Warning: Permanently added '[localhost]:42520' (ECDSA) to the list of known hosts.
2025/06/11 09:25:34 fuzzer started
2025/06/11 09:25:34 dialing manager at localhost:37235
syzkaller login: [  115.770560] cgroup: Unknown subsys name 'net'
[  115.924171] cgroup: Unknown subsys name 'cpuset'
[  115.987151] cgroup: Unknown subsys name 'rlimit'
2025/06/11 09:25:51 syscalls: 211
2025/06/11 09:25:51 code coverage: enabled
2025/06/11 09:25:51 comparison tracing: enabled
2025/06/11 09:25:51 extra coverage: enabled
2025/06/11 09:25:51 setuid sandbox: enabled
2025/06/11 09:25:51 namespace sandbox: enabled
2025/06/11 09:25:51 Android sandbox: enabled
2025/06/11 09:25:51 fault injection: enabled
2025/06/11 09:25:51 leak checking: enabled
2025/06/11 09:25:51 net packet injection: enabled
2025/06/11 09:25:51 net device setup: enabled
2025/06/11 09:25:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/11 09:25:51 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/11 09:25:51 USB emulation: enabled
2025/06/11 09:25:51 hci packet injection: enabled
2025/06/11 09:25:51 wifi device emulation: enabled
2025/06/11 09:25:51 802.15.4 emulation: enabled
2025/06/11 09:25:51 fetching corpus: 0, signal 0/0 (executing program)
2025/06/11 09:25:53 starting 8 fuzzer processes
09:25:53 executing program 0:
get_robust_list(0xffffffffffffffff, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18)
getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240))
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x49}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x318}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000000}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4e}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000001}, 0x94)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6d}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4880)
getresgid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900))
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000980)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xf4, r0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9b, 0xf}}}}, [@NL80211_ATTR_IE={0xcc, 0x2a, [@chsw_timing={0x68, 0x4, {0x4f}}, @peer_mgmt={0x75, 0x6, {0x0, 0x8, @void, @val=0x17, @void}}, @channel_switch={0x25, 0x3, {0x0, 0x9, 0x2}}, @random={0x4, 0xb3, "9229e9409c207fa7b2aa17b10915e3e93fc01bdd5a7b15a854e53e68e41a3823912402157a105a7b622c2adf9128fba3406cd6caa0411bd0d960b11feca78062447999e7f92137972ed89713b1819089f3686397a8effec788eb3d6d331684134563ce30057b82eeca8f5d319332f850030da11b6eb71e43f7c7cfeea08915ae507b05ef0ac2a23c387306baf25c853d0d89f2ce98b398407c5126cf3d08d82f4d8ba2a09fd398abd7dc1b1a4fd81505643e5d"}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, r0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xa449, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5388a7a64b7d"}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4041}, 0x64040014)
getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x11)

09:25:53 executing program 1:
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
getpriority(0x0, 0xffffffffffffffff)
getpriority(0x1, 0xffffffffffffffff)
ioprio_set$pid(0x0, 0x0, 0x4000)
ioprio_set$pid(0x5, 0xffffffffffffffff, 0x6000)
r0 = getpgrp(0xffffffffffffffff)
sched_rr_get_interval(r0, &(0x7f0000000000))
r1 = getpgid(r0)
ptrace$cont(0x7, r1, 0x4, 0x7)
r2 = getpgid(r0)
r3 = clone3(&(0x7f00000013c0)={0x80, &(0x7f0000000240), &(0x7f0000000280)=<r4=>0x0, &(0x7f00000002c0), {0x21}, &(0x7f0000000300)=""/89, 0x59, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=[0x0, r0, r1], 0x3}, 0x58)
r5 = getpgid(r1)
r6 = clone3(&(0x7f0000001480)={0x168000900, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3f}, &(0x7f0000000100)=""/21, 0x15, &(0x7f0000000140)=""/244, &(0x7f0000001440)=[r1, r0, r0, r1, 0xffffffffffffffff, r1, r2, r3, r0, r5], 0xa}, 0x58)
r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001500)='devices.allow\x00', 0x2, 0x0)
getpgid(r4)
r8 = getpgrp(r6)
ptrace$cont(0x1f, r8, 0x1ea000000, 0x965)
perf_event_open$cgroup(&(0x7f0000001540)={0x5, 0x80, 0x0, 0x7, 0x4b, 0x5, 0x0, 0x7, 0x4008, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x0, 0x40}, 0x80, 0x1, 0xe, 0xe, 0x6b9, 0x100, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
write$cgroup_devices(r7, &(0x7f00000015c0)={'b', ' *:* ', 'm\x00'}, 0x8)
read$usbmon(0xffffffffffffffff, &(0x7f0000001600)=""/93, 0x5d)

09:25:53 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc04c0d0}, 0x4040)
r2 = openat$cgroup(r0, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000380)='syz1\x00', 0x1ff)
