Warning: Permanently added '[localhost]:15432' (ECDSA) to the list of known hosts.
2025/06/13 00:36:38 fuzzer started
2025/06/13 00:36:39 dialing manager at localhost:40113
syzkaller login: [   98.236589] cgroup: Unknown subsys name 'net'
[   98.425866] cgroup: Unknown subsys name 'cpuset'
[   98.489353] cgroup: Unknown subsys name 'rlimit'
2025/06/13 00:36:57 syscalls: 205
2025/06/13 00:36:57 code coverage: enabled
2025/06/13 00:36:57 comparison tracing: enabled
2025/06/13 00:36:57 extra coverage: enabled
2025/06/13 00:36:57 setuid sandbox: enabled
2025/06/13 00:36:57 namespace sandbox: enabled
2025/06/13 00:36:57 Android sandbox: enabled
2025/06/13 00:36:57 fault injection: enabled
2025/06/13 00:36:57 leak checking: enabled
2025/06/13 00:36:57 net packet injection: enabled
2025/06/13 00:36:57 net device setup: enabled
2025/06/13 00:36:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/13 00:36:57 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/13 00:36:57 USB emulation: enabled
2025/06/13 00:36:57 hci packet injection: enabled
2025/06/13 00:36:57 wifi device emulation: enabled
2025/06/13 00:36:57 802.15.4 emulation: enabled
2025/06/13 00:36:57 fetching corpus: 0, signal 0/0 (executing program)
2025/06/13 00:36:59 starting 8 fuzzer processes
00:36:59 executing program 0:
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/158)
shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0xe000)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f00000000c0)=""/10)
r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/126)
clock_gettime(0x0, &(0x7f0000000180))
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r1=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x811}, 0x8000)
r2 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil)
shmctl$IPC_RMID(r2, 0x0)
shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffc000/0x2000)=nil)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x4000000)
accept4(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}}}, &(0x7f0000000500)=0x80, 0x180800)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000540)={{0x2, 0x4e21, @remote}, {0x6, @random="9440c68ab78a"}, 0x2, {0x2, 0x4e22, @multicast2}, 'caif0\x00'})
r7 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffa000/0x2000)=nil)
shmctl$IPC_RMID(r7, 0x0)

00:36:59 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x3f, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @remote}, 0x42, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth1_to_hsr\x00'})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000080)=""/6, &(0x7f00000000c0)=0x6)
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000100)=""/59, 0x3b, 0x1, &(0x7f0000000140)={0x11, 0x15, 0x0, 0x1, 0x2}, 0x14)
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000180))
r0 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80, 0x800)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/hid_cypress', 0x200000, 0x40)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/class/leds', 0xc0402, 0x31)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000580)={@broadcast, @multicast1, 0x2, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}]}, 0x20)
getsockopt$inet_opts(r0, 0x0, 0x285bcf0110f82d74, &(0x7f00000005c0)=""/45, &(0x7f0000000600)=0x2d)
accept4$packet(r2, &(0x7f0000000640)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14, 0x80000)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000006c0)=0xbe5, 0x4)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7ab8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4008000)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x41d}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x73}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)
getpeername$packet(r1, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a80)=0x14)

00:36:59 executing program 2:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000040)={{0x88, @empty, 0x4e21, 0x2, 'ovf\x00', 0x25, 0x7, 0x5e}, {@remote, 0x4e21, 0x3, 0x10000, 0x40, 0x1d}}, 0x44)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e21, @broadcast}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x72, {0x2, 0x4e22, @empty}, 'veth0_to_team\x00'})
socketpair(0x1f, 0x80802, 0x3fbc7c6c, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)={@local, @multicast1, 0x1, 0x2, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x18)
r2 = accept4(r1, &(0x7f00000001c0)=@isdn, &(0x7f0000000240)=0x80, 0x40000)
getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [0xb904, 0x8, 0xda8, 0xfffffffffffffff8, 0x2, 0xfffffffffffff665]}, &(0x7f0000000300)=0x78)
getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000340)=""/218, &(0x7f0000000440)=0xda)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, 0x0, 0x100, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xdbf9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffe1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}]}, 0x64}, 0x1, 0x0, 0x0, 0x8c0}, 0x8000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan3\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x40018)
syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000007c0)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @private=0x8001}, 0xbf, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000780)='wg2\x00', 0xe223, 0x132})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan1\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan3\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x40)
socketpair(0x2c, 0x80000, 0x200, &(0x7f0000000a00)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000a40)={@broadcast, @local}, &(0x7f0000000a80)=0xc)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000ac0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000b40)={{0x5c, @local, 0x4e22, 0x0, 'none\x00', 0x28, 0x2, 0x7b}, {@broadcast, 0x4e21, 0x0, 0x4, 0x2, 0x12ef}}, 0x44)

