[   54.643064] sshd (228) used greatest stack depth: 23848 bytes left

Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:55984' (ECDSA) to the list of known hosts.
2025/01/14 09:30:21 fuzzer started
2025/01/14 09:30:21 dialing manager at localhost:35571
syzkaller login: [   61.811813] cgroup: Unknown subsys name 'net'
[   61.882993] cgroup: Unknown subsys name 'cpuset'
[   61.905085] cgroup: Unknown subsys name 'rlimit'
[   67.622040] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
[   78.016417] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/14 09:30:39 syscalls: 205
2025/01/14 09:30:39 code coverage: enabled
2025/01/14 09:30:39 comparison tracing: enabled
2025/01/14 09:30:39 extra coverage: enabled
2025/01/14 09:30:39 setuid sandbox: enabled
2025/01/14 09:30:39 namespace sandbox: enabled
2025/01/14 09:30:39 Android sandbox: enabled
2025/01/14 09:30:39 fault injection: enabled
2025/01/14 09:30:39 leak checking: enabled
2025/01/14 09:30:39 net packet injection: enabled
2025/01/14 09:30:39 net device setup: enabled
2025/01/14 09:30:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/14 09:30:39 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/14 09:30:39 USB emulation: enabled
2025/01/14 09:30:39 hci packet injection: enabled
2025/01/14 09:30:39 wifi device emulation: enabled
2025/01/14 09:30:39 802.15.4 emulation: enabled
2025/01/14 09:30:39 fetching corpus: 0, signal 0/0 (executing program)
2025/01/14 09:30:41 starting 8 fuzzer processes
09:30:41 executing program 0:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0)
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000440)={0x1eb, 0x11, &(0x7f0000000040)="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"})
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000480)={0x3f, 0x7f, 0xc675})
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000004c0)={0xffffffffffffffff, 0x7, 'xf|', 0x4, 0x80})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000500)={0x1, 0x3ff, "5bd0d9", 0x9, 0x9})
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000540)={0x1, 0x8b2, 0x7})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000640)=0x1f, 0x4)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000680))
setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000006c0)={0xffffff5e, [0x8, 0x3], 0xb58}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r3)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xb4, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff001}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000040}, 0x20006050)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r3)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, r5, 0xfa3e11627430260, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x840)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x4000000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e80)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4}, 0xfff)

09:30:41 executing program 1:
prctl$PR_GET_FP_MODE(0x2e)
prctl$PR_GET_FP_MODE(0x2e)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
prctl$PR_GET_FP_MODE(0x2e)
prctl$PR_GET_FP_MODE(0x2e)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]})
prctl$PR_GET_FP_MODE(0x2e)
getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
syz_open_dev$usbmon(&(0x7f00000001c0), 0x4, 0x10700)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x10b800, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000240))
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000280)=0x2, 0x4)
connect$802154_dgram(0xffffffffffffffff, &(0x7f00000002c0)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14)
getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000380)=0x7, 0x4)
prctl$PR_GET_FP_MODE(0x2e)
syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0)
get_robust_list(0xffffffffffffffff, &(0x7f0000000500)=&(0x7f00000004c0)={&(0x7f0000000440)={&(0x7f0000000400)}, 0x0, &(0x7f0000000480)}, &(0x7f0000000540)=0x18)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000005c0)={0x3, 0x6, "4da6fb", 0x9, 0x2})

09:30:41 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2b, 0x100, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040081}, 0x4001)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:hald_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000800}, 0x51)
sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0xe20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c4}, 0x4040)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan1\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r2, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8010)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x20000805)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}]}]}, 0x20}}, 0x40810)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x44004041)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a40)={'wpan0\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000a80)={'wpan4\x00', <r11=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r8, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r9, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x855)

09:30:41 executing program 3:
prctl$PR_SVE_GET_VL(0x33, 0x15b79)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x36}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040040}, 0x8a5)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x4000000)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x800, 0x70bd2b, 0x2, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x4000)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xc0, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:qemu_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:var_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4004845}, 0x44)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x2c}}, 0x4)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r3, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44004)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb0, r2, 0x1600, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x80}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000900), 0x648001, 0x0)
