Warning: Permanently added '[localhost]:2338' (ECDSA) to the list of known hosts.
2024/11/13 18:05:50 fuzzer started
2024/11/13 18:05:50 dialing manager at localhost:46317
syzkaller login: [   68.459216] cgroup: Unknown subsys name 'net'
[   68.574188] cgroup: Unknown subsys name 'cpuset'
[   68.588095] cgroup: Unknown subsys name 'rlimit'
2024/11/13 18:06:08 syscalls: 201
2024/11/13 18:06:08 code coverage: enabled
2024/11/13 18:06:08 comparison tracing: enabled
2024/11/13 18:06:08 extra coverage: enabled
2024/11/13 18:06:08 setuid sandbox: enabled
2024/11/13 18:06:08 namespace sandbox: enabled
2024/11/13 18:06:08 Android sandbox: enabled
2024/11/13 18:06:08 fault injection: enabled
2024/11/13 18:06:08 leak checking: enabled
2024/11/13 18:06:08 net packet injection: enabled
2024/11/13 18:06:08 net device setup: enabled
2024/11/13 18:06:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/11/13 18:06:08 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/11/13 18:06:08 USB emulation: enabled
2024/11/13 18:06:08 hci packet injection: enabled
2024/11/13 18:06:08 wifi device emulation: enabled
2024/11/13 18:06:08 802.15.4 emulation: enabled
2024/11/13 18:06:08 fetching corpus: 0, signal 0/0 (executing program)
2024/11/13 18:06:09 starting 8 fuzzer processes
18:06:09 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x440c0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x2c}}, 0x64727db0b1dd67d1)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf4, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x53e}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x4}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0xd9658c8e67524d53}, 0x2000c084)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x4000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x8, 0x5, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r1, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000004b40)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004b00)={&(0x7f0000004a40)={0xa4, r0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xeb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa7e3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000005000)=[{{&(0x7f0000004b80)=@sco={0x1f, @none}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004c00)=""/34, 0x22}, {&(0x7f0000004c40)=""/194, 0xc2}, {&(0x7f0000004d40)=""/144, 0x90}, {&(0x7f0000004e00)=""/201, 0xc9}], 0x4, &(0x7f0000004f40)=""/176, 0xb0}, 0x2}], 0x1, 0x40, &(0x7f0000005040))
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000005180)={&(0x7f0000005080), 0xc, &(0x7f0000005140)={&(0x7f00000050c0)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x3a}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4094}, 0x44)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000005200), r2)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000052c0)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005280)={&(0x7f0000005240)={0x2c, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x44000)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000005340), r3)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000005400)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000053c0)={&(0x7f0000005380)={0x30, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000091}, 0x40041)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000005440))

18:06:09 executing program 1:
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x10, 0xffffff5f, @l2={'ib', 0x3a, 'ip6gre0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfb63}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3a2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ae0bb289a4a8"}]}, 0x50}, 0x1, 0x0, 0x0, 0x200080c0}, 0x1)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x54cf275850db8c6a}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x310}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000061c0)={&(0x7f00000060c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006180)={&(0x7f0000006100)={0x60, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000005)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000062c0)={&(0x7f0000006200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000006280)={&(0x7f0000006240)={0x34, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x841)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000006380)={'syztnl2\x00', &(0x7f0000006300)={'sit0\x00', 0x0, 0x29, 0x6, 0x9, 0x8, 0x9, @local, @private2, 0x7800, 0x80, 0x7134, 0x6}})
syz_genetlink_get_family_id$mptcp(&(0x7f00000063c0), r0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000006500)={&(0x7f0000006400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000064c0)={&(0x7f0000006440)={0x6c, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1ce398c06d2900f82d228704d435e93f4389e30b760dc9a5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a73dc255e93e4522f10af273c6216efbdabf787dc13ae3e5"}]]}, 0x6c}}, 0x24004050)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000006540), r3)
syz_genetlink_get_family_id$batadv(&(0x7f0000006580), r0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000006600), r0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000006740)={&(0x7f00000065c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000006700)={&(0x7f0000006640)={0x88, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x64}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20b}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000000}, 0x81)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000067c0), r0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000006880)={&(0x7f0000006780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006840)={&(0x7f0000006800)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0xc004)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000007f00)={&(0x7f0000007e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007ec0)={&(0x7f0000007e40)={0x5c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x73}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x40800)

18:06:09 executing program 2:
r0 = getpgid(0xffffffffffffffff)
r1 = epoll_create1(0x0)
r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000))
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, r2})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x0, &(0x7f0000008d00)={<r4=>0x0, <r5=>0x0})
