Warning: Permanently added '[localhost]:40548' (ECDSA) to the list of known hosts.
2024/12/15 08:15:28 fuzzer started
2024/12/15 08:15:28 dialing manager at localhost:36477
syzkaller login: [   61.984162] cgroup: Unknown subsys name 'net'
[   62.078287] cgroup: Unknown subsys name 'cpuset'
[   62.105415] cgroup: Unknown subsys name 'rlimit'
2024/12/15 08:15:50 syscalls: 200
2024/12/15 08:15:50 code coverage: enabled
2024/12/15 08:15:50 comparison tracing: enabled
2024/12/15 08:15:50 extra coverage: enabled
2024/12/15 08:15:50 setuid sandbox: enabled
2024/12/15 08:15:50 namespace sandbox: enabled
2024/12/15 08:15:50 Android sandbox: enabled
2024/12/15 08:15:50 fault injection: enabled
2024/12/15 08:15:50 leak checking: enabled
2024/12/15 08:15:50 net packet injection: enabled
2024/12/15 08:15:50 net device setup: enabled
2024/12/15 08:15:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/12/15 08:15:50 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/12/15 08:15:50 USB emulation: enabled
2024/12/15 08:15:50 hci packet injection: enabled
2024/12/15 08:15:50 wifi device emulation: enabled
2024/12/15 08:15:50 802.15.4 emulation: enabled
2024/12/15 08:15:50 fetching corpus: 0, signal 0/0 (executing program)
2024/12/15 08:15:51 starting 8 fuzzer processes
08:15:51 executing program 1:
r0 = syz_io_uring_setup(0x7821, &(0x7f0000000000)={0x0, 0x5b31, 0x10, 0x2, 0x2f}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r1=>0x0)
io_uring_setup(0xac6, &(0x7f0000000100)={0x0, 0x64a5, 0x4, 0x1, 0x20c})
syz_io_uring_setup(0x6a86, &(0x7f0000000180)={0x0, 0x12c5, 0x2, 0x2, 0x241, 0x0, r0}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240))
getuid()
getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=<r2=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {r2, 0xee00}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
syz_io_uring_setup(0x1cda, &(0x7f00000003c0)={0x0, 0xbcd8, 0x8, 0x3, 0x1c6, 0x0, r4}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000440)=<r5=>0x0, &(0x7f0000000480))
syz_io_uring_submit(r5, r1, &(0x7f00000004c0)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x2, 0x0, 0x0, 0x7fff}, 0x7a)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r6=>r3, {0x9}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl2\x00', <r7=>0x0, 0x2f, 0x8, 0x1f, 0x1, 0x38, @dev={0xfe, 0x80, '\x00', 0x2c}, @private1, 0x20, 0x80, 0x8, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6_vti0\x00', <r8=>0x0, 0x2f, 0x8, 0x8, 0x6, 0x20, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x40, 0xfffffff8, 0x9}})
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000840)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'sit0\x00', <r10=>0x0, 0x4, 0xb2, 0x7, 0x9, 0x1, @mcast2, @rand_addr=' \x01\x00', 0x8000, 0x80, 0x2, 0x70c4}})
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000940)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000a40)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'ip6gre0\x00', <r12=>0x0, 0x29, 0x0, 0x1, 0xa9, 0x29, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8007, 0x50a7, 0xfffffffd}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'team0\x00', <r13=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wg0\x00', <r14=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000001400)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000013c0)={&(0x7f0000000bc0)={0x7c4, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x1c4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x82}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xbb45, 0x98, 0x6, 0x4}, {0x81, 0x21, 0xbe, 0x3}, {0x1000, 0x9, 0x9, 0x9}, {0x8, 0x1, 0x3, 0x2}, {0x40, 0xff, 0x67, 0x7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x57b}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe15}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc48}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x100, 0x3, 0xfb, 0xae}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfff, 0x5, 0x81, 0x1000}, {0x9, 0x7b, 0x8, 0x2}, {0x6, 0xc8, 0xf2, 0x6}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x45}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x3, 0x0, 0x7fff}, {0x91, 0x3, 0x6, 0xfffffffd}, {0x7, 0x0, 0x40, 0x2}, {0x3, 0x2, 0x2, 0xd1}, {0x2, 0x20, 0x3f, 0x10001}, {0x4, 0x1, 0x9f}]}}}]}}, {{0x8, 0x1, r13}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20e}}}]}}]}, 0x7c4}, 0x1, 0x0, 0x0, 0x840}, 0x4004)

08:15:51 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, @in_args={0x1}}, './file0\x00'})
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @any, 0x8, 0x1}, 0xe)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, @out_args}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r2, {0x4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r3, {0x1f}}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r5, {<r7=>r4}}, './file1\x00'})
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r8, 0xc08, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r9=>r5}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r10=>r4, {0x1}}, './file1\x00'})
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0xbfc9040385956874, r10, 0x10000000)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r11=>r7, @out_args}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r11, 0x89f8, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', <r12=>0x0, 0x2f, 0x49, 0x0, 0xffffff32, 0x8, @loopback, @loopback, 0x10, 0x8, 0x10, 0xffffff26}})