mkdirat$cgroup(r3, &(0x7f00000003c0)='syz0\x00', 0x1ff)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000440)={0x4f4, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_FRAME={0x4bc, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_b, @broadcast, @from_mac, {0x7, 0x6}}, @a_msdu=[{@broadcast, @device_a, 0x90, "3e10c3834876ce86c3f75a223b20dd77e04d3a7a28d2c73f20c7e08ed827aea23956366110178860461b1d16f62c44786f2c119f215ab1cb60dfc86fc39dbdd931777e3a5ab79fc14ee891152b6570f694c04c28f92e2e4bcd10d2d4bea2d2c06655ec06db5a6090cba14e4d61c78d0508ee552a1411eb710cfdcf3a49693058d1a960d36ac48809eac2d9cc77ecbdaa"}, {@broadcast, @broadcast, 0xa0, "6b64718c8e85e33c80ca0d587b667f08fdd0051debc306ee13e937a53658df62de2d14deea10b809e2193b451bad7098cc71c32d3f086d7bb99d61f49c9248b66a898029bdb065f1036e2a21f990ac755ddf6354bdf49499d5f498e7c899c91465d5149a8c0a93ef81f7786cbd2cc660b061e1f9aa99ba5a3b42c26eb47a2630522fcc964a7a33808cbd0c5e01ca24335f832454241c8322cd1779549a825a5b"}, {@broadcast, @broadcast, 0xfe, "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"}, {@broadcast, @broadcast, 0x6f, "d5598b6aa60f387cc1e9853ac78f206a89775d57be34c84e2ca56be02f99e3e6da602bc053c87a35c8cfe2a5dce6766bbd4be85b5c4839d0593716bec008e7587fe8f8c1725a9d2b21ff48d313f932f2506a81a4ab786de371d8a28005dfbb1127671f2def4c5f17458a02cd16aa0f"}, {@device_a, @device_b, 0xf7, "06fadde594e1c66f7b886f1ee8bf7b134182ed6963c370ad9f2e7517d2c6640735f4a33190937eeeb299c371cd5c305e508d427fd5892538c83c01925e83b7a0d794735946fc34a05ff05be70e6e012728e39ccbc9045cf57a46ea7c0753a11a36c811b87a373c07f5ed916e060e222d5ca90d7468df046be133ceab30437776ef07307c74b345a93c198a57e47b17ff85794dd7fed4a00609a0b9ace7569df2547f0be54c164df4182a498698d646a323b86f96a947d73e253a6adba6548fda51f0a5f847cb134a152568a483c9bf150d8fbccb5e257e549ae08d1f60ac1a6a521c622146daf3fd83b8491405ad77ad0d418ecd515d5c"}, {@device_a, @device_b, 0xad, "aa58b99f441921601ed4d7ae460acca119202a5d627700aa703d1cc75fc9c0a699cf7e70d6e57e68f34b95a057625ab19970b449b5ced7783540c351e7109479745ab22e670bed569f79c12bd671e1656b1e2c8f8250715b454ce1b91a3dbd72c5761bd429b4017bbeed2942c4de8c10c38be47584d2f64ca7672da06c9b0ee9443e90f4ebe6d394d3c0d43054afc999f0457cba6c7fe3dc9f238f2ff9845919a1dda623f19f803d33492f48f8"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x5}, 0x8040)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r4, 0x410, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xef}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004070}, 0x10000000)
r6 = syz_open_dev$vcsu(&(0x7f0000000b40), 0x8, 0x2f9599a29c9d6458)
openat$cgroup_procs(r6, &(0x7f0000000b80)='cgroup.threads\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000c00)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0xf}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x8000)
r8 = openat$cgroup(r6, &(0x7f0000000d00)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000d40)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)

09:25:53 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x8, 0x9, 0x7f, 0x9, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe8, 0x4, @perf_bp={&(0x7f0000000000), 0xb}, 0x2, 0x7fffffff, 0x1, 0x9, 0x5, 0x7fff, 0x49d, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x12)
r1 = clone3(&(0x7f00000003c0)={0xd158000, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0, {0x1c}, &(0x7f0000000240)=""/179, 0xb3, &(0x7f0000000300)=""/121, &(0x7f0000000380)=[0x0, 0x0], 0x2}, 0x58)
r4 = perf_event_open$cgroup(&(0x7f0000000480)={0x2, 0x80, 0x8, 0xf7, 0x6, 0x85, 0x0, 0x6, 0x8, 0x41670f9aef5fbe33, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xbd, 0x4, @perf_bp={&(0x7f0000000440), 0x9}, 0x8080, 0x80, 0x7, 0x1, 0x9, 0xfffffffc, 0x8, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xc, r0, 0x8)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x1f, 0x7f, 0xf7, 0x26, 0x0, 0x100000001, 0x2010, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x7, @perf_bp={&(0x7f00000000c0), 0xe}, 0x6008, 0x5, 0x7fff, 0x4, 0x3, 0xfffffffd, 0x8, 0x0, 0x1c0, 0x0, 0x8}, r2, 0x2, r4, 0x9)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0)
r6 = getpgrp(r3)
r7 = getpgrp(r2)
clone3(&(0x7f0000000780)={0x2000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xc}, &(0x7f0000000600)=""/12, 0xc, &(0x7f0000000640)=""/225, &(0x7f0000000740)=[r1, r1, r6, r7, r1, r3], 0x6}, 0x58)
gettid()
r8 = inotify_init()
ioctl$INOTIFY_IOC_SETNEXTWD(r8, 0x40044900, 0xf5ec)
r9 = mq_open(&(0x7f0000000800)='}(\x00', 0x40, 0x60, &(0x7f0000000840)={0x401, 0x20, 0x0, 0x5})
mq_timedreceive(r9, &(0x7f0000000880)=""/4096, 0x1000, 0x200, &(0x7f0000001880)={0x0, 0x3938700})
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000018c0)='cgroup.controllers\x00', 0x0, 0x0)
openat$cgroup_int(r10, &(0x7f0000001900)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
perf_event_open$cgroup(&(0x7f0000001940)={0x3, 0x80, 0x9, 0x9, 0x0, 0x81, 0x0, 0x6, 0x25011, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0xc8, 0x8}, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1, 0x400, 0x0, 0x8000}, r10, 0xf, r10, 0x385cb2aa478d1e57)
r11 = syz_open_dev$usbmon(&(0x7f00000019c0), 0x9553, 0x400180)
io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000001a00)=[r5, r11, r0], 0x3)
openat$cgroup_int(r10, &(0x7f0000001a40)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r10, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x2c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x189fb12d}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x8800)

