Warning: Permanently added '[localhost]:3576' (ECDSA) to the list of known hosts.
2025/06/25 13:27:34 fuzzer started
2025/06/25 13:27:34 dialing manager at localhost:42423
syzkaller login: [  108.349954] cgroup: Unknown subsys name 'net'
[  108.537301] cgroup: Unknown subsys name 'cpuset'
[  108.558444] cgroup: Unknown subsys name 'rlimit'
2025/06/25 13:27:55 syscalls: 206
2025/06/25 13:27:55 code coverage: enabled
2025/06/25 13:27:55 comparison tracing: enabled
2025/06/25 13:27:55 extra coverage: enabled
2025/06/25 13:27:55 setuid sandbox: enabled
2025/06/25 13:27:55 namespace sandbox: enabled
2025/06/25 13:27:55 Android sandbox: enabled
2025/06/25 13:27:55 fault injection: enabled
2025/06/25 13:27:55 leak checking: enabled
2025/06/25 13:27:55 net packet injection: enabled
2025/06/25 13:27:55 net device setup: enabled
2025/06/25 13:27:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/25 13:27:55 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/25 13:27:55 USB emulation: enabled
2025/06/25 13:27:55 hci packet injection: enabled
2025/06/25 13:27:55 wifi device emulation: enabled
2025/06/25 13:27:55 802.15.4 emulation: enabled
2025/06/25 13:27:55 fetching corpus: 0, signal 0/0 (executing program)
2025/06/25 13:27:56 starting 8 fuzzer processes
13:27:56 executing program 0:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0xc0)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x2000c000)
r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000081)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1)
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x40401)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={<r5=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000540)={'vcan0\x00'})
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000580))
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r4, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}}, 0x4004040)
r6 = socket$inet6(0xa, 0x3, 0x3)
ioctl$sock_ifreq(r6, 0x8914, &(0x7f0000000800)={'veth1_to_bond\x00', @ifru_map})
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000840), 0x92002, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1040000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7d}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c080}, 0x20048041)
r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000040)

13:27:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040094}, 0x40040)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0)
ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000140)=0xffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'})
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffd, 0x29, 0x81, @buffer={0x0, 0xef, &(0x7f00000001c0)=""/239}, &(0x7f00000002c0)="39dc31a10a5f312a10044357fe69496741b03643a058102bad09f9036f859cf7dd8cc62dbd69009f01", &(0x7f0000000300)=""/114, 0xdf9, 0x10, 0x2, &(0x7f0000000380)})
syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x201, 0x0)
ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f00000004c0)=0x80)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r1, 0x310, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4810)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16f5d933}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x412b1812}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3650d56e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bea9631}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x78}}, 0x40)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}]}, 0x1c}}, 0x20000000)
r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000880)=0x14, 0x80000)
ioctl$sock_ifreq(r4, 0x891e, &(0x7f0000000900)={'netdevsim0\x00', @ifru_settings={0x0, 0x0, @fr_pvc=&(0x7f00000008c0)={0x1000}}})
getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000940)={'ah\x00'}, &(0x7f0000000980)=0x1e)
openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x204040, 0x0)
write$nbd(r2, &(0x7f0000000a00)={0x67446698, 0x0, 0x4, 0x4, 0x1, "bd6445ba8f9d9d58cb23b8f1c963aca65e0af7139ea1bec8f8e66b1bd63875241a42582e0729b6f04e1c2ee84fa3914028467086f6b74c6d64e1fac78c45906a6581ddb16f9e10c8f2080f881b13e1f741ee69787c4bfe78e23812038af9656e20142af784442864af3e3a5b59e9157a7e51c64f90134308f42affe5d01f23a70de060d1560486a8bc4dce73ea2d2bf784985bb4fcf8ee4d82cc39268eebb58ab5bca23f63116812a326166d825204d40c5b1f989f87952d649a17e6220e695599d010d3ee2f40"}, 0xd7)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004090)

13:27:56 executing program 2:
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/10, 0xa, 0x40000100, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x21c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xfc, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8a54bfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18fb92c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d50f277}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1199239b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19acd81e}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bc4c2e5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1acb9596}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x340e8a9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18639e9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3804a1a1}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4de4beb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x594d247c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30d448ee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5991b211}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x357a792e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