Warning: Permanently added '[localhost]:39411' (ECDSA) to the list of known hosts.
2025/06/19 13:24:46 fuzzer started
2025/06/19 13:24:47 dialing manager at localhost:36157
syzkaller login: [  106.012087] cgroup: Unknown subsys name 'net'
[  106.120497] cgroup: Unknown subsys name 'cpuset'
[  106.177255] cgroup: Unknown subsys name 'rlimit'
2025/06/19 13:25:09 syscalls: 201
2025/06/19 13:25:09 code coverage: enabled
2025/06/19 13:25:09 comparison tracing: enabled
2025/06/19 13:25:09 extra coverage: enabled
2025/06/19 13:25:09 setuid sandbox: enabled
2025/06/19 13:25:09 namespace sandbox: enabled
2025/06/19 13:25:09 Android sandbox: enabled
2025/06/19 13:25:09 fault injection: enabled
2025/06/19 13:25:09 leak checking: enabled
2025/06/19 13:25:09 net packet injection: enabled
2025/06/19 13:25:09 net device setup: enabled
2025/06/19 13:25:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/19 13:25:09 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/19 13:25:09 USB emulation: enabled
2025/06/19 13:25:09 hci packet injection: enabled
2025/06/19 13:25:09 wifi device emulation: enabled
2025/06/19 13:25:09 802.15.4 emulation: enabled
2025/06/19 13:25:09 fetching corpus: 0, signal 0/0 (executing program)
2025/06/19 13:25:11 starting 8 fuzzer processes
13:25:11 executing program 0:
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0041, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000081}, 0x4008004)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x250c02, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x44}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}]}, 0x54}}, 0x20004040)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r1, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r2)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x30000000)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x84, r3, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x120000}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9f0a}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x100, 0xc8, 0x1f]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x4001}, 0x4)
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0xb00, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x801)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000008c0)={'batadv_slave_1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000940)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x375}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4d7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4000080)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a40), 0x80080, 0x0)
sendmsg$AUDIT_ADD_RULE(r6, &(0x7f0000000f40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ac0)={0x434, 0x3f3, 0x800, 0x70bd27, 0x25dfdbfb, {0x1, 0x2, 0x33, [0x8, 0xffffffff, 0x80, 0x5, 0x100, 0xffffffff, 0xa3ad, 0x81, 0x5, 0x38, 0x8, 0xa7e8, 0x4, 0x3, 0x7ff, 0x1ff, 0xfffff9af, 0x7fffffff, 0x8001, 0xfffffffd, 0x10001, 0x101, 0x5, 0x100, 0x0, 0x2, 0x5, 0x9, 0x6f, 0x4d, 0x5, 0x1, 0x2, 0x0, 0x1, 0x80000000, 0x5, 0x0, 0x0, 0x40, 0x400, 0x3, 0x0, 0xfffff151, 0x81, 0x1, 0xbd05, 0x1, 0x401, 0x5, 0xffffffe0, 0x9, 0x80, 0x4, 0xa05, 0x4, 0x2b58, 0x7, 0x8, 0x7f, 0x59f, 0x20, 0x4, 0x9], [0x0, 0x9, 0x4, 0x7, 0x8, 0x7, 0x200, 0x5, 0xff, 0x7, 0x4, 0x6, 0x4, 0x1, 0x5, 0x0, 0x200, 0x401, 0x6, 0x166, 0x2, 0xffff, 0x401, 0x8001, 0x6, 0x944, 0x5, 0x0, 0x3, 0x40, 0x9, 0x0, 0x3, 0x4, 0x6, 0x3, 0x20, 0x9, 0x2, 0x7, 0x3, 0xfffffbff, 0x9, 0xffffffff, 0x5, 0x1, 0x24aa, 0x8, 0x7fffffff, 0x3, 0x100, 0x946, 0x9, 0x7, 0x4806, 0x15, 0xd61, 0x80000001, 0x7, 0x9, 0x3224, 0xffffff81, 0x9], [0x9, 0x454b, 0x9, 0x20, 0x401, 0x401, 0x5, 0x8, 0x10000, 0x200, 0x7, 0x0, 0x20, 0x7, 0xfffffffb, 0x2, 0x2, 0x80000000, 0x1e4, 0x0, 0x9, 0x2, 0x5, 0xfd, 0x1, 0x80, 0xffff, 0x4, 0x5, 0xdc, 0x2dd, 0x5, 0x1000, 0x10000, 0x7ff, 0x4, 0xfffff18f, 0x0, 0x80000000, 0xffffffff, 0x3, 0xfffffc00, 0x0, 0xfffffffd, 0x8, 0xc3bc, 0x3, 0x3d, 0x6, 0x10001, 0x6, 0x80, 0x0, 0x2, 0xd82, 0x4, 0x9c5e, 0x5, 0x5, 0x2, 0x3, 0x8001, 0x80000001, 0x12a3c365], [0x4, 0x8001, 0x10000, 0x8, 0xff, 0x4, 0x10000, 0xffff, 0x15c8f0c3, 0x1, 0xc09, 0x1, 0x1f, 0xa000000, 0x9, 0x0, 0x8, 0x3, 0x4, 0x7ff, 0x10000, 0xfffffffe, 0x1, 0x3, 0x0, 0x9, 0x7, 0x20, 0x358, 0x1, 0x302e, 0x10001, 0x4, 0x3, 0x0, 0x7, 0x20, 0x6, 0x6, 0x7, 0xd6, 0x3f, 0x7f48, 0x401, 0x675, 0x2, 0x6, 0x7, 0x6, 0x0, 0x3, 0x4, 0x55ac92f1, 0xef6f, 0x1, 0xfe000000, 0x3, 0x1, 0x56f, 0x4, 0x1, 0x1, 0x4, 0x6], 0x14, ['\x00', '[!\x00', '-:++\x00', '/dev/cdrom\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x84, r3, 0x638, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7ff, 0x6, 0x8, 0xfffffffe]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffb}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000090}, 0x24000800)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x3c, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

13:25:11 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x100, 0x70bd2a, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40002}, 0x480c0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
