syzkaller login: [   64.079362] scp (243) used greatest stack depth: 24200 bytes left
Warning: Permanently added '[localhost]:32245' (ECDSA) to the list of known hosts.
2024/12/12 08:17:08 fuzzer started
2024/12/12 08:17:08 dialing manager at localhost:35345
[   66.869592] cgroup: Unknown subsys name 'net'
[   66.938951] cgroup: Unknown subsys name 'cpuset'
[   66.958109] cgroup: Unknown subsys name 'rlimit'
2024/12/12 08:17:26 syscalls: 202
2024/12/12 08:17:26 code coverage: enabled
2024/12/12 08:17:26 comparison tracing: enabled
2024/12/12 08:17:26 extra coverage: enabled
2024/12/12 08:17:26 setuid sandbox: enabled
2024/12/12 08:17:26 namespace sandbox: enabled
2024/12/12 08:17:26 Android sandbox: enabled
2024/12/12 08:17:26 fault injection: enabled
2024/12/12 08:17:26 leak checking: enabled
2024/12/12 08:17:26 net packet injection: enabled
2024/12/12 08:17:26 net device setup: enabled
2024/12/12 08:17:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/12/12 08:17:26 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/12/12 08:17:26 USB emulation: enabled
2024/12/12 08:17:26 hci packet injection: enabled
2024/12/12 08:17:26 wifi device emulation: enabled
2024/12/12 08:17:26 802.15.4 emulation: enabled
2024/12/12 08:17:26 fetching corpus: 0, signal 0/0 (executing program)
2024/12/12 08:17:28 starting 8 fuzzer processes
08:17:28 executing program 0:
r0 = msgget$private(0x0, 0x204)
msgctl$IPC_RMID(r0, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000500)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/254)
msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000180)=""/13)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8044}, 0x48084)
r4 = msgget$private(0x0, 0x7a6e9905e64ea6bc)
msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000380)=""/235)
msgctl$IPC_RMID(r0, 0x0)
r5 = msgget$private(0x0, 0x200)
msgctl$IPC_STAT(r5, 0x2, &(0x7f0000000480)=""/204)
msgrcv(r4, &(0x7f0000000580)={0x0, ""/69}, 0x4d, 0x3, 0x3000)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=0xe, 0x80000)
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000006c0), 0x103000, 0x0)
r9 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000700)={0x1f, 0x0, @none}, &(0x7f0000000740)=0xe, 0x80000)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000007c0)={0x6, 0x0, &(0x7f0000000780)=[r6, r1, 0xffffffffffffffff, r7, r8, r9, r1]}, 0x7)

08:17:28 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', <r1=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x1)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x8080)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x90)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x128, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x811)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x400d005}, 0x60)
socketpair(0x1, 0x5, 0x5, &(0x7f0000000840)={<r7=>0xffffffffffffffff})
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40001)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000009c0)={'wpan4\x00', <r8=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4020040}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, r5, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000891)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000b00)=0x1)

[   85.864131] audit: type=1400 audit(1733991448.163:7): avc:  denied  { execmem } for  pid=276 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:17:28 executing program 3:
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x464, 0x400, 0x70bd2b, 0x25dfdbfd, "ec7dd5603cbeb63ff63353e47db7e5d7e12e419f70ddcfffb088b176e015ef1ccf4eebb80d05edf436d53657c1bee39b63bb", ["", "", "", ""]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x20000041)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x60}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
write$tun(0xffffffffffffffff, &(0x7f0000000500)={@void, @void, @arp=@generic={0x5, 0xf9, 0x6, 0x3, 0x9, @empty, "06689b", @broadcast, "15c1f3295b"}}, 0x1c)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r0)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan1\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan4\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x2000011)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000840), &(0x7f0000000880)=0x4)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9b}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4b}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xff}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x88c0)

08:17:28 executing program 6:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xbc, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc004045}, 0x840)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8001008}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xa359bb0fcf0ae802}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa9f}]}, 0x68}, 0x1, 0x0, 0x0, 0xaac97973ccc939b9}, 0x81)
r6 = socket(0x5, 0xa, 0x10001)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800)
socketpair(0x1a, 0x3, 0x80000000, &(0x7f0000000540)={<r7=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000005c0)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004910}, 0x20000090)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x40041)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000840))
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r9, 0x107, 0xb, &(0x7f0000000880)=0x7, 0x4)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x440c0)
pkey_free(0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)

08:17:28 executing program 5:
sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:gpg_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:systemd_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x40000d1)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x3c4, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1f}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x318, 0x8, 0x0, 0x1, [{0x314, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @loopback, 0x92c5}}, @WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x11}, 0x4004044)
