Warning: Permanently added '[localhost]:31909' (ECDSA) to the list of known hosts.
2025/05/23 00:40:39 fuzzer started
2025/05/23 00:40:40 dialing manager at localhost:41873
syzkaller login: [  102.471216] cgroup: Unknown subsys name 'net'
[  102.609331] cgroup: Unknown subsys name 'cpuset'
[  102.663106] cgroup: Unknown subsys name 'rlimit'
2025/05/23 00:41:01 syscalls: 209
2025/05/23 00:41:01 code coverage: enabled
2025/05/23 00:41:01 comparison tracing: enabled
2025/05/23 00:41:01 extra coverage: enabled
2025/05/23 00:41:01 setuid sandbox: enabled
2025/05/23 00:41:01 namespace sandbox: enabled
2025/05/23 00:41:01 Android sandbox: enabled
2025/05/23 00:41:01 fault injection: enabled
2025/05/23 00:41:01 leak checking: enabled
2025/05/23 00:41:01 net packet injection: enabled
2025/05/23 00:41:01 net device setup: enabled
2025/05/23 00:41:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/23 00:41:01 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/23 00:41:01 USB emulation: enabled
2025/05/23 00:41:01 hci packet injection: enabled
2025/05/23 00:41:01 wifi device emulation: enabled
2025/05/23 00:41:01 802.15.4 emulation: enabled
2025/05/23 00:41:01 fetching corpus: 0, signal 0/0 (executing program)
2025/05/23 00:41:04 starting 8 fuzzer processes
00:41:04 executing program 0:
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in6=@initdev}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000280)={'ah\x00'}, &(0x7f00000002c0)=0x1e)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x6e9, 0x4e23, 0x0, 0xa, 0x60, 0x90, 0x33, 0x0, r0}, {0x1, 0x4, 0x4, 0x200, 0x1, 0xfffffffffffffff8, 0x6, 0x4}, {0xfffffffffffffffb, 0x8, 0x0, 0x100000001}, 0x3, 0x6e6bb6, 0x0, 0x1, 0x2, 0x1}, {{@in=@multicast1, 0x4d4, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3507, 0x601fb152d2d38c14, 0x3, 0x3f, 0x101, 0x3c4, 0x1ff}}, 0xe8)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000400)=""/80, &(0x7f0000000480)=0x50)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000500)=0x1c, 0x81000)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000540)={{0xa, 0x4e22, 0x6ed, @private0={0xfc, 0x0, '\x00', 0x1}, 0x38}, {0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x80}, 0x1ff, [0xa8, 0x7fffffff, 0xcb48, 0x1000, 0x6, 0xfff, 0x6, 0x400]}, 0x5c)
getsockname$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000600)=0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000800)=0xe8)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000840)={@loopback, r2}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000880)={@loopback, r2}, 0x14)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000008c0)={@private0, <r4=>0x0}, &(0x7f0000000900)=0x14)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000940)={@mcast2, r4}, 0x14)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000980)={'security\x00', 0x2, [{}, {}]}, 0x48)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000a00)={@rand_addr, @initdev}, &(0x7f0000000a40)=0xc)
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000a80)={@mcast2, <r5=>0x0}, &(0x7f0000000ac0)=0x14)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x8, 0x4e24, 0x0, 0x2, 0x80, 0x80, 0x1d, r5, 0xffffffffffffffff}, {0x3, 0x7f, 0x4, 0x8, 0x29b1854c, 0x2, 0x7b89, 0x5}, {0x6, 0x4, 0xffffffffffff3aad, 0x8}, 0x3, 0x6e6bbd, 0x2, 0x1, 0x4}, {{@in=@local, 0x4d2, 0x6c}, 0x12b993d899937980, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x9}}, 0xe8)
getsockname$inet6(r1, &(0x7f0000000c00)={0xa, 0x0, 0x0, @local}, &(0x7f0000000c40)=0x1c)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000c80)={0x7, 0x7f, 0x2}, 0x7)

00:41:04 executing program 1:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4800)
write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x60, 0x2, 0x5}}, 0x14)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x64, 0x6f, 0x1, {0x7, [{0x1, 0x2, 0x8}, {0x40, 0x4, 0x3}, {0x20, 0x4, 0x4}, {0x1, 0x0, 0x6}, {0x1, 0x2, 0x8}, {0x2, 0x2, 0x4}, {0x10, 0x4, 0x2}]}}, 0x64)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r2, 0xa00, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcfa}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x18}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x6)
r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000600)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000680)={0xe0, 0x5, 0x1dce, 0x80, 0x8, 0x0, 0x3}, 0xc)
r6 = accept4$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000700)=0x1c, 0x800)
sendmmsg$inet6(r6, &(0x7f0000001140)=[{{&(0x7f0000000740)={0xa, 0x4e23, 0x7fffffff, @mcast2, 0xfffffffe}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000780)="906a82b3f4eee2ecef9a445c5810f3d69d1d08ae2abf5953622e3732589cfc901b49ed43d4d4bfce40783cedcee1e841d1f7a229eaaeec338eb0afd1d08dea1eb62afdc89691a9399c94820e805c4f2f3b9fdd434fa96a6a550beb64adce34c65030594d847b600730ac98e94ebe9618fecaae8a44b43df969454eb18dc771666ba9ba066aac14d9ba2f128bf15520b3227e763773f88cd0a6ad86838c2aba2379c2d2ae1c548ad6c641f658825826", 0xaf}, {&(0x7f0000000840)="b7419a3fde7f87d7417332a50dfab11588828504fdda1a250b64341e66a3e858e06ad5088bc992bcf662c7b9c5749d5cb1802342b86f8156757cbc3e11b45aa2d34585", 0x43}, {&(0x7f00000008c0)="96ab55b5b73158b80a96af9363b557c0dc18d8f78287740956724625f5b51332fa9d43eb8f5c7a8db38789360567965d85206472b5a02362d35be73ee9b702a78d5aaca4c743e192cb3e1af7de929db74fe3e950fc8521a0b2d8a30506d1f53b1698d882d672056e54408de9e942c60b5e368417f175a9de63e1543684b9abad411d1f957dea711cfd443d960e25c8feef79e130d1e82fd59f533027d4ea895927266dd9796d01964d15f3309bc76690cf0a8f261f4e3bffef71d9258c43d8963b00ac53ced8d1c5eb43d4ce62e80512b2bfd3fd7788a7808de2d35d", 