Warning: Permanently added '[localhost]:27767' (ECDSA) to the list of known hosts.
2024/11/09 19:33:40 fuzzer started
2024/11/09 19:33:41 dialing manager at localhost:46317
syzkaller login: [   64.480536] cgroup: Unknown subsys name 'net'
[   64.568475] cgroup: Unknown subsys name 'cpuset'
[   64.596739] cgroup: Unknown subsys name 'rlimit'
2024/11/09 19:33:57 syscalls: 2217
2024/11/09 19:33:57 code coverage: enabled
2024/11/09 19:33:57 comparison tracing: enabled
2024/11/09 19:33:57 extra coverage: enabled
2024/11/09 19:33:57 setuid sandbox: enabled
2024/11/09 19:33:57 namespace sandbox: enabled
2024/11/09 19:33:57 Android sandbox: enabled
2024/11/09 19:33:57 fault injection: enabled
2024/11/09 19:33:57 leak checking: enabled
2024/11/09 19:33:57 net packet injection: enabled
2024/11/09 19:33:57 net device setup: enabled
2024/11/09 19:33:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/11/09 19:33:57 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/11/09 19:33:57 USB emulation: enabled
2024/11/09 19:33:57 hci packet injection: enabled
2024/11/09 19:33:57 wifi device emulation: enabled
2024/11/09 19:33:57 802.15.4 emulation: enabled
2024/11/09 19:33:58 fetching corpus: 50, signal 16997/18839 (executing program)
2024/11/09 19:33:58 fetching corpus: 100, signal 26055/29556 (executing program)
2024/11/09 19:33:58 fetching corpus: 150, signal 35887/40816 (executing program)
2024/11/09 19:33:58 fetching corpus: 200, signal 44963/51196 (executing program)
2024/11/09 19:33:58 fetching corpus: 250, signal 49815/57356 (executing program)
2024/11/09 19:33:59 fetching corpus: 300, signal 53831/62655 (executing program)
2024/11/09 19:33:59 fetching corpus: 350, signal 58729/68720 (executing program)
2024/11/09 19:33:59 fetching corpus: 400, signal 60796/72024 (executing program)
2024/11/09 19:33:59 fetching corpus: 450, signal 65539/77738 (executing program)
2024/11/09 19:33:59 fetching corpus: 500, signal 67709/81039 (executing program)
2024/11/09 19:33:59 fetching corpus: 550, signal 70175/84560 (executing program)
2024/11/09 19:34:00 fetching corpus: 600, signal 74153/89369 (executing program)
2024/11/09 19:34:00 fetching corpus: 650, signal 78780/94679 (executing program)
2024/11/09 19:34:01 fetching corpus: 700, signal 80268/97177 (executing program)
2024/11/09 19:34:01 fetching corpus: 750, signal 82941/100618 (executing program)
2024/11/09 19:34:01 fetching corpus: 800, signal 84308/102986 (executing program)
2024/11/09 19:34:02 fetching corpus: 850, signal 86379/105858 (executing program)
2024/11/09 19:34:02 fetching corpus: 900, signal 88446/108751 (executing program)
2024/11/09 19:34:02 fetching corpus: 950, signal 90546/111646 (executing program)
2024/11/09 19:34:03 fetching corpus: 1000, signal 91677/113645 (executing program)
2024/11/09 19:34:03 fetching corpus: 1050, signal 92894/115686 (executing program)
2024/11/09 19:34:03 fetching corpus: 1100, signal 94670/118119 (executing program)
2024/11/09 19:34:03 fetching corpus: 1150, signal 96125/120323 (executing program)
2024/11/09 19:34:04 fetching corpus: 1200, signal 98214/122956 (executing program)
2024/11/09 19:34:04 fetching corpus: 1250, signal 100262/125517 (executing program)
2024/11/09 19:34:04 fetching corpus: 1300, signal 101777/127641 (executing program)
2024/11/09 19:34:04 fetching corpus: 1350, signal 102831/129460 (executing program)
2024/11/09 19:34:04 fetching corpus: 1400, signal 104507/131661 (executing program)
2024/11/09 19:34:05 fetching corpus: 1450, signal 105943/133639 (executing program)
2024/11/09 19:34:05 fetching corpus: 1500, signal 107525/135723 (executing program)
2024/11/09 19:34:05 fetching corpus: 1550, signal 108887/137653 (executing program)
2024/11/09 19:34:05 fetching corpus: 1600, signal 110551/139745 (executing program)
2024/11/09 19:34:05 fetching corpus: 1650, signal 111307/141182 (executing program)
2024/11/09 19:34:06 fetching corpus: 1700, signal 111924/142504 (executing program)
2024/11/09 19:34:06 fetching corpus: 1750, signal 113046/144146 (executing program)
2024/11/09 19:34:06 fetching corpus: 1800, signal 114103/145727 (executing program)
2024/11/09 19:34:07 fetching corpus: 1850, signal 115088/147243 (executing program)
2024/11/09 19:34:07 fetching corpus: 1900, signal 115946/148657 (executing program)
2024/11/09 19:34:07 fetching corpus: 1950, signal 116639/149962 (executing program)
2024/11/09 19:34:07 fetching corpus: 2000, signal 117110/151084 (executing program)
2024/11/09 19:34:07 fetching corpus: 2050, signal 117752/152326 (executing program)
2024/11/09 19:34:08 fetching corpus: 2100, signal 118565/153634 (executing program)
2024/11/09 19:34:08 fetching corpus: 2150, signal 119638/155076 (executing program)
2024/11/09 19:34:08 fetching corpus: 2200, signal 120833/156587 (executing program)
2024/11/09 19:34:09 fetching corpus: 2250, signal 121813/157937 (executing program)
2024/11/09 19:34:09 fetching corpus: 2300, signal 122798/159241 (executing program)
2024/11/09 19:34:09 fetching corpus: 2350, signal 124282/160848 (executing program)
2024/11/09 19:34:10 fetching corpus: 2400, signal 125054/162014 (executing program)
2024/11/09 19:34:10 fetching corpus: 2450, signal 126284/163430 (executing program)
2024/11/09 19:34:10 fetching corpus: 2500, signal 127317/164698 (executing program)
2024/11/09 19:34:11 fetching corpus: 2550, signal 128492/166057 (executing program)
2024/11/09 19:34:11 fetching corpus: 2600, signal 129532/167343 (executing program)
2024/11/09 19:34:12 fetching corpus: 2650, signal 130387/168486 (executing program)
2024/11/09 19:34:12 fetching corpus: 2700, signal 131048/169475 (executing program)
2024/11/09 19:34:12 fetching corpus: 2750, signal 131695/170487 (executing program)
2024/11/09 19:34:12 fetching corpus: 2800, signal 132479/171549 (executing program)
2024/11/09 19:34:13 fetching corpus: 2850, signal 133187/172530 (executing program)
2024/11/09 19:34:13 fetching corpus: 2900, signal 133821/173504 (executing program)
2024/11/09 19:34:13 fetching corpus: 2950, signal 134487/174455 (executing program)
2024/11/09 19:34:14 fetching corpus: 3000, signal 135420/175487 (executing program)
2024/11/09 19:34:14 fetching corpus: 3050, signal 135808/176311 (executing program)
2024/11/09 19:34:14 fetching corpus: 3100, signal 136671/177301 (executing program)
2024/11/09 19:34:14 fetching corpus: 3150, signal 137349/178178 (executing program)
2024/11/09 19:34:14 fetching corpus: 3200, signal 137675/178946 (executing program)
2024/11/09 19:34:15 fetching corpus: 3250, signal 138263/179781 (executing program)
2024/11/09 19:34:15 fetching corpus: 3300, signal 138848/180615 (executing program)
2024/11/09 19:34:15 fetching corpus: 3350, signal 139510/181476 (executing program)
2024/11/09 19:34:16 fetching corpus: 3400, signal 139980/182298 (executing program)
2024/11/09 19:34:16 fetching corpus: 3450, signal 140497/183063 (executing program)
2024/11/09 19:34:16 fetching corpus: 3500, signal 141035/183873 (executing program)
2024/11/09 19:34:17 fetching corpus: 3550, signal 142227/184804 (executing program)
2024/11/09 19:34:17 fetching corpus: 3600, signal 142739/185588 (executing program)
2024/11/09 19:34:17 fetching corpus: 3650, signal 143240/186332 (executing program)
2024/11/09 19:34:18 fetching corpus: 3700, signal 143698/187067 (executing program)
2024/11/09 19:34:18 fetching corpus: 3750, signal 144093/187763 (executing program)
2024/11/09 19:34:18 fetching corpus: 3800, signal 144606/188493 (executing program)
2024/11/09 19:34:19 fetching corpus: 3850, signal 145039/189178 (executing program)
2024/11/09 19:34:19 fetching corpus: 3900, signal 145484/189775 (executing program)
2024/11/09 19:34:19 fetching corpus: 3950, signal 145982/190476 (executing program)
2024/11/09 19:34:19 fetching corpus: 4000, signal 146371/191125 (executing program)
2024/11/09 19:34:19 fetching corpus: 4050, signal 146785/191778 (executing program)
2024/11/09 19:34:20 fetching corpus: 4100, signal 147106/192411 (executing program)