socketpair(0x22, 0x3, 0x45, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1)
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r3, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0xc4}, 0xc1)
sendmsg$AUDIT_TRIM(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f6, 0x400, 0x70bd2d, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0xc004}, 0x1)
socketpair(0x21, 0x5, 0x20, &(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0xffff, 0x50]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3add}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x76, 0x9]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x84)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x74, 0x453, 0x200, 0x70bd25, 0x25dfdbfd, "9819a99bc4e086f2aeb0273e9d9baf436b1eed16ba3c37771f35650c3f34e7c114f722fb8307824b9989a2ea2d82552b85542df11c67a5c0e6abbebfce97e5e6b67a3012783aad59d90fc7f0fe2ca4b8fdd87986735b8029407ad0d7582bf521f3e15210", ["", "", ""]}, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x80010)
sendmsg$AUDIT_USER_AVC(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x10, 0x453, 0x400, 0x70bd2b, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x2982fc39b8b67c17)
socketpair(0x8, 0x3, 0x800, &(0x7f0000000900)={<r5=>0xffffffffffffffff})
bind$bt_l2cap(r5, &(0x7f0000000940)={0x1f, 0xfff9, @none, 0x7}, 0xe)
r6 = perf_event_open(&(0x7f00000009c0)={0x5, 0x80, 0x1, 0x7f, 0xe, 0x20, 0x0, 0x17, 0x88205, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000980)}, 0x0, 0x7, 0x6, 0x2, 0xffffffffffff0000, 0x1, 0x5, 0x0, 0x1, 0x0, 0x639bd2ed}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r6)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r5)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r7, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040c1}, 0x4040800)
getrusage(0xffffffffffffffff, &(0x7f0000000b80))

13:25:11 executing program 2:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2a8500, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9)
r1 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x9, 0x1, 0x6, 0x3, 0x0, 0xff, 0xa8920, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x2000, 0x1, 0x40, 0x8, 0x0, 0x4, 0x7, 0x0, 0x26000000, 0x0, 0xff}, 0x0, 0x7, r0, 0x8)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x5, 0x80, 0x8, 0x6, 0x0, 0x4, 0x0, 0x6, 0xa2400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x4, 0x200}, 0x40, 0x2, 0x4, 0x7, 0x6, 0x7, 0xfffc, 0x0, 0x2, 0x0, 0x2})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180))
sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc0}, 0x14008040)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x10001})
read$usbmon(r0, &(0x7f0000000340)=""/56, 0x38)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000380)=0xda0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000003c0)={0x2, 0x0, [0x0, 0x0]})
socketpair(0xa, 0x0, 0xf3c94fdb, &(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x42d, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004844}, 0x8000)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x500002, 0x0)
ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0], 0x2, 0x2})
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee01)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000600)={0x6, "9c9a0c"}, 0x6)
mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x2010, r3, 0x5)

13:25:11 executing program 3:
r0 = fork()
r1 = fork()
r2 = clone3(&(0x7f0000001180)={0x12230800, &(0x7f0000000000), &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0, {0x1d}, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/117, &(0x7f0000001140)=[r0, 0xffffffffffffffff, r1, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
r5 = getpgid(r0)
r6 = getpid()
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001480), 0x311100, 0x0)
clone3(&(0x7f00000014c0)={0xc4000, &(0x7f0000001200), &(0x7f0000001240)=<r8=>0x0, &(0x7f0000001280), {0x35}, &(0x7f00000012c0)=""/186, 0xba, &(0x7f0000001380)=""/141, &(0x7f0000001440)=[r5, r3, r4, r2, r6], 0x5, {r7}}, 0x58)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x10, &(0x7f0000001540)={0x2})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001580)=<r9=>0x0)
sched_rr_get_interval(r9, &(0x7f00000015c0))
prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x3, &(0x7f0000001600))
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x0)
clock_gettime(0x0, &(0x7f00000017c0)={<r10=>0x0, <r11=>0x0})
mq_timedreceive(r7, &(0x7f0000001740)=""/89, 0x59, 0x4f, &(0x7f0000001800)={r10, r11+10000000})
clock_gettime(0x0, &(0x7f0000001900)={<r12=>0x0, <r13=>0x0})
pselect6(0x40, &(0x7f0000001840)={0x5, 0x8, 0x14a9, 0x6, 0x5, 0x8000, 0x9, 0x2}, &(0x7f0000001880)={0x1, 0x1, 0xfffffffffffffffc, 0x3bb1, 0x5, 0x8, 0x0, 0x7ff}, &(0x7f00000018c0)={0x6, 0xfffffffffffffffe, 0x5, 0x75be, 0x800, 0xcb, 0x1ff, 0x8dc}, &(0x7f0000001940)={r12, r13+10000000}, &(0x7f00000019c0)={&(0x7f0000001980)={[0x2]}, 0x8})
r14 = getpgrp(r2)
sched_rr_get_interval(r14, &(0x7f0000001a00))
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000001a40))
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000001a80), &(0x7f0000001ac0)=0xc)

