Warning: Permanently added '[localhost]:39429' (ECDSA) to the list of known hosts.
2025/05/25 02:58:10 fuzzer started
2025/05/25 02:58:10 dialing manager at localhost:46087
syzkaller login: [  100.735010] cgroup: Unknown subsys name 'net'
[  100.883734] cgroup: Unknown subsys name 'cpuset'
[  100.931013] cgroup: Unknown subsys name 'rlimit'
2025/05/25 02:58:35 syscalls: 226
2025/05/25 02:58:35 code coverage: enabled
2025/05/25 02:58:35 comparison tracing: enabled
2025/05/25 02:58:35 extra coverage: enabled
2025/05/25 02:58:35 setuid sandbox: enabled
2025/05/25 02:58:35 namespace sandbox: enabled
2025/05/25 02:58:35 Android sandbox: enabled
2025/05/25 02:58:35 fault injection: enabled
2025/05/25 02:58:35 leak checking: enabled
2025/05/25 02:58:35 net packet injection: enabled
2025/05/25 02:58:35 net device setup: enabled
2025/05/25 02:58:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/25 02:58:35 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/25 02:58:35 USB emulation: enabled
2025/05/25 02:58:35 hci packet injection: enabled
2025/05/25 02:58:35 wifi device emulation: enabled
2025/05/25 02:58:35 802.15.4 emulation: enabled
2025/05/25 02:58:35 fetching corpus: 0, signal 0/0 (executing program)
2025/05/25 02:58:36 starting 8 fuzzer processes
02:58:36 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
r1 = socket(0x26, 0x8, 0x2)
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x28}, 0x4)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x592, 0x5, 0xff81, 0x101, 0x9, "cea5b8b6c9be5650"})
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000000c0)={0x29, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8001}]}, 0x10)
r2 = socket(0x29, 0x0, 0x3f)
setsockopt(r2, 0x3, 0x3, &(0x7f0000000100)="118dc917759fe2fd35ee9f6947443f7b7d4dcaec85f2754c3b962fa0cb85b22829123ba96169ddee398eb0492c6f7825713d0efb23f9e76eb10d3b1deebe867cd29109b6e9bc1588fa681378c94b97ef1bd6aaa0d7eafd0aa8e7e5d2df264d3a6d221eaf013a4576ac99fe195da99e45e5eaa947", 0x74)
ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x40}, @generic={0x1, "74c5b38997ffd29299314ca56dd2"}, @generic={0x11, "94e8160ea0f19f3b98bc2b325211"}, 0x8, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)='wg0\x00', 0x1, 0x5, 0x4})
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000002c0)={@loopback, <r3=>0x0}, &(0x7f0000000300)=0x14)
sendto(r2, &(0x7f0000000240)="718d8f3d2d4da9b606c4118f3152ca12a85ae4fb3e7ba62956939927f25976733f8b01c5d27868f5685e92be028e8abf552d9551a9a7be0eacef0b60dad555381f95fb430f666a7d61e762c95f47b5be08a69bcddaa5fde8b48a0bf51ac2ab162b1b8239004f06f426", 0x69, 0x0, &(0x7f0000000340)=@can={0x1d, r3}, 0x80)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000003c0)={0x33, 0x13, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x7, 0x6, [0x6, 0x156]}}, @ra={0x5, 0x2, 0x34}, @generic={0x88, 0x41, "8daa60e805af1d3081d3f1f1a4d75dbfedd10ca6058dae539f3e713ee2d5a1acdf51aaa578f5f4172736405180613cd32f3894eb0e6d2c1f20960c7d6277860e0b"}, @pad1, @generic={0x81, 0x39, "ce095000f14911749f5c3304de4883390a417cc154837ce0b7a0caa4804e51831e41e543b88f90cfb99e8d066083b7b21a0620252ff8df39aa"}]}, 0xa8)
r4 = accept(r2, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000500)=0x80)
getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000540)={@mcast1}, &(0x7f0000000580)=0x14)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000005c0)={0x2, 0x0, 0x11, 0x1}, 0xc)
getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000600)={@initdev}, &(0x7f0000000640)=0x14)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000680))
socket$inet_icmp(0x2, 0x2, 0x1)
r5 = socket$inet6(0xa, 0xa, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'veth1_to_batadv\x00'})

02:58:36 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/200, 0xc8}, {&(0x7f0000000100)=""/129, 0x81}, {&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f00000002c0)=""/138, 0x8a}, {&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/201, 0xc9}], 0x7}, 0x8001}, {{&(0x7f00000006c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000740)=""/66, 0x42}, {&(0x7f00000007c0)=""/227, 0xe3}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x3, &(0x7f0000000940)=""/44, 0x2c}, 0x8}, {{&(0x7f0000000980)=@hci, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f0000000b00)=""/142, 0x8e}, {&(0x7f0000000bc0)=""/153, 0x99}, {&(0x7f0000000c80)=""/157, 0x9d}, {&(0x7f0000000d40)=""/58, 0x3a}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/243, 0xf3}, {&(0x7f0000001e80)=""/110, 0x6e}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/173, 0xad}], 0xa, &(0x7f0000003080)=""/30, 0x1e}, 0x2}], 0x3, 0x40000000, &(0x7f0000003180)={0x0, 0x3938700})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000031c0)={'batadv0\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000003240), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x2c, r1, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000003400)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x1c, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003480), r2)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000003580)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003540)={&(0x7f00000034c0)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_GET(r4, &(0x7f0000003680)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x420800}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x73}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044004}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x3, 0x80000, 0x401)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003880)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000003940)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x2c, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffb}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40011)
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000007a80), 0x200880, 0x0)
