Warning: Permanently added '[localhost]:52591' (ECDSA) to the list of known hosts.
2025/04/26 19:03:16 fuzzer started
2025/04/26 19:03:17 dialing manager at localhost:46629
syzkaller login: [   99.393029] cgroup: Unknown subsys name 'net'
[   99.530864] cgroup: Unknown subsys name 'cpuset'
[   99.573423] cgroup: Unknown subsys name 'rlimit'
2025/04/26 19:03:42 syscalls: 203
2025/04/26 19:03:42 code coverage: enabled
2025/04/26 19:03:42 comparison tracing: enabled
2025/04/26 19:03:42 extra coverage: enabled
2025/04/26 19:03:42 setuid sandbox: enabled
2025/04/26 19:03:42 namespace sandbox: enabled
2025/04/26 19:03:42 Android sandbox: enabled
2025/04/26 19:03:42 fault injection: enabled
2025/04/26 19:03:42 leak checking: enabled
2025/04/26 19:03:42 net packet injection: enabled
2025/04/26 19:03:42 net device setup: enabled
2025/04/26 19:03:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/26 19:03:42 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/26 19:03:42 USB emulation: enabled
2025/04/26 19:03:42 hci packet injection: enabled
2025/04/26 19:03:42 wifi device emulation: enabled
2025/04/26 19:03:42 802.15.4 emulation: enabled
2025/04/26 19:03:42 fetching corpus: 0, signal 0/0 (executing program)
2025/04/26 19:03:43 starting 8 fuzzer processes
19:03:43 executing program 0:
r0 = memfd_secret(0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x52}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xcc001)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0)
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x40040)
r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0x2af97db1, 0x22040)
fsmount(r2, 0x0, 0x6)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}}, 0x40800)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040804}, 0x8080)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040094}, 0x4000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000040)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan4\x00', <r7=>0x0})
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x7c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x1)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f00000009c0)=0x2)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfa}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008854}, 0x20000000)

19:03:43 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x12)
r1 = syz_io_uring_complete(0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x800, 0x3, 0x0, 0x8}, {0x4, 0x7f, 0x5, 0x7ff}, {0x9, 0x7, 0xff, 0x7}]})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', <r3=>r2, 0x80, 0x0, 0x0, 0x7, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x67, 0x0, 0x6, 0x4, 0x0, @broadcast, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}]}}}}})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
preadv(r5, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/130, 0x82}, {&(0x7f0000000380)=""/125, 0x7d}, {&(0x7f0000000400)=""/97, 0x61}], 0x3, 0x9, 0x6)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r1)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, r6, 0x2, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xeb00000}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x78c7}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x2000)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x11)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000680)={'syztnl0\x00', r2, 0x8, 0x10, 0x2, 0x6, {{0xc, 0x4, 0x0, 0x8, 0x30, 0x64, 0x0, 0xc4, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x1c, 0x3, [{0x1, 0xe, "5a34be42a6e38c528630d846"}, {0x1, 0x8, "39c5cd88c4e4"}]}]}}}}})
ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0)
clock_gettime(0x1, &(0x7f0000000740))
memfd_secret(0x0)
clock_gettime(0x5, &(0x7f0000000780))
sched_rr_get_interval(0x0, &(0x7f00000007c0))
r7 = syz_open_dev$vcsu(&(0x7f0000000800), 0x9, 0x0)
ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0)

19:03:43 executing program 2:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x111900, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/238)
r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1, 0x20, 0x5)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x1, 0x2, 0xe4, 0x7d7}, {0x431, 0x5, 0x6f, 0xffffffff}, {0xf664, 0x1, 0x81}]})
r2 = signalfd4(r1, &(0x7f0000000280)={[0x8000]}, 0x8, 0xc0000)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r4, 0x2f, 0x8, 0x20, 0x3, 0x40, @private0, @empty, 0x56402c089063dc6c, 0x37, 0x1, 0x8}})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/netstat\x00')
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000540)=0x6)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000580)=0xfffffe00)
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f00000005c0))
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000600)={'veth1_macvtap\x00'})
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000640)={'macvlan1\x00'})
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000680)={'team_slave_1\x00', @link_local})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x3)
r6 = memfd_secret(0x0)
ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1)

19:03:43 executing program 3:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x1}, 0x81)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x47f, 0xfffffffa}}, './file0\x00'})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/142, 0x8e}], 0x2, 0x6, 0x4231)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001180)='ns/net\x00')
clock_getres(0x6, &(0x7f00000011c0))
fsopen(&(0x7f0000001200)='gfs2\x00', 0x1)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x44, r1, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x76edee606e75e4a3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}}, 0x20)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x20044008)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'wpan4\x00', <r3=>0x0})
