Warning: Permanently added '[localhost]:44071' (ECDSA) to the list of known hosts.
2025/06/17 05:56:40 fuzzer started
2025/06/17 05:56:40 dialing manager at localhost:32817
syzkaller login: [   93.279896] cgroup: Unknown subsys name 'net'
[   93.420505] cgroup: Unknown subsys name 'cpuset'
[   93.465136] cgroup: Unknown subsys name 'rlimit'
2025/06/17 05:56:55 syscalls: 203
2025/06/17 05:56:55 code coverage: enabled
2025/06/17 05:56:55 comparison tracing: enabled
2025/06/17 05:56:55 extra coverage: enabled
2025/06/17 05:56:55 setuid sandbox: enabled
2025/06/17 05:56:55 namespace sandbox: enabled
2025/06/17 05:56:55 Android sandbox: enabled
2025/06/17 05:56:55 fault injection: enabled
2025/06/17 05:56:55 leak checking: enabled
2025/06/17 05:56:55 net packet injection: enabled
2025/06/17 05:56:55 net device setup: enabled
2025/06/17 05:56:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/17 05:56:55 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/17 05:56:55 USB emulation: enabled
2025/06/17 05:56:55 hci packet injection: enabled
2025/06/17 05:56:55 wifi device emulation: enabled
2025/06/17 05:56:55 802.15.4 emulation: enabled
2025/06/17 05:56:55 fetching corpus: 0, signal 0/0 (executing program)
2025/06/17 05:56:57 starting 8 fuzzer processes
05:56:57 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt6_stats\x00')
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000180)="2f5de9477c0465b1a9ffcb15b88d0c567372d8cb3646936575e5ac3481c1de4212b842a00589b62b70b23c2d7309cf8bc2076481c8b2ce2d18364d34a02cca7647276a9116d1f8634ca7dd631f45be35626366785a04675b6c1bdc")
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff0001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfb}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x804)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048041}, 0x81)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe6a}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x26a)
r4 = fsmount(r0, 0x0, 0x72)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000840)={'wpan1\x00'})
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000880)={'wpan4\x00'})
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0)
ioctl$PTP_PIN_GETFUNC(r7, 0xc0603d06, &(0x7f0000000900)={'\x00', 0xe5, 0x2, 0x5})
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xe4, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2ff}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82d6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffb}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd4cf}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4044001)

05:56:57 executing program 1:
r0 = fsmount(0xffffffffffffffff, 0x0, 0x1)
ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0)
ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000000)={0x99, "6205d9bb8875ad9646c812ea162e9d3856c2da518fd71e65ced8dd0008dbe4d9b9948fa891e077e416f63219c2e261933a6a76c06a5543641da027d09c37d7bb398fc942fcae72276a825acbeee650a74693006efd70ab5593a7a03672144a82aa5ec23486bc6c98eac954ac43dd4b0a78044cb80b87eb2b1f6085775263c5a3fecb3c87da5148cd83a0db2fd7415c62d7ced9f2ac58074d55"})
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x440000)
ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x20, 0x10000)
ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000140)=0x2)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000180)=0x2)
syz_open_dev$hiddev(&(0x7f00000001c0), 0xf3, 0x4000)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000200)='ro\x00', 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='personality\x00')
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4)
r4 = fork()
getpgid(r4)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f00000002c0)={{0x2, 0x2, 0xed7, 0x527bde84, 0x101, 0x7}, 0x3e6, [0x8, 0x8000, 0x40, 0x6, 0x9, 0xffffff5f, 0x7, 0x3ff, 0x0, 0x401, 0x2c, 0x1, 0x80, 0x8, 0x81, 0x0, 0x80, 0x3699, 0x1, 0x400, 0x8000, 0x651e, 0x7, 0x3, 0x81, 0x7, 0x0, 0x1f, 0x5, 0x503, 0x8, 0x3, 0xa66, 0x4, 0x6, 0x18, 0xd8, 0xfffffffc, 0x9, 0x1000, 0x7fff, 0x10000, 0x800, 0x4, 0x0, 0x7, 0x1, 0x5, 0xffff8000, 0x3, 0x0, 0x0, 0x6, 0x0, 0x3, 0x5a, 0x3e, 0x1, 0x9, 0x3f, 0xc8e2, 0x1, 0x40, 0x4, 0x1, 0x9, 0xfffffffd, 0x100, 0x7fffffff, 0xffff7fff, 0xffff, 0xff, 0x7, 0x7fffffff, 0x10000, 0x7, 0x4, 0x3f, 0x0, 0x1, 0x5a24, 0x5, 0x1ff, 0x1, 0x1, 0x9c, 0x9, 0x3, 0x85a2, 0x5, 0x1, 0x2, 0x65, 0x7, 0x2, 0x10000000, 0x1, 0x796c, 0x40, 0x8, 0x8, 0x80000001, 0x5, 0x3, 0x200, 0xc0000000, 0x9, 0x9, 0x97a3, 0x8000, 0x4, 0x1, 0xe800000, 0x1, 0x1, 0x99f, 0x6, 0x80, 0x6, 0x7, 0x2, 0x0, 0x8, 0x4, 0x4, 0x0, 0x8af7, 0xff, 0x10, 0x2, 0x4, 0x4, 0x93, 0x8001, 0xffffffff, 0x3ff, 0x0, 0x8, 0x9, 0x5cff, 0x7, 0x7, 0x8, 0x0, 0x20, 0x1, 0x8, 0x8e, 0x1, 0x1, 0x2f3b, 0xd97a, 0x9, 0xeb32, 0x20, 0x7c83, 0x6, 0x2, 0x6, 0x6, 0x7, 0xcf6, 0x0, 0x7, 0x81, 0xfffffffe, 0x1, 0x1, 0x4, 0x2, 0xc148, 0x800, 0x0, 0x40, 0x200, 0x7fff, 0xe7, 0x9, 0x3, 0x7, 0x9, 0x1ff, 0xc67, 0x3, 0xfffff62b, 0x1000, 0x6, 0xda8c, 0x80, 0x6, 0x9, 0xfffffffd, 0x9, 0x1ff, 0x5, 0x6, 0x2aaa2099, 0x9, 0x3, 0xfff, 0x7f, 0x7, 0x1, 0x7, 0x3765, 0x519, 0x2d99, 0x80000000, 0x0, 0x101, 0x9, 0x5, 0x8, 0x2, 0xfffffffc, 0x8, 0x7, 0x7f, 0xece, 0x4, 0xe529, 0x4, 0x80000000, 0x1, 0x7de, 0xafa7, 0xfffffff8, 0x9, 0x3, 0x80000001, 0x7f, 0x9c, 0x3fe00, 0x120000, 0x800, 0x1f, 0x4, 0x1, 0x1, 0x9, 0x7fff, 0x7, 0x8, 0x6, 0x78e, 0x9, 0x7fff, 0x10000000, 0x1, 0x5, 0x401, 0x80000000, 0x3, 0xa0, 0x8, 0xff, 0xd071, 0x8001, 0xff, 0x2, 0xfe1, 0x1, 0x7fff, 0x3, 0x800, 0xdb6c, 0x4, 0x80000001, 0xffffffff, 0x81, 0x0, 0xfffffb8c, 0x4, 0x8, 0x3, 0x9, 0x0, 0x9, 0x7, 0x7fffffff, 0x1000, 0x3000, 0x0, 0x7fffffff, 0x2, 0x6, 0x7ff, 0x93, 0x7, 0x10001, 0x8000, 0x2, 0x1f, 0x6, 0x4e, 0x6, 0x2, 0x4, 0x7, 0x9, 0x81, 0x9, 0x8000, 0x55, 0x0, 0x0, 0x7, 0xffffffff, 0x8, 0x2000000, 0x80, 0x30, 0x2, 0x8, 0x8, 0x8, 0x2, 0x3, 0x5, 0x0, 0x1e57, 0x8, 0x3, 0x10001, 0xb86, 0x9, 0x80000000, 0x80000001, 0x101, 