Warning: Permanently added '[localhost]:28278' (ECDSA) to the list of known hosts.
2025/06/23 06:27:53 fuzzer started
2025/06/23 06:27:53 dialing manager at localhost:33119
syzkaller login: [   93.309685] cgroup: Unknown subsys name 'net'
[   93.470887] cgroup: Unknown subsys name 'cpuset'
[   93.513653] cgroup: Unknown subsys name 'rlimit'
2025/06/23 06:28:11 syscalls: 209
2025/06/23 06:28:11 code coverage: enabled
2025/06/23 06:28:11 comparison tracing: enabled
2025/06/23 06:28:11 extra coverage: enabled
2025/06/23 06:28:11 setuid sandbox: enabled
2025/06/23 06:28:11 namespace sandbox: enabled
2025/06/23 06:28:11 Android sandbox: enabled
2025/06/23 06:28:11 fault injection: enabled
2025/06/23 06:28:11 leak checking: enabled
2025/06/23 06:28:11 net packet injection: enabled
2025/06/23 06:28:11 net device setup: enabled
2025/06/23 06:28:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/23 06:28:11 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/23 06:28:11 USB emulation: enabled
2025/06/23 06:28:11 hci packet injection: enabled
2025/06/23 06:28:11 wifi device emulation: enabled
2025/06/23 06:28:11 802.15.4 emulation: enabled
2025/06/23 06:28:12 fetching corpus: 0, signal 0/0 (executing program)
2025/06/23 06:28:13 starting 8 fuzzer processes
06:28:13 executing program 0:
ioctl$CDROM_LOCKDOOR(0xffffffffffffffff, 0x5329, 0x1)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x21}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008094}, 0xa0aa42ae88d20802)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000300)={0x81c, r0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x3c3, 0x33, @mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x20}, @broadcast, @broadcast, @from_mac=@device_b, {0x8, 0xfe1}}, @ver_80211n={0x0, 0x7f81, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x100, 0x4e, @default, @void, @void, [{0xdd, 0xc7, "55e35235a0afd91bba54d307bd93b18366cc344879ffbe069d3ff6dd8b46dfed88e48f54bb90c2a564d6a295f4ddbad10c636db5a1f1e6377d53bb56228ce4b0d58c9637db854b9ab390a575dc682443039ee229ded069cc5c3b02503a63b312a94b345894454452ccbfbc3ca21f92bd6720c6c6db44a6789d2897f5afe5123436686ec52d8dc9784b1cc1160a1bcbe6c84e316e43b8463370f9168328b54526bd36ead408c60bccf90bf92e41115bc8b23c59e59c4e036cf7b1d211e89101218e0178aebb1f9b"}, {0xdd, 0x17, "b370c8abdc73d61c677f100a8d4a68d6980a2705845cc4"}, {0xdd, 0x9c, "0013180d923eb104e8206a75e840939c0ee4f38b389d10d3f5357b8d6de75d76c9ff33a68faef6a3818ed078f0ce53226001f243520f49850bce527ad9dcb1cd73ffc257944dedf1941712b1260387fb926573d95c9026c115eab7e4a4e9bd58c0b6408858184398971d6b38b69034529fae249106aff4af9d0e48ffd2699e701c27ca049777d38b6dafee62473b04b971bb113a0b26776de76a8a02"}, {0xdd, 0xc4, "dffc232c4cecd6af84ddb61a0f80be87719b410b7765521aef14b423f0e7f88a29c29a5f120223b8679e9075da472f3ba184c61cf386162a74a4c4bdbc77a0623cc63160d9b7ada7f041e39b66901bd01807ae5e21513d95457b25be8bd1c72b871f365507eae8118162a74a9e475f722791820629e1673362cd92b05323d7796f81b44b28b101c593e000d89ad9a5c49b2630d2735e23dcc730e0ce4bc36e303b11aa83b59efd1b7040c7c229f4cf3f31d260d8fda5fb50532660a9c700fcf74da5735d"}, {0xdd, 0xd6, "81688284937d2c2d3344335c6c86c5d686de8392adc11c08c6d40178c9dfe6d9b7b2434e92afcc06b1176fda2e68448e545fd24c9d7746d690c04a34607610adbb6c4ba23c9766e79c74d0e35aa99fa82dd210c167f09c16f662f6e7dbbf080bc7f75738f7278eca2268fa2c66bb4d0574f3cb51a21e267c87d0e7c918e9b24352cd93378224dd3d673d816caafd024fa357d65417d1cfffe1fda6d027aa3e1253a060460c87d902356f406669c500006c3937a8cd08d531347bed9d4e0034db957473285b62907dbc15be842143d98413ad24e22267"}, {0xdd, 0x37, "7fbbc16098f91293a5730d53a4672bee41469ef4ec8b36084376c423879aa9373f45eb6e6b3c56ff397391d592079398053198ff965631"}, {0xdd, 0x26, "fd1201648aa3fc436602fc34bc7a086d540b9d8f6f2b27d5f3bc1cee2f5ec28195c86b8c7ed4"}, {0xdd, 0x1c, "32c2b53180e977e4fdc37aced22325bd0ebd07376fd1570287e08023"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x2c, 0x33, @data_frame={@no_qos=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x40}, @random="371e3afc0bb0", @device_b, @device_a, {0x5, 0x20}}, @a_msdu=[{@broadcast, @broadcast, 0x1, 'h'}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x2ee, 0x33, @mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_a, @device_b, @random="2e19e3b1d58f", {0x4, 0x40}}, @ver_80211n={0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x40, @default, 0x100, @void, @void, @val={0x3, 0x1, 0x8}, @val={0x4, 0x6, {0x1c, 0x2, 0x800, 0x81}}, @val={0x6, 0x2, 0x20}, @void, @void, @void, [{0xdd, 0x3e, "b40db46773b99797318949c1c4579c3d162647a5690edbfa5fbb25aefeb3985005d04244aa1abe2d758d8780632d4031fac0eaea7f2deb6f14d2cc96fcdd"}, {0xdd, 0xd0, "e4a824ed47bb57583f0184e44275e100ad86b968651a714f98c35059a04caac5bea2cc2624705bc6715dad335c6bcba990bee1ba825bf44318682ce472bc55c3106a2f3bf0f11c602894d84ba8a89118b36469112b55c321c4292fb755d7b97227a102f374e061a7e041d6f013b7c9399c1b89bf67104b492b68e42cf5278675772696c19edcc09b35aac9e9949add343dfaa8e08b8dafd373b3b6f7b73be007faf901f1dbc6463492224d1664accb5967720bf592f45a6d2fbe3ff8381eb2b39158774d109619cc608aff3eef68ebe4"}, {0xdd, 0x27, "abdabc94ccee03512f18623acd85516e7b5dcbf7e98f1ae72f947c03dc83a4685bdd4c81e2a60d"}, {0xdd, 0xe4, "2a04abc8930d103d3ba8764b419dedff645435c424054ffeb36e1a3c7fc674603c9362d1161ccb83defcdf4c522856f9d9163bf1f9e25deb556f8ee8033e50ed105625d3c6b86cb3867f046dc9a26403acb961732dce90e9a989f113fc15e63c0c3f216f24e2a7c372e2c07ac691843b8ccb39d653990c93ed4c4b60484c9f9d96cb004a6fd4cbcaf7e561a97ca21e5ddbfa886831aadee0fcb5b11caaff5aa9dd4d609fa855d6f96e3e8462cac2812a4f604c9aae07788d81a51bd14a8e38d7c817b267393bcd40a7442ddde88b0b1c1d181c34947232cbd147b0e8253b77b48754920d"}, {0xdd, 