x175f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xedac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e2d051d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x332eac4c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44de7d36}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ea3f266}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69df4120}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7af1af8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x75d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a28}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde61}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9170}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ae8e0d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe782}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c0a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68e6272d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36ed9665}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f0ad0fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd337}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c0a9fe9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa958}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cde0e8d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4727295d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f03a825}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3887}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf0b}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x800}, 0x4000084)
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000340)=""/199, 0xc7, 0x40010000, &(0x7f0000000440)={0x11, 0x15, 0x0, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x14)
r0 = socket$inet6(0xa, 0xe, 0x401)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000480)={0x3, {{0xa, 0x4e24, 0x59bb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x810b}}}, 0x88)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x200, 0x74f, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r1 = socket$inet6(0xa, 0x5, 0x1)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000680), 0xa4483, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000006c0)={0x71f8, {{0xa, 0x4e21, 0xbab7, @rand_addr=' \x01\x00', 0x1}}}, 0x88)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x22000000}, 0x4008001)
r3 = accept4(r1, &(0x7f00000008c0)=@caif=@dgm, &(0x7f0000000940)=0x80, 0x80800)
accept4(r3, 0x0, &(0x7f0000000980), 0x40800)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=0x4)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10008000}, 0x80000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000c40)={'vxcan1\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f0000000b80)="5cebe6e1243b952dda91aefddc8940c12d5e81474026438cc44d4c0d89a22da64a77d178656eeebb1242b4cc3965657a649ccd44e5c46651f5b6d11770a15c5e7c8af8a3cf6e187a8f48d29b780a5e79476d91276825660e58be3696eb4d2004b76efc23be609482d19ba4c73dd7a91a13ac877828c17f5b439f9c9311a23659c9461200c147b40d6a40a8cf9c24145dcf4f98431fee4709b731518ad9fc276aa6", 0xa1, 0x4c040, &(0x7f0000000c80)={0x11, 0x4, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
r6 = socket$packet(0x11, 0x3, 0x300)
accept$packet(r6, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d00)=0x14)

13:27:56 executing program 3:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket(0x21, 0x80000, 0x6c051b78)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f00000000c0)={0xfff, 0x92, "dc2d1a022de0f69272baf5d483bcb6b064c95b40322e81cab06e287446bd255bc61eb074b1960e4cf4341f954d94f59ea90224f25d52e5cd89df50270d0cf7f9221c426e95d96a743c349345d541910494c10a4ad7b4d6114a182e7c96297b41fe2ad9dd19b76b83e9678bdd7ed566b4918063a367c47224f525aa5d70ddaf85d4309563657bbbaf9ff14e3e4cb2b3f49bd0"})
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000180))
r1 = socket(0xb, 0x0, 0x10001)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x44000080)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r2=>0x0})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x4001, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000340), 0x4)
r4 = socket$inet6(0xa, 0x800, 0x2702)
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000380)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x28, r2})
r5 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4880)
syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540))
accept$packet(r0, 0x0, &(0x7f0000000580))
accept$packet(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000600)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'})

[  130.046533] audit: type=1400 audit(1750858076.822:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:27:56 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40840)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x408e0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r3=>0x0, 0x4, 0x1, 0x8, 0x2, 0x2, @local, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1, 0x7, 0x4, 0x7fffffff}})
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000380)=""/35, 0x23, 0x12104, &(0x7f0000000480)={0x11, 0x8, r3, 0x1, 0x1, 0x6, @broadcast}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', <r4=>r3, 0x2f, 0x0, 0x3, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0xf8ca, 0x214, 0x3}})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r2)
getsockname$packet(r0, &(0x7f0000000640)={0x11, 0x0, <r6=>0x0}, &(0x7f0000000680)=0x14)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xdc, r5, 0x2, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x20008041)