sendmsg$FOU_CMD_ADD(r7, &(0x7f0000007b80)={&(0x7f0000007ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007b40)={&(0x7f0000007b00)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x4040081)
getsockopt(r7, 0x80000000, 0x2, &(0x7f0000007bc0)=""/28, &(0x7f0000007c00)=0x1c)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r8, 0x1, 0x53, &(0x7f0000007c40)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000007c80)=0x28)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000007e80)={&(0x7f0000007d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000007e40)={&(0x7f0000007dc0)={0x50, r3, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8001)

02:58:36 executing program 1:
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000))
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304)
ioctl$SNAPSHOT_S2RAM(r0, 0x330b)
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000080))
r1 = memfd_create(&(0x7f00000000c0)='/dev/nvram\x00', 0x3)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r1, 0x80000000, 0x80000})
write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x8, 0x0, 0x8}}, 0x14)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000180))
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000200)=0x2)
ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x6, 0xff, 0x1dba, 0x6}, 0x2fa, [0x1, 0x3, 0x1ff, 0x3, 0x7ff, 0xc000, 0x1000, 0x8001, 0x8, 0x3f, 0x2, 0x7, 0x6, 0xfffffff7, 0x0, 0x1800, 0xffffffff, 0x0, 0x7, 0x789, 0x200, 0x7, 0x31, 0x1f, 0x3, 0x1, 0x20, 0x9, 0x6, 0x1000, 0x10001, 0x8000, 0x1, 0xa, 0x5, 0x1c0, 0xabec, 0x5, 0x8, 0x39b, 0x3132, 0x9, 0x8, 0x7, 0x9, 0x81, 0x35b, 0x8, 0x7, 0x3, 0x200, 0x1, 0x0, 0x7, 0x1a, 0x0, 0x7, 0x7, 0x80000001, 0x3f, 0x9, 0x5, 0x6, 0x4, 0x6, 0x7, 0x40, 0x800, 0x7fffffff, 0xfff, 0x4, 0x7ff, 0x3, 0x7ff, 0x5, 0x6, 0x3f, 0x0, 0x5, 0x0, 0x7, 0x7fff, 0x0, 0x0, 0x3, 0x3, 0x7, 0x8, 0x298b, 0x200, 0x40, 0x10001, 0x9, 0x4, 0xab, 0x56a, 0x6, 0xfff, 0x10001, 0x3, 0x3, 0x7, 0x4, 0x28000000, 0x80, 0x5, 0x3, 0x2, 0x7ff0000, 0x8, 0x0, 0x3, 0x1f9, 0x5c, 0x7, 0xff8, 0x19, 0x148c, 0x1, 0xfffffff7, 0x5, 0xfffffe64, 0x4, 0x80000001, 0x7d63, 0x9, 0x0, 0x9, 0xe5, 0x6, 0x5, 0xfffffffe, 0x7, 0x0, 0x6, 0x9, 0x4, 0x6, 0x800, 0x4, 0xffff3d09, 0x0, 0x10000, 0x4b215f6e, 0x200000, 0x4, 0x8, 0x80000000, 0x8, 0xe8, 0x233, 0x100, 0x73c6, 0x380, 0xffffffff, 0x177, 0xffffffff, 0x6, 0x0, 0x8, 0x4, 0x7fffffff, 0x80000001, 0x4, 0xa1, 0x3, 0x3, 0x4, 0x4, 0x7, 0x180000, 0x4209, 0x1ff, 0xa26d0e1, 0x8, 0x3, 0xcf, 0x4, 0x10001, 0x1, 0xc9e, 0x401, 0x0, 0x5, 0x1, 0x7fff, 0xffffff31, 0x101, 0x5, 0x2b9, 0xe4, 0x2, 0x33, 0xc000, 0x77fa4d6e, 0x177, 0x3f, 0x400, 0x7, 0x4, 0x200, 0x5, 0xbe, 0x1000, 0x7, 0x80000000, 0x3, 0x20, 0x19f, 0x9, 0x9, 0x20, 0xfffffffa, 0x9, 0x0, 0x5, 0x8, 0xfffffffb, 0x215, 0x88f, 0xaf8, 0x4, 0x0, 0x7, 0xfff, 0x6, 0x4, 0x0, 0x401, 0x1, 0x2, 0x7, 0x7, 0xe, 0xef27, 0x3, 0x7fff, 0x5, 0x51, 0x200, 0x6c1c, 0x400, 0x36, 0xb9, 0x7fffffff, 0x101, 0xfffffffd, 0x62a3, 0x200, 0x3, 0x8c29cc48, 0x1000, 0x2, 0x1, 0xdb7, 0x5, 0x4, 0x7f, 0x1ff, 0xa3e, 0x800, 0x50000, 0x4732, 0x2, 0x803, 0x0, 0x7f, 0x100, 0x3b510c69, 0xffff, 0x4, 0x10000, 0x3, 0x101, 0x3, 0x10000, 0x401, 0x9, 0x70000000, 0x800, 0x401, 0x0, 0x6, 0x5, 0x7f, 0x3, 0x285e, 0x2, 0x6dd, 0x101, 0x4, 0x9, 0x996, 0x1, 0x93, 0x1, 0xffffffff, 0x1, 0x7fff, 0x0, 0x800, 0xffff, 0x10000, 0x7, 0x5, 0x8, 0x800, 0xff, 0x6, 0x3e44, 0x6, 0x2, 0x0, 0x4, 0x400, 0x7, 0x8, 0xffffffff, 0x7ff, 0x4, 0x7, 0x0, 0x7, 0x6, 0x7, 0x1ff, 0x2, 0x0, 0x3, 0x2, 0x4, 0xf9e1, 0x8001, 0x2, 0x2, 0x81, 0xfff, 0x100, 0x0, 0x6, 0xed0, 0x2, 0x4, 0x1, 0x7, 0x3, 0x1, 0x7, 0x3f, 0xfffffff9, 0x3f, 0x0, 0x3, 0x39c0, 0x100, 0x3, 0x10001, 0x73f, 0xd09, 0xb2, 0x6, 0x7fffffff, 0x1, 0x80000001, 0x1, 0x5, 0x8, 0x8, 0x4, 0x0, 0xdf1c, 0x9, 0x101, 0x1, 0x2, 0x4, 0x1000, 0x9, 0x8, 0xb8df, 0x0, 0xa51, 0xb367, 0x3f, 0x1144a50b, 0x0, 0x2, 0x7, 0x992, 0x3, 0x81, 0x0, 0x6, 0x1, 0xc8d3, 0x7, 0x5, 0x2, 0x80, 0xfffffeff, 0x2, 0x96, 0x0, 0x1f, 0x8, 0x854, 0x401, 0x3, 0x3, 0x0, 0xff, 0x8, 0x3859, 0x1, 0x9, 0x3ff, 0xffff, 0x36, 0xa1b, 0x8, 0x1, 0x0, 0x6, 0xfff, 0x101, 0x1ff, 0x4, 0xf1f, 0x20, 0x5, 0x6, 0x7, 0x2, 0x0, 0xa72e, 0xffff, 0xffff5697, 0x3, 0x1, 0xcc76, 0xfffffff7, 0x1f, 0x81, 0x43c, 0x1f, 0x3ff, 0xffffff13, 0x2, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x5, 0x39, 0xffffffff, 0x7ff, 0x6, 0x8, 0x9, 0x3, 0x3, 0x6, 0x81, 0x5, 0x7, 0x10001, 0x1, 0x6, 0x9, 0x5, 0x9, 0x3, 0x80, 0x81, 0x10000, 0x4, 0x17df400, 0x7, 0x5, 0xffff, 0x2067, 0x20, 0x4, 0x9, 0xa4f, 0x0, 0x400, 0x0, 0xff, 0xfd6, 0x8001000, 0x200, 0xd82a, 0x10000, 0x10000, 0x8, 0x1, 0x7, 0x40d, 0x3e000, 0x0, 0x1, 0xfffffffb, 0xa0, 0xffffffff, 0x5, 0xffff, 0x12dd, 0x81, 0x80, 0x3, 0xffffff01, 0x100, 0x9, 0x6, 0x3, 0x722, 0x8, 0x2, 0x0, 0x45f, 0x20000, 0x4, 0x6, 0x40, 0x9, 0x2, 0x770, 0x3, 0x5c0d, 0x0, 0xb0, 0x100, 0xd150, 0x400, 0xfffffff7, 0x3, 0x6, 0x7fff, 0x100, 0x1ff, 0x81, 0xfebb, 0x769a441d, 0x2, 0x10000, 0x7, 0x6, 0x100, 0x5, 0x1f, 0x8000000, 0x6, 0x29c4ec72, 0x100, 0xfffffffb, 0x1, 0x80000000, 0x4, 0x80000000, 0x100, 0x5, 0x8000, 0x80000000, 0x4, 0x401, 0xffffffff, 0x80000000, 0x401, 0x5, 0x0, 0x81, 0x7fff, 0x81, 0x0, 0x0, 0x3f, 0x70, 0x4, 0x4, 0xffb, 0x7, 0x1, 0x1, 0x3, 0x7, 0x8, 0x8001, 0x2, 0x2, 0x5, 0x7fffffff, 0xaec2, 0x4, 0x73, 0x80000000, 0x0, 0x5, 0x5aee6c5a, 0x2, 0xff, 0x0, 0x3, 0x3, 0x0, 0x8, 0xffff, 0x0, 0x10000, 0x3, 0x7f, 0x2, 0x7, 0x7f800, 0xffff97e9, 0xfffffffe, 0xbc9, 0x200, 0x7, 0x5, 0x7f, 0x1f, 0x9, 0x3, 0x0, 0x8, 0x81, 0xffff, 0x10001, 0x3, 0x9, 0x1, 0xd852, 0x5, 0x8, 0x800, 0x5, 0x1, 0x7, 0x100, 0x0, 0x8000, 0x7fff, 0x9183, 0x7, 0x10000, 0xaab, 0x7fffffff, 0x7, 0x200, 0x8, 0x0, 0x101, 0x9, 0x8, 0x5, 0x20, 0x2, 0xffffffff, 0x3, 0x0, 0x4, 0x20, 0x4, 0x5f, 0x9a, 0x7fff, 0x8001, 0x3, 0x4, 0x2, 0x0, 0xeb, 0x401, 0x1, 0x401, 0x805, 0xd8, 0x2, 0x0, 0x8, 0xfffff801, 0x0, 0x3, 0x6, 0xa4a6, 0x1, 0x10001, 0x2, 0x8, 0x1, 0x71e3, 0x2, 0x7, 0x6, 0x4, 0xffff, 0x0, 0x13aa, 0xffff48b0, 0x8, 0xc, 0x7f, 0xffffffff, 0xfff, 0x200, 0x14d6, 0xcbf7, 0xdee2, 0x5, 0x4, 0x7f, 0x0, 0x5, 0x1000, 0x5, 