Warning: Permanently added '[localhost]:60029' (ECDSA) to the list of known hosts.
2025/06/27 03:33:45 fuzzer started
2025/06/27 03:33:45 dialing manager at localhost:45637
syzkaller login: [  106.381783] cgroup: Unknown subsys name 'net'
[  106.530665] cgroup: Unknown subsys name 'cpuset'
[  106.579307] cgroup: Unknown subsys name 'rlimit'
2025/06/27 03:34:02 syscalls: 217
2025/06/27 03:34:02 code coverage: enabled
2025/06/27 03:34:02 comparison tracing: enabled
2025/06/27 03:34:02 extra coverage: enabled
2025/06/27 03:34:02 setuid sandbox: enabled
2025/06/27 03:34:02 namespace sandbox: enabled
2025/06/27 03:34:02 Android sandbox: enabled
2025/06/27 03:34:02 fault injection: enabled
2025/06/27 03:34:02 leak checking: enabled
2025/06/27 03:34:02 net packet injection: enabled
2025/06/27 03:34:02 net device setup: enabled
2025/06/27 03:34:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/27 03:34:02 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/27 03:34:02 USB emulation: enabled
2025/06/27 03:34:02 hci packet injection: enabled
2025/06/27 03:34:02 wifi device emulation: enabled
2025/06/27 03:34:02 802.15.4 emulation: enabled
2025/06/27 03:34:03 fetching corpus: 0, signal 0/0 (executing program)
2025/06/27 03:34:05 starting 8 fuzzer processes
03:34:05 executing program 0:
socketpair(0xf, 0x2, 0x3, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10)
socketpair(0xb, 0x2, 0x81, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f00000000c0)=0x5, 0x4)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000100)=0x1, 0x4)
keyctl$unlink(0x9, 0x0, 0xfffffffffffffff9)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x604002, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x20, 0x70bd2d, 0x216d76c1, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040004}, 0x40)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x408000, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3)
r5 = open(&(0x7f0000000340)='./file0\x00', 0x111000, 0x122)
ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000380))
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x4000)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x601, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r6, 0x80503d01, &(0x7f0000000580))
r7 = getpid()
timer_create(0x1, &(0x7f0000000600)={0x0, 0x1e, 0x2, @tid=r7}, &(0x7f0000000640))
ioctl$PTP_PIN_SETFUNC(r5, 0x40603d07, &(0x7f0000000680)={'\x00', 0x20, 0x3, 0xffff})
r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x600, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r8, 0xc0403d08, &(0x7f0000000740))

03:34:05 executing program 1:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd25, 0x80000001, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000041)
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4000, 0x100, &(0x7f0000000180))
sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="f6b9f35f52aa4abfa946a38310049728746682655376cac8855c2f3f57d4ad80e14c9de1db6ebf251058f7b8ce7fb6676b517c2c2b67f61cacc68e861fee89b8e7f2942ef4cb996a64f995119221faece5629ed340f1bbada0a82aab645315102be685c85d5e4cce4493abdc3e21770bb03df84da43980f09145688e752d44b5a2650d2fa56ad25a115d7e2e5f670bfeb1fba9d0e8a66a8fc186c6bcac186eedfad6aa2e5f35b63e34220415d41508f092cc04d02b9eaa0b2f644c", 0xbb, 0x4050, &(0x7f0000000340)={0x11, 0x1b, 0x0, 0x1, 0x7, 0x6, @remote}, 0x14)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r0 = open(&(0x7f00000003c0)='./file0\x00', 0x4080, 0x2)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}}, 0x8051)
unlink(&(0x7f0000000500)='./file0\x00')
r1 = open(&(0x7f0000000540)='./file0\x00', 0x200000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20008801)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x804)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r4, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000980), 0x40080, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'ip6gre0\x00', <r6=>0x0, 0x29, 0x1, 0x7f, 0x3, 0x5c, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xe3765edaa6ebec43, 0x20, 0x2, 0x1}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x70, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x70}}, 0x8004)
getsockname$packet(r0, &(0x7f0000000bc0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c00)=0x14)
bind$packet(r1, &(0x7f0000000c40)={0x11, 0x11, r7, 0x1, 0x1, 0x6, @multicast}, 0x14)

03:34:05 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = open(&(0x7f0000000080)='./file0\x00', 0x80400, 0x44)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0x4)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x80440, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x1)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x34, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x70c}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc0}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0xd0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x114, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xe0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}]}, 0x154}}, 0x481)
getpid()
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x801)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xc8, r5, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x25}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xc8}}, 0x20000000)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r6)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r7, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0)

03:34:05 executing program 3:
keyctl$search(0xa, 0x0, &(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffffc)
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$reject(0x13, 0x0, 0x2, 0x4, r0)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0)
keyctl$reject(0x13, r1, 0x6, 0x9, r2)