00:36:59 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', <r1=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x3, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008081}, 0x40000)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010181}, 0x20000000)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000500)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e24, 0x3, 'lblcr\x00', 0x6, 0x9, 0x43}, 0x2c)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x99}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xac}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb8, r7, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "299b0ad1ea359fbabb3ff66d63163c2c7fa58e696b37edff0fdbe16f08ab4723"}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "6d55e4851f07700f869230523f46a0de"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "dcf14b85b71efbf5768c47c649d4fc28484756749edeb3fc6b63bdfca3c7665f"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x7f}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "51bef857ac4fda562ff3b04bc3fc46983018f0b1ec415628518ef5996d7e625c"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8084}, 0x81)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}}, 0x10804)
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x86)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4008084)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r9)

[  118.334487] audit: type=1400 audit(1749775019.420:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
00:36:59 executing program 4:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0xa08, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x40404d0)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
recvfrom$packet(r1, &(0x7f0000000280)=""/45, 0x2d, 0x1, &(0x7f00000002c0)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r0, 0xb20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}}, 0x4000050)
msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000000400)=""/80)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008082}, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r4, 0x403143309d2a8495, 0x6, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="610006c1f160"}]}, 0x38}, 0x1, 0x0, 0x0, 0x10004050}, 0x10090)
syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0xb00, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x2)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x4024)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan0\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x58, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000011}, 0x10)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/class/devlink', 0x4000, 0x22)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40080c0)

00:36:59 executing program 5:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
pidfd_send_signal(r0, 0x25, &(0x7f0000000040)={0x19, 0x3}, 0x0)
r1 = syz_io_uring_setup(0x427b, &(0x7f00000000c0)={0x0, 0x325a, 0x10, 0x2, 0x339}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=<r2=>0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, r1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
syz_io_uring_setup(0x29a6, &(0x7f00000001c0)={0x0, 0x130a, 0x8, 0x3, 0x1e5}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280))
syz_io_uring_submit(r3, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd_index=0x8, 0x4, &(0x7f00000002c0)="0bea33d40ebbceb75131f0498584563060e6b268d682fe3b6d39bce2dd358b18d19e5aa272581012aec32c4e8c3f1ebcc36453c2cc5f642a5c98cd729ded9d5552ab22d4ecbac2f2e38d012a483e25f14ee5af", 0x53, 0xd, 0x1}, 0x81)
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380))
r4 = pidfd_getfd(r0, r0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000003c0)={'wg2\x00'})
r5 = accept$inet(r4, &(0x7f0000000400)={0x2, 0x0, @private}, &(0x7f0000000440)=0x10)
bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @broadcast}, 0x10)
ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @private=0xa010100}, 0x2, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)='veth0_macvtap\x00', 0xfff, 0x0, 0x4})
socketpair(0x21, 0x4, 0x7, &(0x7f0000000580)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000600)={'batadv0\x00', <r8=>0x0})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xc0, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0xc0}}, 0x4000010)
setns(r4, 0x14000000)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0xaaf89cfa8014f1e9}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
r9 = accept4$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x0, @dev}, &(0x7f00000008c0)=0x10, 0x800)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000000900)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58)

00:36:59 executing program 6:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
socketpair(0x27, 0xa, 0x7, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5af}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x4044041)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x402294}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x58ad00}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x980}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11c4}, 0x404c000)
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8801)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x300120}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x1005}, 0x4008800)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x100)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x48c2}, 0x40000c0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd0cc}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3fe}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'ip6gre0\x00', <r5=>0x0, 0x4, 0x8, 0x1, 0x1, 0x24, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x40, 0x9, 0x8000}})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x8011)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r3, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc801}, 0x0)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3d}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040080)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x48, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000080)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000ec0)={"5c168a64d738e6e41a008a64aeb0e44f", 0x0, 0x0, {0x296, 0x40}, {0x40, 0x800}, 0xffffffffffff8000, [0x6447ea5, 0x2, 0x7, 0x2, 0x9, 0x86b, 0x0, 0x5, 0xfffffffffffff13d, 0x8, 0xad76, 0x80000001, 0x2, 0x0, 0x490, 0xcd]})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000001040)={'syztnl1\x00', &(0x7f0000000fc0)={'ip6_vti0\x00', r5, 0x4, 0x0, 0x9, 0x0, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x8, 0x40, 0x0, 0x1400}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000)