ioctl$TIOCCBRK(r5, 0x5428)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000009c0)={'wpan4\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000004)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)

[   80.281007] audit: type=1400 audit(1736847041.238:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:30:41 executing program 4:
socketpair(0x1d, 0x2, 0x4, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
socketpair(0x10, 0xa, 0x4, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000001}, 0x20008000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008080}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x34}}, 0x8001)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r2, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x8050}, 0x4000000)
sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x400c8c0)
syz_io_uring_setup(0x1a8e, &(0x7f0000000680)={0x0, 0x4ea2, 0x8, 0x3, 0x2e2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000700), &(0x7f0000000740)=<r8=>0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
syz_io_uring_submit(0x0, r8, &(0x7f00000007c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r9, 0x40, 0x0, 0xfe, 0x1}, 0x4)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r5)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r10, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x84502010}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r11, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x4c)
sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, r11, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24040801)
ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000ac0))
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000800)

09:30:41 executing program 5:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ieee802154={0x24, @short}, &(0x7f0000000080)=0x80)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, 0x0, 0x2, 0x0, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x801)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000540)=0xe8)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xf8, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x40051)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl0\x00', <r3=>0x0, 0x4, 0x4, 0x8, 0xe43d, 0x4c, @remote, @private2, 0x20, 0x8, 0xffffffff, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl1\x00', <r4=>r3, 0x2f, 0xfe, 0x0, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x10, 0x40, 0x9e37, 0x81}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl0\x00', <r5=>r4, 0x2f, 0x2, 0xf8, 0x800, 0x4c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x8, 0xfffffffb, 0x2}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8004)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wpan4\x00', <r6=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x20008009)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000000cc0), r0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000e80)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000f80)=0xe8)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000010c0)={'tunl0\x00', &(0x7f0000000fc0)={'syztnl1\x00', <r9=>r1, 0x80, 0x700, 0x8, 0x4, {{0x36, 0x4, 0x1, 0xe, 0xd8, 0x64, 0x0, 0x6, 0x29, 0x0, @loopback, @local, {[@generic={0x88, 0x5, "4067d1"}, @rr={0x7, 0x1b, 0x5, [@empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @loopback, @empty, @private=0xa010102]}, @cipso={0x86, 0x43, 0x3, [{0x0, 0xf, "0122ceaa56f46276be10765d81"}, {0x5, 0x11, "6643b3e044ea09bb37a514b8e8e375"}, {0x7, 0x4, "e8db"}, {0x7, 0x11, "75c6d5fa0fe26bf5b958ece05650e1"}, {0x7, 0x8, "8243eb489f9c"}]}, @generic={0x88, 0xc, "2743b6b676b3cc44e954"}, @timestamp_prespec={0x44, 0x1c, 0x77, 0x3, 0x0, [{@remote, 0x411cc414}, {@private=0xa010100, 0x7fff}, {@multicast2, 0x3}]}, @ssrr={0x89, 0x7, 0x4e, [@private=0xa010101]}, @ssrr={0x89, 0x7, 0x28, [@private=0xa010100]}, @end, @ssrr={0x89, 0x27, 0x1d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0xb}, @remote, @rand_addr=0x64010101, @multicast2, @remote]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000012c0)={'syztnl2\x00', &(0x7f00000011c0)={'gretap0\x00', <r10=>0x0, 0x7800, 0x8000, 0x80000, 0x0, {{0x2c, 0x4, 0x2, 0x8, 0xb0, 0x65, 0x0, 0x2a, 0x2f, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x15, 0x3, 0x3, [{@multicast2}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x8000}]}, @timestamp_addr={0x44, 0x24, 0xe6, 0x1, 0x9, [{@remote, 0xfffffffd}, {@rand_addr=0x64010100, 0x75}, {@broadcast, 0x1}, {@loopback, 0x1000}]}, @rr={0x7, 0x1f, 0x7d, [@private=0xa010100, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x2e}]}, @ssrr={0x89, 0xf, 0x85, [@empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ssrr={0x89, 0xf, 0xa, [@empty, @empty, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x1c, 0x16, 0x1, 0x7, [{@loopback, 0xb0000000}, {@loopback, 0x9}, {@multicast2, 0x3}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001440)={'sit0\x00', &(0x7f00000013c0)={'syztnl2\x00', <r11=>r1, 0x29, 0x0, 0x5, 0x4, 0x40, @dev={0xfe, 0x80, '\x00', 0x1a}, @private1, 0x7800, 0x0, 0x1, 0x3}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001480)={'team0\x00', <r12=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001640)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', <r13=>r1, 0x1, 0x40, 0x400, 0x2, {{0x19, 0x4, 0x3, 0x35, 0x64, 0x66, 0x0, 0x5, 0x2f, 0x0, @loopback, @multicast2, {[@ssrr={0x89, 0x7, 0x6, [@empty]}, @timestamp_addr={0x44, 0x44, 0x65, 0x1, 0x6, [{@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x47}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0x11f}, {@remote, 0x642035d1}, {@broadcast, 0xf2b}, {@dev={0xac, 0x14, 0x14, 0x2d}}, {@loopback, 0x8}]}, @ra={0x94, 0x4}]}}}}})
