Warning: Permanently added '[localhost]:23026' (ECDSA) to the list of known hosts.
2025/06/03 06:30:39 fuzzer started
2025/06/03 06:30:40 dialing manager at localhost:34361
syzkaller login: [  106.517505] cgroup: Unknown subsys name 'net'
[  106.668358] cgroup: Unknown subsys name 'cpuset'
[  106.724173] cgroup: Unknown subsys name 'rlimit'
2025/06/03 06:31:04 syscalls: 207
2025/06/03 06:31:04 code coverage: enabled
2025/06/03 06:31:04 comparison tracing: enabled
2025/06/03 06:31:04 extra coverage: enabled
2025/06/03 06:31:04 setuid sandbox: enabled
2025/06/03 06:31:04 namespace sandbox: enabled
2025/06/03 06:31:04 Android sandbox: enabled
2025/06/03 06:31:04 fault injection: enabled
2025/06/03 06:31:04 leak checking: enabled
2025/06/03 06:31:04 net packet injection: enabled
2025/06/03 06:31:04 net device setup: enabled
2025/06/03 06:31:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/03 06:31:04 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/03 06:31:04 USB emulation: enabled
2025/06/03 06:31:04 hci packet injection: enabled
2025/06/03 06:31:04 wifi device emulation: enabled
2025/06/03 06:31:04 802.15.4 emulation: enabled
2025/06/03 06:31:04 fetching corpus: 0, signal 0/0 (executing program)
2025/06/03 06:31:06 starting 8 fuzzer processes
06:31:06 executing program 0:
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x20000006})
r2 = gettid()
clone3(&(0x7f0000000380)={0x8001800, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000200), {0x16}, &(0x7f0000000240)=""/111, 0x6f, &(0x7f00000002c0)=""/74, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x4, {r1}}, 0x58)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r1, &(0x7f0000000500)='blkio.bfq.empty_time\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000440)={0x1, 0x80, 0xec, 0x1, 0x81, 0x20, 0x0, 0x8, 0x900, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x828, 0x3, @perf_bp={&(0x7f0000000400), 0x3}, 0x10430, 0x80000001, 0xd1, 0x4, 0xfffffffffffffffe, 0xffffffcd, 0x2, 0x0, 0x401}, r4, 0xe, r5, 0xa)
write$cgroup_pid(r5, &(0x7f0000000540)=r3, 0x12)
r6 = openat$cgroup(r5, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000005c0))
getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000600)={@local}, &(0x7f0000000640)=0x14)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r1, &(0x7f0000000680)={0x60002008})
openat$cgroup_subtree(r1, &(0x7f00000006c0), 0x2, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x113680, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000740)='cgroup.threads\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000780)={0x5, 0x80, 0x3f, 0x7, 0x0, 0x80, 0x0, 0x8, 0x20, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x4}, 0x600, 0x3, 0x4, 0x8, 0x6, 0x1, 0x6, 0x0, 0xfffffffc, 0x0, 0xffff}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1)

06:31:06 executing program 1:
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0)
write$P9_RLOCK(r0, &(0x7f0000000080)={0x8, 0x35, 0x2, 0x1}, 0x8)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
write$P9_RLOCK(r1, &(0x7f0000000180)={0x8, 0x35, 0x1}, 0x8)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000001c0)={0x8000, 0x1, 0x4, 0x40, 0x3f, 0x4, 0x6}, 0xc)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r1)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x7f}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8050}, 0x4000004)
r3 = accept$inet6(r1, 0x0, &(0x7f0000000380))
getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f00000003c0)={'icmp\x00'}, &(0x7f0000000400)=0x1e)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000440)={0x5, 0x8, 0x4, 0x9e, 0x7, 0x0, 0x4}, 0xc)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000480)=""/8, 0x8, 0x10021, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x44)
r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x6280, 0x0)
write$P9_RCLUNK(r5, &(0x7f0000000600)={0x7, 0x79, 0x1}, 0x7)
r6 = openat$cgroup(r5, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r6, &(0x7f0000000680), 0x2, 0x0)
ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f00000006c0))

06:31:06 executing program 3:
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x6})
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r0, 0x210, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x3f}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r2=>0x0})
r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000240)=0x1c, 0x80c00)
setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e22, 0x5, @remote, 0x6}, {0xa, 0x4e21, 0x5, @local, 0x200}, 0x2, [0x5, 0x8, 0x5, 0x40, 0x0, 0xd03b, 0x5, 0x3]}, 0x5c)
pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x82000)
write$P9_RUNLINKAT(r4, &(0x7f0000000340)={0x7, 0x4d, 0x1}, 0x7)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1cb}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="a1aa92145331"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40020)
r5 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x7b}}}}, ["", "", ""]}, 0x28}}, 0x40080)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x44042c20}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x104, r6, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x37}}}}, [@NL80211_ATTR_IE={0xd3, 0x2a, [@challenge={0x10, 0x1, 0x13}, @perr={0x84, 0xc2, {0x7, 0xc, [@ext={{}, @device_b, 0x9, @device_b, 0x21}, @not_ext={{}, @device_b, 0x2, "", 0x33}, @ext={{}, @device_b, 0x5, @device_a, 0x1c}, @not_ext={{}, @device_b, 0x2, "", 0x32}, @not_ext={{}, @device_a, 0x1200, "", 0x3e}, @not_ext={{}, @device_a, 0x552, "", 0x18}, @ext={{}, @device_a, 0x93, @device_a, 0x10}, @ext={{}, @device_a, 0x6, @device_b, 0x13}, @not_ext={{}, @broadcast, 0x4, "", 0x23}, @not_ext={{}, @broadcast, 0x1000, "", 0xd}, @ext={{}, @device_b, 0x10001, @device_b, 0x2d}, @ext={{}, @device_a, 0x8a8, @device_a, 0x3c}]}}, @dsss={0x3, 0x1, 0xb6}, @channel_switch={0x25, 0x3, {0x0, 0x2d, 0xa3}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3ba0}]}, 0x104}, 0x1, 0x0, 0x0, 0x44}, 0x4000000)