r7 = accept4(r1, &(0x7f0000000840)=@rc={0x1f, @none}, &(0x7f00000008c0)=0x80, 0x180000)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r8, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x33d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff9}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000c4}, 0x8000)
r9 = accept4(r0, &(0x7f0000000a80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x80, 0x800)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r9, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3e35}]}, 0x68}, 0x1, 0x0, 0x0, 0x80088c0}, 0x200080c1)

13:27:56 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040), 0x4)
ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000080)=""/150)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)=""/147, &(0x7f0000000200)=0x93)
r1 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x4, 0x1, 0x80, 0x6, 0x0, 0x3f, 0x40, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x109d, 0x0, @perf_config_ext={0x28, 0x3}, 0x12090, 0xf7, 0x3, 0x4, 0x0, 0x6, 0xffff, 0x0, 0x7, 0x0, 0xe881}, 0x0, 0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x801, 0x0)
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000300)=0x2, 0x4)
r3 = accept4(r0, 0x0, &(0x7f0000000340), 0x80000)
getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000400))
getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0x4)
openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x202, 0x0)
write$nbd(r0, &(0x7f0000000500)={0x67446698, 0x1, 0x2, 0x0, 0x4, "c839369b77b176acf99dae3a4824ed9dfa6832419ceed8da9c33baf841a3e73738e64463e2869d7dedcd446318282cfcb4d1e178a602d8385e57f8d2426535c59ff92b38a3bbf086416baad3200239e947442d2cbaf080faee28431decec421a6547bd0783d12629fd699c1f62137cc72902c5c952de1786c3bc017f51f7c18e1e06513cc94d2a99a0edc8f88b620721678af41c534c64d22956608080c7aacb54c07dfafc2b073e03a952a5beebf6e21a63a7edf873247d2b78efc0f0473a64"}, 0xd0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000600)={0x2, 0x0, [0x0, 0x0]})
r4 = socket$packet(0x11, 0x3, 0x300)
accept4$packet(r3, &(0x7f0000000640)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14, 0x80800)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000006c0)={r5, 0x1, 0x6}, 0x10)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00'})

13:27:56 executing program 6:
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0xc0000)
getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6, 0x5, 0x8, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x78000000, 0x64951825e1dc291b, @perf_bp={&(0x7f0000000100), 0x9}, 0x18000, 0x8, 0x4, 0x9, 0x0, 0x9, 0x4, 0x0, 0x6e20dc6e}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa)
sendto$packet(r0, &(0x7f00000001c0)="6a7251e4fb2a646c098317543ea41394a7184040cf1ba95fd64b904cf5ba2afdc872552cae9daa2148e4c901a38ab010920b0667b3e6e0808584c4c7fa8ee88686f2af04d676fd0f02a35e21be5c207c9ce16bdd23dd94f2a16967700cf188e83994e4a3ee2d4adc624c03c286303cfda3cf33364859f62e35f1f23fc2e5912dbec6e4eaa17ce88f86c0435d949b3760986487d1667c7024b981e62099dc6d43ce4d1e3c8ab57673f8c05f77b2a526a085cceb13f9916ed796c81d7874c8279bc9596fa1d54f9f90b9c2d5e5217aae679625f5d74f58d2991e6873bd28d5a1ac9c07d46d5dfde7cbe396781853c9e61a8192", 0xf2, 0x0, &(0x7f00000002c0)={0x11, 0x1b, r1, 0x1, 0x5, 0x6, @random="691da00e820c"}, 0x14)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004004}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x18, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x90003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}}, 0x4000)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40840)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000008c0)={@mcast2, 0xe, r6})
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000a00))
setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000a40)={0x0, {{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7}}}, 0x88)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
accept4$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000cc0)=0x14, 0x0)

13:27:56 executing program 7:
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x313081, 0x0)
connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x2)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, r2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x2, 0x2, 0x1, 0x0, 0x2})
setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000200)="b5d08ba574284206f7b6e95021cabb372b9dc5201ba16a63634ca7a615b244d12aebe344385896be7a511eb17f030fb3f2c6be04210e831ad3b7561c41147983b736ef1f3f769c89c7d1f12777ce4e79e78d48cdfcc80b67fe59901621d1c9df9ca59498129de4598d998bd57b738304a2dbda7dc50bbbf2c7f39fc57e197ff5c85f6c5061f9fcba60d61f27b5558b6252bf1b12cb77b5a246ad236812136e2964543f4115579e4ac0735770", 0xac)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd0, 0x0, 0x900, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x400}, 0x20000044)
keyctl$unlink(0x9, 0x0, 0x0)
rt_sigreturn()
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x6d07d205ee8b7ca5, 0x0)
connect$802154_dgram(r0, &(0x7f00000004c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14)
setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000500)="b879f27a7531fb49741a53e27daf6d147763dbd376c6bbb31ca8e84b284c2b15bf084f7c4ffc492d2cc8a45077b449bfa1d9772f953ee57a227b2b111771604ba3a52285", 0x44)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x149400, 0x0)
connect$802154_dgram(0xffffffffffffffff, &(0x7f00000005c0)={0x24, @long={0x3, 0x1, {0x5555555555540004}}}, 0x14)