[  129.733864] audit: type=1400 audit(1750339511.551:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:25:11 executing program 4:
ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'binder0\x00'})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c841)
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder-control\x00', 0x2, 0x0)
r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400a4}, 0x20048080)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4094}, 0x8804)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4001000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x44000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000700)={'team_slave_0\x00'})
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000880)={&(0x7f0000000780)="6ab7535d23eb04e72b115d1a8ddbefa8bc8de010ed75b38fa7d7ee73e2f7aec2ac79d1f5e5a535263aaa22dd283d0caae1d2c31c6ab2891d6ce9dddb765aefa7920e914023cf6d3da1c3c1d0b51227782e5fb921b46d26cf01538d1dfb06903e20e78b62a54859f5b51e025cf5ed120d75f15c79b14dd57baf36bc22cf02d7f7506addcb0a8ff2d0cc164bc45c1738ded1ba9c25b13b0d2e36408f9374089af80f3d041178b761e1c45295dbb9b80974175044c57200ff68e1abf104acd1697477a3e31f7b4ba3cdf1fbccd8fb646af3f38ee90f83feb13b", 0xd8}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='memory.events\x00', 0x0, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x10000, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r5)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x10, 0x3f6, 0x0, 0x70bd25, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000ac0)="532347b300737ff20ade04b4d57685c0468709dea510130480117c5e825e66b00560e9c40489d63ffd0dd69cd7179653ab072ec764170c7686d3777999a98a764ebdf30daee0f4fadf141d0c328315fff177031f646636952b487b94b0d24393533272ac1ed668f195c28f742ca0dced9aa91a", 0x73)

13:25:11 executing program 5:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040), 0xf)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x200000d4)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x40804}, 0x4)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, 0x453, 0xc30, 0x70bd27, 0x25dfdbff, "aff0be2ab3697ea140b6b5b2da768550d4e9cace54edcd4c534c19628d30e585a9b87b019e73a6e8f5e3921b4f94e14ece89f901de3fc9c0b444a3e9c4b0d3a84f807134456324b049c6e2a61b6e71a4e90eb7cadfe4995899ffe921be5aa069bfdaed8d1809ef71722723abff20f473152817f72e2893a5467c5b98504896ea4652c9b7858c583e039ada9de97af9e67bc760637c134550af6408db5180f24183ddff83328202629cf4e1122703a508b693d9", [""]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x20080084)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='memory.events.local\x00', 0x0, 0x0)
r3 = getpgid(0x0)
sendmsg$AUDIT_SET(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x3e9, 0x8, 0x70bd2c, 0x25dfdbfd, {0xc, 0x1, 0x2, r3, 0xb02, 0x4, 0x6, 0x3, 0x0, 0x7}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4)
sendmsg$AUDIT_TRIM(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x10, 0x3f6, 0x800, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x11)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x160, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x731a1aae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x166eff0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ddc9fef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58dfe11a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13e9d584}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dedda25}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b040428}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18e89dc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe156b0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a427480}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x797eb5c1}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70bdabfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c1cb176}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60c0cb6}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55ea6ae4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3de06998}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a026f16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7857a328}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_open_procfs$namespace(r3, &(0x7f0000000a80)='ns/time\x00')
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000ac0))
sendmsg$802154_raw(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000bc0)={&(0x7f0000000b40)="c9ecbfe4e3fc90174256def7294ab72fe98f1bc6f9a5fe35c82fca835ca28398ce50a63bf8dcb684a5a989a576d8ee53b9dd8db5c056f547935d2bd52447d33a12057aec13f717792d05fa83266233ddfa68", 0x52}, 0x1, 0x0, 0x0, 0x4}, 0x20044015)
socketpair(0x6, 0x800, 0x6, &(0x7f0000000c40)={<r5=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, r1, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4c001)
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x4)

13:25:11 executing program 6:
keyctl$link(0x8, 0x0, 0xfffffffffffffff8)
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$search(0xa, 0x0, &(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, r0)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0)
