Warning: Permanently added '[localhost]:44721' (ECDSA) to the list of known hosts.
2025/04/23 09:57:58 fuzzer started
2025/04/23 09:57:59 dialing manager at localhost:42253
syzkaller login: [   93.332376] cgroup: Unknown subsys name 'net'
[   93.487255] cgroup: Unknown subsys name 'cpuset'
[   93.527180] cgroup: Unknown subsys name 'rlimit'
2025/04/23 09:58:25 syscalls: 212
2025/04/23 09:58:25 code coverage: enabled
2025/04/23 09:58:25 comparison tracing: enabled
2025/04/23 09:58:25 extra coverage: enabled
2025/04/23 09:58:25 setuid sandbox: enabled
2025/04/23 09:58:25 namespace sandbox: enabled
2025/04/23 09:58:25 Android sandbox: enabled
2025/04/23 09:58:25 fault injection: enabled
2025/04/23 09:58:25 leak checking: enabled
2025/04/23 09:58:25 net packet injection: enabled
2025/04/23 09:58:25 net device setup: enabled
2025/04/23 09:58:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/23 09:58:25 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/23 09:58:25 USB emulation: enabled
2025/04/23 09:58:25 hci packet injection: enabled
2025/04/23 09:58:25 wifi device emulation: enabled
2025/04/23 09:58:25 802.15.4 emulation: enabled
2025/04/23 09:58:25 fetching corpus: 0, signal 0/0 (executing program)
2025/04/23 09:58:26 starting 8 fuzzer processes
09:58:26 executing program 0:
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004090}, 0x0)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x200088d0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)=@polexpire={0x3bc, 0x1b, 0x200, 0x70bd2b, 0x25dfdbfe, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x4e21, 0x6a2, 0x4e22, 0x7, 0xa, 0x80, 0x0, 0x88, 0x0, 0xee00}, {0x7, 0x4, 0x165, 0x6, 0xffffffffffffffff, 0x0, 0x9, 0x800}, {0x2, 0x200, 0x1f, 0x2}, 0x81, 0x0, 0x2, 0x1, 0x2, 0x2}, 0xd2}, [@etimer_thresh={0x8, 0xc, 0x1}, @algo_aead={0xe0, 0x12, {{'morus1280-generic\x00'}, 0x4a0, 0x80, "3093a87df8435ff7ebace8985e023a885c7b94251a2a63e7d756900ccce9ba032e15132ab40230caf9cf705d89dab5ff7b3303041d34cb7baafdd754842be51cdd370f6de4ad8efe64a52e8efa88f8e4f465d9ddcb003258dec5b681be082e7220b0635e00d061e6c0f256cca09a3a92523324513b669075137d176b0b8471e2f8e7b19c793a883bd166bed6ecdb496a5d4bfed2"}}, @coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @migrate={0x180, 0x11, [{@in=@broadcast, @in=@multicast2, @in6=@mcast2, @in=@multicast1, 0x3c, 0x3, 0x0, 0x3506, 0x2, 0xa}, {@in=@rand_addr=0x64010102, @in=@broadcast, @in6=@mcast1, @in=@remote, 0x33, 0x1, 0x0, 0x34ff, 0x2, 0x2}, {@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x3c, 0x0, 0x0, 0x34ff, 0x2, 0xa}, {@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x33, 0x0, 0x0, 0x3507, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, @in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x33, 0x1, 0x0, 0x0, 0xa, 0x2}]}, @algo_crypt={0x5b, 0x2, {{'xchacha12-neon\x00'}, 0x98, "5de60d21b2e790672836aa3505d742d57e702c"}}, @lifetime_val={0x24, 0x9, {0x9, 0x8, 0x8000, 0x8}}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x8044}, 0x8000)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040084}, 0x20000800)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x1, 0x0, 0x3ff, 0x20, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x700, 0x400, 0x3}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f00000008c0)={'syztnl0\x00', <r2=>0x0, 0x4, 0x8e, 0x40, 0x9, 0x0, @loopback, @mcast2, 0x20, 0x40, 0x10000, 0x7}})
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xe0, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe0}}, 0x90)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0x100, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0xbc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x401}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x5}, 0x20008800)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r3)
sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x5c, r6, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4)
r7 = accept4(0xffffffffffffffff, &(0x7f0000000e80)=@ieee802154={0x24, @long}, &(0x7f0000000f00)=0x80, 0x80000)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000844}, 0x8090)
r8 = accept4(r7, &(0x7f00000010c0)=@x25={0x9, @remote}, &(0x7f0000001140)=0x80, 0x80000)
io_submit(0x0, 0x6, &(0x7f00000015c0)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x4, 0x3, r7, &(0x7f0000001040)="befbdd1eb7edaae8ba49d46de3875ba954020de73c8b0e9538896610351463", 0x1f, 0x2, 0x0, 0x2}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x6, 0x8, r8, &(0x7f0000001180)="7e86df5442d30e800dde623c80788192b2ef3aa57e192b3ba64a09bab25ec3a393e3f8c31fc83ff537160f6d9877462b815ef2c7904b84322d9a1035173ca18e030179e6cec9ce51d7ab014004c2f165437f03af91f11f7f2f4f9be5e75e64e03a034fe221255df6e30df72244124f5b561e8e79c790f939f959c65353be66f71fbca59d1946c8e8ad97a169275c87c003f4e182c5b8d3b9d9c08b574a9e490eb50ee07abbc57c839cb371228bfec19369b263f780e0b7ae988691bd94c04abbdc3404", 0xc3, 0x0, 0x0, 0x1}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x5, 0x0, r7, &(0x7f00000012c0)="ff7254788841c1597ccfa71573d48f5bb9bc8ffd5d7172a4dd4c600be978a44f6fee9b1dde082725e8b4627154ddcb8c45180ed9268cfef95cc7021bf3da27d67ec3", 0x42, 0x100, 0x0, 0x1}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x6, r7, &(0x7f0000001380)="f3dff35a1250bd32a065ce898ba9fbafacb26e9cb9c95c3b0af4e1cc412f683e576d19d7fc7a08340f91f9fdda3d1e6be6e4721e4076", 0x36, 0x1, 0x0, 0x2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x5, 0x0, r7, &(0x7f0000001400)="77e28b45ad42b6c24651c8170ba38211879aa15199a35e3dd6c4cdf916593c594d6003d804dfa33330a6932beeb4f56c6fd44bc05beff4ca5b1ba87a9628fde48a65df9fdae4c46f1d7c4696115096a5bf3e0dcd4ecb4fe113699edb95c1eda57fd33f647ab59f9ca995fc461a92d9cc92914220afee8960a9452cc9d375a894ba1fd42618303ec198e31d868fd32852fb361d646140946a3cac8cbfdb027e84d75341da9df73381fc661559958408d677bebc36c619eba313235145f549afd36601d2d47d0d9f7afee83dfb8ad51a2af809e3be6c3fd153e7a1cacce0df10d2fe", 0xe1, 0x76a, 0x0, 0x2}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x3, 0x1000, r7, &(0x7f0000001540)="55fcac3add1528f5f3343648826569e753dc8c1ab1c4a345eb39e32161558e85e0028e9786d3d6e494a3eba9118e13bf1eeff62317", 0x35, 0x200}])