syz_open_dev$loop(&(0x7f0000000640), 0xfffffffffffffffb, 0x20001)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan1\x00', <r0=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x17}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000054)
r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000007c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x11)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x5c}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x90)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x40000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wpan4\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040014}, 0x1)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wpan4\x00', <r4=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c880}, 0x40080)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}}, 0x4008844)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x50, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000c}, 0x20040880)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000001200)={&(0x7f0000001080), 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)

08:17:28 executing program 7:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xe6, @none, 0x8ee4}, 0xe)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = accept4$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x800)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x80, 0x0, &(0x7f0000000100)=[r1, r2, r3, r0, r4]}, 0x5)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x28000, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', <r8=>0x0, 0x7800, 0x7, 0xc5, 0x3e8, {{0x1d, 0x4, 0x0, 0x35, 0x74, 0x67, 0x0, 0x9, 0x2f, 0x0, @loopback, @broadcast, {[@generic={0x44, 0xa, "31f17c4b58e43812"}, @ssrr={0x89, 0x1b, 0x11, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @lsrr={0x83, 0x1f, 0x40, [@rand_addr=0x64010102, @local, @multicast2, @empty, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x7, 0x2}, {0x5, 0x11, "353f4a1b518ff0ed1bcc13a474a99b"}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg2\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', <r12=>0x0})
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000500)={0x0, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, @nfc={0x27, 0x1, 0x1, 0x5}, @can={0x1d, <r13=>0x0}, 0x800, 0x0, 0x0, 0x0, 0x7fff, &(0x7f00000004c0)='bond_slave_1\x00', 0x1, 0x3429f6c5, 0xdd50})
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000a00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x274, r6, 0x900, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x20008081}, 0x2400c000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000a80)={'batadv0\x00', <r15=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xfc, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008011}, 0x11)

08:17:28 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r1, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1c}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1e}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048010}, 0xc800)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3f2, 0x100, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0xc040)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x8002, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x240408c0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000580)={0xfffffffffffffff9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x7f, "9417a1658b8115"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001580)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r5=>0x0}], 0x5, "12a510fc7e43f0"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002580)={0x0, ""/256, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000002780)={<r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002980)={0x0, ""/256, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000002b80)={0xffffffffffffffcd, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}], 0xee, "976cf3a62907b4"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003b80)={0x0, ""/256, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000003d80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}], 0x4, "4315410a05b843"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000004d80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r12=>0x0}], 0x7f, "85701b61cfb64a"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000005d80)={0xfffffffffffffffa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r13=>0x0}], 0x4, "70bc0b1c2210ca"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000006d80)={0x0, ""/256, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000052d80)={0x90, [{}, {}, {}, {r4}, {0x0, r5}, {}, {0x0, r6}, {}, {}, {}, {}, {r7, r8}, {0x0, r9}, {}, {0x0, r10}, {}, {}, {0x0, r11}, {r12}, {}, {}, {0x0, r13}, {r14}], 0x6, "d6d716ea1a344d"})

08:17:29 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x406e02, 0x0)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000200))
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0xb15, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000440), r3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0xa01, 0x0)
ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x14}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xfc1507f48fc1edf0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0xc840)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), r3)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000680)={'gretap0\x00', <r7=>0x0, 0x700, 0x80, 0x5, 0x7ff, {{0x8, 0x4, 0x1, 0x5, 0x20, 0x65, 0x0, 0x8, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, {[@noop, @generic={0x86, 0xa, "09bcb63b8e6e8900"}]}}}}})
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000840}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r6, 0xb28, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x20084001}, 0x20008084)
syz_genetlink_get_family_id$fou(&(0x7f00000007c0), r3)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000800)={<r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000061200)={0x0, [{}, {}, {}, {}, {r8}], 0x8, "b8e85d2c66de7c"})