[  131.495481] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  131.497131] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  131.499524] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.500990] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  131.507211] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  131.510230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.511215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  131.514500] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.539217] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.558169] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.560502] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.567730] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  131.572573] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.573542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  131.577339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  131.591619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  131.593981] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.610589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  131.611381] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  131.613314] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  131.620901] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  131.627306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  131.630708] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  131.634834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  131.635878] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  131.637816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.642594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  131.645021] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.646607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  131.651319] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  131.661813] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  131.663496] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  131.667109] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  131.668971] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  131.671441] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  131.676133] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  131.679504] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  131.680691] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  131.708948] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  131.716847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  133.569531] Bluetooth: hci0: command tx timeout
[  133.632400] Bluetooth: hci1: command tx timeout
[  133.696269] Bluetooth: hci2: command tx timeout
[  133.760756] Bluetooth: hci7: command tx timeout
[  133.762078] Bluetooth: hci6: command tx timeout
[  133.762704] Bluetooth: hci5: command tx timeout
[  133.763287] Bluetooth: hci4: command tx timeout
[  133.763294] Bluetooth: hci3: command tx timeout
[  135.616225] Bluetooth: hci0: command tx timeout
[  135.680385] Bluetooth: hci1: command tx timeout
[  135.746209] Bluetooth: hci2: command tx timeout
[  135.808553] Bluetooth: hci4: command tx timeout
[  135.809524] Bluetooth: hci6: command tx timeout
[  135.809999] Bluetooth: hci3: command tx timeout
[  135.810642] Bluetooth: hci5: command tx timeout
[  135.810692] Bluetooth: hci7: command tx timeout
[  137.665381] Bluetooth: hci0: command tx timeout
[  137.729685] Bluetooth: hci1: command tx timeout
[  137.792884] Bluetooth: hci2: command tx timeout
[  137.856485] Bluetooth: hci7: command tx timeout
[  137.857600] Bluetooth: hci5: command tx timeout
[  137.858073] Bluetooth: hci3: command tx timeout
[  137.858605] Bluetooth: hci6: command tx timeout
[  137.859061] Bluetooth: hci4: command tx timeout
[  139.713671] Bluetooth: hci0: command tx timeout
[  139.776599] Bluetooth: hci1: command tx timeout
[  139.840231] Bluetooth: hci2: command tx timeout
[  139.904247] Bluetooth: hci4: command tx timeout
[  139.904428] Bluetooth: hci6: command tx timeout
[  139.904758] Bluetooth: hci3: command tx timeout
[  139.905360] Bluetooth: hci5: command tx timeout
[  139.905414] Bluetooth: hci7: command tx timeout
[  188.233461] hrtimer: interrupt took 6116298 ns
[  191.875406] syz-executor.3 (286) used greatest stack depth: 25072 bytes left
[  194.538092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  194.540008] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  194.544857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  194.546488] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  194.549201] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  194.553466] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  194.556720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  194.557862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.580349] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  194.585330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  194.593024] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  194.623731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  194.638371] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  194.639318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  194.649620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  194.653555] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  194.655636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  194.657576] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  194.659918] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  194.666684] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.668720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  194.672560] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  194.673363] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  194.675929] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  