Warning: Permanently added '[localhost]:58654' (ECDSA) to the list of known hosts.
2025/06/05 05:18:11 fuzzer started
2025/06/05 05:18:12 dialing manager at localhost:42669
syzkaller login: [  100.265942] cgroup: Unknown subsys name 'net'
[  100.416989] cgroup: Unknown subsys name 'cpuset'
[  100.460114] cgroup: Unknown subsys name 'rlimit'
2025/06/05 05:18:35 syscalls: 218
2025/06/05 05:18:35 code coverage: enabled
2025/06/05 05:18:35 comparison tracing: enabled
2025/06/05 05:18:35 extra coverage: enabled
2025/06/05 05:18:35 setuid sandbox: enabled
2025/06/05 05:18:35 namespace sandbox: enabled
2025/06/05 05:18:35 Android sandbox: enabled
2025/06/05 05:18:35 fault injection: enabled
2025/06/05 05:18:35 leak checking: enabled
2025/06/05 05:18:35 net packet injection: enabled
2025/06/05 05:18:35 net device setup: enabled
2025/06/05 05:18:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/05 05:18:35 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/05 05:18:35 USB emulation: enabled
2025/06/05 05:18:35 hci packet injection: enabled
2025/06/05 05:18:35 wifi device emulation: enabled
2025/06/05 05:18:35 802.15.4 emulation: enabled
2025/06/05 05:18:35 fetching corpus: 0, signal 0/0 (executing program)
2025/06/05 05:18:37 starting 8 fuzzer processes
05:18:37 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0}, './file1\x00'})
r3 = socket$inet(0x2, 0x2, 0x9)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x5, 0x80)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r5, 0x104, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x2}}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x431}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x24}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xb8}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x81}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x24000004)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r8=>r3, {0x6}}, './file1\x00'})
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000440)={'filter\x00', 0x0, 0x3, 0x18, [0x6f6bba17, 0x7fffffff, 0xffffffffffffff5e, 0x4, 0x10001, 0x80000001], 0x3, &(0x7f00000003c0)=[{}, {}, {}], &(0x7f0000000400)=""/24}, &(0x7f00000004c0)=0x78)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'})
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r8)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x14100040}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r9, 0x100, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r10 = fsmount(r0, 0x0, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f0000000680)=0x81)
setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000006c0)="fc091ea9e6cc7b8efa99322d754c6721c81edf99c965fa661137fb6190550631b907d9ef86c20a2221d86451177c33a8c0e8f70ae396a3a6d1e112b1c757477aac5f5025de0f9e758f4ba843a1eb01de09662de14f315af3fff17c", 0x5b)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000780)={{0x1, 0x1, 0x18}, './file0\x00'})

05:18:37 executing program 1:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0xc04c054}, 0x4000)
r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0xffff, 0x20000)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r2=>0x0, 0x29, 0x40, 0x71, 0x8, 0x12, @mcast2, @mcast2, 0x700, 0x80, 0x0, 0x6}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1b8, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000500)={'wg1\x00', <r4=>0x0})
r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x7fff, 0x22000)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r6=>r5, {0x81}}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001900)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001a40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0x88, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x65cc91e8780544d3}, 0x10010804)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001ac0)={'wg1\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001b00)={'wg2\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001b40)={'batadv0\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000001d40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b80)={0x174, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x174}, 0x1, 0x0, 0x0, 0xc0}, 0x2040000)
r12 = accept4$bt_l2cap(r6, &(0x7f0000001d80), &(0x7f0000001dc0)=0xe, 0x0)
getpeername(r12, &(0x7f0000001e00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001e80)=0x80)
r13 = accept4$inet(r1, &(0x7f0000001ec0)={0x2, 0x0, @initdev}, &(0x7f0000001f00)=0x10, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000001f40)={'wlan1\x00'})

05:18:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r1, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3f}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0x4]}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x20000, 0x10000]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x84}, 0x1, 0x0, 0x0, 0x10081}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0, {0xffff}}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe8, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x48, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8801}, 0x80)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2b}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4)
socketpair(0x1a, 0xa, 0x1, &(0x7f0000000d00)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d80)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x64, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xa1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xf8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x82}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x24008010)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000010c0)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000001180)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x61c}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008}, 0x4000090)