[   87.290695] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.292260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.293956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.297128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.301046] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   87.302433] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.349410] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.352225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.353721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.361645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.364685] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   87.366026] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.419233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.424303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.431223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.444708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.458210] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   87.459692] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.482385] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.487418] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   87.489483] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.490807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   87.492369] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   87.496096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.499067] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.500681] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.503002] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   87.504968] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   87.506191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.507508] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   87.512923] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   87.514600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.523054] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.549198] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.557042] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   87.561126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.756461] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   87.763272] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   87.790231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   87.832290] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   87.849111] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   87.855296] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   87.974834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   87.986140] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   88.005031] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   88.079433] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   88.097103] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   88.099244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   89.323422] Bluetooth: hci0: command tx timeout
[   89.450516] Bluetooth: hci1: command tx timeout
[   89.578506] Bluetooth: hci4: command tx timeout
[   89.578519] Bluetooth: hci5: command tx timeout
[   89.578854] Bluetooth: hci2: command tx timeout
[   89.641927] Bluetooth: hci3: command tx timeout
[   89.961907] Bluetooth: hci6: command tx timeout
[   90.153933] Bluetooth: hci7: command tx timeout
[   91.370879] Bluetooth: hci0: command tx timeout
[   91.498000] Bluetooth: hci1: command tx timeout
[   91.625916] Bluetooth: hci4: command tx timeout
[   91.625943] Bluetooth: hci2: command tx timeout
[   91.626460] Bluetooth: hci5: command tx timeout
[   91.691157] Bluetooth: hci3: command tx timeout
[   92.010800] Bluetooth: hci6: command tx timeout
[   92.202868] Bluetooth: hci7: command tx timeout
[   93.417885] Bluetooth: hci0: command tx timeout
[   93.547383] Bluetooth: hci1: command tx timeout
[   93.674066] Bluetooth: hci2: command tx timeout
[   93.674123] Bluetooth: hci4: command tx timeout
[   93.675272] Bluetooth: hci5: command tx timeout
[   93.737910] Bluetooth: hci3: command tx timeout
[   94.057979] Bluetooth: hci6: command tx timeout
[   94.249881] Bluetooth: hci7: command tx timeout
[   95.465876] Bluetooth: hci0: command tx timeout
[   95.595039] Bluetooth: hci1: command tx timeout
[   95.723886] Bluetooth: hci4: command tx timeout
[   95.724503] Bluetooth: hci2: command tx timeout
[   95.725666] Bluetooth: hci5: command tx timeout
[   95.789352] Bluetooth: hci3: command tx timeout
[   96.106342] Bluetooth: hci6: command tx timeout
[   96.298890] Bluetooth: hci7: command tx timeout
[  150.325413] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  150.327273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  150.329197] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  150.332614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  150.338193] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  150.340977] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  150.480622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  150.482929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  150.484274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  150.488374] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  150.490536] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  150.492298] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  150.526793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  150.532590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  150.535082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  150.536972] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  150.544889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  150.546363] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  150.548971] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  150.550191] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  150.570949] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  150.575483] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  150.591634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  150.594501] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  150.625121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  150.628272] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  