r13 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0)={'team0\x00', <r14=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000700)={'syztnl2\x00', <r15=>r12, 0x8, 0x40, 0x192, 0x401, {{0x1a, 0x4, 0x0, 0x5, 0x68, 0x64, 0x0, 0xfc, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0x2f, 0x1, 0x2, [{@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x3}, {@remote, 0x8f8}, {@broadcast, 0x2}, {@remote, 0x80000000}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x2c, 0x3, 0x0, [{@local, 0x800}, {@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdd6d}, {@dev={0xac, 0x14, 0x14, 0x17}}]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1dc, r13, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r14}, {0xb0, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x1f, 0x20, 0x7c, 0x5}, {0x3ff, 0x3, 0x2, 0x2}, {0x1, 0xf8, 0x0, 0x5}, {0x8, 0x61, 0x7, 0x4}, {0x3, 0x40, 0x6, 0x1}, {0x0, 0xff, 0x47, 0x10001}, {0x6, 0x3, 0x9, 0x7fffffff}, {0x0, 0xfd, 0x80, 0x7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf232}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8001}, 0x801)
ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000ac0)={0xff, 0x1, 0x8, 0x8, 0x5, 0x8})

[   84.287741] audit: type=1400 audit(1734250551.856:7): avc:  denied  { execmem } for  pid=269 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:15:51 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0xffffffffffffffff}}, './file0\x00'})
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2a4, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x240, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8c, 0x5, "bceccfe6f8a710b14cb3272171636dff36e9363cc3dd1c498f0a7908f3d19acea569bca41d52d31d0a467a4ed9d12fc7d7143e9c0d4a94f848fb3140d2fe41ce4252ca54a7092a1b4d9ed3298f752236995b6b5c65a6bee6575375639cf5bd22e157595adbcbdb0b6aa0f09a6648f839297f5eda73fcce073382d789d00b5808a7ee8d8b39e04bd0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(.}:.\'\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-@-\x9d(\xb8-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':%){\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa95}]}]}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%[\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ':.!\\})+-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '*-\xa7($\'&,#\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '++\xdf\'\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-,}%(:\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '+-@%/[-%${{,,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x80}, 0x40060)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x163880, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x90081}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@getsadinfo={0xf0, 0x23, 0x0, 0x70bd26, 0x25dfdbfb, 0x0, [@migrate={0x50, 0x11, [{@in=@rand_addr=0x64010102, @in6=@private0, @in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x32, 0x1, 0x0, 0x3500, 0xa, 0x2}]}, @algo_aead={0x6e, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x110, 0xc0, "89e1b2f5b7f887d5790ca6624a16d0bf03d6740e42104d98c063be7c70615b7bedb3"}}, @replay_thresh={0x8, 0xb, 0x5}, @coaddr={0x14, 0xe, @in6=@private0}]}, 0xf0}, 0x1, 0x0, 0x0, 0x810}, 0x48894)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0xd7, 0x7, 0xb26d, 0x2, @mcast1, @mcast2, 0x80, 0x7800, 0x68e4e3b1, 0x1000}})
r3 = io_uring_setup(0x888, &(0x7f0000000680)={0x0, 0x1e49, 0x8, 0x2, 0xf0, 0x0, r0})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000840)={"33ebc47627c08822c30fb710", &(0x7f0000000740)="b92ab8845516e74abc69d0a4c145a6c83961094bc3cd4aa09145c28875cf69cc36a50fdd523a353fd8ca9d7827a03aa33040aff1ed6d026e450f31f252567949365d8b25ecdd005ddc84d7f451b5dfeb6ab17b163b3dbd3427af60a646a9bc796d020cf34facd2d302a0efda07e242280348f9", 0x73, 0x50000000, &(0x7f00000007c0)={0x6d, 0x0, 0x8, 0x4, 0x0, 0x1, 0x0, "b506fbe2", 0x3f, "8737cceb", 0x6, 0x9d, 0x5, "d607a4", "bd52c6554b88fdec05f3f31e3a420aec25fadf79a098bef2c4a5658de10c98f56e301a7b39374d6a2deddd107671"}, 0x1, 0x7fffffff, 0xb541, &(0x7f0000000800)})
mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=0xc)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000900)={{0x1, 0x1, 0x18, <r5=>r1, {0xe3}}, './file0\x00'})
sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xf8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x67}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe4f7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7d}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x20040804)
mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x1010, r0, 0x9)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000b00)={{0x1, 0x1, 0x18, <r6=>r2}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, <r7=>r4, @in_args={0x1}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0/file0\x00'})
r8 = add_key$keyring(&(0x7f0000000c40), &(0x7f0000000c80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r8)
fstat(0xffffffffffffffff, &(0x7f0000000cc0))

08:15:51 executing program 3:
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x55b}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = accept4(r3, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f00000002c0)=0x80, 0x800)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r5=>r3, {0x8}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r7=>0x0, 0x29, 0x0, 0x5, 0x8, 0x8, @mcast2, @mcast1, 0x0, 0x40, 0xfffffff7, 0x6}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'ip6tnl0\x00', <r8=>0x0, 0x4, 0x5, 0x1f, 0xd78, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7, 0xe3ffd9f5d71035c1, 0x2, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', <r9=>0x0, 0x29, 0x5, 0x1f, 0x0, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x3, 0x80}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6gre0\x00', <r10=>0x0, 0x29, 0x1, 0x40, 0x1000, 0x0, @local, @mcast1, 0x7, 0x7800, 0xfa80, 0x9}})