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x34, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008040)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, r2, 0x804, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8811)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001740)='ns/time\x00')
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000001780)={r4})
socket$packet(0x11, 0x2, 0x300)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000017c0), 0x2c2080, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000001800)={r5})
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)

19:03:43 executing program 4:
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x1}, 0x8)
read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)={'batadv_slave_1\x00'})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x9)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'ip6gre0\x00'})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'lo\x00', @broadcast})
r1 = signalfd4(r0, &(0x7f0000000180), 0x8, 0x1800)
ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0xfffffffd)
r2 = signalfd4(r0, &(0x7f0000000200)={[0x7]}, 0x8, 0x80800)
ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000240)=""/177)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000300)={0x0, 0x1, 0x1b})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
write$rfkill(0xffffffffffffffff, &(0x7f0000000380)={0xff, 0x4}, 0x8)
r4 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000400)={{{@in6, @in6}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)

19:03:43 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'gre0\x00', <r0=>0x0, 0x8000, 0x700, 0x3f, 0x8001, {{0x1d, 0x4, 0x3, 0x4, 0x74, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0xed, [@loopback]}, @end, @end, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0x6e, [@broadcast, @remote, @remote, @loopback, @rand_addr=0x64010102, @loopback, @rand_addr=0x64010100]}, @rr={0x7, 0x1b, 0x9e, [@dev={0xac, 0x14, 0x14, 0x2f}, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, @remote, @remote]}, @lsrr={0x83, 0x17, 0x55, [@private=0xa010102, @multicast2, @broadcast, @private=0xa010100, @local]}]}}}}})
getitimer(0x0, &(0x7f0000000100))
r1 = memfd_secret(0x80000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', <r2=>r0, 0x0, 0x80, 0x1000, 0x101, {{0x10, 0x4, 0x0, 0x10, 0x40, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x17, 0xe0, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @timestamp={0x44, 0x14, 0x53, 0x0, 0x4, [0x9, 0x9, 0x2, 0xfffffffd]}]}}}}})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}, 0x1, 0x19ab, 0x7fff}, {{0x0, 0xea60}, 0x0, 0x3ff, 0xcbf4}, {{}, 0x17, 0x4, 0x20000}], 0x48)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x1000}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', <r4=>r2, 0x8000, 0x20, 0x6, 0xffffffff, {{0x1a, 0x4, 0x3, 0x4, 0x68, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xc, 0x22, 0x1, 0x7, [{@broadcast, 0x16}]}, @end, @cipso={0x86, 0x46, 0x3, [{0x1, 0x11, "fd0783260354d97b236ffdfe6065eb"}, {0x1, 0x8, "e659154dd415"}, {0x5, 0xf, "bd352a5e244f55b6a234fd8c36"}, {0x7, 0xa, "a7faa362466d87cd"}, {0x0, 0xe, "918b5d4b1db79a9a41071e33"}]}]}}}}})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)="b540ce5e52117177e778a364b86ced2589ce90575cd0f57e69cd1bfe2b94f2307dff115a030072d0fc0b76e9180145831ca6867860006cd8eb72e943b1e7c07201aa7c319466d6ce075f8883393a6ed3377403bd41eca4827ca88b72c9e97f73c6a20386bcd3ea95cbe5e356404ee4a97d122b12160b162ca8cfb70287f4b5f2be63ced1c92b760c3ce28d53b21b3cfbead2e34d55cf88e634a6106d5994ee1ce14fe510d3115021cfd4ab8ddf178626df53314b56f532", 0xb7}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="79c65055782cf339daf8f0e9c829ebec87f3d878e64d98", 0x17}, {&(0x7f0000000540)="8ec4b5524a2c23c3e28eb2b332d3c8176384ddec26dc43c012b298b8b05ec8d47fb5f2f8787a2af8ef5826f1e9c4b49b1daa36aebd8908654d614ea4dcf87faf3759ed5e4419bbcf42381707b1e45eb8d50397d3ab2ab6ce0f57dc7e6d26fab26c289a56839b639e66a5edf89d068f3c04ffb1256b11089b13f4a6aabb8cc9b30bf161764ebfff1a2e443abd1c27b0f445912508cefa5de5a2dd007bfdaad612f576c0d8273c96e47cb1ff8115cb60c874276189eea7e3795d76f0743de74f766078a04de340bcf44bd504ad46656116a2daf0af9ea561cf533f0c02b44ef8d55f2539240483ab", 0xe7}, {&(0x7f0000000640)="eabcd4360289adf59cee4f5e5745fa30b8818b14f69630553d72da80fbdd2539ca5dfc770cc617ef06215e11b2e9a94423b791c79c9c373990606123e3c6e716077234d3cdc6d3e01bde4deea0b8d98c740c4bff1288b190ab9059d63e2322838bacc92c4e35526c577a949240957617", 0x70}, {&(0x7f00000006c0)="ac88c0ff428b65f58d1f0ff5171d6e0aca72176a06c2dc5da2ce368890cb2d3e464bb6622511884a7268c05054c205fdcdfd409a8394c62ebaac25a4fdd4921aec1c2e5d12ad243363ec8d62a2ef5b7ffd1da60f00edaaf129821a00233778e2153838b3e711a53bd568567b08f22109a3be1d7ebf0024871eaf8f2cbfd8c1ef320ae4924a6662788725d496f54392be88398ea044098f65536854d31d9cfdd2df4c2e327cad9f76441449035dfe", 0xae}], 0x6, &(0x7f0000000800)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}, 0x0)
r6 = signalfd4(r1, &(0x7f0000000880)={[0x6]}, 0x8, 0x80400)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000940)={'tunl0\x00', &(0x7f00000008c0)={'gre0\x00', <r7=>r2, 0x40, 0x80, 0x1ff, 0x5, {{0xa, 0x4, 0x0, 0x1d, 0x28, 0x68, 0x0, 0x4, 0x2f, 0x0, @local, @private=0xa010100, {[@end, @lsrr={0x83, 0x13, 0x32, [@loopback, @multicast2, @remote, @private=0xa010102]}]}}}}})
r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000980), 0xe8440, 0x0)