0x5, 0x8, 0x5, 0x0, 0x4, 0xc5ea, 0x1ff, 0x8, 0xff, 0xffffff80, 0x20, 0x1f, 0x6, 0x813bc36, 0x4, 0x4, 0x5, 0x9, 0x5, 0x0, 0x6, 0xffffff80, 0x2, 0x9, 0x0, 0x20, 0x1000, 0x6, 0x6c0f618, 0xaa2, 0x7fff, 0x1ff, 0xfffffffe, 0x7, 0x0, 0x200, 0x4d, 0x7, 0x1ff, 0x7fffffff, 0x7, 0x8000, 0x5, 0x9, 0x6, 0xffff0001, 0x4, 0x1, 0x0, 0x5, 0x6, 0x7, 0xdb5, 0x7, 0x4, 0x1, 0x1000, 0x9, 0x80000001, 0x0, 0x5, 0xe6fb, 0xfffffff7, 0x101, 0x8000, 0x2, 0xa00000, 0x9, 0x10001, 0x5, 0x2f0, 0x2, 0xffffffff, 0xfffffff8, 0x5, 0x1, 0x10001, 0x5, 0x2, 0xff, 0x5, 0x6, 0x3, 0xffffffdf, 0x80000001, 0x5c8, 0x0, 0x6596, 0x8, 0x40, 0x3, 0x200, 0x8000, 0x6, 0x7, 0x2, 0x1, 0x101, 0x9, 0x7, 0x3, 0x6, 0x3, 0x8000, 0x0, 0x2, 0x14, 0x8, 0x1b7, 0x3f, 0x1000, 0x6, 0x0, 0x401, 0x6, 0x101, 0xf02, 0x2, 0x0, 0xb0f, 0x5, 0x1ff, 0x8, 0x1, 0x401, 0x1000000, 0x7a, 0x6, 0x0, 0x3, 0xffffffff, 0xffffff7e, 0x8001, 0xefe4, 0x0, 0x0, 0x8, 0x3, 0x2, 0xcf8, 0x400, 0x2, 0x0, 0x1ff, 0xfffffff9, 0x2, 0x841, 0x1, 0x80000000, 0x4, 0x0, 0x2, 0x4, 0x4, 0x9, 0x40, 0x5, 0xfffffffd, 0x18, 0x2, 0x80, 0x200000, 0x81, 0x8001, 0x1000, 0x8, 0x350, 0x800, 0x47, 0x80000000, 0x7, 0x9, 0xca, 0x3, 0x3, 0x5, 0x80000000, 0x4, 0x800, 0x1f, 0x55, 0x1, 0x200, 0x7b7, 0xff, 0x8, 0x40, 0x1d0c, 0x2, 0x3, 0xf3, 0x7, 0x9, 0x0, 0x1, 0x4, 0x6, 0x1f, 0x3, 0x4, 0x100, 0xff, 0xffffb6eb, 0x5, 0x5, 0xa895, 0x4, 0x7, 0x0, 0x2, 0x2, 0xbb, 0x80000000, 0x7, 0x2, 0x1, 0xe7, 0x1, 0x8, 0x80, 0x2, 0xdd80, 0x5, 0x6, 0x7, 0x7fff, 0x1, 0x0, 0x422b, 0xeb57, 0x69, 0x5, 0x1ff, 0x2cb, 0x6, 0x119, 0x6, 0x6, 0x7fff, 0x5ab, 0xffffffff, 0x200, 0x6, 0x8, 0x5, 0x80000000, 0x6, 0xfffffe00, 0xfffffff9, 0x81, 0x0, 0x8, 0x800, 0x80000000, 0x10001, 0x40, 0x81, 0x101, 0xaf, 0x6, 0x3, 0x1d51, 0x80, 0xfffff76c, 0x3ff, 0x7, 0xffffffff, 0x9, 0xfff, 0x2f, 0x800, 0x4, 0x1000, 0x7, 0x1, 0x5, 0x5, 0x7, 0x7, 0x3, 0x3f, 0x51, 0x7f7c, 0x4, 0x6, 0x3, 0x8, 0x0, 0xb, 0x5, 0x7, 0xfe0000, 0x7fff, 0x5ea0, 0x7ff, 0x9, 0x7, 0xe9, 0x0, 0x1c00000, 0x1, 0x3, 0x81, 0x3]})
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000001280))
r2 = syz_open_dev$hiddev(&(0x7f00000012c0), 0x0, 0x141840)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000001300))
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000001340), 0x4)
ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f0000001380)={0x1, 0x1, 0xfffffff9, 0x1, 0x1000, 0x6c})
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x24, 0x0, 0x220, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x95d}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

02:58:36 executing program 2:
mknod(&(0x7f0000000000)='./file0\x00', 0x80, 0x6)
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@ax25={{0x3, @rose}, [@default, @default, @rose, @netrom, @default, @remote, @null, @rose]}, &(0x7f00000000c0)=0x80)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto(r1, &(0x7f000000a100)="539ddd61da7c1b11c01b5aceabe2d3fec94c943c2198edf941bfca2da0a4f43831845d3218bd090ddb8090d9614413abd682eeb59c404da39206953ed0c28389e73d8f993d875208f1b0333da6b42c2f7130ce692cb8d37d9b9797335898eedbecd5930e67c99e144d718951c8aff32cdf025f663a5e843e08f0caee445a0b24e08509d6804a3611959a605fb90ddee00e89080751c2648a88f1eb5b2408088d0e748359c3dfc89538750f791e42a430935b7f226c76fe0207e038bed7d3f99809854da04db3", 0xc6, 0x4000, &(0x7f000000a200)=@ll={0x11, 0x15, 0x0, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80)
r2 = accept(r0, &(0x7f000000a280)=@in={0x2, 0x0, @initdev}, &(0x7f000000a300)=0x80)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f000000a340)={0x2a, 0x29, 0x2, {0x5, [{{0x8, 0x4, 0x7}, 0x1000, 0x3f, 0x7, './file0'}]}}, 0x2a)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f000000a380)={0x3, 0x3, 0x8, 0x4, 0x401})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f000000a3c0)={0x1, 'wg0\x00', {}, 0x2})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f000000a540)={'veth1_virt_wifi\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f000000a640)={&(0x7f000000a400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f000000a600)={&(0x7f000000a580)={0x54, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101b}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x280}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe880}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8001)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto(r4, &(0x7f000000a680)="a90489a4f0ef7a98bdfb91a2396d79dc012e65cca7e2e526de1a52a7c952d6717dc3d7cd0036e4c3aeeb476d184b2708a9c465985458840b3c87739c5e72495d7711b990642b53e110c5d393f5e9356ee6399813f02b810cfee6279d09f2f84ce3bd316685bdd7b823699c79d2d81a195abaf958e1dd22736b2e60751c5e274488442be6763ae488ba0770cb2f2eb301cdc51798acf44b75991feff0edbc0f2af1ce96bbe6cfabb353eef25017c660e9e55e0ac5ff7a3ecbcb9a06fcef08f208173cb82ce02111a6039a2efa690ce02ba8da98e1b9b5df269520d3c0682228f979cc1b73498c727ed665a1523ad465edc73cc6e51ab910bacbbf5707de", 0xfd, 0x20000000, 0x0, 0x0)
getpeername(r2, &(0x7f000000a780)=@pppol2tpin6={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f000000a800)=0x80)
accept(r5, 0x0, &(0x7f000000a840))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f000000a880)={0x1, 'veth0_to_hsr\x00', {}, 0x6})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000a8c0)={'hsr0\x00'})
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f000000a900))
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f000000aa00)={&(0x7f000000a940)={0x10, 0x0, 0x0, 0xe58ab37303cf60fa}, 0xc, &(0x7f000000a9c0)={&(0x7f000000a980)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff9}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000015)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f000000aa40), 0x808800, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f000000aa80), &(0x7f000000aac0)=0xc)

[  126.373539] audit: type=1400 audit(1748141916.739:7): avc:  denied  { execmem } for  pid=282 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
02:58:36 executing program 4:
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\xf2-\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}]}, 0x7c}, 0x1, 0x0, 0x0, 0x60408c1}, 0x4000000)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4004042)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001600), r1)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000016c0)={&(0x7f00000015c0), 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4002)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}]}, 0x1c}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000001)
ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000001980)={0x0, @rc={0x1f, @none, 0x6}, @nfc={0x27, 0x0, 0x0, 0x4}, @tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}, 0x1}}, 0x7fff, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001940)='xfrm0\x00', 0x1c70, 0x56000000, 0xcc9f})
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000001a00), 0x10)
socketpair(0x21, 0x80000, 0x6, &(0x7f0000001a40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000001ac0)={0x0, @ax25={0x3, @bcast, 0x4}, @ethernet={0x306, @local}, @qipcrtr={0x2a, 0xffffffff, 0x8000}, 0x4, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000001a80)='batadv_slave_0\x00', 0xffffffff, 0x3f, 0x1f})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004c1}, 0x80)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000001c80)={0x0, @vsock={0x28, 0x0, 0x2710}, @phonet={0x23, 0x7f, 0x81, 0x3f}, @nl=@kern={0x10, 0x0, 0x0, 0x20}, 0x2, 0x0, 0x0, 0x0, 0x100, &(0x7f0000001c40)='wg2\x00', 0x7f, 0x7fff, 0x8001})

02:58:36 executing program 5:
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ':&\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x20040040)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0xb09, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:modules_dep_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x54)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@private0, 0x800, 0x1, 0x3, 0x0, 0x9, 0x5}, &(0x7f0000000340)=0x20)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0x800}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x7c}}, 0x20008000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x1d}, 0x4000810)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40010)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x84, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000840)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
write$P9_RREADDIR(r6, &(0x7f0000000880)={0xe4, 0x29, 0x2, {0x800, [{{0x2, 0x4, 0x8}, 0x80000001, 0x0, 0x7, './file0'}, {{0x1, 0x1, 0x2}, 0x1ff, 0x20, 0x7, './file0'}, {{0x4, 0x4, 0x6}, 0xa2db, 0x5, 0x7, './file0'}, {{0x40, 0x1, 0x4}, 0xfff, 0x6, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x9, 0x3, 0x7, './file0'}, {{0x8, 0x4, 0x5}, 0x5aa, 0x30, 0x7, './file0'}, {{0x20, 0x1, 0x7}, 0x8, 0xa, 0x7, './file0'}]}}, 0xe4)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000ac0)={&(0x7f0000000980), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xbc, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:groupadd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:useradd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xbc}}, 0xc001)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c40)={'bond_slave_1\x00', <r7=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000c80)={@private1={0xfc, 0x1, '\x00', 0x1}, r7}, 0x14)

02:58:36 executing program 7:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r0=>0x0})
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={r1, 0x1, 0xffffffffffffffff, 0x7ff})
r3 = accept(0xffffffffffffffff, &(0x7f0000000180)=@phonet, &(0x7f0000000200)=0x80)
getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240), 0x10)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000280)={0x2a, 0x37, 0x2, {0x1, 0x7, 0x0, r0, 0xc, '-*])\x93%\'@.--\''}}, 0x2a)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f00000002c0)=0x7, 0x4)
getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000300), &(0x7f0000000340)=0x10)
socketpair(0x22, 0x800, 0xfffffff9, &(0x7f00000003c0)={<r4=>0xffffffffffffffff})
syz_genetlink_get_family_id$fou(&(0x7f0000000380), r4)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x301101, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000440), &(0x7f0000000480)=0xc)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f00000004c0)=0x9, 0x4)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000500)={0xffff, 0x5012, 0x96ee, 0x101, 0x7, "acff83868d07446b584d96b5f5ca34e971d42c"})
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000540)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xb01f, 0x2, 0x1, 0x3, 0xfff8, 0x9000}, &(0x7f0000000580)=0x20)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000005c0)={r2, 0xffffffffffffffff, 0xee00}, 0xc)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000600)={0x0, <r7=>0x0})
waitid(0x1, r7, &(0x7f0000000680), 0x1, &(0x7f0000000700))

02:58:36 executing program 6:
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@loopback}, 0x14)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000040)={0x9637, {{0xa, 0x4e23, 0x15400, @loopback, 0x6}}, 0x1, 0x2, [{{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10000}}, {{0xa, 0x4e20, 0xfffffffe, @remote, 0x1f}}]}, 0x190)
socketpair(0x23, 0x5, 0x9, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x6}, @timestamp, @timestamp, @sack_perm, @sack_perm, @timestamp], 0x6)
sendto(r0, &(0x7f0000000280)="94d0f732da830e7f433b10909e1b43e81bc53b27640a7432c7778693e929b5a6fb71ce455074646d5a11ee2f63d65a507630e564df8f836c6ab481bf067519f52facc1dfd66b9542cdaa9db5a581aea179da0e229039d279f0782b2aa948ba0d54b1490cd41ba5b1a8f5b66c325af12b5fe82c2e6ee2ef6250fb2f5e5f127d5e41c45c6105ab0fd143ef8bcf5b3baf3cd7e46fa4573a715f9c71b35ad996f4f3cc895419ee89eb303daddedcf01337744faf94955a238239b3b46a68ef58ed6e17553e1e59fffd87da4c1efa1fe90121aecba2cf3c152b46e2c8eaf9c82d05b4", 0xe0, 0x10004040, &(0x7f0000000380)=@phonet={0x23, 0x6, 0xf0, 0x3}, 0x80)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000400)={0x6, 'ip6gre0\x00', {0xffffffff}, 0x6})