0x90, "c2b41db3dd72ad396ab831468d308e3fd5062611f32fba717353393da7334cef4b0e2440e82bb4ba17f328c41de40aa494b36b62ffeb33f3d87f1861ea2c97bfe796e4f763fe441d119d52b9aa77802ba67d3eb705fb50dbee49dee77e36a4fc1b18cafc1568666c911e0a1710be46e558229a51d004c680d8b84d9d09971a154b4002c8f398e0575c1d0deda8288d47"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x7}}, @NL80211_ATTR_FRAME={0xe2, 0x33, @mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x5}, @broadcast, @broadcast, @initial, {0x3, 0x40}}, @ver_80211n={0x0, 0x4, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x21, 0x2, @default, @void, @val={0x2d, 0x1a, {0x1000, 0x2, 0x3, 0x0, {0x9, 0x7, 0x0, 0x7, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0x4}}, [{0xdd, 0x1a, "225cc46456139bd8717b7b62d2fbb52d5d804b6ad80b18f2ddf6"}, {0xdd, 0x67, "d1ed2be457f226628be79182489dfb710a8660ae9795cad3aa1dce83210199e6936df2c5e42cee12c10fe719c8b95a3f48b90c4094ef80de03c4f31025be140fcdac21190be7214383bf006513ec7c9cc2e85d69b9618e13227898dcdda7c2a8c66c3a64c29413"}, {0xdd, 0x19, "28574458ee70d95cdb31b5425d6525a7b07df30d7d0ac83e16"}]}}]}, 0x81c}, 0x1, 0x0, 0x0, 0x800}, 0x40080)
ioctl$CDROMEJECT_SW(0xffffffffffffffff, 0x530f, 0x1)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48050}, 0x4)
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000cc0), 0x10041, 0x0)
ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000d00)={0x2, 0x1f, 0x45, 0x7, 0x5, 0x3f})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001780), 0x400, 0x0)
ioctl$CDROMSEEK(r4, 0x5316, &(0x7f00000017c0)={0x6, 0x81, 0xf7, 0x4, 0x66, 0x7f})
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20044}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xba9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x60000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x45)
setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000001940)={0x3, {{0x2, 0x4e23, @private=0xa010101}}}, 0x88)
r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001a00), 0x30002, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000001a40), 0xffffffffffffffff)
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001a80), 0x480002, 0x0)
ioctl$CDROM_SELECT_SPEED(r6, 0x5322, 0xffffffff80000000)
ioctl$CDROM_NEXT_WRITABLE(r5, 0x5394, &(0x7f0000001ac0))

06:28:13 executing program 1:
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x2a}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x40}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008845)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', <r5=>0x0, 0x2d, 0x8c, 0x75, 0x0, 0x40, @mcast1, @local, 0x7800, 0x80, 0xfffffbff, 0xffff}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x158, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8018}, 0x40001)
r6 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x6, 0xbb, 0x7, 0x4, 0x0, 0x81, 0x2015, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x2, @perf_bp={&(0x7f0000000640), 0x1}, 0x200, 0x400, 0x9, 0x9, 0x7, 0x3, 0x600, 0x0, 0x8000, 0x0, 0x40}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x100010, r6, 0xf7e)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, r0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x1f}, @device_a, @device_a, @initial, {0x2, 0x6}}, @ver_80211n={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x1a, @void}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004080}, 0x800)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x82b}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r1)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xbc, r8, 0x105, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000044}, 0x20004008)
r9 = syz_io_uring_complete(0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r1)
sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r10, 0x200, 0x70bd28, 0xf51, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x417}, 0x81)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f40)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd_index=0x6, 0xd5, &(0x7f0000000f00)=[{&(0x7f0000000dc0)=""/14, 0xe}, {&(0x7f0000000e00)=""/131, 0x83}, {&(0x7f0000000ec0)=""/9, 0x9}], 0x3, 0xa}, 0xfff80000)

06:28:13 executing program 2:
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @local, 0x1, 0x4, [@dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @empty, @rand_addr=0x64010102]}, 0x20)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00')
r1 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10, 0x800)
r2 = accept4$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10, 0x80000)
setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000200)={0x400, {{0x2, 0x4e23, @multicast2}}}, 0x88)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000002c0)=0x1ff, 0x4)
epoll_create1(0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0xffff, 0x8a001)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x99)
r4 = socket$inet(0x2, 0xa, 0x9)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000340)=0x80000000, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000380)={0x40000000})
r5 = socket(0x2b, 0x3, 0x81)
ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f00000003c0))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'})
setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000440)=0x2, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000480), 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg2\x00'})