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001640), r5)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r9, 0x2, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

09:58:26 executing program 1:
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x0, 0x1, 0x7fffffff, 0x0, 0x3}, 0xffffffffffffffc1, 0x2})
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = getuid()
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)=@newae={0x30c, 0x1e, 0x200, 0x70bd2d, 0x25dfdbfb, {{@in=@empty, 0x4d5, 0x2, 0x2b}, @in=@local, 0xfa7e, 0x3502}, [@sec_ctx={0xc5, 0x8, {0xc1, 0x8, 0x1, 0x27, 0xb9, "c1bcf45724298568c611a4ae57cd10114ca6dd74bffba8d92921edb730d9f6dc4aeb592cbaf82c941cf7e07c3c08147586ae504efd68f26068aad1c56b5033b3c837c683697b07bdc59f639f848bbc626de4b759ec1e5b7bd9bc0fe91f8195cc5f4bf485c4075704eb45125845785f90645445e74e44ebb5970e8da3985be3673ccd8e1f87ecc13433adafda881dab401fa8bde7b7bf2b80e35edb4376d80e9408b22e2d5310d0aa21319d2e2547c54fe967d299c0c6404e9e"}}, @proto={0x5, 0x19, 0x6c}, @policy_type={0xa, 0x10, {0x1}}, @tmpl={0x144, 0x5, [{{@in6=@local, 0x4d5, 0x6c}, 0xa, @in6=@private1, 0x3501, 0x4, 0x2, 0x1, 0x0, 0x3}, {{@in=@private=0xa010102, 0x4d3, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3506, 0x3, 0x3, 0x77, 0x10100000, 0x7f93, 0x200}, {{@in6=@loopback, 0x4d4, 0xff}, 0x2, @in6=@empty, 0x0, 0x0, 0x1, 0x8, 0x7, 0x9, 0x8ab}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x4d3, 0x32}, 0xa, @in=@local, 0x0, 0x3, 0x0, 0x5, 0x3, 0x3, 0x9}, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x33}, 0xa, @in=@remote, 0x0, 0x3, 0x2, 0x5, 0x2, 0x9, 0x5}]}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in=@loopback, 0x4e22, 0x4, 0x4e22, 0x25e, 0xa, 0x20, 0x20, 0x1d, 0x0, r2}, {0x8, 0x9, 0x20, 0x450f, 0x4e, 0x3, 0x5, 0x1}, {0x7, 0x9, 0x4, 0x3f}, 0xaa86, 0x6e6bbc, 0x1, 0x0, 0x0, 0x1}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x90}, 0x45)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000500)={{0x3, 0x0, 0x800, 0x3, 0x7ff}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom0\x00', 0x402, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0xffff)
io_setup(0x3, &(0x7f0000000580)=<r4=>0x0)
io_cancel(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x7f, r0, &(0x7f00000005c0)="cca083f107e3de98b06afb66e4bf2ef4164d0dcfbe5dc4de25ee53a800bcc87c867415ea6b6752bc7990d4749ace9616e8ee4ba6e8df3db6250c", 0x3a, 0x7, 0x0, 0x1, r0}, &(0x7f0000000640))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000680)={0xef, [0x8, 0x4], 0x81}, 0x10)
io_setup(0x9, &(0x7f00000006c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x8, r5, &(0x7f0000000700)="d476ede85d6e3cf960425e4ae5eb3519d3fa53d7534994c9c346eee962bff97d1c1dd5c7c9335063c174f3bd825f652f92ed0c01af7dd4a574313da8a11103f1d05439780f36d6b45634f23800d7a123abd8bbcf73df9684ae456f453260c07945f55f8ffc9e5ab6e6f6674ec775932fc50f84223eee68e8585df271bc4e61726cd346399000bd79a5ed3d755c7b64e01c91d6ecbf69bb340eabed79da", 0x9d, 0x4, 0x0, 0x1, r0}])
munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000880)={{0x0, 0x2, 0x0, 0x3, 0x5}, 0x9, 0x10000, 0xfff})

09:58:26 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000000000)="5753af8658cd851ce720083415614a3d8692151fc29b6131d8ab55ce3da4049ac2e77fe9762f810ed1dd03fab6535e5982c4acc1df302f44782df8fc988e7e30227b73cdbb40cf7c035426b7f6b87bd9aa6fbf313197a0ddea1f6f4f13af054a03e863e6960d0b1121ec94eaddcb2e3cd7182c95ebb2c34e07cf02d600d0f7c8db089a597db2689b03d121802aa7da000afc4b5d0c3dc81d14cc1818297bfff9db9932746b25374dc4c6ed483cb27fa1691f381a897489728eb4e829c801b975b37280db0ff93bd02e51485a6a2588e0d94c867dc7", 0xd5, 0x1, 0x0, 0x1}, &(0x7f0000000140))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=@getsadinfo={0x154, 0x23, 0x100, 0x70bd26, 0x25dfdbfe, 0x0, [@replay_thresh={0x8, 0xb, 0x101}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1}, @algo_crypt={0x102, 0x2, {{'ctr-camellia-asm\x00'}, 0x5d0, "ec493668711ffc91046ee376547cceff14b168576a61273f72176499a0d04abf28b47454cb8be51228d4774ad197a18f6c9a6fa2f1c66cc393d11d5aee189747eb2f3f709b87b2f2abb8eec7d5024bcee112198477deadae9acaea31f4dd1853b972782f5afba543c1308db59dd47d1a7e95ae5fafee6c9bf0e1a83fbdb7cd2676f10ce7369a091d516c5a212d1a6656f188158dc0d207ef200985263d59c8d18e51d3c80c7a9a42ce4be51984ee0e138bcea95c0a962f77ce2e"}}, @user_kmaddress={0x2c, 0x13, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010102, 0x0, 0xa}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x4000084)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', <r1=>0x0, 0x4, 0x3, 0x7, 0xfffffffd, 0x30, @private2, @loopback, 0x40, 0x700, 0x1, 0x81}})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={@empty, @local, @loopback, 0x5, 0x0, 0x7, 0x500, 0x100000001, 0x5400201, r1})
r2 = accept4(r0, &(0x7f0000000500)=@tipc, &(0x7f0000000580)=0x80, 0x80000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000005c0)={'wg0\x00', <r3=>0x0})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}, &(0x7f00000007c0)='./file0\x00', 0x4}, 0x9)
sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000840)=@expire={0x4a4, 0x18, 0x80, 0x70bd2c, 0x25dfdbff, {{{@in=@local, @in=@broadcast, 0x4e21, 0x8, 0x4e21, 0x20, 0xa, 0x80, 0x20, 0x2b, 0x0, r4}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0xff}, @in6=@mcast2, {0x200, 0xfffffffffffffff8, 0x9, 0x6, 0x0, 0x1, 0xffffffff, 0x3d76}, {0x9, 0x200, 0xffffffff, 0x10001}, {0x80000001, 0x6, 0x40}, 0x70bd28, 0x3501, 0x2, 0x4, 0x6, 0xc}, 0x5}, [@policy={0xac, 0x7, {{@in=@remote, @in=@rand_addr=0x64010102, 0x4e23, 0x1, 0x4e24, 0x9, 0x2, 0x80, 0x80, 0x0, r1}, {0x7fffffff, 0xffffffffffffccdf, 0x9, 0xdcbd, 0x0, 0x0, 0xffffffffffff0000, 0x3}, {0x7, 0x9, 0x40, 0xfff}, 0x8, 0x6e6bbe, 0x0, 0x1}}, @replay_thresh={0x8, 0xb, 0x1}, @migrate={0x1cc, 0x11, [{@in=@remote, @in=@multicast2, @in=@loopback, @in6=@empty, 0x32, 0x0, 0x0, 0x3506, 0xa, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6c, 0x2, 0x0, 0x0, 0xa, 0x2}, {@in6=@rand_addr=' \x01\x00', @in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, 0x33, 0x0, 0x0, 0x3501, 0x2, 0xa}, {@in=@rand_addr=0x64010100, @in6=@private0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x6c, 0x1, 0x0, 0x3500, 0x2, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, @in6=@local, @in=@empty, 0x6c, 0x4, 0x0, 0x0, 0x2, 0x2}, {@in=@private=0xa010102, @in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x22}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x6c, 0x4, 0x0, 0x0, 0x2, 0x2}]}, @policy={0xac, 0x7, {{@in=@loopback, @in=@empty, 0x4e24, 0x0, 0x4e24, 0x7, 0x2, 0x0, 0xa0, 0x95, r3}, {0x43a, 0x80000001, 0x800, 0x3, 0x0, 0x0, 0x3, 0x8}, {0x4, 0x2, 0x3, 0x7}, 0x9, 0x6e6bbc, 0x2, 0x3, 0x0, 0x1}}, @proto={0x5, 0x19, 0xff}, @coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @algo_comp={0x63, 0x3, {{'lzjh\x00'}, 0xd8, "d5be6664859c58f0518ff31d6e119e02bca1a4e024a48e007c37d1"}}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000dc0)={@initdev, <r6=>0x0}, &(0x7f0000000e00)=0x14)
r7 = getuid()
sendmsg$nl_xfrm(r2, &(0x7f00000010c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000e40)=@newpolicy={0x240, 0x13, 0x4, 0x70bd2c, 0x25dfdbff, {{@in=@private=0xa010101, @in=@local, 0x4e23, 0x1, 0x4e22, 0x8000, 0x2, 0xa0, 0x80, 0x4, r6, r7}, {0x4, 0x9, 0xfc, 0x101, 0x5, 0x80000001, 0x0, 0x8}, {0x8, 0x9, 0x6, 0x100}, 0x6, 0x0, 0x1, 0x1, 0x1, 0x2}, [@algo_aead={0xb1, 0x12, {{'rfc7539esp(ctr-blowfish-asm,sha224)\x00'}, 0x328, 0x100, "2dd9279e61718a4f63c6542d736108897fc6796fff64a81c053d97769ac12dd892a20b53dd7af1ee5ea4ebf3bd18855f999721b1b91721a871af161b4c1d75abc40f9ad2bf95fbe9f9031e151d21b22cafa1649c8ed5b2d0f691ad622ccfa214ecd869baef"}}, @mark={0xc, 0x15, {0x35075b, 0x280}}, @algo_auth={0xbd, 0x1, {{'sha224-generic\x00'}, 0x3a8, "2e7d045c7e4596fbaab69f57504c11b7bf294828ff119dc0cfdfe5f792b3cbe72b006eb5c42f143799ba554c5c8038ea151980f36116e3e9db591f36bec687aaefae14e14fbc49622220e4662f6a4a27636932b515e4e33279ddfd1e935f56116f1fac5e73b6db0bfeeca338d66e203aefcfb679e6"}}, @proto={0x5, 0x19, 0x24}]}, 0x240}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
bind(r0, &(0x7f0000001100)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80)
r8 = semget(0x1, 0x2, 0x3c4)
getgroups(0x1, &(0x7f00000012c0)=[<r9=>0xffffffffffffffff])
getgroups(0x1, &(0x7f0000001300)=[<r10=>r5])
semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000001340)={{0x1, r4, r9, 0xee00, r10, 0x150}, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8})
r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/mdstat\x00', 0x0, 0x0)
accept$packet(r2, &(0x7f0000001540)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001580)=0x14)
sendmsg$ETHTOOL_MSG_WOL_GET(r11, &(0x7f0000001cc0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c80)={&(0x7f0000001a40)={0x204, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

[  120.824796] audit: type=1400 audit(1745402306.759:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:58:26 executing program 3:
socketpair(0x2c, 0x6, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/keys\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@empty}, 0x14)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/keycreate\x00')
io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000240)="83acae013a93892eb2ed8dc9a8af3a610ee2607e135ce4d6ad4a11354b3266d394bde0d1169d701579f6edf69f4b7a6790", 0x31, 0x2, 0x0, 0x3, r2}, &(0x7f0000000300))
io_setup(0x8, &(0x7f0000000340)=<r3=>0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
io_cancel(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000380)="ec4b81a5112c83af32b96d1b284b4ad764360b78ceae6ffb88757b8ae6f73a5bcffc526b2aaceb080cf90610b1802506cba7013fd89d6b9cbf8099449b06334a0e555b7cc047e05394991a0f4791abbefba3dce86a7f4d890a23a7bc40cd6de36a20e9669cd69f2651cc01", 0x6b, 0x22, 0x0, 0x0, r4}, &(0x7f0000000480))
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x2401, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'gre0\x00', <r6=>0x0, 0x7, 0x7800, 0x0, 0x2, {{0x19, 0x4, 0x1, 0x5, 0x64, 0x64, 0x8001, 0x80, 0x29, 0x0, @empty, @loopback, {[@end, @timestamp_addr={0x44, 0xc, 0xc7, 0x1, 0x0, [{@rand_addr=0x64010102, 0x4}]}, @timestamp_addr={0x44, 0x24, 0xcf, 0x1, 0x5, [{@multicast2, 0x1}, {@rand_addr=0x64010102, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@rand_addr=0x64010101, 0x79c}]}, @generic={0x86, 0x9, "ae1b2717e3f12d"}, @cipso={0x86, 0x8, 0x1, [{0x6, 0x2}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x8d, [@private=0xa010102]}]}}}}})
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000600)={@remote, @private1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x20, 0x2, 0x65, 0x0, 0x9, 0x200000, r6})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44844}, 0x20000000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000780), 0x10001, 0x0)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
r8 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x2)
r9 = epoll_create(0x5)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b00)={0xc0, 0x0, &(0x7f0000000980)=[@acquire={0x40046305, 0x3}, @increfs_done, @free_buffer={0x40086303, r8}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x4, 0x1, 0x40}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000880)={0x0, 0x18, 0x38}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000008c0)={@fd, @flat=@handle={0x73682a85, 0x1000}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000940)={0x0, 0x18, 0x30}}, 0x400}], 0x86, 0x0, &(0x7f0000000a40)="db551728e979e62fe1d9855c280e0902e29631dfae597319b504543a4fb1babc72b08cab52ce604bb0ed69315fe87459ad684858814f2439a8772df6cc2b90b47822abc1197d3fdcdd113bc969db713d1b4468115969c22a72170703da9269919868b32eceb964ac00d2b35ef4d29f6347709b18b20f00fbd3d7099ee448e54cc595215862f4"})