0xdc}, {&(0x7f00000009c0)="f5ef769c31786e62cc4c14e040ef7c754528616f4aa57b0b065e1e", 0x1b}], 0x4, &(0x7f0000000a40)=[@hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x5e, 0x4, [0x6, 0x8, 0x0, 0x0, 0x10000, 0xfff, 0x4, 0x1b]}}]}}}], 0x68}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000ac0)="9c1beea4b2cdd4bb40e7856cdb18cc4009841f581c1d90539d8fd6cf772cf5f34c4c59ab34b10a358c97f4e9bee5d65af43193c949a28b5cefb8a842", 0x3c}], 0x1, &(0x7f0000000b40)=[@dstopts_2292={{0xa8, 0x29, 0x4, {0xff, 0x11, '\x00', [@generic={0x4, 0x88, "eb267e0bee76652b42149f6e2845fa5856ae9f4ab2bdbb07e5009d1bc7b97d2326eda935ee36c89c3c352b5842d90532bc9cbb6e3cf553158c2f49bf5da0ed4a0943d4eafb1164f0d08f99ce1883a0e26f57017160c4e9ee132a47e93e096611d52502028e869921854bc24c53387b4d1cf3aee4fb745f9f84c931cdbbd02018fbaabca5c0574c95"}]}}}], 0xa8}}, {{&(0x7f0000000c00)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000c40)="43c09b67f89e05bb02765156b4859ed8dd24518da55582bb116b76b8595aff580c70a800c66f584972c321f6c1b5781027b43fe600452d8f5344ceeacfd4cdb48a23515a814d071bb9821946848d0e57fc291592f4203fa01a499f081e7dd74fd920108f0ee00deb1546d323d23158f7f7812e974dba", 0x76}], 0x1, &(0x7f0000000d00)=[@hopopts={{0x18, 0x29, 0x36, {0x89}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3ff}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @dstopts={{0x108, 0x29, 0x37, {0x29, 0x1d, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @generic={0x5, 0x9f, "32796d848044174c9a8c26626967e58281ed15cd30dd3d4b9ed2e838314249f3be8e675a6fbd2893c039fc92db7bfb882f6f9a3ef3e71a9f0b1c2682d5044ab05f8ff6a25659fea8b653fc560f74982911800d8b75fbe46a2e8a54cd69f45b71460ec7e9a1de8e5e10e60c54f7e472ed3bc358a0dc5674134be363e59cfb3090a537fcc4cd22e78aeb815ea975de2f55734763d1ce3d1e7d7b747b6445ae47"}, @pad1, @generic={0x5, 0x1c, "c0bf4a5b143af3a22f356f8746e6d573bdc276ad6fe51fe8cdd6f708"}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x10001}, @generic={0x9, 0x15, "7bbc25b8565057422b4e76874a1fbe6d1c320fa89c"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x10001}}, @hopopts={{0x30, 0x29, 0x36, {0x2b, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @hao={0xc9, 0x10, @mcast2}]}}}], 0x198}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000ec0)="4c255afe864db7645bca92ad8b88a038c10a3150e0cc10c5958d84f576d896a24d7233eaeffe50d9be2b8321283b4cb9ade23280124397c5659af380cded4d5ca7d894becb575f3c8fd8b600f74749b1f928e65221d989faa01adba3f89bc6d9868bc52e2edd4a857056b027aa45a03335e80ee37e7e94728686a4f415d1c12f3e9248e1115bd0156e68c97f9d43ff85953e0369cd2bc41e2aeefbcc345af51175e1f7370f74c8ce8e10bcdcc01f1356770fc718c5621973f50bee3e84da2ebf39c803246bbdc0aafb", 0xc9}, {&(0x7f0000000fc0)="7edefdc0c017103f15f61b3c15cc9427666dc52fe9d94c110dbb3c752bc6311f039aac8653778755b817a7f7b4b748cc889e271017a9da3785ce2ca507d8df619cfc263513ec2d797c5d9d90846b5aa18e99", 0x52}], 0x2, &(0x7f0000001080)=[@flowinfo={{0x14, 0x29, 0xb, 0x4c}}, @rthdr={{0x78, 0x29, 0x39, {0x6c, 0xc, 0x1, 0x0, 0x0, [@private1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}}}], 0x90}}], 0x4, 0x20040010)
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001240), 0x240401, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000001280)={0x4, {{0xa, 0x4e23, 0x100, @dev={0xfe, 0x80, '\x00', 0xc}, 0x80000000}}, {{0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff}}}, 0x108)

00:41:04 executing program 2:
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4051}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r3=>0x0})
r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x804)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0xf09, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20042804}, 0x1)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r7, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl0\x00', r8, 0x0, 0x1, 0x5, 0x344, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x700, 0x40, 0x8, 0x27c}})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4004800)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000009c0)={0xb8, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@fda={0x66646185, 0x1, 0x2, 0x2a}, @fda={0x66646185, 0xa, 0x1, 0x28}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000780)={0x0, 0x20, 0x40}}, 0x1000}, @acquire={0x40046305, 0x3}, @increfs={0x40046304, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000007c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x1, 0x9}}, &(0x7f0000000840)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0x50, 0x0, &(0x7f0000000940)="9f40a7ef8618a27e1c4d87dc70d0920b29ef99200a8af7f7069115eb6ae19746084e4d355ac590ac04539549ee59188ee76473c5a2f92fc5858cafe21c2787ea408244a943c9b4b55338a126a1eb047a"})
r9 = fork()
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40880}, 0x4)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r10)

[  126.019426] audit: type=1400 audit(1747960864.126:7): avc:  denied  { execmem } for  pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
00:41:04 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x3, 0x8, 0x6, 0xfffffffffffffff7})
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4800)