194.677674] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  194.678585] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  194.681598] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  194.686451] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  194.690034] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  194.691969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  194.692071] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  194.694271] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  194.702972] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  194.704724] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  194.706412] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  194.707260] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.708379] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  194.708398] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  194.716035] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  194.752308] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  196.609497] Bluetooth: hci0: command tx timeout
[  196.672281] Bluetooth: hci1: command tx timeout
[  196.737365] Bluetooth: hci2: command tx timeout
[  196.800332] Bluetooth: hci4: command tx timeout
[  196.800457] Bluetooth: hci5: command tx timeout
[  196.800967] Bluetooth: hci7: command tx timeout
[  196.801551] Bluetooth: hci6: command tx timeout
[  196.802082] Bluetooth: hci3: command tx timeout
[  198.656516] Bluetooth: hci0: command tx timeout
[  198.720388] Bluetooth: hci1: command tx timeout
[  198.784381] Bluetooth: hci2: command tx timeout
[  198.849270] Bluetooth: hci3: command tx timeout
[  198.849805] Bluetooth: hci6: command tx timeout
[  198.849829] Bluetooth: hci5: command tx timeout
[  198.851368] Bluetooth: hci7: command tx timeout
[  198.851410] Bluetooth: hci4: command tx timeout
[  200.706178] Bluetooth: hci0: command tx timeout
[  200.768462] Bluetooth: hci1: command tx timeout
[  200.832306] Bluetooth: hci2: command tx timeout
[  200.896257] Bluetooth: hci4: command tx timeout
[  200.896753] Bluetooth: hci7: command tx timeout
[  200.896951] Bluetooth: hci6: command tx timeout
[  200.897301] Bluetooth: hci3: command tx timeout
[  200.897836] Bluetooth: hci5: command tx timeout
[  202.754330] Bluetooth: hci0: command tx timeout
[  202.816460] Bluetooth: hci1: command tx timeout
[  202.881269] Bluetooth: hci2: command tx timeout
[  202.944458] Bluetooth: hci5: command tx timeout
[  202.947810] Bluetooth: hci4: command tx timeout
[  202.948217] Bluetooth: hci3: command tx timeout
[  202.948903] Bluetooth: hci6: command tx timeout
[  202.949446] Bluetooth: hci7: command tx timeout
[  256.988649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  256.994136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  256.999102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  257.009731] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  257.015834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  257.165104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  257.176188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  257.182594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  257.190931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  257.202484] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  257.203877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  257.210904] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  257.220876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  257.226632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  257.227760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  257.246022] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  257.251048] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  257.255672] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  257.263579] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  257.302498] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  257.309901] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  257.315546] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  257.326316] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  257.377002] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  257.387876] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  257.394812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  257.395953] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  257.401662] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  257.415782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  257.418465] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  257.423199] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  257.424232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  257.445648] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  257.455798] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  257.457045] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  257.458717] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  257.461070] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  257.463515] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  257.467616] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  257.471756] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  259.072278] Bluetooth: hci0: command tx timeout
[  259.264326] Bluetooth: hci3: command tx timeout
[  259.265290] Bluetooth: hci2: command tx timeout
[  259.392294] Bluetooth: hci1: command tx timeout
[  259.457257] Bluetooth: hci5: command tx timeout
[  259.584313] Bluetooth: hci7: command tx timeout
[  259.586203] Bluetooth: hci6: command tx timeout
