Warning: Permanently added '[localhost]:41749' (ECDSA) to the list of known hosts.
2025/04/25 22:19:32 fuzzer started
2025/04/25 22:19:32 dialing manager at localhost:46629
syzkaller login: [   96.256524] cgroup: Unknown subsys name 'net'
[   96.396505] cgroup: Unknown subsys name 'cpuset'
[   96.441895] cgroup: Unknown subsys name 'rlimit'
2025/04/25 22:19:57 syscalls: 201
2025/04/25 22:19:57 code coverage: enabled
2025/04/25 22:19:57 comparison tracing: enabled
2025/04/25 22:19:57 extra coverage: enabled
2025/04/25 22:19:57 setuid sandbox: enabled
2025/04/25 22:19:57 namespace sandbox: enabled
2025/04/25 22:19:57 Android sandbox: enabled
2025/04/25 22:19:57 fault injection: enabled
2025/04/25 22:19:57 leak checking: enabled
2025/04/25 22:19:57 net packet injection: enabled
2025/04/25 22:19:57 net device setup: enabled
2025/04/25 22:19:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/25 22:19:57 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/25 22:19:57 USB emulation: enabled
2025/04/25 22:19:57 hci packet injection: enabled
2025/04/25 22:19:57 wifi device emulation: enabled
2025/04/25 22:19:57 802.15.4 emulation: enabled
2025/04/25 22:19:57 fetching corpus: 0, signal 0/0 (executing program)
2025/04/25 22:19:59 starting 8 fuzzer processes
22:19:59 executing program 0:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r0, 0x1, 0xffffffffffffffff, 0x7fff})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x101, 0x3f, 0x7, 0x20}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000001c0)={r2, 0x80, 0x4})
r3 = syz_io_uring_complete(0x0)
ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000200)=0x1)
r4 = syz_open_dev$hiddev(&(0x7f0000000240), 0x101, 0x40)
ioctl$HIDIOCGSTRING(r4, 0x81044804, &(0x7f0000000280)={0xae, "7261f3931194acb64cda02b23ba06ae4c1deea0d54196d2c4457318aaed502db3bbeece4a37219f843d9ac5bd3c3094a676aeddef53e1c78a07058d0a2ebfaf302f18e995484ff89164e5014d41c993d4a5ac4faef73c747a98a8756356291835b198446e1c23b6d78ed847e47fb7da55150896830527ed6b241e7bb39a9a7163bd92d1177725a8fa04552928124831120fda1038859216c5a0b84fe8fe4c5143c4236daf89bbd2172abd862568b"})
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x80000001, 0x6, 0x5, 0x8000}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x40850)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000480)={0x4, &(0x7f0000000440)=[{0x4, 0xff, 0xff, 0x436}, {0x81, 0x8, 0x7f, 0x5}, {0x6, 0x6, 0x9, 0x8e5d}, {0x522, 0x8, 0x81, 0x2411}]})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r5, 0x40082102, &(0x7f00000004c0)=r2)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x410, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffbff}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044000}, 0x20008180)
r6 = socket(0xa, 0xa, 0x5)
ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000600)={0x3, 0x200, 0x80000000, 0x9, 0x5, 0x35fe, 0x14ee6033, 0xffff, 0x9, 0x3, 0xec7c, 0xb4f, 0x8, 0x8})
getsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000000640), &(0x7f0000000680)=0x4)
pause()
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x804a1, 0x0)
ioctl$HIDIOCGNAME(r7, 0x80404806, &(0x7f0000000700))
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0xa8, 0x0, 0x8, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x10, 0x80000000, 0x6}})

22:19:59 executing program 1:
r0 = syz_io_uring_complete(0x0)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x570d885a4b67cd05}, 0x20008000)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x7}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r1=>0x0, 0x6, 0x7f, 0x43, 0x8, 0x44, @mcast2, @dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x7801, 0x3, 0x24f43a6c}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'sit0\x00', <r2=>r1, 0x4, 0x3f, 0x80, 0x7, 0x2c, @mcast2, @loopback, 0x80, 0x1, 0x1, 0x9}})
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x90000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'ip6gre0\x00', r2, 0x2f, 0x4, 0x20, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @private1, 0x7800, 0x1, 0x1f, 0x6}})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r3)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x24dfc9627f77f2d, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4095)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x41)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8085}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000900)={0x0, 0x4, 0x9})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'sit0\x00', <r6=>r2, 0x29, 0x4, 0x0, 0x7, 0x10, @private0, @remote, 0x10, 0x20, 0xc062, 0x8}})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, r5, 0x208, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x88870)
r7 = pidfd_getfd(r3, r3, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000b40), r7)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x223}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x11)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044c00}, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3d}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001)

22:19:59 executing program 2:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0x800, 0x81, 0x5, 0x7f, 0x1, 0x3, 0x9}, 0xc)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x16c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x76e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x865}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x13c}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r0 = syz_io_uring_setup(0x3352, &(0x7f0000000300)={0x0, 0xe474, 0x4, 0x0, 0x288}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=<r1=>0x0, &(0x7f00000003c0))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000480)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x48}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x4)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000005c0)=0x5)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x10000, 0x0)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000640))