write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x1, 0x80}, 0xb)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9000400}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf4, r3, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xba9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc9c}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x12}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4048000}, 0x800)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x2ac80, 0x0)
getsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f00000003c0)=""/45, &(0x7f0000000400)=0x2d)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
r5 = accept$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000480)=0x1c)
getsockopt$inet6_int(r5, 0x29, 0x3c, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/binder1\x00', 0x806, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000580)={0x1})
setsockopt$inet6_int(r4, 0x29, 0x12, &(0x7f00000005c0)=0x8, 0x4)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/custom0\x00', 0x2, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000640)={0x3})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000680)={0x3})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0xda93294348657326, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004044}, 0x810)

00:41:04 executing program 4:
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000010)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0)
write$P9_RSTAT(r0, &(0x7f0000000140)={0x4b, 0x7d, 0x2, {0x0, 0x44, 0xd1, 0x7, {0x1, 0x0, 0x5}, 0x44000000, 0x1ff, 0x1, 0xffffffff00000000, 0x0, '', 0x5, ')+})@', 0x2, '\\]', 0xa, '{:}\'+.\'%%{'}}, 0x4b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000240)={@empty, @initdev, <r3=>0x0}, &(0x7f0000000280)=0xc)
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="d93074dc9808"}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x554}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe099}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4040000)
socketpair(0x5, 0x4, 0x64, &(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000400)=""/244, &(0x7f0000000500)=0xf4)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0x7f, 0x6f, 0x100, 0x80, 0x44010001, r3})
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0)
setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000600)={0x3a, 0x12, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x31}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1]}, 0x98)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6(0xa, 0x2, 0x718f)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000006c0)={'batadv0\x00', <r9=>0x0})
setsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000700)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r9}, 0x14)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x8884}, 0x4004004)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x10001, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x49885}, 0x800)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000a40)={0xa0, 0x19, 0x2, {0x0, {0x0, 0x4}, 0x30, 0x0, 0xee00, 0x1, 0x4, 0x5, 0x9, 0x3, 0x34f, 0x81, 0x3, 0x4f58, 0x5, 0x475a, 0x1, 0x6, 0x4, 0x2}}, 0xa0)

00:41:04 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x414080, 0x0)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x1e9}, 0xb)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0x2005, {0x1, 0x4, 0x2}, 0x21, 0xffffffffffffffff, 0x0, 0x9, 0x400, 0x7, 0xed57, 0x5, 0x9000000000000, 0x5c8, 0x3, 0x401, 0x3, 0x1f, 0x40, 0x80000001, 0x2, 0xc09}}, 0xa0)
write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x20, 0x4, 0x7}}, 0x14)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
write$P9_RLOCK(r2, &(0x7f0000000200)={0x8, 0x35, 0x2}, 0x8)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
write$P9_RSETATTR(r4, &(0x7f0000000280)={0x7, 0x1b, 0x2}, 0x7)
r5 = syz_io_uring_setup(0x2914, &(0x7f00000002c0)={0x0, 0xdea0, 0x0, 0x3, 0x17c}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x74, 0x0, &(0x7f0000000480)=[@increfs_done={0x40106308, 0x1}, @dead_binder_done, @clear_death, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x100}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}], 0xa2, 0x0, &(0x7f0000000500)="b55d3b4cae6afe18481b3bd217f3c9959d9f6d62a017dac628354b0eae0db35481852b81be29f341bf5fd8a1983a8a801fbfb19765ce463c49b0c159580dbaef84945d8431604229be21178ce26c58bbf667ed6f3c7c3fb7c41d8a0c1e7a8ee4e07e2192d1763378db8e772041815b3fa95fef494d120ce221d2ca7e41c7998335a377f8478f5db6427a41eaf29b42676bf0c2a99537a79602cdf607efdad720b32c"})
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, {0xa, 0x4e20, 0x4, @local, 0xb22b}, 0xff, [0x1, 0x2, 0x2, 0x400, 0x5, 0x9, 0x1]}, 0x5c)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0)
syz_io_uring_setup(0x5d93, &(0x7f0000000680)={0x0, 0x8dac, 0x20, 0x3, 0x14e, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000700), &(0x7f0000000740)=<r8=>0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000800)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r9, 0x80, &(0x7f0000000780)=@isdn={0x22, 0x4, 0x8, 0x3f, 0x83}}, 0x9)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000840)={{{@in=@empty, @in=@multicast2, 0x4e22, 0x0, 0x4e20, 0x7, 0xa, 0x20, 0x0, 0x6, 0x0, 0xee01}, {0x200, 0x4, 0x1, 0xd80, 0x885a, 0x4, 0x5, 0x7}, {0xff, 0x8, 0x9, 0x8}, 0xdf0, 0x6e6bb6, 0x2, 0x1, 0x1}, {{@in=@remote, 0x4d5, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x3505, 0x4, 0x1, 0x9, 0x1, 0x9, 0x1}}, 0xe8)