ioctl$EVIOCGBITKEY(r8, 0x80404521, &(0x7f00000009c0)=""/200)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000ac0)={'team0\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000b80)={'erspan0\x00', &(0x7f0000000b00)={'syztnl1\x00', <r10=>r9, 0x700, 0x8, 0x5, 0x10001, {{0x9, 0x4, 0x2, 0x35, 0x24, 0x68, 0x0, 0x20, 0x2f, 0x0, @empty, @remote, {[@rr={0x7, 0xf, 0xb9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000c00)={'team0\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'syztnl1\x00', <r12=>r9, 0x2f, 0x0, 0x70, 0x2, 0xb, @dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x700, 0x8000, 0x3ff}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001500)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000f40)={0x558, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r9}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9e8}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r0}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xdddf}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8, 0x1, r7}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x144, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3, 0x7, 0x63, 0x9}, {0x1, 0x4, 0x3, 0x80000000}, {0x0, 0x7, 0x5e, 0x6}, {0x1000, 0x1, 0x1, 0x1}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x558}}, 0x4810)

[  125.758673] audit: type=1400 audit(1745694223.664:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
19:03:43 executing program 6:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000040)={'syztnl1\x00', <r0=>0x0, 0x10, 0x8, 0x8c7, 0x80, {{0x33, 0x4, 0x2, 0x0, 0xcc, 0x9, 0x0, 0xff, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp_prespec={0x44, 0x1c, 0xe4, 0x3, 0x5, [{@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff6a17}, {@remote, 0x9}]}, @timestamp_prespec={0x44, 0x14, 0xbb, 0x3, 0x5, [{@multicast1, 0x6}, {@remote, 0x6}]}, @lsrr={0x83, 0x1f, 0x11, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010100, @multicast2, @multicast2, @loopback]}, @generic={0x82, 0x2}, @rr={0x7, 0x1f, 0xa6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010100, @multicast2, @rand_addr=0x64010101, @broadcast]}, @noop, @ssrr={0x89, 0xf, 0xd9, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xf5, 0x1, 0x2, [{@rand_addr=0x64010100, 0x5}]}, @lsrr={0x83, 0x27, 0xf0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @multicast2, @remote, @rand_addr=0x64010102, @loopback, @private=0xa010101, @multicast2]}, @generic={0x88, 0x3, '7'}]}}}}})
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x16}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r0}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004084}, 0x4000080)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}}, 0x40)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@remote}, 0x0, @in6=@private2}}, &(0x7f00000004c0)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x2b0, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x1e8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_MASK={0x72, 0x5, "58c80f777414be326740b1a92ffeb31b61aa6e75253e945e4b0fe4f9698c4bacb24512554cef49ab002dec6799f7a70e82b8be532c7d2c154ec272c565d42b1319dd9bec101c15652eae883312fb9bee69242e6ca0624dc2819634b66db2c7aabc59fdd044e483abd5a3e784d31e"}, @ETHTOOL_A_BITSET_VALUE={0x95, 0x4, "be293a1579d260ccf80804a8faa71e85c9d610210aa9d63ce0d83118d45c2cef7917c303922740f8282453d733346d9d49b1db9fdf01a82a6c8985033464d1ad734cb736b69eaf9b8ca40158b6881d1fe260b930da4cc6467a5a24f57c64f9cbe52df047f2c5eb92f4d5335eb2fbded062e7e132e9e1236f5208095c0ab6182ab0c4afe16b4e0f304b2c65d86578908bd5"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x6b, 0x5, "913647a449550cba08f20e30945e452ea2f4048c27c6f5908c429ef6d44f08ac1b81676c03b2a17211bf43aa41a45c9bdd89c21f9f0cdf1ba2cf56f5361cf6cb2ff7ca7e71595cf80501ec78642b3a1861d1cf2c0041639b9ba291e4535e30410c126a50ccd21d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x0e}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x20000012}, 0x40000)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x10010, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000880)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x1182}, 0x1}, 0x7)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0xfff, 0x10000}}, './file0\x00'})
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x8084)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r8, 0x8010671f, &(0x7f0000000c80)={&(0x7f0000000b80)=""/235, 0xeb})
r9 = fsmount(r6, 0x1, 0x88)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000d00)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000dc0)={'syztnl0\x00', &(0x7f0000000d40)={'erspan0\x00', <r11=>r0, 0x7, 0x7, 0x100, 0x0, {{0xa, 0x4, 0x2, 0x8, 0x28, 0x68, 0x0, 0x40, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x9, 0x0}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x52, 0x0, 0x7, [0x4]}, @ra={0x94, 0x4}, @noop]}}}}})
sendmsg$FOU_CMD_GET(r9, &(0x7f0000000e80)={&(0x7f0000000cc0), 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4)

19:03:43 executing program 7:
timer_delete(0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan4\x00', <r4=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40802}, 0x20000000)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00'})
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x2}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan4\x00', <r6=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x8800)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r7, 0x705, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044840)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200820}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r8, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xd8, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x80000000}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x5c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x20}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffc01}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x40004)