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000002f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002100)={0xda0, r7, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x2a0, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x6, 0x0, 0x1f, 0x76}, {0x7, 0x9, 0x3, 0x1cc}, {0x7ff, 0x96, 0x7, 0x10001}, {0x9, 0x45, 0x3, 0x8}, {0x9, 0x7f, 0x20, 0x1}, {0xfff8, 0x8, 0x8, 0x5}, {0x401, 0x81, 0x4, 0x2}, {0x100, 0x3, 0x81, 0x842f169}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x730abae5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r5}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x80, 0x2, 0x8}, {0x5, 0x40, 0xa7, 0xcf}, {0x7fff, 0x3, 0x6}, {0xfff, 0x9, 0x7, 0x77a}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd0e}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r1}, {0x280, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x617}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x70}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r3}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r3}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x284, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0xfc, 0xb0, 0x8}, {0x0, 0x3, 0x1, 0x2}, {0x8, 0x0, 0x40, 0x8}, {0x8, 0x0, 0xff, 0xfff}, {0x0, 0x7, 0x80, 0x8}, {0x100, 0xe8, 0x7, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xda0}}, 0x24000041)

09:30:41 executing program 6:
sysfs$2(0x2, 0x7fa2, &(0x7f0000000000)=""/236)
r0 = fork()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000100)={0x1})
ptrace$getsig(0x4202, r0, 0xc108, &(0x7f0000000140))
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
sysfs$2(0x2, 0x401, &(0x7f0000000300)=""/99)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r2 = accept(0xffffffffffffffff, &(0x7f0000000480)=@can={0x1d, <r3=>0x0}, &(0x7f0000000500)=0x80)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000540)=0x7fff, 0x4)
sched_getattr(r0, &(0x7f0000000580)={0x38}, 0x38, 0x0)
sysfs$2(0x2, 0xffff, &(0x7f00000005c0)=""/253)
sysfs$2(0x2, 0x3dd4, &(0x7f00000006c0)=""/37)
ptrace$getsig(0x4202, r0, 0x3, &(0x7f0000000700))
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:init_var_run_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480d4}, 0x20040010)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000008c0), r2)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'ip6_vti0\x00', <r6=>r3, 0x0, 0x1, 0x81, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, 0x10, 0x8000, 0x4, 0x4e82}})
accept4$packet(r2, &(0x7f0000000a80)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14, 0x80000)
sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000d80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b00)={0x240, r5, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x80, 0x2, 0x4}, {0xfffa, 0x9, 0x0, 0xfffffc01}, {0x2, 0x5, 0xfe, 0x5}, {0x4, 0x8, 0x8, 0x6}, {0x6, 0x7c, 0x4, 0x2}]}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0xc091}, 0x20040840)

09:30:41 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x40001)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x68, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x20000841)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14015}, 0x5)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0xa0faa237e5a66cdd, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x80)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000500)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x4000000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008004)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r1, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x44)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r1, 0xfebd7718417a458e, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x880)
sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044081}, 0x40041)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, r6, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xa0, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040}, 0x24044000)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

[   81.523410] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.548801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.554062] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.558942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.561102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   81.562490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   81.697599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   81.701350] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   81.703292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   81.713011] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   81.719613] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   81.721019] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   81.777533] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   81.786461] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   81.790883] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   81.795928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.799152] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   81.803143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.819988] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.823154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.857622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.866590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   81.867015] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   81.871585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.873096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   81.874788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   81.880959] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   