2024/11/09 19:34:20 fetching corpus: 4150, signal 147464/193049 (executing program)
2024/11/09 19:34:20 fetching corpus: 4200, signal 148062/193708 (executing program)
2024/11/09 19:34:21 fetching corpus: 4250, signal 148414/194307 (executing program)
2024/11/09 19:34:21 fetching corpus: 4300, signal 149009/194945 (executing program)
2024/11/09 19:34:21 fetching corpus: 4350, signal 149847/195600 (executing program)
2024/11/09 19:34:21 fetching corpus: 4400, signal 150223/196159 (executing program)
2024/11/09 19:34:22 fetching corpus: 4450, signal 150601/196737 (executing program)
2024/11/09 19:34:22 fetching corpus: 4500, signal 150977/197293 (executing program)
2024/11/09 19:34:22 fetching corpus: 4550, signal 151424/197853 (executing program)
2024/11/09 19:34:22 fetching corpus: 4600, signal 151748/198384 (executing program)
2024/11/09 19:34:23 fetching corpus: 4650, signal 152419/198925 (executing program)
2024/11/09 19:34:23 fetching corpus: 4700, signal 152792/199448 (executing program)
2024/11/09 19:34:23 fetching corpus: 4750, signal 153412/199988 (executing program)
2024/11/09 19:34:23 fetching corpus: 4800, signal 153836/200470 (executing program)
2024/11/09 19:34:23 fetching corpus: 4850, signal 154194/200996 (executing program)
2024/11/09 19:34:23 fetching corpus: 4900, signal 154572/201498 (executing program)
2024/11/09 19:34:24 fetching corpus: 4950, signal 155044/201989 (executing program)
2024/11/09 19:34:24 fetching corpus: 5000, signal 155581/202478 (executing program)
2024/11/09 19:34:25 fetching corpus: 5050, signal 156045/202956 (executing program)
2024/11/09 19:34:25 fetching corpus: 5100, signal 156484/203219 (executing program)
2024/11/09 19:34:25 fetching corpus: 5150, signal 156786/203219 (executing program)
2024/11/09 19:34:26 fetching corpus: 5200, signal 157378/203219 (executing program)
2024/11/09 19:34:26 fetching corpus: 5250, signal 157692/203219 (executing program)
2024/11/09 19:34:26 fetching corpus: 5300, signal 158157/203223 (executing program)
2024/11/09 19:34:27 fetching corpus: 5350, signal 158550/203224 (executing program)
2024/11/09 19:34:27 fetching corpus: 5400, signal 158873/203224 (executing program)
2024/11/09 19:34:27 fetching corpus: 5450, signal 159355/203229 (executing program)
2024/11/09 19:34:27 fetching corpus: 5500, signal 159718/203229 (executing program)
2024/11/09 19:34:28 fetching corpus: 5550, signal 160031/203230 (executing program)
2024/11/09 19:34:28 fetching corpus: 5600, signal 160337/203230 (executing program)
2024/11/09 19:34:28 fetching corpus: 5650, signal 160852/203230 (executing program)
2024/11/09 19:34:28 fetching corpus: 5700, signal 161088/203230 (executing program)
2024/11/09 19:34:29 fetching corpus: 5750, signal 161535/203230 (executing program)
2024/11/09 19:34:29 fetching corpus: 5800, signal 162758/203230 (executing program)
2024/11/09 19:34:29 fetching corpus: 5850, signal 163079/203230 (executing program)
2024/11/09 19:34:30 fetching corpus: 5900, signal 163284/203230 (executing program)
2024/11/09 19:34:30 fetching corpus: 5950, signal 163615/203230 (executing program)
2024/11/09 19:34:30 fetching corpus: 6000, signal 163874/203230 (executing program)
2024/11/09 19:34:31 fetching corpus: 6050, signal 164251/203230 (executing program)
2024/11/09 19:34:31 fetching corpus: 6100, signal 164681/203230 (executing program)
2024/11/09 19:34:31 fetching corpus: 6150, signal 165034/203230 (executing program)
2024/11/09 19:34:32 fetching corpus: 6200, signal 165484/203230 (executing program)
2024/11/09 19:34:32 fetching corpus: 6250, signal 165902/203230 (executing program)
2024/11/09 19:34:32 fetching corpus: 6300, signal 166223/203230 (executing program)
2024/11/09 19:34:32 fetching corpus: 6350, signal 166509/203230 (executing program)
2024/11/09 19:34:32 fetching corpus: 6400, signal 166931/203230 (executing program)
2024/11/09 19:34:32 fetching corpus: 6450, signal 167314/203230 (executing program)
2024/11/09 19:34:33 fetching corpus: 6500, signal 167737/203230 (executing program)
2024/11/09 19:34:33 fetching corpus: 6550, signal 168039/203230 (executing program)
2024/11/09 19:34:33 fetching corpus: 6600, signal 168256/203230 (executing program)
2024/11/09 19:34:34 fetching corpus: 6650, signal 168552/203230 (executing program)
2024/11/09 19:34:34 fetching corpus: 6700, signal 168898/203230 (executing program)
2024/11/09 19:34:34 fetching corpus: 6750, signal 169190/203230 (executing program)
2024/11/09 19:34:34 fetching corpus: 6800, signal 169475/203230 (executing program)
2024/11/09 19:34:35 fetching corpus: 6850, signal 169746/203230 (executing program)
2024/11/09 19:34:35 fetching corpus: 6900, signal 170011/203230 (executing program)
2024/11/09 19:34:35 fetching corpus: 6950, signal 170293/203230 (executing program)
2024/11/09 19:34:35 fetching corpus: 7000, signal 170634/203235 (executing program)
2024/11/09 19:34:35 fetching corpus: 7050, signal 171023/203235 (executing program)
2024/11/09 19:34:36 fetching corpus: 7100, signal 171735/203235 (executing program)
2024/11/09 19:34:36 fetching corpus: 7150, signal 172010/203235 (executing program)
2024/11/09 19:34:36 fetching corpus: 7200, signal 172401/203235 (executing program)
2024/11/09 19:34:36 fetching corpus: 7250, signal 172598/203235 (executing program)
2024/11/09 19:34:37 fetching corpus: 7300, signal 173033/203235 (executing program)
2024/11/09 19:34:37 fetching corpus: 7350, signal 173403/203235 (executing program)
2024/11/09 19:34:37 fetching corpus: 7400, signal 173660/203238 (executing program)
2024/11/09 19:34:37 fetching corpus: 7450, signal 173903/203238 (executing program)
2024/11/09 19:34:37 fetching corpus: 7500, signal 174142/203238 (executing program)
2024/11/09 19:34:37 fetching corpus: 7550, signal 174341/203238 (executing program)
2024/11/09 19:34:37 fetching corpus: 7600, signal 174649/203238 (executing program)
2024/11/09 19:34:37 fetching corpus: 7650, signal 175033/203238 (executing program)
2024/11/09 19:34:38 fetching corpus: 7700, signal 175240/203238 (executing program)
2024/11/09 19:34:38 fetching corpus: 7750, signal 175448/203238 (executing program)
2024/11/09 19:34:38 fetching corpus: 7800, signal 175847/203238 (executing program)
2024/11/09 19:34:38 fetching corpus: 7850, signal 176140/203238 (executing program)
2024/11/09 19:34:38 fetching corpus: 7900, signal 176624/203238 (executing program)
2024/11/09 19:34:39 fetching corpus: 7950, signal 176873/203238 (executing program)
2024/11/09 19:34:39 fetching corpus: 8000, signal 177246/203238 (executing program)
2024/11/09 19:34:39 fetching corpus: 8050, signal 177470/203238 (executing program)
2024/11/09 19:34:39 fetching corpus: 8100, signal 177690/203238 (executing program)
2024/11/09 19:34:39 fetching corpus: 8150, signal 178173/203238 (executing program)
2024/11/09 19:34:39 fetching corpus: 8200, signal 178431/203238 (executing program)
2024/11/09 19:34:39 fetching corpus: 8250, signal 178680/203238 (executing program)
2024/11/09 19:34:40 fetching corpus: 8300, signal 178807/203238 (executing program)
2024/11/09 19:34:40 fetching corpus: 8350, signal 179073/203238 (executing program)
2024/11/09 19:34:40 fetching corpus: 8400, signal 179313/203238 (executing program)
2024/11/09 19:34:40 fetching corpus: 8450, signal 179542/203238 (executing program)
2024/11/09 19:34:40 fetching corpus: 8500, signal 179748/203238 (executing program)
2024/11/09 19:34:40 fetching corpus: 8550, signal 179959/203238 (executing program)
2024/11/09 19:34:40 fetching corpus: 8600, signal 180177/203238 (executing program)
2024/11/09 19:34:40 fetching corpus: 8650, signal 180493/203238 (executing program)
2024/11/09 19:34:41 fetching corpus: 8700, signal 180760/203238 (executing program)
2024/11/09 19:34:41 fetching corpus: 8750, signal 181005/203238 (executing program)
2024/11/09 19:34:41 fetching corpus: 8800, signal 181283/203238 (executing program)
2024/11/09 19:34:42 fetching corpus: 8850, signal 181447/203238 (executing program)
