Warning: Permanently added '[localhost]:39149' (ECDSA) to the list of known hosts.
2025/06/15 13:56:18 fuzzer started
2025/06/15 13:56:18 dialing manager at localhost:42061
syzkaller login: [  109.454560] cgroup: Unknown subsys name 'net'
[  109.587565] cgroup: Unknown subsys name 'cpuset'
[  109.626968] cgroup: Unknown subsys name 'rlimit'
2025/06/15 13:56:35 syscalls: 211
2025/06/15 13:56:35 code coverage: enabled
2025/06/15 13:56:35 comparison tracing: enabled
2025/06/15 13:56:35 extra coverage: enabled
2025/06/15 13:56:35 setuid sandbox: enabled
2025/06/15 13:56:35 namespace sandbox: enabled
2025/06/15 13:56:35 Android sandbox: enabled
2025/06/15 13:56:35 fault injection: enabled
2025/06/15 13:56:35 leak checking: enabled
2025/06/15 13:56:35 net packet injection: enabled
2025/06/15 13:56:35 net device setup: enabled
2025/06/15 13:56:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/15 13:56:35 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/15 13:56:35 USB emulation: enabled
2025/06/15 13:56:35 hci packet injection: enabled
2025/06/15 13:56:35 wifi device emulation: enabled
2025/06/15 13:56:35 802.15.4 emulation: enabled
2025/06/15 13:56:35 fetching corpus: 0, signal 0/0 (executing program)
2025/06/15 13:56:37 starting 8 fuzzer processes
13:56:37 executing program 0:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc860}, 0x44000)
socketpair(0x15, 0x1, 0x1, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4080010)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0x718, 0x9, 0x6, 0x100}, {0x33, 0x2, 0x6, 0x400}, {0x9, 0x90, 0x6, 0x3}, {0x20, 0x7f, 0x1f, 0x1}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={<r4=>0x0})
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x80803, 0x0)
ioctl$CDROMSEEK(r5, 0x5316, &(0x7f00000003c0)={0x7, 0xca, 0x3, 0x5, 0xe4, 0xf0})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x21, 0x70bd26, 0x4, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x24000044)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x240400d0)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x8800, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000680)={r4, 0x7, 0xff})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000006c0)=[@timestamp, @window={0x3, 0x7fff, 0x7}, @window={0x3, 0x401, 0x65ed}], 0x3)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6_vti0\x00', <r9=>0x0, 0x4, 0x0, 0x2, 0x9, 0x21, @private0, @local, 0x10, 0x8000, 0x12c8}})
sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}, 0x1, 0x0, 0x0, 0x48040}, 0x10)
sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000000d80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000900)={0x43c, 0x3f3, 0x20, 0x70bd25, 0x25dfdbfd, {0x0, 0x2, 0x30, [0x8, 0xc96, 0x8eeb, 0xd70, 0x1, 0x80000001, 0x1ff, 0x4, 0xf5, 0x4, 0x3, 0xffffffff, 0x0, 0x7ff, 0x2, 0x8, 0x1, 0x9, 0x5, 0xfffffffb, 0x0, 0x8, 0x1ff, 0x3, 0x100, 0x1, 0x6, 0xfffffffb, 0xffffffe0, 0x0, 0x7ff, 0x0, 0x4, 0x1, 0xffff, 0xab5, 0xffffffff, 0x1, 0x200, 0x7, 0x67c, 0x8f4, 0x4, 0x1, 0x19, 0x28d1, 0x5, 0x53, 0x2, 0x7, 0x7fffffff, 0x81, 0x8000, 0xffffffff, 0x3, 0x1, 0x1bf, 0x3f, 0x1, 0xfffffffd, 0x1, 0x93, 0xa8c2e7d, 0x8], [0x1, 0x20, 0x80000001, 0xa, 0x3, 0x9, 0x1, 0x8001, 0x4fe50e72, 0x8, 0x80, 0x0, 0x6, 0x7ff, 0x3, 0x2, 0x5, 0x7fff, 0x7fff, 0x4c, 0x940000, 0x8, 0x200, 0x4, 0x10000, 0x6, 0x200, 0x200, 0xfffffffe, 0x8, 0x1, 0x4, 0x3, 0x8, 0x34, 0x7fffffff, 0x6, 0x3, 0x7fff, 0x0, 0x40, 0x6, 0x4, 0x4, 0x9, 0x7, 0xf8, 0x10001, 0x7, 0x5, 0x0, 0x80000001, 0x7, 0x8, 0x3, 0xcd6, 0x8001, 0x0, 0xd, 0x80000001, 0x80, 0x9, 0x5, 0x8000], [0x5, 0x0, 0x9, 0x9f0, 0xfffffffa, 0x5, 0x2, 0x7, 0x9, 0x8, 0x5, 0xaf09, 0x9, 0x3, 0x4, 0x0, 0x5a, 0x0, 0x80000001, 0x5, 0x2, 0x200, 0x0, 0x8, 0x1000, 0xd85, 0x4, 0x1, 0x9, 0x9, 0x401, 0xf2fbd34, 0x4, 0x8, 0x4, 0x9c2, 0x1, 0x7, 0x8, 0x3, 0x8, 0x10001, 0x1, 0x1, 0x7f, 0xb74, 0x1000, 0x4, 0x0, 0x2, 0x6, 0xcf, 0x7, 0x9, 0xffffff88, 0xffff, 0x2, 0x9ce, 0x3f, 0x3f, 0x8, 0x3ff, 0x2, 0x959], [0x1ff, 0x5, 0x3, 0x630, 0x0, 0x4, 0x101, 0x7f, 0x8000, 0x6c5, 0xfff, 0x7, 0x7, 0x0, 0x80000, 0x400, 0x2, 0x10000, 0x8, 0x10000, 0x1, 0x3, 0x2, 0x6, 0x0, 0x80000000, 0x6, 0x80000001, 0x101, 0x2, 0xffff, 0x1, 0x9, 0x4, 0x3f, 0x401, 0x26e9, 0x0, 0xc0000000, 0x8001, 0xfffffffb, 0x1, 0x8, 0x3, 0x5, 0x231e, 0x6, 0x4, 0x800000, 0x6, 0x5a, 0xfb, 0x2, 0x20, 0x3, 0x3, 0x0, 0x400, 0xffffffff, 0x74f, 0xffffffff, 0x3, 0x1f, 0x1], 0x1a, ['\'\\!^\x00', '*-.{^C\x00', '\\@[((%{\x00', '/\x06\xbc{\x00', '\x00']}, ["", "", "", "", "", "", "", ""]}, 0x43c}}, 0x4000)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000dc0))
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000e40)=@req={0x28, &(0x7f0000000e00)={'bridge0\x00', @ifru_ivalue}})

13:56:37 executing program 1:
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x200, 0x9, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4004801)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4014)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x1c}}, 0x800)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000014)
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f2, 0x10, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40041}, 0x4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xdf}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4002}, 0x20000000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x84)
socketpair(0x21, 0xa, 0x8, &(0x7f0000000780)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x80}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80000}, 0x200000d0)
