Warning: Permanently added '[localhost]:24714' (ECDSA) to the list of known hosts.
2025/06/05 03:48:49 fuzzer started
2025/06/05 03:48:50 dialing manager at localhost:42669
syzkaller login: [   94.340832] cgroup: Unknown subsys name 'net'
[   94.502994] cgroup: Unknown subsys name 'cpuset'
[   94.543249] cgroup: Unknown subsys name 'rlimit'
2025/06/05 03:49:06 syscalls: 204
2025/06/05 03:49:06 code coverage: enabled
2025/06/05 03:49:06 comparison tracing: enabled
2025/06/05 03:49:06 extra coverage: enabled
2025/06/05 03:49:06 setuid sandbox: enabled
2025/06/05 03:49:06 namespace sandbox: enabled
2025/06/05 03:49:06 Android sandbox: enabled
2025/06/05 03:49:06 fault injection: enabled
2025/06/05 03:49:06 leak checking: enabled
2025/06/05 03:49:06 net packet injection: enabled
2025/06/05 03:49:06 net device setup: enabled
2025/06/05 03:49:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/05 03:49:06 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/05 03:49:06 USB emulation: enabled
2025/06/05 03:49:06 hci packet injection: enabled
2025/06/05 03:49:06 wifi device emulation: enabled
2025/06/05 03:49:06 802.15.4 emulation: enabled
2025/06/05 03:49:06 fetching corpus: 0, signal 0/0 (executing program)
2025/06/05 03:49:07 starting 8 fuzzer processes
03:49:07 executing program 0:
write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x80, 0x2}}, 0x14)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x30000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x1, 0x2})
write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x80, 0x3, 0x6}}, 0x14)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RRENAMEAT(r1, &(0x7f0000000140)={0x7, 0x4b, 0x2}, 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', <r5=>0x0, 0x4, 0x0, 0x7f, 0x0, 0xaa, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x20, 0x8, 0x0, 0xd07e}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x24c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb1eedc8ef3c17a0f}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0)
write$P9_RSYMLINK(r6, &(0x7f0000000640)={0x14, 0x11, 0x1, {0x80, 0x1, 0x4}}, 0x14)
pipe(&(0x7f0000000680)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$P9_RATTACH(r7, &(0x7f00000006c0)={0x14, 0x69, 0x2, {0x1, 0x0, 0x3}}, 0x14)
write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000700)={0x18, 0xf, 0x4e3, {{0x40, 0x0, 0x3}, 0x2}}, 0x18)
sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080004}, 0x2000000)
write$P9_RWRITE(r8, &(0x7f0000000840)={0xb, 0x77, 0x1, 0x48}, 0xb)
getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000940)={0x6, &(0x7f0000000900)=[{0x3, 0xff, 0x1, 0xfff}, {0x4, 0x9, 0x2, 0x9}, {0x6, 0x4, 0x2, 0x1ff}, {0x4000, 0x3, 0x2, 0x1f}, {0x8000, 0xfe, 0xfd, 0x2}, {0xff, 0x80, 0x4, 0x93c}]})

03:49:08 executing program 1:
r0 = socket(0x28, 0x6, 0xffffff20)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x50}}, 0x4040084)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x48041)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', <r9=>0x0, 0x4, 0x9f, 0x4, 0x3f, 0x72, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x80, 0x20, 0x80, 0x200}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000900)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)={0x2d8, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x2000c001}, 0x44080)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r3)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), r3)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, 0x0, 0x800, 0x70bd25, 0x7fff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd479}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x901)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000b80)={'sit0\x00', &(0x7f0000000b00)={'syztnl2\x00', <r12=>r6, 0x4, 0x0, 0x5, 0x2, 0x4, @mcast2, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7, 0x40, 0x20, 0x7}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x6c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004044)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, r11, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x65}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000800)

03:49:08 executing program 3:
getgid()
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x1}}, 0x14)
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0xc000, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x8010)
getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4)
pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84000)
write$P9_RXATTRWALK(r2, &(0x7f0000000400)={0xf, 0x1f, 0x1, 0x100}, 0xf)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'})
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x24000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg2\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xdfd0a5044a92dbfd}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x10)
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000640), 0x4)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044}, 0x40004805)
bind$802154_dgram(r3, &(0x7f0000000780)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000007c0)=0x1, 0x4)
write$P9_RXATTRCREATE(r0, &(0x7f0000000800)={0x7, 0x21, 0x2}, 0x7)
write$P9_RSYMLINK(r3, &(0x7f0000000840)={0x14, 0x11, 0x2, {0x80, 0x2, 0x3}}, 0x14)

03:49:08 executing program 2:
socketpair(0x8, 0x1, 0x800, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x8584)