keyctl$search(0xa, r1, &(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, r0)
ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xc208)
r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
request_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='-\x00', r2)
r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f00000003c0)='.request_key_auth\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)='rxrpc\x00', r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1a}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004040}, 0x40000c0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4)
request_key(&(0x7f00000005c0)='big_key\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)='$\x00', r1)
r5 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r5)
add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, r2)
request_key(&(0x7f0000000800)='cifs.spnego\x00', &(0x7f0000000840)={'syz', 0x1}, &(0x7f0000000880)='big_key\x00', r5)
r6 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$restrict_keyring(0x1d, r6, &(0x7f0000000940)='cifs.idmap\x00', &(0x7f0000000980)='\x00')

13:25:11 executing program 7:
socketpair(0x1, 0x1, 0x4641f119, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88401580}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x2bf9856396f90ce7)
socketpair(0xb, 0x80000, 0x8, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x90)
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x40000)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x340}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x56}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000801}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x44080210}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffe00}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x20000800)
r6 = openat$cgroup_ro(r3, &(0x7f00000006c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, 0x0, 0x901, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x32}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff35}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x55b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff41}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000001)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x1400c000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$cgroup_ro(r6, &(0x7f0000000940)='cpuacct.usage_percpu\x00', 0x0, 0x0)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f00000009c0), r2)
sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3870}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0xc080)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000b00), r7)
sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, r11, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

[  131.156780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  131.160047] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  131.169910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  131.180368] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  131.187895] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  131.236630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.242088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.247389] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.275099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.277691] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  131.280757] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.284984] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.287406] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  131.291180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  131.301577] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  131.305480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  131.316191] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.321044] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  131.329043] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.332899] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  131.341231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  131.349464] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  131.353148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.356176] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  131.366158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.368772] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  131.377229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  131.381088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  131.384244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  131.396381] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  131.408886] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  131.416639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  131.419361] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  131.433707] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  131.438227] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  131.440454] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  131.445656] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  131.448263] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  131.468957] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  131.474050] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  133.230001] Bluetooth: hci0: command tx timeout
