Warning: Permanently added '[localhost]:53849' (ECDSA) to the list of known hosts. 2024/11/14 05:19:47 fuzzer started 2024/11/14 05:19:47 dialing manager at localhost:46317 syzkaller login: [ 68.329359] cgroup: Unknown subsys name 'net' [ 68.413577] cgroup: Unknown subsys name 'cpuset' [ 68.441409] cgroup: Unknown subsys name 'rlimit' 2024/11/14 05:20:04 syscalls: 219 2024/11/14 05:20:04 code coverage: enabled 2024/11/14 05:20:04 comparison tracing: enabled 2024/11/14 05:20:04 extra coverage: enabled 2024/11/14 05:20:04 setuid sandbox: enabled 2024/11/14 05:20:04 namespace sandbox: enabled 2024/11/14 05:20:04 Android sandbox: enabled 2024/11/14 05:20:04 fault injection: enabled 2024/11/14 05:20:04 leak checking: enabled 2024/11/14 05:20:04 net packet injection: enabled 2024/11/14 05:20:04 net device setup: enabled 2024/11/14 05:20:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/14 05:20:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/14 05:20:04 USB emulation: enabled 2024/11/14 05:20:04 hci packet injection: enabled 2024/11/14 05:20:04 wifi device emulation: enabled 2024/11/14 05:20:04 802.15.4 emulation: enabled 2024/11/14 05:20:04 fetching corpus: 0, signal 0/0 (executing program) 2024/11/14 05:20:06 starting 8 fuzzer processes 05:20:06 executing program 1: clock_gettime(0x2, &(0x7f0000000000)) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x8) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000100)=0x5f, 0x4) setreuid(0xee01, 0xee01) clock_getres(0x7, &(0x7f0000000140)) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r0 = getuid() r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c) clock_getres(0x3, &(0x7f0000000280)) socketpair(0x25, 0x6, 0x15, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000300)={0xff, 0x20, 0xfff, 0x2, 0xffffffff}, 0x14) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000340)) nanosleep(&(0x7f0000000380), &(0x7f00000003c0)) syz_mount_image$nfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0xffff, 0x5, &(0x7f0000000800)=[{&(0x7f0000000480)="47ba13257fc43553bbdf048e199ea6dbdf4ebc8fbe2b96dd006545f374ed9318e3539599bcdb49c160679bffb6c33a960d384ab2a0ae8b5a2ca97582c9698e3a782bcd6eb10a91b2e042752f1416f4aa1ee8e73f8434eea64fe9be8d06a7e486938798dcb209de985983ce9333ac65a86fe739842477db3a479e2e77996c2eaf9987404167961582a2b4dc5ddd7ecbf83cd7112e9189100f4dc1c90ec2739608635a4feba8ac126476357d93b6a3c7303d", 0xb1, 0x3f66a01a}, {&(0x7f0000000540)="ea209abc291a1fc2b1a6b7bc8074504d57891a118fa75adfdde50dcc43bf28b1e5f69cdfb90c3b9eebb3e212bb77471961b07fdb4deadc0a18d1652e70e073c7fe9f2549a6040ae350e7e6cff2dd07ae2b7d1f8cacdd91aff9f7e9a5e607e2e09a26b2f213720d560580147a11ba31f98bdd50cbbc625dea075b5642eeb5ec666e9c765e4c370d803d5d5f5b4076678eb72f7dd53e419107f31f30f7badac43d79851ff563307d55876feae68fa0f82bc69250ca15ad64505cc3114155353ea58d8c523b1eedffcf51cee7e5dd", 0xcd, 0xfffffffffffffffd}, {&(0x7f0000000640)="ce8b8975854f28b69def0685f66092248431e52acb4c09a83bfd1399ae438ed241b6fd7f2a07ba822b7f00a92ab872fc74d387f597d1e9e994c17804c97c7ae32b40e8012d1326dfb24b50a81fa9245b1401a8bf28bc0634744a9c1e4577db3d6425d9f1c50c39cedf121af7ff5ad811aee7a7314917f15a6418e761f4efcd638c0d4e866d34d4ec5ee197c77e36237cf84184e53b238507f7aa208912cb4106e345da828b6acc710d232e99a24cf277dab2578ca8e61ca96dfac9ac4b671dce6c11b4556d706968b91e", 0xca, 0x62}, {&(0x7f0000000740)="cb2873ebd6be68dddc2061ff4320bf3b81", 0x11, 0x10001}, {&(0x7f0000000780)="aa331eab46202ca58571a9f135f469c8235f7368a09f7ddd28138e53dbad7ed7efb88a973d3d940738306a2bcc031d79a07f7a0bc3b51a19719bf366c904bb7d34d6156a1d68065ec3603e50beb2ac0ed3285a36f8f7fed0d118", 0x5a, 0x401}], 0x44000, &(0x7f0000000880)={[{'*'}, {'^\\*!/-O\':'}, {']$[-'}, {'$'}, {'\''}, {}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@appraise}, {@euid_gt={'euid>', r0}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'D+'}}]}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000940)={'IDLETIMER\x00'}, &(0x7f0000000980)=0x1e) clock_gettime(0x1, &(0x7f00000009c0)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000a40)) 05:20:06 executing program 0: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x8895}, 0x805) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040048) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x2000c810) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008081}, 0x40082) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0xc0, 0x0) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x10) r3 = openat$incfs(r2, &(0x7f00000005c0)='.pending_reads\x00', 0x0, 0x35) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb4, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x11}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xea21}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x79}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd02}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000000) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xd8, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7c9f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x98}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffd}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000d00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x208, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1c}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2a5f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1c}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ff}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) r4 = syz_mount_image$tmpfs(&(0x7f0000000d40), &(0x7f0000000d80)='./file0\x00', 0x24, 0x1, &(0x7f0000000e00)=[{&(0x7f0000000dc0)="4c86b423a42ddc30f9779c1f07bf350d1ae27178d6c0a356dbd3f6764d51e34e91ff90938de489183ff4d9da97570a0fa4843b04", 0x34, 0x41f}], 0x1424a0, &(0x7f0000000e40)={[{@mode={'mode', 0x3d, 0xffff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ip6erspan0\x00'}}, {@audit}, {@uid_gt={'uid>', 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x33, 0x66, 0x37, 0x66, 0x63, 0x64, 0x30], 0x2d, [0x38, 0x35, 0x66, 0x39], 0x2d, [0x5, 0x35, 0x39, 0x34], 0x2d, [0x37, 0x39, 0x61], 0x2d, [0x34, 0x33, 0x65, 0x38, 0x37, 0x62, 0x35, 0x63]}}}, {@uid_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ipvlan0\x00'}}, {@euid_lt={'euid<', 0xee00}}]}) fcntl$getown(r4, 0x9) socketpair(0x1d, 0x80000, 0x925, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x903}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40811}, 0x4044884) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001140), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, r7, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000080) 