r10 = socket$inet6(0xa, 0x80003, 0x3ff)
setsockopt$inet6_MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000940)={0x7f, 0x1, 0x0, 0x5, 0x26}, 0xc)

00:41:04 executing program 6:
r0 = getuid()
getresuid(&(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@loose}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x88c6}}], [{@uid_gt={'uid>', 0xee01}}, {@euid_eq}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r0}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@measure}, {@fowner_eq={'fowner', 0x3d, r1}}]}})
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x400000, 0x0)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x40442, 0x0)
ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000380))
r6 = accept4$inet6(r5, &(0x7f0000000440)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000480)=0x1c, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e21, 0x200, 0x4e20, 0x87, 0x2, 0x20, 0x20, 0x0, 0x0, r1}, {0x0, 0x2, 0x1ff, 0x7, 0x0, 0x6, 0x0, 0xff}, {0x10001, 0x6, 0x3, 0x5}, 0xfff, 0x6e6bb5, 0x1bb1c3aa5d33dd54, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x4d2, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x3506, 0x3, 0x3, 0x1, 0x7, 0x1f, 0xa9}}, 0xe8)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x4002, 0x0)
mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x10, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '9p\x00'}}, {@access_uid={'access', 0x3d, r1}}], [{@fowner_lt={'fowner<', r2}}, {@fowner_lt={'fowner<', r2}}, {@euid_eq={'euid', 0x3d, r3}}, {@fowner_gt={'fowner>', r3}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@audit}, {@subj_user={'subj_user', 0x3d, 'fowner'}}]}})
socketpair(0x22, 0x800, 0x1, &(0x7f00000007c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
accept$inet6(r8, &(0x7f0000000800), &(0x7f0000000840)=0x1c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0xc0)
r10 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x9)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000ac0)={0x1c, 0x0, &(0x7f00000009c0)=[@free_buffer={0x40086303, r10}, @clear_death={0x400c630f, 0x2}], 0xb8, 0x0, &(0x7f0000000a00)="a862db69895a4118e3ec564cc5f4ddf99e4d2e905553bff8d89ada81074a901f8b409593da343a133c710081dd38db056f7d3e7593adc1c714c0479b96084e8e6d83e63047e775333be947142d3fae4f6b0763c2f6b941d6ed5f536fb8081408299f4cb9baa2d4af1d487657cfc1408339f4f9438d46e999a97683b6dba3716d9d1935831a36521c5859914d42630c3d7f86ec8343f7a796ff8c758f838145e6695a0bff01543468f08ff01aacec3f1217047340be7742f8"})
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000b00), 0x4)
write$P9_RAUTH(r7, &(0x7f0000000b40)={0x14, 0x67, 0x2, {0x80, 0x1, 0x1}}, 0x14)

00:41:04 executing program 7:
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x35, 0x1}, 0x8)
write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x43, 0x7d, 0x2, {0x0, 0x3c, 0x3f, 0x1, {0x4, 0x1, 0x2}, 0x10000000, 0x0, 0xe0e, 0x1, 0x2, '\x12+', 0x0, '', 0x0, '', 0x7, ')-.[#v/'}}, 0x43)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x42200, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000140)={0x68, 0x29, 0x2, {0x4, [{{0x0, 0x3}, 0x10001, 0x5, 0x7, './file0'}, {{0x10, 0x0, 0x8}, 0x7, 0x6, 0x7, './file0'}, {{0x10, 0x3, 0x4}, 0x3, 0x3, 0x7, './file0'}]}}, 0x68)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0xb3, @any, 0x20, 0x1}, 0xe)
write$P9_RWSTAT(r0, &(0x7f0000000200)={0x7, 0x7f, 0x1}, 0x7)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
write$P9_RUNLINKAT(r0, &(0x7f0000000240)={0x7, 0x4d, 0x1}, 0x7)
write$P9_RSTAT(r0, &(0x7f0000000280)={0x3d, 0x7d, 0x2, {0x0, 0x36, 0x3, 0x4, {0x30, 0x3, 0x8}, 0x100000, 0xffffffff, 0x188b0e92, 0x80000000, 0x1, '\\', 0x2, '\x12+'}}, 0x3d)
pipe2$9p(&(0x7f00000002c0), 0x4800)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10e032, r0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r0, 0x80, &(0x7f0000000300)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x0, 0x0, 0x1}, 0x3ff)
write$P9_RXATTRCREATE(r0, &(0x7f00000003c0)={0x7, 0x21, 0x1}, 0x7)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0xa, 0x3})
pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
write$P9_RGETLOCK(r3, &(0x7f00000004c0)={0x21, 0x37, 0x1, {0x2, 0x4647, 0x7, 0xffffffffffffffff, 0x3, '.-,'}}, 0x21)
write$P9_RSETATTR(r3, &(0x7f0000000500)={0x7, 0x1b, 0x1}, 0x7)
write$P9_RLCREATE(r3, &(0x7f0000000540)={0x18, 0xf, 0x2, {{0x2, 0x2, 0x6}, 0x3}}, 0x18)

[  127.638916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  127.642350] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  127.645339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  127.653973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  127.659163] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  127.699744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.702063] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.706063] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.713975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.718177] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.764046] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  127.771934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  127.776690] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  127.780154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  127.785268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  127.787307] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  