[  133.357272] Bluetooth: hci1: command tx timeout
[  133.420840] Bluetooth: hci3: command tx timeout
[  133.484852] Bluetooth: hci5: command tx timeout
[  133.484875] Bluetooth: hci2: command tx timeout
[  133.549883] Bluetooth: hci7: command tx timeout
[  133.549906] Bluetooth: hci4: command tx timeout
[  133.613050] Bluetooth: hci6: command tx timeout
[  135.277998] Bluetooth: hci0: command tx timeout
[  135.404870] Bluetooth: hci1: command tx timeout
[  135.468928] Bluetooth: hci3: command tx timeout
[  135.533047] Bluetooth: hci2: command tx timeout
[  135.534006] Bluetooth: hci5: command tx timeout
[  135.598104] Bluetooth: hci4: command tx timeout
[  135.598615] Bluetooth: hci7: command tx timeout
[  135.661062] Bluetooth: hci6: command tx timeout
[  137.325851] Bluetooth: hci0: command tx timeout
[  137.452813] Bluetooth: hci1: command tx timeout
[  137.518021] Bluetooth: hci3: command tx timeout
[  137.582026] Bluetooth: hci5: command tx timeout
[  137.582277] Bluetooth: hci2: command tx timeout
[  137.647008] Bluetooth: hci7: command tx timeout
[  137.647503] Bluetooth: hci4: command tx timeout
[  137.708884] Bluetooth: hci6: command tx timeout
[  139.372879] Bluetooth: hci0: command tx timeout
[  139.502189] Bluetooth: hci1: command tx timeout
[  139.565168] Bluetooth: hci3: command tx timeout
[  139.629387] Bluetooth: hci2: command tx timeout
[  139.629696] Bluetooth: hci5: command tx timeout
[  139.693127] Bluetooth: hci4: command tx timeout
[  139.694660] Bluetooth: hci7: command tx timeout
[  139.756844] Bluetooth: hci6: command tx timeout
[  193.946072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.958156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  193.959784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.964087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.966798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.138804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  194.149610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  194.151335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  194.154815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  194.157121] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  194.205593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  194.210800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  194.221286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  194.228259] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  194.233388] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  194.234610] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  194.237513] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  194.239127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  194.241291] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  194.243253] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  194.247999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  194.252338] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  194.253588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  194.255354] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  194.256035] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  194.257855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  194.258141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.264193] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  194.270237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  194.279421] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  194.286090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.286960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  194.291296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  194.293250] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  194.295589] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  194.310980] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  194.320666] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  194.335054] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  194.355926] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  194.361194] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  196.022326] Bluetooth: hci0: command tx timeout
[  196.204841] Bluetooth: hci1: command tx timeout
[  196.333218] Bluetooth: hci4: command tx timeout
[  196.396953] Bluetooth: hci5: command tx timeout
[  196.397002] Bluetooth: hci6: command tx timeout
[  196.398509] Bluetooth: hci3: command tx timeout
[  196.398524] Bluetooth: hci7: command tx timeout
[  196.399354] Bluetooth: hci2: command tx timeout
[  198.061060] Bluetooth: hci0: command tx timeout
[  198.252803] Bluetooth: hci1: command tx timeout
[  198.380789] Bluetooth: hci4: command tx timeout