io_getevents(0x0, 0x7, 0x7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x3938700})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x593}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x48956)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x300, 0x2, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000540)={0x30, 0x6f, 0x2, {0x3, [{0x4, 0x4, 0x8}, {0x80, 0x4, 0x6}, {0x4, 0x3, 0x1}]}}, 0x30)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x57}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbab8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r2, 0x809, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x448d4}, 0x4000000)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r1)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x6c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4c044)
socketpair(0x1f, 0x4, 0x3, &(0x7f00000009c0)={<r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000980), r4)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x34}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '^]\xf8-}\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'batadv\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x20)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x400d0}, 0x44810)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000c80)={0x18, 0x71, 0x2, {{0x40, 0xff, 0x6}, 0x80}}, 0x18)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000cc0)={0x18, 0xd, 0x2, {{0x1, 0x1}}}, 0x18)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d40), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x4c, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44850}, 0x20004084)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x34, r5, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40810)

[  111.987379] audit: type=1400 audit(1749095348.036:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:49:08 executing program 4:
socketpair(0x18, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4)
getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x461592552e3ee571}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8050}, 0x80)
socketpair(0x2, 0x3, 0xd6b, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000300))
pipe(&(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000380))
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8045}, 0x10)
pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80000)
write$P9_RRENAMEAT(r7, &(0x7f0000000640)={0x7, 0x4b, 0x1}, 0x7)
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r6, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x24)
pipe(&(0x7f00000007c0)={<r8=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r8)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0xc00040, 0x0)
write$P9_RLINK(r9, &(0x7f0000000840)={0x7, 0x47, 0x1}, 0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000880))

03:49:08 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r3 = openat$vcs(0xffffffffffffff9c, 0xfffffffffffffffc, 0x200003, 0x0)
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x516, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x280, 0x10}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x6)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', <r6=>0x0, 0x2f, 0x6, 0x3, 0x4, 0x0, @local, @empty, 0x7, 0x700, 0x3, 0x6}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000806}, 0xcf68ea50ea935e92)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x38}}, 0x4020041)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x2040, 0x0)
sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10040001)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r9, 0x600, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x801)
r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r11, 0x89fa, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'syztnl2\x00', r7, 0x2f, 0xec, 0x2, 0xd9, 0x49, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x40, 0x1, 0x1, 0x40000}})
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000bc0)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15)

03:49:08 executing program 6:
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x20)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xef5)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xf7b)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="63fe8e9d4dc36bc28c4573916f812186c5b3ba2f1dbe322a51336625a4fc1e6428417e550c7e1c1633f3a5118e92c31ee2f119a64d5091a5126254e3645c222d9ac6391f9112", 0x46, 0xfffffffffffffffd)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000100)={0x2, 0x3, 0x6, 0x2, 0x401})
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4)
connect$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @none={0x0, 0x3}}, 0x14)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_int(r0, &(0x7f0000000240)='notify_on_release\x00', 0x2, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000280)='syz1\x00', 0x1ff)
r2 = socket(0x10, 0x4, 0x80000001)
setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000002c0), 0x4)
add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="a7faecb05d5e541c62ce8771ba30", 0xe, 0xfffffffffffffff9)
write$P9_RLCREATE(r2, &(0x7f00000003c0)={0x18, 0xf, 0x2, {{0x80, 0x1, 0x6}, 0x79}}, 0x18)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x543401, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004004}, 0x4891)

03:49:08 executing program 7:
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)=0x1)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000040))
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0xba41, 0x1f, 0x4, 0x3}, {0x4, 0xcd, 0x3, 0x2}, {0xffff, 0x40, 0x9, 0x7e000}]})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x5, 0x4b, 0x20, 0x3}, {0x20, 0x40, 0x20, 0xfffffff9}, {0x8000, 0x4, 0x8, 0xc0}, {0x81, 0x7f, 0x1, 0x5}, {0xfff, 0x7, 0x47, 0x9}, {0x5, 0xff, 0xfc, 0x5}]})
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x103000, 0x0)
connect$802154_dgram(r0, &(0x7f00000001c0)={0x24, @none={0x0, 0x2}}, 0x14)
io_uring_setup(0x1f10, &(0x7f0000000200)={0x0, 0x452, 0x10, 0x3, 0x36c})