06:28:13 executing program 3:
r0 = request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffc)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', r0})
r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$search(0xa, r1, &(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x1}, r1)
keyctl$invalidate(0x15, r1)
request_key(&(0x7f0000000240)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='\x00', r0)
r2 = add_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="b66e157ad5e11969e4fe895d9a34068b7c01226b2e560d636fa310225e5a8a08f4accd759c423c759f01faf39148d1856e84c06a71a8f9e34386ab8d7991bf29ffec0b5669e97f1a", 0x48, 0xfffffffffffffffd)
keyctl$revoke(0x3, r2)
r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r2)
keyctl$update(0x2, r3, &(0x7f0000000480)="1d631c0c96397c00d2d58ed56e340557b62a2399eed1f9ed8713123f9f33c03c5f11913bad79e1e0d9f47d5f71524be58599c614c389569052a12ddfbfb7ecb6e8431b7960f70fa71eb41fe73bbbbac93e990b03e5ccf5808a67f7d5f69f4934fb2d19104ed1bba9780d5fceb925e6a7d02b714c5f6743a79a940e90fa2a339888a67c3ee6470e073a9aa308262630995e587b9cac4c14927595fa2fb8cb45c0c987b9ce89cddf6d525fe5dfc24064299a98c13c2133a6ac73ced00733811dbc01a54ad89450b4725643ccc73fca1ec4f82f62e502679efb90a6", 0xda)
r4 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, r0)
keyctl$reject(0x13, r3, 0x0, 0x3, r4)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000600)={r0, 0xaa, 0xa3}, &(0x7f0000000640)={'enc=', 'oaep', ' hash=', {'xcbc-aes-ce\x00'}}, &(0x7f00000006c0)="8462041a53561625f06b627ae4e1a4e98268b2cf952c95f2994931535b37feeb37fdbe61f1529e240b374845fdedb43c30aff777861de7ca0da4eefa455f1df20e23fd3298f63200b5cbd81986a2712d9e5d50e193a8e5f06679f46502590c8e9a72d4f840a731fbe586c9f66cde94c3ed3d6d66d483a9be10bf88cdae2cb9e5511164eda718c4f57d3e04118a4121d83925dfc4d870d0fcb4982088a11e7497cfc48d06de8419f8f07c", &(0x7f0000000780)=""/163)
r5 = add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f00000008c0)='syzkaller\x00', &(0x7f0000000900))
r6 = add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @desc3}, &(0x7f00000009c0)={0x0, "29590dd76b57c88de9e924116e1fd072744011d2eb5cdc8cbe112438518f37e22493099a9289233509be4f9b5f702aebb84d08e8393cc37fe6da961abb8cae8b", 0x1b}, 0x48, r5)
r7 = add_key$fscrypt_provisioning(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x0}, &(0x7f0000000ac0)={0x1, 0x0, @auto=[0x1c, 0x1c, 0x3a, 0x26, 0x1f]}, 0xd, r4)
r8 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "fff12b057b2286e738e0daf23845975a32195776a3c632ebc545d6f4a396584ee272b51075a4b291cc67d0b0ac6581208aea39307f58d9feac142b8ac6f3312b", 0x37}, 0x48, r6)
keyctl$unlink(0x9, r7, r8)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x80, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:udev_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008880}, 0x10)

[  113.488573] audit: type=1400 audit(1750660093.962:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
06:28:13 executing program 4:
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x1})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x6ae80)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r0, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0xff})
ioctl$CDROMRESET(r1, 0x5312)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x3, 0x4)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000100))
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140))
ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000180))
r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x261, 0x66ab00)
setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000200), 0x4)
setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000240)=0x80000000, 0x4)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000280)={0x2, 0x40, "f1d138", 0x56, 0x6})
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000002c0)={0x80, [0x100, 0x3], 0x8}, 0x10)
r5 = getpid()
r6 = getpid()
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x4a00, 0x0)
kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000340)={r3, r3, 0x2})

06:28:14 executing program 5:
r0 = syz_io_uring_complete(0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x9, 0xff, 0x6d, 0x0, 0x0, 0x100, 0x80, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x6, @perf_config_ext={0x0, 0xca38}, 0x40160, 0x8, 0xfffff000, 0x9, 0x5c71, 0x1b8b, 0x7, 0x0, 0x2ec0571c}, 0xffffffffffffffff, 0xf, r0, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x1)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9b)
r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xe7, 0x2, 0xff, 0x8, 0x0, 0x10001, 0x18003, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x1, @perf_config_ext={0xb66, 0x8001}, 0x6468, 0x84, 0x9, 0x5, 0x80000001, 0x562, 0xfffa, 0x0, 0x3, 0x0, 0xfffffffffffff112}, 0xffffffffffffffff, 0x10, r1, 0x1)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x145101, 0x0)
ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000000300)={"72722452e12a9fd5b408be3c", &(0x7f0000000180)="b3ff1ffedefbbfe1bc3aaee61fa9bf73f912bdad5113fb550588fb053171e80629ffcf9e026d7fb459a5ec640d621bbbb62251d2779b979a620dba0cd100376523e19720511944bcd33c85d28332fcf5bca6a810aacd8dc99d4777261f26308cea43a9f85301ecb65111231879c1b99f51728c36791157c7741a72f63fa904e004ed924c76a0ce76abfb107184c806688865fcdeaefc3d7effc1153ea7ae22f947c95f2b53b437b000dc5a9ccae6fb3a2ea10016765b69c56c55102b5a85f437359479dc", 0xc4, 0x8, &(0x7f0000000280)={0x7, 0x1, 0x40, 0xa, 0x0, 0x0, 0x0, "faf0181e", 0x5, "17f77596", 0xfc, 0x80, 0x4, "af7646", "1f05423a43ca1a82b31b49b63b772b2317ec23d7121997629945ac9860620ab1b39c8577cc9e147f8b8e4e54a233"}, 0x1, 0x8, 0x4, &(0x7f00000002c0)})