sendmsg$AUDIT_USER(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x3ed, 0x20, 0x70bd2a, 0x25dfdbfe, "00db11ffd32e0db3f17ef772c9f23c7be28e4b", [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r3 = accept(r2, &(0x7f00000009c0)=@xdp, &(0x7f0000000a40)=0x80)
sendmsg$AUDIT_TRIM(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10, 0x3f6, 0x408, 0x70bd2b, 0x25dfdbfd, "", ["", ""]}, 0x10}}, 0x20004810)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r1)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000800)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r5, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x81}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xc1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40814}, 0x4000011)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x20, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x50080}, 0x4)
sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x10, 0x3f8, 0x110, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x10)

13:56:37 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80060001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000845}, 0x4000)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x86000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4008010)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x38}}, 0x1)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x26000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r1, 0x20d, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8450}, 0x4000000)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffd}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x80)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
ioctl$CDROMVOLREAD(0xffffffffffffffff, 0x5313, &(0x7f00000005c0))
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x480d0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x5, 0x70, 0xde, 0x0, 0x0, 0x8, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000700), 0x6}, 0x840, 0xfffffffffffffff9, 0x3, 0x3, 0x0, 0x3ff, 0x4, 0x0, 0x7, 0x0, 0x3}, 0x0, 0xe, 0xffffffffffffffff, 0x1)
mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000d, 0x1010, r2, 0x9)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80020820}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x4000040)
ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f00000008c0)={0x9, 0x7f, 0x5, 0x5, 0x2f, 0x5})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x74, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048800}, 0x81)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x1a0, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x160, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f27552f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x723d272}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b778b74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50442dfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4816a7e3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e0903ed}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36079ff1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53568594}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59a7b742}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dc9e8a0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3391f6d3}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f845970}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26f2a9fa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24b2aef0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73fa8a64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bea5de2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x44010}, 0x20000844)

13:56:37 executing program 3:
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000))
r0 = perf_event_open(&(0x7f0000000080)={0xc7d9fc2fd892a576, 0x80, 0x0, 0x7f, 0x6, 0x2, 0x0, 0x15, 0x40, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x12090, 0x7, 0x2, 0x5, 0x800, 0x1, 0x800, 0x0, 0x9d85, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x1)
r1 = getpgid(0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3, 0x4, 0x3, 0x80, 0x0, 0xffffffff, 0x0, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x1e4f, 0x5}, 0x2400, 0x3, 0x2a8, 0x1, 0x7, 0x4, 0x101, 0x0, 0x650, 0x0, 0x4}, r1, 0x3, r0, 0x0)
socketpair(0x8, 0x2, 0x8, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$AUDIT_TRIM(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f6, 0x2, 0x70bd2d, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
ptrace$peekuser(0x3, r1, 0x8)
pidfd_open(r1, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0)
r6 = perf_event_open$cgroup(&(0x7f0000000300)={0x3, 0x80, 0x72, 0x1, 0x1, 0x6, 0x0, 0x7, 0x6690, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000002c0), 0x4}, 0xa000, 0x1, 0x0, 0x9, 0x38, 0x401, 0xfffc, 0x0, 0xff, 0x0, 0x2}, r5, 0x9, r2, 0x4)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000003c0)=""/105, 0x69)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x20)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000440)=""/59, 