r8 = socket(0x9, 0xa, 0x9)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4090)
sendmsg$NL80211_CMD_ABORT_SCAN(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r6, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x34}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x43}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffd}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}}, 0x810)

[  132.659280] audit: type=1400 audit(1748932266.730:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
06:31:06 executing program 4:
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e24, 0x7, @empty, 0xe43}, {0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6348}, 0xff, [0x1, 0x7, 0x1, 0x35f70dbf, 0x5, 0x6, 0x7, 0xa00000]}, 0x5c)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@empty, 0x5b})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@dev}, &(0x7f0000000100)=0x14)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x402200, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000180)={@empty, <r2=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x4}, {0xa, 0x4e23, 0x5, @empty, 0x4}, 0x401, [0xff, 0x80000000, 0x1000, 0x8, 0x74c9, 0x8000, 0x80000000, 0x1]}, 0x5c)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x301100, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f00000002c0)={{0xa, 0x4e21, 0x80000000, @loopback, 0x5}, {0xa, 0x4e21, 0x80, @private1, 0x7}, 0x9, [0x5, 0x1, 0x100, 0xdd35, 0xca, 0x6, 0xe7e, 0x3ff]}, 0x5c)
bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8f}, 0x1c)
r4 = accept4$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @dev}, &(0x7f00000003c0)=0x1c, 0x80000)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
openat$cgroup_freezer_state(r1, &(0x7f0000000440), 0x2, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000480)=@srh={0x4, 0x8, 0x4, 0x4, 0xfe, 0x58, 0x8, [@loopback, @empty, @rand_addr=' \x01\x00', @remote]}, 0x48)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r3)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r5, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x10)
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000680)={@loopback, 0x54, r2})
r6 = openat$cgroup_ro(r3, &(0x7f00000006c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
openat$cgroup_pressure(r6, &(0x7f0000000700)='memory.pressure\x00', 0x2, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x23, &(0x7f0000000740)="8299fea95289d1fa11cd7ce6e4f0848f3d8715115df68a41b6b3a4769188449557ac7364ed0a85679a0925709ec521c55e9b029b259a739f798895732c20462594e60c1b07ceb4634c76e9ef7da9d435b32b1fc887a8f7354b10b18ba7939a1e26e1cda94f04d1605803e6116e65864c339dfd2ab5d037b04341305f2677c908c1e8b9c347b4dfee52b9523a0d6f4a2516c7d7923ef5c5", 0x97)

06:31:06 executing program 5:
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x40, 0x3, 0xd, {0xd, 0x10, "54d2a646b7428d584b1c7e"}}, &(0x7f0000000040)={0x0, 0x3, 0xfb, @string={0xfb, 0x3, "54fc40ec6c1049f1142fe01b06a9a6052f6354af15c2e6fdf5b11a5ce089cfad39c8949ce8c208723d56e34ef804ded8268d774ac81a52dec0f990de63f167b24bc2291bd4773c0313ec235a4436ce38f586558105a43c917252da95bb05bd4e3a2fea5cc9197de815a0fdfc69d45007efffb6a5556ca17701235001c40af39e887bcdf69cdf51b8e5f8418f0b26576d822e7263baa84d5cd2e4d86b67fdec7603f609a730a3d8449917843c7ee4e3cf8628f5e2aa4452414ef4c83f7848a103b353ff5fc82848958657ed90e53fc2c93be82e90ac84d778e955ee536ef7e8ec516ba1e38c83862cf55a41425f50502d112f7f16eecaa04ece"}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0x13, 0xa7, "71a03eef0193a15f993dcdc06d872b61828ecef0732679ba660bf3fa24fb7e499b0acd7e9d67294a2460815044a30578eaa3cffdfcb049a58ee35aa0ad3433d01749b854d10aae4a041c5c588fc6196ec3c11f4a49588e86d53f5e8bcf6e99221b08f93aa6605a1e23196b026010781a423ca102ee30cd12c1ac3c80756cc1cb3ca3969ecb3e2a527c98f607a515e10187c593515683ac92778c5ba0d8147277c525b5ec05cb9c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000300)={0x20, 0x81, 0x3, "cb0a25"}, &(0x7f0000000340)={0x20, 0x82, 0x2, "ea52"}, &(0x7f0000000380)={0x20, 0x83, 0x1, '^'}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "d6d4"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "e31e83"}})
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f00000004c0)={0x20, 0x1, 0x4c, {0x4c, 0x24, "3c04047af10867e4aa459f657c751cc79012af7b6346218db4d4d97b05571dda48d779b522ee77030925e846b662a5d062465d60f418d40f300ebbfd1367d81f54ac7df6af8faac48452"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}}, &(0x7f0000000780)={0x34, &(0x7f00000005c0)={0x0, 0x7, 0x5e, "94991b494ee2b601e66477c12962653625466efe1558189c44fbd66260d8f100665002358c05a3b23ae430801f10b9149787e929cc5de1ff9e49d3818d80928450e634acebe83ab3ca3d8713a9fd9c267d2f309204c75b20237a8d1e049b"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000006c0)={0x20, 0x0, 0x27, {0x25, "81c1d159f63b213bec16090dd94211d44bbaa05a2c38f1a6f940bebbed148caff142eced74"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x3f}})
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000008c0)={0x14, &(0x7f00000007c0)={0x0, 0x2, 0xb3, {0xb3, 0x2, "98380abceedfb7e9b9f300aa6098d87145f065dff622cd4344d0657b4b8bccb582b79f4c9fab40344647e5922b81468f84c559e7a8f811ec66d5d00840fde898921c2e4bb14887977c40526f15223577d59ac4e41d9fff947984cc65a540f41224afc6e961675266cac6a6083ce21886246f5d59f12fc86426e00b68407f00c7adb82dcc8aed8f567cc1d20e894eae26a3a4c1be245c7d8e35998bc28f4589e7e8fe0e9f5d61516d312b7934ae611feae6"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000900)={0x40, 0x26, 0x4a, "19cd620668b86613bb0bfb5e83b257ed1c9469856b64ab2951384a35cf7c58c19adbe387a2478ce810014da7bbf8df594b0d0a2704984873292a372dc42e08b5c319489d50edc3c35f67"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a00)={0x20, 0x0, 0x17, {0x15, "e4559c0a7c7aea210a188dbc156fb96e92dd5d3c0e"}}, &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000a80)={0x20, 0x0, 0x1}})
