Warning: Permanently added '[localhost]:26372' (ECDSA) to the list of known hosts.
2025/06/24 14:30:11 fuzzer started
2025/06/24 14:30:12 dialing manager at localhost:37113
syzkaller login: [  110.646135] cgroup: Unknown subsys name 'net'
[  110.771612] cgroup: Unknown subsys name 'cpuset'
[  110.821283] cgroup: Unknown subsys name 'rlimit'
2025/06/24 14:30:30 syscalls: 210
2025/06/24 14:30:30 code coverage: enabled
2025/06/24 14:30:30 comparison tracing: enabled
2025/06/24 14:30:30 extra coverage: enabled
2025/06/24 14:30:30 setuid sandbox: enabled
2025/06/24 14:30:30 namespace sandbox: enabled
2025/06/24 14:30:30 Android sandbox: enabled
2025/06/24 14:30:30 fault injection: enabled
2025/06/24 14:30:30 leak checking: enabled
2025/06/24 14:30:30 net packet injection: enabled
2025/06/24 14:30:30 net device setup: enabled
2025/06/24 14:30:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/24 14:30:30 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/24 14:30:30 USB emulation: enabled
2025/06/24 14:30:30 hci packet injection: enabled
2025/06/24 14:30:30 wifi device emulation: enabled
2025/06/24 14:30:30 802.15.4 emulation: enabled
2025/06/24 14:30:30 fetching corpus: 0, signal 0/0 (executing program)
2025/06/24 14:30:31 starting 8 fuzzer processes
14:30:31 executing program 0:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:printer_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}]}, 0x84}, 0x1, 0x0, 0x0, 0x2c001}, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r1)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4044000)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000640)=0xe8)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x240040c1}, 0x40)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r2)
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x400}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800)
syz_genetlink_get_family_id$nbd(&(0x7f00000008c0), r1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f00000009c0)={&(0x7f0000000900), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a40), r1)
sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r7, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8025}, 0x40c4)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r2)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x68}}, 0x4000)

14:30:31 executing program 1:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181183, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4001)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_LINK={0x8}, @GTPA_TID={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x4800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4001)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4020000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x7b583e6c3deb17a5}, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000890}, 0x20008000)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4)
ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000780)={'\x00', 0x0, 0x0, 0x6})
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x200, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000901}, 0x40040)
ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, &(0x7f0000000980)={{0x3, 0x3}, {0x80, 0x3f}, 0x5})
syz_genetlink_get_family_id$gtp(&(0x7f00000009c0), r0)
ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000a00)={0x40, 0xe})
ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, &(0x7f0000000a40)={{0x9, 0x9}, {0xf3, 0x80000000}})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, r6, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x800)

14:30:31 executing program 2:
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x10)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x10, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}}, 0x80)
r1 = socket(0x2, 0x2, 0x4)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20040041)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x62002, 0x0)
ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000380)=""/242)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb0}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="33731c6be8d0"}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4048885)
syz_open_dev$evdev(&(0x7f00000005c0), 0x6, 0x100)
sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=@getsa={0x12c, 0x12, 0x100, 0x70bd27, 0x25dfdbfe, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0xa, 0xff}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @replay_thresh={0x8, 0xb, 0x3f}, @extra_flags={0x8, 0x18, 0x5}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @sa={0xe4, 0x6, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x1, 0x4e24, 0x9, 0x0, 0xa0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@mcast2, 0x4d5, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x3, 0x6, 0x8, 0x7ff, 0x1, 0x7a13, 0xffff, 0x2}, {0x2, 0x8, 0x1000, 0x6}, {0x7ff, 0x5, 0x3}, 0x70bd2b, 0x3500, 0xa, 0x3, 0xa6, 0x1}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24000894}, 0x800)
write$cgroup_pressure(r2, &(0x7f0000000800)={'some', 0x20, 0x2, 0x20, 0x5}, 0x2f)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200c0000}, 0x44)
r4 = syz_open_dev$evdev(&(0x7f0000000940), 0x94, 0x0)
ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000980)=""/4096)
r5 = fsmount(r2, 0x1, 0x0)
r6 = socket(0x28, 0x80000, 0xff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0xc0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000000}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r1}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6445d7e6}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc010}, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x40, r3, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x1)