2024/11/09 19:34:42 fetching corpus: 8900, signal 181655/203238 (executing program)
2024/11/09 19:34:42 fetching corpus: 8950, signal 182049/203238 (executing program)
2024/11/09 19:34:43 fetching corpus: 9000, signal 182355/203238 (executing program)
2024/11/09 19:34:43 fetching corpus: 9050, signal 182548/203238 (executing program)
2024/11/09 19:34:43 fetching corpus: 9100, signal 182860/203238 (executing program)
2024/11/09 19:34:44 fetching corpus: 9150, signal 183062/203238 (executing program)
2024/11/09 19:34:44 fetching corpus: 9200, signal 183212/203238 (executing program)
2024/11/09 19:34:45 fetching corpus: 9250, signal 183436/203239 (executing program)
2024/11/09 19:34:45 fetching corpus: 9300, signal 183652/203239 (executing program)
2024/11/09 19:34:46 fetching corpus: 9350, signal 183857/203239 (executing program)
2024/11/09 19:34:46 fetching corpus: 9400, signal 184082/203239 (executing program)
2024/11/09 19:34:46 fetching corpus: 9450, signal 184332/203239 (executing program)
2024/11/09 19:34:47 fetching corpus: 9500, signal 184538/203239 (executing program)
2024/11/09 19:34:47 fetching corpus: 9550, signal 184734/203239 (executing program)
2024/11/09 19:34:47 fetching corpus: 9600, signal 185116/203239 (executing program)
2024/11/09 19:34:48 fetching corpus: 9650, signal 185328/203239 (executing program)
2024/11/09 19:34:48 fetching corpus: 9700, signal 185520/203239 (executing program)
2024/11/09 19:34:48 fetching corpus: 9750, signal 185694/203239 (executing program)
2024/11/09 19:34:49 fetching corpus: 9800, signal 185914/203239 (executing program)
2024/11/09 19:34:49 fetching corpus: 9850, signal 186123/203239 (executing program)
2024/11/09 19:34:49 fetching corpus: 9900, signal 186338/203239 (executing program)
2024/11/09 19:34:50 fetching corpus: 9950, signal 186628/203239 (executing program)
2024/11/09 19:34:50 fetching corpus: 10000, signal 186883/203239 (executing program)
2024/11/09 19:34:50 fetching corpus: 10050, signal 187127/203239 (executing program)
2024/11/09 19:34:51 fetching corpus: 10100, signal 187467/203239 (executing program)
2024/11/09 19:34:51 fetching corpus: 10150, signal 187713/203239 (executing program)
2024/11/09 19:34:51 fetching corpus: 10200, signal 187918/203239 (executing program)
2024/11/09 19:34:52 fetching corpus: 10250, signal 188252/203243 (executing program)
2024/11/09 19:34:52 fetching corpus: 10300, signal 188464/203243 (executing program)
2024/11/09 19:34:52 fetching corpus: 10350, signal 188606/203243 (executing program)
2024/11/09 19:34:53 fetching corpus: 10400, signal 188813/203243 (executing program)
2024/11/09 19:34:53 fetching corpus: 10450, signal 189045/203243 (executing program)
2024/11/09 19:34:53 fetching corpus: 10500, signal 189211/203243 (executing program)
2024/11/09 19:34:54 fetching corpus: 10550, signal 189462/203243 (executing program)
2024/11/09 19:34:54 fetching corpus: 10600, signal 189651/203243 (executing program)
2024/11/09 19:34:54 fetching corpus: 10650, signal 189803/203243 (executing program)
2024/11/09 19:34:54 fetching corpus: 10700, signal 189968/203243 (executing program)
2024/11/09 19:34:55 fetching corpus: 10750, signal 190174/203243 (executing program)
2024/11/09 19:34:55 fetching corpus: 10800, signal 190329/203243 (executing program)
2024/11/09 19:34:55 fetching corpus: 10850, signal 190526/203243 (executing program)
2024/11/09 19:34:55 fetching corpus: 10900, signal 190717/203243 (executing program)
2024/11/09 19:34:56 fetching corpus: 10930, signal 190964/203243 (executing program)
2024/11/09 19:34:56 fetching corpus: 10930, signal 190964/203243 (executing program)
2024/11/09 19:34:59 starting 8 fuzzer processes
19:34:59 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x90010000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x64}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5f}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x72}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x71413512, 0x71}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffbff}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4004001)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x94, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x5e, 0xc5, "6482823481010f6d4889953e27a4899c3faf52690755b1dce8d365feb2e4ea7fff5d7adc238da5b559bb5db7c5567ac0422c8d059bcd2b37bf013bfec6636bb07cb6d88d920c81a5ee35d82a63dea906e41cadf5b70cc23d8a14"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x64)
r4 = accept(r1, 0x0, &(0x7f0000000700))
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x21}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x7, 0xac, "d7b69b"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2f5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000014}, 0x20048091)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0xb}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000)
sendmsg$AUDIT_GET(r1, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x10, 0x3e8, 0x8, 0x70bd2a, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0x48000)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, <r5=>r1, {0x5}}, './file0\x00'})
r6 = dup(r1)
renameat2(r5, &(0x7f0000000b00)='./file0\x00', r6, &(0x7f0000000b40)='./file0\x00', 0x4)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000b80)={{0x1, 0x1, 0x18, <r7=>r6}, './file1\x00'})
sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}]}, 0x50}}, 0x40080)
sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xac, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000080}, 0x4005)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000001140)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x58, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x43}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000800)

19:34:59 executing program 1:
clock_gettime(0x0, &(0x7f0000000000))
mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="5de6105bce0821f7a0c0408c51730c4be7de4d927d2f2285bca9ee949061ced9860d577f2d014d07dc1a3715b272efc811d5bbe786ee4d0918dd4fd65b0c5f37c8284be41e79", 0x46, 0x4, 0x0)
r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="1300c2633cff6eca3df6daedd17b0736d879a75a3bbd55642b7c06fdfdbfc55d1f0874ae1d32acbbe2a3ae77103885a064b1b58dc80738a02fff1c622781dbd93143d2687ae2e55cbb6f32d4343f12c17373085739ed12a0f66e97e2e325158b7b33301e06c4c00b0722007cc5020988a45b004566b775b78f34ace870b6d797de1da807ec58d54df17ef71741e20c624bf3ed9d6e52d55e1b42916ebb2c4d987239459d802070abafaaad2e5333d0f7a2c04dce0c091768f13960606bc72f3aadff91fd78364cd82de425", 0xcb}], 0x900400, &(0x7f0000000280)={[{@fat=@flush}, {@fat=@gid}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@uid_gt={'uid>', 0xee01}}, {@dont_appraise}, {@dont_hash}, {@seclabel}, {@appraise_type}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}, {@subj_role={'subj_role', 0x3d, '$(/,'}}]})
r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6156)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={<r2=>r1, 0x1, 0xa, 0x1})
r3 = syz_mount_image$msdos(&(0x7f0000000380), &(0x7f00000003c0)='./file0/file0\x00', 0x6, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="825e059f2cb5e56196b68bf8f73578bdf0c4ce6365aa09d9d3fdd4dadbc2472ac124d88f9edacc2f60bc2407920787af0307cc9f65b61583e8b396097688866dfc2510670b86ac0c453785a9a7cb82cebbc464368b481038d9bd6f3c3ccddc270b568df278e3b1c2305074f17be39722502de3a570d76efb86a88aa7f0f8406ca87e46e0fcd5a3c1533da5ad9a786827516d8d34d8e287f3c892f457e4819d80a1c39b3b55aef7067bd35ad1c8fc06ff2ea49b31b9d89ae46dbf", 0xba, 0x5}], 0x220410, &(0x7f0000000500)={[{@fat=@sys_immutable}, {@fat=@dmask={'dmask', 0x3d, 0x400}}, {@nodots}, {@nodots}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', 0xee01}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@appraise_type}, {@euid_gt={'euid>', 0xee00}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, '$(/,'}}]})
preadv2(r2, &(0x7f0000000680)=[{&(0x7f0000000600)=""/101, 0x65}], 0x1, 0x8, 0x5, 0x1d)