r4 = perf_event_open(&(0x7f0000000340)={0x7, 0x80, 0x8, 0x7, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x20, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x90, 0x1}, 0x2, 0x296e, 0x3ff, 0x0, 0x0, 0x5, 0x3, 0x0, 0x80000001, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xfffffffffffffe01)
ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000000500)={"c6f8e2188c626bf391ae719d", &(0x7f00000003c0)="321f451e46e6635816454158cb6603ba574c331114cc5b699aed126596cfaa67b3b8688e30eac86d0a98ffbf5d6608c786c223bad6bc564344957a68b0fc82ce79ca31b11b0252e7b1a18b5ada85a9c9f08df6a42ca8ab8f08300bce5099ae27df9c3ad6f0d661780ccd5c4b86b581c01a5871373ee9b28c2e2acf68de3d17ec042910a318499ed5e2b4e9c998a0e1f277f97c995dfa8d62a840a48b", 0x9c, 0x1f, &(0x7f0000000480)={0x1, 0x1, 0x1, 0x7, 0x0, 0x0, 0x0, "7f312fcf", 0x7, "42bebfb8", 0x7a, 0x4, 0x0, "d97696", "0c17c39afc2b8179c96e6d9e27a055c0454b5f3251e9a288d2ac37bc2198d27e92a264b9ae5c98ba27456575e411"}, 0x0, 0x7, 0x83dd, &(0x7f00000004c0)})
ioctl$CDROMSUBCHNL(r3, 0x530b, &(0x7f0000000540)={0x1, 0x9, 0x3, 0x2, 0x40, 0x6, @msf={0xf1, 0x5, 0x40}, @msf={0x0, 0x9, 0xf7}})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x94, r5, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000001, 0x57}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x1000}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xb9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x9}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x51}}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x17}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x9}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xfff7}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xfffffffb}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x3}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x840}, 0x4000094)
r6 = perf_event_open(&(0x7f0000000740)={0x4, 0x80, 0x2, 0x1, 0x3, 0x2, 0x0, 0x3, 0x74300, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x100000000}, 0x128, 0x100, 0x8, 0x2, 0x2, 0x6, 0x72, 0x0, 0x8}, 0x0, 0x9, r4, 0x2)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000800)={0x5, 0x80, 0x0, 0xff, 0x7, 0x11, 0x0, 0x4, 0x12000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={&(0x7f00000007c0)}, 0x1150, 0x6, 0xfff, 0x4, 0x6, 0x9, 0x1, 0x0, 0x5, 0x0, 0x100000000000000})
ioctl$CDROM_SELECT_SPEED(r3, 0x5322, 0x3)
r7 = syz_io_uring_setup(0x26fb, &(0x7f0000000880)={0x0, 0x8dda, 0x2, 0x2, 0x2ac, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x10, r7, 0x0)

06:28:14 executing program 6:
r0 = syz_io_uring_complete(0x0)
ioctl$CDROMSEEK(r0, 0x5316, &(0x7f0000000000)={0x60, 0xfc, 0x3f, 0x2, 0x0, 0x80})
ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0)
keyctl$reject(0x13, 0x0, 0x81, 0x26, 0xfffffffffffffff9)
ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000040))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x4000010, r0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x400)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x40)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x40, 0x0, 0x1, 0x0, 0x0, 0x5, 0x28000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x96b, 0x4, @perf_config_ext={0xe87, 0x5}, 0x40401, 0x6ba1e96a, 0xff, 0x1, 0x7, 0x80000000, 0x8, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xc, 0xffffffffffffffff, 0x8)
keyctl$unlink(0x9, 0x0, 0x0)
r2 = socket(0x21, 0x1, 0x8)
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000042)
syz_genetlink_get_family_id$fou(&(0x7f0000000380), r1)
r3 = epoll_create(0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f00000003c0)={r0, 0xffffffffffffffff, 0x40})

06:28:14 executing program 7:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfc6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', <r1=>0x0})
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x40}, 0x1, 0x0, 0x0, 0x44084}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
r2 = socket(0xf4b588ce83b3ef34, 0x4, 0x1ff)
ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000300)="20560e74a35e65f94e5bbcdd08f1e71df3b32dc80cc035fcdcf598cfc1927cac9220e2a1ee7868151025a37f587332c39ba51593af975884734f2cc146e3")
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x48000)
r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
ioctl$CDROMEJECT_SW(r5, 0x530f, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r3)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r6, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r7 = openat$loop_ctrl(0xffffffffffffff9c, 0xffffffffffffffff, 0x12000, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0xa)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000740), 0x84e82, 0x0)
read$snapshot(r8, &(0x7f0000000780)=""/91, 0x5b)