recvmmsg(r3, &(0x7f0000008bc0)=[{{&(0x7f0000002cc0)=@x25={0x9, @remote}, 0x80, &(0x7f0000002d40), 0x0, &(0x7f0000002d80)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000003d80)=@tipc=@name, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003e00)=""/22, 0x16}], 0x1}, 0x40}, {{&(0x7f0000003e80)=@pptp, 0x80, &(0x7f0000006240)=[{&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/106, 0x6a}, {&(0x7f0000004f80)=""/222, 0xde}, {&(0x7f0000005080)=""/90, 0x5a}, {&(0x7f0000005100)=""/190, 0xbe}, {&(0x7f00000051c0)=""/9, 0x9}, {&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000006200)=""/56, 0x38}], 0x8, &(0x7f00000062c0)=""/106, 0x6a}, 0x81}, {{&(0x7f0000006340)=@ethernet={0x0, @random}, 0x80, &(0x7f0000008440)=[{&(0x7f00000063c0)=""/4096, 0x1000}, {&(0x7f00000073c0)=""/126, 0x7e}, {&(0x7f0000007440)=""/4096, 0x1000}], 0x3}, 0xad8}, {{&(0x7f0000008480)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000008b40)=[{&(0x7f0000008500)=""/201, 0xc9}, {&(0x7f0000008600)=""/149, 0x95}, {&(0x7f00000086c0)=""/177, 0xb1}, {&(0x7f0000008780)=""/163, 0xa3}, {&(0x7f0000008840)=""/225, 0xe1}, {&(0x7f0000008940)=""/87, 0x57}, {&(0x7f00000089c0)=""/153, 0x99}, {&(0x7f0000008a80)=""/145, 0x91}], 0x8}, 0x7fffffff}], 0x5, 0x1, &(0x7f0000008d40)={r4, r5+60000000})
r6 = getpgid(r0)
ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000008d80)={r6})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000008e80)={&(0x7f0000008dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000008e40)={&(0x7f0000008e00)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x4080)
clock_getres(0x6, &(0x7f0000008ec0))
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000008fc0)={&(0x7f0000008f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000008f80)={&(0x7f0000008f40)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000)
r7 = epoll_create1(0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000009000)={0xa0002008})
sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000009140)={&(0x7f0000009040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000009100)={&(0x7f0000009080)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x14}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000009280)={&(0x7f0000009180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000009240)={&(0x7f00000091c0)={0x68, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x7f, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20028884}, 0x20020801)
pipe2$9p(&(0x7f00000092c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x85000)
write$P9_RLOCK(r9, &(0x7f0000009300)={0x8, 0x35, 0x1, 0x2}, 0x8)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000009440)={&(0x7f0000009340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000009400)={&(0x7f00000093c0)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000802}, 0x8000)

18:06:09 executing program 3:
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x1})
ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000080))
write$P9_RLCREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xf, 0x2, {{0x8, 0x1ff, 0x5}, 0x200}}, 0x18)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x71, 0x2, {{0x2, 0x0, 0x5}, 0x6fe}}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x2, 0x2, 0x5}}, 0x14)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4054}, 0x4000040)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd0, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x27}}}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3d2b6903b5"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xe, 0x4, "0abd24bf50f5bf473272"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "62d2226c02"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "62f3a6226005d7fb1521d1bcf4"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "325ccb5b6600b5b27ca68d3ad6"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x800)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0), 0x35d902, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000500)={0x10000008})
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x2b}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x4)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x3c}}, 0x20000000)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x20, 0x5, 0x25dfdbfe, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000001)

[   86.712274] audit: type=1400 audit(1731521169.721:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
18:06:09 executing program 4:
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', <r0=>0x0, 0x4, 0x8b, 0x40, 0xf8, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x700, 0x10, 0x59e, 0xfdf}})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x810)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbb}]}, 0x48}, 0x1, 0x0, 0x0, 0x8050}, 0x8041)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0xb8}}, 0x1000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000540))
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'ip6tnl0\x00', <r4=>r0, 0x4, 0xe8, 0x40, 0xa0, 0x20, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x700, 0x7fffffff, 0xf9}})
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe8, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x90}, 0x1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x3c, 0x0, &(0x7f0000000840)=[@dead_binder_done, @increfs_done, @request_death, @dead_binder_done], 0xbc, 0x0, &(0x7f0000000880)="4c06b6b3425650fec83e447e2fe6f51f4a6d660906ffa7b54c42e8880efcc3c8f96af5f89f71f7f96e8e1320fe9e4ad9885124aec49b434ea30e13742a922c48d5a3c2bcddad77fb5214a5e4321c055b73f4dc49cbc81e5492cc130eb1527e02c8c1e63b2a2f8deac2b830eb38dba9c15f6bc1d2c6c3f3e83059ccf453f21366891329bf8cf13e33a0f010af0398d1737a7825dd005e670711deb2c72e20da49d8c3e5220fb461d3cd8f17610572a8238fd0c70219cc3b7e60f1d4e8"})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r5, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0xcc, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x10)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r5, 0x10, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x10)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000bc0)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x73}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r0}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40880}, 0x4000000)