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000bc0)={0x14, &(0x7f0000000b00)={0x20, 0x23, 0x2c, {0x2c, 0x8, "63e38928b9ecd1a71db40c9a29ec669cd7315b339f6c14ee42303d4634b7e5362f8f72723d80f9e02770"}}, &(0x7f0000000b40)={0x0, 0x3, 0x58, @string={0x58, 0x3, "810d5b20e87291b7a550122851e3daa44547704c5fbf3701c29877b4a02a8e8dc7fe63e6bd9f4929d0234b4d116fae945edb32c74f3c1fe5701609a6da05ac525461dccb20e6beccdcff94e638c5b84a401c83a49acf"}}}, &(0x7f0000000e80)={0x34, &(0x7f0000000c00)={0x40, 0x3c, 0x52, "4940855f7c3704793e987ac3561d45818ef6e603821a548cd404038d122b1b970ea6769e5b10770f57daf8c5e6e568b0cc625b9ff73b739eb7ebeb7403e5c5dc083f88290a34b454a1007ef1b5ef31fdf703"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000d00)={0x20, 0x0, 0xf5, {0xf3, "e69b2974589712db64fcf22c546eac2b5bf7b41b486426dba9060d4f75b4cdcfc1aca1bdeec88178a4b0aa0bbf054af8e2f6e4cd9030b63aca96f4b6891a99586b1f1248219f5428633e5ba86671a64d22d343179078f2354a2b587aaf2e942689ebf51cc60c74c792ca78e88ffb017a05808cde0a1b4a6a352e71fb55fed4280482b33a2c164a68db5cff525cfa50cb72c40e074f60cae395621609d1cf487e72266a75760bf63e3b56811f186583cb8dea90c8817fbd3d9d9390b824ae39f509a10e7d78d83f2cf11f227bb086fcb9cfc8d6a545468bb09b93a0ca6d0bf8584b6ca044e32e96974537810d0cca7550b2b154"}}, &(0x7f0000000e00)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000e40)={0x20, 0x0, 0x1, 0x1}})
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001000)={0x14, &(0x7f0000000ec0)={0x20, 0x22, 0x55, {0x55, 0x9, "caf4a28e564f1efc45e22bc19b156546f8a6a135d45918e25c30a3becf397215a7058d7e2ce9810f2a508bc79146457c8b28d50dec1e629895e47e7de294d8fe1ac8bd0935fd67470f0348d8a85673af2b7ebb"}}, &(0x7f0000000f40)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "5fe65d2499fb287616a734e41f2d735bfd10085c9bedf31e96b06c5c9386114ca09b4544746341eb3beeafc11d7c868edf23f9b4b23064583120841630a7d1c49d30ab7b46c262895ae721ffe4155b2e726dc75f97add04f955d7e5123d559480265cabd9aa471c37673836fb20ecdbbac911284df8638128a2cccb3a516a8461a095e62c3ed2ba9c90379113870dd8553550bfab02fe858ba9f11fc6d0c5f507f1b"}}}, &(0x7f0000001300)={0x44, &(0x7f0000001040)={0x40, 0x9, 0xf8, "e9e9e550abb004974d1e22cf9b533c3587ac114586609250d9e5af918ca9d73edebf646f2ce8d96d266949050b6fe1d8b20c2253563490898a361705bd3403ee7ac840f564180c0831962ca42106272abbb6bc2fa4cf5d71bc145159642981e0d6c42db51fd03ab9173e971fd995ca3933614809eb527fbb834f4dea36f2873c9b673af4b06387ac638a901712ff7825ed0086701b87f547f4d02456ce42882280f3325635663bde2996cfaeb3ca5dfeea2974e8cde0238cda6adfc8b37f95d1af46d68ecf3f4dde9dd9c0dc5fcbb26129b6fc5d8449ee8e877355106215bb207a166388d1882d62a2b4c041b467ba90f6ebd72198e441f8"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x9e}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000011c0)={0x20, 0x81, 0x1, "02"}, &(0x7f0000001200)={0x20, 0x82, 0x2, "878f"}, &(0x7f0000001240)={0x20, 0x83, 0x3, "207387"}, &(0x7f0000001280)={0x20, 0x84, 0x2, "d36b"}, &(0x7f00000012c0)={0x20, 0x85, 0x3, "92a46a"}})
exit_group(0x9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10000000)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, 0x0, 0x33210647ca950c19, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001580)={"023381391a8c8982f9db5241404cafb0", 0x0, 0x0, {0x9, 0x7}, {0x8, 0x3}, 0xffffffffffff8001, [0x7, 0x5, 0x7, 0x400, 0xd7c, 0xb2a, 0x2, 0x7ff, 0x7fffffff, 0xffff, 0x9, 0x120000, 0x0, 0x3ff, 0x9, 0x7fff]})
write$P9_RLERROR(r0, &(0x7f0000001680)={0x9, 0x7, 0x2}, 0x9)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000016c0)={@dev={0xfe, 0x80, '\x00', 0x29}, 0x59})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001700), 0x28000, 0x0)
write$P9_RWSTAT(r1, &(0x7f0000001740)={0x7, 0x7f, 0x1}, 0x7)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001780)='cpu.weight\x00', 0x2, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000017c0)={@initdev, <r2=>0x0}, &(0x7f0000001800)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001900)={'erspan0\x00', &(0x7f0000001840)={'ip_vti0\x00', r2, 0x700, 0x20, 0x5, 0x7fffffff, {{0x1a, 0x4, 0x0, 0x8, 0x68, 0x66, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @multicast2, {[@end, @noop, @ssrr={0x89, 0x27, 0xb6, [@remote, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @local, @multicast1, @multicast2, @multicast2]}, @timestamp={0x44, 0x8, 0xd3, 0x0, 0x8, [0xfffffffc]}, @cipso={0x86, 0x23, 0x2, [{0x2, 0x11, "10c24c13a6492f6d4e4b5f795f8c2f"}, {0x6, 0x5, "82344d"}, {0x3, 0x7, "60d0e2c961"}]}]}}}}})
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001ac0)={0x14, &(0x7f0000001940)={0x40, 0x31, 0xe6, {0xe6, 0x2, "dd24ff0dfffede64f2c34d32cf46354db8c6923009f4e5661336bffd219456afcbdac498aac0586feaa6631a4e196f4bfbafb3ae7d7fc49ba0c7697b4bc3bca23b6661737ff506559f4ebbfebc02b6cb4c63840249ac2e631680bb10a7100b44f0abe93235308a25d63d34aa6e14a32cc7265062adcec347f128d5bb67e41741076bc83bc6a84448ce3aea1ef51ad1a9ea44db78c7e517b87acb37321f0ef38006c0d0334033a9e900bb62b5f6dc05f45bcc5ab460fb126403567a119e4b36209e01b722dafc4e477b92c837d6f6c4184ce464a55319918e3d5421f867b2b9ff42f0801f"}}, &(0x7f0000001a40)={0x0, 0x3, 0x59, @string={0x59, 0x3, "3dc8257f6b304042e2d93e61f52f7c19f2788bd4749793e011a90b24ea7d87bce837a85001b99000a5d0c96d80aaa80056887f3c450809a2d3fb7e70b46a8e6ab6bafc37178a2bbf03806f682ba3c04e47b072a3680db2"}}}, &(0x7f0000001cc0)={0x34, &(0x7f0000001b00)={0x20, 0x0, 0x3, "f5e594"}, &(0x7f0000001b40)={0x0, 0xa, 0x1, 0xcd}, &(0x7f0000001b80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001bc0)={0x20, 0x0, 0x72, {0x70, "5b27a754eb5c227833f9ce292d9be174e465e50ca9265177534d21ec6433e1949d1267c8be5deb336e1c127cacf4d4ba8ba08639550cac626bd1b041b1658fdfd8ccbc08c17324533704ab1cf6cab28e0277c10f7407f0742205b704ccdbdacba225f8c22751fd09aa0dc98e5e2c84bf"}}, &(0x7f0000001c40)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000001c80)={0x20, 0x0, 0x1, 0x6}})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x40, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10)

06:31:06 executing program 6:
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x68}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x4000)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x50)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r2=>0x0, <r3=>0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004000)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000640)={"3904e640e11055e2612763fc3ebc90d4", r2, r3, {0xf7, 0x400}, {0x8, 0x6a13}, 0x4, [0x60, 0x2, 0x2, 0x1f, 0x9, 0xcba, 0x6, 0x4bf1, 0x5, 0xcabc, 0x1f, 0x6, 0x81, 0x62b, 0x9, 0x4e86]})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan3\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan4\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x80}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4a}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008810}, 0x24004011)
r7 = socket$inet6(0xa, 0xa, 0x9)
accept$inet6(r7, &(0x7f0000000900)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000940)=0x1c)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000009c0)={'wpan3\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008040)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x90, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "929febd56c8ccc0c768ea6d93f3017285cf3d0bd665a6a4686c3d65e05cdb62a"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "471eed762a2734160a4c55e8afb75c78e9b15c9e8dd09f582a22a5b72ac6c456"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "11f3700a9aa50582042da9345a4589d7"}]}, 0x90}, 0x1, 0x0, 0x0, 0x851}, 0x1)
r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c80), r4)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r10, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x2850)

06:31:06 executing program 7:
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xe4, 0x29, 0x1, {0x1b0, [{{0x4, 0x2, 0x4}, 0x747e, 0x1, 0x7, './file0'}, {{0x10, 0x3, 0x3}, 0x3, 0x9, 0x7, './file0'}, {{0x80, 0x3, 0x3}, 0x8, 0x3, 0x7, './file0'}, {{0x0, 0x3}, 0x9, 0x1, 0x7, './file0'}, {{0x0, 0x3}, 0xffffffff, 0x17, 0x7, './file0'}, {{0x20, 0x4, 0x7}, 0x2, 0x40, 0x7, './file0'}, {{0x4, 0x3, 0x7}, 0x8, 0x3, 0x7, './file0'}]}}, 0xe4)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x6f, 0x2}, 0x9)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x10, 0x3, 0x1}}}, 0x18)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x7b, 0x2}, 0x7)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x84800)
write$P9_RGETLOCK(r0, &(0x7f0000000200)={0x23, 0x37, 0x2, {0x2, 0x5, 0x81, 0xffffffffffffffff, 0x5, '+&5]!'}}, 0x23)
write$P9_RREADDIR(r0, &(0x7f0000000240)={0x103, 0x29, 0x1, {0x428d, [{{0x4, 0x0, 0x5}, 0x1ff, 0x28, 0x7, './file0'}, {{0x2, 0x0, 0x3}, 0x9, 0x8, 0x7, './file0'}, {{0x8, 0x3, 0x1}, 0x10000, 0x5, 0x7, './file0'}, {{0x40, 0x1, 0x4}, 0x20, 0xff, 0x7, './file0'}, {{0x20, 0x4, 0x4}, 0x3ff, 0x9, 0x7, './file0'}, {{0x8, 0x2, 0x7}, 0x10000, 0xf5, 0x7, './file0'}, {{0x8, 0x0, 0x7}, 0x2, 0x81, 0x7, './file0'}, {{0x8, 0x0, 0x7}, 0x4, 0x21, 0x7, './file0'}]}}, 0x103)
write$P9_RLCREATE(r0, &(0x7f0000000380)={0x18, 0xf, 0x1, {{0x1, 0x1, 0x7}, 0xfffffffd}}, 0x18)
r1 = socket(0x25, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r2, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x58, 0xbe, "5db1a56e664ce3515c2902c3a7141435a3e2ec2116a884ad1fad078a6545572b3fda02a71ec025d26d417a3a040ecf13a5d79c40b06fa85bc90a5c4ccbb164dcc73073a5d10307fa046b93aff1c2926c88e1b7db"}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x11}, 0x20)
write$P9_RLOCK(r0, &(0x7f0000000540)={0x8, 0x35, 0x1, 0x2}, 0x8)
write$P9_RGETLOCK(r0, &(0x7f0000000580)={0x26, 0x37, 0x20, {0x1, 0xa2df, 0x0, 0xffffffffffffffff, 0x8, 'nl80211\x00'}}, 0x26)
write$P9_RXATTRWALK(r0, &(0x7f00000005c0)={0xf, 0x1f, 0x2, 0xfffffffffffffffa}, 0xf)
write$P9_RWALK(r0, &(0x7f0000000600)={0x64, 0x6f, 0x2, {0x7, [{0x80, 0x2, 0x4}, {0x40, 0x1, 0x6}, {0x4, 0x1, 0x8}, {0x2, 0x2, 0x6}, {0x20, 0x1, 0x3}, {0x2, 0x0, 0x4}, {0x10, 0x0, 0x8}]}}, 0x64)
write$P9_RWSTAT(r0, &(0x7f0000000680)={0x7, 0x7f, 0x2}, 0x7)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
write$P9_RSTATFS(r3, &(0x7f0000000700)={0x43, 0x9, 0x2, {0x8, 0x8, 0x2, 0x100000001, 0x8, 0x8, 0x100, 0x2, 0x6}}, 0x43)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000800)={@mcast2, 0x7f})

06:31:07 executing program 2:
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x400, 0x1, 0x0, 0x0, 0x1}, 0x8)
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7})
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x8ac0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1021000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x36}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "f3d6bd8713022dedb8bdb55ad26270ea"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x48}}, 0xfc195132cd5e18dd)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x128, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x20004881)
getpeername$inet6(r2, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000540)=0x1c)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1b4, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0x10c, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1, 0x81, 0x8}}, @gcr_ga={0xbd, 0x6, @broadcast}, @sec_chan_ofs={0x3e, 0x1}, @mic={0x8c, 0x10, {0xb32, "50507da898f0", @short="19fd8395f41180c0"}}, @random_vendor={0xdd, 0x6d, "8905d063addab6cce89ae0493c13570545f1d234579f181a1184e9d3713927cb017b1db06b8d95b0b98563c6fcac3fb4ab12a3c44f296b0297cb7be24ba31ddb422f7af7b3d5677df50ff55e3bc8f105f1099cf506af3fd49a36ec221fda8938aa7a0e53ed2f70274aa2588002"}, @ibss={0x6, 0x2, 0x101}, @challenge={0x10, 0x1, 0x33}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x2, 0x0, {0x4, 0xe2, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x8, 0x6}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random_vendor={0xdd, 0x46, "9ea9e548080343df7b32ee2294d753ad5e23a93320668851f8138b88b95ba101bbc184f74d79b877a1db8a81065d2f48f1dc4116f75a0bb3bb6a8f54c08cd78e4f5ac8b1b404"}]}, @NL80211_ATTR_IE={0x83, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x0, 0x8}}, @peer_mgmt={0x75, 0x6, {0x0, 0x20, @val=0x7, @void, @void}}, @peer_mgmt={0x75, 0x6, {0x1, 0x4, @void, @val=0x2, @void}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0x8, 0x9}}, @preq={0x82, 0x41, @ext={{0x1, 0x1}, 0x3, 0xf9, 0xffffffff, @device_b, 0x3f, @device_a, 0x0, 0xae, 0x3, [{{0x0, 0x0, 0x1}, @device_b}, {{0x1}, @broadcast, 0x20}, {{0x1}, @device_a, 0x2a}]}}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xff, 0xaf}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20009000}, 0x4004841)