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000d00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f00000006c0)={0x5c4, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x80, 0x9, 0xfffffe00}, {0x0, 0x1, 0x5, 0x800}, {0x5, 0xd9, 0x4, 0x5}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8305}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x502b}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}]}, 0x5c4}, 0x1, 0x0, 0x0, 0x4094}, 0x8)
r11 = socket(0x2a, 0x4, 0x2)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e80)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000f80)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000fc0)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000010c0)=0xe8)
sendmsg$ETHTOOL_MSG_RINGS_GET(r11, &(0x7f0000001240)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xc8, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x212f304d2635bd6a}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20048091}, 0x8080)
accept4$packet(r5, &(0x7f0000001280)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000012c0)=0x14, 0x800)
sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f00000019c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f00000017c0)={0x190, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x1}, 0x8814)

08:15:51 executing program 4:
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$clear(0x7, r0)
r2 = add_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="2cde4f17716ea97a9f475aa04f34512212e72f1bf740f881665a83cf5b0f2cc0ba7d554ab41bfbee1dfc46304d2bf929c9610832ef714650ee85e762df581f95fa513aacd2841643ce7f402ec45a80678bc149d9aeedaefce594d10ed73c0c799a673126da80fa7b8a5f22a7abc4feb3f9d7f78bfbf858628b39f9ae60dcd4b5e98aa2c0791b24a8c00c41bee6a28f02f124777e04ee0ac61e720fa534be88bb2e1ad9e413c21d5cad43119d84b532c8007246f6d3d2f8d158f2a1a4f74d0de075fd1e36a618404248e55ebd95a14bb700", 0xd1, r0)
r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$reject(0x13, r2, 0x1, 0x1f, r3)
r4 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$link(0x8, r1, r4)
r5 = add_key(&(0x7f0000000380)='blacklist\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r3)
keyctl$unlink(0x9, r3, r5)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r2, 0xfffffffffffffffa, 0x1)
r6 = add_key(&(0x7f0000000400)='.dead\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r6, r5, 0x0)
keyctl$get_persistent(0x16, 0xee01, r5)
r7 = add_key(&(0x7f0000000480)='big_key\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
add_key(&(0x7f0000000500)='logon\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000580)="74ae00d53cc4b5492c2a60ad018bb72f747f4fa5809901cd6aa8e379d3ee17b858f9f7f08e809a5aa0ff97f5b3fb9e5bba5b3a205bff06e9e873bb43743a3ba886c877777c1c9f8d02f20a1c9d49ee6ad9148f6cbffc26d8c5ea903f5c10dfd87e3ff49ad7c095354d0266cd058262d716658dee627199ffa22736af3de588b3763f03d4bf07d1e299618bd64cb65f9607c29187eb0118c3f5e759899b120575daf5375e3796fa512cd8a922a7b15606cf1b4a9661", 0xb5, r7)
syz_open_dev$usbmon(&(0x7f0000000640), 0x9, 0x200040)
keyctl$get_persistent(0x16, 0xee00, r1)
add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x10)

08:15:51 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0xebb8, 0xff, 0xffff, 0x80000000, 0x200, 0x2, 0x55, 0x3f}, &(0x7f0000000040)={0x4, 0x6, 0x6, 0xd23c, 0x4b3, 0x2, 0x80000000, 0xe8}, &(0x7f0000000080)={0x7, 0x97c, 0x7, 0x3, 0xe682, 0x1ff, 0xfffffffffffffc41, 0x10000}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8})
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = io_uring_setup(0x1404, &(0x7f0000000180)={0x0, 0x1, 0xec4ea5b8d741fb23, 0x0, 0x33c})
r2 = accept4$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14, 0x80000)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x121400, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r3, 0x2f, 0x81, 0x3f, 0x7fffffff, 0x29, @empty, @local, 0x80, 0x20, 0x80000001, 0x1ff}})
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000480)=0xe8)
r7 = syz_open_dev$mouse(&(0x7f00000004c0), 0x1, 0x4400)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48d4}, 0x20004004)
fstat(r2, &(0x7f0000000640))
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r8=>r1, {0x4}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r8, 0x89f6, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl2\x00', <r9=>r5, 0x2f, 0xbc, 0x3f, 0x20, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x7, 0x7, 0x4}})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000007c0)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl0\x00', r10, 0x2f, 0xdd, 0x1, 0x80, 0x12, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8, 0x2, 0x80000001}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0))
clock_getres(0x2, &(0x7f0000000900))
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000a40)=0xe8)
r12 = getegid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r8, {r6, r12}}, './file0\x00'})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x130, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x44000}, 0x4010)

08:15:52 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x8}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x8d0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r2, {0x4}}, './file0\x00'})
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0xe05, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x43}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x8040)