09:58:26 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/19)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x193000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x5, 0x1, 0x20}})
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x40000, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@access_client}, {@msize={'msize', 0x3d, 0x6}}, {@loose}, {@debug}, {@access_user}], [{@fowner_gt={'fowner>', 0xee00}}, {@euid_gt={'euid>', 0xee01}}, {@pcr={'pcr', 0x3d, 0x9}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/snd/timer\x00'}}, {@context={'context', 0x3d, 'user_u'}}]}})
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000280)={{0x2, 0x2, 0xffffffab, 0x2, 0xdd}, 0x4, 0xfffffffffffff000, 0x3})
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000300))
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000340))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000400)={{0x3, 0x1, 0x1, 0x2, 0x1600000}, 0x800, 0x3ff, 'id0\x00', 'timer0\x00', 0x0, 0xe70, 0x4, 0x9, 0x4})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffff)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000500))
shmctl$SHM_LOCK(0xffffffffffffffff, 0xb)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000540)={{0x2, 0x1, 0x7, 0x1, 0x7}, 0x9, 0x3})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f00000005c0)={{0x83777e4a24750e84, 0x1, 0x4, 0x3, 0x1}, 0x8, 0x40})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000640)={{0x0, 0x2, 0xfffffffa, 0x2, 0x6}})
r2 = socket$packet(0x11, 0x3, 0x300)
accept4(r2, &(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000700)=0x80, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000740))

09:58:26 executing program 5:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x2004000c)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000041)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004055}, 0x404)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x4000)=nil)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
r8 = io_uring_setup(0x71de, &(0x7f0000000880)={0x0, 0xe991, 0x4, 0x0, 0x37e})
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r8, 0x10000000)
keyctl$unlink(0x9, 0x0, 0x0)

09:58:26 executing program 6:
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x3000)=nil)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/194, 0xc2, 0x1, &(0x7f0000000100)=""/160, 0xa0}, &(0x7f0000000200)=0x40)
socket$nl_xfrm(0x10, 0x3, 0x6)
semctl$GETNCNT(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000240)=""/130)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000380)={'gretap0\x00', <r1=>0x0, 0x8000, 0x10, 0x5, 0x2d, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x68, 0x0, 0x80, 0x29, 0x0, @local, @private=0xa010102, {[@ra={0x94, 0x4}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', <r2=>0x0, 0x29, 0xff, 0x0, 0x4, 0x42, @local, @empty, 0x0, 0x40, 0x179d, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r3=>0x0, 0x29, 0x0, 0x4, 0x0, 0x6, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8000, 0x7fffffff, 0x7}})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xc4, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x80)
get_mempolicy(&(0x7f0000000740), &(0x7f0000000780), 0x5, &(0x7f0000ff1000/0xf000)=nil, 0x1)
mremap(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x10000, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x12c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xec, 0x4, "e632c5e108ec6f7d7882b063ef6b4f5487f7ba52d9b0a9d6d47ed3ee5f4ad0df15b198ba9e377ce6f8743e1565bb65ae111872b2b5c0a7ccc6b2afcfbf1d1aa62845dde255234eb891d31251b828ea07995e776829381013805e10a1cacdd36357c7e2cb67dc8b400a7dd1fdff6ea8c1b3c73b0c5a2e761be2deba792da5b359ceab2deb23694c5f9ac52cec9ab0f558aaace11b6e4910d3ef4120d4c8e00574be7021c3e8579667931cc699078ebd50e2654348cf0b6f883c7cc9d19f7ea9ffb7ffacd8642b0504695c6d43cba6bfa1759461afefb92a3b43ee4a55a3ece2ead235c930965abae8"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x5eb0b9e710175247}, 0x20040011)
syz_read_part_table(0xf, 0x1, &(0x7f0000000a40)=[{&(0x7f0000000a00)="beea6a8532e83059aaceb9c34564d0ff61ba935d07f1e1fd4081668737090c6f567c10bff42c689a1cc7bdd155305db355b59ffc61f2b76d628a2e741102", 0x3e, 0x7}])
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r4)
accept$packet(r4, &(0x7f0000000b00)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b40)=0x14)
accept$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000bc0)=0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000d40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10838}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xfc, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x8810)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000e00)={'syztnl0\x00', &(0x7f0000000d80)={'ip6_vti0\x00', r6, 0x0, 0x80, 0x8f, 0x7, 0x41, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x7, 0x80, 0x7, 0xffff8001}})

09:58:26 executing program 7:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x3, 0x2, 0x20, 0x0, 0x3, 0x410, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x1, 0x9}, 0xa108, 0x69, 0x3f, 0x9, 0x401, 0xf4, 0x9, 0x0, 0x3, 0x0, 0xb0da}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0))
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x20082, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000180)=0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000200)={0x4, 0xfff, 0x800, 0x0, 0x1})
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000280))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x104, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x58, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x3a, 0x4, "ae6b35b8b5cd851eba02c93343fb8988816994dd6d1205afe05c4f4296e123e40dd7fc5db8ff2885100d1c38de988b71c49e1db98567"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x104}}, 0x40000000)