[  114.702455] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  114.704127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  114.705351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  114.709086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  114.717739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  114.878889] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  114.881985] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  114.883103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  114.885428] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  114.887227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  114.950285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  114.951239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  114.958971] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  114.970667] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  114.973417] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  114.979669] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  114.981404] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  114.982779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  114.998809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  115.005122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  115.104586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  115.137907] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  115.142904] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  115.161896] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  115.181988] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.243650] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  115.244732] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  115.281854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  115.290886] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  115.308439] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  115.319169] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  115.321972] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  115.323483] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  115.326194] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  115.360432] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  115.362852] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  115.384013] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  115.390829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  115.412961] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  115.442997] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  116.790016] Bluetooth: hci0: command tx timeout
[  116.917586] Bluetooth: hci1: command tx timeout
[  117.045725] Bluetooth: hci2: command tx timeout
[  117.046337] Bluetooth: hci3: command tx timeout
[  117.301702] Bluetooth: hci4: command tx timeout
[  117.365624] Bluetooth: hci5: command tx timeout
[  117.493636] Bluetooth: hci7: command tx timeout
[  117.494186] Bluetooth: hci6: command tx timeout
[  118.837573] Bluetooth: hci0: command tx timeout
[  118.965665] Bluetooth: hci1: command tx timeout
[  119.095126] Bluetooth: hci3: command tx timeout
[  119.096042] Bluetooth: hci2: command tx timeout
[  119.349774] Bluetooth: hci4: command tx timeout
[  119.413684] Bluetooth: hci5: command tx timeout
[  119.541706] Bluetooth: hci6: command tx timeout
[  119.542139] Bluetooth: hci7: command tx timeout
[  120.885782] Bluetooth: hci0: command tx timeout
[  121.013576] Bluetooth: hci1: command tx timeout
[  121.141671] Bluetooth: hci2: command tx timeout
[  121.142115] Bluetooth: hci3: command tx timeout
[  121.397869] Bluetooth: hci4: command tx timeout
[  121.462821] Bluetooth: hci5: command tx timeout
[  121.589596] Bluetooth: hci6: command tx timeout
[  121.590028] Bluetooth: hci7: command tx timeout
[  122.933818] Bluetooth: hci0: command tx timeout
[  123.061567] Bluetooth: hci1: command tx timeout
[  123.189943] Bluetooth: hci2: command tx timeout
[  123.190375] Bluetooth: hci3: command tx timeout
[  123.445592] Bluetooth: hci4: command tx timeout
[  123.511012] Bluetooth: hci5: command tx timeout
[  123.637894] Bluetooth: hci7: command tx timeout
[  123.638327] Bluetooth: hci6: command tx timeout
[  177.350107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.356815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.360296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.366281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.370487] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  177.616827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  177.619434] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  177.620584] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  177.622980] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  177.626923] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  177.636588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  177.638174] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  177.643824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  177.647204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  177.653396] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  177.750180] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  177.762221] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  177.763943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  177.770443] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  177.773115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  177.779132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  177.793837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  177.795359] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  177.802768] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  177.804945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  177.872442] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  177.881457] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  177.887182] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  177.899853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  177.907863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  178.012076] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  178.019025] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  178.032265] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  178.039043] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  178.050285] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  178.067944] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  178.071358] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  178.079789] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  178.083187] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  178.112027] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  179.446787] Bluetooth: hci0: command tx timeout