connect$bt_sco(r2, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r2, {0x1}}, './file0\x00'})
syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r4)
ioctl$CDROMREADTOCENTRY(r4, 0x5306, &(0x7f0000000340)={0x7f, 0x2, 0xb, 0x0, @msf={0x3, 0x5, 0x3}, 0x20})
socket(0x10, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'})
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000, 0x0)
accept4(r3, &(0x7f0000000400)=@xdp={0x2c, 0x0, <r6=>0x0}, &(0x7f0000000480)=0x80, 0x80000)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000004c0)={@private1, @rand_addr=' \x01\x00', @mcast2, 0xa49, 0xfc00, 0x8, 0x0, 0x4, 0x850c0106, r6})
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x40200, 0x0)
fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000540)='.#-\\#\x00', &(0x7f0000000580)='./file0\x00', r7)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r8=>r1}, './file0\x00'})
ioctl$MON_IOCT_RING_SIZE(r8, 0x9204, 0xbaac8)
bind(0xffffffffffffffff, &(0x7f0000000640)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x80)

08:15:52 executing program 7:
ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304)
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000))
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0xc5, 0x1)
ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000080))
ioctl$CDROM_GET_CAPABILITY(r0, 0x5331)
r1 = socket(0x10, 0x6, 0xf8d)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x7fff}}, './file0\x00'})
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8800}, 0x10)
r4 = accept4$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14, 0x800)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', <r6=>r5, 0x2f, 0xff, 0x4, 0xd1c, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}, @mcast2, 0x1, 0x8, 0x1, 0x3ff}})
r7 = accept4$packet(r1, &(0x7f0000000500)={0x11, 0x0, <r8=>0x0}, &(0x7f0000000540)=0x14, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r9=>r4, {0x1}}, './file0\x00'})
ioctl$SNAPSHOT_S2RAM(r9, 0x330b)
fstat(r7, &(0x7f00000005c0))
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl1\x00', <r11=>r5, 0x4, 0x0, 0x4, 0x8, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x40, 0x3, 0x8}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000780)={'wg0\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f00000009c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xdc, r10, 0x3514f411f0c1bdd9, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000010)

[   85.771300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.778003] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.780757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.788070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.794105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   85.798966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.894390] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.901359] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.903215] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.922848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.926674] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   85.928657] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.972990] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.981615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.983398] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.990660] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.994881] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   85.999711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.025357] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.037407] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.039633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.051262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.055564] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   86.057822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.111726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   86.125846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   86.155266] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   86.157667] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.159415] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   86.161688] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   86.171107] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   86.177838] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   86.180569] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   86.186147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.196916] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   86.200350] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   86.202210] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.205884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   86.212885] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   86.233916] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   86.236012] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   86.238931] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   86.257667] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   86.260227] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   86.282885] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   86.284684] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   86.288965] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   86.306168] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   87.855517] Bluetooth: hci0: command tx timeout
[   87.980370] Bluetooth: hci1: command tx timeout
[   88.043638] Bluetooth: hci2: command tx timeout