05:20:06 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/98, &(0x7f0000000080)=0x62) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{}, {r1, r2/1000+10000}}) r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x400, 0x40) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40008000) accept$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth1_to_team\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20000804) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e20, 0x8, @local, 0x8}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', r6, 0x5a, 0x8, 0x8, 0x3ff, 0x19, @local, @local, 0x7800, 0x1, 0x5, 0x763549dd}}) clock_getres(0x1, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'sit0\x00', r5, 0x29, 0x90, 0x0, 0x8, 0x21, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x27, 0x20, 0x6, 0x3ff}}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r7, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmsg$unix(r3, &(0x7f0000000a80)={&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000900)=""/194, 0xc2}, {&(0x7f0000000a00)=""/38, 0x26}], 0x2}, 0x141) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000ac0)=""/33, &(0x7f0000000b00)=0x21) recvmsg$unix(r3, &(0x7f0000002e80)={&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000000bc0)=""/183, 0xb7}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/157, 0x9d}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0x4, &(0x7f0000002d80)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x20020021) 05:20:06 executing program 3: recvmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/48, 0x30}, {&(0x7f00000010c0)=""/166, 0xa6}, {&(0x7f0000001180)=""/135, 0x87}, {&(0x7f0000001240)=""/50, 0x32}, {&(0x7f0000001280)=""/171, 0xab}, {&(0x7f0000001340)=""/37, 0x25}, {&(0x7f0000001380)=""/188, 0xbc}, {&(0x7f0000001440)=""/143, 0x8f}], 0x9, &(0x7f00000015c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c811}, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000017c0)='.pending_reads\x00', 0x602000, 0x18) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001840), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x7c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x240000d4}, 0x10810) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r4) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x40) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000001bc0)={'ah\x00'}, &(0x7f0000001c00)=0x1e) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c80), r4) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40), 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r7, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x1) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001dc0), r0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x1c, r8, 0xc20, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x45) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001f00), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000020c0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002080)={&(0x7f0000001f40)={0x108, r9, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6e9ea653}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000041}, 0x1) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x8000) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0xc0, r8, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa0}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20008800}, 0x54) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000023c0), r3) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x54, r10, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004043}, 0x4044) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, r10, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 05:20:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000881}, 0x4052) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x400000, 0x20) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004802}, 0x14) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x14}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x14}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040}, 0x20000001) r6 = openat$incfs(r2, &(0x7f0000000540)='.pending_reads\x00', 0x400001, 0x40) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x22a, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0xc840) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x4, 0xfe, 0x81, 0x6d, 0x50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x1, 0x8, 0x1, 0x101}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000800)={&(0x7f0000000680), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, 0x0, 0x200, 0xff, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r8 = socket(0x1d, 0x80000, 0x191) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r6) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r9, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r4) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r10, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4012) [ 86.448035] audit: type=1400 audit(1731561606.555:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:20:06 executing program 5: setreuid(0xee00, 0xee01) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffe1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x30}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x24008001) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0xd0c, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000811}, 0x24004040) recvmsg$unix(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000700)=""/87, 0x57}, {&(0x7f0000000780)=""/99, 0x63}, {&(0x7f0000000800)=""/232, 0xe8}, {&(0x7f0000000900)=""/191, 0xbf}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/35, 0x23}, {&(0x7f0000001a00)=""/78, 0x4e}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0xa, &(0x7f0000002b40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x162) bind$bt_sco(r5, &(0x7f0000002cc0)={0x1f, @none}, 0x8) socketpair(0x27, 0x3, 0x7fffffff, &(0x7f0000002d00)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002d80)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002dc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000002e80)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r9 = openat$incfs(r4, &(0x7f0000002ec0)='.pending_reads\x00', 0x80040, 0x40) setsockopt$bt_hci_HCI_TIME_STAMP(r9, 0x0, 0x3, &(0x7f0000002f00)=0x200, 0x4) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000003000)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x38, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004091}, 