0x3b)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xec, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xc8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc5cd}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70d5b057}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x424716be}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9a06f6a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x278}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a7f705c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe5e6}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa7cbc99}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xedfb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd36c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f5b3f83}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e8ae025}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87a3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ea9843e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33142f81}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a6ce07b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x185da82c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dd72d5e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38254647}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x4004805}, 0x40010)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x7, 0xb6, 0x1f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7e1, 0x0, @perf_config_ext={0x6, 0xffff}, 0x400c, 0x2, 0x5438, 0x2, 0x9, 0x10000, 0x40, 0x0, 0x1ff, 0x0, 0x1}, r1, 0x0, r6, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10008004}, 0x10000005)
perf_event_open$cgroup(&(0x7f0000000840)={0x5, 0x80, 0xff, 0x0, 0x7f, 0x51, 0x0, 0x3, 0x200, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000800), 0xe}, 0x410, 0x8000, 0x0, 0x0, 0x7, 0x101, 0xfff, 0x0, 0x4}, r5, 0x3, r2, 0x4)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_GET(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000041}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x3f8, 0x400, 0x70bd28, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40084}, 0x800)
ptrace$poke(0x5, r1, &(0x7f00000009c0), 0x7)

[  128.060012] audit: type=1400 audit(1749995797.467:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:56:37 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x2, 0x1, 0x5d, 0x23}, {0xa5, 0x0, 0x9, 0x3}, {0x5, 0x1b, 0x80, 0x200}, {0x101, 0x1, 0x4a}, {0x2, 0x40, 0x88, 0x5}, {0x7, 0x7, 0x8, 0x1f66}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={0x0, 0x5, 0x2})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000140)="8e77eebd0f2e8c48d2d8af233bc37fd2", 0x10)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
bind$bt_sco(r3, &(0x7f00000001c0)={0x1f, @none}, 0x8)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14)
connect$bt_sco(r3, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r4 = accept4(r3, &(0x7f00000002c0)=@sco={0x1f, @none}, &(0x7f0000000340)=0x80, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000380)=""/12, &(0x7f00000003c0)=0xc)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x6)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000540), 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0xf153, 0x8, 0xbb, 0x5}]})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r6, &(0x7f0000000600)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000640)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

13:56:37 executing program 5:
prctl$PR_SET_TIMERSLACK(0x1d, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ptrace$peekuser(0x3, 0x0, 0x4)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x288, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7ff}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x640000c0}, 0x8810)
sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x4)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, 0x453, 0x20, 0x70bd29, 0x25dfdbfe, "0ae4ed59175c9216df2fb482f10c4a472dd5a6b840396f3d39fe07f059c3c14f595eb0887d4c7e97809cc7e177073a9ecc8ab7e37918c7abef1c709a47e5af0ead14200aeda057088c0a889fed25c630b28b8fe506595f9b1d0ad597330a43feaf6ea0d9f6d76536b9275b47a4af218ce6f4b0d975c6095d007c15e8c7a5e18a2e8b8fff58c7247a1af24e052a266b36c75ad658e2158689bda1f5e01ed31d2837fe34256db1fbc7ff438b14533b20bcaa6b8f", ["", "", "", "", ""]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004854}, 0xc000)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
r1 = accept(r0, &(0x7f0000000580)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000600)=0x80)
setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000640)=0x9, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6gre0\x00', <r2=>0x0, 0x29, 0xff, 0x80, 0x4, 0x42, @remote, @empty, 0x20, 0x10, 0x5, 0x10001}})
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x44)
r3 = getpgid(0x0)
ptrace$peek(0x1, r3, &(0x7f0000000840))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', <r4=>r2, 0x2f, 0x2, 0x5, 0x3d, 0x20, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x80, 0x4, 0xfffffffa}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl2\x00', r4, 0x2f, 0x7f, 0x6, 0x400, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8000, 0x7820, 0x4, 0x2}})
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x120, r5, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x68, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23953c43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x632814d9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2adcd7c2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69ab85e0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2359acbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21a0c9f9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x80, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61bd48ac}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c09dd99}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4cae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18381a0a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fa1c286}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeea9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7611}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1590}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bf3ee95}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb38e}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1df3a62e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b84e992}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000015}, 0x20000000)