[  134.416649] audit: type=1400 audit(1749633953.598:7): avc:  denied  { execmem } for  pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:25:53 executing program 4:
r0 = getegid()
setfsgid(r0)
socketpair(0x2, 0x1, 0x8, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getegid()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = syz_io_uring_complete(0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r5, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d05ded8aaa58"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4f533af82944"}]}, 0x40}}, 0x4004)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', <r6=>0x0, 0x2f, 0x57, 0x7f, 0x599, 0x40, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x7, 0xab, 0x8}})
r7 = openat$cgroup_ro(r4, &(0x7f0000000240)='memory.events\x00', 0x0, 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r2)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', <r9=>r6, 0x2f, 0x3, 0x80, 0x9, 0x0, @private0, @remote, 0x7800, 0x20, 0x9, 0xffffffff}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r8, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4810}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r8, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x240}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4004011)
r10 = syz_io_uring_complete(0x0)
sendmsg$NL80211_CMD_STOP_AP(r10, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0xb1aaaba860d62919)
sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r5, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20040004)
getegid()
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r8, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4009814}, 0x8000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008}, 0x20000001)

09:25:53 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', <r0=>0x0, 0x29, 0x81, 0x20, 0x7f, 0x42, @mcast1, @private2, 0x8000, 0x20, 0x7, 0x6}})
socketpair(0x18, 0x808, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', <r3=>r0, 0x29, 0x2, 0x4f, 0x1, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x7800, 0x7, 0x1, 0x4}})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12810008}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1329}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004085}, 0x1)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r5=>r3, 0x4, 0x1, 0x9, 0x579b9da7, 0x11, @empty, @empty, 0x7800, 0x8000, 0x0, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', <r6=>r5, 0x4, 0xd9, 0x4, 0x80000000, 0x10, @dev={0xfe, 0x80, '\x00', 0x13}, @remote, 0x1, 0x40, 0xd85, 0xba3}})
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'sit0\x00', r0, 0x4, 0x2, 0x9, 0x7, 0x9, @dev={0xfe, 0x80, '\x00', 0x36}, @dev={0xfe, 0x80, '\x00', 0xd}, 0x80, 0x20, 0x0, 0x8}})
r8 = syz_io_uring_complete(0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0xc6, 0x6, 0x1, 0x28, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x20, 0x10, 0x4000400, 0x80}})
socketpair(0xf, 0x1, 0x4, &(0x7f00000005c0)={<r9=>0xffffffffffffffff})
sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8804)
ioctl$MON_IOCX_GET(r8, 0x40189206, &(0x7f0000000840)={&(0x7f0000000700), &(0x7f0000000740)=""/203, 0xcb})
ioctl$MON_IOCX_GET(r8, 0x40189206, &(0x7f00000008c0)={&(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'ip6tnl0\x00', r6, 0x2f, 0x3, 0x9, 0x1ff, 0x8, @local, @mcast2, 0x700, 0x6, 0xffff, 0x7}})
r10 = openat$cgroup_ro(r8, &(0x7f00000009c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r2)
sendmsg$BATADV_CMD_SET_HARDIF(r10, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, r11, 0x1, 0x1af2, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}]}, 0x44}, 0x1, 0x0, 0x0, 0x9054}, 0x80)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r11, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4c804)

09:25:53 executing program 5:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7f}]}, 0x38}, 0x1, 0x0, 0x0, 0x12683150d09fc2c1}, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5eb}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x480c1}, 0x4)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x400c044)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @dev, @remote}, &(0x7f0000000440)=0xc)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r3)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r3)
sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000881)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x94, r5, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x27f0, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a8930f14b217"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e9b57780f582"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="31291fdb8708"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="17165ec41e6e"}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r6)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000800)={0x0, @local, @local}, &(0x7f0000000840)=0xc)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000008c0), r6)
sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r8, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0xc991)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000a40)={&(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1})

09:25:53 executing program 7:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x790d800, 0x25}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0xd2c354030ac7559a)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, 0x0, 0x700, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x23}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="ff12f3815af4"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3702a9e2d651"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="edfeb33a00b5"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8804}, 0x8041)
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x300, 0x80000001, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffc00, 0x5d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008890)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb8, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @broadcast, @compressed={{0x1, 0x0, 0x1, 0x0, 0x9}, {0xe, 0x5}, "750c9a4336e1b960"}}}, @NL80211_ATTR_FRAME={0x7a, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x7, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @broadcast, @device_b, {0x5, 0x8}, @broadcast}, @a_msdu=[{@device_a, @device_b, 0x47, "d4ee6157e70431aa5fba7db9fd1665fcefd3418659ac37851b4a3495c68f7852f09e3964cf7b5b98fb37118fa64e9c2c227d7b49c880a6de97f34aa91ebe44e573320d14619de9"}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40086}, 0x8000)
r4 = syz_io_uring_complete(0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}}, 0x4)
r5 = syz_io_uring_complete(0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f00000008c0)={'ip6gre0\x00', &(0x7f0000000840)={'ip6gre0\x00', <r6=>0x0, 0x29, 0x81, 0x7, 0x4360052f, 0x40, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x20, 0x7, 0x1ff}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'syztnl0\x00', r6, 0x4, 0x2, 0x4b, 0x200, 0x43, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x20, 0x7, 0x0, 0x6}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'})
r7 = syz_open_dev$vcsu(&(0x7f0000000a00), 0x19, 0x503000)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'sit0\x00', 0x0, 0x2f, 0x7, 0x6, 0x1, 0x12, @dev={0xfe, 0x80, '\x00', 0x34}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x1, 0x9, 0x56}})

[  135.908436] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  135.912658] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  135.918254] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  135.919604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  135.920984] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  135.931804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  135.935247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  135.939872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  135.952058] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  135.955855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  135.957697] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  135.962923] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  135.967285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  135.968998] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  135.972257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  136.015404] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  136.021953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  136.025185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  136.030222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  136.034174] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  136.038890] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  136.044865] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  136.049694] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  136.062451] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  136.071024] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  136.077055] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  136.088164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  136.092191] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  136.093933] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  136.098818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  136.107086] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  136.111239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  136.111637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  136.115988] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  136.120341] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  136.122254] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  136.136080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  136.138396] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  136.156100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  136.163032] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  138.022696] Bluetooth: hci0: command tx timeout
