Warning: Permanently added '[localhost]:22764' (ECDSA) to the list of known hosts.
2025/06/10 15:00:50 fuzzer started
2025/06/10 15:00:51 dialing manager at localhost:40003
syzkaller login: [  116.513285] cgroup: Unknown subsys name 'net'
[  116.647934] cgroup: Unknown subsys name 'cpuset'
[  116.674546] cgroup: Unknown subsys name 'rlimit'
2025/06/10 15:01:13 syscalls: 211
2025/06/10 15:01:13 code coverage: enabled
2025/06/10 15:01:13 comparison tracing: enabled
2025/06/10 15:01:13 extra coverage: enabled
2025/06/10 15:01:13 setuid sandbox: enabled
2025/06/10 15:01:13 namespace sandbox: enabled
2025/06/10 15:01:13 Android sandbox: enabled
2025/06/10 15:01:13 fault injection: enabled
2025/06/10 15:01:13 leak checking: enabled
2025/06/10 15:01:13 net packet injection: enabled
2025/06/10 15:01:13 net device setup: enabled
2025/06/10 15:01:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/10 15:01:13 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/10 15:01:13 USB emulation: enabled
2025/06/10 15:01:13 hci packet injection: enabled
2025/06/10 15:01:13 wifi device emulation: enabled
2025/06/10 15:01:13 802.15.4 emulation: enabled
2025/06/10 15:01:13 fetching corpus: 0, signal 0/0 (executing program)
2025/06/10 15:01:15 starting 8 fuzzer processes
15:01:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x20000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20004040)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, 0x0, 0x804, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x420000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd0, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000740), 0x200, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a00)={0xa8, 0x0, &(0x7f0000000840)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x101}, @fda={0x66646185, 0x7, 0x0, 0x38}}, &(0x7f0000000700)={0x0, 0x18, 0x30}}, 0x40}, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000780)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x0, 0x2, 0x2c}, @fda={0x66646185, 0x5, 0x2, 0x2d}}, &(0x7f0000000800)={0x0, 0x18, 0x38}}}], 0xcf, 0x0, &(0x7f0000000900)="75b9c452d4b070600d2849c528b1e720f4786a1c8d5456c01577faff0ae05aaf5993c375c461da1ad80674d28bf08ad2753d8d7560c6afb2104888f808125f9ca5829ac56a91a51520a0af4af2b25d4aa5d9b60b79c09c2802937c6ed8cdda6e050caaa4da1990dd938cb99b9b8c316754f56b390e9d744c5315f922a2eed9a02ff3b7997ed73abeccc7182a82e40351585d5037effe8f933d41b43bc91682f5aafde90e4736d3dcaf85fa6d603f1b0c50175d9e705a76686fcfd4d2c111945e3e653a652c9e4423b8b958c3fca65b"})
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000a40), 0x80102, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r0)
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4001)
r8 = io_uring_setup(0x1c36, &(0x7f0000000bc0)={0x0, 0x2ee3, 0x1, 0x2, 0x103, 0x0, r6})
io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000c40)=r2, 0x1)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, r9, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000e00)={'vxcan0\x00', <r10=>0x0})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000)

15:01:15 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/107, 0x6b, 0x1, &(0x7f0000000080)=""/126, 0x7e}, &(0x7f0000000140)=0x40)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x3b1440, 0x21)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4080)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000300))
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x4)
r3 = accept4$inet(r1, 0x0, &(0x7f0000000440), 0x80000)
pipe2$9p(&(0x7f0000000500)={<r4=>0xffffffffffffffff}, 0x84000)
r5 = openat$cgroup_procs(r1, &(0x7f0000000540)='tasks\x00', 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2080000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}, {@fscache}, {@version_9p2000}, {@loose}, {@cache_none}, {@debug={'debug', 0x3d, 0x5}}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, '.log\x00'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@hash}, {@dont_measure}]}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x622, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb66}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc8cb}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20050001)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x70, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4044c10}, 0x4040000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r3)
sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000ac0)={&(0x7f0000000940), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x88, r8, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcc}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x80)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r1)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x15c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x20, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffff9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x800}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x60, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffc1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1011}, 0x40841)

15:01:15 executing program 2:
getsockname(0xffffffffffffffff, &(0x7f0000000000)=@nl, &(0x7f0000000080)=0x80)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xd1218}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x81)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000280))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000300)=0x1)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000340)='.log\x00', 0x200002, 0x22)
ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000380))
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000003c0))
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'veth1\x00'})
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000440))
mknodat$loop(r2, &(0x7f0000000480)='./file0\x00', 0xc000, 0x0)
write$tun(r2, &(0x7f00000004c0)={@void, @void, @mpls={[{0xfffff}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x2}, {0xec}, {0x70000}, {0x800, 0x0, 0x1}], @llc={@llc={0xf8, 0x6, "18ab", "5d5dbc86bd4da7a1def9c17964251088694318071af4d5832aac92156be6ca3f4afe28552b3d740436492dea031cbc149ef9f5a9f56c3be8c94c7a5133f22df01ec4bd8b45e940c3fec2d9ef64f6911e1a35a57cdaf6b1f7235b202bdc620ebeee2d436b37b0700aa15ceefd7e09143ef4debfb19c9b87707a83dc750d055a06b0b166067766fd47cd07208ecd15dd8a6e8953bd6a7a00021e9386c94605f1a4268bfd2a70ebf6d7d6a7239d032b3497a33a49dda1e0bad7aff0d96779cb4bcb8ca56e1744ada35e4d782e6555723f26579185f299b3b040b79a2c4efb1b564962950e"}}}}, 0x103)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa)
syz_mount_image$tmpfs(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x8, 0x2, &(0x7f0000000800)=[{&(0x7f0000000680)="28aa4752df1cb43959ec023a84251b10510128a0b46e9152344c6dd9a0662565568921ea82790baab922d0651fac6318d5d49a62b59d8fdd214f6760c1e0cc0f427248b5e352729dfec6a18529f48416a029202e0a268602bd4ed28f41d3231e06b2f695a361507f838e413de7b885c53e4a08d7a09a3cce14c98d247865e2c46879632cd54b09171e49eee2f7fb4ab05209bdb729df5be81f128a6f26ec3f772cfb5d254a7894d7023578788d7ef571b8a7c0684a15c68cf11fdeb2f4d6a4df53c4b570033f647e498b4e9f202216ed19ad7a6ce37cd8c824524e1b6ec1a3d8017c8ab0f91aad5ee33007241d4255239b81190a2a", 0xf5, 0x7}, {&(0x7f0000000780)="e5b98b3ffc2bcc707a2d9f237030cc697abdb0fc7393ec19da97eded7a8f82ae680e9ff0e59a7a2685c57ddf57f574320d7a329cdbdfd31289352004369a48d0e927b9a85d3d1b2d30b193ed9c90ee63f2809ec6f245ed79ba7f0345b6aaca85e287b10bd3", 0x65, 0x2}], 0x1, &(0x7f0000000840)={[{@huge_never}, {@huge_always}], [{@smackfsroot={'smackfsroot', 0x3d, 'veth1\x00'}}]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x40a600, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f00000008c0)="22c55a4b1076df01bbb8d6f63c4a80b5ebb94b4d15a3a9895b92bc5223ac5448a699c0b365443767bac161a96818cb09a703c40bfb341da7d296567bef4c26ea861cd98b4fe65450d2881c6580aac13aeb9c66953930d989f71561427b7d8dce8da076a4e922ab4ba83f7f938777f1e0d1d9636388961c081f0269e1dce6a4206b06079d3b7c98f5202cc84121364a6752c65243eccea806f994928a994bbadd20f1ccda734cbd95a3891bceb0fc3929e008a5ab16171286ad723447d0597b77bc71e738692960268376c6713a98cd966eb85d31b9e54eabfe97020cfc8e84319f561b4cd4bcffc11eea42b45ae50bf3cbf9ad88bb", 0xf5, 0x20008804, &(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, r0)

15:01:15 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfd, 0x2, &(0x7f00000010c0)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="cb1fd47ea63bf89d02f7", 0xa, 0x5}], 0x0, &(0x7f0000001100)={[{@dmode={'dmode', 0x3d, 0x6}}, {@nojoliet}, {@map_acorn}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@check_relaxed}, {@overriderock}], [{@context={'context', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '[/.)*&'}}, {@dont_appraise}, {@appraise}]})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x4c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x135e508d509530b}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x48010)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x1)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001440), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x6c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8}, 0x20004086)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x58, r1, 0x41149a9cb758655, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xcce7}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x40)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000016c0), 0x40641, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000001700))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001740), r3)
io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x15)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001840), 0x40141, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40040)
accept4$inet(r4, &(0x7f0000001980)={0x2, 0x0, @private}, &(0x7f00000019c0)=0x10, 0x80000)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000001a00), 0x980, 0x0)
mknodat$null(r5, &(0x7f0000001a40)='./file0\x00', 0x1000, 0x103)
ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000001a80)={0x3, 0x800, "1b526e", 0x0, 0x1})
sendto$unix(r4, &(0x7f0000001ac0)="5d31f8929abaebd22ba7dd1d2afda2827f90d662901cf94e0b5c8ecba63aca35", 0x20, 0x41, &(0x7f0000001b00)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b80)={'wpan3\x00'})