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000440)={0x40, 0x0, 0x5, 0x1f, 0x1}, 0xc)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000004c0)={0x0, @ethernet={0x307, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe8}}, @vsock={0x28, 0x0, 0x2711}, @l2={0x1f, 0xfb, @none, 0xf001}, 0x2, 0x0, 0x0, 0x0, 0xff, &(0x7f0000000480)='veth1_to_team\x00', 0x80000000, 0x5, 0x6})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={<r2=>0x0, <r3=>0x0})
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000005c0)=r3)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'veth1_to_hsr\x00'})
socketpair(0x26, 0x1, 0x676, &(0x7f00000006c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000700))
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000780)={0x7, &(0x7f0000000740)=[{0xfffa, 0x40, 0x20, 0xf7b}, {0xc38, 0x2, 0x1, 0x1a6b}, {0x80, 0x20, 0x3f, 0x2}, {0x8dbd, 0x9, 0xfe, 0x1}, {0x1, 0x8, 0x6, 0x2b}, {0x92, 0xdf, 0x2d, 0xe57}, {0x100, 0x5a, 0x1, 0x81}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f00000007c0)={r2, 0x1, r6, 0x84a4, 0x80000})
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f00000008c0), &(0x7f0000000900)=0xc)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

[  127.743606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  127.746743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  127.751616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  127.757625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  127.761708] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  127.870926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.883734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.908710] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.910378] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  127.912528] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  127.915843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  127.928786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  127.930493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.937641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  127.937841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  127.946412] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.954007] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  127.971741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  127.983729] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  127.987484] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  127.998638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  128.018539] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  128.032976] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  128.039280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  128.044268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  128.047380] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  128.059239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  128.062847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  128.072589] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  128.088895] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  128.092618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  128.095753] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  128.101007] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  128.103856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  128.107314] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  128.112607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  128.129452] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  128.135435] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  128.139235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  128.158681] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  129.823597] Bluetooth: hci0: command tx timeout
[  130.015787] Bluetooth: hci1: command tx timeout
[  130.079360] Bluetooth: hci3: command tx timeout
[  130.080023] Bluetooth: hci2: command tx timeout
[  130.209162] Bluetooth: hci6: command tx timeout
[  130.209794] Bluetooth: hci5: command tx timeout
[  130.210633] Bluetooth: hci4: command tx timeout
[  130.272137] Bluetooth: hci7: command tx timeout
[  131.873010] Bluetooth: hci0: command tx timeout
[  132.063386] Bluetooth: hci1: command tx timeout
[  132.128192] Bluetooth: hci3: command tx timeout
[  132.128213] Bluetooth: hci2: command tx timeout
[  132.255542] Bluetooth: hci5: command tx timeout
[  132.256266] Bluetooth: hci4: command tx timeout
[  132.256668] Bluetooth: hci6: command tx timeout
[  132.319168] Bluetooth: hci7: command tx timeout
[  133.920041] Bluetooth: hci0: command tx timeout
[  134.111859] Bluetooth: hci1: command tx timeout
[  134.176013] Bluetooth: hci2: command tx timeout
[  134.176723] Bluetooth: hci3: command tx timeout
[  134.303383] Bluetooth: hci6: command tx timeout
[  134.303631] Bluetooth: hci4: command tx timeout
[  134.303816] Bluetooth: hci5: command tx timeout
[  134.369198] Bluetooth: hci7: command tx timeout
[  135.968818] Bluetooth: hci0: command tx timeout
[  136.159177] Bluetooth: hci1: command tx timeout
[  136.223327] Bluetooth: hci3: command tx timeout
[  136.223611] Bluetooth: hci2: command tx timeout
[  136.351246] Bluetooth: hci5: command tx timeout
[  136.352641] Bluetooth: hci4: command tx timeout
[  136.353892] Bluetooth: hci6: command tx timeout
[  136.415170] Bluetooth: hci7: command tx timeout