14:30:31 executing program 3:
r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x4, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20044001)
r2 = fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1)
r3 = fsmount(r2, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'})
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000200)=""/94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {}, {0xc, 0x13, @l2={'ib', 0x3a, 'lo\x00'}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4004)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x14401, 0x0)
sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000804}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008011}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x40000)
r7 = fsopen(&(0x7f0000000600)='coda\x00', 0x1)
fsmount(r7, 0x0, 0x72)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x95}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004880}, 0x810)
sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x11c, 0x13, 0x4, 0x70bd2c, 0x25dfdbff, {0x10, 0x2, 0x7, 0x1, {0x4e23, 0x4e23, [0x0, 0x1, 0x7, 0x9], [0x200, 0x4, 0x2, 0x101], 0x0, [0x10000]}, 0x8, 0x10001}, [@INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "14f4f7c04c181c6f03f32855131a4457a8e84f39a81c"}, @INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "677a3c66440f35616b8082cb41544717a04662fb39bf8fe7a4fe2e0425602bc728c10c603d456e3f355d49e941190ae8dcfe6ac43e8d91a3a354e52f58ac5950c587def86a8833f199a1a32c8f8cd55a9241d573660bc4d3cb3e2a0efecde640b1a1962a178bd03b2407b595c6b6bc39f5b324b81ed51684f85817879bb2027a28933365bd3fa442c546b42d0f0a7ed2f8d6ebc43951bc8820099dc3a67b3a42d2d223772f6ee216b4cadef6e224"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0)
ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f00000009c0)=""/121)

14:30:31 executing program 4:
r0 = socket(0x1, 0x800, 0x2)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20054}, 0x20008810)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48844}, 0xe06163a79f14f864)
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x20}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000300))
socket$inet6(0xa, 0x800, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1f, 0x600}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x40800)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x880)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f00000005c0)={0x81, "89e4d090c6739d7e1f22f3a9e41cc50476f37056839694ad0560619927976754228b7d65e430c4b174dcfcde72b34e34131a5101535a24a5d73731a8cd530c59"})
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000)
syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r4)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x4800)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$HIDIOCGRAWNAME(r5, 0x80404804, &(0x7f00000009c0))
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffb6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048080}, 0x4040080)

[  130.149948] audit: type=1400 audit(1750775431.922:7): avc:  denied  { execmem } for  pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
14:30:31 executing program 5:
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x8000)
r1 = socket(0x1, 0x80000, 0xfff)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200c}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x48040)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r0)
sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x920}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x10000}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x0, 0xe, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x3000004a}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40000000}]}, 0x2c}}, 0x40000)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008010)
sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x801, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xe43b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40001)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040800}, 0x400c010)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), r2)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7c}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4005001}, 0x48000)

14:30:31 executing program 6:
ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0x9})
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f00000001c0)={'\x00', 0x800, 0x3, 0x4})
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x408, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x40048010)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x95}, 0x40)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8011)
r2 = socket(0x1d, 0x1, 0xa00)
r3 = fsmount(0xffffffffffffffff, 0x1, 0xf4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040810}, 0x4010)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe72e}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4840}, 0x80050)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r5)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4c090)
r7 = fsopen(&(0x7f0000000a00)='ubifs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x24}}, 0x40)

14:30:32 executing program 7:
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000895)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x96}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8140}, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20008004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x20008084)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc8, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc4}, 0x4001805)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x4542, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r3)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20004800)
r7 = socket(0x29, 0xa, 0x871)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x4, 0x2}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x800)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r4)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040815}, 0x10)