[   88.107575] Bluetooth: hci3: command tx timeout
[   88.236635] Bluetooth: hci5: command tx timeout
[   88.299597] Bluetooth: hci4: command tx timeout
[   88.363804] Bluetooth: hci7: command tx timeout
[   88.427721] Bluetooth: hci6: command tx timeout
[   89.899513] Bluetooth: hci0: command tx timeout
[   90.028529] Bluetooth: hci1: command tx timeout
[   90.091649] Bluetooth: hci2: command tx timeout
[   90.156545] Bluetooth: hci3: command tx timeout
[   90.284684] Bluetooth: hci5: command tx timeout
[   90.348514] Bluetooth: hci4: command tx timeout
[   90.411614] Bluetooth: hci7: command tx timeout
[   90.477510] Bluetooth: hci6: command tx timeout
[   91.948559] Bluetooth: hci0: command tx timeout
[   92.076651] Bluetooth: hci1: command tx timeout
[   92.140686] Bluetooth: hci2: command tx timeout
[   92.203694] Bluetooth: hci3: command tx timeout
[   92.332515] Bluetooth: hci5: command tx timeout
[   92.396496] Bluetooth: hci4: command tx timeout
[   92.460500] Bluetooth: hci7: command tx timeout
[   92.524504] Bluetooth: hci6: command tx timeout
[   93.997623] Bluetooth: hci0: command tx timeout
[   94.124761] Bluetooth: hci1: command tx timeout
[   94.188525] Bluetooth: hci2: command tx timeout
[   94.252793] Bluetooth: hci3: command tx timeout
[   94.379621] Bluetooth: hci5: command tx timeout
[   94.444739] Bluetooth: hci4: command tx timeout
[   94.508599] Bluetooth: hci7: command tx timeout
[   94.572634] Bluetooth: hci6: command tx timeout
[  145.948808] syz-executor.7 (281) used greatest stack depth: 23824 bytes left
[  148.609566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  148.612652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  148.613884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  148.619192] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  148.624675] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  148.625973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  148.793078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  148.803004] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  148.817788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  148.829036] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  148.837112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  148.840251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  148.842201] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  148.844299] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  148.847251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  148.850724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  148.855302] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  148.863356] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  148.887905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  148.892328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  148.894265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  148.902750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  148.907593] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  148.913090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  148.941541] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  148.944159] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  148.948386] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  148.953858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  148.956928] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  148.959024] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  148.982392] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  148.985000] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  148.987860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  148.996200] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  149.029934] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  149.039863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  149.072007] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  149.077037] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  149.084115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  149.092507] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  149.116023] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  149.127053] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  149.127397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  149.131322] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  149.133111] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  149.145921] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  149.148373] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  149.160883] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  150.700746] Bluetooth: hci0: command tx timeout
[  150.956586] Bluetooth: hci2: command tx timeout
[  150.957785] Bluetooth: hci1: command tx timeout
[  151.019725] Bluetooth: hci3: command tx timeout
[  151.021014] Bluetooth: hci4: command tx timeout
[  151.147578] Bluetooth: hci5: command tx timeout
[  151.211601] Bluetooth: hci6: command tx timeout
[  151.276656] Bluetooth: hci7: command tx timeout
[  152.747685] Bluetooth: hci0: command tx timeout
[  153.003963] Bluetooth: hci1: command tx timeout
[  153.005937] Bluetooth: hci2: command tx timeout
[  153.067761] Bluetooth: hci4: command tx timeout
[  153.068773] Bluetooth: hci3: command tx timeout
[  153.196507] Bluetooth: hci5: command tx timeout
[  153.259615] Bluetooth: hci6: command tx timeout
[  153.323624] Bluetooth: hci7: command tx timeout
[  154.795721] Bluetooth: hci0: command tx timeout