syz_open_pts(r2, 0x400200)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe01}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'syztnl2\x00', <r4=>0x0, 0x29, 0x8, 0xf1, 0x2b, 0x4, @remote, @loopback, 0x8000, 0x10, 0x5a3, 0xa9f2}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'syztnl0\x00', <r5=>r4, 0x2b, 0x0, 0x1f, 0x1, 0x42, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x80, 0x7ff}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'ip6tnl0\x00', <r6=>r5, 0x29, 0x4, 0x2, 0x101, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x8, 0x9, 0x3ff}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl2\x00', <r7=>r5, 0x2f, 0x6, 0x1, 0x20, 0x4, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x1, 0x4, 0x6}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b40)={'syztnl1\x00', <r8=>r6, 0x29, 0x40, 0x7, 0xe9, 0x21, @private0, @empty, 0x700, 0x80, 0xba32, 0x7}})
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0xc000101}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x40}}, 0x8000)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000cc0)=0x40, 0x4)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x79, @link='syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4804)

22:19:59 executing program 3:
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x401}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe5f}, {0x6, 0x11, 0x200}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x74fbb049}, {0x6}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004040}, 0x20008800)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000400}, 0x44)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={<r1=>0x0})
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000003c0)={r1, 0x1, r2, 0x8, 0x80000})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0xd01, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x16}}]}, 0x38}, 0x1, 0x0, 0x0, 0x441c0}, 0x0)
r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000680)={0x1f, 0x0, @none}, &(0x7f00000006c0)=0xe, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000700)={0xffff, 0x990, 0x1, 0x40, 0x0, 0x9, 0x7}, 0xc)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x150, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x56}, {0x6, 0x11, 0x3f}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4288}, {0x8, 0x13, 0x5f6}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xac}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x5}, {0x5}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8021}, 0x4000000)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x10000)
syz_io_uring_setup(0x2d2f, &(0x7f0000000ac0)={0x0, 0x9345, 0x10, 0x3, 0x2e9}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000b40), &(0x7f0000000b80))
socketpair(0x5, 0x4, 0x2, &(0x7f0000000bc0)={<r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r8, 0x801, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x88d0}, 0x8000)
sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000010)

[  122.744929] audit: type=1400 audit(1745619599.630:7): avc:  denied  { execmem } for  pid=276 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
22:19:59 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xdee}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000044)
r2 = syz_open_pts(r0, 0x10200)
r3 = pidfd_getfd(r0, r2, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd66f9593ccf6c0f6}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400d0}, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x10200, 0x0)
ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000280)={0x8, 0x6, 0x0, 0x7, 0x4, "992082c196e158a98083af7c96c49f7c74857c", 0x200, 0x1f})
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000002c0)={0x6, 0xf27b, 0x5})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0x9)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r4)
sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xc090}, 0x1)
openat$cgroup_pressure(r4, &(0x7f0000000480)='cpu.pressure\x00', 0x2, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r6, 0x40a, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}]}, 0x24}}, 0x8801)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_io_uring_complete(r1)
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2008821}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xfc, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r9, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4850}, 0x20040000)

22:19:59 executing program 5:
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x5, 0xe70, 0x63, @mcast1, @loopback, 0x8, 0x8, 0x2, 0x7fff}})
r0 = syz_io_uring_complete(0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@private2, <r1=>0x0}, &(0x7f0000000100)=0x14)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x8, @link='syz1\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8100)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', <r3=>r1, 0x2f, 0xad, 0x4, 0xa27, 0x1, @empty, @empty, 0x8, 0x700, 0xffffffff, 0xcafd}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r3, 0x4, 0x3, 0x0, 0x1, 0x47, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x80, 0x7, 0x100, 0x3}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000440)={@dev}, &(0x7f0000000480)=0x14)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r2, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x27c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x15, 0x7f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xd5d}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x101}, {0x8, 0x15, 0x7f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffff8000}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7ff}, {0x6}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x145}, {0x6, 0x11, 0xe3}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xfff8}, {0x8, 0x15, 0x9}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffff}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x2000c090)
r5 = syz_io_uring_complete(0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x150, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x1ff}, {0x5}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0xf57c}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0x3ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x20}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xfd2}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008001)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x9143, 0x5, 0xfffffffb]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000d80), 0x200000, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x54, r7, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048880}, 0x880)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x3c, r7, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x40)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x400c094)