keyctl$get_persistent(0x16, 0xee01, r0)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200)=""/195, &(0x7f0000000300)=0xc3)
r3 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc1}, &(0x7f00000003c0)={0x0, "9eb39be891c0fb7c31f8d39fb999c49e45bafdea9161066b0db0b4d0754a4da383ed12dc74cba09ed770b7138798770ffeb5749891bd6fb0341b602af4c16e1e", 0x30}, 0x48, 0x0)
keyctl$link(0x8, r3, r1)
r4 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x31, 0x66, 0x6, 0x61, 0x62, 0x64, 0x34, 0x36, 0x65, 0x63, 0xc4, 0x39, 0x30, 0x34, 0x34]}, &(0x7f00000005c0)={0x0, "aead08c435b385d2f29a7c837ec9a32e94f63644f8a18cd29ae90a0a9d95fa29465b2bb33c9e2309bb5aaa2f6616b5eff264d0943cb6c7f01507821e65999df1", 0x3c}, 0x48, 0xfffffffffffffff9)
r5 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "ffa6c984de3ee4e3d81e9a2ba711d3837d609bad517d4f02d2b7f272b24f4c0127078e7276c2c33512fdbbfa2a06ff137c8d95271d58f7aae8f8389682241359", 0x40}, 0x48, r4)
r6 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc3}, &(0x7f00000006c0)={0x0, "deec1537fcca4e6f525ff0e078491fa123bd37b3ba618437f89512ad80e9109875261a5bdaaacefd1242188b020bab669f2615938f1bec70fb5972de38f40b96", 0x2c}, 0x48, r2)
r7 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, r6)
r8 = add_key$keyring(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, r5)
keyctl$KEYCTL_MOVE(0x1e, r7, r8, r4, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000840)=@req3={0x10000, 0x0, 0x6, 0x4, 0x1, 0x200, 0x949}, 0x1c)
socket$inet_udp(0x2, 0x2, 0x0)
keyctl$reject(0x13, 0x0, 0x0, 0x0, r6)
shmget(0x2, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)

[  125.860937] audit: type=1400 audit(1750995245.294:7): avc:  denied  { execmem } for  pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:34:05 executing program 4:
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xefd3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}}, 0x40000)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x67}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x84091)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0x3c}}, 0x20045)
bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x36}, 0x14)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r6, 0x106, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20008080)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008011}, 0x4044004)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x541}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000d40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x108, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x804}, 0x40000)

03:34:05 executing program 5:
shmget(0x3, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x400080, 0x41)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
shmget(0x2, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xee35}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil)
semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f00000001c0)=""/4096)
semget$private(0x0, 0x4, 0x2)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wpan1\x00', <r1=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x10)
statx(0xffffffffffffffff, &(0x7f00000013c0)='./file0\x00', 0x6000, 0x400, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
syz_mount_image$tmpfs(&(0x7f0000001300), &(0x7f0000001340)='./file0\x00', 0xffff, 0x0, &(0x7f0000001380), 0x5002, &(0x7f0000001500)={[{@huge_always}, {@mode={'mode', 0x3d, 0xffffffffffffffff}}, {@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@huge_never}], [{@fsmagic={'fsmagic', 0x3d, 0x100000000}}, {@uid_lt={'uid<', r2}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}]})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001700), r3)
sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x68, r5, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x44, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040804}, 0x4040000)
timer_getoverrun(0x0)

03:34:05 executing program 6:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$get_persistent(0x16, 0x0, r1)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x4)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000100)={{0x3, 0x1}, {0x6, 0x5}, 0x3f})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', r2, 0x2f, 0x0, 0x1, 0x6, 0x8, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x1, 0x131d8ca2, 0x80000001}})
keyctl$negate(0xd, r1, 0x5, r0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00'})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x7)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xdea}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000006c0)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x120, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff00000001}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x120}, 0x1, 0x0, 0x0, 0x28000880}, 0x24008040)
r7 = add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000900)={'fscrypt:', @desc2}, &(0x7f0000000940)={0x0, "d195508b5bccca564c69bf08bf41aea7317e7361726b146a67117a80893b3611da33919bf92beb3b433b79c5f89ea09609fe9b368c2abd8f775ab931f19db6e0", 0x28}, 0x48, r0)
keyctl$link(0x8, r0, r7)

03:34:05 executing program 7:
ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000000)={0x14})
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000004c0)={{0x3, 0x1}, {0x8000000000000000, 0x9}, 0x3f, 0x1})
ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000500)={'\x00', 0x800, 0x0, 0x85})
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000580)={0x5, 0xa})
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000005c0)={{0x3, 0x5}, {0x0, 0x3f}, 0x6})
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000600))
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000006c0), 0x10b000, 0x0)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1c}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9b}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c011}, 0x40)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000840), 0x91d00, 0x0)
ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000880)={'\x00', 0x5, 0x0, 0x7fffffff})
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000900)=0x1, 0x4)
ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000940)={'\x00', 0x200000, 0x2, 0xffff8000})
ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f00000009c0))
r2 = syz_open_dev$loop(&(0x7f0000000a40), 0x5, 0x2000)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000a80))
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/asound/timers\x00', 0x0, 0x0)
ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000b80)={'\x00', 0x400, 0x2})
shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)

[  127.484491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  127.490551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  127.495525] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.499480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  127.506138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  127.510508] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.518454] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  127.520201] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.537358] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.540650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.618663] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  127.622507] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  127.625223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  127.642209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  127.659174] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  127.672225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  127.683003] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  127.685652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  127.691595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  127.697470] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  127.723457] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  127.735491] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  127.755609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  127.764042] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  127.766044] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  127.768911] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  127.772222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  127.773836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  127.779439] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  127.781795] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  127.786390] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  127.817508] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  127.819523] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  127.822598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  127.827449] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  127.836791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  127.839078] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  127.845843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  127.860552] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  127.866673] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  129.618397] Bluetooth: hci0: command tx timeout
[  129.618417] Bluetooth: hci1: command tx timeout
[  129.746021] Bluetooth: hci2: command tx timeout
[  129.810977] Bluetooth: hci3: command tx timeout
[  129.874965] Bluetooth: hci6: command tx timeout
[  129.876059] Bluetooth: hci4: command tx timeout
[  129.939184] Bluetooth: hci7: command tx timeout
[  129.939205] Bluetooth: hci5: command tx timeout
[  131.666139] Bluetooth: hci1: command tx timeout
[  131.666160] Bluetooth: hci0: command tx timeout
[  131.793942] Bluetooth: hci2: command tx timeout
[  131.858137] Bluetooth: hci3: command tx timeout
[  131.922343] Bluetooth: hci4: command tx timeout
[  131.922381] Bluetooth: hci6: command tx timeout
[  131.986579] Bluetooth: hci5: command tx timeout
[  131.988630] Bluetooth: hci7: command tx timeout
[  133.714150] Bluetooth: hci0: command tx timeout
[  133.715566] Bluetooth: hci1: command tx timeout
[  133.843061] Bluetooth: hci2: command tx timeout
[  133.905983] Bluetooth: hci3: command tx timeout
[  133.969966] Bluetooth: hci6: command tx timeout
[  133.970028] Bluetooth: hci4: command tx timeout
[  134.034278] Bluetooth: hci5: command tx timeout
[  134.034718] Bluetooth: hci7: command tx timeout
[  135.762079] Bluetooth: hci1: command tx timeout
[  135.762262] Bluetooth: hci0: command tx timeout
[  135.890032] Bluetooth: hci2: command tx timeout
[  135.953957] Bluetooth: hci3: command tx timeout
[  136.018235] Bluetooth: hci4: command tx timeout
[  136.018330] Bluetooth: hci6: command tx timeout
[  136.082040] Bluetooth: hci7: command tx timeout
[  136.082227] Bluetooth: hci5: command tx timeout