[  140.176425] audit: type=1400 audit(1749567675.174:7): avc:  denied  { execmem } for  pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
15:01:15 executing program 5:
clock_gettime(0x3, &(0x7f0000000000))
semtimedop(0x0, &(0x7f0000000040)=[{0x1, 0x6e, 0xe8a97c1b3ee1a48f}, {0x3, 0x9}, {0x2, 0x1, 0x1800}, {0x4, 0x2, 0x1000}], 0x4, &(0x7f0000000080))
semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0)
clock_getres(0x6, &(0x7f00000000c0))
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0xc0000, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)={0x0, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x0, 0x3, [{{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @loopback}}]}, 0x210)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4008080)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x64000000)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x240000c2}, 0x4001)
r4 = syz_mount_image$nfs(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x5, 0x4, &(0x7f0000000940)=[{&(0x7f0000000800)="137533c9ae852b8c2eab9a5b6a7cb4ed4c636b35ed0769e8b511d78bcfd5c6f7693c08c3ec44b34e87fbe15e47f74598ae56a73402e94490bb44271776cc3cf9b237887b816038a958cdc7f2", 0x4c, 0xffffffff}, {&(0x7f0000000880)="977ea5994ff9f53f79375cadaabb3a51beb6b1c8ad117c32b532afcac109e976f33f1f7e0039", 0x26, 0x1b2f68da}, {&(0x7f00000008c0)="0af6c816edeed96ea9d9951ed8b8639fb387e762c1b1683b7f", 0x19, 0x800}, {&(0x7f0000000900)="3c89052d49b68f0d7f6e70a57a59ff7ba546908ba3104dd57002f8e08aa4f39420e1621e28f7c9338638fad72f1d327961a97557b960b9efe9367e851297d192", 0x40, 0x2ceb}], 0x200400, &(0x7f00000009c0)={[{')&}d*'}, {'!'}, {'batadv\x00'}, {'wpan0\x00'}, {'-^'}], [{@obj_type}]})
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x404c040}, 0x80)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000b40))
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0)

15:01:15 executing program 4:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/89)
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000080)=""/181)
accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x80800)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', <r1=>r0, 0x7800, 0x1, 0x6, 0x7, {{0x14, 0x4, 0x3, 0x3a, 0x50, 0x68, 0x0, 0x20, 0x4, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0xd6, 0x3, 0x2, [{@empty, 0x8000}, {@broadcast, 0x2}, {@private=0xa010101, 0x4}, {@loopback, 0xe109}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x96, 0x0, 0x1, [0x7, 0xffffffe0, 0x7ff, 0x4]}]}}}}})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', r1, 0x8000, 0x0, 0x9, 0x1f, {{0x3c, 0x4, 0x0, 0x0, 0xf0, 0x64, 0x0, 0x40, 0x2f, 0x0, @broadcast, @loopback, {[@ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x44, 0x90, 0x1, 0x3, [{@private=0xa010100, 0x6}, {@local, 0x6}, {@loopback, 0x80000001}, {@multicast1, 0x8}, {@private=0xa010100, 0x40e3c34d}, {@remote, 0x7f}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x6}]}, @timestamp={0x44, 0x18, 0xd7, 0x0, 0x1, [0x0, 0x7a0a, 0x6, 0x10001, 0x5]}, @ssrr={0x89, 0xf, 0x91, [@multicast2, @empty, @loopback]}, @cipso={0x86, 0x45, 0x824f18d072cf0e59, [{0x5, 0x9, "d4becc8706d9ba"}, {0x2, 0xd, "52f311b723f7b081b87503"}, {0x0, 0x2}, {0x6, 0x7, "eb3dbfad1c"}, {0x0, 0xa, "fb8ba48d0c4aa6e0"}, {0x7, 0xd, "5d5baa090202cfe1b77cc2"}, {0x0, 0x9, "978e5b0d0e75ab"}]}, @timestamp_prespec={0x44, 0x24, 0x51, 0x3, 0x6, [{@multicast1, 0xffffffff}, {@multicast2}, {@local, 0x100}, {@multicast1, 0x3ff}]}, @end]}}}}})
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@initdev}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x800, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x22800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r4 = openat$incfs(r3, &(0x7f0000000680)='.pending_reads\x00', 0x632ba65b93c33dd4, 0x118)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000080)
r5 = openat$incfs(r4, &(0x7f00000007c0)='.pending_reads\x00', 0x101600, 0x101)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000800)={{{@in=@broadcast, @in6=@empty}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000900)=0xe8)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x41028}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000a40), 0x200000, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000b80)={0x10, 0x0, &(0x7f0000000a80)=[@request_death={0x400c630e, 0x2}], 0xb2, 0x0, &(0x7f0000000ac0)="2edfe3410a9bc5f86b495e939a170f6bbaa122f0d1d0194693a60460b01b056a4f046a21e93deaeba5aeae2a5be3a2adb8e1d1f01b374afb60dd71309a0eee17e87d3c996e8a692d7b7945365f1eb2bb898e03eff3b43cb36a11888daaba29a3c871294df6fa4cc167415e0984039abe396ce4293e7e4cc1cd4f7d808f4c6c88066612d5f7a0fdbe280a041f4ee788161b9abb9be2726578c4e141bd368905a141ae14f6261f89ebe1ef3f070ff501489237"})
socketpair(0xb, 0x80000, 0x4, &(0x7f0000000bc0))
r7 = accept4$inet(r3, &(0x7f0000000cc0)={0x2, 0x0, @local}, &(0x7f0000000d00)=0x10, 0x800)
setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0)