127.790892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  127.793097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  127.795194] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  127.797907] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  127.801878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  127.810746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  127.822050] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  127.836044] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  127.850418] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  127.851955] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  127.880030] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  127.898138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  127.900785] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  127.916003] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  127.920746] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  127.924131] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  127.927595] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  127.939013] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  127.953590] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  127.967700] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  127.976213] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  127.979940] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  128.035671] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  128.042582] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  129.718194] Bluetooth: hci0: command tx timeout
[  129.781586] Bluetooth: hci1: command tx timeout
[  129.909663] Bluetooth: hci2: command tx timeout
[  129.973741] Bluetooth: hci4: command tx timeout
[  129.973826] Bluetooth: hci3: command tx timeout
[  130.037745] Bluetooth: hci5: command tx timeout
[  130.101628] Bluetooth: hci6: command tx timeout
[  130.165564] Bluetooth: hci7: command tx timeout
[  131.765659] Bluetooth: hci0: command tx timeout
[  131.831640] Bluetooth: hci1: command tx timeout
[  131.959647] Bluetooth: hci2: command tx timeout
[  132.021608] Bluetooth: hci4: command tx timeout
[  132.022516] Bluetooth: hci3: command tx timeout
[  132.085588] Bluetooth: hci5: command tx timeout
[  132.149567] Bluetooth: hci6: command tx timeout
[  132.213895] Bluetooth: hci7: command tx timeout
[  133.813563] Bluetooth: hci0: command tx timeout
[  133.879560] Bluetooth: hci1: command tx timeout
[  134.006528] Bluetooth: hci2: command tx timeout
[  134.069648] Bluetooth: hci4: command tx timeout
[  134.070090] Bluetooth: hci3: command tx timeout
[  134.133717] Bluetooth: hci5: command tx timeout
[  134.197653] Bluetooth: hci6: command tx timeout
[  134.262110] Bluetooth: hci7: command tx timeout
[  135.861550] Bluetooth: hci0: command tx timeout
[  135.925740] Bluetooth: hci1: command tx timeout
[  136.053630] Bluetooth: hci2: command tx timeout
[  136.119499] Bluetooth: hci3: command tx timeout
[  136.119630] Bluetooth: hci4: command tx timeout
[  136.181879] Bluetooth: hci5: command tx timeout
[  136.246628] Bluetooth: hci6: command tx timeout
[  136.310940] Bluetooth: hci7: command tx timeout
[  190.106902] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  190.112229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  190.116843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  190.121928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  190.123355] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  190.127784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  190.134061] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  190.149802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  190.151485] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  190.161868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  190.168067] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  190.171122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  190.174050] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  190.188773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  190.218335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  190.238985] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  190.244189] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  190.247652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  190.277968] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  190.291935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  190.415856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  190.431070] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  190.461187] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  190.475636] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  190.528941] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  190.581539] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  190.584027] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  190.588043] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  190.593146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  190.597701] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  190.652230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  190.655171] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  190.661242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  190.667036] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  190.670682] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  190.690800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  190.696829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  190.704144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  190.734995] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  190.740976] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  192.246787] Bluetooth: hci0: command tx timeout