22:19:59 executing program 6:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x1, 0x4000, @fd_index=0x4, 0x1, &(0x7f0000000000)="a10d2e7b47a61ddc2768c141883372cb73f9de16f810371d3627671984", 0x1d, 0x4, 0x1}, 0x2)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x321041, 0x0)
r2 = syz_io_uring_complete(0x0)
r3 = pidfd_getfd(r1, r2, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000000c0)={0xffffffffffffffff})
r4 = pidfd_getfd(r2, r3, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000100)={0x0, 0x3, r1, 0x69})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x1}], 0x1, 0x0, &(0x7f0000000180)="e4"})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', <r5=>0x0, 0x4, 0x7, 0x9, 0x1, 0x4, @remote, @local, 0x700, 0x0, 0x2, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', r5, 0x4, 0xa4, 0x7, 0x8, 0x59, @rand_addr=' \x01\x00', @private0, 0x10, 0x1, 0x40, 0xfffffc00}})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r4)
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r6, 0x804, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x25}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x802)
syz_io_uring_setup(0x3318, &(0x7f00000004c0)={0x0, 0x66cd, 0x2, 0x2, 0x378, 0x0, r4}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)=<r7=>0x0)
r8 = epoll_create1(0x80000)
syz_io_uring_submit(0x0, r7, &(0x7f0000000600)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r8, &(0x7f00000005c0)={0x20000000}, r2, 0x1, 0x0, 0x1}, 0x9)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r3)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r9, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x44890)
ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000780)=""/198)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000008c0)={0xffffffffffffffff, 0x1})

22:19:59 executing program 7:
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1)
r0 = syz_io_uring_complete(0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}}, 0x4080)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x8040)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000801)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040031}, 0x800)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x48014)
r3 = pidfd_getfd(r0, r0, 0x0)
r4 = pidfd_getfd(r0, r3, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000980)={0x0, <r5=>0x0})
syz_open_procfs$userns(r5, &(0x7f0000000a00))
socketpair(0x20, 0x3, 0x6, &(0x7f0000000a40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x20000000)
r8 = syz_io_uring_complete(0x0)
openat$cgroup_pressure(r8, &(0x7f0000000bc0)='io.pressure\x00', 0x2, 0x0)

[  124.200199] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  124.205225] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  124.208387] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  124.217438] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  124.221412] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  124.270544] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  124.276371] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  124.283447] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  124.285290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  124.302101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  124.305290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  124.318872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  124.339136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  124.362674] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  124.368129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  124.374810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  124.379306] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  124.382590] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  124.386099] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  124.387793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  124.389536] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  124.395255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  124.399946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  124.401914] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  124.404083] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  124.414816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  124.416259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  124.423014] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  124.426704] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  124.439925] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  124.442698] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  124.447962] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  124.449448] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  124.449861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  124.455434] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  124.460247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  124.467258] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  124.468153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  124.482334] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  124.492284] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  126.282003] Bluetooth: hci0: command tx timeout
[  126.408481] Bluetooth: hci1: command tx timeout
[  126.409146] Bluetooth: hci2: command tx timeout
[  126.535943] Bluetooth: hci7: command tx timeout
[  126.536579] Bluetooth: hci4: command tx timeout
[  126.600855] Bluetooth: hci3: command tx timeout
[  126.601613] Bluetooth: hci6: command tx timeout
[  126.602209] Bluetooth: hci5: command tx timeout
[  128.327913] Bluetooth: hci0: command tx timeout
[  128.455820] Bluetooth: hci2: command tx timeout
[  128.456297] Bluetooth: hci1: command tx timeout
[  128.585751] Bluetooth: hci4: command tx timeout
[  128.586236] Bluetooth: hci7: command tx timeout
[  128.648104] Bluetooth: hci5: command tx timeout
[  128.648421] Bluetooth: hci3: command tx timeout
[  128.649001] Bluetooth: hci6: command tx timeout
[  130.375827] Bluetooth: hci0: command tx timeout
[  130.504849] Bluetooth: hci1: command tx timeout
[  130.505328] Bluetooth: hci2: command tx timeout
[  130.631829] Bluetooth: hci7: command tx timeout
[  130.631925] Bluetooth: hci4: command tx timeout
[  130.696793] Bluetooth: hci3: command tx timeout