81.888246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   81.892816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   81.898548] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   81.899063] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   81.902915] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   81.904329] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   81.905844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   81.907228] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   81.909620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   81.910632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.912840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   81.920469] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   81.923118] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   81.926192] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   81.928101] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   81.929428] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   81.934967] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   81.943059] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   81.995545] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.007374] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   82.008311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.605905] Bluetooth: hci0: command tx timeout
[   83.795809] Bluetooth: hci1: command tx timeout
[   83.861186] Bluetooth: hci2: command tx timeout
[   83.988411] Bluetooth: hci3: command tx timeout
[   83.988788] Bluetooth: hci5: command tx timeout
[   84.051861] Bluetooth: hci4: command tx timeout
[   84.052068] Bluetooth: hci6: command tx timeout
[   84.052358] Bluetooth: hci7: command tx timeout
[   85.651839] Bluetooth: hci0: command tx timeout
[   85.843793] Bluetooth: hci1: command tx timeout
[   85.907828] Bluetooth: hci2: command tx timeout
[   86.035846] Bluetooth: hci5: command tx timeout
[   86.037980] Bluetooth: hci3: command tx timeout
[   86.099829] Bluetooth: hci4: command tx timeout
[   86.099947] Bluetooth: hci7: command tx timeout
[   86.102326] Bluetooth: hci6: command tx timeout
[   87.699954] Bluetooth: hci0: command tx timeout
[   87.892691] Bluetooth: hci1: command tx timeout
[   87.957633] Bluetooth: hci2: command tx timeout
[   88.084020] Bluetooth: hci3: command tx timeout
[   88.084972] Bluetooth: hci5: command tx timeout
[   88.149831] Bluetooth: hci6: command tx timeout
[   88.149955] Bluetooth: hci4: command tx timeout
[   88.150049] Bluetooth: hci7: command tx timeout
[   89.747864] Bluetooth: hci0: command tx timeout
[   89.939838] Bluetooth: hci1: command tx timeout
[   90.003846] Bluetooth: hci2: command tx timeout
[   90.131844] Bluetooth: hci5: command tx timeout
[   90.131971] Bluetooth: hci3: command tx timeout
[   90.195895] Bluetooth: hci7: command tx timeout
[   90.196036] Bluetooth: hci4: command tx timeout
[   90.196105] Bluetooth: hci6: command tx timeout
[  143.843445] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  143.847875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  143.849317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  143.860579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  143.867539] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  143.869343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  143.969025] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  143.972115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  143.972596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.974615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  143.982142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.984458] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.990325] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.991719] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  143.992905] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.995024] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  144.001348] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  144.003783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  144.025076] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  144.027134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  144.028780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  144.038941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  144.040996] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  144.042414] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  144.283911] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  144.286537] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  144.288977] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  144.308080] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  144.309104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  144.313002] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  144.317165] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  144.317912] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  144.351066] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  144.356177] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  144.356365] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  144.362303] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  144.364771] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  144.364902] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  144.365020] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  144.368415] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  144.369798] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  144.371147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  144.379237] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  144.379984] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  144.386215] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  144.389281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  144.390990] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  144.392264] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  145.940845] Bluetooth: hci0: command tx timeout