[  192.246898] Bluetooth: hci1: command tx timeout
[  192.439499] Bluetooth: hci3: command tx timeout
[  192.502122] Bluetooth: hci2: command tx timeout
[  192.629525] Bluetooth: hci7: command tx timeout
[  192.693543] Bluetooth: hci4: command tx timeout
[  192.821686] Bluetooth: hci6: command tx timeout
[  192.886597] Bluetooth: hci5: command tx timeout
[  194.294511] Bluetooth: hci0: command tx timeout
[  194.295007] Bluetooth: hci1: command tx timeout
[  194.486560] Bluetooth: hci3: command tx timeout
[  194.553801] Bluetooth: hci2: command tx timeout
[  194.677949] Bluetooth: hci7: command tx timeout
[  194.741777] Bluetooth: hci4: command tx timeout
[  194.869538] Bluetooth: hci6: command tx timeout
[  194.936501] Bluetooth: hci5: command tx timeout
[  196.341697] Bluetooth: hci0: command tx timeout
[  196.342391] Bluetooth: hci1: command tx timeout
[  196.535834] Bluetooth: hci3: command tx timeout
[  196.597523] Bluetooth: hci2: command tx timeout
[  196.725511] Bluetooth: hci7: command tx timeout
[  196.789512] Bluetooth: hci4: command tx timeout
[  196.918496] Bluetooth: hci6: command tx timeout
[  196.981677] Bluetooth: hci5: command tx timeout
[  198.389555] Bluetooth: hci1: command tx timeout
[  198.390060] Bluetooth: hci0: command tx timeout
[  198.582826] Bluetooth: hci3: command tx timeout
[  198.646608] Bluetooth: hci2: command tx timeout
[  198.773554] Bluetooth: hci7: command tx timeout
[  198.838746] Bluetooth: hci4: command tx timeout
[  198.966753] Bluetooth: hci6: command tx timeout
[  199.029937] Bluetooth: hci5: command tx timeout
[  252.171194] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  252.174096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  252.175878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  252.182471] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  252.189157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  252.199119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  252.203333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  252.209268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  252.228054] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  252.250046] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  252.429586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  252.433017] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  252.435312] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  252.444297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  252.450239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  252.494412] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  252.500387] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  252.503105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  252.511210] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  252.524311] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  252.730297] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  252.741389] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  252.747375] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  252.751634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  252.762916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  252.776068] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  252.788272] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  252.795562] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  252.802926] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  252.807799] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  252.820893] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  252.826825] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  252.827399] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  252.832019] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  252.836961] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  252.868147] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  252.868525] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  252.873352] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  252.890868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  252.924195] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  254.262531] Bluetooth: hci0: command tx timeout
[  254.327246] Bluetooth: hci1: command tx timeout
[  254.517759] Bluetooth: hci2: command tx timeout
[  254.581719] Bluetooth: hci3: command tx timeout
[  254.966770] Bluetooth: hci6: command tx timeout
[  254.967360] Bluetooth: hci4: command tx timeout
[  254.968631] Bluetooth: hci5: command tx timeout
[  255.030565] Bluetooth: hci7: command tx timeout
[  256.309566] Bluetooth: hci0: command tx timeout
[  256.373780] Bluetooth: hci1: command tx timeout
[  256.565695] Bluetooth: hci2: command tx timeout
[  256.631013] Bluetooth: hci3: command tx timeout
[  257.014769] Bluetooth: hci5: command tx timeout
[  257.015245] Bluetooth: hci4: command tx timeout