r4 = openat2(r3, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x84002, 0x50, 0x8}, 0x18)
write$tcp_congestion(r4, &(0x7f0000000740)='reno\x00', 0x5)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x10000, 0x0)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000007c0), 0x200000, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000800)={0x0, r6, 0x1f, 0x7, 0x4, 0x7fff})
clock_settime(0x4, &(0x7f0000000840))
clock_gettime(0x0, &(0x7f0000000980)={<r7=>0x0, <r8=>0x0})
mq_timedsend(r2, &(0x7f0000000880)="f6d165e900c5e2b24c5ff84f1392a836decbfbd536327aa2ca07704656598fe0dc1679b43865fc3e7927a70504c6769af7e4ba8023a845dde6e55765f0bc483c398d964d1d90212eb85e9318cccebed424067302298629a37db37f46458d9d42ec7a9281fbcdbcf7f10ede131ee190524a8de9c7eecc2cbffdb6a7e4fa4dc7063e486508b980cda8766dbbec3c817e135befbde7db02b726c4d1ba74fadd588bc04cce9598b5e7ff48f5f99eecf799fc585e929e17969e0920acab07ca664ab4168a172899ddae072ff23e057cf5f0eaa87694ee9a005b", 0xd7, 0x1fffc000, &(0x7f00000009c0)={r7, r8+10000000})
r9 = syz_open_dev$vcsn(&(0x7f0000000b80), 0x84, 0x315400)
recvmmsg$unix(r9, &(0x7f0000001b80)=[{{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/209, 0xd1}], 0x1, &(0x7f0000000d80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/26, 0x1a}], 0x1, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000f40)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000fc0)=""/184, 0xb8}, {&(0x7f0000001080)=""/238, 0xee}], 0x2, &(0x7f00000011c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001240), 0x6e, &(0x7f0000001640)=[{&(0x7f00000012c0)=""/120, 0x78}, {&(0x7f0000001340)=""/158, 0x9e}, {&(0x7f0000001400)=""/54, 0x36}, {&(0x7f0000001440)=""/157, 0x9d}, {&(0x7f0000001500)=""/239, 0xef}, {&(0x7f0000001600)}], 0x6, &(0x7f00000016c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001740)=""/14, 0xe}], 0x1, &(0x7f00000017c0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r13=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000001840), 0x6e, &(0x7f0000001a00)=[{&(0x7f00000018c0)=""/187, 0xbb}, {&(0x7f0000001980)=""/92, 0x5c}], 0x2, &(0x7f0000001a40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}], 0x6, 0x40002000, 0x0)
close_range(r13, r10, 0x2)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r12, 0x5000943f, &(0x7f0000001d00)={{r11}, 0x0, 0x6, @unused=[0x2, 0x3, 0xfffffffffffffc00, 0x8000], @devid})
setxattr$trusted_overlay_nlink(&(0x7f0000002d00)='./file0/file0\x00', &(0x7f0000002d40), &(0x7f0000002d80)={'U-', 0x8}, 0x16, 0x3)

19:34:59 executing program 2:
munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
r0 = shmget(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x1000)
r1 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil)
shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x3000)
shmget(0x3, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x6}}, './file0\x00'})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000010c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/93, 0x5d, 0x1, &(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f0000001100)=0x40)
r3 = shmget(0x3, 0x2000, 0x70dea2975e30df7e, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_LOCK(r3, 0xb)
stat(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180))
r4 = dup(r2)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x10010, r4, 0x6599a000)
r5 = dup(r2)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000001200)='@![U\x00', &(0x7f0000001240)='.\x00', r2)
fcntl$getownex(r2, 0x10, &(0x7f0000001280))
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x7)
fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f00000012c0)=0x2)
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001300)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
fcntl$lock(r7, 0x25, &(0x7f0000001380)={0x0, 0x3, 0x5, 0x1ff})

19:34:59 executing program 3:
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4005}, 0x4048080)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x110, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xdfc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4001}, 0x4004840)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1f}}, './file0\x00'})
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb0, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xaf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0xa9a1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1a}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24000004)
r1 = syz_open_dev$vcsu(&(0x7f0000000640), 0x5, 0x420000)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0xb20, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r2 = eventfd(0x8)
fadvise64(r2, 0xce, 0x3, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f00000009c0)=0xe8)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000d00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x298, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x27c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x7, 0xff, 0x10000}, {0x2, 0x6, 0xd, 0x78c}, {0x2, 0x80, 0x8, 0x40}, {0x4, 0x9, 0x5, 0x5}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x49}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x5, 0x5, 0xfffffff9}, {0x8, 0x1, 0x98, 0x3}, {0x2, 0x80, 0x6f, 0x7}]}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x48041}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, 0x0, 0x201, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7f}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x20, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x68}}}}, ["", "", "", "", "", ""]}, 0x20}}, 0x20000000)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f80), r1)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0xb4, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x80, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffc0}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x25}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001140)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x7c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x2}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000804}, 0xc841)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000014c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x880000}, 0xc, &(0x7f0000001480)={&(0x7f00000012c0)={0x1b0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5ed5}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "58aa247be639207974c0e796e1830a21e23f23a69753153933db28"}}, @TIPC_NLA_NODE_ID={0xc6, 0x3, "c0d91db9ba6483098ae22350f01c9440fd07153b64fa547ea060c7e0d028a1141c4057984ff4022152f63dff424d91962109d608bf9c7f440c632ba4d2573fca01bf9be97c6b184fc170cfef417fab4169007a1f72f92e7afee2c49283111674fa9f3ac450eda24557f9c583b1314d8b3c2acca5f8abeae86ecfba52d3ad03e0c2892355d7dd3387f1c94f329100ec6b977871af5fb1f19fc16b9301bad6103d6fdf341c47df6a98adbd26cb4471206888a299dd5876e939395581d4716e98b51da1"}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000041}, 0x4c844)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x1010, r0, 0x0)
syz_io_uring_submit(r6, 0x0, &(0x7f0000001580)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540), 0x1, 0x1}, 0x6bd)

[  142.282292] audit: type=1400 audit(1731180899.324:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
19:34:59 executing program 4:
r0 = syz_io_uring_complete(0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4)
ftruncate(r0, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000140))
fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1)
open(&(0x7f00000001c0)='./file0\x00', 0x149000, 0x40)
r2 = syz_open_dev$vcsa(&(0x7f0000000200), 0xffffffffffffffff, 0x8040)
connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14)
r3 = syz_open_dev$vcsn(&(0x7f0000000280), 0xff, 0x1b3000)
ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f00000002c0))
r4 = creat(&(0x7f0000000300)='./file0\x00', 0x10e)
fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
connect(r0, &(0x7f0000000400)=@in={0x2, 0x4e21, @multicast1}, 0x80)