ptrace$poke(0x5, r3, &(0x7f0000000c80), 0x4)

13:56:37 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004091}, 0x40044)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20001010}, 0x8004)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68701d08}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c7f6c6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20e811a0}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x646761e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x648240e2}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040048}, 0x4000000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000006c0)={'wpan4\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x20040000)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000840)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40040)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x14)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x24060001)

13:56:37 executing program 7:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000080)=0x80)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf0}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x58}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl1\x00', <r1=>0x0, 0x2f, 0xfb, 0x0, 0xfffffeff, 0x20, @private0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x48, 0x80, 0x3e, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', r1, 0x2f, 0x0, 0x40, 0x7fff, 0x5, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x20, 0x1, 0x6}})
unshare(0x10000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x60}}, 0x20048011)
unshare(0x8020000)
unshare(0x18020a00)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r3)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000780)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'sit0\x00', r5, 0x29, 0x40, 0x1f, 0x2, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}, @private0, 0x8000, 0x8, 0x3, 0x80}})
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000d40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f00000008c0)={0x42c, 0x3f3, 0x100, 0x70bd29, 0x25dfdbfc, {0x10, 0x2, 0xd, [0x5, 0x0, 0x100, 0x6, 0x34, 0x5, 0x3, 0x4, 0x0, 0x8, 0x6, 0x1, 0x1a0ce18d, 0xfc000000, 0x1, 0xffff8001, 0x20, 0x81, 0x6, 0x401, 0xfffffffe, 0x6, 0x9, 0x8001, 0x800, 0x6, 0x5, 0xb0, 0x5, 0x1, 0x7fffffff, 0x3, 0x6, 0x0, 0xfffffffe, 0x87, 0x1f, 0x7, 0xd9, 0x9, 0x48, 0x200, 0x3f, 0x0, 0x5, 0x4, 0x6, 0x3, 0x2, 0x6, 0x1, 0x13ff, 0x3f, 0x81, 0x0, 0xffffffff, 0x4, 0x0, 0xcbad, 0x9, 0x3, 0x80000000, 0x6, 0x80000000], [0x8, 0x101, 0x0, 0x80000001, 0x7fff, 0x101, 0x18000000, 0x64b887a, 0x9, 0x4, 0x3, 0xb9, 0x400, 0x8, 0x101, 0x0, 0x80, 0x1, 0x10000, 0x5, 0xb34, 0x4, 0x3, 0x5, 0x9, 0x7fff, 0xfffffff7, 0x0, 0x9, 0xffffffff, 0x9, 0x0, 0x0, 0x7, 0x3, 0x4, 0x9, 0x1e0, 0x5, 0x1, 0x7, 0x8, 0x2, 0x9, 0x2, 0x1f, 0x4, 0x0, 0x1, 0xe84, 0xf8a, 0x6, 0x5, 0x5, 0x3f, 0x1000, 0x4, 0x7, 0x80000001, 0x7, 0x7, 0x4, 0x1ff, 0x6], [0x80, 0x0, 0x4, 0x9, 0x6, 0x6, 0x1f, 0x2, 0x80000001, 0x6, 0x7, 0x3, 0xe6, 0x7fff, 0x20, 0x7ff, 0xfffff801, 0x40, 0x1, 0x7, 0x61, 0x9, 0x8001, 0xffffff7f, 0x3, 0x4385c2b6, 0x0, 0x9ce, 0x8, 0x3, 0x7f, 0x131, 0x101, 0x8, 0x4, 0x4, 0x5131, 0x0, 0x40, 0x2, 0x0, 0x21, 0x1ff, 0x2, 0xfff, 0x81, 0x7, 0x156508dd, 0x5, 0x1, 0x3, 0x80, 0x8000, 0xc63, 0x8, 0x2, 0x400, 0x80000000, 0xa8f9, 0x1000, 0x100, 0x8b, 0x10000, 0xffff8001], [0xfffff000, 0x6, 0xff, 0x0, 0x1c000000, 0xffffff7f, 0x7f, 0x9, 0x8, 0xef, 0x800, 0x400, 0x4, 0x52b, 0x9, 0x836c, 0x80, 0x8000, 0x8, 0xb959, 0x7b27380d, 0x8, 0x329e9615, 0x3, 0x2f5f3a4f, 0x7, 0x4, 0x7f, 0x200, 0x1, 0x1, 0x710f6517, 0x9, 0x3087, 0xfff, 0x10001, 0x3, 0x100, 0x1, 0x2, 0x1, 0x5, 0xfffffff8, 0x400, 0x9dd6, 0x7, 0x4, 0x5, 0x1, 0x7, 0x82fb, 0x20, 0x3f, 0x4, 0x80000001, 0x9, 0x3, 0x10000, 0x4, 0x81, 0x2, 0x4d8a, 0x8, 0x6], 0xc, ['\x00', '%\x00', 'mptcp_pm\x00']}, ["", "", "", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004040)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), r3)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, r6, 0x10, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c010}, 0x800)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000ec0), 0x1000, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