0x4, 0x5, 0x190, 0xa7, 0x3, 0x400, 0xd4ef, 0x36bdf9ff, 0x80, 0x0, 0x20, 0x2, 0x8, 0x80, 0x92d60000, 0x7f, 0x20, 0x5, 0x200, 0x4, 0x1f31, 0x8a, 0xfffffff9, 0xff, 0x6, 0x80000000, 0x10001, 0x6, 0x5, 0x2, 0xffffffff, 0x2a5, 0x1, 0x7fffffff, 0x7, 0x5, 0x4, 0x261b, 0x7ff, 0x3, 0x3, 0xffffffff, 0x0, 0x0, 0xffff, 0x1ff, 0x7f, 0x7ff, 0xcd07, 0x2, 0x0, 0x1, 0xf33f, 0x7b47, 0x2ce, 0x6, 0x800, 0x8, 0x2, 0x1, 0x80000001, 0x10001, 0x3, 0x5, 0x0, 0x10000, 0x644, 0x3d, 0xffffffff, 0x3, 0x5, 0xfffffff7, 0xff, 0x1f, 0x7fff, 0x81, 0xffffff80, 0x200, 0x1, 0x1, 0x7, 0x400, 0x81, 0xff, 0xffff, 0x7ff, 0x401, 0x1, 0x6, 0x1, 0x6, 0xe470, 0x2, 0x8000, 0x8, 0x100, 0x0, 0x10001, 0x5, 0x1f, 0x5, 0xe96e, 0x80000000, 0x7, 0xfffffffe, 0x9, 0x0, 0xfaeb, 0xc4, 0x401, 0x66, 0x1, 0x9, 0x0, 0x800, 0x7, 0x8, 0x84, 0x9, 0x3, 0x0, 0x9, 0x101, 0x9, 0xffff, 0x7, 0xda, 0x0, 0x1f, 0x5313, 0xfff, 0x74e, 0x6ac, 0x2, 0x1ff, 0x4, 0x20, 0xa8d, 0x0, 0x427a, 0x8, 0x87, 0x6a, 0xff, 0x1, 0x8, 0x6, 0x48b4208b, 0x8, 0x9, 0x4, 0x9, 0x4, 0xffffffff, 0x2, 0x9, 0x4, 0x5, 0x1, 0x1, 0x5, 0x1a, 0x5, 0x8001, 0x9, 0x8, 0x6, 0x2, 0x5, 0x80000001, 0x4, 0x5, 0x10000, 0x6d0, 0x1, 0xfffffff8, 0x9, 0x7, 0x8, 0x4, 0x7, 0x0, 0x0, 0x10001, 0xfffffff7, 0x8000, 0x9, 0x4, 0x1, 0xd6b, 0x9, 0x3, 0xffff, 0x0, 0xe5c2, 0x200, 0x5, 0x6, 0x0, 0x4, 0x6, 0x3ff, 0x3, 0xecd, 0xa4c, 0x5, 0x5, 0x0, 0x3, 0xffff, 0x3, 0x1, 0x10001, 0x2, 0x6, 0x80000001, 0x73, 0x8, 0x0, 0xfa, 0x1f, 0xffffffff, 0x9, 0xffffffff, 0x6e5, 0x40, 0x1, 0x7fff, 0x6, 0x4, 0xd1dbc0fa, 0xcd, 0x8001, 0x7, 0x101, 0x139d, 0x0, 0x1, 0x81, 0xddc9267, 0xfffeffff, 0xef1, 0x5, 0x7, 0xd34, 0x3, 0xfffffff7, 0xffffffac, 0x5, 0x7, 0xb, 0x5, 0xffffffff, 0xfffffff9, 0x80000000, 0x1, 0x4, 0x9, 0x7, 0x2, 0x2, 0x8898, 0x5, 0x100, 0x7, 0x8001, 0x1f, 0x9, 0xfffffffa, 0x1ff, 0x0, 0x120a, 0x81, 0x81, 0x0, 0xff, 0x5, 0x0, 0x2, 0x6, 0x0, 0x0, 0x3, 0x8, 0x61c, 0x0, 0x5, 0xa1b, 0x7, 0x0, 0x7f, 0x6, 0x9, 0x7, 0x3f, 0x2, 0x2, 0x0, 0x3f, 0x5e, 0xc0000000, 0x100, 0x9, 0x8, 0x40, 0x4, 0x0, 0xa31, 0x0, 0x9, 0x3, 0xce3, 0x6, 0x9, 0x48db, 0x1f, 0x0, 0x5, 0x9, 0x9, 0x45a, 0x8, 0x200, 0x7, 0x8000, 0x6, 0x6, 0x2, 0x1, 0x6, 0x2, 0x0, 0x908c, 0x8, 0x5824, 0x3, 0x308, 0x100, 0x5, 0x0, 0x7ff, 0x7, 0x6, 0x89dc, 0xff, 0x8001, 0x80000000, 0x8000000, 0xffffffff, 0x0, 0x8, 0x0, 0x2557, 0x0, 0x5, 0x9, 0x2, 0x360d7675, 0x8000000, 0x0, 0x7, 0x3, 0x3, 0x101, 0x4, 0xe86, 0x7ff, 0x0, 0x15d7bfe6, 0x0, 0x7, 0x9, 0x0, 0x600, 0x93, 0x7f, 0x4, 0xfffffff8, 0x27, 0x6, 0xf5, 0x10001, 0x20, 0x1, 0x1, 0x2, 0xfffffffb, 0x1f, 0x6, 0x2c, 0xffffffff, 0xffffffff, 0x5, 0x94, 0x5, 0x4, 0x5, 0x25bb, 0x0, 0x8, 0x1000, 0x5, 0x1, 0x4b42, 0x71e, 0xffffff00, 0xfffffffc, 0x3, 0x5d2b97d2, 0x80, 0x0, 0xe62a, 0x10000, 0x7, 0x1, 0x5, 0x7, 0x7, 0x6, 0x80000001, 0x3, 0x7f, 0x200, 0x7f, 0x5, 0x7, 0x5, 0x3, 0x4, 0x81, 0x53d, 0x6, 0x4df, 0x1, 0x0, 0x0, 0x6, 0x2e, 0x8, 0x81, 0x8, 0xb3, 0x5, 0x1, 0x3f, 0x7f, 0x0, 0x800, 0x1, 0xfffffffd, 0x3, 0x9, 0x8, 0x800, 0x3, 0x5, 0x3f, 0x6, 0x10000000, 0x8, 0x0, 0x0, 0x7fff, 0x5f1e, 0x1f, 0x8000, 0x6, 0xffffffff, 0xf8, 0xffffffff, 0x1, 0xf0d, 0xc01, 0xffff, 0x3, 0x1ff, 0x7518, 0x101, 0x9, 0x10000, 0x9, 0xe4d8, 0x6, 0x1, 0xb0119849, 0xfa, 0x0, 0x1, 0x7, 0xa2, 0x4, 0x1, 0xd71, 0x7, 0xfffff6f9, 0x0, 0x3, 0x3, 0x8001, 0x2, 0x9, 0x4, 0x9, 0x9, 0x1, 0x240000, 0x51, 0x9, 0x3, 0x7, 0x4, 0x40, 0x8, 0x8, 0xf711, 0x1, 0x7, 0x3, 0x0, 0x5, 0x80, 0x4, 0xffff1030, 0xfff, 0x3ff, 0x20, 0x9, 0x4, 0x10000, 0x6, 0x10000, 0x7fffffff, 0x3ff, 0x9, 0x6, 0xe6, 0x8, 0x8000, 0xffffff80, 0x4, 0x0, 0x8, 0x10001, 0x9, 0x4, 0x0, 0x5, 0x5, 0x0, 0x5, 0x7f, 0x9, 0x0, 0x40, 0x357, 0x5, 0x8000, 0x6, 0x3ff, 0x6, 0xd874, 0x9, 0x7, 0x800, 0x7fff, 0x0, 0x9, 0x7fffffff, 0x4, 0xffff0000, 0x8, 0xfffffff8, 0x7, 0x3, 0x80000001, 0x0, 0x3, 0x4, 0x7, 0x8ca, 0xfffffff7, 0xffffff80, 0x58, 0x6, 0xffff0000, 0x1, 0xa3, 0x800, 0xffff16ef, 0x80000000, 0x0, 0x2, 0x6, 0x8, 0x2, 0x8, 0x678e0f3b, 0x3, 0x8, 0x7ff, 0x3ff, 0x3, 0x288f, 0x2, 0x9, 0x0, 0x3, 0xff, 0x8302, 0x3ff, 0xcc2, 0x7f, 0x6, 0x1, 0x8, 0x40, 0x80000000, 0x2, 0x8, 0x2f5, 0x3ff, 0x3, 0x3, 0x2, 0x7, 0x8, 0x40, 0x10001, 0x9, 0xe0, 0x3cc, 0x2, 0x8001, 0x1, 0x0, 0x101, 0x1f, 0x3, 0x4, 0x3, 0xffffffff, 0x7, 0x8, 0x1ff, 0x4d740, 0x3, 0x612a0344, 0x4, 0xf5, 0x6ba, 0x4, 0x7fffffff, 0x7, 0x7, 0x0, 0x8000, 0x5, 0x8f5d, 0x5a, 0x4, 0x6, 0x9, 0x3f, 0x2, 0x101, 0x93, 0x5, 0x10000, 0x5, 0x1c, 0xcc52, 0x2, 0x0, 0x1, 0x3, 0x202, 0x4, 0x7, 0x8, 0x2, 0x2, 0xc77, 0x10001, 0x6, 0xfffffff9, 0xffffffff, 0xf1, 0x10001, 0x1, 0x1, 0x81, 0x4, 0x2, 0x3, 0x2]})
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000001300)=@ccm_128={{0x303}, "7c189924953696bf", "d88ea25bdd9fda7eb4750f75a025fa1d", "91541342", "d96f903c8418d4f0"}, 0x28)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r5, &(0x7f0000001380)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000013c0), &(0x7f0000001400)=0x14)

05:56:57 executing program 2:
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0x3, 0x4})
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x40, 0x1})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x4, 0x1}, 0x6)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@timestamp], 0x1)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0))
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200))
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/194, 0xc2, 0x1, &(0x7f0000000340)=""/26, 0x1a}, &(0x7f00000003c0)=0x40)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000400)=0x5, 0x4)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x30200, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000480)={0x5, 0x9})
ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000004c0)={0x15})
r2 = syz_open_procfs(0x0, &(0x7f0000000800)='net/sco\x00')
ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000840)=""/151)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = syz_open_procfs(0x0, &(0x7f0000000900)='net/nfsfs\x00')
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000940), 0x4)
ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000980))
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xe8, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64899bc7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc724267}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b334c3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33fe10ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x483a20c4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x540646e7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x759d51b2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7caa0e07}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x691a15d0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22160783}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x645ef7c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc74}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3351}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xe8}}, 0x0)

05:56:57 executing program 3:
r0 = semget$private(0x0, 0x0, 0x30)
semctl$IPC_RMID(r0, 0x0, 0x0)
r1 = semget$private(0x0, 0x4, 0x0)
semctl$IPC_INFO(r1, 0x1, 0x3, &(0x7f0000000000)=""/124)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
semtimedop(r1, &(0x7f0000000080)=[{0x3, 0x401, 0x800}, {0x1, 0x7}, {0x0, 0x8}, {0x656f4ed63acc12e6, 0x0, 0x1000}, {0x1, 0x1}, {0x2, 0x7, 0x1800}], 0x6, &(0x7f0000000100)={r2, r3+60000000})
clock_gettime(0x0, &(0x7f0000000200)={<r4=>0x0, <r5=>0x0})
pselect6(0x40, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x0, 0x1, 0x27e2, 0x8, 0x3}, &(0x7f0000000180)={0xb4, 0x7f, 0x4, 0x2b6e, 0x3, 0xffff, 0xffffffff, 0x2}, &(0x7f00000001c0)={0x9e2f, 0x9, 0x4, 0x81, 0x401, 0x8, 0xdd46, 0x1ff}, &(0x7f0000000240)={r4, r5+60000000}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x3f]}, 0x8})
r6 = semget$private(0x0, 0x4, 0x8)
semtimedop(r6, &(0x7f0000000300)=[{0x1, 0x9, 0x1000}, {0x1, 0x0, 0x1000}, {0x0, 0x2, 0x800}], 0x3, &(0x7f0000000340)={0x77359400})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008c4}, 0x8000)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r7)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
pselect6(0x40, &(0x7f0000000600)={0x0, 0x8, 0x58158d7c, 0xaee4, 0x7, 0x3, 0x0, 0x40}, &(0x7f0000000640)={0x7, 0x5, 0x12, 0x3, 0x7e0, 0x6d, 0x0, 0x10001}, &(0x7f0000000680)={0xf9, 0xffffffffffffffb8, 0x5, 0x3, 0x1, 0x1, 0x8001, 0xcf8}, &(0x7f00000006c0), &(0x7f0000000740)={&(0x7f0000000700)={[0x2]}, 0x8})
clock_gettime(0x5, &(0x7f0000000780))
semop(r1, &(0x7f00000007c0)=[{0x2, 0x3ff, 0x800}, {0x0, 0x0, 0x800}, {0x3, 0x6}, {0x0, 0xf801, 0x1000}, {0x3, 0x9, 0x1000}], 0x5)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000800), r7)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r7)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000880)=[0x6, 0x81, 0x9])

[  109.317002] audit: type=1400 audit(1750139817.150:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:56:57 executing program 4:
socketpair(0x25, 0xa, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r4 = fsmount(0xffffffffffffffff, 0x1, 0x6)
clock_gettime(0x0, &(0x7f0000000380)={<r5=>0x0, <r6=>0x0})
timerfd_settime(r4, 0x0, &(0x7f00000003c0)={{r5, r6+60000000}, {0x77359400}}, &(0x7f0000000400))
socketpair(0x22, 0x800, 0x225, &(0x7f00000005c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44004000}, 0xd49d3637afd74fe2)
ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000700)={0x1})
socketpair(0x2b, 0x1, 0x4, &(0x7f0000000a40)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, 0x0, 0x608, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}}, 0x40000)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r1)
sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x78, r11, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000f40)={'batadv_slave_0\x00', <r13=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r12, &(0x7f0000001040)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa1d}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x1)
ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000001080)={{0x401, 0x1}, {0x1f7, 0x7f}, 0x3000, 0x1})
ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f00000010c0)={'\x00', 0x2, 0x3, 0x2})

05:56:57 executing program 6:
pselect6(0x40, &(0x7f0000000000)={0xa1, 0xcb, 0x12, 0x97, 0x5, 0x1000, 0x3, 0x9}, &(0x7f0000000040)={0x8001, 0x9, 0x2, 0x3, 0x9, 0x40, 0x80, 0x4}, &(0x7f0000000080)={0x2, 0x1ff, 0x9c7c, 0x3ff, 0x1, 0x4, 0x100000001}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8})
r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000180)=""/234)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00')
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f00000003c0)=""/64)
r2 = semget$private(0x0, 0x4, 0x208)
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000400)=""/17)
r3 = semget$private(0x0, 0x1, 0x200)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000440)=[0x4, 0xfffc])
pselect6(0x40, &(0x7f0000000480)={0x2981, 0x7, 0x1, 0x7a3, 0x2, 0x9, 0x4, 0x6}, &(0x7f00000004c0)={0x2, 0x5, 0x0, 0x1, 0x20, 0xfff, 0x0, 0x3}, &(0x7f0000000500)={0x6, 0x6, 0x2dfb, 0x7, 0x9, 0x2, 0x2, 0x9}, &(0x7f0000000540)={0x0, 0x3938700}, &(0x7f00000005c0)={&(0x7f0000000580)={[0xffffffff]}, 0x8})
pselect6(0x40, &(0x7f0000000600)={0xfffffffffffffffa, 0x0, 0x20, 0x100000000, 0x3ff, 0x596, 0x9, 0x8}, &(0x7f0000000640)={0x340, 0x0, 0x1, 0x3, 0x10001, 0x5, 0x2, 0xffffffff}, &(0x7f0000000680)={0x40, 0x7ff, 0x468, 0x2, 0xfffffffffffffff8, 0x7, 0x1f, 0x2}, &(0x7f00000006c0)={0x0, 0x989680}, &(0x7f0000000740)={&(0x7f0000000700)={[0x5]}, 0x8})
shmctl$SHM_UNLOCK(r0, 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x10)