syz_genetlink_get_family_id$fou(&(0x7f0000000d40), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x4)

18:06:09 executing program 5:
pkey_alloc(0x0, 0x3)
r0 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x0, r0)
r1 = pkey_alloc(0x0, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}}, 0x4000800)
pkey_free(r0)
pkey_free(r1)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2)
r2 = getpid()
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000140)={r2, 0x0, 0x40000})
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xe5a0954b82d243b}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000085}, 0x400)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1, 0x2})
socketpair(0x27, 0x1, 0x20, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000300), 0x4)
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000340)=""/81)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000003c0)={0x3})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x4880)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r3)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, r5, 0x600, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x80)

18:06:09 executing program 6:
r0 = accept(0xffffffffffffffff, &(0x7f0000002000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000002080)=0x80)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x74, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004050}, 0x4)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x14, r1, 0x100, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4004041)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x52dd, 0x9, 0x7, 0x7}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20040040)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002480)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x7c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xc004824)
recvmmsg(r0, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002580)=""/41, 0x29}, {&(0x7f00000025c0)=""/47, 0x2f}, {&(0x7f0000002600)=""/174, 0xae}, {&(0x7f00000026c0)=""/211, 0xd3}, {&(0x7f00000027c0)=""/112, 0x70}], 0x5, &(0x7f00000028c0)=""/137, 0x89}, 0x5}, {{&(0x7f0000002980)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002a00)=""/47, 0x2f}], 0x1, &(0x7f0000002a80)=""/23, 0x17}, 0x3}, {{&(0x7f0000002ac0)=@generic, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002b40)=""/250, 0xfa}], 0x1, &(0x7f0000002c80)=""/229, 0xe5}, 0x8}, {{&(0x7f0000002d80)=@xdp={0x2c, 0x0, <r3=>0x0}, 0x80, &(0x7f0000005100)=[{&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/243, 0xf3}, {&(0x7f0000003f00)=""/245, 0xf5}, {&(0x7f0000004000)=""/243, 0xf3}, {&(0x7f0000004100)=""/4096, 0x1000}], 0x5, &(0x7f0000005180)=""/4096, 0x1000}, 0x3}], 0x4, 0x2000, &(0x7f0000006280)={0x77359400})
syz_genetlink_get_family_id$nl80211(&(0x7f00000062c0), 0xffffffffffffffff)
accept(r0, &(0x7f0000006300)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000006380)=0x80)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000063c0), r5)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000006500)={&(0x7f0000006400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000064c0)={&(0x7f0000006440)={0x4c, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000006600)={'ip6_vti0\x00', &(0x7f0000006580)={'ip6_vti0\x00', <r6=>0x0, 0x4, 0xe1, 0x2, 0x5, 0x40, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0x700, 0x7800, 0x0, 0x2456}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000006700)={&(0x7f0000006540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000066c0)={&(0x7f0000006640)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000068c0)={&(0x7f0000006740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000006880)={&(0x7f0000006780)={0xe8, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48009}, 0x1)
r7 = accept(r4, 0x0, &(0x7f0000006900))
r8 = accept(r7, &(0x7f0000006940)=@isdn, &(0x7f00000069c0)=0x80)
ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000006a00))
syz_genetlink_get_family_id$batadv(&(0x7f0000006a40), 0xffffffffffffffff)

18:06:09 executing program 7:
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20002880}, 0x4044010)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000900)=0x80)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000d00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000980)={0x338, 0x0, 0x402, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x308, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7}, @from_mac=@broadcast, @device_b, @broadcast, {0x1, 0x2}}, {0x6, 0x0, 0x0, 0x0, 0x4}}, {@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x100}, @initial, @device_a, @from_mac, {0x4, 0x1}}, {0xf, 0x1, 0x3, 0x1, 0x81}}}, @ver_80211n={0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x338}, 0x1, 0x0, 0x0, 0x44010}, 0x20000000)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'syztnl2\x00', <r2=>0x0, 0x2f, 0x86, 0x81, 0x8, 0x0, @mcast1, @mcast2, 0x10, 0x78a1, 0x551b414f, 0x80}})
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000e00), 0x2040, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), r0)
sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0xc1)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f80), r1)
syz_io_uring_setup(0x22b6, &(0x7f0000000fc0)={0x0, 0xdf14, 0x4, 0x2, 0x3e, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001040)=<r6=>0x0, &(0x7f0000001080))
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x10000000)
syz_io_uring_submit(r6, r7, &(0x7f00000010c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r3, 0x0, r3}, 0x9)
sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48810)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001200), 0x10020, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000012c0)={'syztnl2\x00', &(0x7f0000001240)={'syztnl1\x00', <r9=>r2, 0x29, 0x1, 0x7f, 0x100, 0x46, @private2, @local, 0x40, 0x80, 0x1, 0xfffffff8}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r8, 0x89f6, &(0x7f0000001380)={'ip6gre0\x00', &(0x7f0000001300)={'syztnl0\x00', r9, 0x4, 0x1, 0x8, 0x1000, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x80, 0x5, 0x8000}})
ioctl$RTC_PIE_OFF(r3, 0x7006)