r4 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "7a57b01478e2ef4479c4b4ed31726d947fc3483d482457449224c844c947c0b1a61416b13d6f099cc0718b441192e7b40496e27e66fbe92b705db5be45985071", 0x21}, 0x48, 0xfffffffffffffff9)
keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000600)='asymmetric\x00', &(0x7f0000000640)='team0\x00')
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan4\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, 0x0, 0x220, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x4000000)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x8b0, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xb7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x5)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x40400, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r7, 0xc0505405, &(0x7f0000000980)={{0x3, 0x0, 0x9, 0x3, 0x755}, 0x2, 0xe6d0, 0x5})

[  122.163228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  122.167267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  122.173732] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  122.181189] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  122.187963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  122.214404] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  122.218052] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  122.221115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  122.243765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  122.247989] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  122.297361] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.327805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.373067] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.374895] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  122.414193] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  122.418531] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  122.421468] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  122.424869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  122.428666] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  122.433786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  122.443126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  122.446931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.465552] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.477072] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  122.498515] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  122.515348] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  122.546562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  122.549717] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  122.571497] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  122.573891] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  122.588201] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  122.598705] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  122.607063] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  122.608673] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  122.610583] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  122.616069] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  122.651437] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  122.654853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  122.681947] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  122.688077] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  124.241357] Bluetooth: hci0: command tx timeout
[  124.305355] Bluetooth: hci1: command tx timeout
[  124.561663] Bluetooth: hci2: command tx timeout
[  124.562462] Bluetooth: hci3: command tx timeout
[  124.625699] Bluetooth: hci4: command tx timeout
[  124.689644] Bluetooth: hci5: command tx timeout
[  124.752697] Bluetooth: hci6: command tx timeout
[  124.753080] Bluetooth: hci7: command tx timeout
[  126.288903] Bluetooth: hci0: command tx timeout
[  126.352789] Bluetooth: hci1: command tx timeout
[  126.610021] Bluetooth: hci3: command tx timeout
[  126.610052] Bluetooth: hci2: command tx timeout
[  126.672760] Bluetooth: hci4: command tx timeout
[  126.737002] Bluetooth: hci5: command tx timeout
[  126.802011] Bluetooth: hci7: command tx timeout
[  126.802459] Bluetooth: hci6: command tx timeout
[  128.338713] Bluetooth: hci0: command tx timeout
[  128.402501] Bluetooth: hci1: command tx timeout
[  128.657673] Bluetooth: hci3: command tx timeout
[  128.658180] Bluetooth: hci2: command tx timeout
[  128.721573] Bluetooth: hci4: command tx timeout
[  128.784684] Bluetooth: hci5: command tx timeout
[  128.848846] Bluetooth: hci6: command tx timeout
[  128.849806] Bluetooth: hci7: command tx timeout
[  130.384836] Bluetooth: hci0: command tx timeout
[  130.449893] Bluetooth: hci1: command tx timeout
[  130.704867] Bluetooth: hci2: command tx timeout
[  130.705370] Bluetooth: hci3: command tx timeout
[  130.769722] Bluetooth: hci4: command tx timeout
[  130.833848] Bluetooth: hci5: command tx timeout
[  130.897706] Bluetooth: hci7: command tx timeout
[  130.898195] Bluetooth: hci6: command tx timeout
[  182.743983] syz-executor.7 (285) used greatest stack depth: 24512 bytes left