[  179.701626] Bluetooth: hci1: command tx timeout
[  179.765620] Bluetooth: hci2: command tx timeout
[  179.893838] Bluetooth: hci4: command tx timeout
[  179.894628] Bluetooth: hci3: command tx timeout
[  180.021707] Bluetooth: hci5: command tx timeout
[  180.277644] Bluetooth: hci6: command tx timeout
[  180.341613] Bluetooth: hci7: command tx timeout
[  181.493816] Bluetooth: hci0: command tx timeout
[  181.750634] Bluetooth: hci1: command tx timeout
[  181.813822] Bluetooth: hci2: command tx timeout
[  181.941915] Bluetooth: hci4: command tx timeout
[  181.942371] Bluetooth: hci3: command tx timeout
[  182.070665] Bluetooth: hci5: command tx timeout
[  182.325615] Bluetooth: hci6: command tx timeout
[  182.389758] Bluetooth: hci7: command tx timeout
[  183.544026] Bluetooth: hci0: command tx timeout
[  183.799261] Bluetooth: hci1: command tx timeout
[  183.861741] Bluetooth: hci2: command tx timeout
[  183.990174] Bluetooth: hci4: command tx timeout
[  183.991171] Bluetooth: hci3: command tx timeout
[  184.118600] Bluetooth: hci5: command tx timeout
[  184.374954] Bluetooth: hci6: command tx timeout
[  184.437811] Bluetooth: hci7: command tx timeout
[  185.589576] Bluetooth: hci0: command tx timeout
[  185.846644] Bluetooth: hci1: command tx timeout
[  185.909942] Bluetooth: hci2: command tx timeout
[  186.037842] Bluetooth: hci4: command tx timeout
[  186.038325] Bluetooth: hci3: command tx timeout
[  186.166630] Bluetooth: hci5: command tx timeout
[  186.421823] Bluetooth: hci6: command tx timeout
[  186.485815] Bluetooth: hci7: command tx timeout
[  239.564624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  239.572474] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  239.575308] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  239.586216] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  239.595177] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  239.723013] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  239.728121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  239.739249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  239.756126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  239.766111] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  239.840039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  239.844805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  239.855045] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  239.867011] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  239.876412] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  239.941901] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  239.944603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  239.946650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  239.951634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  239.955234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  240.027084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  240.029671] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  240.031654] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  240.033207] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  240.040980] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  240.044358] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  240.049777] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  240.064765] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  240.083238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  240.084895] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  240.128859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  240.131134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  240.138042] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  240.142030] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  240.143766] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  240.155908] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  240.163042] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  240.222717] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  240.242767] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  240.276047] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  241.654056] Bluetooth: hci0: command tx timeout
[  241.845745] Bluetooth: hci1: command tx timeout
[  241.973618] Bluetooth: hci3: command tx timeout
[  241.974280] Bluetooth: hci2: command tx timeout
[  242.165591] Bluetooth: hci4: command tx timeout
[  242.230696] Bluetooth: hci6: command tx timeout
[  242.230904] Bluetooth: hci5: command tx timeout
[  242.422134] Bluetooth: hci7: command tx timeout
[  243.702591] Bluetooth: hci0: command tx timeout
[  243.894633] Bluetooth: hci1: command tx timeout