socketpair(0x1f, 0x4, 0x6, &(0x7f00000013c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$TIPC_CMD_SET_LINK_PRI(r10, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, r4, 0x700, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x18, {0x9, @bearer=@l2={'ib', 0x3a, 'team_slave_0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040001)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001680)={&(0x7f0000001580)={0xc8, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf6f45d3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a, 0x20}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x40004)

[   88.129438] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.131136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.132615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.135437] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.137702] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   88.139277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.144670] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.150762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.152323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.164270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.165730] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   88.167003] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.256311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.257380] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.260137] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.263091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.265628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.266648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.269121] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   88.269994] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   88.271529] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   88.272303] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.273256] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.275539] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   88.276916] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   88.278304] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   88.280520] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   88.281906] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.285680] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   88.286782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   88.287550] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   88.288560] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.292315] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.293263] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.295287] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   88.304166] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   88.305402] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.307602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   88.312193] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   88.313356] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   88.315094] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.316220] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   88.323455] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   88.324073] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   88.326003] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   88.332605] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   88.333612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   88.341057] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.217162] Bluetooth: hci0: command tx timeout
[   90.217165] Bluetooth: hci1: command tx timeout
[   90.345415] Bluetooth: hci2: command tx timeout
[   90.345437] Bluetooth: hci4: command tx timeout
[   90.408112] Bluetooth: hci3: command tx timeout
[   90.408129] Bluetooth: hci6: command tx timeout
[   90.409252] Bluetooth: hci5: command tx timeout
[   90.409389] Bluetooth: hci7: command tx timeout
[   92.264066] Bluetooth: hci1: command tx timeout
[   92.264103] Bluetooth: hci0: command tx timeout
[   92.392048] Bluetooth: hci4: command tx timeout
[   92.393203] Bluetooth: hci2: command tx timeout
[   92.456095] Bluetooth: hci7: command tx timeout
[   92.456137] Bluetooth: hci5: command tx timeout
[   92.456558] Bluetooth: hci3: command tx timeout
[   92.457719] Bluetooth: hci6: command tx timeout
[   94.312765] Bluetooth: hci0: command tx timeout
[   94.313457] Bluetooth: hci1: command tx timeout
[   94.440309] Bluetooth: hci2: command tx timeout
[   94.441596] Bluetooth: hci4: command tx timeout
[   94.504062] Bluetooth: hci3: command tx timeout
[   94.505369] Bluetooth: hci6: command tx timeout
[   94.505822] Bluetooth: hci5: command tx timeout
[   94.506324] Bluetooth: hci7: command tx timeout
[   96.360127] Bluetooth: hci0: command tx timeout
[   96.360304] Bluetooth: hci1: command tx timeout
[   96.488118] Bluetooth: hci2: command tx timeout
[   96.488651] Bluetooth: hci4: command tx timeout
[   96.552328] Bluetooth: hci3: command tx timeout
[   96.552362] Bluetooth: hci7: command tx timeout
[   96.552409] Bluetooth: hci5: command tx timeout
[   96.552898] Bluetooth: hci6: command tx timeout
[  150.904415] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  150.906426] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  150.912485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  150.921511] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  150.925655] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  150.927833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  150.969654] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  150.974207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  150.976713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  150.982632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  150.990150] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  150.995087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  151.033207] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  151.040214] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  151.042458] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  151.047531] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  151.051343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  151.053328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  151.060528] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  151.061675] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  