read$rfkill(r1, &(0x7f0000000800), 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x20}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xbab}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
accept4$inet6(0xffffffffffffffff, &(0x7f00000009c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000a00)=0x1c, 0x40800)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x800)
epoll_pwait(r2, &(0x7f0000000b80)=[{}, {}, {}, {}], 0x4, 0xffffffff, &(0x7f0000000bc0)={[0x9fc0]}, 0x8)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00), 0x400000, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000c40)={{<r6=>0x0, 0x3, 0x6, 0x80, 0x0, 0x2, 0x7, 0xc4d6, 0xfffff801, 0x3f66, 0x6, 0x8, 0x4, 0x6, 0x5}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000007b840)={0xe132, [{r6}], 0x8, "f6548bed2909af"})

[  134.065221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  134.069969] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  134.075801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  134.085898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  134.093328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  134.131754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.133452] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  134.141712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.144097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  134.168315] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.170052] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  134.183035] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  134.185227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  134.196875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  134.208397] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  134.212040] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  134.216544] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  134.218554] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  134.222063] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  134.223333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  134.227039] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  134.228667] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  134.230189] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  134.232506] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  134.249172] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  134.263075] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  134.282203] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  134.299005] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  134.303412] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  134.305312] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  134.311980] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  134.344797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  134.360968] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  134.396958] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  134.409105] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  134.619160] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  134.629272] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  134.637812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  134.657373] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  134.662960] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  136.143690] Bluetooth: hci0: command tx timeout
[  136.333835] Bluetooth: hci2: command tx timeout
[  136.335045] Bluetooth: hci3: command tx timeout
[  136.335541] Bluetooth: hci1: command tx timeout
[  136.397931] Bluetooth: hci4: command tx timeout
[  136.398472] Bluetooth: hci5: command tx timeout
[  136.463006] Bluetooth: hci6: command tx timeout
[  136.782965] Bluetooth: hci7: command tx timeout
[  138.189834] Bluetooth: hci0: command tx timeout
[  138.383691] Bluetooth: hci1: command tx timeout
[  138.384174] Bluetooth: hci3: command tx timeout
[  138.385160] Bluetooth: hci2: command tx timeout
[  138.446908] Bluetooth: hci4: command tx timeout
[  138.447345] Bluetooth: hci5: command tx timeout
[  138.510609] Bluetooth: hci6: command tx timeout
[  138.829670] Bluetooth: hci7: command tx timeout
[  140.237672] Bluetooth: hci0: command tx timeout
[  140.431355] Bluetooth: hci2: command tx timeout
[  140.431974] Bluetooth: hci3: command tx timeout
[  140.432391] Bluetooth: hci1: command tx timeout
[  140.495614] Bluetooth: hci5: command tx timeout
[  140.496058] Bluetooth: hci4: command tx timeout
[  140.558847] Bluetooth: hci6: command tx timeout
[  140.878725] Bluetooth: hci7: command tx timeout
[  142.286714] Bluetooth: hci0: command tx timeout
[  142.478869] Bluetooth: hci1: command tx timeout
[  142.479389] Bluetooth: hci3: command tx timeout
[  142.481143] Bluetooth: hci2: command tx timeout
[  142.542707] Bluetooth: hci4: command tx timeout
[  142.543179] Bluetooth: hci5: command tx timeout
[  142.605684] Bluetooth: hci6: command tx timeout
[  142.925750] Bluetooth: hci7: command tx timeout