150.632898] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  150.638545] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  150.642423] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  150.644193] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  150.646446] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  150.648218] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  150.650291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  150.651625] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  150.658811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  150.659573] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  150.667333] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  150.673931] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  150.679096] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  150.725606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  150.737582] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  150.739675] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  150.744916] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  150.757054] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  150.771411] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  150.831130] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  150.848471] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  150.853406] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  152.361898] Bluetooth: hci0: command tx timeout
[  152.555886] Bluetooth: hci1: command tx timeout
[  152.617992] Bluetooth: hci2: command tx timeout
[  152.745926] Bluetooth: hci4: command tx timeout
[  152.747143] Bluetooth: hci5: command tx timeout
[  152.747155] Bluetooth: hci3: command tx timeout
[  152.873889] Bluetooth: hci6: command tx timeout
[  152.938049] Bluetooth: hci7: command tx timeout
[  154.409947] Bluetooth: hci0: command tx timeout
[  154.601999] Bluetooth: hci1: command tx timeout
[  154.665965] Bluetooth: hci2: command tx timeout
[  154.794860] Bluetooth: hci5: command tx timeout
[  154.795418] Bluetooth: hci3: command tx timeout
[  154.795795] Bluetooth: hci4: command tx timeout
[  154.921925] Bluetooth: hci6: command tx timeout
[  154.986836] Bluetooth: hci7: command tx timeout
[  156.458907] Bluetooth: hci0: command tx timeout
[  156.651000] Bluetooth: hci1: command tx timeout
[  156.715074] Bluetooth: hci2: command tx timeout
[  156.841837] Bluetooth: hci4: command tx timeout
[  156.842841] Bluetooth: hci3: command tx timeout
[  156.843360] Bluetooth: hci5: command tx timeout
[  156.970042] Bluetooth: hci6: command tx timeout
[  157.033837] Bluetooth: hci7: command tx timeout
[  158.506371] Bluetooth: hci0: command tx timeout
[  158.697860] Bluetooth: hci1: command tx timeout
[  158.762509] Bluetooth: hci2: command tx timeout
[  158.889933] Bluetooth: hci5: command tx timeout
[  158.890525] Bluetooth: hci3: command tx timeout
[  158.891133] Bluetooth: hci4: command tx timeout
[  159.017920] Bluetooth: hci6: command tx timeout
[  159.081917] Bluetooth: hci7: command tx timeout
[  212.417695] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  212.427209] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  212.430477] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  212.444532] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  212.455475] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  212.458160] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  212.477371] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  212.482933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  212.493804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  212.498656] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  212.501140] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  212.503073] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  212.670875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  212.676279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  212.678036] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  212.684155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  212.702682] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  212.726993] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  212.793857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  212.808978] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  212.812446] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  212.814902] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  212.817012] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  212.819318] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  212.820677] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  212.822964] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  212.826048] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  212.832919] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  212.834827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  212.841060] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  212.843020] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  212.847191] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  212.847552] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  212.852243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  212.859515] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  212.887018] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  212.893150] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  212.903124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  212.905665] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  212.923208] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  212.949141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  212.963296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  212.981389] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  212.989041] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  212.991072] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  213.008661] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  213.017150] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  213.027846] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  214.505883] Bluetooth: hci0: command tx timeout