[  155.053595] Bluetooth: hci1: command tx timeout
[  155.054086] Bluetooth: hci2: command tx timeout
[  155.118478] Bluetooth: hci4: command tx timeout
[  155.118929] Bluetooth: hci3: command tx timeout
[  155.244578] Bluetooth: hci5: command tx timeout
[  155.308655] Bluetooth: hci6: command tx timeout
[  155.373043] Bluetooth: hci7: command tx timeout
[  156.844548] Bluetooth: hci0: command tx timeout
[  157.100709] Bluetooth: hci2: command tx timeout
[  157.101201] Bluetooth: hci1: command tx timeout
[  157.164503] Bluetooth: hci3: command tx timeout
[  157.164950] Bluetooth: hci4: command tx timeout
[  157.293452] Bluetooth: hci5: command tx timeout
[  157.355865] Bluetooth: hci6: command tx timeout
[  157.420738] Bluetooth: hci7: command tx timeout
[  210.885997] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  210.888955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  210.900028] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  210.904084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  210.906226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  210.906690] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  210.915901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  210.918114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  210.921187] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  210.921836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  210.925174] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  210.925738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  211.196847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  211.200499] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  211.202380] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  211.207805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  211.211535] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  211.214239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  211.266303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  211.271227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  211.276930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  211.301030] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  211.307216] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  211.315564] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  211.352810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  211.363046] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  211.377680] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  211.380111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  211.384583] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  211.388026] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  211.390828] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  211.392886] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  211.394374] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  211.437839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  211.438781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  211.450714] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  211.453111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  211.505911] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  211.508071] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  211.513671] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  211.532249] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  211.540108] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  211.562081] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  211.575065] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  211.593810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  211.606289] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  211.655713] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  211.659501] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  212.972236] Bluetooth: hci1: command tx timeout
[  212.972262] Bluetooth: hci0: command tx timeout
[  213.292387] Bluetooth: hci2: command tx timeout
[  213.419533] Bluetooth: hci3: command tx timeout
[  213.483548] Bluetooth: hci5: command tx timeout
[  213.612590] Bluetooth: hci4: command tx timeout
[  213.740138] Bluetooth: hci7: command tx timeout
[  213.741297] Bluetooth: hci6: command tx timeout
[  215.019531] Bluetooth: hci1: command tx timeout
[  215.019560] Bluetooth: hci0: command tx timeout
[  215.339471] Bluetooth: hci2: command tx timeout
[  215.469467] Bluetooth: hci3: command tx timeout
[  215.532481] Bluetooth: hci5: command tx timeout
[  215.659509] Bluetooth: hci4: command tx timeout
[  215.787620] Bluetooth: hci7: command tx timeout
[  215.788102] Bluetooth: hci6: command tx timeout
[  217.067691] Bluetooth: hci0: command tx timeout
[  217.068181] Bluetooth: hci1: command tx timeout
[  217.387615] Bluetooth: hci2: command tx timeout
[  217.515505] Bluetooth: hci3: command tx timeout
[  217.579585] Bluetooth: hci5: command tx timeout
[  217.707723] Bluetooth: hci4: command tx timeout
[  217.835528] Bluetooth: hci6: command tx timeout
[  217.836031] Bluetooth: hci7: command tx timeout
[  219.116012] Bluetooth: hci1: command tx timeout
[  219.116548] Bluetooth: hci0: command tx timeout
[  219.436047] Bluetooth: hci2: command tx timeout
[  219.563496] Bluetooth: hci3: command tx timeout
[  219.627601] Bluetooth: hci5: command tx timeout
[  219.755500] Bluetooth: hci4: command tx timeout
[  219.883652] Bluetooth: hci7: command tx timeout
[  219.884155] Bluetooth: hci6: command tx timeout