[  127.181473] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  127.187404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  127.192195] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  127.199784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  127.204426] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  127.251195] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.257362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.264500] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  127.267204] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.267698] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  127.272272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  127.277388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.286088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.290078] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  127.294232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  127.340031] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  127.355099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  127.360263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  127.368862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  127.377976] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  127.384033] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  127.395172] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  127.397382] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  127.405261] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  127.411102] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  127.421085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  127.427934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  127.432016] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  127.435037] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  127.441143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  127.443383] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  127.451451] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  127.453066] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  127.464547] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  127.468315] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  127.498957] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  127.503084] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  127.503257] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  127.509435] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  127.520039] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  129.262678] Bluetooth: hci0: command tx timeout
[  129.325673] Bluetooth: hci1: command tx timeout
[  129.389718] Bluetooth: hci2: command tx timeout
[  129.517708] Bluetooth: hci3: command tx timeout
[  129.581644] Bluetooth: hci4: command tx timeout
[  129.582658] Bluetooth: hci6: command tx timeout
[  129.582764] Bluetooth: hci5: command tx timeout
[  129.645702] Bluetooth: hci7: command tx timeout
[  131.310605] Bluetooth: hci0: command tx timeout
[  131.373663] Bluetooth: hci1: command tx timeout
[  131.437656] Bluetooth: hci2: command tx timeout
[  131.565670] Bluetooth: hci3: command tx timeout
[  131.629814] Bluetooth: hci5: command tx timeout
[  131.630258] Bluetooth: hci6: command tx timeout
[  131.631608] Bluetooth: hci4: command tx timeout
[  131.694625] Bluetooth: hci7: command tx timeout
[  133.357741] Bluetooth: hci0: command tx timeout
[  133.423692] Bluetooth: hci1: command tx timeout
[  133.485673] Bluetooth: hci2: command tx timeout
[  133.613813] Bluetooth: hci3: command tx timeout
[  133.678231] Bluetooth: hci4: command tx timeout
[  133.680211] Bluetooth: hci5: command tx timeout
[  133.681177] Bluetooth: hci6: command tx timeout
[  133.742018] Bluetooth: hci7: command tx timeout
[  135.405696] Bluetooth: hci0: command tx timeout
[  135.469796] Bluetooth: hci1: command tx timeout
[  135.533714] Bluetooth: hci2: command tx timeout
[  135.661765] Bluetooth: hci3: command tx timeout
[  135.726124] Bluetooth: hci4: command tx timeout
[  135.726867] Bluetooth: hci5: command tx timeout
[  135.727418] Bluetooth: hci6: command tx timeout
[  135.789783] Bluetooth: hci7: command tx timeout
[  187.163375] syz-executor.4 (289) used greatest stack depth: 24504 bytes left
[  189.827065] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.833481] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.837351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.849174] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.856533] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.920819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  189.922864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  189.925995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  189.928517] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  189.933441] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  189.935964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  189.941428] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  189.943286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  189.966074] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  189.972461] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.974827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  189.980139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.981917] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  189.984933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  189.986400] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  