[  138.083332] Bluetooth: hci4: command tx timeout
[  138.083628] Bluetooth: hci1: command tx timeout
[  138.084991] Bluetooth: hci2: command tx timeout
[  138.147334] Bluetooth: hci7: command tx timeout
[  138.274630] Bluetooth: hci3: command tx timeout
[  138.275719] Bluetooth: hci6: command tx timeout
[  138.275733] Bluetooth: hci5: command tx timeout
[  140.067789] Bluetooth: hci0: command tx timeout
[  140.130675] Bluetooth: hci4: command tx timeout
[  140.131240] Bluetooth: hci2: command tx timeout
[  140.132027] Bluetooth: hci1: command tx timeout
[  140.196568] Bluetooth: hci7: command tx timeout
[  140.324614] Bluetooth: hci5: command tx timeout
[  140.325259] Bluetooth: hci3: command tx timeout
[  140.326405] Bluetooth: hci6: command tx timeout
[  142.115583] Bluetooth: hci0: command tx timeout
[  142.178914] Bluetooth: hci1: command tx timeout
[  142.179948] Bluetooth: hci2: command tx timeout
[  142.180524] Bluetooth: hci4: command tx timeout
[  142.242707] Bluetooth: hci7: command tx timeout
[  142.372016] Bluetooth: hci3: command tx timeout
[  142.372199] Bluetooth: hci6: command tx timeout
[  142.373095] Bluetooth: hci5: command tx timeout
[  144.163652] Bluetooth: hci0: command tx timeout
[  144.226672] Bluetooth: hci4: command tx timeout
[  144.227293] Bluetooth: hci2: command tx timeout
[  144.227537] Bluetooth: hci1: command tx timeout
[  144.290618] Bluetooth: hci7: command tx timeout
[  144.418655] Bluetooth: hci6: command tx timeout
[  144.418701] Bluetooth: hci3: command tx timeout
[  144.420354] Bluetooth: hci5: command tx timeout
[  198.711761] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  198.715988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  198.718547] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  198.725506] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  198.728804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  198.976043] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  198.980001] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  198.984042] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  198.990085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  198.997815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  199.001091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  199.005758] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  199.018431] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  199.019695] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  199.021719] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  199.026398] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  199.027946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  199.036449] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  199.038417] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  199.041014] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  199.042997] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  199.044104] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  199.049079] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  199.062092] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  199.070582] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  199.079649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  199.081844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  199.084945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  199.087260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  199.089890] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  199.093850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  199.096866] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  199.101780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  199.102890] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  199.118878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  199.141453] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  199.142253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  199.146061] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  199.153432] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  199.169656] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  200.739564] Bluetooth: hci0: command tx timeout
[  201.122797] Bluetooth: hci1: command tx timeout
[  201.186623] Bluetooth: hci4: command tx timeout
[  201.188433] Bluetooth: hci5: command tx timeout
[  201.251084] Bluetooth: hci2: command tx timeout
[  201.251095] Bluetooth: hci6: command tx timeout
[  201.251838] Bluetooth: hci3: command tx timeout
[  201.314725] Bluetooth: hci7: command tx timeout
[  202.786828] Bluetooth: hci0: command tx timeout
[  203.172562] Bluetooth: hci1: command tx timeout
[  203.235634] Bluetooth: hci4: command tx timeout
[  203.237051] Bluetooth: hci5: command tx timeout
[  203.299514] Bluetooth: hci2: command tx timeout