00:36:59 executing program 7:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffc, 0x20480)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xfff00000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xef}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffe1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0xf3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ffc0}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x845}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xdae8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa20}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000004)
r4 = accept4(r1, &(0x7f0000000440)=@ethernet, &(0x7f00000004c0)=0x80, 0x800)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1)
sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000094}, 0x0)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000680), r4)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x40)
accept$packet(r4, &(0x7f0000000840)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r6, 0x100, 0x6154, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/class/backlight', 0x404100, 0x11)
setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000a00)=@req={0x5, 0x6, 0x5, 0x200}, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x321}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbed}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x83b8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

[  119.870157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.875126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.880750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.888491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.892877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  120.000230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  120.010275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  120.014740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  120.027909] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  120.038795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  120.110089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  120.119876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  120.129972] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  120.141988] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  120.143628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  120.156002] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  120.157496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  120.167462] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  120.185165] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  120.187483] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  120.193199] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  120.203794] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  120.215266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  120.217298] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  120.226426] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  120.244133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  120.248466] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  120.270192] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  120.272312] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.287873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  120.316430] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  120.338323] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  120.343198] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  120.351252] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  120.353156] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  120.361275] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  120.370268] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  120.373505] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  120.399174] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  120.429183] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  121.949062] Bluetooth: hci0: command tx timeout
[  122.074951] Bluetooth: hci1: command tx timeout
[  122.266856] Bluetooth: hci2: command tx timeout
[  122.331068] Bluetooth: hci3: command tx timeout
[  122.396544] Bluetooth: hci5: command tx timeout
[  122.397170] Bluetooth: hci4: command tx timeout
[  122.460037] Bluetooth: hci6: command tx timeout
[  122.523749] Bluetooth: hci7: command tx timeout
[  123.995018] Bluetooth: hci0: command tx timeout
[  124.123935] Bluetooth: hci1: command tx timeout
[  124.316702] Bluetooth: hci2: command tx timeout
[  124.379912] Bluetooth: hci3: command tx timeout
[  124.443936] Bluetooth: hci4: command tx timeout
[  124.444367] Bluetooth: hci5: command tx timeout
[  124.507768] Bluetooth: hci6: command tx timeout
[  124.571763] Bluetooth: hci7: command tx timeout
[  126.044275] Bluetooth: hci0: command tx timeout
[  126.172414] Bluetooth: hci1: command tx timeout
[  126.362770] Bluetooth: hci2: command tx timeout
[  126.426757] Bluetooth: hci3: command tx timeout
[  126.491917] Bluetooth: hci5: command tx timeout
[  126.492318] Bluetooth: hci4: command tx timeout
[  126.555760] Bluetooth: hci6: command tx timeout
[  126.619831] Bluetooth: hci7: command tx timeout
[  128.090784] Bluetooth: hci0: command tx timeout
[  128.219998] Bluetooth: hci1: command tx timeout
[  128.410756] Bluetooth: hci2: command tx timeout
[  128.474874] Bluetooth: hci3: command tx timeout
[  128.538763] Bluetooth: hci4: command tx timeout
[  128.539168] Bluetooth: hci5: command tx timeout
[  128.604003] Bluetooth: hci6: command tx timeout
[  128.666735] Bluetooth: hci7: command tx timeout