[  129.591923] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  129.595094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  129.598450] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  129.600527] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  129.602032] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  129.603710] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  129.604577] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  129.606191] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  129.609453] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  129.613840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  129.619081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  129.620962] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  129.628218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  129.629640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  129.640824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  129.661977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  129.670291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  129.675515] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  129.687923] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  129.691802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  129.693368] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  129.694694] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  129.698027] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  129.703268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  129.705024] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  129.707476] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  129.709037] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  129.712565] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  129.714366] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  129.724035] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  129.725029] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  129.726621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  129.728489] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  129.729651] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  129.731959] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  129.734857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  129.739962] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  129.749045] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  129.752123] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  129.755165] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  131.663573] Bluetooth: hci1: command tx timeout
[  131.724936] Bluetooth: hci0: command tx timeout
[  131.725111] Bluetooth: hci2: command tx timeout
[  131.788778] Bluetooth: hci6: command tx timeout
[  131.788790] Bluetooth: hci7: command tx timeout
[  131.788934] Bluetooth: hci4: command tx timeout
[  131.789415] Bluetooth: hci5: command tx timeout
[  131.852784] Bluetooth: hci3: command tx timeout
[  133.709958] Bluetooth: hci1: command tx timeout
[  133.772944] Bluetooth: hci0: command tx timeout
[  133.773840] Bluetooth: hci2: command tx timeout
[  133.838235] Bluetooth: hci6: command tx timeout
[  133.839410] Bluetooth: hci5: command tx timeout
[  133.840372] Bluetooth: hci4: command tx timeout
[  133.841268] Bluetooth: hci7: command tx timeout
[  133.900807] Bluetooth: hci3: command tx timeout
[  135.757803] Bluetooth: hci1: command tx timeout
[  135.820971] Bluetooth: hci0: command tx timeout
[  135.821388] Bluetooth: hci2: command tx timeout
[  135.885221] Bluetooth: hci5: command tx timeout
[  135.885636] Bluetooth: hci6: command tx timeout
[  135.886472] Bluetooth: hci4: command tx timeout
[  135.887046] Bluetooth: hci7: command tx timeout
[  135.948929] Bluetooth: hci3: command tx timeout
[  137.804762] Bluetooth: hci1: command tx timeout
[  137.869210] Bluetooth: hci2: command tx timeout
[  137.869646] Bluetooth: hci0: command tx timeout
[  137.933064] Bluetooth: hci4: command tx timeout
[  137.933494] Bluetooth: hci7: command tx timeout
[  137.934104] Bluetooth: hci6: command tx timeout
[  137.934513] Bluetooth: hci5: command tx timeout
[  137.996848] Bluetooth: hci3: command tx timeout
[  189.431172] syz-executor.0 (284) used greatest stack depth: 24640 bytes left
[  191.413907] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  191.418801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  191.421192] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  191.429588] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  191.438791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  191.527293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  191.534639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  191.537375] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  191.541267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  191.543020] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  191.545404] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  191.549450] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  191.554373] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  191.556067] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  191.565027] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  191.656120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  191.658986] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  191.661449] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  191.674834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  191.684161] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  191.768511] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  191.773539] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  191.775451] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  191.798130] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.802822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.820167] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  191.827373] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  191.832002] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  191.843527] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  191.852268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  191.975142] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  191.979556] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  191.981776] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  191.992103] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  191.994079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  191.996772] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  192.005586] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  192.029180] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  192.049503] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  192.069137] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  193.484956] Bluetooth: hci0: command tx timeout