[  190.452660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  190.456287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  190.460747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  190.472412] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  190.477882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  190.518159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  190.523681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  190.526619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  190.539576] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  190.543814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  190.545386] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  190.552689] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  190.562452] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  190.585125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  190.595858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  190.601539] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  190.605438] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  190.610538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  190.613723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  190.614473] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  190.616634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  190.629401] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  190.644348] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  190.649930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  190.652601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  190.660853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  190.668636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  190.698817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  190.721660] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  190.735782] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  190.740340] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  190.749349] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  190.753492] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  190.756913] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  190.764728] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  190.769590] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  190.774897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  190.779970] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  190.811929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  190.858029] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  192.543597] Bluetooth: hci0: command tx timeout
[  192.607472] Bluetooth: hci1: command tx timeout
[  192.737169] Bluetooth: hci4: command tx timeout
[  192.737927] Bluetooth: hci2: command tx timeout
[  192.799606] Bluetooth: hci3: command tx timeout
[  192.863184] Bluetooth: hci7: command tx timeout
[  192.927175] Bluetooth: hci5: command tx timeout
[  192.991454] Bluetooth: hci6: command tx timeout
[  194.591333] Bluetooth: hci0: command tx timeout
[  194.655177] Bluetooth: hci1: command tx timeout
[  194.783509] Bluetooth: hci2: command tx timeout
[  194.784004] Bluetooth: hci4: command tx timeout
[  194.847191] Bluetooth: hci3: command tx timeout
[  194.911490] Bluetooth: hci7: command tx timeout
[  194.975948] Bluetooth: hci5: command tx timeout
[  195.040117] Bluetooth: hci6: command tx timeout
[  196.639161] Bluetooth: hci0: command tx timeout
[  196.703151] Bluetooth: hci1: command tx timeout
[  196.832519] Bluetooth: hci4: command tx timeout
[  196.832980] Bluetooth: hci2: command tx timeout
[  196.895389] Bluetooth: hci3: command tx timeout
[  196.959262] Bluetooth: hci7: command tx timeout
[  197.023495] Bluetooth: hci5: command tx timeout
[  197.087334] Bluetooth: hci6: command tx timeout
[  198.687719] Bluetooth: hci0: command tx timeout
[  198.751423] Bluetooth: hci1: command tx timeout
[  198.880299] Bluetooth: hci2: command tx timeout
[  198.880776] Bluetooth: hci4: command tx timeout
[  198.943152] Bluetooth: hci3: command tx timeout
[  199.007150] Bluetooth: hci7: command tx timeout
[  199.072183] Bluetooth: hci5: command tx timeout
[  199.135343] Bluetooth: hci6: command tx timeout
[  252.789328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  252.794157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  252.798308] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  252.810452] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  252.818650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  252.869855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  252.874984] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  252.884060] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  252.890062] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  252.912358] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  252.992793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  253.011645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  253.034415] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  253.061958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  253.072880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  253.139240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  253.144951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  253.147932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  253.155886] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  253.167641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  253.174058] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  253.228419] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  253.238968] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  253.249328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  253.250153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  253.255290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  253.292490] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  253.308042] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  253.314848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  253.324737] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  253.329637] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  253.332145] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  253.333666] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  253.339844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  253.341532] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  253.347804] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  253.356738] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  253.358547] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  253.408000] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  253.426907] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  254.879995] Bluetooth: hci0: command tx timeout
