Warning: Permanently added '[localhost]:32995' (ECDSA) to the list of known hosts.
2023/08/28 10:11:59 fuzzer started
2023/08/28 10:12:00 dialing manager at localhost:42391
syzkaller login: [  114.760436] cgroup: Unknown subsys name 'net'
[  114.962539] cgroup: Unknown subsys name 'rlimit'
[  127.103296] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2023/08/28 10:12:13 syscalls: 224
2023/08/28 10:12:13 code coverage: enabled
2023/08/28 10:12:13 comparison tracing: enabled
2023/08/28 10:12:13 extra coverage: enabled
2023/08/28 10:12:13 setuid sandbox: enabled
2023/08/28 10:12:13 namespace sandbox: enabled
2023/08/28 10:12:13 Android sandbox: enabled
2023/08/28 10:12:13 fault injection: enabled
2023/08/28 10:12:13 leak checking: enabled
2023/08/28 10:12:13 net packet injection: enabled
2023/08/28 10:12:13 net device setup: enabled
2023/08/28 10:12:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2023/08/28 10:12:13 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/08/28 10:12:13 USB emulation: enabled
2023/08/28 10:12:13 hci packet injection: enabled
2023/08/28 10:12:13 wifi device emulation: enabled
2023/08/28 10:12:13 802.15.4 emulation: enabled
2023/08/28 10:12:13 fetching corpus: 0, signal 0/0 (executing program)
2023/08/28 10:12:15 starting 8 fuzzer processes
10:12:15 executing program 0:
ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/190)
r0 = memfd_secret(0x0)
ioctl$CDROMREADCOOKED(r0, 0x5315, &(0x7f00000000c0))
clock_gettime(0x4, &(0x7f0000000b40))
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000b80)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4}}, './file0\x00'})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x121001, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000f00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x27c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1a4, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xba, 0x2, "3cf74cdb133f3d1fb354351a85c395aeca78eedc4307cb38fbd91ee25aa5bfbd5e3cf04f402c4aff4fc31cae01bdd49fc0c6fb278d34c3182a028b442fa41f82b87f6cdb0512eb89d1ecfca4ff1f18df5d06677c543169a697b42452a7517e6fd21a7ba0c4ec09d3f2a4dac31fb272a8443f155a760187780c91e1b629e9f8fefdc4087f63e3a09be41a024af90af8d6139b3d701ad6c6f7418c1a172189fecd534d45fdf6cafddfec65ebb2936ff1d76333abfc3a60"}, @NL80211_BAND_6GHZ={0x28, 0x3, "e2246e94157004347ed4d497158682b1c6a32d239cdec9e28dd931f2fa8ea8df4324213d"}, @NL80211_BAND_60GHZ={0xc, 0x2, "204b8ad6c712f9f6"}, @NL80211_BAND_2GHZ={0xaf, 0x0, "ccdebb6434c728bdbcf85def9029e1dabc213d75c63a9492000e5364f9a2e1419b6f48c7486a9486e90bffe055ebe96df157c1d193e72ddd2fc69d1dde28f28d249b2bd7e29233d5993cdbc613f69328a5d26752f00357a7657552d70adbaa22efea4fa9fe2575e34fcbad243b01b349aa810ecdcf53307226af7ad6d00851131f59156dd2d5975a563f08a90350ac18966ca4c3dda0fec808ec4c1d9c3d76676560f13795a249cd19302a"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}, {0x8, 0x0, 0x68000000}, {0x8, 0x0, 0x86}, {0x8, 0x0, 0xfffffffd}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x7}, {0x8}]}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0x22, 0x0, @random="837b9ea66de360b583257de7165312ac4b752ca500ac5c5205bf70c10d0f"}, {0xa, 0x0, @default_ibss_ssid}, {0x1c, 0x0, @random="42c9962d8a03967160e8c8f5561d794094fe0787b9f1e5c2"}, {0xa, 0x0, @default_ap_ssid}, {0xd, 0x0, @random="cfe3c704529aebd694"}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}]}, 0x27c}, 0x1, 0x0, 0x0, 0x8050}, 0x48000)
write$P9_RSTATFS(r2, &(0x7f0000000f40)={0x43, 0x9, 0x2, {0x5, 0x36, 0x7, 0x0, 0x4, 0x80000000, 0x5, 0x8000, 0x10000}}, 0x43)
ioctl$CDROMSETSPINDOWN(r1, 0x531e, &(0x7f0000000fc0)=0x8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r3, &(0x7f00000029c0)=[{{&(0x7f0000001000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/207, 0xcf}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f00000011c0), 0x0, &(0x7f0000001200)=""/64, 0x40}, 0x1}, {{&(0x7f0000001240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x80, &(0x7f0000002700)=[{&(0x7f00000012c0)=""/50, 0x32}, {&(0x7f0000001300)=""/215, 0xd7}, {&(0x7f0000001400)}, {&(0x7f0000001440)=""/173, 0xad}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/53, 0x35}, {&(0x7f0000002540)=""/94, 0x5e}, {&(0x7f00000025c0)=""/5, 0x5}, {&(0x7f0000002600)=""/193, 0xc1}], 0x9, &(0x7f00000027c0)=""/122, 0x7a}, 0x19}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002840)=""/224, 0xe0}], 0x1, &(0x7f0000002980)=""/32, 0x20}, 0x100}], 0x4, 0x2100, 0x0)
pipe2$9p(&(0x7f0000002ac0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
write$P9_RREMOVE(r4, &(0x7f0000002b00)={0x7, 0x7b, 0x2}, 0x7)
r5 = memfd_secret(0x0)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)={0x4c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc884)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002c80), 0x2000, 0x0)
read$hiddev(r6, &(0x7f0000002cc0)=""/38, 0x26)
ioctl$HIDIOCGRAWPHYS(r6, 0x80404805, &(0x7f0000002d00))
memfd_secret(0x80000)
sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000002e00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80)

10:12:15 executing program 1:
ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309)
ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x0)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
ioctl$CDROM_LOCKDOOR(0xffffffffffffffff, 0x5329, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0xffffffffffffffff)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f0000000040)={0x235, 0x1})
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f00000000c0)={0x6, 0x6, 0x3, 0x1, @msf={0x7, 0x0, 0x5}, 0x4})
ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x8)
ioctl$DVD_WRITE_STRUCT(r1, 0x5390, &(0x7f0000000100)=@physical={0x0, 0x2, [{0x0, 0xe, 0x7, 0x6, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x8d5f, 0x4}, {0x7, 0x5, 0x8, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, 0x1, 0x1, 0x3, 0x1c}, {0x9, 0x6, 0xd, 0x7, 0x0, 0x1, 0x1, 0xc, 0xc, 0x1, 0x7, 0x3, 0xfff}, {0x4, 0xd, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x9, 0x1, 0x3ff, 0x289, 0xad0}]})
ioctl$CDROM_SELECT_SPEED(r0, 0x5322, 0x3)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000940)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