rt_sigaction(0x15, &(0x7f0000000980)={&(0x7f0000000900)="d042e565360f8d9006edf63e490f6ee30fff3098c4027d1700c4e27959a30b4500000fa54f00400f38cdb1000001000f01d7", 0x4, &(0x7f0000000940)="c4e17c770f3364f20fe69b000001008f09809a380f01d6360f38c929c481a77c2e430f72d301f3a7c48281296f00", {[0x100000001]}}, &(0x7f0000000a80)={&(0x7f00000009c0)="47c1b358f3000000f2430f1a7800c402e1b65aa9420f97c4c4a1a160230f0fd997660ff28af70f0002c4e2c5aa3066430f10cac4c2fd34cd", 0x0, &(0x7f0000000a00)="c4e2f9352de6368407c403d9ce4c02ae1af3440f5a73003e6465450f55a500100000c443fd00170fc4e2759de564f3af36677da2c4e1017cb665566666c442c1453b"}, 0x8, &(0x7f0000000ac0))
r6 = semget(0x1, 0x2, 0x200)
semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000b00)=[0x4, 0x5, 0x7, 0x8])
rt_sigaction(0x13, &(0x7f0000000bc0)={&(0x7f0000000b40)="26da2f660f630d0500000046a0bdc015fd916e6977c4a269475fb6c441d9562066460fe630c462c5bbc70f38038700f0ffff0fb6858f0b000026660f2c2436", 0xc0000000, &(0x7f0000000b80)="26f3a7c4a15f11da43ddef4719f5da3cba8a3d01000021c48108552a2e64660ff6f244e0c766400ff3f7", {[0x10001]}}, 0x0, 0x8, &(0x7f0000000c00))

05:56:57 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00')
fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/hci\x00')
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x1c}}, 0x24000000)
r7 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r1)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000480)='nv\x00', 0x3)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0), r3)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1a4, 0x0, 0x101, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x14c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75215d03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x62de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf7e160}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x439e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x589adecd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ec34150}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2900}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1190}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7aaa64e1}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x61da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25823516}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x798409b6}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x648bc881}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44097d92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe721}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31121d9a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6223}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5636}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x646cc7b3}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc59}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79f2f927}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c892719}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b58}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b9c8fdb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdbc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a8027a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f3d5dcf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96f6}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdb0adbd}]}, {0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5}, {0x5}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0xc0}, 0x41)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r9, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd16a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800)
syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r4)

05:56:57 executing program 7:
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4286462b85bc4523}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0xc1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:klogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:ld_so_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:adjtime_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0xdc}, 0x1, 0x0, 0x0, 0x44880}, 0x1)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x130, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x12}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2ac}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}]}, 0x130}}, 0x20000002)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000880), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x10000000)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x64}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048094}, 0x1)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x24, 0xffffffff, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40005)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r0)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000f00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c00)={0x2b4, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xc0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9c69db9d0a89be5ffe1de632bbc677c3"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "dc18c445565532b7f58c4ae5d4d3943f"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c17ac3af8f16852c8b562cdf0d5d6fc9"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "889ff7be65375e290fcd2a509ebe5f05"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xcb}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "68583be09b5edc793e82939a76315579fe53becb2645bec21c3c3781489d069d"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x78, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c77a77fcb785e703b1b20c94707043a86e4d4a5b4aa7fc3e18707452dc238ba5"}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3c}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1000}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xb8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "76813ce2cf545cc49362e9a2e13194d9152300a78285ab2ddc77cc9cb908d5e2"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e8d2e045c79fe3047f9379e574ebabbe7cac6002ef50397a5828d09e84db5811"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4bff51ab20af792bc8eb5e736c06ddf0ff4677d04306e53f6b2a44d2bdd54839"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7643e7b6939ae9bd1feda2ab8631f0c0533bb3d467086bdd33e559e8ef3ebb68"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "378b9eb12e3c8bcdc8900e726df3187eba1c0c461186a0fa81bce1cdedbf5eb5"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x88, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3f6075da67d3ee9406b4dca7c5a509d4"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xd1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d77b5409e257dde2b880de9c070952f5"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x8080}, 0x40)