r5 = fsmount(r4, 0x1, 0xf5)
r6 = pidfd_getfd(r5, r4, 0x0)
fsetxattr$security_capability(r6, &(0x7f0000000480), &(0x7f00000004c0)=@v3={0x3000000, [{0x5, 0x9}, {0xdb9, 0xb9c9}], 0xffffffffffffffff}, 0x18, 0x2)
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
pidfd_getfd(r5, r7, 0x0)

19:34:59 executing program 5:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
r2 = dup2(r1, r0)
fadvise64(r0, 0x92, 0x3ff, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x2, 0x2, 0x3, 0x0, 0xd, "f0c1713d27bce4d6"})
r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4b6b02, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'})
r5 = openat(r3, &(0x7f0000000140)='./file0/file0\x00', 0x20400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x80000}}, './file0\x00'})
r7 = pidfd_open(0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r8=>r7, {0xfe1}}, './file0\x00'})
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r1, 0xff, 0xfffffffffffffffb, 0x7, 0x8})
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0xac0b)
r10 = accept4$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x800)
clone3(&(0x7f00000005c0)={0x400, &(0x7f00000002c0)=<r11=>0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340), {0x27}, &(0x7f0000000380)=""/247, 0xf7, &(0x7f0000000480)=""/215, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x9, {r6}}, 0x58)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000640)=[r6, r2, r8, r9, r10, r11], 0x6)
waitid$P_PIDFD(0x3, r5, &(0x7f0000000680), 0x2, &(0x7f0000000700))
ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000840))

19:34:59 executing program 7:
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x20000051)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x618}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8001}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4800)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x8090)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'sit0\x00', <r3=>0x0, 0x4, 0x1, 0x7, 0x800, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7, 0x40, 0x2, 0x4}})
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xcc, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x48084}, 0x4000804)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000006c0)={@ipv4={""/10, ""/2, @loopback}, <r4=>0x0}, &(0x7f0000000700)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'ip6tnl0\x00', <r5=>r3, 0x29, 0x6f, 0x5, 0x8, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x1, 0x20, 0x2bb, 0x10}})
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x40)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004001}, 0x44000)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000a00), &(0x7f0000000a40)=0x4)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4)
pipe(&(0x7f0000000b00)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r0, 0x71e3fff2f3bec4f, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r7)
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000e40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x540d8400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x118, r8, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x71}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8a91ed4eb73f16688a8f6a44336491ac8bc9e4df4b91f8ef"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "94e514f90ac6ac77f5d1fb31832c6a0561c2724df36f8ef1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fb3ef5f92a64d6935d57c77176332165a0b390ea1391e6e6"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f605d3c33c8f3b804bf8edfca3862763e083db48f656efb2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1ac453080655cfe6d3ede82de4947897fc05bb837bf18b60"}]]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x60, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x68}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40000)

19:34:59 executing program 6:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e21, 0x81, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}, 0x0, 0x0, 0x1e, 0x0, "dff6c59142344553bbea5a61d8ecf4bc555ff4ca8cd69c2d97c464075077f0c1f76357a4007bc53900f68bc5fab1ba4024be19c0397212e71fc14fadc837203478e2ecb089dc64bae16e72a6a2d489df"}, 0xd8)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffc, @local, 0x3ff}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000140), 0x0, 0x4010)
fcntl$getownex(r0, 0x10, &(0x7f0000000180))
write$binfmt_aout(r0, &(0x7f00000001c0)={{0x10b, 0x2, 0x2, 0x38, 0x245, 0x1, 0x1e7, 0x40}, "8a639d0d9e2bfd2e8b874e5e6096bbbaf83511a441a4ac182daca61d6e5b14718bd11ed91b25b21d6ec5b358bc25d6a340ae934ea5300358991f6bc41eb3d9ee9c8a4cd9360594e216739ae656aa594cbbede8d98635af87a3a187bf4c75888bec2331b621e6d385c0c1fd1f967239e9e520ee", ['\x00', '\x00', '\x00']}, 0x393)
flock(r0, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000005c0)=0x1, 0x4)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)=<r3=>0x0)
mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x1210848, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '\x00'}}, {@version_u}, {@mmap}, {@access_user}, {@cachetag={'cachetag', 0x3d, ':'}}, {@cache_fscache}, {@nodevmap}], [{@uid_lt={'uid<', r3}}, {@measure}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '\\[@'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}})
recvmmsg$unix(r1, &(0x7f0000003c80)=[{{&(0x7f0000000880)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/154, 0x9a}], 0x1, &(0x7f0000000a00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/161, 0xa1}, {&(0x7f0000000b80)=""/171, 0xab}], 0x2, &(0x7f0000000c80)}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000003080)=[{&(0x7f0000000d40)=""/121, 0x79}, {&(0x7f0000000dc0)=""/158, 0x9e}, {&(0x7f0000000e80)=""/50, 0x32}, {&(0x7f0000000ec0)=""/19, 0x13}, {&(0x7f0000000f00)=""/92, 0x5c}, {&(0x7f0000000f80)=""/87, 0x57}, {&(0x7f0000001000)=""/71, 0x47}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x9, &(0x7f0000003140)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000003180), 0x6e, &(0x7f0000003880)=[{&(0x7f0000003200)=""/116, 0x74}, {&(0x7f0000003280)=""/150, 0x96}, {&(0x7f0000003340)=""/179, 0xb3}, {&(0x7f0000003400)=""/225, 0xe1}, {&(0x7f0000003500)=""/118, 0x76}, {&(0x7f0000003580)=""/120, 0x78}, {&(0x7f0000003600)=""/183, 0xb7}, {&(0x7f00000036c0)=""/138, 0x8a}, {&(0x7f0000003780)=""/255, 0xff}], 0x9, &(0x7f0000003940)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a80)=""/251, 0xfb}, {&(0x7f0000003b80)}], 0x2, &(0x7f0000003c00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x5, 0x40, &(0x7f0000003dc0)={0x0, 0x989680})
fcntl$getownex(r6, 0x10, &(0x7f0000003e00)={0x0, <r8=>0x0})
ioctl$CDROMSUBCHNL(r4, 0x530b, &(0x7f0000003e40)={0x2, 0x81, 0xa, 0xa, 0x5, 0x2, @msf={0x3f, 0x6}, @msf={0x1, 0x3c, 0x5}})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
kcmp(r8, r5, 0x0, r9, r7)
ftruncate(0xffffffffffffffff, 0x0)