[  191.357208] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  191.362836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  191.372172] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  191.374847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  191.375108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  191.380915] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  191.386299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  191.392162] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  191.414567] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  191.421342] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  191.432371] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  191.438848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  191.448544] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  191.467453] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  191.497769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  191.500997] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  191.503046] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.517169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.522562] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  191.525557] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  191.529215] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  191.558756] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  191.565326] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  191.568488] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  191.574474] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  191.575029] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  191.576261] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  191.580669] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  191.584041] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  191.591525] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  191.595311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  191.598156] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  191.603528] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  191.622984] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  191.629391] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  191.651914] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  191.661529] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  191.676135] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  191.679099] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  191.701436] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  193.426152] Bluetooth: hci0: command tx timeout
[  193.492186] Bluetooth: hci1: command tx timeout
[  193.619748] Bluetooth: hci2: command tx timeout
[  193.682311] Bluetooth: hci4: command tx timeout
[  193.684681] Bluetooth: hci3: command tx timeout
[  193.747014] Bluetooth: hci6: command tx timeout
[  193.748210] Bluetooth: hci5: command tx timeout
[  193.810073] Bluetooth: hci7: command tx timeout
[  195.474106] Bluetooth: hci0: command tx timeout
[  195.538108] Bluetooth: hci1: command tx timeout
[  195.666239] Bluetooth: hci2: command tx timeout
[  195.730932] Bluetooth: hci3: command tx timeout
[  195.731517] Bluetooth: hci4: command tx timeout
[  195.794089] Bluetooth: hci5: command tx timeout
[  195.794670] Bluetooth: hci6: command tx timeout
[  195.857992] Bluetooth: hci7: command tx timeout
[  197.522176] Bluetooth: hci0: command tx timeout
[  197.585948] Bluetooth: hci1: command tx timeout
[  197.714895] Bluetooth: hci2: command tx timeout
[  197.778013] Bluetooth: hci3: command tx timeout
[  197.778495] Bluetooth: hci4: command tx timeout
[  197.843181] Bluetooth: hci5: command tx timeout
[  197.843658] Bluetooth: hci6: command tx timeout
[  197.906129] Bluetooth: hci7: command tx timeout
[  199.571622] Bluetooth: hci0: command tx timeout
[  199.634132] Bluetooth: hci1: command tx timeout
[  199.762456] Bluetooth: hci2: command tx timeout
[  199.826141] Bluetooth: hci4: command tx timeout
[  199.827415] Bluetooth: hci3: command tx timeout
[  199.890111] Bluetooth: hci6: command tx timeout
[  199.890998] Bluetooth: hci5: command tx timeout
[  199.954249] Bluetooth: hci7: command tx timeout
[  253.496143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  253.505590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  253.509006] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  253.520781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  253.526273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  253.531368] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  253.534185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  253.536114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  253.550638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  253.555663] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  253.609650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  253.618704] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  253.621391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  253.631312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  253.636439] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  253.680543] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  253.684704] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  253.688353] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  253.692585] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  253.697563] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  253.698237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  253.703332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  253.705180] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  253.719365] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  253.729564] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  253.760583] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  253.775760] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  253.779427] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  253.782614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  253.790088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  253.796176] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  253.796396] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  253.804415] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  253.807439] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  253.809840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  253.813522] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  253.814417] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  253.827316] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  253.850809] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  253.855081] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  255.633951] Bluetooth: hci1: command tx timeout