pipe(&(0x7f00000011c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_SURVEY(r8, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x40, 0x6b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4001)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f0000001340)={{0x1, 0x1, 0x18, <r11=>r9, {r9}}, './file0\x00'})
sendmsg$BATADV_CMD_SET_HARDIF(r11, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x54, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x860}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x4)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x30, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004050}, 0x80)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001)

05:18:37 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x100}}, './file0\x00'})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001440)={<r1=>0x0, @broadcast, @initdev}, &(0x7f0000001480)=0xc)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000014c0)={<r2=>0x0, @broadcast, @multicast2}, &(0x7f0000001500)=0xc)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x44, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048010}, 0xc040)
mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4010, r0, 0x3f)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000001640)="c0cb6d78e6011a67dc1447c97b4f5dcf73fe2a91ce1a9d00016071028c96e35a880f7a27f9250f68648364f5504bb35161748c8eb83d31a1bcb1eb132f7adb4cfb1bb9523a0b8568c5bc688012b724fabb0cb7ad0497dc317b656714e822944f6a45c355736cd968ac7e4f31c75bc33229d7f0eac4a2476ec97acbb8cfb6b0ba87efd07cf20c15918edd21b5cf8359bf0324ff9544cdfd8aaebf084496de00b50e5ed01d7d51dc9d631b0a66ff35f6440c2aa47b7558", 0xb6)
r3 = syz_open_dev$vcsu(&(0x7f0000001d80), 0x200, 0x426c0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000003280)={'ip6gre0\x00', &(0x7f0000003200)={'ip6tnl0\x00', <r4=>r2, 0x4, 0x0, 0x9, 0x3f, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7800, 0x40, 0x58fd, 0xf50a}})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000032c0)={<r5=>0x0, @rand_addr, @multicast2}, &(0x7f0000003300)=0xc)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000003440)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003400)={&(0x7f0000003340)={0x9c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003480)={0x0, @private, @multicast1}, &(0x7f00000034c0)=0xc)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000003500), &(0x7f0000003540)=0x4)
socketpair(0x1e, 0x1, 0xffff, &(0x7f0000003580)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f00000035c0)={'security\x00', 0xc8, "70f06c6e3e5cf4e8bbc23aa71627391e17f8a0bb8f1ea6491df3cf818a2104d9ad50848c12f218b0f624fe28c0e8216c955056091624a56d72c8ece906f2df46dc0ddedf67b360c63c6a6221e9db17f8c228856eaa5be13d705cff9b1c72cbb5e5e82db47f7e7872faa0f5e94b29f02e70fc73e4976cd7585f36892567881b736de339c17b05252782b9dac79ec92403303a6ba59f0f43db19923045abfead0ac3aedc67321c9965850a98b80e6acf54d4deb7a7b9937592d6e51922e49661111fa16f9166785a72"}, &(0x7f00000036c0)=0xec)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000003700)={'filter\x00', 0x0, [0x7, 0x200, 0x7]}, &(0x7f0000003780)=0x44)
r8 = syz_open_dev$vcsu(&(0x7f00000037c0), 0x0, 0x200200)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), r7)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000003900)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r9, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000885}, 0x40)
ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x3f)
read$usbmon(r8, &(0x7f0000003940)=""/240, 0xf0)

[  125.153943] audit: type=1400 audit(1749100717.444:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:18:37 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x800, 0xb2000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r2}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r4, {0x9}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x4000015)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r7=>r2, {<r8=>r1}}, './file0\x00'})
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/timers\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040800}, 0x80)
connect$bt_l2cap(r8, &(0x7f0000000480)={0x1f, 0x8, @none, 0x20, 0x1}, 0xe)
fspick(r8, &(0x7f00000004c0)='./file0/file0/file0\x00', 0x1)
socketpair(0x27, 0x0, 0x2, &(0x7f0000000500))
inotify_init1(0x80000)
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r10=>r5}, './file0/file0\x00'})
ioctl$EVIOCGKEY(r10, 0x80404518, &(0x7f0000000580))
mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd, 0x12, r1, 0x8001)

05:18:37 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
r1 = fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1)
r2 = fsmount(r1, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5a3beab7f6ff65db}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000001}, 0x8085)
getpeername$inet(r2, &(0x7f0000000280)={0x2, 0x0, @multicast1}, &(0x7f00000002c0)=0x10)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r5=>r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r6=>r1}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000340)='batadv_slave_1\x00', &(0x7f0000000380)='./file0\x00', r6)
