Warning: Permanently added '[localhost]:62112' (ECDSA) to the list of known hosts.
2025/05/23 13:21:33 fuzzer started
2025/05/23 13:21:34 dialing manager at localhost:41873
syzkaller login: [  102.827784] cgroup: Unknown subsys name 'net'
[  102.986391] cgroup: Unknown subsys name 'cpuset'
[  103.022880] cgroup: Unknown subsys name 'rlimit'
2025/05/23 13:21:56 syscalls: 204
2025/05/23 13:21:56 code coverage: enabled
2025/05/23 13:21:56 comparison tracing: enabled
2025/05/23 13:21:56 extra coverage: enabled
2025/05/23 13:21:56 setuid sandbox: enabled
2025/05/23 13:21:56 namespace sandbox: enabled
2025/05/23 13:21:56 Android sandbox: enabled
2025/05/23 13:21:56 fault injection: enabled
2025/05/23 13:21:56 leak checking: enabled
2025/05/23 13:21:56 net packet injection: enabled
2025/05/23 13:21:56 net device setup: enabled
2025/05/23 13:21:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/23 13:21:56 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/23 13:21:56 USB emulation: enabled
2025/05/23 13:21:56 hci packet injection: enabled
2025/05/23 13:21:56 wifi device emulation: enabled
2025/05/23 13:21:56 802.15.4 emulation: enabled
2025/05/23 13:21:56 fetching corpus: 0, signal 0/0 (executing program)
2025/05/23 13:21:57 starting 8 fuzzer processes
13:21:57 executing program 0:
r0 = socket$inet6(0xa, 0xa, 0x9)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4)
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0), 0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd4d}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004811}, 0x24004080)
connect$802154_dgram(r2, &(0x7f00000002c0)={0x24, @long={0x3, 0x3}}, 0x14)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000300)=0x8, 0x4)
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340))
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r3, &(0x7f0000000380)={0x24, @short={0x2, 0x2}}, 0x14)
socketpair(0x8, 0xa, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000400)=0x1, 0x4)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00'})

13:21:57 executing program 2:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10)
r2 = accept4$inet(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0xffffffffffffffff, 0x5, 0x719, 0xfffffffffffffffd, 0x20c6], 0x4, &(0x7f0000000140)=[{}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x6, 0x1})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/16, 0x10, 0x0, &(0x7f0000000300)=""/60, 0x3c}, &(0x7f0000000380)=0x40)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000003c0)={{0x88, @rand_addr=0x64010102, 0x4e21, 0x3, 'fo\x00', 0x2, 0x4, 0x13}, {@remote, 0x4e20, 0x10000, 0xfffffffe, 0x7, 0xb80}}, 0x44)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fffffff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x1000]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0x80000001, 0x8]}]}, 0x3c}}, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x400c00, 0x0)
r5 = accept4$inet(r2, &(0x7f0000000580)={0x2, 0x0, @empty}, &(0x7f00000005c0)=0x10, 0x100000)
setsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000600)={@remote, @loopback, @local}, 0xc)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x40}}, 0x40)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000740), 0x400000, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000780))
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000007c0)={0x1, 'bridge_slave_0\x00', 0x1}, 0x18)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000880)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0xffffffffffffff80, 0x200, 0x1, 0x5, 0x9], 0x7, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8)
r7 = accept$inet(r6, &(0x7f0000000980)={0x2, 0x0, @dev}, &(0x7f00000009c0)=0x10)
ioctl$sock_inet_SIOCRTMSG(r7, 0x890d, &(0x7f0000000a40)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @local}, {0x2, 0x4e23, @local}, 0x231, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a00)='lo\x00', 0x4, 0x5, 0x5})

13:21:57 executing program 1:
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x80800)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @multicast1, 0x1, 0x6, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1, @private=0xa010101, @rand_addr=0x64010101]}, 0x28)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100))
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @loopback}, 0x45, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='veth0_to_hsr\x00', 0x7bb, 0x80000000, 0x5c})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x0, [0x6, 0x81, 0x4]}, &(0x7f0000000280)=0x44)
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0))
r2 = accept$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast1}, &(0x7f0000000340)=0x10)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000380)={'HL\x00'}, &(0x7f00000003c0)=0x1e)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000400)=@gcm_256={{0x181}, "5566446c1682360d", "44cf08b4b577dae191b25c54ff472c82baeb17cd67bf2ee331a5ce11cf7300a9", "f42cd9b5", "3b5c3031657cf6f2"}, 0x38)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'sit0\x00', <r3=>0x0, 0x6, 0x80, 0x6, 0x7, 0x4, @local, @mcast1, 0x7800, 0x10, 0x2, 0x7}})
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000500)={r3, @local, @multicast2}, 0xc)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x0, 0x0, 0x0, [0x401, 0x8, 0x200, 0x200, 0x6, 0x2], 0x6, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8)
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000006c0))
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$inet(0x2, 0x6, 0xe3000)
getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000700)={'ipvs\x00'}, &(0x7f0000000740)=0x1e)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000780)=@gcm_128={{0x304}, "d8daaea563f409a4", "ca3f860b2a9556ff20619e08ea0abef3", "ec15e935", "3ac994b3f9ec3541"}, 0x28)