[  143.600524] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  143.603315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  143.606740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  143.611915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  143.624982] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  143.630411] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  143.633025] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  143.634205] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  143.635918] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  143.666685] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  143.668299] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  143.687765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  143.703231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.704773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.714403] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.726282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.732408] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  143.735925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.759258] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  143.763531] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  143.768729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  143.778887] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  143.781264] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  143.786875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  143.820334] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  143.828047] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  143.842967] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  143.845988] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  143.850688] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  143.858779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  143.862225] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  143.863841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  143.873684] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  143.874954] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  143.875497] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  143.880236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  143.885526] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  143.887079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  143.887857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  143.890794] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  143.898814] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  143.900199] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  143.904257] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  143.905541] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  143.911000] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  143.942913] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  143.947464] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  143.949088] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  145.729737] Bluetooth: hci1: command tx timeout
[  145.731822] Bluetooth: hci0: command tx timeout
[  145.793617] Bluetooth: hci2: command tx timeout
[  145.856700] Bluetooth: hci3: command tx timeout
[  145.921674] Bluetooth: hci4: command tx timeout
[  145.984780] Bluetooth: hci7: command tx timeout
[  145.985470] Bluetooth: hci5: command tx timeout
[  146.048650] Bluetooth: hci6: command tx timeout
[  147.778709] Bluetooth: hci1: command tx timeout
[  147.779251] Bluetooth: hci0: command tx timeout
[  147.841937] Bluetooth: hci2: command tx timeout
[  147.906629] Bluetooth: hci3: command tx timeout
[  147.968748] Bluetooth: hci4: command tx timeout
[  148.033700] Bluetooth: hci5: command tx timeout
[  148.034181] Bluetooth: hci7: command tx timeout
[  148.097642] Bluetooth: hci6: command tx timeout
[  149.824706] Bluetooth: hci0: command tx timeout
[  149.825240] Bluetooth: hci1: command tx timeout
[  149.888630] Bluetooth: hci2: command tx timeout
[  149.952794] Bluetooth: hci3: command tx timeout
[  150.016826] Bluetooth: hci4: command tx timeout
[  150.081395] Bluetooth: hci5: command tx timeout
[  150.081966] Bluetooth: hci7: command tx timeout
[  150.147622] Bluetooth: hci6: command tx timeout
[  151.874641] Bluetooth: hci1: command tx timeout
[  151.875194] Bluetooth: hci0: command tx timeout
[  151.936640] Bluetooth: hci2: command tx timeout
[  152.001721] Bluetooth: hci3: command tx timeout
[  152.065764] Bluetooth: hci4: command tx timeout
[  152.129826] Bluetooth: hci7: command tx timeout
[  152.131295] Bluetooth: hci5: command tx timeout
[  152.192632] Bluetooth: hci6: command tx timeout
[  206.557325] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  206.562700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  206.563989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  206.572728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  206.576048] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  206.577265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  206.608036] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  206.613860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  206.615709] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  206.616990] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  206.618420] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  206.621307] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  206.622913] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  206.632913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  206.634384] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  206.635597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  206.640716] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  206.647878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  206.745228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  206.750419] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  206.752928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  206.753428] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  206.755438] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  206.758807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  206.760668] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  206.761001] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  206.762299] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  206.765850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  206.767719] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  206.768998] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  206.770770] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  206.774977] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  206.779073] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  206.787864] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  206.790036] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  206.796840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  206.799218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  206.800123] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  206.805266] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  206.808815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  206.820730] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  206.822923] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  206.855455] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  206.864130] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  206.872756] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  206.875455] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  206.941132] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  206.945364] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  208.640719] Bluetooth: hci0: command tx timeout
[  208.704731] Bluetooth: hci1: command tx timeout
[  208.704757] Bluetooth: hci2: command tx timeout
[  208.833314] Bluetooth: hci6: command tx timeout
[  208.833453] Bluetooth: hci3: command tx timeout
[  208.898302] Bluetooth: hci7: command tx timeout
[  208.960730] Bluetooth: hci4: command tx timeout
[  209.088674] Bluetooth: hci5: command tx timeout
[  210.688799] Bluetooth: hci0: command tx timeout
[  210.752683] Bluetooth: hci1: command tx timeout
[  210.754077] Bluetooth: hci2: command tx timeout
[  210.880812] Bluetooth: hci6: command tx timeout
[  210.882142] Bluetooth: hci3: command tx timeout
[  210.944636] Bluetooth: hci7: command tx timeout
[  211.008645] Bluetooth: hci4: command tx timeout
[  211.136748] Bluetooth: hci5: command tx timeout
[  212.736719] Bluetooth: hci0: command tx timeout
[  212.800657] Bluetooth: hci2: command tx timeout
[  212.800685] Bluetooth: hci1: command tx timeout
[  212.930338] Bluetooth: hci3: command tx timeout
[  212.930653] Bluetooth: hci6: command tx timeout
[  212.992683] Bluetooth: hci7: command tx timeout
[  213.056875] Bluetooth: hci4: command tx timeout