15:01:15 executing program 6:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, r0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x36dac0a30994c848}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x240080c0}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x20040000)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x18}}, 0x4000050)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r1, 0xa00, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x24080080}, 0x40001)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb8, r4, 0x1f, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x2004c010)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r2)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa8, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x88, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x2000c004)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xb0, r7, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x68}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x18}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x408a0}, 0x4)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x2400c810)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000c80))
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x2012)

15:01:15 executing program 7:
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1d7a34cf8866"}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}}, 0x4040801)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x300, 0xffffffff, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x38}, 0x1, 0x0, 0x0, 0x54}, 0x2000801d)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4b2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x30044041)
r2 = socket$inet(0x2, 0xa, 0x1)
accept$inet(r2, &(0x7f00000004c0)={0x2, 0x0, @multicast2}, &(0x7f0000000500)=0x10)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x400080, 0x0)
getsockopt$inet_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000580)=""/127, &(0x7f0000000600)=0x7f)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7b8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48e1}, 0x4000)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000880)={{0x67, @dev={0xac, 0x14, 0x14, 0x29}, 0x4e24, 0x1, 'sh\x00', 0x20, 0xb85, 0x4f}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x4e24, 0x2, 0x7ff, 0x1, 0x7ff}}, 0x44)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd8c7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9b06}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4e97}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40008014)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x541}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2a8fb2bbf2bef2e0}, 0x400)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x84, 0x0, 0x14, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040004}, 0x20008000)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24000040)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xc0, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xca}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x15}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x2000005)

[  141.656526] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  141.659616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  141.661683] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  141.663855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  141.669058] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  141.672978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  141.677961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  141.682577] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  141.685166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  141.685643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  141.687244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  141.688809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  141.689984] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  141.691761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  141.693126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  141.706533] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  141.706555] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  141.714044] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  141.721666] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  141.737417] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  141.743663] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  141.770286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  141.790986] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  141.790987] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  141.791909] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  141.798247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  141.804693] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  141.805228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  141.809172] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  141.812167] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  141.816958] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  141.820055] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  141.822289] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  141.841148] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  141.843212] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  141.873635] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  141.928970] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  141.932201] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  141.948306] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  141.953646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  143.799649] Bluetooth: hci3: command tx timeout