0x0) 05:20:06 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4) openat$cgroup_pressure(0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0) r1 = socket(0x29, 0x4, 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) r2 = openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=0x1000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001840)=0x0) clone3(&(0x7f00000018c0)={0x10000800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), {0x3c}, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/225, &(0x7f0000001880)=[r3, 0xffffffffffffffff, 0x0], 0x3, {r0}}, 0x58) r4 = accept$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001980)=0x1c) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000019c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @private2, @mcast1, 0x0, 0xfffc, 0x4, 0x500, 0xfc18, 0x800008}) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xe) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000001a40), 0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f0000001a80)='./file0\x00', 0x800) r5 = socket(0xa, 0x6, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000001ac0), r5) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001b00), 0x2, 0x0) inotify_init1(0x800) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000001b40)={'TPROXY\x00'}, &(0x7f0000001b80)=0x1e) 05:20:06 executing program 7: r0 = socket(0x26, 0x2, 0x883) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32, 0x2}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x0, 0x40) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x33}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf7d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000024) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x7c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x23}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xeb}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd3e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x44) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040890}, 0x10) connect$bt_sco(r1, &(0x7f0000000a40)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0x8014) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r9, 0xf3a, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x4011}, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xc8, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa5}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20002815}, 0x10) [ 87.825621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.826779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.828126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.829668] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.830446] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.831537] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.833052] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.840137] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.840853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.842661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.843690] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.844754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.847498] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.852297] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.855599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.857472] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.858702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.863443] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.867824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.871417] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.873513] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.879633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.881613] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.886056] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.942297] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.944410] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.948122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.952106] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.953494] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.956259] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.960157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.967280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.972150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.981354] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.987850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.993257] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.999084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.001526] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.014076] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.015684] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.017726] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.020141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.022774] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.029751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.031757] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.036843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.078061] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.080378] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.910458] Bluetooth: hci2: command tx timeout [ 89.912153] Bluetooth: hci0: command tx timeout [ 89.913566] Bluetooth: hci1: command tx timeout [ 89.972118] Bluetooth: hci3: command tx timeout [ 90.100004] Bluetooth: hci5: command tx timeout [ 90.165007] Bluetooth: hci7: command tx timeout [ 90.166483] Bluetooth: hci4: command tx timeout [ 90.166510] Bluetooth: hci6: command tx timeout [ 91.956188] Bluetooth: hci2: command tx timeout [ 91.957023] Bluetooth: hci0: command tx timeout [ 91.957709] Bluetooth: hci1: command tx timeout [ 92.021968] Bluetooth: hci3: command tx timeout [ 92.149087] Bluetooth: hci5: command tx timeout [ 92.212656] Bluetooth: hci6: command tx timeout [ 92.213922] Bluetooth: hci7: command tx timeout [ 92.213981] Bluetooth: hci4: command tx timeout [ 94.004115] Bluetooth: hci1: command tx timeout [ 94.005651] Bluetooth: hci0: command tx timeout [ 94.005819] Bluetooth: hci2: command tx timeout [ 94.068017] Bluetooth: hci3: command tx timeout [ 94.196925] Bluetooth: hci5: command tx timeout [ 94.262060] Bluetooth: hci6: command tx timeout [ 94.263431] Bluetooth: hci7: command