[  196.516007] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  196.523269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  196.527103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  196.535300] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  196.542075] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  196.691059] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  196.700176] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  196.721485] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  196.725907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  196.730036] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  196.735240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  196.739223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  196.741298] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  196.746547] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  196.768983] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  196.770845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  196.776328] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  196.777901] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  196.780824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  196.782511] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  196.784138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  196.785500] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  196.798096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  196.810523] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  196.825988] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  196.830404] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  196.839634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  196.855888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  196.869092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  196.875274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  196.914735] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  196.930182] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  196.946220] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  196.948176] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  197.011335] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  197.016095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  197.035048] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  197.036850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  197.052118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  197.056933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  198.606935] Bluetooth: hci0: command tx timeout
[  198.862663] Bluetooth: hci2: command tx timeout
[  198.926672] Bluetooth: hci3: command tx timeout
[  198.990704] Bluetooth: hci6: command tx timeout
[  198.991351] Bluetooth: hci1: command tx timeout
[  198.992121] Bluetooth: hci4: command tx timeout
[  199.118903] Bluetooth: hci7: command tx timeout
[  199.182915] Bluetooth: hci5: command tx timeout
[  200.655626] Bluetooth: hci0: command tx timeout
[  200.910896] Bluetooth: hci2: command tx timeout
[  200.973916] Bluetooth: hci3: command tx timeout
[  201.037791] Bluetooth: hci4: command tx timeout
[  201.038303] Bluetooth: hci1: command tx timeout
[  201.038389] Bluetooth: hci6: command tx timeout
[  201.167650] Bluetooth: hci7: command tx timeout
[  201.230418] Bluetooth: hci5: command tx timeout
[  202.702762] Bluetooth: hci0: command tx timeout
[  202.958810] Bluetooth: hci2: command tx timeout
[  203.022794] Bluetooth: hci3: command tx timeout
[  203.087234] Bluetooth: hci6: command tx timeout
[  203.087821] Bluetooth: hci4: command tx timeout
[  203.088242] Bluetooth: hci1: command tx timeout
[  203.214989] Bluetooth: hci7: command tx timeout
[  203.278735] Bluetooth: hci5: command tx timeout
[  204.750672] Bluetooth: hci0: command tx timeout
[  205.007172] Bluetooth: hci2: command tx timeout
[  205.071154] Bluetooth: hci3: command tx timeout
[  205.134012] Bluetooth: hci4: command tx timeout
[  205.134713] Bluetooth: hci1: command tx timeout
[  205.134941] Bluetooth: hci6: command tx timeout
[  205.261873] Bluetooth: hci7: command tx timeout
[  205.325715] Bluetooth: hci5: command tx timeout
[  258.850452] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  258.855263] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  258.858947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  258.866050] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  258.875289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  259.045172] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  259.049194] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  259.053944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  259.060445] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  259.068707] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  259.126540] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  259.131106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  259.140091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  259.148062] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  259.167548] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  259.194120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  259.198853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  259.203780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  259.217104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  259.232203] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  259.242909] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  259.265155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  259.274662] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  259.277426] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  259.299023] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  259.306396] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  259.325038] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  259.332887] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  259.344711] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  259.347535] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  259.348404] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  259.353160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  259.365923] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  259.367657] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  259.390521] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  259.399103] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  259.404111] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  259.450991] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  259.457913] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  259.461390] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  260.942358] Bluetooth: hci0: command tx timeout
