff888035f2a8c0 R13=00007f1c66b2a000 R14=0000000006dfc025 R15=0000000006dfc025
RIP=ffffffff819c2a96 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe0100000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0f24b42260 CR3=000000000d061000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000