[  254.943513] Bluetooth: hci1: command tx timeout
[  255.135226] Bluetooth: hci2: command tx timeout
[  255.263682] Bluetooth: hci4: command tx timeout
[  255.455402] Bluetooth: hci5: command tx timeout
[  255.455531] Bluetooth: hci3: command tx timeout
[  255.519218] Bluetooth: hci7: command tx timeout
[  255.519252] Bluetooth: hci6: command tx timeout
[  256.927574] Bluetooth: hci0: command tx timeout
[  256.992119] Bluetooth: hci1: command tx timeout
[  257.183635] Bluetooth: hci2: command tx timeout
[  257.312119] Bluetooth: hci4: command tx timeout
[  257.503190] Bluetooth: hci5: command tx timeout
[  257.504839] Bluetooth: hci3: command tx timeout
[  257.567219] Bluetooth: hci7: command tx timeout
[  257.567255] Bluetooth: hci6: command tx timeout
[  258.975265] Bluetooth: hci0: command tx timeout
[  259.039445] Bluetooth: hci1: command tx timeout
[  259.233107] Bluetooth: hci2: command tx timeout
[  259.360209] Bluetooth: hci4: command tx timeout
[  259.551179] Bluetooth: hci3: command tx timeout
[  259.551261] Bluetooth: hci5: command tx timeout
[  259.616381] Bluetooth: hci7: command tx timeout
[  259.616871] Bluetooth: hci6: command tx timeout
[  261.023339] Bluetooth: hci0: command tx timeout
[  261.087290] Bluetooth: hci1: command tx timeout
[  261.280451] Bluetooth: hci2: command tx timeout
[  261.407456] Bluetooth: hci4: command tx timeout
[  261.599199] Bluetooth: hci3: command tx timeout
[  261.599703] Bluetooth: hci5: command tx timeout
[  261.663204] Bluetooth: hci7: command tx timeout
[  261.663709] Bluetooth: hci6: command tx timeout
[  315.188842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  315.193251] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  315.197025] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  315.205511] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  315.211193] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  315.313600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  315.324507] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  315.333559] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  315.349428] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  315.369750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  315.517972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  315.525616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  315.528006] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  315.534657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  315.539173] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  315.625010] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  315.631791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  315.640596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  315.645562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  315.658995] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  315.662981] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  315.666559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  315.677038] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  315.685776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  315.692369] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  315.706244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  315.709781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  315.730455] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  315.734871] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  315.739023] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  315.752914] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  315.759286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  315.783001] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  315.787831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  315.795752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  315.796216] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  315.802661] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  315.869918] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  315.900406] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  315.904629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  317.279572] Bluetooth: hci0: command tx timeout
[  317.409140] Bluetooth: hci1: command tx timeout
[  317.599342] Bluetooth: hci2: command tx timeout
[  317.791762] Bluetooth: hci4: command tx timeout
[  317.919942] Bluetooth: hci5: command tx timeout
[  317.919997] Bluetooth: hci6: command tx timeout
[  317.983241] Bluetooth: hci3: command tx timeout
[  317.983273] Bluetooth: hci7: command tx timeout
[  319.327313] Bluetooth: hci0: command tx timeout
[  319.455513] Bluetooth: hci1: command tx timeout
[  319.647480] Bluetooth: hci2: command tx timeout
[  319.839145] Bluetooth: hci4: command tx timeout
[  319.968359] Bluetooth: hci5: command tx timeout
[  319.968699] Bluetooth: hci6: command tx timeout
[  320.031184] Bluetooth: hci7: command tx timeout
[  320.033140] Bluetooth: hci3: command tx timeout
[  321.375314] Bluetooth: hci0: command tx timeout
[  321.505129] Bluetooth: hci1: command tx timeout
[  321.695260] Bluetooth: hci2: command tx timeout
[  321.887518] Bluetooth: hci4: command tx timeout
[  322.016778] Bluetooth: hci5: command tx timeout
[  322.017610] Bluetooth: hci6: command tx timeout