[  143.800649] Bluetooth: hci1: command tx timeout
[  143.801230] Bluetooth: hci2: command tx timeout
[  143.802351] Bluetooth: hci0: command tx timeout
[  143.990527] Bluetooth: hci4: command tx timeout
[  143.991319] Bluetooth: hci6: command tx timeout
[  143.991826] Bluetooth: hci5: command tx timeout
[  144.056740] Bluetooth: hci7: command tx timeout
[  145.846488] Bluetooth: hci3: command tx timeout
[  145.846585] Bluetooth: hci0: command tx timeout
[  145.846992] Bluetooth: hci2: command tx timeout
[  145.847436] Bluetooth: hci1: command tx timeout
[  146.038580] Bluetooth: hci5: command tx timeout
[  146.039958] Bluetooth: hci4: command tx timeout
[  146.039991] Bluetooth: hci6: command tx timeout
[  146.104264] Bluetooth: hci7: command tx timeout
[  147.894479] Bluetooth: hci1: command tx timeout
[  147.897452] Bluetooth: hci2: command tx timeout
[  147.897493] Bluetooth: hci0: command tx timeout
[  147.897957] Bluetooth: hci3: command tx timeout
[  148.086504] Bluetooth: hci6: command tx timeout
[  148.087020] Bluetooth: hci5: command tx timeout
[  148.087918] Bluetooth: hci4: command tx timeout
[  148.150883] Bluetooth: hci7: command tx timeout
[  149.942926] Bluetooth: hci0: command tx timeout
[  149.944731] Bluetooth: hci3: command tx timeout
[  149.946075] Bluetooth: hci2: command tx timeout
[  149.946423] Bluetooth: hci1: command tx timeout
[  150.134450] Bluetooth: hci4: command tx timeout
[  150.134760] Bluetooth: hci6: command tx timeout
[  150.135756] Bluetooth: hci5: command tx timeout
[  150.200457] Bluetooth: hci7: command tx timeout
[  201.811913] syz-executor.1 (291) used greatest stack depth: 24640 bytes left
[  204.623365] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  204.631495] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  204.633785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  204.641162] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  204.647190] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  204.743036] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  204.745176] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  204.750526] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  204.757670] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  204.767239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  204.774108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  204.779804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  204.780962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  204.783920] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  204.785658] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  204.788960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  204.789871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  204.794210] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  204.816482] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  204.833689] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  204.901103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  204.914114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  204.922008] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  204.954514] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  204.959778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  205.001039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  205.012793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  205.017799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  205.033916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  205.036683] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  205.164650] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  205.171079] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  205.178494] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  205.216077] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  205.219692] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  205.231017] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  205.235484] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  205.259955] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  205.268953] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  205.281652] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  206.710766] Bluetooth: hci0: command tx timeout
[  206.838520] Bluetooth: hci5: command tx timeout
[  206.838668] Bluetooth: hci1: command tx timeout
[  207.032395] Bluetooth: hci3: command tx timeout
[  207.032434] Bluetooth: hci4: command tx timeout
[  207.094430] Bluetooth: hci2: command tx timeout
[  207.288847] Bluetooth: hci6: command tx timeout
[  207.350713] Bluetooth: hci7: command tx timeout