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @dev})
pipe(&(0x7f0000000300)={<r3=>0xffffffffffffffff})
io_uring_setup(0x89b, &(0x7f0000000340)={0x0, 0x890, 0x8, 0x1, 0x3a2, 0x0, r3})
pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RLOPEN(r4, &(0x7f0000000400)={0x18, 0xd, 0x2, {{0x4, 0x0, 0x8}, 0x10000}}, 0x18)
inotify_rm_watch(r3, 0x0)
pipe(&(0x7f0000000440))
openat$cgroup(r1, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0)
pipe(&(0x7f00000004c0)={<r5=>0xffffffffffffffff})
write$P9_RLERROR(r5, &(0x7f0000000500)={0xa, 0x7, 0x1, {0x1, '@'}}, 0xa)

[  113.447293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  113.451823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  113.455158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  113.466544] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  113.472322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  113.530888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  113.534402] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  113.541210] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  113.551305] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  113.555599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  113.622398] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  113.627179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  113.631980] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  113.645192] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  113.657307] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  113.660414] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  113.665287] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  113.669400] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  113.672934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  113.682731] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  113.689392] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  113.691111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  113.692651] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  113.705839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  113.707900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  113.715911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  113.733456] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  113.742286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  113.745635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  113.753398] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  113.756168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  113.760492] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  113.766867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  113.768807] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  113.775604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  113.782741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  113.823912] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  113.859394] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  113.893985] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  113.965969] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  115.527809] Bluetooth: hci0: command tx timeout
[  115.589775] Bluetooth: hci1: command tx timeout
[  115.781786] Bluetooth: hci6: command tx timeout
[  115.845852] Bluetooth: hci3: command tx timeout
[  115.846407] Bluetooth: hci4: command tx timeout
[  115.909855] Bluetooth: hci7: command tx timeout
[  115.973770] Bluetooth: hci2: command tx timeout
[  116.102059] Bluetooth: hci5: command tx timeout
[  117.574986] Bluetooth: hci0: command tx timeout
[  117.638055] Bluetooth: hci1: command tx timeout
[  117.829786] Bluetooth: hci6: command tx timeout
[  117.894758] Bluetooth: hci4: command tx timeout
[  117.895220] Bluetooth: hci3: command tx timeout
[  117.958193] Bluetooth: hci7: command tx timeout
[  118.021750] Bluetooth: hci2: command tx timeout
[  118.150576] Bluetooth: hci5: command tx timeout
[  119.622745] Bluetooth: hci0: command tx timeout
[  119.685999] Bluetooth: hci1: command tx timeout
[  119.878147] Bluetooth: hci6: command tx timeout
[  119.942374] Bluetooth: hci3: command tx timeout
[  119.943219] Bluetooth: hci4: command tx timeout
[  120.006953] Bluetooth: hci7: command tx timeout
[  120.070003] Bluetooth: hci2: command tx timeout
[  120.200094] Bluetooth: hci5: command tx timeout
[  121.669740] Bluetooth: hci0: command tx timeout
[  121.733767] Bluetooth: hci1: command tx timeout
[  121.925756] Bluetooth: hci6: command tx timeout
[  121.989749] Bluetooth: hci4: command tx timeout
[  121.990236] Bluetooth: hci3: command tx timeout
[  122.053767] Bluetooth: hci7: command tx timeout
[  122.117778] Bluetooth: hci2: command tx timeout
[  122.245807] Bluetooth: hci5: command tx timeout
[  176.274425] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  176.276889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  176.278619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  176.282927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  176.285970] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  176.440185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.444268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.448847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.457478] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.463159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.469122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.473324] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.479586] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.485257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.490129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.554338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.559227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.565489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.570623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  