[  126.465532] audit: type=1400 audit(1748006517.934:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:21:57 executing program 3:
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x7, 0x1, 0x1f, 0x8}, 0xc)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x138, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x1c}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0xa}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x286}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', <r2=>r1, 0x29, 0xff, 0x8, 0x2, 0x6, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x10, 0x7, 0x1}})
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x80, 0x0, 0x420, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x17}}}}, [@NL80211_ATTR_SSID={0x7, 0x34, @random="5afc54"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x6, 0x34, @random="c909"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x46}, @NL80211_ATTR_PMK={0x14, 0xfe, "36a5957c88bf5b57898e4dc99e963133"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1a}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x58}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3a}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4080)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6tnl0\x00', <r3=>r0, 0x4, 0x4, 0x1f, 0x7, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x7800, 0x5, 0xc0a}})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x4000000)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x7c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8a}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x7ff, 0x5, 0x1, 0x6, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004050}, 0x20000000)
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000009c0), &(0x7f0000000a00)=0xc)
socketpair(0x18, 0x4, 0xfffffffa, &(0x7f0000000a40)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000a80)={0x3fa, 0x1000, 0x7f, 0x8, 0x2d, 0x6, 0x3}, 0xc)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000ac0))
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000b00)={0x3, 0x2, 0xfe7, 0xef7, 0xec}, 0x14)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000b40)={0x100, "10d648"}, 0x6)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000b80), 0x60000, 0x0)
sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1040e07f938e1c2a}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xa8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xcf}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10000800}, 0x80)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r6)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000ec0)=0xe8)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000001240)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x164, r7, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x164}}, 0x850)

13:21:57 executing program 4:
setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4)
socketpair(0x22, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x448, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x126}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x95}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfde3, @empty, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @private0, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xc9e, @remote, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30157764}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_SOCK={0xbc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x42a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7bb0}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe07c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x82, 0x3, "635bf508659680e66f05257a61e32e1c84977eb0f52bb4197d61a488f1d2c68db3874a517769dec736e88dc5655bd1546547d10f2906adff976430c905c1b7d1fbe9e862aba3d4981a50d20c8ed54543a766c03968096953a43039148b5eb0e7028c1e0507a3804d28cad9cc35df545b538031ef0af207bd37f1a7a00f5b"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ID={0x3b, 0x3, "5f7d1308aedea6502f8c6e2c3d12d91f9dcbe22155a5b0e56542816da7d1f7bcffa81903bfd56c818c50acf1726074923ee2740e8923e1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x63, 0x3, "115016e53bcf73c76b5ada79b4d8402801c593d8a27d89fd924dfd2ace0f98930c7d3608a31cf1d898e9481743dbd557e28ca38515cc149c31186c86d425f2b5c687bfa64c57b8c5ff40ee245bb95df41feb20c5f9b2e505d84ddf75696d7b"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "7b73a21088405aa147895dc098a889f67a837c87177a29a56ad301f9f2d043"}}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x20000801}, 0x24040000)
socketpair(0x25, 0x3, 0x1, &(0x7f00000005c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$FOU_CMD_GET(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x2001)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x4044000)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x0, [0x5, 0x7, 0x800]}, &(0x7f0000000880)=0x44)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000940)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl0\x00', <r5=>0x0, 0x4, 0x81, 0xc0, 0x4720, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x700, 0x1f, 0x2}})
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000980), 0x1c000, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, 0x0, 0x40f, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f0000000ac0)={'syztnl1\x00', r5, 0x2f, 0x7f, 0xb5, 0x7fffffff, 0x1c, @mcast2, @remote, 0x7800, 0x88, 0x74c0, 0x6}})
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b80), r3)
r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000bc0), 0x40900, 0x0)
getsockopt$inet_tcp_buf(r8, 0x6, 0x1f, &(0x7f0000000c00)=""/49, &(0x7f0000000c40)=0x31)
connect$bt_sco(r4, &(0x7f0000000c80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000cc0)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000d40)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000e40)=0xe8)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x64, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x64}}, 0x4000000)