[  269.832891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.833715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.377016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.377731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.274878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  273.279892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  273.282039] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  273.287222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  273.292947] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  273.296519] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  273.400923] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  273.403817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  273.405619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  273.411845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  273.414561] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  273.416687] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  273.680189] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  273.682238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  273.684935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  273.694734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  273.704992] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  273.715130] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  273.717148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  273.726771] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  273.729794] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  273.744086] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  273.749021] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  273.751046] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  273.758595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  273.760927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  273.774975] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  273.779038] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  273.781972] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  273.784734] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  273.788519] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  273.790254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  273.796265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  273.800552] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  273.802977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  273.811360] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  273.830865] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  273.837731] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  273.841960] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  273.844018] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  273.862750] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  273.862821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  273.876791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  273.892800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  273.897236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  273.902712] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  273.921746] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  273.942940] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  275.371627] Bluetooth: hci0: command tx timeout
[  275.437450] Bluetooth: hci1: command tx timeout
[  275.819659] Bluetooth: hci5: command tx timeout
[  275.947471] Bluetooth: hci4: command tx timeout
[  275.948113] Bluetooth: hci7: command tx timeout
[  276.011578] Bluetooth: hci2: command tx timeout
[  276.011670] Bluetooth: hci3: command tx timeout
[  276.076477] Bluetooth: hci6: command tx timeout
[  277.420763] Bluetooth: hci0: command tx timeout
[  277.486531] Bluetooth: hci1: command tx timeout
[  277.868504] Bluetooth: hci5: command tx timeout
[  277.995818] Bluetooth: hci4: command tx timeout
[  277.997756] Bluetooth: hci7: command tx timeout
[  278.059722] Bluetooth: hci3: command tx timeout
[  278.060603] Bluetooth: hci2: command tx timeout
[  278.123562] Bluetooth: hci6: command tx timeout
[  279.467569] Bluetooth: hci0: command tx timeout
[  279.532358] Bluetooth: hci1: command tx timeout
[  279.915469] Bluetooth: hci5: command tx timeout
[  280.043520] Bluetooth: hci4: command tx timeout
[  280.043678] Bluetooth: hci7: command tx timeout
[  280.107533] Bluetooth: hci3: command tx timeout
[  280.108574] Bluetooth: hci2: command tx timeout
[  280.171493] Bluetooth: hci6: command tx timeout
[  281.515558] Bluetooth: hci0: command tx timeout
[  281.581488] Bluetooth: hci1: command tx timeout
[  281.964995] Bluetooth: hci5: command tx timeout
[  282.092637] Bluetooth: hci4: command tx timeout
[  282.092772] Bluetooth: hci7: command tx timeout
[  282.156505] Bluetooth: hci2: command tx timeout
[  282.156519] Bluetooth: hci3: command tx timeout
[  282.221048] Bluetooth: hci6: command tx timeout