176.599747] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  176.613271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  176.631305] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  176.639237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  176.654734] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  176.662531] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  176.673197] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  176.680356] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  176.680577] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  176.695270] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  176.697273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  176.701818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  176.706630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  176.765946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  176.768304] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  176.772003] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  176.776923] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  176.782146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  176.786699] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  176.797564] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  176.807817] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  178.373769] Bluetooth: hci0: command tx timeout
[  178.565874] Bluetooth: hci2: command tx timeout
[  178.566862] Bluetooth: hci1: command tx timeout
[  178.693782] Bluetooth: hci3: command tx timeout
[  178.821803] Bluetooth: hci6: command tx timeout
[  178.886752] Bluetooth: hci4: command tx timeout
[  178.949878] Bluetooth: hci7: command tx timeout
[  178.950164] Bluetooth: hci5: command tx timeout
[  180.422004] Bluetooth: hci0: command tx timeout
[  180.614737] Bluetooth: hci1: command tx timeout
[  180.615253] Bluetooth: hci2: command tx timeout
[  180.741818] Bluetooth: hci3: command tx timeout
[  180.869784] Bluetooth: hci6: command tx timeout
[  180.933870] Bluetooth: hci4: command tx timeout
[  180.997813] Bluetooth: hci5: command tx timeout
[  180.998289] Bluetooth: hci7: command tx timeout
[  182.470791] Bluetooth: hci0: command tx timeout
[  182.663214] Bluetooth: hci2: command tx timeout
[  182.663267] Bluetooth: hci1: command tx timeout
[  182.789799] Bluetooth: hci3: command tx timeout
[  182.918851] Bluetooth: hci6: command tx timeout
[  182.983709] Bluetooth: hci4: command tx timeout
[  183.045859] Bluetooth: hci7: command tx timeout
[  183.046907] Bluetooth: hci5: command tx timeout
[  184.518080] Bluetooth: hci0: command tx timeout
[  184.709941] Bluetooth: hci2: command tx timeout
[  184.712957] Bluetooth: hci1: command tx timeout
[  184.838916] Bluetooth: hci3: command tx timeout
[  184.966753] Bluetooth: hci6: command tx timeout
[  185.030712] Bluetooth: hci4: command tx timeout
[  185.096161] Bluetooth: hci5: command tx timeout
[  185.096382] Bluetooth: hci7: command tx timeout
[  239.072069] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  239.073734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  239.078296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  239.092177] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  239.097023] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  239.127448] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  239.147048] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  239.150583] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  239.155371] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  239.155618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  239.172637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  239.175913] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  239.181340] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  239.200578] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  239.203801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  239.270964] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  239.276258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  239.291376] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  239.300948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  239.311375] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  239.403094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  239.407445] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  239.409357] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  239.418999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  239.425903] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  239.434406] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  239.440899] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  239.458280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  239.486215] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  239.501591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  239.504065] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  239.510158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  239.515132] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  239.544406] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  239.585042] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  239.619053] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  239.731086] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  239.734389] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  239.762594] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  239.808131] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  241.158085] Bluetooth: hci0: command tx timeout