[  213.184664] Bluetooth: hci5: command tx timeout
[  214.784752] Bluetooth: hci0: command tx timeout
[  214.848731] Bluetooth: hci2: command tx timeout
[  214.849822] Bluetooth: hci1: command tx timeout
[  214.976646] Bluetooth: hci6: command tx timeout
[  214.977676] Bluetooth: hci3: command tx timeout
[  215.040658] Bluetooth: hci7: command tx timeout
[  215.104853] Bluetooth: hci4: command tx timeout
[  215.232791] Bluetooth: hci5: command tx timeout
[  269.017119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  269.026828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  269.029838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  269.040877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  269.043358] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  269.046081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  269.196188] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  269.198669] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  269.200255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  269.211353] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  269.212991] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  269.218064] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  269.333083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  269.338763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  269.340030] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  269.342719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  269.347747] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  269.350741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  269.416471] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  269.424300] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  269.425901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  269.427306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  269.435273] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  269.436240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  269.437909] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  269.439279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  269.440746] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  269.444293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  269.446833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  269.449086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  269.458970] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  269.460747] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  269.461970] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  269.470940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  269.475211] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  269.476767] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  269.482989] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  269.506176] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  269.507859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  269.509736] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  269.510721] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  269.512874] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  269.551762] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  269.552523] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  269.557800] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  269.557961] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  269.559833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  269.560887] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  271.107632] Bluetooth: hci0: command tx timeout
[  271.233823] Bluetooth: hci1: command tx timeout
[  271.425658] Bluetooth: hci2: command tx timeout
[  271.488705] Bluetooth: hci4: command tx timeout
[  271.552683] Bluetooth: hci5: command tx timeout
[  271.553692] Bluetooth: hci3: command tx timeout
[  271.616638] Bluetooth: hci7: command tx timeout
[  272.128752] Bluetooth: hci6: command tx timeout
[  273.152648] Bluetooth: hci0: command tx timeout
[  273.282643] Bluetooth: hci1: command tx timeout
[  273.472632] Bluetooth: hci2: command tx timeout
[  273.536812] Bluetooth: hci4: command tx timeout
[  273.600681] Bluetooth: hci3: command tx timeout
[  273.600762] Bluetooth: hci5: command tx timeout
[  273.664675] Bluetooth: hci7: command tx timeout
[  274.177839] Bluetooth: hci6: command tx timeout
[  275.200961] Bluetooth: hci0: command tx timeout
[  275.329834] Bluetooth: hci1: command tx timeout
[  275.521702] Bluetooth: hci2: command tx timeout
[  275.585674] Bluetooth: hci4: command tx timeout
[  275.649623] Bluetooth: hci5: command tx timeout
[  275.650140] Bluetooth: hci3: command tx timeout
[  275.714682] Bluetooth: hci7: command tx timeout
[  276.225630] Bluetooth: hci6: command tx timeout
[  277.248865] Bluetooth: hci0: command tx timeout
[  277.377006] Bluetooth: hci1: command tx timeout
[  277.568634] Bluetooth: hci2: command tx timeout
[  277.634648] Bluetooth: hci4: command tx timeout
[  277.696620] Bluetooth: hci5: command tx timeout
[  277.697766] Bluetooth: hci3: command tx timeout
[  277.760668] Bluetooth: hci7: command tx timeout
[  278.272792] Bluetooth: hci6: command tx timeout
[  331.605687] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  331.607247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  331.642328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  331.665359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  331.671991] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  331.673380] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  331.865122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  331.871806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  331.873254] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  331.877480] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  331.879756] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  331.880895] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  331.923303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  331.925312] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  331.927069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  331.930606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  331.932841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  331.934102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  332.021551] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  332.030808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  332.039197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  332.046302] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  332.049801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  332.053928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  332.056162] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  332.057436] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  332.058480] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  332.060268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  332.067446] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  332.069720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  332.071739] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  332.073970] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  332.085649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  332.086738] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  332.091070] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  332.093390] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  332.095564] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  332.111296] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  332.112762] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  332.117743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  332.119246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  332.125142] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  332.128112] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  332.129321] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  332.134903] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  332.136607] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  332.138072] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  332.140564] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  333.760657] Bluetooth: hci0: command tx timeout