[  203.300875] Bluetooth: hci3: command tx timeout
[  203.300902] Bluetooth: hci6: command tx timeout
[  203.364769] Bluetooth: hci7: command tx timeout
[  204.835571] Bluetooth: hci0: command tx timeout
[  205.219617] Bluetooth: hci1: command tx timeout
[  205.283716] Bluetooth: hci4: command tx timeout
[  205.284298] Bluetooth: hci5: command tx timeout
[  205.346585] Bluetooth: hci6: command tx timeout
[  205.347869] Bluetooth: hci2: command tx timeout
[  205.348049] Bluetooth: hci3: command tx timeout
[  205.410607] Bluetooth: hci7: command tx timeout
[  206.884974] Bluetooth: hci0: command tx timeout
[  207.266957] Bluetooth: hci1: command tx timeout
[  207.330593] Bluetooth: hci4: command tx timeout
[  207.330610] Bluetooth: hci5: command tx timeout
[  207.394575] Bluetooth: hci2: command tx timeout
[  207.395094] Bluetooth: hci6: command tx timeout
[  207.395627] Bluetooth: hci3: command tx timeout
[  207.461491] Bluetooth: hci7: command tx timeout
[  261.793001] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  261.794164] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  261.797845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  261.798292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  261.807784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  261.812024] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  261.820703] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  261.824574] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  261.826401] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  261.830285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  261.845365] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  261.847784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  261.848250] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  261.850851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  261.873092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  261.875373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  261.879531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  261.884876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  261.902419] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  261.905799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  261.955132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  261.967867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  261.970996] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  261.973740] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  261.984019] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  261.987584] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  261.989745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  261.991295] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  262.002008] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  262.003232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  262.003697] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  262.007256] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  262.032819] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  262.035839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  262.037346] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  262.041720] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  262.054135] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  262.057855] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  262.063698] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  262.078582] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  263.906602] Bluetooth: hci1: command tx timeout
[  263.906656] Bluetooth: hci0: command tx timeout
[  263.971656] Bluetooth: hci2: command tx timeout
[  263.971885] Bluetooth: hci3: command tx timeout
[  264.034960] Bluetooth: hci4: command tx timeout
[  264.163788] Bluetooth: hci5: command tx timeout
[  264.163834] Bluetooth: hci7: command tx timeout
[  264.164408] Bluetooth: hci6: command tx timeout
[  265.954595] Bluetooth: hci1: command tx timeout
[  265.955148] Bluetooth: hci0: command tx timeout
[  266.018594] Bluetooth: hci3: command tx timeout
[  266.019089] Bluetooth: hci2: command tx timeout
[  266.084560] Bluetooth: hci4: command tx timeout
[  266.211142] Bluetooth: hci7: command tx timeout
[  266.212040] Bluetooth: hci6: command tx timeout
[  266.212200] Bluetooth: hci5: command tx timeout
[  268.003713] Bluetooth: hci1: command tx timeout
[  268.004257] Bluetooth: hci0: command tx timeout
[  268.067439] Bluetooth: hci3: command tx timeout
[  268.068751] Bluetooth: hci2: command tx timeout
[  268.132499] Bluetooth: hci4: command tx timeout
[  268.258587] Bluetooth: hci5: command tx timeout
[  268.261505] Bluetooth: hci7: command tx timeout
[  268.262002] Bluetooth: hci6: command tx timeout
[  270.050917] Bluetooth: hci0: command tx timeout
[  270.052603] Bluetooth: hci1: command tx timeout
[  270.116789] Bluetooth: hci3: command tx timeout