[  185.066462] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  185.074121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  185.076993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  185.092482] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  185.097999] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  185.250449] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  185.253395] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  185.260225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  185.273045] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  185.282652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  185.355123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  185.357446] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  185.367251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  185.380267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  185.388513] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  185.406216] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  185.415515] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  185.421573] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  185.424843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  185.430579] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  185.439059] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  185.449482] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  185.452528] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  185.454361] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  185.458319] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  185.464461] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  185.466551] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  185.470081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  185.478526] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  185.482348] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  185.484565] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  185.489974] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  185.496237] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  185.497798] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  185.499158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  185.505234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  185.525869] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  185.553570] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  185.601683] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  185.627100] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  187.153983] Bluetooth: hci0: command tx timeout
[  187.345190] Bluetooth: hci1: command tx timeout
[  187.601647] Bluetooth: hci3: command tx timeout
[  187.602532] Bluetooth: hci4: command tx timeout
[  187.603276] Bluetooth: hci7: command tx timeout
[  187.603382] Bluetooth: hci5: command tx timeout
[  187.664746] Bluetooth: hci2: command tx timeout
[  187.729714] Bluetooth: hci6: command tx timeout
[  189.201693] Bluetooth: hci0: command tx timeout
[  189.392886] Bluetooth: hci1: command tx timeout
[  189.650667] Bluetooth: hci5: command tx timeout
[  189.651217] Bluetooth: hci4: command tx timeout
[  189.651775] Bluetooth: hci7: command tx timeout
[  189.652275] Bluetooth: hci3: command tx timeout
[  189.713796] Bluetooth: hci2: command tx timeout
[  189.776655] Bluetooth: hci6: command tx timeout
[  191.248700] Bluetooth: hci0: command tx timeout
[  191.441679] Bluetooth: hci1: command tx timeout
[  191.696717] Bluetooth: hci3: command tx timeout
[  191.696786] Bluetooth: hci7: command tx timeout
[  191.697181] Bluetooth: hci4: command tx timeout
[  191.697658] Bluetooth: hci5: command tx timeout
[  191.760968] Bluetooth: hci2: command tx timeout
[  191.824878] Bluetooth: hci6: command tx timeout
[  193.297838] Bluetooth: hci0: command tx timeout
[  193.489867] Bluetooth: hci1: command tx timeout
[  193.744911] Bluetooth: hci5: command tx timeout
[  193.747798] Bluetooth: hci4: command tx timeout
[  193.748282] Bluetooth: hci7: command tx timeout
[  193.748802] Bluetooth: hci3: command tx timeout
[  193.808658] Bluetooth: hci2: command tx timeout
[  193.872725] Bluetooth: hci6: command tx timeout
[  247.272183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  247.277907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  247.281263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  247.289512] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  247.293888] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  247.430710] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  247.438928] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  247.443086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  247.465003] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  247.471437] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  247.534267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  247.539210] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  247.546884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  247.556274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  247.562945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  247.609449] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  247.617797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  247.622213] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  247.634376] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  247.657249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  247.688408] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  247.706875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  247.738050] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  247.747256] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  247.749336] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  247.753874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  247.770934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  247.780061] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  247.821253] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  247.838456] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  247.843329] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  247.848048] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  247.855094] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  247.859212] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  247.860282] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  247.861940] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  247.864309] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  247.902403] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  247.910100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  247.915446] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  249.360745] Bluetooth: hci0: command tx timeout