[  257.015823] Bluetooth: hci6: command tx timeout
[  257.077497] Bluetooth: hci7: command tx timeout
[  258.357637] Bluetooth: hci0: command tx timeout
[  258.422511] Bluetooth: hci1: command tx timeout
[  258.614668] Bluetooth: hci2: command tx timeout
[  258.677549] Bluetooth: hci3: command tx timeout
[  259.061542] Bluetooth: hci6: command tx timeout
[  259.062036] Bluetooth: hci4: command tx timeout
[  259.062485] Bluetooth: hci5: command tx timeout
[  259.126489] Bluetooth: hci7: command tx timeout
[  260.406731] Bluetooth: hci0: command tx timeout
[  260.469744] Bluetooth: hci1: command tx timeout
[  260.663599] Bluetooth: hci2: command tx timeout
[  260.726786] Bluetooth: hci3: command tx timeout
[  261.110890] Bluetooth: hci5: command tx timeout
[  261.111372] Bluetooth: hci4: command tx timeout
[  261.112563] Bluetooth: hci6: command tx timeout
[  261.174768] Bluetooth: hci7: command tx timeout
[  314.572092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  314.577750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  314.583955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  314.592297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  314.603022] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  314.706657] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  314.718092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  314.721087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  314.743263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  314.752057] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  314.797921] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  314.800981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  314.806042] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  314.841825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  314.849094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  314.865309] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  314.878814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  314.884728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  314.890402] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  314.919889] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  314.924407] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  314.927003] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  314.929413] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  314.943635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  314.946978] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  315.002323] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  315.015722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  315.022324] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  315.049111] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  315.052207] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  315.070116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  315.085287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  315.089960] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  315.097712] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  315.107993] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  315.113917] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  315.121380] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  315.133192] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  315.206182] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  315.271051] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  316.661608] Bluetooth: hci0: command tx timeout
[  316.853578] Bluetooth: hci1: command tx timeout
[  316.917614] Bluetooth: hci2: command tx timeout
[  317.047073] Bluetooth: hci3: command tx timeout
[  317.047288] Bluetooth: hci4: command tx timeout
[  317.173722] Bluetooth: hci5: command tx timeout
[  317.237623] Bluetooth: hci6: command tx timeout
[  317.366016] Bluetooth: hci7: command tx timeout
[  318.711490] Bluetooth: hci0: command tx timeout
[  318.902774] Bluetooth: hci1: command tx timeout
[  318.966538] Bluetooth: hci2: command tx timeout
[  319.093511] Bluetooth: hci3: command tx timeout
[  319.093583] Bluetooth: hci4: command tx timeout
[  319.222529] Bluetooth: hci5: command tx timeout
[  319.285600] Bluetooth: hci6: command tx timeout
[  319.413507] Bluetooth: hci7: command tx timeout
[  320.758769] Bluetooth: hci0: command tx timeout
[  320.951509] Bluetooth: hci1: command tx timeout
[  321.014524] Bluetooth: hci2: command tx timeout
[  321.141558] Bluetooth: hci3: command tx timeout
[  321.142021] Bluetooth: hci4: command tx timeout
[  321.270832] Bluetooth: hci5: command tx timeout
[  321.333512] Bluetooth: hci6: command tx timeout
[  321.461544] Bluetooth: hci7: command tx timeout
[  322.805511] Bluetooth: hci0: command tx timeout
[  322.998517] Bluetooth: hci1: command tx timeout
[  323.061521] Bluetooth: hci2: command tx timeout
[  323.189547] Bluetooth: hci4: command tx timeout
[  323.189838] Bluetooth: hci3: command tx timeout
[  323.317663] Bluetooth: hci5: command tx timeout
[  323.383543] Bluetooth: hci6: command tx timeout
[  323.510090] Bluetooth: hci7: command tx timeout