[  198.444907] Bluetooth: hci7: command tx timeout
[  198.444973] Bluetooth: hci2: command tx timeout
[  198.445473] Bluetooth: hci3: command tx timeout
[  198.446154] Bluetooth: hci6: command tx timeout
[  198.446202] Bluetooth: hci5: command tx timeout
[  200.109429] Bluetooth: hci0: command tx timeout
[  200.300818] Bluetooth: hci1: command tx timeout
[  200.428880] Bluetooth: hci4: command tx timeout
[  200.492920] Bluetooth: hci3: command tx timeout
[  200.495773] Bluetooth: hci2: command tx timeout
[  200.495826] Bluetooth: hci5: command tx timeout
[  200.496246] Bluetooth: hci6: command tx timeout
[  200.496996] Bluetooth: hci7: command tx timeout
[  202.158796] Bluetooth: hci0: command tx timeout
[  202.349047] Bluetooth: hci1: command tx timeout
[  202.477938] Bluetooth: hci4: command tx timeout
[  202.541334] Bluetooth: hci5: command tx timeout
[  202.542781] Bluetooth: hci6: command tx timeout
[  202.543249] Bluetooth: hci7: command tx timeout
[  202.544895] Bluetooth: hci2: command tx timeout
[  202.545455] Bluetooth: hci3: command tx timeout
[  256.495350] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  256.501002] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  256.506522] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  256.512073] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  256.514462] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  256.570601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  256.574758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  256.579932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  256.584077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  256.591049] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  256.841785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  256.851179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  256.856938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  256.864295] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  256.869819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  256.870648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  256.875137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  256.877364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  256.892566] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  256.896440] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  256.933492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  256.939886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  256.941635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  256.953319] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  256.958534] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  256.966005] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  256.992733] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  256.998159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  256.999207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  257.001674] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  257.004100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  257.004331] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  257.009592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  257.026518] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  257.027511] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  257.030893] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  257.039417] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  257.042044] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  257.072533] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  257.118134] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  258.604958] Bluetooth: hci0: command tx timeout
[  258.669738] Bluetooth: hci1: command tx timeout
[  258.925971] Bluetooth: hci2: command tx timeout
[  259.018131] Bluetooth: hci3: command tx timeout
[  259.081863] Bluetooth: hci5: command tx timeout
[  259.117256] Bluetooth: hci7: command tx timeout
[  259.117331] Bluetooth: hci4: command tx timeout
[  259.180860] Bluetooth: hci6: command tx timeout
[  260.653137] Bluetooth: hci0: command tx timeout
[  260.718076] Bluetooth: hci1: command tx timeout
[  260.973899] Bluetooth: hci2: command tx timeout
[  261.038075] Bluetooth: hci3: command tx timeout
[  261.101830] Bluetooth: hci5: command tx timeout
[  261.164836] Bluetooth: hci4: command tx timeout
[  261.168054] Bluetooth: hci7: command tx timeout
[  261.228884] Bluetooth: hci6: command tx timeout
[  262.701156] Bluetooth: hci0: command tx timeout
[  262.764846] Bluetooth: hci1: command tx timeout
[  263.020897] Bluetooth: hci2: command tx timeout
[  263.084842] Bluetooth: hci3: command tx timeout
[  263.149173] Bluetooth: hci5: command tx timeout
[  263.214877] Bluetooth: hci7: command tx timeout
[  263.215008] Bluetooth: hci4: command tx timeout
[  263.276802] Bluetooth: hci6: command tx timeout
[  264.748989] Bluetooth: hci0: command tx timeout
[  264.813139] Bluetooth: hci1: command tx timeout
[  265.070929] Bluetooth: hci2: command tx timeout