tx timeout [ 94.263581] Bluetooth: hci4: command tx timeout [ 96.052002] Bluetooth: hci0: command tx timeout [ 96.052037] Bluetooth: hci1: command tx timeout [ 96.053424] Bluetooth: hci2: command tx timeout [ 96.117102] Bluetooth: hci3: command tx timeout [ 96.244971] Bluetooth: hci5: command tx timeout [ 96.309015] Bluetooth: hci4: command tx timeout [ 96.309102] Bluetooth: hci6: command tx timeout [ 96.310393] Bluetooth: hci7: command tx timeout [ 150.660760] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.662391] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.663677] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.667325] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.668772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.670242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.730608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.742414] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.747048] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.748538] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.749837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.751620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.752842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.754232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.755908] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.757736] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.758748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.763813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.766378] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.768213] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.769309] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.776565] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.785198] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.787041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.794103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.794585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.802572] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.802577] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.803022] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.805471] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.805895] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.809996] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.811142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.819656] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.826259] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.828183] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.832651] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.836152] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.847739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.860289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.862196] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.863710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.866277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.867291] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.868458] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.878113] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.879203] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.886274] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.692997] Bluetooth: hci0: command tx timeout [ 152.820059] Bluetooth: hci2: command tx timeout [ 152.820794] Bluetooth: hci1: command tx timeout [ 152.884063] Bluetooth: hci5: command tx timeout [ 152.884196] Bluetooth: hci3: command tx timeout [ 152.948173] Bluetooth: hci6: command tx timeout [ 152.949145] Bluetooth: hci4: command tx timeout [ 153.011959] Bluetooth: hci7: command tx timeout [ 154.740110] Bluetooth: hci0: command tx timeout [ 154.868735] Bluetooth: hci1: command tx timeout [ 154.868757] Bluetooth: hci2: command tx timeout [ 154.932100] Bluetooth: hci5: command tx timeout [ 154.932124] Bluetooth: hci3: command tx timeout [ 154.996122] Bluetooth: hci6: command tx timeout [ 154.996175] Bluetooth: hci4: command tx timeout [ 155.061909] Bluetooth: hci7: command tx timeout [ 156.788024] Bluetooth: hci0: command tx timeout [ 156.917085] Bluetooth: hci1: command tx timeout [ 156.917123] Bluetooth: hci2: command tx timeout [ 156.980927] Bluetooth: hci3: command tx timeout [ 156.981408] Bluetooth: hci5: command tx timeout [ 157.044153] Bluetooth: hci4: command tx timeout [ 157.044461] Bluetooth: hci6: command tx timeout [ 157.109207] Bluetooth: hci7: command tx timeout [ 158.835945] Bluetooth: hci0: command tx timeout [ 158.965753] Bluetooth: hci2: command tx timeout [ 158.966127] Bluetooth: hci1: command tx timeout [ 159.028311] Bluetooth: hci5: command tx timeout [ 159.028366] Bluetooth: hci3: command tx timeout [ 159.092038] Bluetooth: hci6: command tx timeout [ 159.092148] Bluetooth: hci4: command tx timeout [ 159.157175] Bluetooth: hci7: command tx timeout [ 212.887037] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.889633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.892025] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.895773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.897532] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.898664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.128491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.133588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.134747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.138389] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.142868] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.145179] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.965012] Bluetooth: hci0: command tx timeout [ 215.220968] Bluetooth: hci1: command tx timeout [ 