[  241.222014] Bluetooth: hci1: command tx timeout
[  241.285795] Bluetooth: hci2: command tx timeout
[  241.353715] Bluetooth: hci3: command tx timeout
[  241.479025] Bluetooth: hci4: command tx timeout
[  241.608740] Bluetooth: hci5: command tx timeout
[  241.670038] Bluetooth: hci6: command tx timeout
[  241.926707] Bluetooth: hci7: command tx timeout
[  243.206950] Bluetooth: hci0: command tx timeout
[  243.271147] Bluetooth: hci1: command tx timeout
[  243.333850] Bluetooth: hci2: command tx timeout
[  243.397916] Bluetooth: hci3: command tx timeout
[  243.527998] Bluetooth: hci4: command tx timeout
[  243.655547] Bluetooth: hci5: command tx timeout
[  243.717756] Bluetooth: hci6: command tx timeout
[  243.974708] Bluetooth: hci7: command tx timeout
[  245.255684] Bluetooth: hci0: command tx timeout
[  245.317950] Bluetooth: hci1: command tx timeout
[  245.381737] Bluetooth: hci2: command tx timeout
[  245.446060] Bluetooth: hci3: command tx timeout
[  245.573754] Bluetooth: hci4: command tx timeout
[  245.702690] Bluetooth: hci5: command tx timeout
[  245.765774] Bluetooth: hci6: command tx timeout
[  246.022070] Bluetooth: hci7: command tx timeout
[  247.302770] Bluetooth: hci0: command tx timeout
[  247.366792] Bluetooth: hci1: command tx timeout
[  247.429739] Bluetooth: hci2: command tx timeout
[  247.493831] Bluetooth: hci3: command tx timeout
[  247.622305] Bluetooth: hci4: command tx timeout
[  247.749760] Bluetooth: hci5: command tx timeout
[  247.813725] Bluetooth: hci6: command tx timeout
[  248.070774] Bluetooth: hci7: command tx timeout
[  301.406813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  301.411951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  301.415098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  301.427972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  301.434867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  301.546285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  301.554325] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  301.557385] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  301.560416] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  301.563455] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  301.572534] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  301.576716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  301.579050] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  301.615930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  301.627381] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  301.746893] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  301.762162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  301.768366] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  301.796036] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  301.812439] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  301.817297] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  301.820190] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  301.822644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  301.824878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  301.826697] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  301.848253] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  301.853700] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  301.857232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  301.885631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  301.889941] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  301.892377] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  301.904628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  301.908035] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  301.912762] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  301.914331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  301.922181] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  301.941729] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  301.965278] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  302.033463] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  302.051928] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  303.495159] Bluetooth: hci0: command tx timeout
[  303.624804] Bluetooth: hci1: command tx timeout
[  303.686736] Bluetooth: hci2: command tx timeout
[  303.941735] Bluetooth: hci3: command tx timeout
[  304.005782] Bluetooth: hci5: command tx timeout
[  304.005880] Bluetooth: hci4: command tx timeout
[  304.070797] Bluetooth: hci6: command tx timeout
[  304.197847] Bluetooth: hci7: command tx timeout
[  305.543792] Bluetooth: hci0: command tx timeout
[  305.670799] Bluetooth: hci1: command tx timeout
[  305.734027] Bluetooth: hci2: command tx timeout
[  305.989997] Bluetooth: hci3: command tx timeout
[  306.053888] Bluetooth: hci5: command tx timeout
[  306.054978] Bluetooth: hci4: command tx timeout
[  306.117733] Bluetooth: hci6: command tx timeout
[  306.247096] Bluetooth: hci7: command tx timeout
[  307.590770] Bluetooth: hci0: command tx timeout
[  307.718169] Bluetooth: hci1: command tx timeout
[  307.783032] Bluetooth: hci2: command tx timeout
[  308.038942] Bluetooth: hci3: command tx timeout
[  308.101743] Bluetooth: hci4: command tx timeout
[  308.101797] Bluetooth: hci5: command tx timeout
[  308.168110] Bluetooth: hci6: command tx timeout
[  308.295699] Bluetooth: hci7: command tx timeout
[  309.639279] Bluetooth: hci0: command tx timeout
[  309.766862] Bluetooth: hci1: command tx timeout