r7 = syz_open_dev$mouse(&(0x7f0000000400), 0x40, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x94, r8, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x20}, @ETHTOOL_A_RINGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4eaf}]}, 0x94}, 0x1, 0x0, 0x0, 0x84}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r10=>r1, {r5}}, './file0\x00'})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r6)
sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000a80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000700)={0x320, r11, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0xdf, 0x7f, [@rann={0x7e, 0x15, {{0x0, 0x9}, 0xff, 0x4, @device_b, 0x9, 0x0, 0x2}}, @preq={0x82, 0x78, @ext={{}, 0x7, 0xc, 0x9, @broadcast, 0x3, @broadcast, 0x1, 0x0, 0x8, [{{0x0, 0x0, 0x1}, @device_b, 0x7a43}, {{0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @device_b}, {{}, @device_a, 0x4}, {{0x0, 0x0, 0x1}, @device_b, 0x1}, {{0x1}, @device_a, 0x3f}, {{0x0, 0x0, 0x1}, @device_a, 0x6}]}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x81, 0x8}}, @preq={0x82, 0x2b, @ext={{0x1}, 0x0, 0x0, 0xc1a, @broadcast, 0x7, @broadcast, 0xe4c, 0xffffff80, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0x1000}]}}, @dsss={0x3, 0x1, 0xb8}, @dsss={0x3, 0x1, 0x84}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x27, 0x78, 0x5}}, @cf={0x4, 0x6, {0x1f, 0x1, 0x32, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0x224, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x100, 0x3, "49e6bceeb390d05d651536aadb675a005ed84a58489a54b964b65fbf7c474cd7fc3e1f21b679ea7586f0a70a7480c1e42ca5e290163130924178f5db8ab5cd3b5d68d98878e068dfaf7de5aec21b66a522547ce85d06290f057bb88d0cd6cc690a85ab718caff3e8a73c445bd388fe78c5b67a7c1ec8c5b620c95d8750f1a24fc72364bead5bc07c97f1fee71f3f2cc33f2168a17cafba105b5c32d883e124a05b80aa75cf9b0afcc574eec4bf63fefccc4403aa9e369a3b41d41801a73528800112fc73b3a486512e860f66326041a9c369b8915b3f0c453b3cc1c9a6d5d99928fb37d3dd1ed9acb9924ff2c43ac0af973c5f758ac4099eed598e33"}, @NL80211_FTM_RESP_ATTR_LCI={0xbb, 0x2, "9069189162ae5458cb5e37d78e048e121acae64b3414c3246caf5ed0f1f7ba36af1948b7d1fcbc6239c0f43fda495a40fb28d7b3971d37e9c82e4db4042d32f57a086d3e837061c1909cbd369e16734ee2fdb8f147c4338b8c9fc8731be950f93b2735ebd3495f089ad28716a172f621bfa4c49775cae3f1e7836625c6fadfab72c66c4b61f700cdf606374db511fd7869649a79d4b19215156a08ebd23114261760f8bf8aa7f7a6af19d6bd96cc1cac7c63fca0bd2754"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x62, 0x3, "70a1dd755dd3cf0d9311ad796c081d6e6ad3fe5faa2991ff15e032550a1340e2f8e8a0e5492c084bdb9e658e0e71bc51e92decfede41ec9170d40df16ae17f8a0ce278625e62bf0f770baa08808092060a038d6230ecf5323bafe07a0384"}]}]}, 0x320}, 0x1, 0x0, 0x0, 0xeec0ccda8fe78f62}, 0x4000)
pipe(&(0x7f0000000ac0)={<r12=>0xffffffffffffffff})
r13 = syz_open_dev$usbmon(&(0x7f0000000b00), 0x88bf, 0x10400)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r12, 0xc0189378, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r10, {r13}}, './file0\x00'})

05:18:37 executing program 6:
arch_prctl$ARCH_GET_CPUID(0x1011)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {<r3=>0xffffffffffffffff}}, './file0\x00'})
r4 = fsmount(0xffffffffffffffff, 0x0, 0x2)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file0\x00'})
r6 = syz_open_dev$vcsu(&(0x7f0000000380), 0x1000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r7=>r1, {<r8=>r6}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r7, {<r9=>r2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r8}, './file0\x00'})
setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000480)={{0x3c, @broadcast, 0x4e21, 0x4, 'ovf\x00', 0x8, 0x14df, 0x12}, {@empty, 0x4e21, 0x1, 0x7, 0xfeb, 0x8001}}, 0x44)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r2)
r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x141000, 0x0)
r12 = accept$inet(r9, 0x0, &(0x7f00000005c0))
ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000000600)={{0x1, 0x1, 0x18, r12}, './file1\x00'})
r13 = syz_open_dev$mouse(&(0x7f0000000640), 0x80000000, 0x40)
sendmsg$BATADV_CMD_SET_HARDIF(r13, &(0x7f0000000800)={&(0x7f0000000680), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r10, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c801)

05:18:37 executing program 7:
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/103, 0x67})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/76, 0x4c})
getpeername(r0, &(0x7f0000000240)=@l2={0x1f, 0x0, @none}, &(0x7f00000002c0)=0x80)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x1}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000840)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x10be03)
syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xa0058)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x800)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffeffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x18b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000851}, 0x8000)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r1)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r3, 0x300, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40088c0}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000880)={'wg1\x00', <r4=>0x0})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000008c0)={<r5=>0x0, @initdev, @broadcast}, &(0x7f0000000900)=0xc)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x9c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x9}, @ETHTOOL_A_COALESCE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xfffffff7}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3ff}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x45}, 0x20000000)