151.063266] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  151.064627] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  151.067436] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  151.069642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  151.111413] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  151.125250] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  151.131329] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  151.134317] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  151.148908] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  151.152385] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  151.155184] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  151.159596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  151.163995] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  151.167114] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  151.169760] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  151.173648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  151.193190] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  151.212215] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  151.215440] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  151.217126] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  151.218212] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  151.223370] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  151.234551] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  151.235609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  151.236628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  151.266211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  151.289059] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  151.293146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  153.003156] Bluetooth: hci0: command tx timeout
[  153.068688] Bluetooth: hci1: command tx timeout
[  153.128514] Bluetooth: hci2: command tx timeout
[  153.128556] Bluetooth: hci3: command tx timeout
[  153.320647] Bluetooth: hci4: command tx timeout
[  153.320674] Bluetooth: hci7: command tx timeout
[  153.321241] Bluetooth: hci6: command tx timeout
[  153.384044] Bluetooth: hci5: command tx timeout
[  155.048055] Bluetooth: hci0: command tx timeout
[  155.112041] Bluetooth: hci1: command tx timeout
[  155.176076] Bluetooth: hci3: command tx timeout
[  155.177387] Bluetooth: hci2: command tx timeout
[  155.368069] Bluetooth: hci6: command tx timeout
[  155.369655] Bluetooth: hci4: command tx timeout
[  155.369674] Bluetooth: hci7: command tx timeout
[  155.432011] Bluetooth: hci5: command tx timeout
[  157.096988] Bluetooth: hci0: command tx timeout
[  157.160107] Bluetooth: hci1: command tx timeout
[  157.225016] Bluetooth: hci3: command tx timeout
[  157.226396] Bluetooth: hci2: command tx timeout
[  157.416094] Bluetooth: hci4: command tx timeout
[  157.416120] Bluetooth: hci7: command tx timeout
[  157.417864] Bluetooth: hci6: command tx timeout
[  157.480028] Bluetooth: hci5: command tx timeout
[  159.144036] Bluetooth: hci0: command tx timeout
[  159.208038] Bluetooth: hci1: command tx timeout
[  159.272157] Bluetooth: hci3: command tx timeout
[  159.273493] Bluetooth: hci2: command tx timeout
[  159.464021] Bluetooth: hci6: command tx timeout
[  159.465074] Bluetooth: hci7: command tx timeout
[  159.465516] Bluetooth: hci4: command tx timeout
[  159.528056] Bluetooth: hci5: command tx timeout
[  213.080371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  213.082435] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  213.083730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  213.086083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  213.087478] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  213.088575] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  213.111565] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  213.113175] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  213.114314] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  213.117545] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  213.121288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  213.122796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  213.279316] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  213.286014] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  213.287218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  213.301755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  213.311768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.313452] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  213.319297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  213.352227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.356179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.361561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.365200] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  213.382520] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  213.452044] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  213.461741] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  213.463260] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  213.482701] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  213.486409] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  213.487605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  213.491258] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  213.495351] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  213.497997] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  213.499749] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  213.501160] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  213.504076] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  213.505728] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  213.507170] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  213.520550] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  213.528421] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  213.530137] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  213.539266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  213.555981] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  213.559675] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  213.561387] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  213.569777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  213.584470] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  213.601369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  215.145071] Bluetooth: hci1: command tx timeout