semtimedop(0x0, &(0x7f0000000f40)=[{0x2, 0xfff, 0x800}, {0x4, 0x80, 0x1800}], 0x2, &(0x7f0000000f80))
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800)
semop(0x0, &(0x7f00000010c0)=[{0x0, 0x1, 0x1000}, {0x2, 0x5, 0x4c8f8bf81f377bcf}], 0x2)
semget(0x3, 0x0, 0x108)

[  110.801443] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  110.809399] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  110.813813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  110.816703] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  110.823002] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  110.827670] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  110.832697] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  110.840117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  110.853704] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  110.857279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  110.896898] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  110.911880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  110.938556] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  110.940578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  110.945811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  110.963897] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  110.966363] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  110.983961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  110.991211] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  110.993656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  110.999578] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  111.003406] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  111.003921] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  111.006934] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  111.010466] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  111.012598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  111.015611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  111.018315] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  111.022711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  111.025716] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  111.026268] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  111.030976] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  111.033778] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  111.035833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  111.039964] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  111.091052] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  111.144055] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  111.150347] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  111.212656] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  111.222194] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.877875] Bluetooth: hci1: command tx timeout
[  112.941364] Bluetooth: hci0: command tx timeout
[  113.133418] Bluetooth: hci6: command tx timeout
[  113.133643] Bluetooth: hci2: command tx timeout
[  113.197233] Bluetooth: hci3: command tx timeout
[  113.197291] Bluetooth: hci4: command tx timeout
[  113.198242] Bluetooth: hci7: command tx timeout
[  113.325189] Bluetooth: hci5: command tx timeout
[  114.927299] Bluetooth: hci1: command tx timeout
[  114.989438] Bluetooth: hci0: command tx timeout
[  115.181451] Bluetooth: hci2: command tx timeout
[  115.182313] Bluetooth: hci6: command tx timeout
[  115.245431] Bluetooth: hci4: command tx timeout
[  115.245934] Bluetooth: hci3: command tx timeout
[  115.247169] Bluetooth: hci7: command tx timeout
[  115.375284] Bluetooth: hci5: command tx timeout
[  116.973174] Bluetooth: hci1: command tx timeout
[  117.037319] Bluetooth: hci0: command tx timeout
[  117.229396] Bluetooth: hci6: command tx timeout
[  117.229520] Bluetooth: hci2: command tx timeout
[  117.293446] Bluetooth: hci4: command tx timeout
[  117.293905] Bluetooth: hci7: command tx timeout
[  117.294181] Bluetooth: hci3: command tx timeout
[  117.421462] Bluetooth: hci5: command tx timeout
[  119.021323] Bluetooth: hci1: command tx timeout
[  119.085455] Bluetooth: hci0: command tx timeout
[  119.277731] Bluetooth: hci6: command tx timeout
[  119.278036] Bluetooth: hci2: command tx timeout
[  119.341167] Bluetooth: hci3: command tx timeout
[  119.341627] Bluetooth: hci7: command tx timeout
[  119.342034] Bluetooth: hci4: command tx timeout
[  119.469940] Bluetooth: hci5: command tx timeout
[  171.085534] syz-executor.1 (283) used greatest stack depth: 24784 bytes left