[  182.383830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  182.389394] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  182.391853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  182.399104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  182.404574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  182.464170] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  182.468783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  182.472232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  182.474471] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  182.478607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  182.482796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  182.494183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  182.501284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  182.508223] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  182.510364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  182.568647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  182.573377] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  182.578654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  182.585535] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  182.591003] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  182.659281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  182.670002] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  182.682262] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  182.717301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  182.726510] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  182.767835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  182.774353] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  182.784526] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  182.814015] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  182.826162] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  182.828481] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  182.832340] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  182.838568] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  182.854469] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  182.859436] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  182.921219] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  182.950946] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  182.989594] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  183.031322] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  183.054896] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  184.476376] Bluetooth: hci0: command tx timeout
[  184.538836] Bluetooth: hci2: command tx timeout
[  184.603220] Bluetooth: hci1: command tx timeout
[  184.667165] Bluetooth: hci3: command tx timeout
[  184.794771] Bluetooth: hci5: command tx timeout
[  184.922828] Bluetooth: hci7: command tx timeout
[  184.923583] Bluetooth: hci4: command tx timeout
[  185.114796] Bluetooth: hci6: command tx timeout
[  186.523771] Bluetooth: hci0: command tx timeout
[  186.587223] Bluetooth: hci2: command tx timeout
[  186.652724] Bluetooth: hci1: command tx timeout
[  186.716267] Bluetooth: hci3: command tx timeout
[  186.843801] Bluetooth: hci5: command tx timeout
[  186.970781] Bluetooth: hci4: command tx timeout
[  186.971279] Bluetooth: hci7: command tx timeout
[  187.164725] Bluetooth: hci6: command tx timeout
[  188.572718] Bluetooth: hci0: command tx timeout
[  188.636422] Bluetooth: hci2: command tx timeout
[  188.699829] Bluetooth: hci1: command tx timeout
[  188.763738] Bluetooth: hci3: command tx timeout
[  188.891911] Bluetooth: hci5: command tx timeout
[  189.021751] Bluetooth: hci7: command tx timeout
[  189.022244] Bluetooth: hci4: command tx timeout
[  189.210851] Bluetooth: hci6: command tx timeout
[  190.620045] Bluetooth: hci0: command tx timeout
[  190.683967] Bluetooth: hci2: command tx timeout
[  190.748743] Bluetooth: hci1: command tx timeout
[  190.811749] Bluetooth: hci3: command tx timeout
[  190.939023] Bluetooth: hci5: command tx timeout
[  191.067781] Bluetooth: hci4: command tx timeout
[  191.068248] Bluetooth: hci7: command tx timeout
[  191.259899] Bluetooth: hci6: command tx timeout
[  244.335213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  244.340306] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  244.344864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  244.354534] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  244.361593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  244.477590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  244.484519] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  244.487493] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  244.497158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  244.502485] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  244.528788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  244.532278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  244.535428] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  244.543583] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  244.549389] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  244.593571] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  244.615641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  244.618642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  244.633088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  244.638053] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  244.781161] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  244.795395] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  244.806403] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  244.858829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  244.891318] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  244.896516] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  244.919484] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.931117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  244.963507] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  245.000231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  245.009150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  245.022186] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  245.025420] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  245.077130] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  245.083223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  245.133469] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  245.139201] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  245.161406] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  245.210144] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  245.248347] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  246.426904] Bluetooth: hci0: command tx timeout