[  244.021850] Bluetooth: hci2: command tx timeout
[  244.021873] Bluetooth: hci3: command tx timeout
[  244.213634] Bluetooth: hci4: command tx timeout
[  244.277604] Bluetooth: hci5: command tx timeout
[  244.277785] Bluetooth: hci6: command tx timeout
[  244.471762] Bluetooth: hci7: command tx timeout
[  245.749749] Bluetooth: hci0: command tx timeout
[  245.941826] Bluetooth: hci1: command tx timeout
[  246.071554] Bluetooth: hci3: command tx timeout
[  246.072013] Bluetooth: hci2: command tx timeout
[  246.261750] Bluetooth: hci4: command tx timeout
[  246.326078] Bluetooth: hci5: command tx timeout
[  246.326579] Bluetooth: hci6: command tx timeout
[  246.518667] Bluetooth: hci7: command tx timeout
[  247.798598] Bluetooth: hci0: command tx timeout
[  247.990593] Bluetooth: hci1: command tx timeout
[  248.118585] Bluetooth: hci2: command tx timeout
[  248.118636] Bluetooth: hci3: command tx timeout
[  248.309802] Bluetooth: hci4: command tx timeout
[  248.373895] Bluetooth: hci6: command tx timeout
[  248.376522] Bluetooth: hci5: command tx timeout
[  248.565836] Bluetooth: hci7: command tx timeout
[  301.959301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  301.962885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  301.965017] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  301.982389] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  301.989796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  302.165814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  302.171074] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  302.174646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  302.176085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  302.183245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  302.186488] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  302.194419] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  302.199255] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  302.208970] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  302.212316] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  302.372773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  302.377994] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  302.381448] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  302.388352] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  302.409021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  302.473743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  302.480559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  302.488772] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  302.512321] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  302.520294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  302.528993] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  302.531330] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  302.534873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  302.537993] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  302.542258] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  302.545393] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  302.548851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  302.550814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  302.567631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  302.579213] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  302.590036] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  302.592814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  302.603961] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  302.608020] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  302.618883] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  304.055565] Bluetooth: hci0: command tx timeout
[  304.245798] Bluetooth: hci1: command tx timeout
[  304.309583] Bluetooth: hci2: command tx timeout
[  304.501658] Bluetooth: hci3: command tx timeout
[  304.565725] Bluetooth: hci4: command tx timeout
[  304.693687] Bluetooth: hci6: command tx timeout
[  304.695101] Bluetooth: hci7: command tx timeout
[  304.695266] Bluetooth: hci5: command tx timeout
[  306.103589] Bluetooth: hci0: command tx timeout
[  306.293756] Bluetooth: hci1: command tx timeout
[  306.357673] Bluetooth: hci2: command tx timeout
[  306.549896] Bluetooth: hci3: command tx timeout
[  306.615539] Bluetooth: hci4: command tx timeout
[  306.741958] Bluetooth: hci5: command tx timeout
[  306.742375] Bluetooth: hci7: command tx timeout
[  306.742795] Bluetooth: hci6: command tx timeout
[  308.149583] Bluetooth: hci0: command tx timeout
[  308.341633] Bluetooth: hci1: command tx timeout
[  308.406881] Bluetooth: hci2: command tx timeout
[  308.598975] Bluetooth: hci3: command tx timeout
[  308.661693] Bluetooth: hci4: command tx timeout
[  308.789650] Bluetooth: hci6: command tx timeout
[  308.790083] Bluetooth: hci5: command tx timeout
[  308.790687] Bluetooth: hci7: command tx timeout
[  310.200709] Bluetooth: hci0: command tx timeout
[  310.389953] Bluetooth: hci1: command tx timeout
[  310.453623] Bluetooth: hci2: command tx timeout
[  310.646573] Bluetooth: hci3: command tx timeout
[  310.710592] Bluetooth: hci4: command tx timeout
[  310.839571] Bluetooth: hci7: command tx timeout
[  310.840061] Bluetooth: hci6: command tx timeout
[  310.840465] Bluetooth: hci5: command tx timeout