[  146.067753] Bluetooth: hci1: command tx timeout
[  146.068165] Bluetooth: hci2: command tx timeout
[  146.069343] Bluetooth: hci3: command tx timeout
[  146.451769] Bluetooth: hci6: command tx timeout
[  146.452199] Bluetooth: hci4: command tx timeout
[  146.452323] Bluetooth: hci7: command tx timeout
[  146.452461] Bluetooth: hci5: command tx timeout
[  147.988089] Bluetooth: hci0: command tx timeout
[  148.115816] Bluetooth: hci3: command tx timeout
[  148.116540] Bluetooth: hci1: command tx timeout
[  148.116604] Bluetooth: hci2: command tx timeout
[  148.499899] Bluetooth: hci6: command tx timeout
[  148.500877] Bluetooth: hci7: command tx timeout
[  148.500978] Bluetooth: hci4: command tx timeout
[  148.501047] Bluetooth: hci5: command tx timeout
[  150.035788] Bluetooth: hci0: command tx timeout
[  150.163858] Bluetooth: hci3: command tx timeout
[  150.163970] Bluetooth: hci1: command tx timeout
[  150.164768] Bluetooth: hci2: command tx timeout
[  150.547928] Bluetooth: hci5: command tx timeout
[  150.548118] Bluetooth: hci4: command tx timeout
[  150.548214] Bluetooth: hci7: command tx timeout
[  150.548276] Bluetooth: hci6: command tx timeout
[  152.084758] Bluetooth: hci0: command tx timeout
[  152.211751] Bluetooth: hci2: command tx timeout
[  152.211871] Bluetooth: hci1: command tx timeout
[  152.211989] Bluetooth: hci3: command tx timeout
[  152.595936] Bluetooth: hci5: command tx timeout
[  152.597007] Bluetooth: hci6: command tx timeout
[  152.597098] Bluetooth: hci7: command tx timeout
[  152.597180] Bluetooth: hci4: command tx timeout
[  206.431772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  206.433917] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  206.436056] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  206.442291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  206.446297] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  206.448257] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  206.554522] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  206.559152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  206.566974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  206.576777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  206.583081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  206.585222] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  206.696040] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  206.699058] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  206.704056] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  206.714074] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  206.718709] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  206.726062] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  206.819530] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  206.820753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  206.823216] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  206.826384] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  206.843292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  206.844315] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  206.844869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  206.846157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  206.852891] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  206.858295] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  206.861322] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  206.861999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  206.922522] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  206.926457] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  206.927184] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  206.929525] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  206.930812] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  206.930816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  206.931872] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  206.943593] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  206.944770] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  206.945489] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  206.947430] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  206.948297] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  206.948753] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  206.980068] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  206.989251] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  207.050038] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  207.058017] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  207.065701] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  208.467788] Bluetooth: hci0: command tx timeout
[  208.659731] Bluetooth: hci1: command tx timeout
[  208.788782] Bluetooth: hci2: command tx timeout
[  208.916750] Bluetooth: hci3: command tx timeout
[  208.979760] Bluetooth: hci7: command tx timeout
[  209.043951] Bluetooth: hci4: command tx timeout
[  209.044539] Bluetooth: hci6: command tx timeout
[  209.236965] Bluetooth: hci5: command tx timeout
[  210.516773] Bluetooth: hci0: command tx timeout
[  210.707738] Bluetooth: hci1: command tx timeout
[  210.836824] Bluetooth: hci2: command tx timeout
[  210.964784] Bluetooth: hci3: command tx timeout
[  211.030668] Bluetooth: hci7: command tx timeout
[  211.091848] Bluetooth: hci4: command tx timeout
[  211.091979] Bluetooth: hci6: command tx timeout
[  211.284915] Bluetooth: hci5: command tx timeout