[  259.587632] Bluetooth: hci4: command tx timeout
[  261.121407] Bluetooth: hci0: command tx timeout
[  261.312427] Bluetooth: hci3: command tx timeout
[  261.312970] Bluetooth: hci2: command tx timeout
[  261.441316] Bluetooth: hci1: command tx timeout
[  261.504662] Bluetooth: hci5: command tx timeout
[  261.632298] Bluetooth: hci6: command tx timeout
[  261.632847] Bluetooth: hci7: command tx timeout
[  261.633373] Bluetooth: hci4: command tx timeout
[  263.168599] Bluetooth: hci0: command tx timeout
[  263.362118] Bluetooth: hci2: command tx timeout
[  263.362683] Bluetooth: hci3: command tx timeout
[  263.488590] Bluetooth: hci1: command tx timeout
[  263.552731] Bluetooth: hci5: command tx timeout
[  263.680553] Bluetooth: hci4: command tx timeout
[  263.681222] Bluetooth: hci7: command tx timeout
[  263.681694] Bluetooth: hci6: command tx timeout
[  265.217301] Bluetooth: hci0: command tx timeout
[  265.408286] Bluetooth: hci3: command tx timeout
[  265.408814] Bluetooth: hci2: command tx timeout
[  265.536328] Bluetooth: hci1: command tx timeout
[  265.600310] Bluetooth: hci5: command tx timeout
[  265.729212] Bluetooth: hci4: command tx timeout
[  265.729738] Bluetooth: hci7: command tx timeout
[  265.731391] Bluetooth: hci6: command tx timeout
[  319.802301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  319.809456] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  319.810994] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  319.817074] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  319.821048] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  319.898424] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  319.900869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  319.901840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  319.911726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  319.911945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  319.913832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  319.920820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  319.926434] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  319.947641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  319.952178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  319.953447] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  319.957478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  319.964331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  319.985482] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  319.999756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  320.159787] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  320.161487] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  320.163933] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  320.170190] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  320.172079] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  320.173446] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  320.175683] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  320.177096] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  320.189862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  320.197373] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  320.217397] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  320.226492] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  320.238255] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  320.241398] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  320.243979] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  320.254428] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  320.281492] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  320.294804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  320.339448] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  320.353544] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  321.921240] Bluetooth: hci0: command tx timeout
[  321.984520] Bluetooth: hci2: command tx timeout
[  321.986326] Bluetooth: hci1: command tx timeout
[  322.048488] Bluetooth: hci3: command tx timeout
[  322.246581] Bluetooth: hci6: command tx timeout
[  322.306813] Bluetooth: hci7: command tx timeout
[  322.308636] Bluetooth: hci4: command tx timeout
[  322.498663] Bluetooth: hci5: command tx timeout
[  323.970191] Bluetooth: hci0: command tx timeout
[  324.032275] Bluetooth: hci1: command tx timeout
[  324.033845] Bluetooth: hci2: command tx timeout
[  324.096215] Bluetooth: hci3: command tx timeout
[  324.289678] Bluetooth: hci6: command tx timeout
[  324.353287] Bluetooth: hci7: command tx timeout
[  324.354693] Bluetooth: hci4: command tx timeout
[  324.545895] Bluetooth: hci5: command tx timeout
[  326.017275] Bluetooth: hci0: command tx timeout
[  326.081441] Bluetooth: hci1: command tx timeout
[  326.081984] Bluetooth: hci2: command tx timeout
[  326.144285] Bluetooth: hci3: command tx timeout
[  326.336370] Bluetooth: hci6: command tx timeout
[  326.400538] Bluetooth: hci4: command tx timeout
[  326.402047] Bluetooth: hci7: command tx timeout
[  326.592292] Bluetooth: hci5: command tx timeout
[  328.064249] Bluetooth: hci0: command tx timeout
[  328.128228] Bluetooth: hci2: command tx timeout
[  328.129554] Bluetooth: hci1: command tx timeout
[  328.192261] Bluetooth: hci3: command tx timeout
[  328.384464] Bluetooth: hci6: command tx timeout
[  328.450193] Bluetooth: hci7: command tx timeout
[  328.450534] Bluetooth: hci4: command tx timeout
[  328.642197] Bluetooth: hci5: command tx timeout