[  131.577101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  131.578600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.579958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  131.582700] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.590515] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  131.591519] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.599632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.601969] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.603969] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.605472] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.610319] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.616674] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  131.619521] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  131.622522] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.634777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  131.641388] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  131.643480] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  131.645259] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.656311] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  131.673211] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  131.678856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  131.683915] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  131.693544] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  131.699724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  131.705742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  131.753651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  131.760202] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  131.771078] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  131.773444] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  131.778344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  131.779536] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  131.779821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  131.784658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  131.786346] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  131.787365] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  131.809344] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  131.817696] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  131.819585] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  131.827023] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  131.828875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  133.682439] Bluetooth: hci2: command tx timeout
[  133.683125] Bluetooth: hci1: command tx timeout
[  133.683685] Bluetooth: hci0: command tx timeout
[  133.810268] Bluetooth: hci4: command tx timeout
[  133.810889] Bluetooth: hci3: command tx timeout
[  133.874309] Bluetooth: hci6: command tx timeout
[  133.874887] Bluetooth: hci5: command tx timeout
[  133.938111] Bluetooth: hci7: command tx timeout
[  135.730374] Bluetooth: hci0: command tx timeout
[  135.731569] Bluetooth: hci1: command tx timeout
[  135.732097] Bluetooth: hci2: command tx timeout
[  135.858233] Bluetooth: hci3: command tx timeout
[  135.858734] Bluetooth: hci4: command tx timeout
[  135.922190] Bluetooth: hci5: command tx timeout
[  135.923594] Bluetooth: hci6: command tx timeout
[  135.986498] Bluetooth: hci7: command tx timeout
[  137.778392] Bluetooth: hci1: command tx timeout
[  137.778958] Bluetooth: hci2: command tx timeout
[  137.779611] Bluetooth: hci0: command tx timeout
[  137.908072] Bluetooth: hci3: command tx timeout
[  137.908583] Bluetooth: hci4: command tx timeout
[  137.970136] Bluetooth: hci5: command tx timeout
[  137.970626] Bluetooth: hci6: command tx timeout
[  138.034200] Bluetooth: hci7: command tx timeout
[  139.827153] Bluetooth: hci0: command tx timeout
[  139.827694] Bluetooth: hci2: command tx timeout
[  139.828245] Bluetooth: hci1: command tx timeout
[  139.954484] Bluetooth: hci4: command tx timeout
[  139.956326] Bluetooth: hci3: command tx timeout
[  140.019095] Bluetooth: hci6: command tx timeout
[  140.019584] Bluetooth: hci5: command tx timeout
[  140.083148] Bluetooth: hci7: command tx timeout
[  194.579162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  194.583351] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  194.601856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  194.604456] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  194.623298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  194.625679] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  194.693679] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  194.701063] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  194.702095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  194.712932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  194.714614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  194.721331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  194.722668] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  194.727384] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  194.727691] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  194.730272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.739202] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  194.741129] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  194.748561] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  194.758074] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  194.762609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  194.764475] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  194.765426] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  194.769304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  194.770250] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.772743] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  194.775607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  194.780473] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  194.784438] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  194.787579] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  194.791939] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  194.796756] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  194.815438] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  194.832048] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  194.834640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  194.838845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  194.840299] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.875768] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  194.880353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  194.883124] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  196.786844] Bluetooth: hci1: command tx timeout
[  196.850079] Bluetooth: hci7: command tx timeout
[  196.850098] Bluetooth: hci0: command tx timeout
[  196.914097] Bluetooth: hci3: command tx timeout
[  196.914203] Bluetooth: hci4: command tx timeout
[  196.915566] Bluetooth: hci2: command tx timeout
[  196.978169] Bluetooth: hci6: command tx timeout
[  196.978331] Bluetooth: hci5: command tx timeout
[  198.834195] Bluetooth: hci1: command tx timeout
[  198.898150] Bluetooth: hci7: command tx timeout
[  198.898277] Bluetooth: hci0: command tx timeout
[  198.962315] Bluetooth: hci4: command tx timeout