190.021208] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  190.029992] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  190.032452] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  190.040295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  190.065172] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  190.091287] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  190.092145] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  190.098495] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  190.102312] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  190.103371] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  190.106360] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  190.129292] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  190.132226] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  190.138749] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  190.143905] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  190.147295] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  190.156174] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  190.158532] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  190.162259] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  190.164389] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  191.918028] Bluetooth: hci0: command tx timeout
[  192.045716] Bluetooth: hci1: command tx timeout
[  192.045765] Bluetooth: hci2: command tx timeout
[  192.173661] Bluetooth: hci4: command tx timeout
[  192.173887] Bluetooth: hci3: command tx timeout
[  192.239613] Bluetooth: hci7: command tx timeout
[  192.301822] Bluetooth: hci6: command tx timeout
[  192.302009] Bluetooth: hci5: command tx timeout
[  193.965931] Bluetooth: hci0: command tx timeout
[  194.093667] Bluetooth: hci1: command tx timeout
[  194.096625] Bluetooth: hci2: command tx timeout
[  194.221715] Bluetooth: hci3: command tx timeout
[  194.222211] Bluetooth: hci4: command tx timeout
[  194.285663] Bluetooth: hci7: command tx timeout
[  194.349780] Bluetooth: hci5: command tx timeout
[  194.349994] Bluetooth: hci6: command tx timeout
[  196.014941] Bluetooth: hci0: command tx timeout
[  196.142600] Bluetooth: hci2: command tx timeout
[  196.142628] Bluetooth: hci1: command tx timeout
[  196.269685] Bluetooth: hci4: command tx timeout
[  196.269698] Bluetooth: hci3: command tx timeout
[  196.333894] Bluetooth: hci7: command tx timeout
[  196.398637] Bluetooth: hci5: command tx timeout
[  196.398715] Bluetooth: hci6: command tx timeout
[  198.063588] Bluetooth: hci0: command tx timeout
[  198.189926] Bluetooth: hci1: command tx timeout
[  198.190924] Bluetooth: hci2: command tx timeout
[  198.317797] Bluetooth: hci4: command tx timeout
[  198.318686] Bluetooth: hci3: command tx timeout
[  198.381824] Bluetooth: hci7: command tx timeout
[  198.447596] Bluetooth: hci5: command tx timeout
[  198.447621] Bluetooth: hci6: command tx timeout
[  249.917045] syz-executor.5 (2890) used greatest stack depth: 24400 bytes left
[  251.846217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  251.852246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  251.854833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  251.874778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  251.880958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  251.995955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  252.004601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  252.009311] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  252.028112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  252.043146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  252.048161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  252.066189] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  252.076255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  252.093443] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  252.097769] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  252.276470] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  252.283197] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  252.285984] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  252.300717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  252.309075] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  252.382923] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  252.394747] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  252.420099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  252.427414] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  252.433484] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  252.443218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  252.455189] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  252.459176] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  252.467121] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  252.476099] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  252.478535] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  252.497977] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  252.528326] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  252.542058] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  252.558484] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  252.562262] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  252.567759] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  252.589621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  252.611175] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  252.628228] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  253.935671] Bluetooth: hci0: command tx timeout