[  382.763504] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  382.773778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  382.780698] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  382.794460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  382.797971] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  382.807889] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  382.810467] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  382.811723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  382.827546] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  382.829358] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  382.829377] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  382.834284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  382.838268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  382.838275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  382.841831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  382.937775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  382.941444] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  382.942725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  382.961679] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  382.969688] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  383.023835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  383.027684] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  383.029036] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  383.036424] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  383.040104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  383.043054] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  383.055518] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  383.057028] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  383.061465] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  383.062883] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  383.072113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  383.081533] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  383.089322] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  383.089460] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  383.095455] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  383.122916] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  383.131446] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  383.131592] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  383.150319] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  383.162173] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  384.896249] Bluetooth: hci0: command tx timeout
[  384.897662] Bluetooth: hci2: command tx timeout
[  384.898263] Bluetooth: hci1: command tx timeout
[  385.024218] Bluetooth: hci3: command tx timeout
[  385.152317] Bluetooth: hci4: command tx timeout
[  385.153692] Bluetooth: hci5: command tx timeout
[  385.217029] Bluetooth: hci6: command tx timeout
[  385.280247] Bluetooth: hci7: command tx timeout
[  386.944308] Bluetooth: hci2: command tx timeout
[  386.944865] Bluetooth: hci1: command tx timeout
[  386.946982] Bluetooth: hci0: command tx timeout
[  387.073223] Bluetooth: hci3: command tx timeout
[  387.200280] Bluetooth: hci5: command tx timeout
[  387.200782] Bluetooth: hci4: command tx timeout
[  387.264552] Bluetooth: hci6: command tx timeout
[  387.328230] Bluetooth: hci7: command tx timeout
[  388.992399] Bluetooth: hci1: command tx timeout
[  388.992950] Bluetooth: hci0: command tx timeout
[  388.993825] Bluetooth: hci2: command tx timeout
[  389.120283] Bluetooth: hci3: command tx timeout
[  389.248279] Bluetooth: hci5: command tx timeout
[  389.248528] Bluetooth: hci4: command tx timeout
[  389.312239] Bluetooth: hci6: command tx timeout
[  389.376218] Bluetooth: hci7: command tx timeout
[  391.041416] Bluetooth: hci2: command tx timeout
[  391.041611] Bluetooth: hci0: command tx timeout
[  391.042257] Bluetooth: hci1: command tx timeout
[  391.168961] Bluetooth: hci3: command tx timeout
[  391.297149] Bluetooth: hci4: command tx timeout
[  391.297635] Bluetooth: hci5: command tx timeout
[  391.360214] Bluetooth: hci6: command tx timeout
[  391.424259] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
13:33:03  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffffffff81a7f9cd RCX=ffff888028fd7314 RDX=1ffff110051fae83
RSI=ffffffff85c1cc40 RDI=ffffffff81a7f9cd RBP=ffffffff81a7f9cd RSP=ffff888028fd7370
R8 =0000000000000001 R9 =ffff888028fd7400 R10=000000000003b53d R11=00000000000118a2
R12=ffff888028fd7488 R13=0000000000000000 R14=ffff88802adc0000 R15=ffff888015b4b640
RIP=ffffffff84b4ec40 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe0b00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa1682aa260 CR3=00000000244db000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000560fbd482000 RBX=0000000000000000 RCX=ffffffff84aa3632 RDX=ffff88800f859b80
RSI=ffffffff84aa363c RDI=0000000000000000 RBP=ffff888017b57da8 RSP=ffff888017b574f8
R8 =0000000000000000 R9 =fffffbfff0c828ca R10=0000000000000009 R11=0000000000000000
R12=ffff888035a34606 R13=0000560fbd482000 R14=0000000000000001 R15=000000000000000f
RIP=ffffffff84ab750c RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f8972a36540 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe0b00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8972c21620 CR3=000000001a754000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ff00ff00ff00ff00ff00ffffff00 XMM01=010001000100010001000100010100ff
XMM02=61305f315f315f4c53534e45504f0030 XMM03=000000000000000000000000004f0030
XMM04=504f0061305f315f315f4c53534e4550 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000