ioctl$CDROM_GET_CAPABILITY(r2, 0x5331)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x36}}}}, [@NL80211_ATTR_IE={0x56, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @supported_rates={0x1, 0x8, [{0x3, 0x1}, {0x59, 0x1}, {0x9}, {0x4}, {0x48}, {0x24, 0x1}, {0x18}, {0x4, 0x1}]}, @ht={0x2d, 0x1a, {0x4000, 0x1, 0x0, 0x0, {0x0, 0x3, 0x0, 0x2ac}, 0x300, 0x2, 0x3f}}, @prep={0x83, 0x1f, @not_ext={{}, 0x8, 0x20, @device_a, 0x44, "", 0x6, 0x20, @broadcast, 0x401}}, @mesh_chsw={0x76, 0x6, {0x1, 0x0, 0x1a, 0xab0}}]}]}, 0x80}}, 0x4004000)
pipe2$9p(&(0x7f0000000ac0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4000)
write$P9_RRENAMEAT(r3, &(0x7f0000000b00)={0x7, 0x4b, 0x1}, 0x7)
write$P9_RLERROR(r3, &(0x7f0000000b40)={0xe, 0x7, 0x1, {0x5, '+&[-]'}}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000b80)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'})

[  128.720769] audit: type=1400 audit(1693217535.122:6): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:12:15 executing program 2:
ptrace$setsig(0x4203, 0xffffffffffffffff, 0x71, &(0x7f0000000000)={0x2d, 0x3, 0x80})
ptrace$setsig(0x4203, 0x0, 0x3, &(0x7f0000000080)={0x9, 0x3, 0xffff0000})
r0 = getpid()
ptrace$setsig(0x4203, r0, 0x80, &(0x7f0000000100)={0x3d, 0x5e0000, 0x55})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x4b2000, 0x0)
ioctl$CDROM_DEBUG(r1, 0x5330, 0x0)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200)=""/184, 0xb8})
ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2f0, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x30}}}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_TX_RATES={0x2b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x3}, {0x2, 0x7}, {0x5, 0x7}, {0x3, 0x7}, {0x5, 0x9}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x6, 0x3}, {0x2, 0x8}, {0x2, 0x9}, {0x6, 0xa}, {0x5, 0x2}, {0x6, 0x9}, {0x2, 0x5}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x6}, {0x0, 0x5}, {0x0, 0x7}, {0x6}, {0x4, 0x8}, {0x7, 0x5}, {0x7, 0x4}, {0x7, 0x7}, {0x2, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x6, 0x12}, {0x2, 0x1f}, {0x0, 0x6}, {0x1, 0x8}, {0x6, 0x8}, {}, {0x1, 0x8}, {0x7, 0x4}, {0x7, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x1, 0x3}, {0x1, 0xa}, {0x2, 0x4}, {0x4, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0x3}, {0x4, 0x9}, {0x6, 0x1}, {0x7}, {0x5, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x3}, {0x7, 0x8}, {0x5, 0x9}, {0x2, 0x8}, {0x0, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x5}, {0x0, 0x9}, {0x7, 0x3}, {0x6, 0x8}, {0x4, 0x4}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x9}, {0x6, 0x5}, {0x1, 0x3}, {0x0, 0x8}, {0x1}, {0x0, 0x2}, {0x5}, {0x4, 0x9}, {0x2, 0x6}, {0x0, 0x4}, {0x4, 0x5}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x4}]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x0, 0x60, 0x2, 0x48, 0x2, 0x30, 0x1b, 0x3, 0x36, 0x1, 0x4, 0x36, 0x16, 0x9, 0x24, 0x18, 0x5, 0x3, 0x6, 0x2]}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x36, 0x1b, 0x60, 0x30, 0x3, 0x4, 0xb, 0x1, 0x6c, 0x60, 0x12, 0xc, 0x6, 0x4, 0x1b, 0x18, 0xc]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x9}, {0x3, 0x6}, {0x5, 0xa}, {0x6, 0x2}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x2, 0x8}, {0x3, 0x1}, {0x4, 0x6}, {0x0, 0x3}, {0x7, 0x1}, {0x6, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x4, 0x4}, {0x6, 0x2}, {0x4, 0x9}, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0x7}, {0x5, 0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x5}, {0x4, 0x5}, {0x0, 0x3}, {0x5, 0x5}, {0x7, 0x2}, {0x5, 0x1}, {0x6, 0x8}, {0x0, 0x1}, {0x1}, {0x7, 0x5}, {0x6, 0x4}, {0x6, 0x5}, {0x6, 0x8}, {0x2, 0x4}, {0x0, 0x8}, {0x4, 0x4}, {0x4, 0xa}, {0x0, 0x2}, {0x4, 0x4}, {0x4, 0x2}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x5, 0x8}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0x5}, {0x4, 0x9}, {0x0, 0x6}, {0x1}, {0x4, 0xa}, {0x5, 0x2}, {0x6}, {0x1, 0xa}, {0x0, 0x7}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x7}, {0x7, 0x4}, {0x4, 0x1}, {0x1, 0x6}, {0x6, 0x7}, {0x2, 0x8}, {0x3, 0x7}, {0x4, 0xa}, {0x5, 0x6}, {0x4, 0x1}, {0x3, 0x7}, {0x4, 0x4}, {0x4, 0x1}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xf001, 0x4, 0x5, 0x34bc, 0xfffd, 0x2, 0x1]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x2}, {0x7, 0x2}, {0x4, 0x3}, {0x2}, {0x1, 0x7}, {0x2, 0x1}, {0x1, 0x2}, {0x5, 0x2}, {0x0, 0x1}, {0x7, 0x3}, {0x7, 0x7}, {0x0, 0x3}, {0x5, 0x8}, {0x4, 0xa}, {0x1, 0x1}, {0x6, 0x1}, {0x7, 0x3}, {0x5, 0x8}, {0x6, 0x6}, {0x7, 0x2}, {}, {0x5, 0x8}, {0x7, 0x4}, {0x1, 0x9}, {0x7, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x2, 0x2}, {0x2, 0x5}, {0x5, 0x9}, {0x5, 0x5}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x96f0d635f3cd5878}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x7}, {0x6}, {0x1, 0x7}, {0x4, 0x9}, {0x7, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x5}, {0x4, 0x3}, {0x1}, {0x4, 0x8}, {0x6, 0x3}, {0x1, 0x6}, {0x2, 0x4}, {0x1, 0x6}, {0x5, 0xa}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x6}, {0x4, 0x7}, {0x6, 0x6}, {0x3, 0x7}, {0x3, 0x8}, {0x2, 0x1}, {0x5, 0xa}, {0x6, 0x6}, {0x1, 0xa}, {0x7, 0x2}, {0x0, 0x1}, {0x2}, {0x5, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x0, 0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x7, 0x9}, {0x6, 0x3}, {0x6}, {}, {0x5, 0x1}, {0x5, 0x8}, {0x2, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x5, 0x9}, {0x1, 0x2}, {0x6, 0x9}, {0x2}, {0x0, 0x9}, {0x4, 0x7}, {0x7, 0x5}, {0x7, 0x4}, {0x3, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x4}, {0x7, 0x4}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x18, 0x1b, 0x6c, 0x12, 0x6c, 0xc, 0xb, 0x6, 0x6c, 0x6c, 0x1]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x4}, {0x0, 0x2}, {0x5, 0x9}, {0x7, 0x3}, {0x3, 0x5}, {0x4}, {0x1, 0x5}, {0x1, 0x6}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0xa}, {0x5}, {0x0, 0x9}, {0x3, 0x7}, {0x6, 0x1}, {0x5, 0x6}, {0x3, 0x4}, {0x6, 0x1}, {0x6, 0x6}, {0x6, 0xa}, {0x2, 0x1}, {0x6, 0x9}, {0x5, 0x9}, {0x0, 0x5}, {0x2, 0x3}, {0x3, 0x4}, {0x2, 0x9}, {0x5, 0x8}, {0x5, 0x2}, {0x0, 0x6}, {0x4, 0x7}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x5, 0x4}, {0x3, 0x1}, {0x7, 0xa}, {0x1}, {0x6}, {0x2, 0x8}, {0x2, 0x9}, {0x4, 0x6}, {0x5, 0x7}, {0x2, 0x1}, {0x2, 0x4}, {0x6, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x2, 0x2}, {0x5, 0x5}, {0x4, 0x3}, {0x5}, {}, {0x0, 0x5}, {0x3, 0x6}, {0x6, 0x7}, {0x1, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x7}, {0x2, 0x7}, {0x3, 0x9}, {0x3, 0x2}, {0x7, 0x2}, {0x1, 0xa}, {0x4, 0x4}, {0x6, 