[  249.552691] Bluetooth: hci1: command tx timeout
[  249.617778] Bluetooth: hci2: command tx timeout
[  249.808703] Bluetooth: hci3: command tx timeout
[  249.872799] Bluetooth: hci4: command tx timeout
[  249.937069] Bluetooth: hci7: command tx timeout
[  250.002348] Bluetooth: hci6: command tx timeout
[  250.002382] Bluetooth: hci5: command tx timeout
[  251.409871] Bluetooth: hci0: command tx timeout
[  251.600919] Bluetooth: hci1: command tx timeout
[  251.664942] Bluetooth: hci2: command tx timeout
[  251.858986] Bluetooth: hci3: command tx timeout
[  251.921661] Bluetooth: hci4: command tx timeout
[  251.985665] Bluetooth: hci7: command tx timeout
[  252.048696] Bluetooth: hci5: command tx timeout
[  252.049814] Bluetooth: hci6: command tx timeout
[  253.457731] Bluetooth: hci0: command tx timeout
[  253.648856] Bluetooth: hci1: command tx timeout
[  253.712890] Bluetooth: hci2: command tx timeout
[  253.904754] Bluetooth: hci3: command tx timeout
[  253.970656] Bluetooth: hci4: command tx timeout
[  254.032815] Bluetooth: hci7: command tx timeout
[  254.097286] Bluetooth: hci6: command tx timeout
[  254.097372] Bluetooth: hci5: command tx timeout
[  255.506276] Bluetooth: hci0: command tx timeout
[  255.696898] Bluetooth: hci1: command tx timeout
[  255.761055] Bluetooth: hci2: command tx timeout
[  255.952704] Bluetooth: hci3: command tx timeout
[  256.016720] Bluetooth: hci4: command tx timeout
[  256.082255] Bluetooth: hci7: command tx timeout
[  256.144878] Bluetooth: hci5: command tx timeout
[  256.146069] Bluetooth: hci6: command tx timeout
[  310.504156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  310.512379] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  310.517074] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  310.528503] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  310.536358] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  310.640733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  310.645195] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  310.648196] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  310.656257] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  310.660340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  310.895420] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  310.901623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  310.934204] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  310.936206] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  310.940186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  310.962386] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  310.972140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  310.979386] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  310.985198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  310.985422] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  310.992697] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  311.000081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  311.010909] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  311.013363] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  311.015802] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  311.018313] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  311.023731] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  311.027051] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  311.028748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  311.032233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  311.038143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  311.041320] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  311.044135] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  311.049325] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  311.055161] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  311.059923] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  311.078389] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  311.109136] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  311.145358] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  311.149391] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  312.592705] Bluetooth: hci0: command tx timeout
[  312.722070] Bluetooth: hci1: command tx timeout
[  313.105021] Bluetooth: hci5: command tx timeout
[  313.105702] Bluetooth: hci6: command tx timeout
[  313.106104] Bluetooth: hci7: command tx timeout
[  313.168724] Bluetooth: hci3: command tx timeout
[  313.233726] Bluetooth: hci2: command tx timeout
[  313.297744] Bluetooth: hci4: command tx timeout
[  314.640712] Bluetooth: hci0: command tx timeout
[  314.769759] Bluetooth: hci1: command tx timeout
[  315.152752] Bluetooth: hci5: command tx timeout
[  315.152946] Bluetooth: hci6: command tx timeout
[  315.154466] Bluetooth: hci7: command tx timeout
[  315.219666] Bluetooth: hci3: command tx timeout
[  315.282073] Bluetooth: hci2: command tx timeout
[  315.346193] Bluetooth: hci4: command tx timeout
[  316.689660] Bluetooth: hci0: command tx timeout
[  316.820070] Bluetooth: hci1: command tx timeout
[  317.200706] Bluetooth: hci7: command tx timeout
[  317.201813] Bluetooth: hci6: command tx timeout
[  317.202227] Bluetooth: hci5: command tx timeout
[  317.264902] Bluetooth: hci3: command tx timeout
[  317.328703] Bluetooth: hci2: command tx timeout
[  317.392862] Bluetooth: hci4: command tx timeout