[  130.697242] Bluetooth: hci6: command tx timeout
[  130.697666] Bluetooth: hci5: command tx timeout
[  132.424581] Bluetooth: hci0: command tx timeout
[  132.552067] Bluetooth: hci2: command tx timeout
[  132.552554] Bluetooth: hci1: command tx timeout
[  132.679838] Bluetooth: hci7: command tx timeout
[  132.680321] Bluetooth: hci4: command tx timeout
[  132.744027] Bluetooth: hci5: command tx timeout
[  132.744483] Bluetooth: hci3: command tx timeout
[  132.745098] Bluetooth: hci6: command tx timeout
[  184.267151] syz-executor.4 (284) used greatest stack depth: 24496 bytes left
[  186.789845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  186.792487] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  186.800994] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  186.804614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  186.804932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  186.809104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  186.822484] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  186.827420] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  186.834519] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  186.841958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  186.855173] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  186.860603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  186.880546] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  186.894042] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  186.898325] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  186.974276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  186.979700] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  186.991106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  186.993141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  187.011828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  187.017662] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  187.024599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  187.026683] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  187.031039] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  187.031143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  187.041131] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  187.045438] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  187.048272] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  187.056645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  187.060659] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  187.064065] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  187.076136] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  187.078051] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  187.116328] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  187.141833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  187.265573] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  187.270559] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  187.273634] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  187.282265] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  187.287101] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  188.874097] Bluetooth: hci0: command tx timeout
[  188.935945] Bluetooth: hci1: command tx timeout
[  189.000044] Bluetooth: hci2: command tx timeout
[  189.191825] Bluetooth: hci3: command tx timeout
[  189.256180] Bluetooth: hci5: command tx timeout
[  189.256436] Bluetooth: hci6: command tx timeout
[  189.257532] Bluetooth: hci4: command tx timeout
[  189.449810] Bluetooth: hci7: command tx timeout
[  190.921813] Bluetooth: hci0: command tx timeout
[  190.983785] Bluetooth: hci1: command tx timeout
[  191.047803] Bluetooth: hci2: command tx timeout
[  191.239827] Bluetooth: hci3: command tx timeout
[  191.303993] Bluetooth: hci6: command tx timeout
[  191.304122] Bluetooth: hci4: command tx timeout
[  191.304478] Bluetooth: hci5: command tx timeout
[  191.495977] Bluetooth: hci7: command tx timeout
[  192.968972] Bluetooth: hci0: command tx timeout
[  193.031798] Bluetooth: hci1: command tx timeout
[  193.095789] Bluetooth: hci2: command tx timeout
[  193.287974] Bluetooth: hci3: command tx timeout
[  193.351794] Bluetooth: hci5: command tx timeout
[  193.352849] Bluetooth: hci4: command tx timeout
[  193.353293] Bluetooth: hci6: command tx timeout
[  193.544138] Bluetooth: hci7: command tx timeout
[  195.015857] Bluetooth: hci0: command tx timeout
[  195.080765] Bluetooth: hci1: command tx timeout
[  195.143778] Bluetooth: hci2: command tx timeout
[  195.336957] Bluetooth: hci3: command tx timeout
[  195.400188] Bluetooth: hci6: command tx timeout
[  195.400586] Bluetooth: hci4: command tx timeout
[  195.400628] Bluetooth: hci5: command tx timeout
[  195.593814] Bluetooth: hci7: command tx timeout
[  248.740311] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  248.750333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  248.759667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  248.768690] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  248.780505] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  248.878082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  248.882121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  248.884379] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  248.891704] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  248.896385] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  249.004316] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  249.009007] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  249.011021] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  249.019178] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  249.022547] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  249.065663] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  249.073328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  249.092309] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  249.126938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  249.139202] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  249.171063] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  249.176986] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  249.180205] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  