[  214.570940] Bluetooth: hci1: command tx timeout
[  214.827059] Bluetooth: hci2: command tx timeout
[  214.889920] Bluetooth: hci6: command tx timeout
[  214.954929] Bluetooth: hci5: command tx timeout
[  215.019947] Bluetooth: hci4: command tx timeout
[  215.145956] Bluetooth: hci3: command tx timeout
[  215.274021] Bluetooth: hci7: command tx timeout
[  216.554757] Bluetooth: hci0: command tx timeout
[  216.617832] Bluetooth: hci1: command tx timeout
[  216.873861] Bluetooth: hci2: command tx timeout
[  216.937937] Bluetooth: hci6: command tx timeout
[  217.003783] Bluetooth: hci5: command tx timeout
[  217.065894] Bluetooth: hci4: command tx timeout
[  217.193904] Bluetooth: hci3: command tx timeout
[  217.323760] Bluetooth: hci7: command tx timeout
[  218.601816] Bluetooth: hci0: command tx timeout
[  218.665952] Bluetooth: hci1: command tx timeout
[  218.921788] Bluetooth: hci2: command tx timeout
[  218.985872] Bluetooth: hci6: command tx timeout
[  219.049782] Bluetooth: hci5: command tx timeout
[  219.113902] Bluetooth: hci4: command tx timeout
[  219.242244] Bluetooth: hci3: command tx timeout
[  219.370753] Bluetooth: hci7: command tx timeout
[  220.649872] Bluetooth: hci0: command tx timeout
[  220.713794] Bluetooth: hci1: command tx timeout
[  220.969794] Bluetooth: hci2: command tx timeout
[  221.033918] Bluetooth: hci6: command tx timeout
[  221.099784] Bluetooth: hci5: command tx timeout
[  221.162823] Bluetooth: hci4: command tx timeout
[  221.290676] Bluetooth: hci3: command tx timeout
[  221.417806] Bluetooth: hci7: command tx timeout
[  274.804159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  274.806246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  274.808954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  274.813098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  274.815523] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  274.820968] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  274.934929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  274.938603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  274.942231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  274.945621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  274.951032] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  274.952498] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  275.064000] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  275.066225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  275.068191] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  275.074354] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  275.076334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  275.078358] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  275.079896] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  275.088986] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  275.101206] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  275.116085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  275.130432] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  275.132044] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  275.144652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  275.150169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  275.158525] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  275.160352] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  275.165119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  275.166133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  275.183176] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  275.190944] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  275.192185] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  275.193953] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  275.195360] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  275.197419] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  275.198621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  275.203691] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  275.205303] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  275.206857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  275.219121] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  275.279242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  275.287840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  275.292365] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  275.332381] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  275.426911] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  275.443017] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  275.460015] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  276.841946] Bluetooth: hci0: command tx timeout
[  276.969951] Bluetooth: hci1: command tx timeout
[  277.098885] Bluetooth: hci3: command tx timeout
[  277.226023] Bluetooth: hci6: command tx timeout
[  277.226230] Bluetooth: hci2: command tx timeout
[  277.355861] Bluetooth: hci5: command tx timeout
[  277.417959] Bluetooth: hci4: command tx timeout
[  277.610927] Bluetooth: hci7: command tx timeout
[  278.890003] Bluetooth: hci0: command tx timeout
[  279.017917] Bluetooth: hci1: command tx timeout
[  279.147772] Bluetooth: hci3: command tx timeout
[  279.273902] Bluetooth: hci6: command tx timeout
[  279.274472] Bluetooth: hci2: command tx timeout
[  279.401894] Bluetooth: hci5: command tx timeout
[  279.465852] Bluetooth: hci4: command tx timeout
[  279.659793] Bluetooth: hci7: command tx timeout
[  280.937894] Bluetooth: hci0: command tx timeout
[  281.065855] Bluetooth: hci1: command tx timeout
[  281.193943] Bluetooth: hci3: command tx timeout
[  281.322023] Bluetooth: hci2: command tx timeout
[  281.322630] Bluetooth: hci6: command tx timeout
[  281.449855] Bluetooth: hci5: command tx timeout
[  281.513942] Bluetooth: hci4: command tx timeout
[  281.705994] Bluetooth: hci7: command tx timeout
[  282.986075] Bluetooth: hci0: command tx timeout
[  283.114914] Bluetooth: hci1: command tx timeout
[  283.242952] Bluetooth: hci3: command tx timeout
[  283.369895] Bluetooth: hci6: command tx timeout