[  270.117291] Bluetooth: hci2: command tx timeout
[  270.181569] Bluetooth: hci4: command tx timeout
[  270.306643] Bluetooth: hci6: command tx timeout
[  270.307150] Bluetooth: hci7: command tx timeout
[  270.307703] Bluetooth: hci5: command tx timeout
[  324.029065] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  324.032553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  324.035624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  324.043983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  324.054915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  324.397394] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  324.399968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  324.402434] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  324.407790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  324.413059] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  324.474205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  324.478783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  324.480524] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  324.482325] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  324.486345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  324.490783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  324.496253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  324.499218] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  324.501847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  324.523238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  324.566335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  324.579788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  324.588737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  324.617917] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  324.654430] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  324.655880] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  324.680767] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  324.713107] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  324.720859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  324.735829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  324.737040] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  324.746366] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  324.748181] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  324.749386] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  324.759904] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  324.763747] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  324.782277] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  324.789699] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  324.793774] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  324.816673] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  326.115834] Bluetooth: hci0: command tx timeout
[  326.434866] Bluetooth: hci1: command tx timeout
[  326.562625] Bluetooth: hci2: command tx timeout
[  326.564623] Bluetooth: hci3: command tx timeout
[  326.755579] Bluetooth: hci4: command tx timeout
[  326.818671] Bluetooth: hci5: command tx timeout
[  326.882568] Bluetooth: hci7: command tx timeout
[  326.946579] Bluetooth: hci6: command tx timeout
[  328.162745] Bluetooth: hci0: command tx timeout
[  328.483404] Bluetooth: hci1: command tx timeout
[  328.612521] Bluetooth: hci2: command tx timeout
[  328.613850] Bluetooth: hci3: command tx timeout
[  328.802569] Bluetooth: hci4: command tx timeout
[  328.866876] Bluetooth: hci5: command tx timeout
[  328.930953] Bluetooth: hci7: command tx timeout
[  328.994833] Bluetooth: hci6: command tx timeout
[  330.210844] Bluetooth: hci0: command tx timeout
[  330.530648] Bluetooth: hci1: command tx timeout
[  330.659308] Bluetooth: hci3: command tx timeout
[  330.659881] Bluetooth: hci2: command tx timeout
[  330.850859] Bluetooth: hci4: command tx timeout
[  330.915528] Bluetooth: hci5: command tx timeout
[  330.978993] Bluetooth: hci7: command tx timeout
[  331.042555] Bluetooth: hci6: command tx timeout
[  332.258580] Bluetooth: hci0: command tx timeout
[  332.579526] Bluetooth: hci1: command tx timeout
[  332.707584] Bluetooth: hci3: command tx timeout
[  332.708113] Bluetooth: hci2: command tx timeout
[  332.898901] Bluetooth: hci4: command tx timeout
[  332.963571] Bluetooth: hci5: command tx timeout
[  333.026842] Bluetooth: hci7: command tx timeout
[  333.091047] Bluetooth: hci6: command tx timeout