0x6}, {0x5, 0x3}, {0x2, 0x4}, {0x6, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {}, {0x3, 0x1}, {0x0, 0x4}, {0x1}, {0x3, 0x3}, {0x7, 0x6}, {0x1, 0x9}, {0x3, 0x1}, {0x1, 0x9}, {0x7, 0x1}, {0x7, 0x1}, {0x4}, {0x4, 0x9}, {0x6, 0x8}, {0x5, 0x5}, {0x1}, {0x2, 0x6}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x7, 0x9}, {0x1, 0x4}, {0x2, 0x6}, {0x5, 0x1}, {0x6, 0x7}, {0x5, 0x8}, {0x1}, {0x4, 0xa}, {0x7, 0x3}, {0x2, 0x3}, {0x4, 0x9}, {0x2, 0x12}, {0x5, 0x4}]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3f8, 0x8, 0xff, 0x9, 0x7, 0xffff, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0xfff, 0x815, 0x2, 0x6, 0x3, 0x81, 0x1]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x2}, {0x6, 0x7}, {0x0, 0x4}, {0x4, 0x1}, {0x1}, {0x7, 0x6}, {0x3, 0x6}, {0x3, 0xa}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0x8}, {0x3, 0x2}, {0x4, 0x8}, {0x3, 0x6}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x1}, {0x3, 0x2}, {0x1, 0x6}, {0x5}, {0x1, 0x7}, {0x2, 0x7}, {0x3, 0x6}, {0x7, 0x5}, {0x1, 0x1}, {0x4, 0x6}, {0x6, 0x6}, {0x1}, {0x0, 0x5}, {0x0, 0x9}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x8}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x9}, {0x5, 0x4}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x8}, {0x5, 0x3}, {0x6}, {0x6, 0x5}, {0x0, 0x9}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0xb, 0x3, 0x48, 0x36, 0x60, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x401, 0xb7, 0x2, 0x200, 0x8, 0x9]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5}, {0x1, 0x9}, {0x1, 0x6}, {0x4, 0x1}, {0x4, 0x8}, {0x6, 0x7}, {0x2, 0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x3, 0xa}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x1, 0xa}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x5}, {0x7, 0x5}, {0x2}, {}, {0x6, 0x1}, {0x0, 0x3}, {0x7, 0x6}, {0x6, 0x7}, {0x1, 0x3}]}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x48004}, 0x2000c0c0)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000840)={&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000780)=""/149, 0x95})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x20000, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x48, 0x0, &(0x7f0000000a00)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000940)={@flat=@handle={0x73682a85, 0x10a}, @fda={0x66646185, 0x6, 0x1, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f00000008c0)=""/105, 0x69, 0x2, 0x36}}, &(0x7f00000009c0)={0x0, 0x18, 0x38}}}, @register_looper], 0x1000, 0x0, &(0x7f0000000a80)="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"})
ioctl$CDROMREADAUDIO(r1, 0x530e, &(0x7f0000001b00)={@lba=0xacb, 0x1, 0x18, &(0x7f0000001ac0)=""/24})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000001b40)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
ioctl$CDROM_CLEAR_OPTIONS(r4, 0x5321, 0x2)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001b80)={{0x1, 0x1, 0x18, <r5=>r4, {0x1}}, './file0/file0\x00'})
ioctl$CDROMREADTOCENTRY(r5, 0x5306, &(0x7f0000001bc0)={0x81, 0x4, 0xc, 0x3, @msf={0x0, 0x1}, 0x95})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000001c00)='./binderfs2/binder0\x00', 0x2, 0x0)
write$P9_RWSTAT(r4, &(0x7f0000001c40)={0x7, 0x7f, 0x1}, 0x7)

10:12:15 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, @out_args}, './file0\x00'})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24080}, 0x40)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r1)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0xc8c0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r0, {0x180000}}, './file0\x00'})
ioctl$CDROMGETSPINDOWN(r3, 0x531d, &(0x7f0000000340))
ioctl$CDROMSTART(r1, 0x5308)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0)
ioctl$CDROMREADAUDIO(r4, 0x530e, &(0x7f0000000400)={@msf={0x80, 0xa4}, 0x3, 0x24, &(0x7f00000003c0)=""/36})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x134, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x39}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xfc, 0xbe, "2785fc580292e550b76baf30a813ee7021e225cacc89e0c3516a940f288a66ee5c4e93204b5013b65dda242dab658e24b613f6f5198056755002381186686fac0ddd90c7d5e7c2ebc041d727a0bf1b8b0dcee3da74fe1f16b7c87c04acef8ff9cafa41f5bc43755b4e0e506e98726afac4a43836365b277715c0816718d65f79d379b92a3dc25722c6b6ba23e1db9c9727fc3d306c51c08ba0778c62bc1fe51dbac4550f57ddd36ad97e9372a2b1d9981ea1c2a7a8ad8549cfff4fe45e954d607a5eceb44b1b444d22a60a82048406f584930c428ea696369a27e691d96f8becac593bb7532929abf8739cd6da0bc4ce6ab2c3b1956919b2"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x28c}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000000}, 0x44)
sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f00000006c0)={0x2f8, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x6c}}}}, [@NL80211_ATTR_IE={0x15c, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x94, 0x8, @device_b, 0x4, "", 0x5, 0x0, @device_a, 0xd50}}, @fast_bss_trans={0x37, 0x79, {0xff, 0x1, "0300b343ce31afdbd7259ceed636c704", "44ced36671b0344953b792d0927e4252e77e9e9e9b487a0a7459b8131ab5912e", "08f90f40d945c4b3cb210a46741d4259f9d4d8ba08a2af381a83ce439d5c4240", [{0x3, 0x25, "20c98732edb68926aa7f2b8dc0e01713e6d4a4a4e2e3a4c9ecbd11e05508ae867c23a8ff4f"}]}}, @measure_req={0x26, 0x84, {0x1, 0x3f, 0x2, "fe7e1a6a0cccd7785adfdbc4c08f4367fe3d874c99dce6b5e2b917d355fca84b16d396ae50ebb4f2ae10748632c524fc10733cc2ed87454ed105e35ede521a987f53c32944b38be2ca5f0e6d349ab32ecc2b58f93f217057a18c9aa84a096edc055c158518b07b8aa35011c861a4dfe1a56c7941d5c0bc7b497850b67cdfb7184a"}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @supported_rates={0x1, 0x1, [{0x6c}]}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x20}}, @prep={0x83, 0x25, @ext={{}, 0x5, 0x80, @device_b, 0x1, @device_b, 0x7, 0x140, @broadcast, 0x3ff}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xe, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @challenge={0x10, 0x1, 0x66}, @ibss={0x6, 0x2}]}, @NL80211_ATTR_IE={0x102, 0x2a, [@gcr_ga={0xbd, 0x6}, @challenge={0x10, 0x1, 0x8e}, @ssid={0x0, 0x6, @default_ap_ssid}, @measure_req={0x26, 0xd8, {0x71, 0x1, 0x4, "0dc9dc31597d72f1ac54683c5e7ee6e76d624168701cab657c048ff3cc2e8516f0254fbd32a004034f7c78ae91d0093cc57cefecaa25d4bc142e97defcd13b04aeb8f57f29694a3601aefe25e7c097a17bedb3eecb8d03ce831b07c9b1378536d32e5da45699bc0452cf18f04af360b523b94761c6d435efe00f0a7e4e5870ef80943f92e9d12078edec28fdc62a654d8549f5d03f64b823ddb7ea1234d8267dd7d2a7567c07ac7d4c6c4d0c4f4136f3853787a61a3a27e8569a2fe2a4e819711056d59582ac414bda934a011598d56c62369f5c46"}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x0, 0x81, 0x40}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x5a, 0x2a, [@mic={0x8c, 0x18, {0xdfc, "d5760cfc13d1", @long="d27de982ded7e36bb88cbdc87eee63d7"}}, @ibss={0x6, 0x2, 0x9}, @preq={0x82, 0x36, @ext={{0x1}, 0x6, 0x7, 0x449, @device_b, 0x40, @device_b, 0x5, 0x7, 0x2, [{{0x1, 0x0, 0x1}, @device_b, 0xcb3}, {{0x1}, @broadcast, 0xffffffe1}]}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x20000800}, 0x80)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x989680}, 0x1, 0x0, 0x1}, 0xa1)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x20010, 0xffffffffffffffff, 0x8000000)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x10000000)