[  208.758421] Bluetooth: hci0: command tx timeout
[  208.887487] Bluetooth: hci1: command tx timeout
[  208.887557] Bluetooth: hci5: command tx timeout
[  209.079459] Bluetooth: hci4: command tx timeout
[  209.079945] Bluetooth: hci3: command tx timeout
[  209.142783] Bluetooth: hci2: command tx timeout
[  209.334786] Bluetooth: hci6: command tx timeout
[  209.398768] Bluetooth: hci7: command tx timeout
[  210.808366] Bluetooth: hci0: command tx timeout
[  210.934762] Bluetooth: hci5: command tx timeout
[  210.935304] Bluetooth: hci1: command tx timeout
[  211.127401] Bluetooth: hci3: command tx timeout
[  211.127946] Bluetooth: hci4: command tx timeout
[  211.190489] Bluetooth: hci2: command tx timeout
[  211.382624] Bluetooth: hci6: command tx timeout
[  211.446434] Bluetooth: hci7: command tx timeout
[  212.854562] Bluetooth: hci0: command tx timeout
[  212.982883] Bluetooth: hci5: command tx timeout
[  212.982933] Bluetooth: hci1: command tx timeout
[  213.174531] Bluetooth: hci4: command tx timeout
[  213.175063] Bluetooth: hci3: command tx timeout
[  213.240367] Bluetooth: hci2: command tx timeout
[  213.430813] Bluetooth: hci6: command tx timeout
[  213.494709] Bluetooth: hci7: command tx timeout
[  267.274695] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  267.279657] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  267.285732] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  267.299135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  267.304705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  267.531181] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  267.535127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  267.538170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  267.546920] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  267.552667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  267.596448] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  267.605288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  267.608130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  267.624174] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  267.628735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  267.658992] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  267.666749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  267.676494] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  267.678974] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  267.681757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  267.686620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  267.718365] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  267.723926] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  267.730097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  267.737911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  267.765236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  267.770528] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  267.772011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  267.808996] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  267.812545] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  267.842655] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  267.893050] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  267.916508] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  267.930836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  267.950528] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  267.958740] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  267.961861] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  267.996711] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  267.998029] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  268.104783] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  269.367536] Bluetooth: hci0: command tx timeout
[  269.622696] Bluetooth: hci1: command tx timeout
[  269.754092] Bluetooth: hci4: command tx timeout
[  269.755041] Bluetooth: hci2: command tx timeout
[  269.878433] Bluetooth: hci3: command tx timeout
[  270.006494] Bluetooth: hci5: command tx timeout
[  270.071382] Bluetooth: hci6: command tx timeout
[  270.263543] Bluetooth: hci7: command tx timeout
[  271.417378] Bluetooth: hci0: command tx timeout
[  271.670943] Bluetooth: hci1: command tx timeout
[  271.798451] Bluetooth: hci2: command tx timeout
[  271.799971] Bluetooth: hci4: command tx timeout
[  271.926728] Bluetooth: hci3: command tx timeout
[  272.054408] Bluetooth: hci5: command tx timeout
[  272.118427] Bluetooth: hci6: command tx timeout
[  272.310610] Bluetooth: hci7: command tx timeout
[  273.462428] Bluetooth: hci0: command tx timeout
[  273.719456] Bluetooth: hci1: command tx timeout
[  273.846827] Bluetooth: hci2: command tx timeout
[  273.847465] Bluetooth: hci4: command tx timeout
[  273.974654] Bluetooth: hci3: command tx timeout
[  274.103003] Bluetooth: hci5: command tx timeout
[  274.166435] Bluetooth: hci6: command tx timeout
[  274.358477] Bluetooth: hci7: command tx timeout
[  275.512073] Bluetooth: hci0: command tx timeout
[  275.766447] Bluetooth: hci1: command tx timeout