215.734777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.738262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.741166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.745201] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.747119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.750074] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.751026] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.752938] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.754017] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.777644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.799819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.806758] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.809454] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.809563] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.811630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.811633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.816145] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.819376] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.821130] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.822550] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.833426] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.840535] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.865221] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.866531] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.867273] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.868766] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.870070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.875093] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.894094] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.895203] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.907206] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.915482] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.940623] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.971314] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.983358] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.985358] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.011964] Bluetooth: hci0: command tx timeout [ 217.268012] Bluetooth: hci1: command tx timeout [ 217.843993] Bluetooth: hci2: command tx timeout [ 217.844994] Bluetooth: hci6: command tx timeout [ 217.908121] Bluetooth: hci4: command tx timeout [ 217.973090] Bluetooth: hci3: command tx timeout [ 218.164136] Bluetooth: hci7: command tx timeout [ 218.164538] Bluetooth: hci5: command tx timeout [ 219.060031] Bluetooth: hci0: command tx timeout [ 219.316108] Bluetooth: hci1: command tx timeout [ 219.892095] Bluetooth: hci6: command tx timeout [ 219.893752] Bluetooth: hci2: command tx timeout [ 219.956453] Bluetooth: hci4: command tx timeout [ 220.020067] Bluetooth: hci3: command tx timeout [ 220.212099] Bluetooth: hci7: command tx timeout [ 220.213587] Bluetooth: hci5: command tx timeout [ 221.109053] Bluetooth: hci0: command tx timeout [ 221.364887] Bluetooth: hci1: command tx timeout [ 221.940610] Bluetooth: hci2: command tx timeout [ 221.942536] Bluetooth: hci6: command tx timeout [ 222.006039] Bluetooth: hci4: command tx timeout [ 222.068922] Bluetooth: hci3: command tx timeout [ 222.260019] Bluetooth: hci5: command tx timeout [ 222.261734] Bluetooth: hci7: command tx timeout [ 223.988118] Bluetooth: hci6: command tx timeout [ 223.988668] Bluetooth: hci2: command tx timeout [ 224.052022] Bluetooth: hci4: command tx timeout [ 224.116029] Bluetooth: hci3: command tx timeout [ 224.308948] Bluetooth: hci5: command tx timeout [ 224.309017] Bluetooth: hci7: command tx timeout [ 275.273204] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.281341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.288217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.304185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.308667] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.310279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.338997] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.342125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.346111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.363698] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.366352] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.367612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.404508] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.406375] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.414429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.423490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.425332] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.428040] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.464442] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.470180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.473063] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.478298] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.485273] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.487475] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.518689] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.522090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.525997] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.538208] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.540206] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.541563] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.585520] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.588350] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.589598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.595182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.598081] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.604035] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.646175] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.651513] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.658004] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.674415] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.682673] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.692392] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.709521] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.740353] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.741211] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.747943] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.751603] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.772365] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.364000] Bluetooth: hci0: command tx timeout [ 277.445880] Bluetooth: hci1: command tx timeout [ 277.492933] Bluetooth: hci2: command tx timeout [ 277.557097] Bluetooth: hci3: command tx timeout [ 277.620915] Bluetooth: hci4: command tx timeout [ 277.684065] Bluetooth: hci5: command tx timeout [ 277.813001] Bluetooth: hci6: command tx timeout [ 277.875984] Bluetooth: hci7: command tx timeout [ 279.412992] Bluetooth: hci0: command tx timeout [ 279.476926] Bluetooth: hci1: command tx timeout [ 279.541179] Bluetooth: hci2: command tx timeout [ 279.606152] Bluetooth: hci3: command tx timeout [ 279.669498] Bluetooth: hci4: command tx timeout [ 279.734033] Bluetooth: hci5: command tx timeout [ 