[  364.615706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  364.620853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  364.626275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  364.639981] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  364.645160] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  364.692240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  364.700237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  364.705652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  364.708470] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  364.714417] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  364.722203] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  364.723685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  364.729157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  364.752189] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  364.762139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  364.766783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  364.770376] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  364.791798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  364.816851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  364.822553] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  364.878852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  364.885040] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  364.897109] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  364.907196] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  364.915052] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  364.964469] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  364.972169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  364.976817] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  364.981774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  364.984757] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  364.988060] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  364.990215] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  365.000083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  365.003080] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  365.024047] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  365.038925] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  365.073318] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  365.077124] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  365.116147] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  365.123382] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  366.710383] Bluetooth: hci0: command tx timeout
[  366.839548] Bluetooth: hci2: command tx timeout
[  366.840272] Bluetooth: hci1: command tx timeout
[  366.901745] Bluetooth: hci3: command tx timeout
[  367.029649] Bluetooth: hci5: command tx timeout
[  367.093729] Bluetooth: hci4: command tx timeout
[  367.094808] Bluetooth: hci6: command tx timeout
[  367.285640] Bluetooth: hci7: command tx timeout
[  368.758036] Bluetooth: hci0: command tx timeout
[  368.885642] Bluetooth: hci1: command tx timeout
[  368.886129] Bluetooth: hci2: command tx timeout
[  368.950784] Bluetooth: hci3: command tx timeout
[  369.077839] Bluetooth: hci5: command tx timeout
[  369.142142] Bluetooth: hci4: command tx timeout
[  369.142635] Bluetooth: hci6: command tx timeout
[  369.335248] Bluetooth: hci7: command tx timeout
[  370.806608] Bluetooth: hci0: command tx timeout
[  370.935890] Bluetooth: hci1: command tx timeout
[  370.936374] Bluetooth: hci2: command tx timeout
[  370.999063] Bluetooth: hci3: command tx timeout
[  371.126838] Bluetooth: hci5: command tx timeout
[  371.189841] Bluetooth: hci6: command tx timeout
[  371.190620] Bluetooth: hci4: command tx timeout
[  371.382591] Bluetooth: hci7: command tx timeout
[  372.854065] Bluetooth: hci0: command tx timeout
[  372.981647] Bluetooth: hci2: command tx timeout
[  372.982132] Bluetooth: hci1: command tx timeout
[  373.046603] Bluetooth: hci3: command tx timeout
[  373.174556] Bluetooth: hci5: command tx timeout
[  373.238062] Bluetooth: hci6: command tx timeout
[  373.238676] Bluetooth: hci4: command tx timeout
[  373.430924] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
06:33:21  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff88806ce08e20 RCX=0000000000000002 RDX=ffff88806ce09001
RSI=ffff88806ce08e08 RDI=ffff88806ce08aa8 RBP=ffff88806ce01000 RSP=ffff88806ce08a28
R8 =0000000000000001 R9 =ffff88806ce08ad8 R10=000000000003b53d R11=000000000002491d
R12=ffff88806ce08a01 R13=ffff88806ce08ae0 R14=ffff88806ce08e08 R15=ffff88806ce08a98
RIP=ffffffff81353ffe RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb966416540 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe0600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffce7a90f10 CR3=0000000031570000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffea00001dd980 RBX=ffffea00001dd900 RCX=ffffffff818c816b RDX=ffff888016473700
RSI=ffffffff818c8069 RDI=0000000000000006 RBP=ffffea00001dd980 RSP=ffff888014c0fb40
R8 =0000000000000000 R9 =fffff9400003bb30 R10=00000000000001c2 R11=0000000000000001
R12=0000000000000049 R13=dffffc0000000000 R14=00000000000001c2 R15=0000000000000041
RIP=ffffffff818c8071 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb1471ad540 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe4c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb147213b90 CR3=000000002db9a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f
XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000