249.192873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  249.222446] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  249.499989] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  249.522311] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  249.535901] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  249.537520] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  249.557753] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  249.573978] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  249.580251] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  249.582195] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  249.590530] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  249.598556] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  249.619268] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  249.661393] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  249.664880] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  249.688465] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  249.694320] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  250.825841] Bluetooth: hci0: command tx timeout
[  250.951852] Bluetooth: hci1: command tx timeout
[  251.080963] Bluetooth: hci2: command tx timeout
[  251.272018] Bluetooth: hci3: command tx timeout
[  251.335974] Bluetooth: hci4: command tx timeout
[  251.719829] Bluetooth: hci7: command tx timeout
[  251.783844] Bluetooth: hci5: command tx timeout
[  251.848136] Bluetooth: hci6: command tx timeout
[  252.872190] Bluetooth: hci0: command tx timeout
[  253.001810] Bluetooth: hci1: command tx timeout
[  253.128980] Bluetooth: hci2: command tx timeout
[  253.320818] Bluetooth: hci3: command tx timeout
[  253.385286] Bluetooth: hci4: command tx timeout
[  253.769087] Bluetooth: hci7: command tx timeout
[  253.832841] Bluetooth: hci5: command tx timeout
[  253.897779] Bluetooth: hci6: command tx timeout
[  254.919943] Bluetooth: hci0: command tx timeout
[  255.050042] Bluetooth: hci1: command tx timeout
[  255.177348] Bluetooth: hci2: command tx timeout
[  255.368923] Bluetooth: hci3: command tx timeout
[  255.432777] Bluetooth: hci4: command tx timeout
[  255.817004] Bluetooth: hci7: command tx timeout
[  255.882069] Bluetooth: hci5: command tx timeout
[  255.944827] Bluetooth: hci6: command tx timeout
[  256.967927] Bluetooth: hci0: command tx timeout
[  257.095974] Bluetooth: hci1: command tx timeout
[  257.223849] Bluetooth: hci2: command tx timeout
[  257.416834] Bluetooth: hci3: command tx timeout
[  257.480866] Bluetooth: hci4: command tx timeout
[  257.864993] Bluetooth: hci7: command tx timeout
[  257.929113] Bluetooth: hci5: command tx timeout
[  257.993006] Bluetooth: hci6: command tx timeout
[  311.145551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  311.147850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  311.154226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  311.156505] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  311.159464] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  311.161325] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  311.169295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  311.172392] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  311.180420] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  311.183378] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  311.271632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  311.279187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  311.288635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  311.296632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  311.311303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  311.329596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  311.342440] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  311.347396] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  311.357172] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  311.367245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  311.406135] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  311.477412] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  311.482297] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  311.493155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  311.516468] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  311.567029] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  311.580465] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  311.582398] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  311.584652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  311.602696] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  311.622993] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  311.624445] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  311.633157] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  311.634999] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  311.638400] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  311.661294] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  311.674193] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  311.731475] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  311.743665] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  311.799329] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  313.224099] Bluetooth: hci0: command tx timeout
[  313.288981] Bluetooth: hci1: command tx timeout
[  313.352808] Bluetooth: hci2: command tx timeout
[  313.416817] Bluetooth: hci3: command tx timeout
[  313.671833] Bluetooth: hci4: command tx timeout
[  313.736193] Bluetooth: hci5: command tx timeout
[  313.799899] Bluetooth: hci6: command tx timeout
[  313.929774] Bluetooth: hci7: command tx timeout
[  315.271899] Bluetooth: hci0: command tx timeout
[  315.336066] Bluetooth: hci1: command tx timeout
[  315.400186] Bluetooth: hci2: command tx timeout
[  315.464037] Bluetooth: hci3: command tx timeout
[  315.720997] Bluetooth: hci4: command tx timeout
[  315.784047] Bluetooth: hci5: command tx timeout
[  315.847784] Bluetooth: hci6: command tx timeout
[  315.976457] Bluetooth: hci7: command tx timeout
[  317.320097] Bluetooth: hci0: command tx timeout
[  317.384795] Bluetooth: hci1: command tx timeout
[  317.447802] Bluetooth: hci2: command tx timeout
[  317.511793] Bluetooth: hci3: command tx timeout