[  193.612799] Bluetooth: hci2: command tx timeout
[  193.612879] Bluetooth: hci1: command tx timeout
[  193.804750] Bluetooth: hci3: command tx timeout
[  193.938101] Bluetooth: hci5: command tx timeout
[  193.938156] Bluetooth: hci4: command tx timeout
[  194.061882] Bluetooth: hci7: command tx timeout
[  194.124777] Bluetooth: hci6: command tx timeout
[  195.535963] Bluetooth: hci0: command tx timeout
[  195.660741] Bluetooth: hci2: command tx timeout
[  195.660788] Bluetooth: hci1: command tx timeout
[  195.852769] Bluetooth: hci3: command tx timeout
[  195.980735] Bluetooth: hci5: command tx timeout
[  195.982074] Bluetooth: hci4: command tx timeout
[  196.110055] Bluetooth: hci7: command tx timeout
[  196.172747] Bluetooth: hci6: command tx timeout
[  197.582092] Bluetooth: hci0: command tx timeout
[  197.708845] Bluetooth: hci1: command tx timeout
[  197.712698] Bluetooth: hci2: command tx timeout
[  197.900764] Bluetooth: hci3: command tx timeout
[  198.028751] Bluetooth: hci4: command tx timeout
[  198.028814] Bluetooth: hci5: command tx timeout
[  198.158310] Bluetooth: hci7: command tx timeout
[  198.222067] Bluetooth: hci6: command tx timeout
[  199.628833] Bluetooth: hci0: command tx timeout
[  199.757718] Bluetooth: hci2: command tx timeout
[  199.758142] Bluetooth: hci1: command tx timeout
[  199.949756] Bluetooth: hci3: command tx timeout
[  200.076758] Bluetooth: hci4: command tx timeout
[  200.077845] Bluetooth: hci5: command tx timeout
[  200.205751] Bluetooth: hci7: command tx timeout
[  200.269733] Bluetooth: hci6: command tx timeout
[  253.599440] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  253.605172] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  253.607819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  253.615426] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  253.620576] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  253.741395] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  253.748918] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  253.750364] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  253.767264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  253.773745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  253.872201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  253.877919] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  253.879571] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  253.888985] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  253.898054] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  254.008155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  254.017131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  254.020415] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  254.057799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  254.064340] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  254.070492] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  254.072179] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  254.094039] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  254.094443] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  254.101491] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  254.102381] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  254.104733] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  254.115517] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  254.117446] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  254.119192] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  254.125300] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  254.127570] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  254.128266] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  254.130869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  254.135548] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  254.143397] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  254.145383] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  254.148063] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  254.192263] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  254.212004] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  255.693947] Bluetooth: hci0: command tx timeout
[  255.821786] Bluetooth: hci1: command tx timeout
[  255.949946] Bluetooth: hci2: command tx timeout
[  256.206794] Bluetooth: hci6: command tx timeout
[  256.207455] Bluetooth: hci3: command tx timeout
[  256.397814] Bluetooth: hci5: command tx timeout
[  256.397908] Bluetooth: hci7: command tx timeout
[  256.460731] Bluetooth: hci4: command tx timeout
[  257.741404] Bluetooth: hci0: command tx timeout
[  257.870064] Bluetooth: hci1: command tx timeout