[  255.634674] Bluetooth: hci0: command tx timeout
[  255.697955] Bluetooth: hci2: command tx timeout
[  255.825951] Bluetooth: hci4: command tx timeout
[  255.827952] Bluetooth: hci3: command tx timeout
[  255.891937] Bluetooth: hci7: command tx timeout
[  255.892567] Bluetooth: hci5: command tx timeout
[  255.893923] Bluetooth: hci6: command tx timeout
[  257.682252] Bluetooth: hci0: command tx timeout
[  257.682756] Bluetooth: hci1: command tx timeout
[  257.746109] Bluetooth: hci2: command tx timeout
[  257.874450] Bluetooth: hci3: command tx timeout
[  257.874946] Bluetooth: hci4: command tx timeout
[  257.938387] Bluetooth: hci5: command tx timeout
[  257.938814] Bluetooth: hci6: command tx timeout
[  257.939261] Bluetooth: hci7: command tx timeout
[  259.730549] Bluetooth: hci0: command tx timeout
[  259.731957] Bluetooth: hci1: command tx timeout
[  259.794955] Bluetooth: hci2: command tx timeout
[  259.922292] Bluetooth: hci4: command tx timeout
[  259.922744] Bluetooth: hci3: command tx timeout
[  259.986173] Bluetooth: hci7: command tx timeout
[  259.986960] Bluetooth: hci6: command tx timeout
[  259.987370] Bluetooth: hci5: command tx timeout
[  261.778316] Bluetooth: hci1: command tx timeout
[  261.778807] Bluetooth: hci0: command tx timeout
[  261.842254] Bluetooth: hci2: command tx timeout
[  261.971044] Bluetooth: hci3: command tx timeout
[  261.971495] Bluetooth: hci4: command tx timeout
[  262.035907] Bluetooth: hci5: command tx timeout
[  262.036346] Bluetooth: hci7: command tx timeout
[  262.036750] Bluetooth: hci6: command tx timeout
[  315.565148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  315.568605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  315.571210] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  315.583227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  315.590479] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  315.718360] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  315.723746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  315.727679] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  315.736676] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  315.741379] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  315.890378] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  315.894353] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  315.897975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  315.915506] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  315.917336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  315.933732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  315.937230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  315.940706] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  315.947806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  315.951221] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  315.996574] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  316.003361] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  316.018417] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  316.030807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  316.035774] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  316.039333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  316.042717] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  316.046325] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  316.063716] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  316.070550] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  316.127800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  316.174306] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  316.176951] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  316.212465] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  316.224009] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  316.238571] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  316.242424] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  316.253002] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  316.286273] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  316.290088] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  317.650989] Bluetooth: hci0: command tx timeout
[  317.777954] Bluetooth: hci1: command tx timeout
[  318.034281] Bluetooth: hci3: command tx timeout
[  318.035454] Bluetooth: hci2: command tx timeout
[  318.290969] Bluetooth: hci4: command tx timeout
[  318.291603] Bluetooth: hci5: command tx timeout
[  318.354048] Bluetooth: hci7: command tx timeout
[  318.354574] Bluetooth: hci6: command tx timeout
[  319.697969] Bluetooth: hci0: command tx timeout
[  319.825935] Bluetooth: hci1: command tx timeout
[  320.082131] Bluetooth: hci2: command tx timeout
[  320.082423] Bluetooth: hci3: command tx timeout
[  320.339909] Bluetooth: hci4: command tx timeout
[  320.339934] Bluetooth: hci5: command tx timeout
[  320.401964] Bluetooth: hci6: command tx timeout
[  320.404922] Bluetooth: hci7: command tx timeout
[  321.747133] Bluetooth: hci0: command tx timeout
[  321.873963] Bluetooth: hci1: command tx timeout
[  322.129934] Bluetooth: hci2: command tx timeout
[  322.131918] Bluetooth: hci3: command tx timeout
[  322.386229] Bluetooth: hci4: command tx timeout
[  322.387068] Bluetooth: hci5: command tx timeout
[  322.450969] Bluetooth: hci7: command tx timeout
[  322.450997] Bluetooth: hci6: command tx timeout
[  323.793967] Bluetooth: hci0: command tx timeout
[  323.922244] Bluetooth: hci1: command tx timeout