[  261.135396] Bluetooth: hci1: command tx timeout
[  261.262034] Bluetooth: hci2: command tx timeout
[  261.326296] Bluetooth: hci3: command tx timeout
[  261.389839] Bluetooth: hci5: command tx timeout
[  261.454152] Bluetooth: hci7: command tx timeout
[  261.455342] Bluetooth: hci4: command tx timeout
[  261.517775] Bluetooth: hci6: command tx timeout
[  262.989729] Bluetooth: hci0: command tx timeout
[  263.181706] Bluetooth: hci1: command tx timeout
[  263.310660] Bluetooth: hci2: command tx timeout
[  263.373729] Bluetooth: hci3: command tx timeout
[  263.437959] Bluetooth: hci5: command tx timeout
[  263.501709] Bluetooth: hci4: command tx timeout
[  263.502214] Bluetooth: hci7: command tx timeout
[  263.565643] Bluetooth: hci6: command tx timeout
[  265.038728] Bluetooth: hci0: command tx timeout
[  265.230600] Bluetooth: hci1: command tx timeout
[  265.358770] Bluetooth: hci2: command tx timeout
[  265.421636] Bluetooth: hci3: command tx timeout
[  265.485848] Bluetooth: hci5: command tx timeout
[  265.549657] Bluetooth: hci7: command tx timeout
[  265.550121] Bluetooth: hci4: command tx timeout
[  265.615868] Bluetooth: hci6: command tx timeout
[  267.086150] Bluetooth: hci0: command tx timeout
[  267.277951] Bluetooth: hci1: command tx timeout
[  267.405744] Bluetooth: hci2: command tx timeout
[  267.469829] Bluetooth: hci3: command tx timeout
[  267.534918] Bluetooth: hci5: command tx timeout
[  267.598149] Bluetooth: hci4: command tx timeout
[  267.598998] Bluetooth: hci7: command tx timeout
[  267.661764] Bluetooth: hci6: command tx timeout
[  321.188249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  321.198222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  321.202124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  321.214813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  321.222168] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  321.272300] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  321.279078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  321.282329] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  321.292115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  321.302126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  321.377841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  321.382530] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  321.386334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  321.392029] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  321.396441] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  321.512005] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  321.526299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  321.528720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  321.536635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  321.542001] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  321.638213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  321.669894] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  321.698473] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  321.706877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  321.716194] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  321.825946] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  321.855298] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  321.862178] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  321.885365] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  321.893265] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  321.939259] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  321.955303] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  321.963233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  321.986827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  322.019998] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  322.208099] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  322.231728] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  322.271265] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  322.319298] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  322.322422] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  323.277822] Bluetooth: hci0: command tx timeout
[  323.341705] Bluetooth: hci1: command tx timeout
[  323.469974] Bluetooth: hci2: command tx timeout
[  323.597795] Bluetooth: hci3: command tx timeout
[  323.789686] Bluetooth: hci4: command tx timeout
[  324.045693] Bluetooth: hci6: command tx timeout
[  324.110717] Bluetooth: hci5: command tx timeout
[  324.367902] Bluetooth: hci7: command tx timeout
[  325.327744] Bluetooth: hci0: command tx timeout
[  325.390731] Bluetooth: hci1: command tx timeout
[  325.518066] Bluetooth: hci2: command tx timeout
[  325.645782] Bluetooth: hci3: command tx timeout
[  325.838849] Bluetooth: hci4: command tx timeout
[  326.094677] Bluetooth: hci6: command tx timeout
[  326.157792] Bluetooth: hci5: command tx timeout
[  326.414675] Bluetooth: hci7: command tx timeout
[  327.374641] Bluetooth: hci0: command tx timeout
[  327.437759] Bluetooth: hci1: command tx timeout
[  327.566632] Bluetooth: hci2: command tx timeout
[  327.693674] Bluetooth: hci3: command tx timeout