[  257.998014] Bluetooth: hci2: command tx timeout
[  258.254757] Bluetooth: hci3: command tx timeout
[  258.255208] Bluetooth: hci6: command tx timeout
[  258.444759] Bluetooth: hci5: command tx timeout
[  258.446262] Bluetooth: hci7: command tx timeout
[  258.509743] Bluetooth: hci4: command tx timeout
[  259.789733] Bluetooth: hci0: command tx timeout
[  259.917536] Bluetooth: hci1: command tx timeout
[  260.045727] Bluetooth: hci2: command tx timeout
[  260.303807] Bluetooth: hci6: command tx timeout
[  260.303834] Bluetooth: hci3: command tx timeout
[  260.493044] Bluetooth: hci7: command tx timeout
[  260.493256] Bluetooth: hci5: command tx timeout
[  260.557182] Bluetooth: hci4: command tx timeout
[  261.837099] Bluetooth: hci0: command tx timeout
[  261.964740] Bluetooth: hci1: command tx timeout
[  262.093450] Bluetooth: hci2: command tx timeout
[  262.348930] Bluetooth: hci3: command tx timeout
[  262.348999] Bluetooth: hci6: command tx timeout
[  262.540972] Bluetooth: hci5: command tx timeout
[  262.541978] Bluetooth: hci7: command tx timeout
[  262.604805] Bluetooth: hci4: command tx timeout
[  316.386314] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  316.396305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  316.401259] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  316.409524] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  316.416250] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  316.455276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  316.461412] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  316.465507] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  316.474571] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  316.481230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  316.540328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  316.559040] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  316.575933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  316.584968] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  316.589496] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  316.631044] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  316.638260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  316.645279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  316.665490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  316.682148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  316.796811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  316.811285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  316.821454] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  316.830611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  316.835284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  316.876299] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  316.901354] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  316.923600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  316.932235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  316.940369] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  317.125212] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  317.137193] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  317.173429] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  317.175023] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  317.185241] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  317.199353] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  317.223028] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  317.234916] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  317.267734] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  317.303211] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  318.477048] Bluetooth: hci0: command tx timeout
[  318.541872] Bluetooth: hci1: command tx timeout
[  318.669742] Bluetooth: hci2: command tx timeout
[  318.797808] Bluetooth: hci3: command tx timeout
[  319.052946] Bluetooth: hci5: command tx timeout
[  319.117070] Bluetooth: hci4: command tx timeout
[  319.372875] Bluetooth: hci6: command tx timeout
[  319.500733] Bluetooth: hci7: command tx timeout
[  320.525103] Bluetooth: hci0: command tx timeout
[  320.589012] Bluetooth: hci1: command tx timeout
[  320.716785] Bluetooth: hci2: command tx timeout
[  320.844757] Bluetooth: hci3: command tx timeout
[  321.101060] Bluetooth: hci5: command tx timeout
[  321.165687] Bluetooth: hci4: command tx timeout
[  321.420753] Bluetooth: hci6: command tx timeout
[  321.550009] Bluetooth: hci7: command tx timeout
[  322.572839] Bluetooth: hci0: command tx timeout
[  322.637855] Bluetooth: hci1: command tx timeout
[  322.764962] Bluetooth: hci2: command tx timeout
[  322.892779] Bluetooth: hci3: command tx timeout
[  323.148904] Bluetooth: hci5: command tx timeout
[  323.213874] Bluetooth: hci4: command tx timeout
[  323.469717] Bluetooth: hci6: command tx timeout
[  323.597973] Bluetooth: hci7: command tx timeout
[  324.620802] Bluetooth: hci0: command tx timeout
[  324.685931] Bluetooth: hci1: command tx timeout
[  324.812748] Bluetooth: hci2: command tx timeout
[  324.940766] Bluetooth: hci3: command tx timeout
[  325.196773] Bluetooth: hci5: command tx timeout
[  325.260786] Bluetooth: hci4: command tx timeout
[  325.516747] Bluetooth: hci6: command tx timeout
[  325.644901] Bluetooth: hci7: command tx timeout