syz_io_uring_submit(r6, r7, &(0x7f0000000bc0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x12, 0x3, &(0x7f0000000ac0)="695d6e62de277a71d94db8911cadfa98c0e71af111a36598c28dce0dfd92a7bb25c3649004a429def085b0b4099de4ed0f126169ad80137b63b193c375bd9340414744bbfcc15eb45d8c57a19a0aa9d5a2ec83a2d1c24b8214c082ba9c99de12625ced82b4ab08c6a52a231ef5938bf25c4d394be4860a19bf98b64e8c85e1da6d96ee1086a2c9010863822ab8ec8365ee4c3a8768e83bc81140a1e0c06aab4965f9689009d2fa2c0648ab327794189b21dbd09c02c7913267c79196c5428160c0f8a9ee9e23e88af5d1ee6b8d928b8912eca2fda3715d2b4ab3f33327a7ed16c76df9423c7ccbbb603a10cd6e", 0x200, 0x0, 0x1}, 0x1)
r8 = memfd_secret(0x0)
ioctl$CDROMREADTOCENTRY(r8, 0x5306, &(0x7f0000000c00)={0x6, 0xa, 0x0, 0x1, @msf={0xf8, 0x1, 0x4}, 0x7c})
ioctl$HIDIOCGUCODE(r8, 0xc018480d, &(0x7f0000000c40)={0x2, 0x3, 0x7, 0x7fffffff, 0x3, 0x100})

10:12:15 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf0, r0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20042050}, 0x51)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80081, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x54064)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x20400, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x44}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x28353154}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x800}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x70}, 0x20000010)
ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000500))
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r4=>r3, @out_args}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f00000005c0))
ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000600)=""/7)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x14}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40000)
r6 = memfd_secret(0x0)
write$hidraw(r6, &(0x7f0000000740)="b1188a8aca5422ff6d2e5402bc6b7529950f606ababf40106fac61a9427a74604779d791818d7de69f3fd0bebf961151195d1c03fcca8e1ea509cf4f59e4a7ab73cd43cf6e34477f925e3f831cdf9c2452e97738138aa30a82cf", 0x5a)
write$P9_RREADDIR(r5, &(0x7f00000007c0)={0xa6, 0x29, 0x2, {0x8, [{{0x2, 0x1, 0x3}, 0x7, 0x2, 0x7, './file0'}, {{0x14, 0x2, 0x8}, 0x6, 0x5, 0x7, './file0'}, {{0x0, 0x4, 0x7}, 0x2, 0x4c, 0x7, './file0'}, {{0x8, 0x2, 0x4}, 0xa5d, 0x4, 0x7, './file0'}, {{0x2, 0x2, 0x5}, 0x6, 0x7f, 0x7, './file0'}]}}, 0xa6)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x80, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x1)
mount_setattr(r6, &(0x7f00000009c0)='./file0\x00', 0x9000, &(0x7f0000000a00)={0x100000, 0x1, 0xa0000, {r6}}, 0x20)
ioctl$DVD_WRITE_STRUCT(r6, 0x5390, &(0x7f0000000a40)=@bca={0x3, 0xbc, "94b4d1f3fb9db86cf4179e868efae6e5f96a2510f4a21aba4890d65be98acc7cade33267223edad62325e58588dba57905b3fc1ac1eb45e0a6f57f53324d42a4cad76e2150dd9a47818e827bef15106c573096f814f98e145b72a333af3cc5beca596528db22cee8a861b620d98948980dc70021fb3b8b64d2c5a5ede96a56f4461ce8d00b2940f6e810448cdc9dd5fab1e9db86786149c9ac991bdbd5b3873c917362b603f0d0d7a06fa034768460b1fd1f17c0f44e72b75dc69f65"})

10:12:15 executing program 5:
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x0, 0x0, 0x7}}, 0x14)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080))
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x141, 0x29, 0x1, {0x8, [{{0x10, 0x3, 0x1}, 0x53, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x7}, 0x5, 0x5, 0x7, './file0'}, {{0x4, 0x4, 0x5}, 0x7, 0x3f, 0x7, './file0'}, {{0x0, 0x0, 0x2}, 0x0, 0x33, 0x7, './file0'}, {{0x10, 0x2, 0x5}, 0x20, 0x3f, 0x7, './file0'}, {{0x80, 0x4, 0x6}, 0x4, 0x4, 0x7, './file0'}, {{0x40, 0x4, 0x4}, 0x8, 0x9, 0x7, './file0'}, {{0x20, 0x0, 0x5}, 0x0, 0x45, 0x7, './file0'}, {{0x10, 0x4, 0x3}, 0xcbe, 0x1, 0x7, './file0'}, {{0x80, 0x3, 0x1}, 0x60bf, 0x2, 0x7, './file0'}]}}, 0x141)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RREMOVE(r0, &(0x7f0000000280)={0x7, 0x7b, 0x1}, 0x7)
r1 = getpid()
write$P9_RGETLOCK(r0, &(0x7f00000002c0)={0x1e, 0x37, 0x1, {0x1, 0x1000, 0x9, r1}}, 0x1e)
write$P9_RGETLOCK(r0, &(0x7f0000000300)={0x20, 0x37, 0x2, {0x2af5687462010698, 0xec02, 0x2, r1, 0x2, '!]'}}, 0x20)
pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RFLUSH(r2, &(0x7f0000000380)={0x7, 0x6d, 0x2}, 0x7)
ioctl$CDROM_DEBUG(r0, 0x5330, 0x3)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x98}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x2008000}, 0x40)
ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000000540)={0xb7, 0x81, 0xe1, 0xb1, 0x0, 0x8})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, <r4=>r0, {0x6}}, './file0\x00'})
write$P9_RVERSION(r4, &(0x7f0000001000)={0x15, 0x65, 0xffff, 0xf86f, 0x8, '9P2000.L'}, 0x15)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001040)={'wg2\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000001080)={{0x1, 0x1, 0x18, <r5=>r4, @out_args}, './file0\x00'})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x802e360}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x38, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x10)

10:12:15 executing program 6:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x1}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe612}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000)
sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x44095)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000841}, 0x240008d0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r4=>r1, {0x2}}, './file0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x71ad3940, 0x80}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x17c914f3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x801)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xffc6}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x4}}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x73}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7ff}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0xfffffffd}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004020)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, &(0x7f0000000880)="e72f363d7cd5d8641b48fc2ddcdc4af57d0578e234100672241f5b0439bea6eb3aabbf3f96aeafe880708019f5fcc2747339b132f493eab458324b6b7b3afed8a2a44371b14ff190aa10b9cfd63ed6c2ad38e32238b1a0dfd1b3d77968219c644671aa2c4eabaefd8cca82", 0x6b, 0x12100, 0x1}, 0x6)
write$P9_RLERRORu(r4, &(0x7f0000000940)={0xf, 0x7, 0x1, {{0x2, '^{'}, 0x9}}, 0xf)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r6, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x845)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r7)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x800)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x68, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x20008000)

10:12:15 executing program 7:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r0 = memfd_secret(0x80000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r1 = memfd_secret(0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080)
mmap$IORING_OFF_CQ_RING(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x0, 0x4010, r0, 0x8000000)
mmap$IORING_OFF_CQ_RING(&(0x7f000093c000/0x4000)=nil, 0x4000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x7}}, './file0\x00'})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1)
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f00000003c0))
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x6041, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0xffffffff}}, './file0\x00'})
syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r1)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)={0x15, 0x65, 0xffff, 0xffffffff, 0x8, '9P2000.L'}, 0x15)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r7=>r5, {0x3}}, './file0\x00'})
ioctl$HIDIOCSUSAGE(r7, 0x4018480c, &(0x7f00000005c0)={0x2, 0x1, 0x7, 0x6, 0x6d0, 0xffffffcd})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18, r7}, './file0\x00'})

[  130.137180] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.138987] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.142085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.145084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.147228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  130.148268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  130.207302] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.209094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.215520] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.222524] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  130.224093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  130.225529] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  130.228456] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  130.233743] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  130.235751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  130.255377] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.261698] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  130.270189] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  132.100669] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  132.164930] Bluetooth: hci1: command 0x0409 tx timeout
[  132.227287] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  132.292185] Bluetooth: hci3: command 0x0409 tx timeout
[  132.292331] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  132.294692] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  132.296190] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  132.356694] Bluetooth: hci2: command 0x0409 tx timeout
[  134.214026] Bluetooth: hci1: command 0x041b tx timeout
[  134.339984] Bluetooth: hci3: command 0x041b tx timeout
[  134.404768] Bluetooth: hci2: command 0x041b tx timeout
[  135.530597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  135.537351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  135.546296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  135.568301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  135.588239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  135.591611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  135.965791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  135.986011] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  135.987358] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  136.011418] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  136.013242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  136.017990] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  136.019400] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  136.020657] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  136.027051] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  136.033471] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  136.066676] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  136.068605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  136.261230] Bluetooth: hci1: command 0x040f tx timeout
[  136.387969] Bluetooth: hci3: command 0x040f tx timeout
[  136.451956] Bluetooth: hci2: command 0x040f tx timeout
[  137.668180] Bluetooth: hci0: command 0x0409 tx timeout
[  137.924761] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  138.051045] Bluetooth: hci5: command 0x0409 tx timeout
[  138.243998] Bluetooth: hci6: command 0x0409 tx timeout
[  138.246933] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  138.308939] Bluetooth: hci1: command 0x0419 tx timeout
[  138.435309] Bluetooth: hci3: command 0x0419 tx timeout
[  138.500395] Bluetooth: hci2: command 0x0419 tx timeout
[  139.716035] Bluetooth: hci0: command 0x041b tx timeout
[  140.100060] Bluetooth: hci5: command 0x041b tx timeout
[  140.294178] Bluetooth: hci6: command 0x041b tx timeout