[  387.193563] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  387.203915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  387.208800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  387.222876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  387.226128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  387.252173] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  387.253978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  387.255291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  387.260853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  387.264173] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  387.313761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  387.320211] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  387.324877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  387.327604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  387.334107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  387.336364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  387.340763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  387.341311] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  387.371600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  387.378362] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  387.396808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  387.430742] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  387.439620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  387.453782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  387.455081] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  387.459160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  387.461323] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  387.464941] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  387.467288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  387.479806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  387.484963] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  387.492135] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  387.503182] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  387.513830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  387.527916] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  387.543874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  387.549831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  387.551773] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  387.562041] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  387.613990] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  389.282594] Bluetooth: hci0: command tx timeout
[  389.346617] Bluetooth: hci1: command tx timeout
[  389.410666] Bluetooth: hci2: command tx timeout
[  389.410687] Bluetooth: hci3: command tx timeout
[  389.602571] Bluetooth: hci7: command tx timeout
[  389.604234] Bluetooth: hci5: command tx timeout
[  389.668881] Bluetooth: hci4: command tx timeout
[  389.796622] Bluetooth: hci6: command tx timeout
[  391.330560] Bluetooth: hci0: command tx timeout
[  391.395183] Bluetooth: hci1: command tx timeout
[  391.459713] Bluetooth: hci2: command tx timeout
[  391.461229] Bluetooth: hci3: command tx timeout
[  391.650836] Bluetooth: hci5: command tx timeout
[  391.652189] Bluetooth: hci7: command tx timeout
[  391.714711] Bluetooth: hci4: command tx timeout
[  391.843839] Bluetooth: hci6: command tx timeout
[  393.380545] Bluetooth: hci0: command tx timeout
[  393.443738] Bluetooth: hci1: command tx timeout
[  393.507789] Bluetooth: hci3: command tx timeout
[  393.507910] Bluetooth: hci2: command tx timeout
[  393.698931] Bluetooth: hci7: command tx timeout
[  393.699082] Bluetooth: hci5: command tx timeout
[  393.763585] Bluetooth: hci4: command tx timeout
[  393.890755] Bluetooth: hci6: command tx timeout
[  395.426555] Bluetooth: hci0: command tx timeout
[  395.490542] Bluetooth: hci1: command tx timeout
[  395.554600] Bluetooth: hci3: command tx timeout
[  395.555759] Bluetooth: hci2: command tx timeout
[  395.746648] Bluetooth: hci5: command tx timeout
[  395.748182] Bluetooth: hci7: command tx timeout
[  395.810858] Bluetooth: hci4: command tx timeout
[  395.940507] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
09:31:03  Registers:
info registers vcpu 0
RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff867b277c RDX=0000000000000008
RSI=ffff888036cbf938 RDI=ffff888036cbf898 RBP=ffff888036cbf8f0 RSP=ffff888036cbf7d8
R8 =ffffffff867b2780 R9 =0000000000000000 R10=000000000003b71d R11=00000000000043fe
R12=ffff888036cbf8f8 R13=ffff888036cbf8e0 R14=ffff888036cbf940 R15=ffff888036cbf898
RIP=ffffffff813547ff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f6a387ad540 00000000 00000000
GS =0000 ffff8880e561a000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e2c0daa008 CR3=0000000032b71000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150
XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=ea1afa703a7121e7 RDX=ffffffff81353d19
RSI=0000000030b7cd12 RDI=00000000b12c70b3 RBP=ffff88803243f890 RSP=ffff88803243f7c8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=ffff88803243f880 R14=ffff888033fb0000 R15=ffff88803243f838
RIP=ffffffff81353d33 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571a000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcd62a90438 CR3=000000000e55b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e
XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249
XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000