[  198.962375] Bluetooth: hci2: command tx timeout
[  198.962806] Bluetooth: hci3: command tx timeout
[  199.027102] Bluetooth: hci5: command tx timeout
[  199.027135] Bluetooth: hci6: command tx timeout
[  200.884172] Bluetooth: hci1: command tx timeout
[  200.946133] Bluetooth: hci0: command tx timeout
[  200.946198] Bluetooth: hci7: command tx timeout
[  201.010087] Bluetooth: hci3: command tx timeout
[  201.010212] Bluetooth: hci2: command tx timeout
[  201.010594] Bluetooth: hci4: command tx timeout
[  201.075106] Bluetooth: hci6: command tx timeout
[  201.075616] Bluetooth: hci5: command tx timeout
[  202.930400] Bluetooth: hci1: command tx timeout
[  202.994375] Bluetooth: hci7: command tx timeout
[  202.994517] Bluetooth: hci0: command tx timeout
[  203.058141] Bluetooth: hci2: command tx timeout
[  203.058644] Bluetooth: hci3: command tx timeout
[  203.060076] Bluetooth: hci4: command tx timeout
[  203.122669] Bluetooth: hci5: command tx timeout
[  203.122718] Bluetooth: hci6: command tx timeout
[  257.070758] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  257.081870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  257.084712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  257.086321] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  257.088897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  257.090182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  257.095918] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  257.098375] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  257.119313] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  257.130977] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  257.161943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  257.174169] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  257.175888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  257.192947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  257.206309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  257.344797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  257.350357] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  257.357344] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  257.381435] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  257.397311] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  257.402550] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  257.410665] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  257.414528] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  257.444272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  257.449274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  257.460426] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  257.470060] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  257.482434] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  257.486526] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  257.487040] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  257.492244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  257.494397] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  257.496633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  257.510789] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  257.516787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  257.534930] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  257.537648] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  257.548896] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  257.556873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  257.589334] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  259.122178] Bluetooth: hci1: command tx timeout
[  259.186508] Bluetooth: hci0: command tx timeout
[  259.443121] Bluetooth: hci2: command tx timeout
[  259.506134] Bluetooth: hci4: command tx timeout
[  259.506217] Bluetooth: hci3: command tx timeout
[  259.634122] Bluetooth: hci7: command tx timeout
[  259.634147] Bluetooth: hci6: command tx timeout
[  259.635583] Bluetooth: hci5: command tx timeout
[  261.170664] Bluetooth: hci1: command tx timeout
[  261.234151] Bluetooth: hci0: command tx timeout
[  261.490560] Bluetooth: hci2: command tx timeout
[  261.554434] Bluetooth: hci3: command tx timeout
[  261.554466] Bluetooth: hci4: command tx timeout
[  261.682124] Bluetooth: hci7: command tx timeout
[  261.682540] Bluetooth: hci5: command tx timeout
[  261.682614] Bluetooth: hci6: command tx timeout
[  263.220241] Bluetooth: hci1: command tx timeout
[  263.282499] Bluetooth: hci0: command tx timeout
[  263.540119] Bluetooth: hci2: command tx timeout
[  263.602087] Bluetooth: hci3: command tx timeout
[  263.603041] Bluetooth: hci4: command tx timeout
[  263.730497] Bluetooth: hci6: command tx timeout
[  263.731904] Bluetooth: hci5: command tx timeout
[  263.732064] Bluetooth: hci7: command tx timeout
[  265.267325] Bluetooth: hci1: command tx timeout
[  265.330285] Bluetooth: hci0: command tx timeout
[  265.586146] Bluetooth: hci2: command tx timeout
[  265.650149] Bluetooth: hci4: command tx timeout
[  265.650633] Bluetooth: hci3: command tx timeout
[  265.778412] Bluetooth: hci7: command tx timeout
[  265.781058] Bluetooth: hci5: command tx timeout
[  265.781113] Bluetooth: hci6: command tx timeout
[  319.687243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  319.692253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  319.698406] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  319.713863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  319.719868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  319.829818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  319.836305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  319.838836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  319.843611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  319.846622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  319.875580] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  319.887509] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  319.890955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  319.901375] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  319.909600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  319.945392] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  319.953338] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  319.959170] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  319.974958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  319.976815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  320.086221] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  320.090886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  320.092514] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  320.097736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  320.100381] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  320.164276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  320.173192] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  320.193750] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  320.213933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  320.220746] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  320.226331] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  320.231405] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  320.236171] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  320.255314] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  320.268506] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  320.519827] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  320.543907] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  320.545927] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  320.608712] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  320.617403] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  321.778327] Bluetooth: hci0: command tx timeout