[  333.954600] Bluetooth: hci1: command tx timeout
[  334.016690] Bluetooth: hci2: command tx timeout
[  334.144643] Bluetooth: hci4: command tx timeout
[  334.209318] Bluetooth: hci3: command tx timeout
[  334.210936] Bluetooth: hci7: command tx timeout
[  334.212172] Bluetooth: hci5: command tx timeout
[  334.272598] Bluetooth: hci6: command tx timeout
[  335.808600] Bluetooth: hci0: command tx timeout
[  336.003563] Bluetooth: hci1: command tx timeout
[  336.066567] Bluetooth: hci2: command tx timeout
[  336.193919] Bluetooth: hci4: command tx timeout
[  336.257878] Bluetooth: hci7: command tx timeout
[  336.259420] Bluetooth: hci5: command tx timeout
[  336.261161] Bluetooth: hci3: command tx timeout
[  336.320608] Bluetooth: hci6: command tx timeout
[  337.856656] Bluetooth: hci0: command tx timeout
[  338.049745] Bluetooth: hci1: command tx timeout
[  338.115602] Bluetooth: hci2: command tx timeout
[  338.243575] Bluetooth: hci4: command tx timeout
[  338.304618] Bluetooth: hci3: command tx timeout
[  338.305136] Bluetooth: hci7: command tx timeout
[  338.305641] Bluetooth: hci5: command tx timeout
[  338.368581] Bluetooth: hci6: command tx timeout
[  339.905826] Bluetooth: hci0: command tx timeout
[  340.096682] Bluetooth: hci1: command tx timeout
[  340.161600] Bluetooth: hci2: command tx timeout
[  340.289658] Bluetooth: hci4: command tx timeout
[  340.353457] Bluetooth: hci5: command tx timeout
[  340.355656] Bluetooth: hci7: command tx timeout
[  340.357028] Bluetooth: hci3: command tx timeout
[  340.417593] Bluetooth: hci6: command tx timeout
[  394.292446] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  394.322040] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  394.350751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  394.363422] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  394.368197] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  394.370109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  394.527915] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  394.530407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  394.532017] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  394.533128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  394.534294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  394.534633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  394.536901] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  394.538014] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  394.538311] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  394.541149] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  394.542034] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  394.543186] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  394.552147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  394.554188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  394.555552] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  394.557120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  394.557414] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  394.562257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  394.585824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  394.590116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  394.591893] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  394.593256] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  394.603224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  394.615050] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  394.618834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  394.620983] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  394.626331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  394.637871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  394.644764] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  394.650402] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  394.650445] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  394.652675] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  394.655309] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  394.658719] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  394.664167] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  394.665391] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  394.666659] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  394.669024] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  394.670776] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  394.671801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  394.704208] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  394.705955] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  396.417717] Bluetooth: hci0: command tx timeout
[  396.609580] Bluetooth: hci1: command tx timeout
[  396.610560] Bluetooth: hci3: command tx timeout
[  396.672598] Bluetooth: hci2: command tx timeout
[  396.736661] Bluetooth: hci5: command tx timeout
[  396.737723] Bluetooth: hci4: command tx timeout
[  396.737811] Bluetooth: hci6: command tx timeout
[  396.800631] Bluetooth: hci7: command tx timeout
[  398.466551] Bluetooth: hci0: command tx timeout
[  398.656699] Bluetooth: hci1: command tx timeout
[  398.656920] Bluetooth: hci3: command tx timeout
[  398.720652] Bluetooth: hci2: command tx timeout
[  398.784789] Bluetooth: hci6: command tx timeout
[  398.784816] Bluetooth: hci5: command tx timeout
[  398.785295] Bluetooth: hci4: command tx timeout
[  398.851547] Bluetooth: hci7: command tx timeout
[  400.515673] Bluetooth: hci0: command tx timeout
[  400.704625] Bluetooth: hci1: command tx timeout
[  400.705797] Bluetooth: hci3: command tx timeout
[  400.768567] Bluetooth: hci2: command tx timeout
[  400.832646] Bluetooth: hci4: command tx timeout
[  400.834598] Bluetooth: hci5: command tx timeout
[  400.834622] Bluetooth: hci6: command tx timeout
[  400.896710] Bluetooth: hci7: command tx timeout
[  402.561595] Bluetooth: hci0: command tx timeout
[  402.753734] Bluetooth: hci3: command tx timeout
[  402.753750] Bluetooth: hci1: command tx timeout
[  402.816593] Bluetooth: hci2: command tx timeout
[  402.880616] Bluetooth: hci4: command tx timeout
[  402.881140] Bluetooth: hci5: command tx timeout
[  402.881697] Bluetooth: hci6: command tx timeout
[  402.945656] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
19:40:00  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=000000000000000a RCX=ffffffff816a3ce4 RDX=ffff88803d905280
RSI=ffffffff816a3cf1 RDI=0000000000000005 RBP=ffffea0000224b74 RSP=ffff88803f827b08
R8 =0000000000000001 R9 =fffff9400004496e R10=000000000000000a R11=0000000000000001
R12=000000000000000a R13=000000000000000a R14=0000000000000000 R15=ffff88803f827d98
RIP=ffffffff8151d958 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f27819d1540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2781be459e CR3=00000000136c4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff8683fb12 RBX=0000000000000001 RCX=ffffffff8683fb12 RDX=0000000000000000
RSI=ffffffff8683faee RDI=ffffffff864c898c RBP=ffff8880311a7830 RSP=ffff8880311a7768
R8 =ffffffff8683faee R9 =ffff8880311a7818 R10=000000000003c001 R11=0000000000024dc1
R12=ffff8880311a7838 R13=ffff8880311a7820 R14=ffff8880311a7819 R15=ffff8880311a77d8
RIP=ffffffff8114933a RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe5f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbc54f6e310 CR3=00000000161d2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000