[  378.859005] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  378.866835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  378.873229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  378.881098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  378.892057] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  378.918744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  378.936135] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  378.941121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  378.949943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  378.953621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  379.058812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  379.066375] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  379.069479] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  379.108414] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  379.121405] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  379.131642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  379.136229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  379.163011] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  379.189746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  379.207325] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  379.224397] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  379.232050] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  379.236631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  379.251466] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  379.299163] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  379.394792] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  379.397082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  379.411025] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  379.418009] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  379.419992] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  379.428341] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  379.430347] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  379.435988] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  379.475007] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  379.478004] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  379.480894] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  379.484217] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  379.489933] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  379.494769] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  379.507203] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  380.941893] Bluetooth: hci0: command tx timeout
[  381.004737] Bluetooth: hci1: command tx timeout
[  381.260839] Bluetooth: hci2: command tx timeout
[  381.261582] Bluetooth: hci3: command tx timeout
[  381.452758] Bluetooth: hci4: command tx timeout
[  381.517749] Bluetooth: hci6: command tx timeout
[  381.580731] Bluetooth: hci5: command tx timeout
[  381.644728] Bluetooth: hci7: command tx timeout
[  382.989527] Bluetooth: hci0: command tx timeout
[  383.053719] Bluetooth: hci1: command tx timeout
[  383.308851] Bluetooth: hci3: command tx timeout
[  383.309338] Bluetooth: hci2: command tx timeout
[  383.500782] Bluetooth: hci4: command tx timeout
[  383.566700] Bluetooth: hci6: command tx timeout
[  383.628800] Bluetooth: hci5: command tx timeout
[  383.693047] Bluetooth: hci7: command tx timeout
[  385.037693] Bluetooth: hci0: command tx timeout
[  385.100862] Bluetooth: hci1: command tx timeout
[  385.356770] Bluetooth: hci2: command tx timeout
[  385.357250] Bluetooth: hci3: command tx timeout
[  385.549723] Bluetooth: hci4: command tx timeout
[  385.612746] Bluetooth: hci6: command tx timeout
[  385.676773] Bluetooth: hci5: command tx timeout
[  385.740743] Bluetooth: hci7: command tx timeout
[  387.085019] Bluetooth: hci0: command tx timeout
[  387.148986] Bluetooth: hci1: command tx timeout
[  387.404787] Bluetooth: hci3: command tx timeout
[  387.405279] Bluetooth: hci2: command tx timeout
[  387.596760] Bluetooth: hci4: command tx timeout
[  387.661069] Bluetooth: hci6: command tx timeout
[  387.725084] Bluetooth: hci5: command tx timeout
[  387.789684] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
14:01:46  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff8880167bfc18 RCX=ffff8880167bf81c RDX=0000000000000002
RSI=ffffffff85c1cc40 RDI=ffff888035bad280 RBP=ffffffff85c1cc40 RSP=ffff8880167bf7f8
R8 =ffffffff86869368 R9 =ffff8880167bf908 R10=000000000003b4ed R11=0000000000024996
R12=ffffffff81354012 R13=ffff8880167bf81c R14=0000000000000002 R15=0000000000000002
RIP=ffffffff81513eba RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fc7b9db7540 00000000 00000000
GS =0000 ffff8880e562f000 00000000 00000000
LDT=0000 fffffe0600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005564fa99a008 CR3=000000000ed6c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150
XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffff88802711fea0 RDX=1ffffffff0b04760
RSI=ffffffff81b7657c RDI=00007f05663da9b0 RBP=00007f05663da9b0 RSP=ffff88802711fdd8
R8 =0000000000000001 R9 =0000000000000001 R10=000001ffffffffff R11=0000000000000000
R12=0000000000000001 R13=0000000000000001 R14=ffff88802711fea0 R15=ffffffff85823b00
RIP=ffffffff81b76591 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e572f000 00000000 00000000
LDT=0000 fffffe2800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f05663b3020 CR3=000000002e03e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000ffffff000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000