[  215.145096] Bluetooth: hci0: command tx timeout
[  215.400065] Bluetooth: hci3: command tx timeout
[  215.400116] Bluetooth: hci2: command tx timeout
[  215.592046] Bluetooth: hci6: command tx timeout
[  215.656398] Bluetooth: hci7: command tx timeout
[  215.656446] Bluetooth: hci5: command tx timeout
[  215.720038] Bluetooth: hci4: command tx timeout
[  217.193072] Bluetooth: hci0: command tx timeout
[  217.193817] Bluetooth: hci1: command tx timeout
[  217.448062] Bluetooth: hci3: command tx timeout
[  217.449668] Bluetooth: hci2: command tx timeout
[  217.640801] Bluetooth: hci6: command tx timeout
[  217.704058] Bluetooth: hci7: command tx timeout
[  217.705123] Bluetooth: hci5: command tx timeout
[  217.768102] Bluetooth: hci4: command tx timeout
[  219.240077] Bluetooth: hci1: command tx timeout
[  219.240207] Bluetooth: hci0: command tx timeout
[  219.496054] Bluetooth: hci2: command tx timeout
[  219.496087] Bluetooth: hci3: command tx timeout
[  219.688989] Bluetooth: hci6: command tx timeout
[  219.753201] Bluetooth: hci5: command tx timeout
[  219.754864] Bluetooth: hci7: command tx timeout
[  219.817048] Bluetooth: hci4: command tx timeout
[  221.288051] Bluetooth: hci1: command tx timeout
[  221.289551] Bluetooth: hci0: command tx timeout
[  221.544138] Bluetooth: hci3: command tx timeout
[  221.545636] Bluetooth: hci2: command tx timeout
[  221.736985] Bluetooth: hci6: command tx timeout
[  221.800155] Bluetooth: hci7: command tx timeout
[  221.802117] Bluetooth: hci5: command tx timeout
[  221.864286] Bluetooth: hci4: command tx timeout
[  275.274689] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  275.282322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  275.286099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  275.293354] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  275.296653] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  275.299710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  275.317375] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  275.332739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  275.336226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  275.342697] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  275.346664] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  275.349297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  275.513886] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  275.518545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  275.522301] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  275.524671] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  275.530156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  275.532404] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  275.537017] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  275.541514] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  275.547529] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  275.551133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  275.551250] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  275.554646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  275.556017] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  275.559258] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  275.563162] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  275.565552] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  275.573544] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  275.579491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  275.599550] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  275.605201] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  275.610014] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  275.615173] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  275.616693] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  275.622190] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  275.622285] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  275.626521] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  275.628844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  275.633475] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  275.636427] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  275.640017] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  275.694159] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  275.713515] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  275.721521] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  275.753134] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  275.769529] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  275.773372] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  277.352079] Bluetooth: hci0: command tx timeout
[  277.417001] Bluetooth: hci1: command tx timeout
[  277.609149] Bluetooth: hci2: command tx timeout
[  277.674076] Bluetooth: hci5: command tx timeout
[  277.674116] Bluetooth: hci6: command tx timeout
[  277.676298] Bluetooth: hci3: command tx timeout
[  277.736997] Bluetooth: hci4: command tx timeout
[  277.864018] Bluetooth: hci7: command tx timeout
[  279.400021] Bluetooth: hci0: command tx timeout
[  279.464005] Bluetooth: hci1: command tx timeout
[  279.656067] Bluetooth: hci2: command tx timeout
[  279.720041] Bluetooth: hci6: command tx timeout
[  279.720171] Bluetooth: hci3: command tx timeout
[  279.720557] Bluetooth: hci5: command tx timeout
[  279.784132] Bluetooth: hci4: command tx timeout
[  279.914022] Bluetooth: hci7: command tx timeout
[  281.448144] Bluetooth: hci0: command tx timeout
[  281.512091] Bluetooth: hci1: command tx timeout
[  281.704014] Bluetooth: hci2: command tx timeout
[  281.768043] Bluetooth: hci5: command tx timeout
[  281.769054] Bluetooth: hci3: command tx timeout
[  281.769153] Bluetooth: hci6: command tx timeout
[  281.832032] Bluetooth: hci4: command tx timeout
[  281.960031] Bluetooth: hci7: command tx timeout
[  283.496969] Bluetooth: hci0: command tx timeout
[  283.560122] Bluetooth: hci1: command tx timeout
[  283.752012] Bluetooth: hci2: command tx timeout