[  376.974777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.981094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.985963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  377.001375] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  377.009511] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  377.111694] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  377.129222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  377.134578] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  377.140275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  377.143718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  377.148230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  377.154334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  377.157012] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  377.160021] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  377.190843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  377.284689] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  377.296945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  377.299737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  377.308099] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  377.317893] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  377.326363] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  377.334582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  377.367139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  377.367243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  377.387175] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  377.400981] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  377.402928] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  377.424112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  377.424170] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  377.451352] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  377.574729] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  377.580199] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  377.597233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  377.597262] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  377.605342] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  377.607800] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  377.671218] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  377.678259] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  377.696636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  377.714683] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  379.062613] Bluetooth: hci0: command tx timeout
[  379.189852] Bluetooth: hci1: command tx timeout
[  379.318534] Bluetooth: hci2: command tx timeout
[  379.382080] Bluetooth: hci3: command tx timeout
[  379.573761] Bluetooth: hci5: command tx timeout
[  379.574983] Bluetooth: hci4: command tx timeout
[  379.830703] Bluetooth: hci7: command tx timeout
[  379.830813] Bluetooth: hci6: command tx timeout
[  381.109651] Bluetooth: hci0: command tx timeout
[  381.240510] Bluetooth: hci1: command tx timeout
[  381.365634] Bluetooth: hci2: command tx timeout
[  381.429675] Bluetooth: hci3: command tx timeout
[  381.621687] Bluetooth: hci4: command tx timeout
[  381.621915] Bluetooth: hci5: command tx timeout
[  381.877635] Bluetooth: hci6: command tx timeout
[  381.879649] Bluetooth: hci7: command tx timeout
[  383.157745] Bluetooth: hci0: command tx timeout
[  383.285551] Bluetooth: hci1: command tx timeout
[  383.413563] Bluetooth: hci2: command tx timeout
[  383.478782] Bluetooth: hci3: command tx timeout
[  383.670583] Bluetooth: hci4: command tx timeout
[  383.673471] Bluetooth: hci5: command tx timeout
[  383.926684] Bluetooth: hci7: command tx timeout
[  383.926774] Bluetooth: hci6: command tx timeout
[  385.206622] Bluetooth: hci0: command tx timeout
[  385.333582] Bluetooth: hci1: command tx timeout
[  385.461626] Bluetooth: hci2: command tx timeout
[  385.525777] Bluetooth: hci3: command tx timeout
[  385.717718] Bluetooth: hci5: command tx timeout
[  385.717816] Bluetooth: hci4: command tx timeout
[  385.973583] Bluetooth: hci6: command tx timeout
[  385.974508] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
00:46:08  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=28438d498b4f5991 RDX=00000000fd3800be
RSI=00000000fbc386a6 RDI=00000000dab44b10 RBP=ffff8880268a7390 RSP=ffff8880268a72b8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=ffff8880268a7380 R14=ffff888023133700 R15=ffff8880268a7338
RIP=ffffffff84b109c0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f64deaff540 00000000 00000000
GS =0000 ffff8880e5634000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f14bb741438 CR3=0000000029b60000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e
XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249
XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=1ffff1100d9e114f
RSI=ffff88802c51faa0 RDI=ffff88806cf08ac8 RBP=00007fffffffefbb RSP=ffff88806cf08a08
R8 =0000000000000001 R9 =ffff88806cf08ab8 R10=000000000003b3bd R11=000000000002181c
R12=ffff88806cf08ad8 R13=ffff88806cf08ac0 R14=ffff88802c51faa0 R15=ffff88806cf08a78
RIP=ffffffff81354b14 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5734000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7580569710 CR3=0000000024786000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ff0000000000ff00000000000000ff00
XMM02=000000000000000000ff000000000000 XMM03=000000000000000000ff0000000000ff
XMM04=0000ff00000000000000ff0000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000