[  126.675287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.679110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.685788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.700107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.704067] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.753191] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.755867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.758554] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.766258] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.774644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.817737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  126.823356] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  126.828316] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  126.840554] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  126.852548] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  126.855639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  126.861019] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  126.865910] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  126.893204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  126.896093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  126.913709] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  126.921955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  126.921959] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  126.928341] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  126.932275] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  126.939456] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  126.949194] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  126.962301] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  126.992315] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  126.994660] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  126.994688] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  126.999028] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  127.001489] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  127.020977] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  127.034138] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  127.061803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  127.065750] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  127.096922] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  127.106704] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  127.157910] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  128.756092] Bluetooth: hci0: command tx timeout
[  128.821690] Bluetooth: hci1: command tx timeout
[  128.948166] Bluetooth: hci3: command tx timeout
[  129.011616] Bluetooth: hci6: command tx timeout
[  129.075815] Bluetooth: hci2: command tx timeout
[  129.076312] Bluetooth: hci4: command tx timeout
[  129.140049] Bluetooth: hci5: command tx timeout
[  129.331533] Bluetooth: hci7: command tx timeout
[  130.804452] Bluetooth: hci0: command tx timeout
[  130.869724] Bluetooth: hci1: command tx timeout
[  130.995664] Bluetooth: hci3: command tx timeout
[  131.060508] Bluetooth: hci6: command tx timeout
[  131.123486] Bluetooth: hci4: command tx timeout
[  131.123971] Bluetooth: hci2: command tx timeout
[  131.187532] Bluetooth: hci5: command tx timeout
[  131.379470] Bluetooth: hci7: command tx timeout
[  132.852471] Bluetooth: hci0: command tx timeout
[  132.915984] Bluetooth: hci1: command tx timeout
[  133.043541] Bluetooth: hci3: command tx timeout
[  133.107720] Bluetooth: hci6: command tx timeout
[  133.171721] Bluetooth: hci2: command tx timeout
[  133.171938] Bluetooth: hci4: command tx timeout
[  133.238468] Bluetooth: hci5: command tx timeout
[  133.428464] Bluetooth: hci7: command tx timeout
[  134.900523] Bluetooth: hci0: command tx timeout
[  134.964477] Bluetooth: hci1: command tx timeout
[  135.093446] Bluetooth: hci3: command tx timeout
[  135.156809] Bluetooth: hci6: command tx timeout
[  135.219688] Bluetooth: hci4: command tx timeout
[  135.222432] Bluetooth: hci2: command tx timeout
[  135.283503] Bluetooth: hci5: command tx timeout
[  135.475572] Bluetooth: hci7: command tx timeout
[  189.134318] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.143142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.145827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.160999] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.170274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.264177] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  189.285009] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  189.286862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  189.293069] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.298994] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.301737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.302922] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  189.310823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  189.317514] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  189.323129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  189.334928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  189.336738] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  189.341102] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  189.342961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  189.344105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  189.345663] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  189.346642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  189.347702] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  