[  309.829752] Bluetooth: hci2: command tx timeout
[  310.086725] Bluetooth: hci3: command tx timeout
[  310.149890] Bluetooth: hci4: command tx timeout
[  310.149926] Bluetooth: hci5: command tx timeout
[  310.213744] Bluetooth: hci6: command tx timeout
[  310.344880] Bluetooth: hci7: command tx timeout
[  363.811551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  363.819178] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  363.826489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  363.836926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  363.844309] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  363.892041] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  363.898065] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  363.900464] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  363.913948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  363.918579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  364.012484] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  364.020210] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  364.030230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  364.062151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  364.068295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  364.125901] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  364.150340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  364.164233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  364.177343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  364.203185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  364.349328] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  364.355178] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  364.361452] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  364.365563] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  364.368606] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  364.375212] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  364.389140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  364.390123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  364.392618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  364.398198] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  364.404913] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  364.409123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  364.411187] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  364.427157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  364.429460] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  364.433572] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  364.439640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  364.458033] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  364.476136] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  364.480017] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  365.894818] Bluetooth: hci0: command tx timeout
[  365.957760] Bluetooth: hci1: command tx timeout
[  366.150739] Bluetooth: hci2: command tx timeout
[  366.341756] Bluetooth: hci3: command tx timeout
[  366.469799] Bluetooth: hci7: command tx timeout
[  366.534837] Bluetooth: hci5: command tx timeout
[  366.535620] Bluetooth: hci4: command tx timeout
[  366.597828] Bluetooth: hci6: command tx timeout
[  367.942127] Bluetooth: hci0: command tx timeout
[  368.008188] Bluetooth: hci1: command tx timeout
[  368.198504] Bluetooth: hci2: command tx timeout
[  368.391239] Bluetooth: hci3: command tx timeout
[  368.518791] Bluetooth: hci7: command tx timeout
[  368.582989] Bluetooth: hci4: command tx timeout
[  368.583487] Bluetooth: hci5: command tx timeout
[  368.647889] Bluetooth: hci6: command tx timeout
[  369.991730] Bluetooth: hci0: command tx timeout
[  370.054047] Bluetooth: hci1: command tx timeout
[  370.245943] Bluetooth: hci2: command tx timeout
[  370.437728] Bluetooth: hci3: command tx timeout
[  370.569039] Bluetooth: hci7: command tx timeout
[  370.629809] Bluetooth: hci4: command tx timeout
[  370.630369] Bluetooth: hci5: command tx timeout
[  370.694828] Bluetooth: hci6: command tx timeout
[  372.040046] Bluetooth: hci0: command tx timeout
[  372.101742] Bluetooth: hci1: command tx timeout
[  372.294723] Bluetooth: hci2: command tx timeout
[  372.485764] Bluetooth: hci3: command tx timeout
[  372.614985] Bluetooth: hci7: command tx timeout
[  372.678851] Bluetooth: hci5: command tx timeout
[  372.679322] Bluetooth: hci4: command tx timeout
[  372.743097] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
03:54:18  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=ffffffff81353e1d RDI=fffffbfff0b83978 RBP=ffffffff85c1cbc0 RSP=ffff88803487f450
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6bd R11=00000000000232f5
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88803487f548
RIP=ffffffff84b66c40 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0d8c938540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe5a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055792f6774c8 CR3=000000001c4d1000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff81a7bcb7 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888016cf7a01
RSI=ffff888016cf7a48 RDI=ffff888016cf7a48 RBP=ffff888016cf7650 RSP=ffff888016cf7588
R8 =ffffffff8687b72a R9 =ffff888016cf7638 R10=000000000003b6bd R11=0000000000025b4c
R12=ffff888016cf7658 R13=ffff888016cf7640 R14=ffff888016cf7a50 R15=ffff888016cf75f8
RIP=ffffffff8135490d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f3ed401f540 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3ed41ba4a1 CR3=0000000030ef5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff
XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000