[  173.370630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  173.378361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  173.383649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  173.391884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  173.397412] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  173.457875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  173.463591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  173.471642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  173.484116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  173.489202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  173.540147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  173.558711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  173.582323] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  173.589600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  173.596027] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  173.598672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  173.606756] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  173.611416] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  173.612501] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  173.616002] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  173.631559] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  173.633941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  173.641362] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  173.642418] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  173.656651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  173.657503] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  173.664968] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  173.670573] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  173.677494] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  173.683613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  173.685295] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  173.694772] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  173.700363] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  173.707465] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  173.708943] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  173.789237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  173.792956] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  173.799584] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  173.825545] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  173.834775] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  175.471159] Bluetooth: hci0: command tx timeout
[  175.597190] Bluetooth: hci1: command tx timeout
[  175.661339] Bluetooth: hci3: command tx timeout
[  175.725190] Bluetooth: hci4: command tx timeout
[  175.789181] Bluetooth: hci5: command tx timeout
[  175.790355] Bluetooth: hci6: command tx timeout
[  175.790433] Bluetooth: hci2: command tx timeout
[  175.918153] Bluetooth: hci7: command tx timeout
[  177.517256] Bluetooth: hci0: command tx timeout
[  177.647118] Bluetooth: hci1: command tx timeout
[  177.709260] Bluetooth: hci3: command tx timeout
[  177.773152] Bluetooth: hci4: command tx timeout
[  177.837340] Bluetooth: hci6: command tx timeout
[  177.837433] Bluetooth: hci2: command tx timeout
[  177.837760] Bluetooth: hci5: command tx timeout
[  177.965157] Bluetooth: hci7: command tx timeout
[  179.565195] Bluetooth: hci0: command tx timeout
[  179.693353] Bluetooth: hci1: command tx timeout
[  179.757162] Bluetooth: hci3: command tx timeout
[  179.821438] Bluetooth: hci4: command tx timeout
[  179.886141] Bluetooth: hci2: command tx timeout
[  179.886556] Bluetooth: hci5: command tx timeout
[  179.886955] Bluetooth: hci6: command tx timeout
[  180.013439] Bluetooth: hci7: command tx timeout
[  181.613719] Bluetooth: hci0: command tx timeout
[  181.742371] Bluetooth: hci1: command tx timeout
[  181.805164] Bluetooth: hci3: command tx timeout
[  181.869143] Bluetooth: hci4: command tx timeout
[  181.933311] Bluetooth: hci5: command tx timeout
[  181.933363] Bluetooth: hci6: command tx timeout
[  181.933764] Bluetooth: hci2: command tx timeout
[  182.061436] Bluetooth: hci7: command tx timeout
[  235.613374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  235.616456] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  235.619889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  235.623517] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  235.625885] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  235.630543] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  235.638607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  235.649975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  235.652500] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  235.656877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  235.770780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  235.773463] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  235.776892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  235.781544] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  235.785840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  235.913835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  235.924411] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  235.927064] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  235.939557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  235.958535] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  236.061558] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  236.090974] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  236.094124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  236.105529] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  236.108717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  236.193875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  236.202553] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  236.299580] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  236.307403] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  236.316575] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  236.326340] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  236.335342] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  236.392932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  236.399970] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  236.401366] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  236.405416] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  236.406183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  236.407465] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  236.420844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  236.437885] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  237.677392] Bluetooth: hci1: command tx timeout