[  265.132841] Bluetooth: hci3: command tx timeout
[  265.197160] Bluetooth: hci5: command tx timeout
[  265.260923] Bluetooth: hci7: command tx timeout
[  265.263937] Bluetooth: hci4: command tx timeout
[  265.324798] Bluetooth: hci6: command tx timeout
[  319.314242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  319.324488] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  319.327696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  319.332976] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  319.336564] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  319.575343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  319.576356] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  319.583142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  319.591156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  319.602018] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  319.602900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  319.604309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  319.606100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  319.608948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  319.618314] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  319.703866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  319.705732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  319.714431] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  319.737936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  319.744941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  319.785905] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  319.803193] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  319.808132] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  319.820596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  319.822564] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  319.828024] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  319.842066] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  319.857014] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  319.861680] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  319.876886] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  320.163539] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  320.175134] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  320.186109] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  320.208384] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  320.274098] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  320.278016] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  320.280253] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  320.283672] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  320.299091] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  320.307018] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  321.389190] Bluetooth: hci0: command tx timeout
[  321.645127] Bluetooth: hci1: command tx timeout
[  321.709921] Bluetooth: hci2: command tx timeout
[  321.837399] Bluetooth: hci3: command tx timeout
[  322.028933] Bluetooth: hci5: command tx timeout
[  322.092837] Bluetooth: hci4: command tx timeout
[  322.348838] Bluetooth: hci6: command tx timeout
[  322.540926] Bluetooth: hci7: command tx timeout
[  323.437814] Bluetooth: hci0: command tx timeout
[  323.692825] Bluetooth: hci1: command tx timeout
[  323.760138] Bluetooth: hci2: command tx timeout
[  323.885781] Bluetooth: hci3: command tx timeout
[  324.077138] Bluetooth: hci5: command tx timeout
[  324.141841] Bluetooth: hci4: command tx timeout
[  324.397869] Bluetooth: hci6: command tx timeout
[  324.588817] Bluetooth: hci7: command tx timeout
[  325.485830] Bluetooth: hci0: command tx timeout
[  325.740785] Bluetooth: hci1: command tx timeout
[  325.805808] Bluetooth: hci2: command tx timeout
[  325.934058] Bluetooth: hci3: command tx timeout
[  326.125818] Bluetooth: hci5: command tx timeout
[  326.190213] Bluetooth: hci4: command tx timeout
[  326.445801] Bluetooth: hci6: command tx timeout
[  326.638581] Bluetooth: hci7: command tx timeout
[  327.533790] Bluetooth: hci0: command tx timeout
[  327.789862] Bluetooth: hci1: command tx timeout
[  327.852884] Bluetooth: hci2: command tx timeout
[  327.980787] Bluetooth: hci3: command tx timeout
[  328.175035] Bluetooth: hci5: command tx timeout
[  328.237798] Bluetooth: hci4: command tx timeout
[  328.493118] Bluetooth: hci6: command tx timeout
[  328.685765] Bluetooth: hci7: command tx timeout