[  246.619030] Bluetooth: hci1: command tx timeout
[  246.620610] Bluetooth: hci2: command tx timeout
[  246.874768] Bluetooth: hci3: command tx timeout
[  247.003750] Bluetooth: hci4: command tx timeout
[  247.131026] Bluetooth: hci5: command tx timeout
[  247.323868] Bluetooth: hci6: command tx timeout
[  247.516705] Bluetooth: hci7: command tx timeout
[  248.474917] Bluetooth: hci0: command tx timeout
[  248.666994] Bluetooth: hci2: command tx timeout
[  248.667470] Bluetooth: hci1: command tx timeout
[  248.922857] Bluetooth: hci3: command tx timeout
[  249.050791] Bluetooth: hci4: command tx timeout
[  249.180787] Bluetooth: hci5: command tx timeout
[  249.371021] Bluetooth: hci6: command tx timeout
[  249.562785] Bluetooth: hci7: command tx timeout
[  250.522802] Bluetooth: hci0: command tx timeout
[  250.714782] Bluetooth: hci2: command tx timeout
[  250.715258] Bluetooth: hci1: command tx timeout
[  250.971815] Bluetooth: hci3: command tx timeout
[  251.098797] Bluetooth: hci4: command tx timeout
[  251.227351] Bluetooth: hci5: command tx timeout
[  251.418780] Bluetooth: hci6: command tx timeout
[  251.610822] Bluetooth: hci7: command tx timeout
[  252.571143] Bluetooth: hci0: command tx timeout
[  252.762886] Bluetooth: hci2: command tx timeout
[  252.763391] Bluetooth: hci1: command tx timeout
[  253.018978] Bluetooth: hci3: command tx timeout
[  253.148068] Bluetooth: hci4: command tx timeout
[  253.274993] Bluetooth: hci5: command tx timeout
[  253.466743] Bluetooth: hci6: command tx timeout
[  253.658892] Bluetooth: hci7: command tx timeout
[  306.926209] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  306.937484] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  306.940473] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  306.950512] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  306.959400] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  307.187186] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  307.190816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  307.196575] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  307.212441] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  307.219499] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  307.287042] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  307.300437] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  307.311226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  307.314268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  307.319250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  307.322167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  307.327387] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  307.333230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.341033] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  307.360926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  307.434268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  307.442474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  307.465989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  307.496041] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  307.499527] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  307.558849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  307.562172] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  307.579592] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  307.588001] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  307.600234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  307.607333] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  307.616143] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  307.616306] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  307.625305] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  307.660249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  307.688262] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  307.699025] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  307.701774] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  307.716022] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  307.724627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.018787] Bluetooth: hci0: command tx timeout
[  309.274763] Bluetooth: hci1: command tx timeout
[  309.403770] Bluetooth: hci3: command tx timeout
[  309.467028] Bluetooth: hci2: command tx timeout
[  309.850799] Bluetooth: hci5: command tx timeout
[  309.851546] Bluetooth: hci7: command tx timeout
[  309.914763] Bluetooth: hci4: command tx timeout
[  309.915301] Bluetooth: hci6: command tx timeout
[  311.067729] Bluetooth: hci0: command tx timeout
[  311.323711] Bluetooth: hci1: command tx timeout
[  311.452826] Bluetooth: hci3: command tx timeout
[  311.516075] Bluetooth: hci2: command tx timeout
[  311.899036] Bluetooth: hci7: command tx timeout
[  311.899521] Bluetooth: hci5: command tx timeout
[  311.963088] Bluetooth: hci6: command tx timeout
[  311.963518] Bluetooth: hci4: command tx timeout
[  313.114714] Bluetooth: hci0: command tx timeout
[  313.371792] Bluetooth: hci1: command tx timeout
[  313.499848] Bluetooth: hci3: command tx timeout
[  313.563901] Bluetooth: hci2: command tx timeout
[  313.949298] Bluetooth: hci5: command tx timeout