[  254.126644] Bluetooth: hci1: command tx timeout
[  254.189676] Bluetooth: hci2: command tx timeout
[  254.381669] Bluetooth: hci3: command tx timeout
[  254.637972] Bluetooth: hci4: command tx timeout
[  254.702843] Bluetooth: hci5: command tx timeout
[  254.703007] Bluetooth: hci6: command tx timeout
[  254.766213] Bluetooth: hci7: command tx timeout
[  255.981639] Bluetooth: hci0: command tx timeout
[  256.173987] Bluetooth: hci1: command tx timeout
[  256.238596] Bluetooth: hci2: command tx timeout
[  256.429737] Bluetooth: hci3: command tx timeout
[  256.685913] Bluetooth: hci4: command tx timeout
[  256.749723] Bluetooth: hci6: command tx timeout
[  256.750207] Bluetooth: hci5: command tx timeout
[  256.813865] Bluetooth: hci7: command tx timeout
[  258.029641] Bluetooth: hci0: command tx timeout
[  258.221818] Bluetooth: hci1: command tx timeout
[  258.285754] Bluetooth: hci2: command tx timeout
[  258.477799] Bluetooth: hci3: command tx timeout
[  258.733701] Bluetooth: hci4: command tx timeout
[  258.798605] Bluetooth: hci6: command tx timeout
[  258.799099] Bluetooth: hci5: command tx timeout
[  258.861939] Bluetooth: hci7: command tx timeout
[  260.077683] Bluetooth: hci0: command tx timeout
[  260.270683] Bluetooth: hci1: command tx timeout
[  260.333643] Bluetooth: hci2: command tx timeout
[  260.525700] Bluetooth: hci3: command tx timeout
[  260.781840] Bluetooth: hci4: command tx timeout
[  260.846439] Bluetooth: hci5: command tx timeout
[  260.846918] Bluetooth: hci6: command tx timeout
[  260.909646] Bluetooth: hci7: command tx timeout
[  314.173499] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  314.178241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  314.184939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  314.191491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  314.197431] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  314.502324] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  314.506468] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  314.515742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  314.522246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  314.528136] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  314.647662] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  314.659738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  314.663120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  314.671815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  314.676236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  314.682314] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  314.700874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  314.707202] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  314.713971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  314.719302] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  314.732235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  314.755901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  314.767734] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  314.824953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  314.828860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  314.847247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  314.849181] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  314.854602] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  314.856495] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  314.879047] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  314.910827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  314.913263] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  314.916978] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  314.919272] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  314.920403] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  314.925103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  314.936034] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  314.946470] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  314.949173] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  314.967217] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  316.269945] Bluetooth: hci0: command tx timeout
[  316.590872] Bluetooth: hci1: command tx timeout
[  316.845691] Bluetooth: hci3: command tx timeout
[  316.845726] Bluetooth: hci2: command tx timeout
[  316.910630] Bluetooth: hci4: command tx timeout
[  316.973628] Bluetooth: hci6: command tx timeout
[  317.037666] Bluetooth: hci7: command tx timeout
[  317.037687] Bluetooth: hci5: command tx timeout
[  318.317921] Bluetooth: hci0: command tx timeout
[  318.637661] Bluetooth: hci1: command tx timeout
[  318.893915] Bluetooth: hci2: command tx timeout
[  318.894877] Bluetooth: hci3: command tx timeout
[  318.958646] Bluetooth: hci4: command tx timeout
[  319.021649] Bluetooth: hci6: command tx timeout
[  319.085644] Bluetooth: hci7: command tx timeout
[  319.085665] Bluetooth: hci5: command tx timeout
[  320.365630] Bluetooth: hci0: command tx timeout
[  320.687584] Bluetooth: hci1: command tx timeout
[  320.942643] Bluetooth: hci3: command tx timeout
[  320.942792] Bluetooth: hci2: command tx timeout
[  321.005621] Bluetooth: hci4: command tx timeout
[  321.069833] Bluetooth: hci6: command tx timeout
[  321.133983] Bluetooth: hci7: command tx timeout
[  321.134029] Bluetooth: hci5: command tx timeout
[  322.413696] Bluetooth: hci0: command tx timeout
[  322.733628] Bluetooth: hci1: command tx timeout
[  322.989883] Bluetooth: hci2: command tx timeout
[  322.990835] Bluetooth: hci3: command tx timeout
[  323.054898] Bluetooth: hci4: command tx timeout
[  323.117625] Bluetooth: hci6: command tx timeout