189.350191] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  189.355502] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  189.361504] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  189.361571] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  189.364403] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  189.368888] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  189.372664] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  189.383506] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  189.389426] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  189.391736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  189.401588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  189.437411] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  189.449809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  189.503157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  189.506237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  189.540897] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  189.555299] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  191.221693] Bluetooth: hci0: command tx timeout
[  191.412881] Bluetooth: hci6: command tx timeout
[  191.476861] Bluetooth: hci4: command tx timeout
[  191.477037] Bluetooth: hci3: command tx timeout
[  191.478049] Bluetooth: hci1: command tx timeout
[  191.539569] Bluetooth: hci2: command tx timeout
[  191.667565] Bluetooth: hci5: command tx timeout
[  191.859869] Bluetooth: hci7: command tx timeout
[  193.267497] Bluetooth: hci0: command tx timeout
[  193.459524] Bluetooth: hci6: command tx timeout
[  193.523654] Bluetooth: hci1: command tx timeout
[  193.526487] Bluetooth: hci3: command tx timeout
[  193.527025] Bluetooth: hci4: command tx timeout
[  193.587590] Bluetooth: hci2: command tx timeout
[  193.715526] Bluetooth: hci5: command tx timeout
[  193.907635] Bluetooth: hci7: command tx timeout
[  195.315459] Bluetooth: hci0: command tx timeout
[  195.509576] Bluetooth: hci6: command tx timeout
[  195.571497] Bluetooth: hci4: command tx timeout
[  195.571620] Bluetooth: hci1: command tx timeout
[  195.571957] Bluetooth: hci3: command tx timeout
[  195.635753] Bluetooth: hci2: command tx timeout
[  195.763644] Bluetooth: hci5: command tx timeout
[  195.955468] Bluetooth: hci7: command tx timeout
[  197.363451] Bluetooth: hci0: command tx timeout
[  197.555430] Bluetooth: hci6: command tx timeout
[  197.619499] Bluetooth: hci1: command tx timeout
[  197.619558] Bluetooth: hci3: command tx timeout
[  197.620009] Bluetooth: hci4: command tx timeout
[  197.683592] Bluetooth: hci2: command tx timeout
[  197.812253] Bluetooth: hci5: command tx timeout
[  198.003837] Bluetooth: hci7: command tx timeout
[  251.403928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  251.407660] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  251.410627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  251.422080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  251.428758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  251.491346] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  251.500630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  251.520881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  251.545462] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  251.550939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  251.630051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  251.637014] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  251.641863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  251.654353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  251.658886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  251.729304] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  251.738740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  251.754938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  251.761228] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  251.766359] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  251.772814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.778314] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  251.795797] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  251.797994] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  251.800840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  251.811258] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  251.813823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  251.821355] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  251.826685] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  251.845114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  251.847143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  251.849857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  251.854829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  251.861939] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  251.866975] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  251.910712] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  251.914995] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  251.917167] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  251.929080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  251.937231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  253.491666] Bluetooth: hci0: command tx timeout
[  253.619458] Bluetooth: hci1: command tx timeout
[  253.683439] Bluetooth: hci2: command tx timeout
[  253.811465] Bluetooth: hci3: command tx timeout