[  141.258394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  141.260526] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  141.266706] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  141.306525] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  141.319734] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  141.326058] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  141.764253] Bluetooth: hci0: command 0x040f tx timeout
[  142.147947] Bluetooth: hci5: command 0x040f tx timeout
[  142.339242] Bluetooth: hci6: command 0x040f tx timeout
[  143.429187] Bluetooth: hci4: command 0x0409 tx timeout
[  143.554959] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  143.813938] Bluetooth: hci0: command 0x0419 tx timeout
[  144.195949] Bluetooth: hci5: command 0x0419 tx timeout
[  144.388786] Bluetooth: hci6: command 0x0419 tx timeout
[  145.475971] Bluetooth: hci4: command 0x041b tx timeout
[  146.742863] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  146.753446] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  146.781597] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  146.808861] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  146.861254] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  146.876842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  147.522971] Bluetooth: hci4: command 0x040f tx timeout
[  148.931990] Bluetooth: hci7: command 0x0409 tx timeout
[  149.572184] Bluetooth: hci4: command 0x0419 tx timeout
[  150.980591] Bluetooth: hci7: command 0x041b tx timeout
[  153.028720] Bluetooth: hci7: command 0x040f tx timeout
[  155.075017] Bluetooth: hci7: command 0x0419 tx timeout
[  192.860660] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  192.868330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  192.875279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  192.951874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  192.969616] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  192.979242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  193.075698] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  193.080299] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  193.102571] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  193.136304] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  193.154268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  193.163250] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  193.277852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  193.344349] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  193.349001] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  193.385340] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  193.444686] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  193.447062] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  195.076051] Bluetooth: hci1: command 0x0409 tx timeout
[  195.268213] Bluetooth: hci2: command 0x0409 tx timeout
[  195.588438] Bluetooth: hci3: command 0x0409 tx timeout
[  197.123148] Bluetooth: hci1: command 0x041b tx timeout
[  197.317927] Bluetooth: hci2: command 0x041b tx timeout
[  197.635251] Bluetooth: hci3: command 0x041b tx timeout
[  197.754103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  197.763488] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  197.797765] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  197.807333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  197.816912] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  197.834367] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  198.044599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  198.064382] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  198.071756] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  198.147829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  198.163230] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  198.168267] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  199.172208] Bluetooth: hci1: command 0x040f tx timeout
[  199.363002] Bluetooth: hci2: command 0x040f tx timeout
[  199.683549] Bluetooth: hci3: command 0x040f tx timeout
[  199.939988] Bluetooth: hci0: command 0x0409 tx timeout
[  200.004940] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  200.259853] Bluetooth: hci6: command 0x0409 tx timeout
[  201.219337] Bluetooth: hci1: command 0x0419 tx timeout
[  201.410972] Bluetooth: hci2: command 0x0419 tx timeout
[  201.733159] Bluetooth: hci3: command 0x0419 tx timeout
[  201.987580] Bluetooth: hci0: command 0x041b tx timeout
[  202.306942] Bluetooth: hci6: command 0x041b tx timeout
[  204.035961] Bluetooth: hci0: command 0x040f tx timeout
[  204.355083] Bluetooth: hci6: command 0x040f tx timeout
[  205.186961] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  205.251141] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  206.083699] Bluetooth: hci0: command 0x0419 tx timeout
[  206.406356] Bluetooth: hci6: command 0x0419 tx timeout
[  209.067861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  209.073965] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  209.087083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  209.094362] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  209.101045] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  209.116241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  211.203126] Bluetooth: hci4: command 0x0409 tx timeout
[  211.267023] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  211.330986] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  213.251318] Bluetooth: hci4: command 0x041b tx timeout
[  214.812596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  214.827294] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  214.829560] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  214.834574] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  214.840236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  214.842270] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  215.299960] Bluetooth: hci4: command 0x040f tx timeout
[  216.835166] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  216.964214] Bluetooth: hci5: command 0x0409 tx timeout
[  217.350166] Bluetooth: hci4: command 0x0419 tx timeout
[  219.010953] Bluetooth: hci5: command 0x041b tx timeout
[  221.060619] Bluetooth: hci5: command 0x040f tx timeout
[  221.828015] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  223.108397] Bluetooth: hci5: command 0x0419 tx timeout