[  283.369994] Bluetooth: hci2: command tx timeout
[  283.498782] Bluetooth: hci5: command tx timeout
[  283.561961] Bluetooth: hci4: command tx timeout
[  283.755901] Bluetooth: hci7: command tx timeout
[  335.513330] syz-executor.5 (9497) used greatest stack depth: 24040 bytes left
[  337.344765] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  337.346397] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  337.352016] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  337.358619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  337.365579] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  337.367898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  337.524526] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  337.556962] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  337.565477] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  337.569963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  337.572324] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  337.573569] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  337.602858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  337.605079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  337.606398] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  337.609930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  337.619146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  337.628021] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  337.660910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  337.666110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  337.676065] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  337.682349] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  337.686266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  337.692117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  337.727748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  337.734037] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  337.745497] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  337.793547] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  337.799035] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  337.801059] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  337.809212] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  337.817389] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  337.817971] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  337.825037] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  337.825256] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  337.828253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  337.829986] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  337.831544] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  337.837875] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  337.839805] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  337.840994] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  337.848046] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  337.887018] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  337.894482] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  337.907130] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  337.915477] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  337.917073] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  337.940214] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  339.433811] Bluetooth: hci0: command tx timeout
[  339.625810] Bluetooth: hci1: command tx timeout
[  339.689967] Bluetooth: hci2: command tx timeout
[  339.753844] Bluetooth: hci3: command tx timeout
[  339.882794] Bluetooth: hci7: command tx timeout
[  339.882858] Bluetooth: hci4: command tx timeout
[  340.010018] Bluetooth: hci5: command tx timeout
[  340.010352] Bluetooth: hci6: command tx timeout
[  341.482343] Bluetooth: hci0: command tx timeout
[  341.673829] Bluetooth: hci1: command tx timeout
[  341.737977] Bluetooth: hci2: command tx timeout
[  341.801828] Bluetooth: hci3: command tx timeout
[  341.929796] Bluetooth: hci7: command tx timeout
[  341.932827] Bluetooth: hci4: command tx timeout
[  342.057804] Bluetooth: hci6: command tx timeout
[  342.060983] Bluetooth: hci5: command tx timeout
[  343.529774] Bluetooth: hci0: command tx timeout
[  343.722573] Bluetooth: hci1: command tx timeout
[  343.786181] Bluetooth: hci2: command tx timeout
[  343.849902] Bluetooth: hci3: command tx timeout
[  343.979786] Bluetooth: hci4: command tx timeout
[  343.980395] Bluetooth: hci7: command tx timeout
[  344.105840] Bluetooth: hci5: command tx timeout
[  344.106407] Bluetooth: hci6: command tx timeout
[  345.577931] Bluetooth: hci0: command tx timeout
[  345.769801] Bluetooth: hci1: command tx timeout
[  345.833833] Bluetooth: hci2: command tx timeout
[  345.897801] Bluetooth: hci3: command tx timeout
[  346.026164] Bluetooth: hci7: command tx timeout
[  346.026827] Bluetooth: hci4: command tx timeout
[  346.153823] Bluetooth: hci6: command tx timeout
[  346.153859] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
08:22:37  Registers:
info registers vcpu 0
RAX=0000000000001d4d RBX=0000000000000000 RCX=1ffffffff0fe049b RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff84a7782c RBP=ffff88800ab975c8 RSP=ffff88802a4d7ac8
R8 =0000000000000001 R9 =fffffbfff0fddde2 R10=ffffffff87eeef17 R11=0000000000000000
R12=ffff888037105700 R13=0000000000000020 R14=0000000000000001 R15=0000000000000282
RIP=ffffffff81aef2ab RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe11b57a6f4 CR3=000000003413c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fe11b58947000007fe11b588f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffffffff85d01b60 RCX=ffffffff81509184 RDX=0000000000000001
RSI=0000000000000004 RDI=ffff88802bfdf328 RBP=1ffff110057fbe61 RSP=ffff88802bfdf300
R8 =0000000000000001 R9 =ffffed10057fbe65 R10=0000000000000003 R11=0000000000000000
R12=ffffffff85d01b68 R13=ffffffff85d01b70 R14=0000000000000001 R15=0000000000000cc0
RIP=ffffffff81509195 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562d27863080 CR3=0000000036580000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000