[  253.875461] Bluetooth: hci7: command tx timeout
[  253.939675] Bluetooth: hci6: command tx timeout
[  254.067460] Bluetooth: hci5: command tx timeout
[  254.067527] Bluetooth: hci4: command tx timeout
[  255.541620] Bluetooth: hci0: command tx timeout
[  255.667690] Bluetooth: hci1: command tx timeout
[  255.731940] Bluetooth: hci2: command tx timeout
[  255.860798] Bluetooth: hci3: command tx timeout
[  255.923550] Bluetooth: hci7: command tx timeout
[  255.987904] Bluetooth: hci6: command tx timeout
[  256.115567] Bluetooth: hci5: command tx timeout
[  256.116434] Bluetooth: hci4: command tx timeout
[  257.587864] Bluetooth: hci0: command tx timeout
[  257.715446] Bluetooth: hci1: command tx timeout
[  257.781561] Bluetooth: hci2: command tx timeout
[  257.908736] Bluetooth: hci3: command tx timeout
[  257.972620] Bluetooth: hci7: command tx timeout
[  258.036463] Bluetooth: hci6: command tx timeout
[  258.163448] Bluetooth: hci4: command tx timeout
[  258.163943] Bluetooth: hci5: command tx timeout
[  259.638584] Bluetooth: hci0: command tx timeout
[  259.763470] Bluetooth: hci1: command tx timeout
[  259.828456] Bluetooth: hci2: command tx timeout
[  259.957482] Bluetooth: hci3: command tx timeout
[  260.020450] Bluetooth: hci7: command tx timeout
[  260.085408] Bluetooth: hci6: command tx timeout
[  260.211496] Bluetooth: hci5: command tx timeout
[  260.211518] Bluetooth: hci4: command tx timeout
[  313.479322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  313.482839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  313.487225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  313.494257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  313.499732] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  313.607087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  313.610880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  313.613122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  313.619055] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  313.622786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  313.751243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  313.759578] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  313.762712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  313.776591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  313.783645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  313.908208] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  313.920074] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  313.924864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  313.928905] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  313.935905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  313.938326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  313.941843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  313.945282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  313.966288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  313.976945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  313.993219] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  314.010193] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  314.034643] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  314.055807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  314.056963] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  314.059020] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  314.060751] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  314.062344] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  314.072812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  314.083981] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  314.087688] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  314.100860] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  314.107822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  314.115758] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  314.123345] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  315.572427] Bluetooth: hci0: command tx timeout
[  315.699445] Bluetooth: hci1: command tx timeout
[  315.827554] Bluetooth: hci2: command tx timeout
[  316.019500] Bluetooth: hci4: command tx timeout
[  316.148500] Bluetooth: hci3: command tx timeout
[  316.211503] Bluetooth: hci7: command tx timeout
[  316.212149] Bluetooth: hci6: command tx timeout
[  316.275555] Bluetooth: hci5: command tx timeout
[  317.619432] Bluetooth: hci0: command tx timeout
[  317.747627] Bluetooth: hci1: command tx timeout
[  317.875458] Bluetooth: hci2: command tx timeout
[  318.067632] Bluetooth: hci4: command tx timeout
[  318.196223] Bluetooth: hci3: command tx timeout
[  318.259523] Bluetooth: hci6: command tx timeout
[  318.260055] Bluetooth: hci7: command tx timeout
[  318.323925] Bluetooth: hci5: command tx timeout
[  319.667614] Bluetooth: hci0: command tx timeout
[  319.797600] Bluetooth: hci1: command tx timeout
[  319.923425] Bluetooth: hci2: command tx timeout
[  320.115461] Bluetooth: hci4: command tx timeout
[  320.243430] Bluetooth: hci3: command tx timeout
[  320.307552] Bluetooth: hci6: command tx timeout
[  320.308066] Bluetooth: hci7: command tx timeout
[  320.372507] Bluetooth: hci5: command tx timeout
[  321.715713] Bluetooth: hci0: command tx timeout
[  321.843427] Bluetooth: hci1: command tx timeout
[  321.971605] Bluetooth: hci2: command tx timeout
[  322.164934] Bluetooth: hci4: command tx timeout
[  322.292320] Bluetooth: hci3: command tx timeout
[  322.355455] Bluetooth: hci6: command tx timeout