[  237.741177] Bluetooth: hci0: command tx timeout
[  237.869866] Bluetooth: hci2: command tx timeout
[  237.997214] Bluetooth: hci3: command tx timeout
[  238.190123] Bluetooth: hci4: command tx timeout
[  238.445309] Bluetooth: hci5: command tx timeout
[  238.573439] Bluetooth: hci6: command tx timeout
[  238.574502] Bluetooth: hci7: command tx timeout
[  239.726915] Bluetooth: hci1: command tx timeout
[  239.790303] Bluetooth: hci0: command tx timeout
[  239.917979] Bluetooth: hci2: command tx timeout
[  240.047582] Bluetooth: hci3: command tx timeout
[  240.237164] Bluetooth: hci4: command tx timeout
[  240.495146] Bluetooth: hci5: command tx timeout
[  240.621470] Bluetooth: hci7: command tx timeout
[  240.622016] Bluetooth: hci6: command tx timeout
[  241.773153] Bluetooth: hci1: command tx timeout
[  241.837164] Bluetooth: hci0: command tx timeout
[  241.966377] Bluetooth: hci2: command tx timeout
[  242.094377] Bluetooth: hci3: command tx timeout
[  242.285150] Bluetooth: hci4: command tx timeout
[  242.542781] Bluetooth: hci5: command tx timeout
[  242.670386] Bluetooth: hci7: command tx timeout
[  242.670849] Bluetooth: hci6: command tx timeout
[  243.821195] Bluetooth: hci1: command tx timeout
[  243.886178] Bluetooth: hci0: command tx timeout
[  244.014136] Bluetooth: hci2: command tx timeout
[  244.142451] Bluetooth: hci3: command tx timeout
[  244.334363] Bluetooth: hci4: command tx timeout
[  244.590217] Bluetooth: hci5: command tx timeout
[  244.718207] Bluetooth: hci6: command tx timeout
[  244.718681] Bluetooth: hci7: command tx timeout
[  298.049055] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  298.052639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  298.058879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  298.065657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  298.070878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  298.235747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  298.238505] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  298.242567] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  298.251623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  298.256370] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  298.259894] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  298.262637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  298.266190] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  298.273750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  298.277210] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  298.399886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  298.414991] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  298.428770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  298.477201] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  298.481150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  298.484810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  298.493816] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  298.498345] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  298.498567] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  298.500581] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  298.505993] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  298.511571] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  298.519990] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  298.527590] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  298.537667] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  298.540989] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  298.546377] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  298.559336] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  298.563865] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  298.565974] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  298.577627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  298.583498] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  298.594722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  298.621438] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  298.635135] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  300.141264] Bluetooth: hci0: command tx timeout
[  300.333488] Bluetooth: hci1: command tx timeout
[  300.397192] Bluetooth: hci2: command tx timeout
[  300.589178] Bluetooth: hci3: command tx timeout
[  300.653331] Bluetooth: hci7: command tx timeout
[  300.654036] Bluetooth: hci5: command tx timeout
[  300.717418] Bluetooth: hci4: command tx timeout
[  300.781209] Bluetooth: hci6: command tx timeout
[  302.189440] Bluetooth: hci0: command tx timeout
[  302.381206] Bluetooth: hci1: command tx timeout
[  302.446277] Bluetooth: hci2: command tx timeout
[  302.637948] Bluetooth: hci3: command tx timeout
[  302.702450] Bluetooth: hci5: command tx timeout
[  302.702912] Bluetooth: hci7: command tx timeout
[  302.765189] Bluetooth: hci4: command tx timeout
[  302.829532] Bluetooth: hci6: command tx timeout
[  304.239135] Bluetooth: hci0: command tx timeout
[  304.429215] Bluetooth: hci1: command tx timeout
[  304.493124] Bluetooth: hci2: command tx timeout
[  304.685149] Bluetooth: hci3: command tx timeout
[  304.750141] Bluetooth: hci7: command tx timeout
[  304.750593] Bluetooth: hci5: command tx timeout
[  304.813439] Bluetooth: hci4: command tx timeout
[  304.877156] Bluetooth: hci6: command tx timeout