[  275.894675] Bluetooth: hci2: command tx timeout
[  275.895832] Bluetooth: hci4: command tx timeout
[  276.024505] Bluetooth: hci3: command tx timeout
[  276.151540] Bluetooth: hci5: command tx timeout
[  276.214498] Bluetooth: hci6: command tx timeout
[  276.407901] Bluetooth: hci7: command tx timeout
[  329.958996] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  329.962126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  329.963653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  329.974811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  329.980114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  330.204683] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  330.209034] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  330.219052] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  330.227203] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  330.232848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  330.249477] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  330.251755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  330.257111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  330.262670] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  330.269654] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  330.401954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  330.408830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  330.419504] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  330.443725] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  330.459803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  330.466775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  330.477136] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  330.479748] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  330.498713] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  330.511190] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  330.513484] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  330.516665] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  330.520979] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  330.526882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  330.529533] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  330.535752] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  330.538615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  330.549110] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  330.562537] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  330.568741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  330.573005] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  330.618229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  330.621164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  330.651996] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  330.665288] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  332.087439] Bluetooth: hci0: command tx timeout
[  332.279634] Bluetooth: hci1: command tx timeout
[  332.342661] Bluetooth: hci2: command tx timeout
[  332.598447] Bluetooth: hci3: command tx timeout
[  332.666456] Bluetooth: hci7: command tx timeout
[  332.667058] Bluetooth: hci5: command tx timeout
[  332.726585] Bluetooth: hci4: command tx timeout
[  332.790481] Bluetooth: hci6: command tx timeout
[  334.134784] Bluetooth: hci0: command tx timeout
[  334.326592] Bluetooth: hci1: command tx timeout
[  334.391391] Bluetooth: hci2: command tx timeout
[  334.646708] Bluetooth: hci3: command tx timeout
[  334.715095] Bluetooth: hci5: command tx timeout
[  334.715611] Bluetooth: hci7: command tx timeout
[  334.776358] Bluetooth: hci4: command tx timeout
[  334.838637] Bluetooth: hci6: command tx timeout
[  336.182503] Bluetooth: hci0: command tx timeout
[  336.374447] Bluetooth: hci1: command tx timeout
[  336.440382] Bluetooth: hci2: command tx timeout
[  336.694685] Bluetooth: hci3: command tx timeout
[  336.759434] Bluetooth: hci7: command tx timeout
[  336.759472] Bluetooth: hci5: command tx timeout
[  336.823277] Bluetooth: hci4: command tx timeout
[  336.886679] Bluetooth: hci6: command tx timeout
[  338.231101] Bluetooth: hci0: command tx timeout
[  338.424721] Bluetooth: hci1: command tx timeout
[  338.486389] Bluetooth: hci2: command tx timeout
[  338.742521] Bluetooth: hci3: command tx timeout
[  338.806654] Bluetooth: hci7: command tx timeout
[  338.806847] Bluetooth: hci5: command tx timeout
[  338.870679] Bluetooth: hci4: command tx timeout
[  338.934550] Bluetooth: hci6: command tx timeout