[  324.177941] Bluetooth: hci3: command tx timeout
[  324.177996] Bluetooth: hci2: command tx timeout
[  324.434251] Bluetooth: hci5: command tx timeout
[  324.434385] Bluetooth: hci4: command tx timeout
[  324.498030] Bluetooth: hci7: command tx timeout
[  324.498114] Bluetooth: hci6: command tx timeout
[  378.411548] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  378.416444] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  378.422390] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  378.436152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  378.442589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  378.672612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  378.676651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  378.680742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  378.692038] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  378.700388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  378.726041] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  378.732242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  378.736750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  378.745368] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  378.749794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  378.860950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  378.881718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  378.894123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  378.910534] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  378.913695] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  378.921711] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  378.932071] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  378.934488] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  378.945194] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  378.952602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  378.952673] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  378.964609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  378.988511] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  378.995420] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  379.001241] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  379.015945] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  379.018651] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  379.062468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  379.108201] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  379.135475] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  379.155427] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  379.161648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  379.173387] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  379.176275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  379.199766] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  380.498270] Bluetooth: hci0: command tx timeout
[  380.755326] Bluetooth: hci1: command tx timeout
[  380.818032] Bluetooth: hci2: command tx timeout
[  381.010194] Bluetooth: hci3: command tx timeout
[  381.138236] Bluetooth: hci6: command tx timeout
[  381.266087] Bluetooth: hci4: command tx timeout
[  381.266932] Bluetooth: hci7: command tx timeout
[  381.266982] Bluetooth: hci5: command tx timeout
[  382.546025] Bluetooth: hci0: command tx timeout
[  382.803008] Bluetooth: hci1: command tx timeout
[  382.867302] Bluetooth: hci2: command tx timeout
[  383.058883] Bluetooth: hci3: command tx timeout
[  383.186152] Bluetooth: hci6: command tx timeout
[  383.314000] Bluetooth: hci7: command tx timeout
[  383.315152] Bluetooth: hci5: command tx timeout
[  383.315593] Bluetooth: hci4: command tx timeout
[  384.594020] Bluetooth: hci0: command tx timeout
[  384.851205] Bluetooth: hci1: command tx timeout
[  384.914170] Bluetooth: hci2: command tx timeout
[  385.106935] Bluetooth: hci3: command tx timeout
[  385.235114] Bluetooth: hci6: command tx timeout
[  385.363214] Bluetooth: hci5: command tx timeout
[  385.363659] Bluetooth: hci4: command tx timeout
[  385.364930] Bluetooth: hci7: command tx timeout
[  386.643153] Bluetooth: hci0: command tx timeout
[  386.898896] Bluetooth: hci1: command tx timeout
[  386.964940] Bluetooth: hci2: command tx timeout
[  387.155124] Bluetooth: hci3: command tx timeout
[  387.282925] Bluetooth: hci6: command tx timeout
[  387.409967] Bluetooth: hci5: command tx timeout
[  387.411892] Bluetooth: hci4: command tx timeout
[  387.412304] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
03:39:13  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=00007ff527e2c000 RCX=ffffffff812095c2 RDX=ffff88800a7fb700
RSI=ffffffff812095d0 RDI=0000000000000007 RBP=0000000000000001 RSP=ffff8880268ff820
R8 =ffffffff867b4370 R9 =0000000000000000 R10=00007ff527e2c000 R11=00000000000002f3
R12=0000000000000000 R13=0000000000000000 R14=ffff88800a7fb700 R15=0000000000000cc0
RIP=ffffffff812095d3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55f6000 00000000 00000000
LDT=0000 fffffe2c00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff527add610 CR3=0000000031866000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000011bb871f868 RBX=0000000000000000 RCX=00000000000006e0 RDX=000000000000011b
RSI=ffff88806cf238c0 RDI=000000000005267c RBP=ffff88806cf238c0 RSP=ffff88806cf08ed8
R8 =0000000000000001 R9 =0000000000000000 R10=00000000000ebe2e R11=0000000000000001
R12=000000000005267c R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf28080
RIP=ffffffff813275c5 RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e56f6000 00000000 00000000
LDT=0000 fffffe2c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f628034e260 CR3=0000000028369000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000