[  212.563782] Bluetooth: hci0: command tx timeout
[  212.756691] Bluetooth: hci1: command tx timeout
[  212.884772] Bluetooth: hci2: command tx timeout
[  213.013673] Bluetooth: hci3: command tx timeout
[  213.076914] Bluetooth: hci7: command tx timeout
[  213.141971] Bluetooth: hci6: command tx timeout
[  213.143465] Bluetooth: hci4: command tx timeout
[  213.332009] Bluetooth: hci5: command tx timeout
[  214.611828] Bluetooth: hci0: command tx timeout
[  214.803776] Bluetooth: hci1: command tx timeout
[  214.933207] Bluetooth: hci2: command tx timeout
[  215.060821] Bluetooth: hci3: command tx timeout
[  215.123713] Bluetooth: hci7: command tx timeout
[  215.187816] Bluetooth: hci4: command tx timeout
[  215.187955] Bluetooth: hci6: command tx timeout
[  215.379756] Bluetooth: hci5: command tx timeout
[  269.469294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  269.471095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  269.472431] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  269.479539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  269.481542] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  269.483503] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  269.537388] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  269.541581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  269.545750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  269.550872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  269.554824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  269.557477] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  269.561176] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  269.563407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  269.567916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  269.577326] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  269.580224] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  269.581776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  269.639057] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  269.643391] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  269.645157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  269.647497] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  269.652033] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  269.662391] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  269.671564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  269.673251] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  269.673819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  269.684926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  269.685701] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  269.690898] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  269.697459] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  269.699052] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  269.699844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  269.701799] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  269.702349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  269.702964] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  269.709972] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  269.726357] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  269.727408] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  269.729465] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  269.731044] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  269.736098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  269.738370] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  269.745709] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  269.746278] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  269.764100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  269.787874] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  269.792328] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  271.507787] Bluetooth: hci0: command tx timeout
[  271.636738] Bluetooth: hci2: command tx timeout
[  271.637119] Bluetooth: hci1: command tx timeout
[  271.764856] Bluetooth: hci3: command tx timeout
[  271.828042] Bluetooth: hci6: command tx timeout
[  271.828966] Bluetooth: hci5: command tx timeout
[  271.829748] Bluetooth: hci7: command tx timeout
[  271.829902] Bluetooth: hci4: command tx timeout
[  273.556680] Bluetooth: hci0: command tx timeout
[  273.683908] Bluetooth: hci1: command tx timeout
[  273.685025] Bluetooth: hci2: command tx timeout
[  273.811866] Bluetooth: hci3: command tx timeout
[  273.875982] Bluetooth: hci6: command tx timeout
[  273.876993] Bluetooth: hci4: command tx timeout
[  273.877321] Bluetooth: hci7: command tx timeout
[  273.877405] Bluetooth: hci5: command tx timeout
[  275.604706] Bluetooth: hci0: command tx timeout
[  275.731851] Bluetooth: hci2: command tx timeout
[  275.732529] Bluetooth: hci1: command tx timeout
[  275.860927] Bluetooth: hci3: command tx timeout
[  275.924742] Bluetooth: hci5: command tx timeout
[  275.924840] Bluetooth: hci7: command tx timeout
[  275.924862] Bluetooth: hci4: command tx timeout
[  275.924966] Bluetooth: hci6: command tx timeout
[  277.652008] Bluetooth: hci0: command tx timeout
[  277.780807] Bluetooth: hci2: command tx timeout
[  277.780885] Bluetooth: hci1: command tx timeout
[  277.908669] Bluetooth: hci3: command tx timeout
[  277.973693] Bluetooth: hci6: command tx timeout
[  277.973802] Bluetooth: hci7: command tx timeout
[  277.973904] Bluetooth: hci5: command tx timeout
[  277.973974] Bluetooth: hci4: command tx timeout