[  227.076314] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  232.195946] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  235.329590] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  235.336780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  235.352216] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  235.380264] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  235.427440] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  235.433226] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  237.571231] Bluetooth: hci7: command 0x0409 tx timeout
[  239.619963] Bluetooth: hci7: command 0x041b tx timeout
[  241.667375] Bluetooth: hci7: command 0x040f tx timeout
[  243.715547] Bluetooth: hci7: command 0x0419 tx timeout
[  255.558002] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  255.570276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  255.576235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  255.648776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  255.657228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  255.660782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  255.727177] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  255.731354] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  255.732580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  255.740613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  255.742486] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  255.743556] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  257.093202] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  257.796028] Bluetooth: hci2: command 0x0409 tx timeout
[  257.924012] Bluetooth: hci3: command 0x0409 tx timeout
[  259.582771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  259.601307] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  259.608047] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  259.641701] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  259.650295] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  259.653059] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  259.843502] Bluetooth: hci2: command 0x041b tx timeout
[  259.972954] Bluetooth: hci3: command 0x041b tx timeout
[  261.763018] Bluetooth: hci0: command 0x0409 tx timeout
[  261.890959] Bluetooth: hci2: command 0x040f tx timeout
[  262.019045] Bluetooth: hci3: command 0x040f tx timeout
[  262.082958] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  262.211982] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  263.810960] Bluetooth: hci0: command 0x041b tx timeout
[  263.939016] Bluetooth: hci2: command 0x0419 tx timeout
[  264.067952] Bluetooth: hci3: command 0x0419 tx timeout
[  265.600839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  265.614168] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  265.628385] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  265.652021] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  265.685942] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  265.709780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  265.756620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  265.759632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  265.760823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  265.763646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  265.767509] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  265.768561] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  265.859663] Bluetooth: hci0: command 0x040f tx timeout
[  267.844023] Bluetooth: hci1: command 0x0409 tx timeout
[  267.908305] Bluetooth: hci0: command 0x0419 tx timeout
[  267.971846] Bluetooth: hci6: command 0x0409 tx timeout
[  269.891166] Bluetooth: hci1: command 0x041b tx timeout
[  270.018978] Bluetooth: hci6: command 0x041b tx timeout
[  271.939135] Bluetooth: hci1: command 0x040f tx timeout
[  272.066979] Bluetooth: hci6: command 0x040f tx timeout
[  272.579233] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  273.987639] Bluetooth: hci1: command 0x0419 tx timeout
[  274.116929] Bluetooth: hci6: command 0x0419 tx timeout
[  277.763024] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  278.466993] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  282.822002] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  283.395018] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  285.879470] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  285.884745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  285.888486] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  285.896400] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  285.910862] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  285.914120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  286.386274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  286.388555] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  286.400214] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  286.407148] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  286.409363] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  286.410812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  288.002995] Bluetooth: hci4: command 0x0409 tx timeout
[  288.452432] Bluetooth: hci5: command 0x0409 tx timeout
[  290.052391] Bluetooth: hci4: command 0x041b tx timeout
[  290.499968] Bluetooth: hci5: command 0x041b tx timeout
[  292.099016] Bluetooth: hci4: command 0x040f tx timeout
[  292.547956] Bluetooth: hci5: command 0x040f tx timeout
[  294.148595] Bluetooth: hci4: command 0x0419 tx timeout
[  294.596326] Bluetooth: hci5: command 0x0419 tx timeout
[  299.460004] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  302.595952] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  302.600653] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  302.604850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  302.658717] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  302.685625] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  302.692093] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  304.774973] Bluetooth: hci7: command 0x0409 tx timeout
[  306.820365] Bluetooth: hci7: command 0x041b tx timeout
[  308.867981] Bluetooth: hci7: command 0x040f tx timeout