[  283.816306] Bluetooth: hci6: command tx timeout
[  283.816778] Bluetooth: hci3: command tx timeout
[  283.817999] Bluetooth: hci5: command tx timeout
[  283.881274] Bluetooth: hci4: command tx timeout
[  284.008009] Bluetooth: hci7: command tx timeout
[  337.730275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  337.734228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  337.738560] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  337.743376] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  337.749643] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  337.752246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  337.780491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  337.782367] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  337.786850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  337.797734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  337.800729] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  337.802565] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  337.912552] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  337.914368] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  337.921246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  337.926233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  337.938708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  337.941113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  337.959338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  337.962335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  337.966696] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  337.970563] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  337.979389] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  337.985490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  337.989443] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  337.997209] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  338.002665] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  338.009334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  338.010393] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  338.027109] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  338.028609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  338.030112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  338.032586] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  338.035345] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  338.049260] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  338.050850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  338.056252] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  338.060184] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  338.060305] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  338.068483] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  338.081694] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  338.103440] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  338.111523] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  338.130244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  338.132554] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  338.140275] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  338.149166] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  338.158268] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  339.817345] Bluetooth: hci0: command tx timeout
[  339.880968] Bluetooth: hci1: command tx timeout
[  340.008084] Bluetooth: hci2: command tx timeout
[  340.075003] Bluetooth: hci4: command tx timeout
[  340.076011] Bluetooth: hci3: command tx timeout
[  340.136987] Bluetooth: hci5: command tx timeout
[  340.264188] Bluetooth: hci6: command tx timeout
[  340.265487] Bluetooth: hci7: command tx timeout
[  341.864958] Bluetooth: hci0: command tx timeout
[  341.929263] Bluetooth: hci1: command tx timeout
[  342.056251] Bluetooth: hci2: command tx timeout
[  342.120023] Bluetooth: hci3: command tx timeout
[  342.121534] Bluetooth: hci4: command tx timeout
[  342.184983] Bluetooth: hci5: command tx timeout
[  342.320288] Bluetooth: hci7: command tx timeout
[  342.320839] Bluetooth: hci6: command tx timeout
[  343.911998] Bluetooth: hci0: command tx timeout
[  343.976084] Bluetooth: hci1: command tx timeout
[  344.103997] Bluetooth: hci2: command tx timeout
[  344.169942] Bluetooth: hci3: command tx timeout
[  344.170509] Bluetooth: hci4: command tx timeout
[  344.232056] Bluetooth: hci5: command tx timeout
[  344.360976] Bluetooth: hci6: command tx timeout
[  344.361538] Bluetooth: hci7: command tx timeout
[  345.959993] Bluetooth: hci0: command tx timeout
[  346.023996] Bluetooth: hci1: command tx timeout
[  346.151972] Bluetooth: hci2: command tx timeout
[  346.216976] Bluetooth: hci3: command tx timeout
[  346.218451] Bluetooth: hci4: command tx timeout
[  346.280982] Bluetooth: hci5: command tx timeout
[  346.408939] Bluetooth: hci6: command tx timeout
[  346.409500] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
18:11:19  Registers:
info registers vcpu 0
RAX=ffff888029558001 RBX=ffffffff863f8530 RCX=ffffffff812eb704 RDX=1ffff11002ae93bf
RSI=0000000000000008 RDI=ffff888015749df8 RBP=ffff888015749df0 RSP=ffff88802fcc7c28
R8 =0000000000000000 R9 =ffffed1002ae93bf R10=ffff888015749dff R11=00000000000c36d9
R12=1ffff11005f98f89 R13=ffff888015749e58 R14=ffff888015749c80 R15=ffff888015749df8
RIP=ffffffff818bbe14 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe1726f7088 CR3=0000000015408000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=000000000000000f RCX=ffffffff847bab1e RDX=ffff888035bf8000
RSI=ffffffff847bafd3 RDI=0000000000000007 RBP=00007f7693aa8fff RSP=ffff888035aefc88
R8 =0000000000000001 R9 =fffffbfff0fdc5e4 R10=00007f7693aa8fff R11=0000000000000000
R12=00007f7693a5a4a1 R13=0000000000000001 R14=ffff888018df60e0 R15=00007f7693aa8fff
RIP=ffffffff847bafd8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f76938bf540 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe3300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7693a5a4a1 CR3=000000002a188000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000ff0000000000000000
XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=65006463682d69636865203a65727020
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000