13:21:57 executing program 5:
getrusage(0x0, &(0x7f0000000000))
socketpair(0x8, 0x80000, 0x100, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4)
recvfrom$inet(r1, &(0x7f0000000180)=""/205, 0xcd, 0x40000042, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000002c0))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "e05d1c6e4becc3ed", "9a13323d438eb416402f8969950844907990a5c558b72074a2d1b524360040f3", "1b260a84", "de20f30fc97ef4f0"}, 0x38)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'syztnl2\x00', <r4=>0x0, 0x4, 0x8, 0x2, 0x9, 0x5, @loopback, @empty, 0x7fc0, 0x7, 0x0, 0x1000}})
getrusage(0x0, &(0x7f0000000400))
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000004c0), &(0x7f0000000500)=0x14)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000540)={{0x0, @rand_addr=0x64010102, 0x4e21, 0x0, 'lblc\x00', 0x0, 0x28, 0x45}, {@loopback, 0x4e23, 0x10000, 0x8, 0x5, 0x9}}, 0x44)
r5 = socket$inet6(0xa, 0x3, 0x2)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1000})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', <r6=>r4, 0x4, 0xff, 0x1f, 0x10000, 0x1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x7, 0x0, 0x4}})
r7 = accept4$inet(r2, &(0x7f0000000700)={0x2, 0x0, @loopback}, &(0x7f0000000740)=0x10, 0x800)
getsockopt$inet_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000780)=""/165, &(0x7f0000000840)=0xa5)
r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000880), 0x1000, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9e7a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@private2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x0, 0x4e24, 0x8001, 0x2, 0x60, 0x80, 0x87, r6, 0xee00}, {0xfffffffffffffffd, 0x7, 0xffffffffffffe6bb, 0xa5db, 0x3f, 0x27e0983, 0x2, 0x7ff}, {0x0, 0x0, 0x7, 0x160}, 0x1ff, 0x6e6bba, 0x0, 0x0, 0x3}, {{@in=@private=0xa010100, 0x4d5, 0xff}, 0x2, @in6=@private1, 0x0, 0x3, 0x0, 0x0, 0x9, 0x5, 0x1}}, 0xe8)

13:21:57 executing program 6:
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000000c0)=""/31, &(0x7f0000000100)=0x1f)
read$usbmon(0xffffffffffffffff, &(0x7f0000000140)=""/135, 0x87)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000300)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/30, 0x1e})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r5, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0)
ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x100)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}}, 0x10)
read$usbmon(0xffffffffffffffff, &(0x7f00000005c0)=""/7, 0x7)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0)
getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000640), &(0x7f0000000680)=0x4)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_GET(r7, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xc800)

13:21:58 executing program 7:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048015}, 0x44000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'sit0\x00', <r3=>0x0, 0x4, 0x0, 0xc0, 0x80000000, 0x6a, @empty, @local, 0x8, 0x7, 0xfffff087, 0x1f}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x44840}, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1)
sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x10)
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000500), 0x4)
connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000540)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40891)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000006c0), 0x220040, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r4)
getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000700), &(0x7f0000000740)=0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4)
recvfrom$inet(r4, &(0x7f00000007c0)=""/35, 0x23, 0x40000003, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x880)
accept4$bt_l2cap(r4, 0x0, &(0x7f0000000940), 0x80000)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000980)={'TPROXY\x00'}, &(0x7f00000009c0)=0x1e)