[  322.080247] Bluetooth: hci3: command tx timeout
[  322.080300] Bluetooth: hci7: command tx timeout
[  323.423558] Bluetooth: hci0: command tx timeout
[  323.551315] Bluetooth: hci1: command tx timeout
[  323.744415] Bluetooth: hci2: command tx timeout
[  323.937118] Bluetooth: hci4: command tx timeout
[  324.064149] Bluetooth: hci6: command tx timeout
[  324.064658] Bluetooth: hci5: command tx timeout
[  324.127260] Bluetooth: hci3: command tx timeout
[  324.127581] Bluetooth: hci7: command tx timeout
[  377.521974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  377.525489] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  377.528479] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  377.542918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  377.547910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  377.844653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  377.848405] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  377.851357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  377.860668] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  377.882021] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  377.884909] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  377.888992] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  377.915169] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  377.951352] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  377.970382] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  377.977543] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  377.983050] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  377.995559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  378.002905] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  378.005690] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  378.038046] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  378.040745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  378.042647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  378.066661] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  378.074906] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  378.081014] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  378.091811] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  378.103451] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  378.116740] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  378.123787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  378.131720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  378.143569] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  378.162555] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  378.171965] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  378.210987] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  378.215371] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  378.215526] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  378.232796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  378.239546] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  378.257053] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  379.616169] Bluetooth: hci0: command tx timeout
[  379.999185] Bluetooth: hci1: command tx timeout
[  380.063149] Bluetooth: hci2: command tx timeout
[  380.255215] Bluetooth: hci4: command tx timeout
[  380.319550] Bluetooth: hci3: command tx timeout
[  380.384180] Bluetooth: hci6: command tx timeout
[  380.384868] Bluetooth: hci7: command tx timeout
[  380.447643] Bluetooth: hci5: command tx timeout
[  381.664192] Bluetooth: hci0: command tx timeout
[  382.049475] Bluetooth: hci1: command tx timeout
[  382.111439] Bluetooth: hci2: command tx timeout
[  382.304168] Bluetooth: hci4: command tx timeout
[  382.368163] Bluetooth: hci3: command tx timeout
[  382.432284] Bluetooth: hci7: command tx timeout
[  382.432715] Bluetooth: hci6: command tx timeout
[  382.496140] Bluetooth: hci5: command tx timeout
[  383.711433] Bluetooth: hci0: command tx timeout
[  384.095481] Bluetooth: hci1: command tx timeout
[  384.161177] Bluetooth: hci2: command tx timeout
[  384.352364] Bluetooth: hci4: command tx timeout
[  384.415303] Bluetooth: hci3: command tx timeout
[  384.479424] Bluetooth: hci6: command tx timeout
[  384.480915] Bluetooth: hci7: command tx timeout
[  384.543576] Bluetooth: hci5: command tx timeout
[  385.759736] Bluetooth: hci0: command tx timeout
[  386.144183] Bluetooth: hci1: command tx timeout
[  386.208431] Bluetooth: hci2: command tx timeout
[  386.400143] Bluetooth: hci4: command tx timeout
[  386.464526] Bluetooth: hci3: command tx timeout
[  386.528439] Bluetooth: hci7: command tx timeout
[  386.528923] Bluetooth: hci6: command tx timeout
[  386.592201] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
03:03:39  Registers:
info registers vcpu 0
RAX=1ffffffff0c9e31a RBX=ffffffff864f18d4 RCX=ffffffff81aeeb58 RDX=000000000000000e
RSI=ffffffff868761f6 RDI=ffffffff864f18b8 RBP=ffffffff864f18b8 RSP=ffff88806ce08998
R8 =ffffffff868761f6 R9 =0000000000000000 R10=000000000003b67d R11=0000000000024bfd
R12=ffffffff864f18f0 R13=ffffffff864f18b8 R14=ffffffff864f18b8 R15=dffffc0000000000
RIP=ffffffff8135323a RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6fa92f2260 CR3=000000002f169000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff81aeb784 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88802587f001
RSI=ffff88802587f0e8 RDI=ffff88802587f010 RBP=ffff88802587f010 RSP=ffff88802587ef48
R8 =ffffffff86809e82 R9 =ffff88802587eff8 R10=000000000003b67d R11=0000000000012b66
R12=ffff88802587f018 R13=ffff88802587f000 R14=ffff88802587f0f0 R15=ffff88802587efb8
RIP=ffffffff81354740 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe5800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559f19baa080 CR3=0000000009ec7000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f504124747000007f5041246f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000