279.860046] Bluetooth: hci6: command tx timeout [ 279.925183] Bluetooth: hci7: command tx timeout [ 281.461099] Bluetooth: hci0: command tx timeout [ 281.524001] Bluetooth: hci1: command tx timeout [ 281.589084] Bluetooth: hci2: command tx timeout [ 281.652925] Bluetooth: hci3: command tx timeout [ 281.717036] Bluetooth: hci4: command tx timeout [ 281.780989] Bluetooth: hci5: command tx timeout [ 281.907988] Bluetooth: hci6: command tx timeout [ 281.973123] Bluetooth: hci7: command tx timeout [ 283.509005] Bluetooth: hci0: command tx timeout [ 283.573164] Bluetooth: hci1: command tx timeout [ 283.636978] Bluetooth: hci2: command tx timeout [ 283.700093] Bluetooth: hci3: command tx timeout [ 283.766012] Bluetooth: hci4: command tx timeout [ 283.828936] Bluetooth: hci5: command tx timeout [ 283.957033] Bluetooth: hci6: command tx timeout [ 284.021676] Bluetooth: hci7: command tx timeout [ 302.047299] hrtimer: interrupt took 4517627 ns [ 337.753796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.760538] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.763204] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.764406] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.766898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.767635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.770110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.772313] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.774435] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.776214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.778530] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.781039] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.856037] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.860062] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.865921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.885165] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.887750] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.891213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.924349] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.927216] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.933079] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.941103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.943218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.947214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.952518] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.955371] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.958029] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.998601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.000667] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.006106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.009452] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.029770] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.032071] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.040354] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.045126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.055036] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.058396] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.064028] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.067280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.098065] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.121924] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.128701] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.169544] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.180292] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.188543] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.206022] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.212406] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.217033] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.828096] Bluetooth: hci0: command tx timeout [ 339.830032] Bluetooth: hci1: command tx timeout [ 339.956122] Bluetooth: hci2: command tx timeout [ 340.021140] Bluetooth: hci4: command tx timeout [ 340.085131] Bluetooth: hci3: command tx timeout [ 340.212056] Bluetooth: hci5: command tx timeout [ 340.342026] Bluetooth: hci6: command tx timeout [ 340.469879] Bluetooth: hci7: command tx timeout [ 341.877421] Bluetooth: hci0: command tx timeout [ 341.878715] Bluetooth: hci1: command tx timeout [ 342.004911] Bluetooth: hci2: command tx timeout [ 342.068939] Bluetooth: hci4: command tx timeout [ 342.134908] Bluetooth: hci3: command tx timeout [ 342.260930] Bluetooth: hci5: command tx timeout [ 342.389079] Bluetooth: hci6: command tx timeout [ 342.515928] Bluetooth: hci7: command tx timeout [ 343.925959] Bluetooth: hci0: command tx timeout [ 343.926512] Bluetooth: hci1: command tx timeout [ 344.052899] Bluetooth: hci2: command tx timeout [ 344.116217] Bluetooth: hci4: command tx timeout [ 344.182867] Bluetooth: hci3: command tx timeout [ 344.307998] Bluetooth: hci5: command tx timeout [ 344.435975] Bluetooth: hci6: command tx timeout [ 344.565069] Bluetooth: hci7: command tx timeout [ 345.972974] Bluetooth: hci1: command tx timeout [ 345.973531] Bluetooth: hci0: command tx timeout [ 346.100190] Bluetooth: hci2: command tx timeout [ 346.165064] Bluetooth: hci4: command tx timeout [ 346.229928] Bluetooth: hci3: command tx timeout [ 346.357014] Bluetooth: hci5: command tx timeout [ 346.487139] Bluetooth: hci6: command tx timeout [ 346.612124] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 05:25:16 Registers: info registers vcpu 0 RAX=ffff8880346a0380 RBX=ffff88802c6a1f20 RCX=ffffffff8199b181 RDX=ffff888033b89b80 RSI=ffffffff8199fb90 RDI=0000000000000004 RBP=0000000000000000 RSP=ffff888023b5fec8 R8 =0000000000000000 R9 =ffffed10058d43e3 R10=0000000000000000 R11=0000000000000000 R12=ffff88802c6a1e00 R13=ffff8880346a0380 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8199fb93 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1eef06dec8 CR3=00000000193d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffffff85c6d740 RCX=ffffffff81525945 RDX=ffff88803607d280 RSI=ffffffff8152583d RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88806cf09a08 R8 =0000000000000000 R9 =fffffbfff0fdc5e4 R10=0000000000000001 R11=00000000000c36d9 R12=00007ffb50b1eec0 R13=0000000000000000 R14=ffffffff85c6d7e8 R15=ffff888018e63000 RIP=ffffffff81525844 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ffb50705540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffb50b1eec0 CR3=000000002c240000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000