[  331.420826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  331.423198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  331.425124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  331.431228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  331.433305] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  331.434557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  331.487934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  331.490875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  331.492285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  331.499227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  331.501451] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  331.503865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  331.561092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  331.564726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  331.570879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  331.579070] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  331.581471] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  331.583333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  331.681232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  331.688338] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  331.690884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  331.696905] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  331.705961] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  331.712935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  331.766280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  331.783064] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  331.784508] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  331.790953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  331.819450] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  331.821372] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  331.822810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  331.841197] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  331.846330] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  331.847080] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  331.847262] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  331.848461] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  331.849722] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  331.852525] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  331.859241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  331.859707] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  331.860936] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  331.863943] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  331.922557] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  331.936913] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  331.967364] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  331.987976] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  332.000109] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  332.004297] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  333.460772] Bluetooth: hci0: command tx timeout
[  333.525664] Bluetooth: hci1: command tx timeout
[  333.651790] Bluetooth: hci2: command tx timeout
[  333.780861] Bluetooth: hci3: command tx timeout
[  333.908800] Bluetooth: hci4: command tx timeout
[  333.971783] Bluetooth: hci6: command tx timeout
[  333.972213] Bluetooth: hci5: command tx timeout
[  334.165703] Bluetooth: hci7: command tx timeout
[  335.507885] Bluetooth: hci0: command tx timeout
[  335.571767] Bluetooth: hci1: command tx timeout
[  335.700760] Bluetooth: hci2: command tx timeout
[  335.827699] Bluetooth: hci3: command tx timeout
[  335.955877] Bluetooth: hci4: command tx timeout
[  336.019756] Bluetooth: hci5: command tx timeout
[  336.020469] Bluetooth: hci6: command tx timeout
[  336.212174] Bluetooth: hci7: command tx timeout
[  337.556068] Bluetooth: hci0: command tx timeout
[  337.619704] Bluetooth: hci1: command tx timeout
[  337.748824] Bluetooth: hci2: command tx timeout
[  337.875691] Bluetooth: hci3: command tx timeout
[  338.004646] Bluetooth: hci4: command tx timeout
[  338.067712] Bluetooth: hci6: command tx timeout
[  338.068402] Bluetooth: hci5: command tx timeout
[  338.259705] Bluetooth: hci7: command tx timeout
[  339.603745] Bluetooth: hci0: command tx timeout
[  339.667773] Bluetooth: hci1: command tx timeout
[  339.795689] Bluetooth: hci2: command tx timeout
[  339.923716] Bluetooth: hci3: command tx timeout
[  340.051852] Bluetooth: hci4: command tx timeout
[  340.115696] Bluetooth: hci5: command tx timeout
[  340.115801] Bluetooth: hci6: command tx timeout
[  340.307748] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
09:35:50  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffffffff81a5eab7 RDX=ffff888030913780
RSI=ffffffff81a5e4d0 RDI=ffffea00001bcc00 RBP=ffffea00001bcc00 RSP=ffff888028aef8c8
R8 =0000000000000000 R9 =fffff94000037978 R10=0000000000000000 R11=00000000000007e0
R12=ffff888034a68250 R13=ffffea00001bcc00 R14=0000000000000000 R15=00000000000000d0
RIP=ffffffff84a9bfc0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0e28e228e0 CR3=000000002fe70000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000ff000000000000000000 XMM01=00ff0000000001002e6f732e6362696c
XMM02=312e312e6f732e6f747079726362696c XMM03=00000000000000000000000000000000
XMM04=000000000000ff000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000006 RBX=0000000000000184 RCX=ffffffff814f40fe RDX=1ffff1100612214e
RSI=0000000000000008 RDI=ffffffff87efff10 RBP=ffff888030910000 RSP=ffff8880309b77e8
R8 =0000000000000000 R9 =fffffbfff0fdffe2 R10=ffffffff87efff17 R11=0000000000000000
R12=0000000000000006 R13=0000000000000040 R14=ffff888030910a50 R15=ffff88806cf3c898
RIP=ffffffff81aba398 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1f6e77d710 CR3=0000000022b10000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff
XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f
XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000