[  317.768877] Bluetooth: hci4: command tx timeout
[  317.833799] Bluetooth: hci5: command tx timeout
[  317.895826] Bluetooth: hci6: command tx timeout
[  318.024117] Bluetooth: hci7: command tx timeout
[  319.367871] Bluetooth: hci0: command tx timeout
[  319.433186] Bluetooth: hci1: command tx timeout
[  319.495791] Bluetooth: hci2: command tx timeout
[  319.559830] Bluetooth: hci3: command tx timeout
[  319.816095] Bluetooth: hci4: command tx timeout
[  319.880478] Bluetooth: hci5: command tx timeout
[  319.944219] Bluetooth: hci6: command tx timeout
[  320.072922] Bluetooth: hci7: command tx timeout
[  373.337536] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  373.343583] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  373.347525] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  373.356488] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  373.362204] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  373.682533] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  373.687654] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  373.690188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  373.694685] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  373.697101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  373.701452] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  373.710403] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  373.712676] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  373.720143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  373.722325] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  373.817987] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  373.829524] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  373.837287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  373.843335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  373.853954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  373.859312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  373.868243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  373.880511] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  373.880885] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  373.883958] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  373.909253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  373.920958] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  373.927119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  373.927347] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  373.936261] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  373.956036] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  373.958343] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  373.963361] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  373.995971] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  374.012483] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  374.149148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  374.166502] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  374.170470] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  374.197547] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  374.211261] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  375.431841] Bluetooth: hci0: command tx timeout
[  375.818034] Bluetooth: hci1: command tx timeout
[  375.818275] Bluetooth: hci2: command tx timeout
[  376.008141] Bluetooth: hci5: command tx timeout
[  376.008221] Bluetooth: hci4: command tx timeout
[  376.071975] Bluetooth: hci3: command tx timeout
[  376.199815] Bluetooth: hci6: command tx timeout
[  376.327976] Bluetooth: hci7: command tx timeout
[  377.479928] Bluetooth: hci0: command tx timeout
[  377.863879] Bluetooth: hci2: command tx timeout
[  377.866734] Bluetooth: hci1: command tx timeout
[  378.056035] Bluetooth: hci4: command tx timeout
[  378.056471] Bluetooth: hci5: command tx timeout
[  378.120831] Bluetooth: hci3: command tx timeout
[  378.249594] Bluetooth: hci6: command tx timeout
[  378.377759] Bluetooth: hci7: command tx timeout
[  379.527800] Bluetooth: hci0: command tx timeout
[  379.911813] Bluetooth: hci1: command tx timeout
[  379.912305] Bluetooth: hci2: command tx timeout
[  380.103909] Bluetooth: hci4: command tx timeout
[  380.105739] Bluetooth: hci5: command tx timeout
[  380.170321] Bluetooth: hci3: command tx timeout
[  380.295809] Bluetooth: hci6: command tx timeout
[  380.424121] Bluetooth: hci7: command tx timeout
[  381.575814] Bluetooth: hci0: command tx timeout
[  381.960054] Bluetooth: hci1: command tx timeout
[  381.960106] Bluetooth: hci2: command tx timeout
[  382.151799] Bluetooth: hci5: command tx timeout
[  382.151975] Bluetooth: hci4: command tx timeout
[  382.215793] Bluetooth: hci3: command tx timeout
[  382.344093] Bluetooth: hci6: command tx timeout
[  382.473010] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
22:25:01  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff817afdd6 RDX=fffffbfff0c81d83
RSI=0000000000000008 RDI=ffffffff8640ec10 RBP=0000000000000014 RSP=ffff88802f3ffe40
R8 =0000000000000000 R9 =fffffbfff0c81d82 R10=ffffffff8640ec17 R11=0000000000000000
R12=ffff8880094a4000 R13=00007f6f14f1c710 R14=0000000000000000 R15=ffff88801581eb40
RIP=ffffffff817afdde RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f6f14e4b540 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe5800000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6f14f1c710 CR3=0000000035e36000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff
XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f
XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000000055b RBX=000000008d0a117e RCX=0000000000001003 RDX=000000008d0a117e
RSI=00007f62173c67c0 RDI=000000008d0a117e RBP=0000000000000001 RSP=00007ffc4dc5aaf0
R8 =0000000000000001 R9 =00007f621770b440 R10=00007f62174d4860 R11=0000000000000007
R12=00007f62173bb5a8 R13=00007f62173c67c0 R14=0000000000000009 R15=00007f62176d1510
RIP=00007f62176e9370 RFL=00000212 [----A--] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f62171c7540 00000000 00000000
GS =0000 0000000000000000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f62172fb570 CR3=000000003553a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=315f315f4c53534e45504f00315f315f XMM03=00000000000070616d6d00666e6f6373
XMM04=6c6c616373797300746365746f72706d XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000