[  327.885743] Bluetooth: hci4: command tx timeout
[  328.142777] Bluetooth: hci6: command tx timeout
[  328.206653] Bluetooth: hci5: command tx timeout
[  328.461646] Bluetooth: hci7: command tx timeout
[  329.422877] Bluetooth: hci0: command tx timeout
[  329.486977] Bluetooth: hci1: command tx timeout
[  329.616610] Bluetooth: hci2: command tx timeout
[  329.741782] Bluetooth: hci3: command tx timeout
[  329.934055] Bluetooth: hci4: command tx timeout
[  330.189655] Bluetooth: hci6: command tx timeout
[  330.255014] Bluetooth: hci5: command tx timeout
[  330.511013] Bluetooth: hci7: command tx timeout
[  383.395052] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  383.400849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  383.403379] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  383.412125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  383.426018] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  383.786403] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  383.792229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  383.798846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  383.809196] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  383.815429] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  383.832288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  383.847272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  383.853706] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  383.857181] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  383.861178] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  383.861378] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  383.872222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  383.879384] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  383.884193] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  383.898125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  383.989668] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  383.994126] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  384.004410] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  384.025500] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  384.036166] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  384.137405] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  384.158947] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  384.188112] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  384.222539] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  384.242520] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  384.287302] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  384.298961] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  384.349395] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  384.373615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  384.375100] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  384.379429] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  384.398675] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  384.441169] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  384.488012] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  384.492591] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  385.487635] Bluetooth: hci0: command tx timeout
[  385.869837] Bluetooth: hci1: command tx timeout
[  385.933856] Bluetooth: hci2: command tx timeout
[  385.997669] Bluetooth: hci3: command tx timeout
[  386.126677] Bluetooth: hci4: command tx timeout
[  386.381664] Bluetooth: hci6: command tx timeout
[  386.509734] Bluetooth: hci7: command tx timeout
[  386.637763] Bluetooth: hci5: command tx timeout
[  387.533647] Bluetooth: hci0: command tx timeout
[  387.918468] Bluetooth: hci1: command tx timeout
[  387.982617] Bluetooth: hci2: command tx timeout
[  388.045766] Bluetooth: hci3: command tx timeout
[  388.173678] Bluetooth: hci4: command tx timeout
[  388.429802] Bluetooth: hci6: command tx timeout
[  388.559645] Bluetooth: hci7: command tx timeout
[  388.685714] Bluetooth: hci5: command tx timeout
[  389.582442] Bluetooth: hci0: command tx timeout
[  389.966700] Bluetooth: hci1: command tx timeout
[  390.030095] Bluetooth: hci2: command tx timeout
[  390.094155] Bluetooth: hci3: command tx timeout
[  390.222103] Bluetooth: hci4: command tx timeout
[  390.477857] Bluetooth: hci6: command tx timeout
[  390.605769] Bluetooth: hci7: command tx timeout
[  390.733700] Bluetooth: hci5: command tx timeout
[  391.629802] Bluetooth: hci0: command tx timeout
[  392.013729] Bluetooth: hci1: command tx timeout
[  392.077756] Bluetooth: hci2: command tx timeout
[  392.141718] Bluetooth: hci3: command tx timeout
[  392.269672] Bluetooth: hci4: command tx timeout
[  392.525687] Bluetooth: hci6: command tx timeout
[  392.653850] Bluetooth: hci7: command tx timeout
[  392.782167] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
06:36:08  Registers:
info registers vcpu 0
RAX=0000000000004005 RBX=ffff88800ff15280 RCX=00000000ffffffff RDX=0000000000000008
RSI=ffff88800ff15cd8 RDI=00000000fffffffe RBP=ffff88800ff15cd8 RSP=ffff88802be97520
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffff88800ff15cd8 R13=ffffffffffffffff R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81519469 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6a884dd260 CR3=000000002a382000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffffffff81604940 RCX=ffff88802a2475bc RDX=1ffff11005448eff
RSI=ffffffff83b662bd RDI=ffff88802a24773c RBP=ffff88802a247700 RSP=ffff88802a247668
R8 =0000000000000001 R9 =ffff88802a2476a8 R10=000000000003b6bd R11=0000000000097611
R12=ffff88802a247730 R13=0000000000000000 R14=ffff888027b81b80 R15=0000000000092cc0
RIP=ffffffff812d99c8 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555639e4400 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffdf7a447a8 CR3=000000002a31d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000