[  322.355975] Bluetooth: hci7: command tx timeout
[  322.419450] Bluetooth: hci5: command tx timeout
[  376.013533] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.026606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.032029] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.034913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  376.039990] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.045973] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.048885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  376.055238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.058117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.073221] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  376.139448] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  376.145032] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  376.147635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  376.159647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  376.170874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  376.288475] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  376.298922] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  376.321151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  376.338105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  376.350488] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  376.479560] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  376.492433] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  376.524178] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  376.560927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  376.583815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  376.769454] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  376.785918] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  376.816258] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  376.826327] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  376.839010] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  376.842634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  376.844925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  376.851644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  376.855545] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  376.857943] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  376.865086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  376.871175] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  376.876408] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  376.897264] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  376.900834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  378.100648] Bluetooth: hci0: command tx timeout
[  378.164898] Bluetooth: hci1: command tx timeout
[  378.228421] Bluetooth: hci2: command tx timeout
[  378.419491] Bluetooth: hci3: command tx timeout
[  378.675509] Bluetooth: hci5: command tx timeout
[  378.932978] Bluetooth: hci6: command tx timeout
[  378.934018] Bluetooth: hci7: command tx timeout
[  378.995466] Bluetooth: hci4: command tx timeout
[  380.147655] Bluetooth: hci0: command tx timeout
[  380.211533] Bluetooth: hci1: command tx timeout
[  380.275751] Bluetooth: hci2: command tx timeout
[  380.467755] Bluetooth: hci3: command tx timeout
[  380.724251] Bluetooth: hci5: command tx timeout
[  380.981456] Bluetooth: hci6: command tx timeout
[  380.981956] Bluetooth: hci7: command tx timeout
[  381.043443] Bluetooth: hci4: command tx timeout
[  382.195755] Bluetooth: hci0: command tx timeout
[  382.259807] Bluetooth: hci1: command tx timeout
[  382.323464] Bluetooth: hci2: command tx timeout
[  382.515468] Bluetooth: hci3: command tx timeout
[  382.772550] Bluetooth: hci5: command tx timeout
[  383.029503] Bluetooth: hci7: command tx timeout
[  383.029984] Bluetooth: hci6: command tx timeout
[  383.091426] Bluetooth: hci4: command tx timeout
[  384.243749] Bluetooth: hci0: command tx timeout
[  384.307461] Bluetooth: hci1: command tx timeout
[  384.371550] Bluetooth: hci2: command tx timeout
[  384.564707] Bluetooth: hci3: command tx timeout
[  384.819473] Bluetooth: hci5: command tx timeout
[  385.075707] Bluetooth: hci6: command tx timeout
[  385.076209] Bluetooth: hci7: command tx timeout
[  385.139792] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
05:23:40  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff888017257da8 RCX=0000000000000001 RDX=ffff888017258001
RSI=ffff888017257d78 RDI=ffff8880172574c8 RBP=ffff888017250000 RSP=ffff888017257440
R8 =0000000000000001 R9 =ffff8880172574f8 R10=000000000003b6bd R11=000000000002189c
R12=ffff888017257501 R13=ffff888017257500 R14=ffff888017257d78 R15=ffff8880172574b8
RIP=ffffffff84b409d4 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f624be62020 CR3=000000000df44000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000ad0 RBX=00000000206dacf4 RCX=0000000000000009 RDX=0000000000002070
RSI=00007f70178e2ab8 RDI=00000000206dacf4 RBP=0000000000000001 RSP=00007ffc46f0c548
R8 =0000000000000001 R9 =00007f7017c1f440 R10=00007f7017af2480 R11=0000000000000007
R12=00007f70178d0b7c R13=00007f70178e2ab8 R14=0000000000000009 R15=00007f7017be5510
RIP=00007f7017bfd388 RFL=00000212 [----A--] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f70176db540 00000000 00000000
GS =0000 0000000000000000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7017bb4000 CR3=0000000029427000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000004200746163
XMM04=725f646c756f68735f6b636f735f4f49 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000