[  335.546766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  335.557291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  335.559922] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  335.567091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  335.575029] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  335.578975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  335.989702] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  335.993257] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  335.998300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  336.004893] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  336.008233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  336.011287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  336.072808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  336.075148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  336.080561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  336.087554] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  336.102745] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  336.114741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  336.142726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  336.151825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  336.159800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  336.163636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  336.166090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  336.174777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  336.179822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  336.186669] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  336.194808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  336.199517] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  336.205017] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  336.233320] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  336.248629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  336.299774] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  336.302950] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  336.306959] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  336.308542] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  336.324324] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  336.337016] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  336.368316] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  336.370627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  336.375941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  336.388967] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  336.404751] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  336.406073] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  336.409901] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  336.415643] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  336.448248] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  336.474684] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  336.493315] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  337.645442] Bluetooth: hci0: command tx timeout
[  338.091499] Bluetooth: hci1: command tx timeout
[  338.219583] Bluetooth: hci4: command tx timeout
[  338.347502] Bluetooth: hci2: command tx timeout
[  338.603498] Bluetooth: hci3: command tx timeout
[  338.667552] Bluetooth: hci5: command tx timeout
[  338.731590] Bluetooth: hci6: command tx timeout
[  338.795706] Bluetooth: hci7: command tx timeout
[  339.691573] Bluetooth: hci0: command tx timeout
[  340.140483] Bluetooth: hci1: command tx timeout
[  340.268414] Bluetooth: hci4: command tx timeout
[  340.395454] Bluetooth: hci2: command tx timeout
[  340.651475] Bluetooth: hci3: command tx timeout
[  340.718462] Bluetooth: hci5: command tx timeout
[  340.779634] Bluetooth: hci6: command tx timeout
[  340.843609] Bluetooth: hci7: command tx timeout
[  341.739433] Bluetooth: hci0: command tx timeout
[  342.187991] Bluetooth: hci1: command tx timeout
[  342.316400] Bluetooth: hci4: command tx timeout
[  342.444643] Bluetooth: hci2: command tx timeout
[  342.700559] Bluetooth: hci3: command tx timeout
[  342.764446] Bluetooth: hci5: command tx timeout
[  342.827470] Bluetooth: hci6: command tx timeout
[  342.891560] Bluetooth: hci7: command tx timeout
[  343.790452] Bluetooth: hci0: command tx timeout
[  344.235640] Bluetooth: hci1: command tx timeout
[  344.364548] Bluetooth: hci4: command tx timeout
[  344.492445] Bluetooth: hci2: command tx timeout
[  344.747467] Bluetooth: hci3: command tx timeout
[  344.811425] Bluetooth: hci5: command tx timeout
[  344.876449] Bluetooth: hci6: command tx timeout
[  344.940556] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
08:20:57  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffffffff815f1180 RCX=0000000000000001 RDX=1ffff1100d9c1384
RSI=ffffffff818abc9b RDI=ffff88806ce09b4c RBP=ffff88806ce09b10 RSP=ffff88806ce09a78
R8 =0000000000000001 R9 =ffff88806ce09ab8 R10=000000000003a808 R11=000000000001d3b1
R12=ffff88806ce09b40 R13=0000000000000000 R14=ffff88802aceb780 R15=ffff888033af25c8
RIP=ffffffff812d1b49 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fa8d9f15540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa8d9ff8a20 CR3=000000002a36e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e
XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000006d69747465
XMM04=006d6f72667663657200796164666f65 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff8120584a RBX=ffffffff815f1180 RCX=0000000000000001 RDX=1ffff11006a55f03
RSI=ffffffff8120584a RDI=ffff8880352af888 RBP=ffff8880352af858 RSP=ffff8880352af7b8
R8 =0000000000000001 R9 =ffff8880352af800 R10=000000000003a808 R11=00000000000081da
R12=ffff8880352af888 R13=0000000000000000 R14=ffff888033e8b780 R15=ffff88800e3336c0
RIP=ffffffff815f1184 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7d20dce000 CR3=0000000026866000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=315f315f4c53534e45504f00315f315f XMM03=00000000000000000061657268747000
XMM04=647264656d69745f6b636f6c77725f64 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000