[  393.086193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  393.114772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  393.116611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  393.119667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  393.120238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  393.124149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  393.131057] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  393.136456] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  393.140174] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  393.143435] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  393.238668] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  393.243727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  393.247997] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  393.255671] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  393.259914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  393.303910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  393.312778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  393.339657] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  393.346732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  393.351930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  393.373000] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  393.383703] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  393.389273] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  393.394548] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  393.394727] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  393.402165] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  393.405581] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  393.407892] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  393.434175] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  393.446721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  393.613088] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  393.629550] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  393.647191] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  393.663304] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  393.688472] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  394.313867] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  394.337027] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  394.338996] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  394.357260] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  394.359705] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  395.191038] Bluetooth: hci1: command tx timeout
[  395.191060] Bluetooth: hci0: command tx timeout
[  395.319446] Bluetooth: hci2: command tx timeout
[  395.510456] Bluetooth: hci5: command tx timeout
[  395.510577] Bluetooth: hci4: command tx timeout
[  395.574404] Bluetooth: hci3: command tx timeout
[  395.830491] Bluetooth: hci6: command tx timeout
[  396.535691] Bluetooth: hci7: command tx timeout
[  397.238638] Bluetooth: hci1: command tx timeout
[  397.238741] Bluetooth: hci0: command tx timeout
[  397.367713] Bluetooth: hci2: command tx timeout
[  397.560373] Bluetooth: hci4: command tx timeout
[  397.560592] Bluetooth: hci5: command tx timeout
[  397.623463] Bluetooth: hci3: command tx timeout
[  397.878420] Bluetooth: hci6: command tx timeout
[  398.583373] Bluetooth: hci7: command tx timeout
[  399.286775] Bluetooth: hci0: command tx timeout
[  399.287580] Bluetooth: hci1: command tx timeout
[  399.416368] Bluetooth: hci2: command tx timeout
[  399.606440] Bluetooth: hci4: command tx timeout
[  399.606469] Bluetooth: hci5: command tx timeout
[  399.670505] Bluetooth: hci3: command tx timeout
[  399.926487] Bluetooth: hci6: command tx timeout
[  400.631444] Bluetooth: hci7: command tx timeout
[  401.334478] Bluetooth: hci1: command tx timeout
[  401.336027] Bluetooth: hci0: command tx timeout
[  401.464444] Bluetooth: hci2: command tx timeout
[  401.654459] Bluetooth: hci4: command tx timeout
[  401.654489] Bluetooth: hci5: command tx timeout
[  401.718422] Bluetooth: hci3: command tx timeout
[  401.976373] Bluetooth: hci6: command tx timeout
[  402.678549] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
15:06:20  Registers:
info registers vcpu 0
RAX=ffff88803641fe01 RBX=ffff88803641fe00 RCX=0000000000000001 RDX=ffff888036420001
RSI=ffff88803641fde0 RDI=ffff88806ce08a88 RBP=ffff888036418000 RSP=ffff88806ce08a08
R8 =0000000000000001 R9 =ffff88806ce08ab8 R10=000000000003b6cd R11=0000000000007c98
R12=ffff88806ce08a01 R13=ffff88806ce08ac0 R14=ffff88803641fde0 R15=ffff88806ce08a78
RIP=ffffffff8135555c RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe6b00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8bc0c11008 CR3=0000000035d8a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff
XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f
XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff888016af9b80 RCX=0000000000001b4d RDX=0000000000001b4e
RSI=0000000000000008 RDI=ffffffff813b5b3c RBP=ffffffff85a0c110 RSP=ffff88806cf08f78
R8 =ffff888016af9b80 R9 =0000000000000001 R10=ffffffff8641f057 R11=0000000000000001
R12=0000000000000101 R13=0000000000000009 R14=0000000000000000 R15=0000000000000009
RIP=ffffffff813b5b3c RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe6b00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f05bc47d570 CR3=000000002d04b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000ff0000000000000000000000 XMM01=ffffffff00ffffffffffffffffffffff
XMM02=42494c4700342e332e325f4342494c47 XMM03=00000000000000000000000000006f72
XMM04=6f6c77725f646165726874705f5f0079 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000