[  323.181649] Bluetooth: hci5: command tx timeout
[  323.182735] Bluetooth: hci7: command tx timeout
[  376.772603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.777264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.779831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.787762] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.792115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.794293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  376.799724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.815536] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  376.847142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  376.854904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  377.102755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  377.117700] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  377.117996] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  377.121341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  377.126087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  377.137289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  377.143355] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  377.156547] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  377.159439] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  377.169919] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  377.180725] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  377.196126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  377.208518] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  377.216965] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  377.223025] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  377.226368] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  377.232046] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  377.234707] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  377.237247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  377.240107] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  377.261247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  377.283295] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  377.292046] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  377.293529] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  377.311526] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  377.313770] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  377.324044] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  377.330487] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  377.340353] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  377.395046] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  378.861850] Bluetooth: hci1: command tx timeout
[  378.925699] Bluetooth: hci0: command tx timeout
[  379.246828] Bluetooth: hci2: command tx timeout
[  379.309645] Bluetooth: hci3: command tx timeout
[  379.438656] Bluetooth: hci7: command tx timeout
[  379.438692] Bluetooth: hci4: command tx timeout
[  379.501856] Bluetooth: hci6: command tx timeout
[  379.502105] Bluetooth: hci5: command tx timeout
[  380.909720] Bluetooth: hci1: command tx timeout
[  380.974706] Bluetooth: hci0: command tx timeout
[  381.293640] Bluetooth: hci2: command tx timeout
[  381.357734] Bluetooth: hci3: command tx timeout
[  381.486307] Bluetooth: hci7: command tx timeout
[  381.487654] Bluetooth: hci4: command tx timeout
[  381.550376] Bluetooth: hci5: command tx timeout
[  381.551483] Bluetooth: hci6: command tx timeout
[  382.958103] Bluetooth: hci1: command tx timeout
[  383.021637] Bluetooth: hci0: command tx timeout
[  383.341641] Bluetooth: hci2: command tx timeout
[  383.406019] Bluetooth: hci3: command tx timeout
[  383.533810] Bluetooth: hci4: command tx timeout
[  383.535103] Bluetooth: hci7: command tx timeout
[  383.597622] Bluetooth: hci6: command tx timeout
[  383.598803] Bluetooth: hci5: command tx timeout
[  385.006158] Bluetooth: hci1: command tx timeout
[  385.069627] Bluetooth: hci0: command tx timeout
[  385.389614] Bluetooth: hci2: command tx timeout
[  385.453902] Bluetooth: hci3: command tx timeout
[  385.583632] Bluetooth: hci7: command tx timeout
[  385.583656] Bluetooth: hci4: command tx timeout
[  385.645870] Bluetooth: hci5: command tx timeout
[  385.646363] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
19:08:45  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffffffff8150d025 RDX=ffff888034a58000
RSI=ffffffff818a1dff RDI=ffff88800d1028c0 RBP=ffff8880233b7b18 RSP=ffff8880233b7578
R8 =0000000000000001 R9 =ffffed100293bf8a R10=ffff8880149dfc57 R11=0000000000000000
R12=ffff88800d102dc0 R13=ffff888034446b40 R14=ffff88800d1028c0 R15=0000000000000000
RIP=ffffffff8172eb68 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe2f00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fab8118d620 CR3=000000000d418000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff
XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f
XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81e238cd RDX=ffff888034d1d340
RSI=0000000000000000 RDI=0000000000000007 RBP=ffff888035be7df0 RSP=ffff888035be7d08
R8 =0000000000000000 R9 =ffffed1001e87c70 R10=0000000000000000 R11=0000000000000000
R12=ffff888035be7da0 R13=ffff88800f43e380 R14=ffff888035be7eb8 R15=0000000000000001
RIP=ffffffff81e238d0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f8db2a17540 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8db2bb24a1 CR3=000000002df04000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000ff0000000000000000
XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=65006463682d69636865203a65727020
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000