[  381.882185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  381.885459] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  381.888074] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  381.892291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  381.895496] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  382.274228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  382.276580] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  382.278038] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  382.283673] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  382.285892] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  382.346471] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  382.356196] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  382.358812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  382.366478] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  382.372302] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  382.406436] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  382.411038] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  382.412346] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  382.417468] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  382.425059] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  382.427847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  382.440131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  382.441142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  382.444258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  382.464769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  382.471023] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  382.481816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  382.485263] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  382.496576] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  382.499761] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  382.505118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  382.510005] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  382.512979] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  382.517766] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  382.524093] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  382.527534] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  382.539568] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  382.546636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  382.552458] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  382.570137] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  383.916886] Bluetooth: hci0: command tx timeout
[  384.365154] Bluetooth: hci1: command tx timeout
[  384.428805] Bluetooth: hci2: command tx timeout
[  384.492887] Bluetooth: hci6: command tx timeout
[  384.494942] Bluetooth: hci3: command tx timeout
[  384.621131] Bluetooth: hci7: command tx timeout
[  384.684904] Bluetooth: hci5: command tx timeout
[  384.814204] Bluetooth: hci4: command tx timeout
[  385.965369] Bluetooth: hci0: command tx timeout
[  386.412921] Bluetooth: hci1: command tx timeout
[  386.477838] Bluetooth: hci2: command tx timeout
[  386.541982] Bluetooth: hci3: command tx timeout
[  386.543613] Bluetooth: hci6: command tx timeout
[  386.668923] Bluetooth: hci7: command tx timeout
[  386.734917] Bluetooth: hci5: command tx timeout
[  386.861084] Bluetooth: hci4: command tx timeout
[  388.013001] Bluetooth: hci0: command tx timeout
[  388.462010] Bluetooth: hci1: command tx timeout
[  388.525009] Bluetooth: hci2: command tx timeout
[  388.588839] Bluetooth: hci3: command tx timeout
[  388.590284] Bluetooth: hci6: command tx timeout
[  388.716843] Bluetooth: hci7: command tx timeout
[  388.781023] Bluetooth: hci5: command tx timeout
[  388.909297] Bluetooth: hci4: command tx timeout
[  390.061761] Bluetooth: hci0: command tx timeout
[  390.509460] Bluetooth: hci1: command tx timeout
[  390.573776] Bluetooth: hci2: command tx timeout
[  390.636864] Bluetooth: hci3: command tx timeout
[  390.638309] Bluetooth: hci6: command tx timeout
[  390.765067] Bluetooth: hci7: command tx timeout
[  390.829954] Bluetooth: hci5: command tx timeout
[  390.956940] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
13:30:16  Registers:
info registers vcpu 0
RAX=1ffff110051eeab0 RBX=ffff888028f75580 RCX=ffffffff819b4e08 RDX=0000000000000000
RSI=0000000000000004 RDI=ffff888028f75580 RBP=0000000040000001 RSP=ffff8880353f7468
R8 =0000000000000000 R9 =ffffed10051eeab0 R10=ffff888028f75583 R11=0000000000000001
R12=ffff888028f75500 R13=dffffc0000000000 R14=ffff888028f75520 R15=0000000000000000
RIP=ffffffff819b4e14 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe5000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe601fb6000 CR3=000000002a034000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000000000ff00000000 XMM01=ffffffffffffffffffffff00ffffffff
XMM02=315f315f4c53534e45504f00315f315f XMM03=000000000000000042494c4700352e32
XMM04=312e325f4342494c470035312e325f43 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88801643f910 RCX=0000000000000400 RDX=0000000000000007
RSI=ffffffff8224092a RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88801643f888
R8 =0000000000000000 R9 =ffff88801643f910 R10=0000000000000000 R11=0000000000000001
R12=0000000000000007 R13=0000000000000400 R14=0000000000000005 R15=ffff88800babbb68
RIP=ffffffff81738d98 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe5000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd2eecdbf88 CR3=0000000035b4b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000
XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000