[  310.915099] Bluetooth: hci7: command 0x0419 tx timeout
[  317.551156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  317.568776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  317.583679] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  317.600059] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  317.617061] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  317.636453] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  318.346874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  318.352564] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  318.392861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  318.406936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  318.445997] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  318.447490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  319.747978] Bluetooth: hci2: command 0x0409 tx timeout
[  320.514999] Bluetooth: hci3: command 0x0409 tx timeout
[  321.642488] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  321.654677] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  321.661358] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  321.699437] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  321.714083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  321.726981] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  321.796405] Bluetooth: hci2: command 0x041b tx timeout
[  322.564324] Bluetooth: hci3: command 0x041b tx timeout
[  323.844927] Bluetooth: hci2: command 0x040f tx timeout
[  323.845366] Bluetooth: hci0: command 0x0409 tx timeout
[  324.611040] Bluetooth: hci3: command 0x040f tx timeout
[  325.890968] Bluetooth: hci0: command 0x041b tx timeout
[  325.892277] Bluetooth: hci2: command 0x0419 tx timeout
[  326.659008] Bluetooth: hci3: command 0x0419 tx timeout
[  327.592469] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  327.608270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  327.626696] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  327.646315] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  327.652070] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  327.662200] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  327.939173] Bluetooth: hci0: command 0x040f tx timeout
[  329.734735] Bluetooth: hci1: command 0x0409 tx timeout
[  329.796949] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  329.988180] Bluetooth: hci0: command 0x0419 tx timeout
[  331.779143] Bluetooth: hci1: command 0x041b tx timeout
[  332.953542] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  332.963443] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  332.975249] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  333.005695] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  333.038315] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  333.059051] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  333.826951] Bluetooth: hci1: command 0x040f tx timeout
[  335.106984] Bluetooth: hci6: command 0x0409 tx timeout
[  335.874949] Bluetooth: hci1: command 0x0419 tx timeout
[  337.155013] Bluetooth: hci6: command 0x041b tx timeout
[  339.203003] Bluetooth: hci6: command 0x040f tx timeout
[  341.251228] Bluetooth: hci6: command 0x0419 tx timeout
[  348.206196] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  348.208219] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  348.209353] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  348.223617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  348.229151] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  348.240151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  348.777395] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  348.790666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  348.802707] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  348.841568] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  348.850625] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  348.861189] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  350.339258] Bluetooth: hci4: command 0x0409 tx timeout
[  350.979055] Bluetooth: hci5: command 0x0409 tx timeout
[  352.388055] Bluetooth: hci4: command 0x041b tx timeout
[  353.026971] Bluetooth: hci5: command 0x041b tx timeout
[  354.435189] Bluetooth: hci4: command 0x040f tx timeout
[  355.076505] Bluetooth: hci5: command 0x040f tx timeout
[  356.484112] Bluetooth: hci4: command 0x0419 tx timeout
[  357.124343] Bluetooth: hci5: command 0x0419 tx timeout
2023/08/28 10:16:08 executor 2 failed 11 times:
executor 2: not serving

VM DIAGNOSIS:
10:16:09  Registers:
info registers vcpu 0
RAX=00000000000000ef RBX=ffffc90000663818 RCX=0000000000000000 RDX=1ffff1100128f273
RSI=ffffffff83090906 RDI=ffff8880094793aa RBP=0000000000000000 RSP=ffff888014fdf068
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=0000000000000018 R13=ffff88800dbc4ee0 R14=ffff88800a3b8000 R15=ffff888009479380
RIP=ffffffff8309099b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007ffb27197900 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffb2774b6a0 CR3=000000000ba08000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=1de83504c792629bce8bac50aaffd45c
XMM02=c726da5054deecd2a1c438545e362e75 XMM03=145dc11f6c411a14b196709b223652a6
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003
XMM08=64707466730073254073250070746673 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff888030eff2e8 RCX=0000000000000000 RDX=ffff88800ed451c0
RSI=ffffffff848544e0 RDI=0000000000000002 RBP=ffffffff8614e1ea RSP=ffff888030eff248
R8 =0000000000000001 R9 =0000000000000009 R10=0000000000000005 R11=00007f1dd3ae8fff
R12=0000000000000001 R13=ffff888030effb00 R14=0000000000000002 R15=ffffffff8614e1ee
RIP=ffffffff814d8cca RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f1dd3a3f900 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1dd42de710 CR3=000000003108a000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000ff00000000000000 XMM01=ffffffffffffffff00ffffffffffffff
XMM02=2e325f4342494c4700352e322e325f43 XMM03=000000000000004700352e322e325f43
XMM04=4342494c4700362e322e325f4342494c XMM05=00007f1dd3e5300000007f1dd3e548c0
XMM06=00007f1dd3e542f000007f1dd3fb9950 XMM07=00007f1dd3e53cf000007f1dd3e53760
XMM08=00007f1dd3e5300000007f1dd3fb9950 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000