[  318.736939] Bluetooth: hci0: command tx timeout
[  318.865240] Bluetooth: hci1: command tx timeout
[  319.248739] Bluetooth: hci6: command tx timeout
[  319.248944] Bluetooth: hci5: command tx timeout
[  319.249238] Bluetooth: hci7: command tx timeout
[  319.312802] Bluetooth: hci3: command tx timeout
[  319.376669] Bluetooth: hci2: command tx timeout
[  319.440811] Bluetooth: hci4: command tx timeout
[  372.777072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  372.782268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  372.784324] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  372.794520] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  372.798826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  372.849815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  372.869107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  372.872100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  372.882005] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  372.895690] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  372.961336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  372.967060] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  372.971058] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  372.977962] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  372.982844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  373.133085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  373.150491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  373.155462] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  373.183893] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  373.189354] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  373.191030] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  373.198399] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  373.199598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  373.210092] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  373.221444] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  373.237138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  373.243037] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  373.250549] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  373.258239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  373.283380] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  373.296697] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  373.316868] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  373.319769] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  373.339735] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  373.353985] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  373.461639] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  373.463249] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  373.467745] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  373.536083] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  373.588834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  374.865956] Bluetooth: hci0: command tx timeout
[  374.929676] Bluetooth: hci1: command tx timeout
[  375.057737] Bluetooth: hci2: command tx timeout
[  375.313673] Bluetooth: hci3: command tx timeout
[  375.376690] Bluetooth: hci4: command tx timeout
[  375.504876] Bluetooth: hci5: command tx timeout
[  375.504935] Bluetooth: hci6: command tx timeout
[  375.696848] Bluetooth: hci7: command tx timeout
[  376.913893] Bluetooth: hci0: command tx timeout
[  376.976778] Bluetooth: hci1: command tx timeout
[  377.105662] Bluetooth: hci2: command tx timeout
[  377.361665] Bluetooth: hci3: command tx timeout
[  377.425659] Bluetooth: hci4: command tx timeout
[  377.552680] Bluetooth: hci6: command tx timeout
[  377.554606] Bluetooth: hci5: command tx timeout
[  377.745161] Bluetooth: hci7: command tx timeout
[  378.960716] Bluetooth: hci0: command tx timeout
[  379.025955] Bluetooth: hci1: command tx timeout
[  379.152883] Bluetooth: hci2: command tx timeout
[  379.409162] Bluetooth: hci3: command tx timeout
[  379.473155] Bluetooth: hci4: command tx timeout
[  379.600916] Bluetooth: hci5: command tx timeout
[  379.601935] Bluetooth: hci6: command tx timeout
[  379.793233] Bluetooth: hci7: command tx timeout
[  381.008781] Bluetooth: hci0: command tx timeout
[  381.073003] Bluetooth: hci1: command tx timeout
[  381.200852] Bluetooth: hci2: command tx timeout
[  381.456653] Bluetooth: hci3: command tx timeout
[  381.522653] Bluetooth: hci4: command tx timeout
[  381.649000] Bluetooth: hci6: command tx timeout
[  381.650057] Bluetooth: hci5: command tx timeout
[  381.840903] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
10:03:27  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff8880094a4000 RCX=0000000000000000 RDX=0000000000000014
RSI=1ffffffff0c81ed4 RDI=ffff88807ffdfe40 RBP=ffff888008fefc40 RSP=ffff888016a57b30
R8 =0000000000000003 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000
R12=0000000000000001 R13=0000000000000011 R14=ffff88807ffdc540 R15=0000000000000000
RIP=ffffffff81afcc80 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f06ce805540 00000000 00000000
GS =0000 ffff8880e564d000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f06cecbb018 CR3=00000000331f2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000000018e RBX=ffff888035ec5340 RCX=0000000000000200 RDX=b1a50b675e9e944f
RSI=ffff888035ec5dc0 RDI=ffff888035ec5d98 RBP=0000000000000000 RSP=ffff88800f03f310
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=000000000002249e
R12=ffff888035ec5dc0 R13=0000000000000000 R14=0000000000000001 R15=ffff888035ec5d98
RIP=ffffffff81511da3 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574d000 00000000 00000000
LDT=0000 fffffe4300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fccdca13000 CR3=000000002c0ba000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000