[  306.285204] Bluetooth: hci0: command tx timeout
[  306.477124] Bluetooth: hci1: command tx timeout
[  306.541958] Bluetooth: hci2: command tx timeout
[  306.735169] Bluetooth: hci3: command tx timeout
[  306.797153] Bluetooth: hci5: command tx timeout
[  306.797576] Bluetooth: hci7: command tx timeout
[  306.861318] Bluetooth: hci4: command tx timeout
[  306.925476] Bluetooth: hci6: command tx timeout
[  360.457003] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  360.460921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  360.466204] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  360.479658] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  360.489816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  360.707635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  360.715547] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  360.719863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  360.726885] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  360.734922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  360.822279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  360.841784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  360.860368] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  360.884788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  360.901819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  360.912308] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  360.929353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  360.930778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  360.932776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  360.948919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  360.971003] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  360.978781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  360.980932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  360.988329] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  360.998381] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  361.011808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  361.013423] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  361.044199] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.069365] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  361.073237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  361.080273] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  361.099887] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  361.109475] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  361.144660] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  361.154637] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  361.198451] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  361.203458] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  361.208610] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  361.268605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  361.285762] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  362.541320] Bluetooth: hci0: command tx timeout
[  362.799122] Bluetooth: hci1: command tx timeout
[  363.117506] Bluetooth: hci2: command tx timeout
[  363.117545] Bluetooth: hci5: command tx timeout
[  363.118482] Bluetooth: hci3: command tx timeout
[  363.181178] Bluetooth: hci4: command tx timeout
[  363.373551] Bluetooth: hci7: command tx timeout
[  363.437153] Bluetooth: hci6: command tx timeout
[  364.590187] Bluetooth: hci0: command tx timeout
[  364.845461] Bluetooth: hci1: command tx timeout
[  365.165471] Bluetooth: hci5: command tx timeout
[  365.165520] Bluetooth: hci2: command tx timeout
[  365.166891] Bluetooth: hci3: command tx timeout
[  365.230141] Bluetooth: hci4: command tx timeout
[  365.423176] Bluetooth: hci7: command tx timeout
[  365.486164] Bluetooth: hci6: command tx timeout
[  366.638520] Bluetooth: hci0: command tx timeout
[  366.894302] Bluetooth: hci1: command tx timeout
[  367.213347] Bluetooth: hci3: command tx timeout
[  367.214452] Bluetooth: hci2: command tx timeout
[  367.214558] Bluetooth: hci5: command tx timeout
[  367.277146] Bluetooth: hci4: command tx timeout
[  367.469193] Bluetooth: hci7: command tx timeout
[  367.533259] Bluetooth: hci6: command tx timeout
[  368.685178] Bluetooth: hci0: command tx timeout
[  368.941200] Bluetooth: hci1: command tx timeout
[  369.261205] Bluetooth: hci2: command tx timeout
[  369.261715] Bluetooth: hci3: command tx timeout
[  369.262475] Bluetooth: hci5: command tx timeout
[  369.326159] Bluetooth: hci4: command tx timeout
[  369.518389] Bluetooth: hci7: command tx timeout
[  369.582166] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
06:01:59  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff88802f727e70 RCX=ffff88806ce0897c RDX=0000000000000006
RSI=ffffffff85c1cc40 RDI=ffff88801710ddc8 RBP=ffffffff85c1cc40 RSP=ffff88806ce08970
R8 =0000000000000001 R9 =ffff88806ce08a68 R10=000000000003b53d R11=00000000000211d5
R12=ffffffff81354012 R13=0000000000000202 R14=ffff88801710d280 R15=0000000000000007
RIP=ffffffff8151acea RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f300ee9d540 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe2f00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f300eeecb90 CR3=0000000009bc2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff8880245e1b80 RCX=ffff8880139ff77c RDX=0000000000000000
RSI=ffffffff81000130 RDI=ffff8880245e1f7c RBP=ffff8880245e1b80 RSP=ffff8880139ff7a0
R8 =0000000000000001 R9 =ffff8880139ff868 R10=000000000003b53d R11=00000000000c43df
R12=0000000000000000 R13=ffff8880139ff870 R14=ffff8880245e1b80 R15=ffff8880139ff828
RIP=ffffffff815abe87 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fc621c11540 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc621dac4a1 CR3=0000000024324000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff
XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000