[  321.907172] Bluetooth: hci1: command tx timeout
[  321.972076] Bluetooth: hci2: command tx timeout
[  322.034089] Bluetooth: hci3: command tx timeout
[  322.164347] Bluetooth: hci4: command tx timeout
[  322.354229] Bluetooth: hci5: command tx timeout
[  322.418114] Bluetooth: hci6: command tx timeout
[  322.739197] Bluetooth: hci7: command tx timeout
[  323.826272] Bluetooth: hci0: command tx timeout
[  323.954180] Bluetooth: hci1: command tx timeout
[  324.018109] Bluetooth: hci2: command tx timeout
[  324.082322] Bluetooth: hci3: command tx timeout
[  324.211169] Bluetooth: hci4: command tx timeout
[  324.403621] Bluetooth: hci5: command tx timeout
[  324.467098] Bluetooth: hci6: command tx timeout
[  324.787239] Bluetooth: hci7: command tx timeout
[  325.874130] Bluetooth: hci0: command tx timeout
[  326.003462] Bluetooth: hci1: command tx timeout
[  326.067062] Bluetooth: hci2: command tx timeout
[  326.133036] Bluetooth: hci3: command tx timeout
[  326.259298] Bluetooth: hci4: command tx timeout
[  326.451417] Bluetooth: hci5: command tx timeout
[  326.515244] Bluetooth: hci6: command tx timeout
[  326.834130] Bluetooth: hci7: command tx timeout
[  327.924918] Bluetooth: hci0: command tx timeout
[  328.050097] Bluetooth: hci1: command tx timeout
[  328.114410] Bluetooth: hci2: command tx timeout
[  328.178206] Bluetooth: hci3: command tx timeout
[  328.306113] Bluetooth: hci4: command tx timeout
[  328.500144] Bluetooth: hci5: command tx timeout
[  328.565023] Bluetooth: hci6: command tx timeout
[  328.883246] Bluetooth: hci7: command tx timeout
[  382.470769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  382.474145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  382.477833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  382.482568] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  382.486273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  382.721741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  382.724589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  382.727681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  382.732512] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  382.739864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  382.851477] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  382.856731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  382.860499] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  382.889184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  382.891451] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  382.902381] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  382.911092] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  382.928815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  382.962197] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  382.990384] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  382.993248] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  382.999896] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  383.005859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  383.006356] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  383.017797] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  383.021888] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  383.033558] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  383.042662] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  383.046492] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  383.052291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  383.057356] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  383.058564] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  383.063174] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  383.064576] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  383.065285] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  383.069695] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  383.070938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  383.101833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  383.107555] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  383.114972] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  384.562114] Bluetooth: hci0: command tx timeout
[  384.818132] Bluetooth: hci1: command tx timeout
[  385.012282] Bluetooth: hci2: command tx timeout
[  385.202801] Bluetooth: hci5: command tx timeout
[  385.203133] Bluetooth: hci3: command tx timeout
[  385.203796] Bluetooth: hci7: command tx timeout
[  385.204693] Bluetooth: hci4: command tx timeout
[  385.204837] Bluetooth: hci6: command tx timeout
[  386.610421] Bluetooth: hci0: command tx timeout
[  386.868513] Bluetooth: hci1: command tx timeout
[  387.060287] Bluetooth: hci2: command tx timeout
[  387.250240] Bluetooth: hci6: command tx timeout
[  387.251773] Bluetooth: hci4: command tx timeout
[  387.253529] Bluetooth: hci3: command tx timeout
[  387.253717] Bluetooth: hci5: command tx timeout
[  387.255038] Bluetooth: hci7: command tx timeout
[  388.659242] Bluetooth: hci0: command tx timeout
[  388.915525] Bluetooth: hci1: command tx timeout
[  389.107169] Bluetooth: hci2: command tx timeout
[  389.298309] Bluetooth: hci5: command tx timeout
[  389.300080] Bluetooth: hci3: command tx timeout
[  389.301645] Bluetooth: hci7: command tx timeout
[  389.303088] Bluetooth: hci4: command tx timeout
[  389.303148] Bluetooth: hci6: command tx timeout
[  390.707152] Bluetooth: hci0: command tx timeout
[  390.963056] Bluetooth: hci1: command tx timeout
[  391.156066] Bluetooth: hci2: command tx timeout
[  391.346110] Bluetooth: hci6: command tx timeout
[  391.346601] Bluetooth: hci4: command tx timeout
[  391.347708] Bluetooth: hci7: command tx timeout
[  391.348219] Bluetooth: hci5: command tx timeout
[  391.348686] Bluetooth: hci3: command tx timeout

VM DIAGNOSIS:
14:35:41  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff88803098f408 RCX=ffff88803098f35c RDX=1ffff11006131e8c
RSI=ffffffff85c1cc40 RDI=ffffffff8195467c RBP=ffff88803098f460 RSP=ffff88803098f3e0
R8 =0000000000000001 R9 =ffff88803098f448 R10=000000000003b53d R11=00000000000216eb
R12=ffff88803098f4d0 R13=0000000000000000 R14=ffff88800e4b3700 R15=ffff8880362fa500
RIP=ffffffff84b4ec40 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe2800000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f121a140028 CR3=000000002ca32000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=eb8a3cfc2a4dc88f RDX=ffffffff81353d19
RSI=00000000e1b8ee1a RDI=00000000d9a7945d RBP=ffff8880097478d0 RSP=ffff8880097477f8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=ffff8880097478c0 R14=ffff8880096eb700 R15=ffff888009747878
RIP=ffffffff815ab8fc RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe1900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3aea8011f0 CR3=00000000338d5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000