[  313.950359] Bluetooth: hci7: command tx timeout
[  314.012398] Bluetooth: hci4: command tx timeout
[  314.013000] Bluetooth: hci6: command tx timeout
[  315.164732] Bluetooth: hci0: command tx timeout
[  315.419733] Bluetooth: hci1: command tx timeout
[  315.547764] Bluetooth: hci3: command tx timeout
[  315.612006] Bluetooth: hci2: command tx timeout
[  315.995800] Bluetooth: hci7: command tx timeout
[  315.996311] Bluetooth: hci5: command tx timeout
[  316.058905] Bluetooth: hci6: command tx timeout
[  316.059408] Bluetooth: hci4: command tx timeout
[  369.393802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  369.400835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  369.405180] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  369.411861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  369.417270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  369.540273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  369.546333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  369.548866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  369.559229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  369.565460] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  369.872175] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  369.880207] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  369.900498] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  369.903360] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  369.910244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  369.916156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  369.921256] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  369.941106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  369.942824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  369.944495] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  369.952894] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  369.958131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  369.983355] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  370.007304] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  370.009339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  370.013911] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  370.021790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  370.025977] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  370.042332] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  370.048160] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  370.189977] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  370.196033] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  370.206832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  370.224587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  370.245778] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  370.285206] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  370.290370] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  370.293201] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  370.301223] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  370.305893] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  371.483315] Bluetooth: hci0: command tx timeout
[  371.611251] Bluetooth: hci1: command tx timeout
[  372.060222] Bluetooth: hci4: command tx timeout
[  372.061476] Bluetooth: hci2: command tx timeout
[  372.122857] Bluetooth: hci3: command tx timeout
[  372.378808] Bluetooth: hci7: command tx timeout
[  372.443646] Bluetooth: hci6: command tx timeout
[  372.635401] Bluetooth: hci5: command tx timeout
[  373.531739] Bluetooth: hci0: command tx timeout
[  373.659755] Bluetooth: hci1: command tx timeout
[  374.107028] Bluetooth: hci2: command tx timeout
[  374.107504] Bluetooth: hci4: command tx timeout
[  374.172699] Bluetooth: hci3: command tx timeout
[  374.427826] Bluetooth: hci7: command tx timeout
[  374.492575] Bluetooth: hci6: command tx timeout
[  374.683944] Bluetooth: hci5: command tx timeout
[  375.581704] Bluetooth: hci0: command tx timeout
[  375.706725] Bluetooth: hci1: command tx timeout
[  376.154842] Bluetooth: hci2: command tx timeout
[  376.155354] Bluetooth: hci4: command tx timeout
[  376.219747] Bluetooth: hci3: command tx timeout
[  376.474767] Bluetooth: hci7: command tx timeout
[  376.539781] Bluetooth: hci6: command tx timeout
[  376.730886] Bluetooth: hci5: command tx timeout
[  377.627010] Bluetooth: hci0: command tx timeout
[  377.755160] Bluetooth: hci1: command tx timeout
[  378.204719] Bluetooth: hci4: command tx timeout
[  378.205309] Bluetooth: hci2: command tx timeout
[  378.267957] Bluetooth: hci3: command tx timeout
[  378.523927] Bluetooth: hci7: command tx timeout
[  378.587760] Bluetooth: hci6: command tx timeout
[  378.779960] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
00:42:07  Registers:
info registers vcpu 0
RAX=ffffffff86871d82 RBX=0000000000000001 RCX=ffffffff86871d82 RDX=0000000000000000
RSI=ffffffff86871d82 RDI=ffffffff864ecec8 RBP=ffff8880364af9c8 RSP=ffff8880364af900
R8 =ffffffff86871d82 R9 =0000000000000000 R10=000000000003b4cd R11=000000000002612b
R12=ffff8880364af9d0 R13=ffff8880364af9b8 R14=ffff8880364af9b1 R15=ffff8880364af970
RIP=ffffffff81354066 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f12ba623540 00000000 00000000
GS =0000 ffff8880e562f000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f12ba7be4a1 CR3=000000001d03d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000
XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffffffff8136038a RCX=ffff88806cf089cc RDX=1ffff1100d9e115a
RSI=ffffffff85c1cc40 RDI=ffffffff8136038a RBP=ffff88806cf08ad0 RSP=ffff88806cf08a50
R8 =0000000000000001 R9 =ffff88806cf08ab8 R10=000000000003b4cd R11=0000000000020f09
R12=ffff88806cf08b40 R13=0000000000000000 R14=ffff888016690000 R15=ffff888034e97940
RIP=ffffffff8142fb1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fea7b08d540 00000000 00000000
GS =0000 ffff8880e572f000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fea7b2c0000 CR3=000000000d556000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000