[  127.913729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  127.916755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.916782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  127.919171] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  127.919208] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.922875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.926500] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  127.928640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.931032] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  127.933071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.007118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  128.009488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  128.016049] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  128.017746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  128.019869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  128.031171] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  128.032536] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  128.036411] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  128.039991] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  128.042448] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  128.043934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  128.045522] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  128.050417] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  128.052564] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  128.063563] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  128.065275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  128.068482] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  128.069547] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  128.071164] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  128.073036] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  128.086417] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  128.090176] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  128.091111] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  128.117155] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  128.119883] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  128.121473] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  128.125436] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  128.140540] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  128.143150] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  128.154727] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  129.988187] Bluetooth: hci0: command tx timeout
[  129.988193] Bluetooth: hci1: command tx timeout
[  130.114940] Bluetooth: hci3: command tx timeout
[  130.115292] Bluetooth: hci4: command tx timeout
[  130.115568] Bluetooth: hci2: command tx timeout
[  130.178797] Bluetooth: hci6: command tx timeout
[  130.178883] Bluetooth: hci7: command tx timeout
[  130.179373] Bluetooth: hci5: command tx timeout
[  132.034876] Bluetooth: hci1: command tx timeout
[  132.038359] Bluetooth: hci0: command tx timeout
[  132.162733] Bluetooth: hci4: command tx timeout
[  132.163226] Bluetooth: hci2: command tx timeout
[  132.163704] Bluetooth: hci3: command tx timeout
[  132.227051] Bluetooth: hci7: command tx timeout
[  132.227129] Bluetooth: hci6: command tx timeout
[  132.227502] Bluetooth: hci5: command tx timeout
[  134.083104] Bluetooth: hci0: command tx timeout
[  134.083339] Bluetooth: hci1: command tx timeout
[  134.211118] Bluetooth: hci3: command tx timeout
[  134.211789] Bluetooth: hci4: command tx timeout
[  134.212263] Bluetooth: hci2: command tx timeout
[  134.275042] Bluetooth: hci6: command tx timeout
[  134.275583] Bluetooth: hci5: command tx timeout
[  134.275834] Bluetooth: hci7: command tx timeout
[  136.131194] Bluetooth: hci1: command tx timeout
[  136.131299] Bluetooth: hci0: command tx timeout
[  136.259091] Bluetooth: hci4: command tx timeout
[  136.259167] Bluetooth: hci2: command tx timeout
[  136.260393] Bluetooth: hci3: command tx timeout
[  136.323120] Bluetooth: hci6: command tx timeout
[  136.324188] Bluetooth: hci5: command tx timeout
[  136.325687] Bluetooth: hci7: command tx timeout
[  190.889413] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  190.893408] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  190.911808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  190.927018] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  190.934535] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  190.994488] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  190.998162] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  191.003381] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  191.010588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  191.013295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  191.016977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  191.020861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  191.023030] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  191.030020] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  191.030897] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  191.032489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  191.039183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  191.042237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  191.046043] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  191.058337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  191.067837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.079236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.083197] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  191.097297] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  191.115129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  191.116980] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  191.131927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  191.136048] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  191.138578] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  191.141261] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  191.145162] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  191.188053] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  191.194079] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  191.212809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  191.213895] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  191.225471] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  191.269523] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  191.291223] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  191.368669] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  191.377176] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  192.963143] Bluetooth: hci0: command tx timeout
[  193.090737] Bluetooth: hci1: command tx timeout
[  193.155189] Bluetooth: hci2: command tx timeout
[  193.155433] Bluetooth: hci3: command tx timeout
[  193.219087] Bluetooth: hci4: command tx timeout
[  193.346817] Bluetooth: hci6: command tx timeout
[  193.347520] Bluetooth: hci5: command tx timeout
[  193.474910] Bluetooth: hci7: command tx timeout
[  195.011119] Bluetooth: hci0: command tx timeout
[  195.141683] Bluetooth: hci1: command tx timeout
[  195.203036] Bluetooth: hci2: command tx timeout
[  195.204347] Bluetooth: hci3: command tx timeout
[  195.267703] Bluetooth: hci4: command tx timeout
[  195.395115] Bluetooth: hci6: command tx timeout
[  195.395241] Bluetooth: hci5: command tx timeout
[  195.522710] Bluetooth: hci7: command tx timeout
[  197.058947] Bluetooth: hci0: command tx timeout
[  197.186960] Bluetooth: hci1: command tx timeout
[  197.250718] Bluetooth: hci3: command tx timeout
[  197.253541] Bluetooth: hci2: command tx timeout
[  197.316662] Bluetooth: hci4: command tx timeout
[  197.443129] Bluetooth: hci6: command tx timeout
[  197.443556] Bluetooth: hci5: command tx timeout
[  197.570742] Bluetooth: hci7: command tx timeout
[  199.107744] Bluetooth: hci0: command tx timeout
[  199.234700] Bluetooth: hci1: command tx timeout
[  199.299743] Bluetooth: hci2: command tx timeout
[  199.300276] Bluetooth: hci3: command tx timeout
[  199.363733] Bluetooth: hci4: command tx timeout
[  199.490947] Bluetooth: hci5: command tx timeout
[  199.492099] Bluetooth: hci6: command tx timeout
[  199.619913] Bluetooth: hci7: command tx timeout
[  253.533558] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  253.538059] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  253.542254] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  253.547486] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  253.556580] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  253.591343] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  253.599292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  253.601961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  253.607194] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  253.610522] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  253.676219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  253.681181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  253.688142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  253.700454] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  253.705452] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  253.751193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  253.757463] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  253.759245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  253.773389] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  253.778159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  253.796438] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  253.833119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  253.859113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  253.862142] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  253.866672] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  253.874448] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  253.877850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  253.880044] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  253.912943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  253.919125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  253.943373] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  253.950956] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  253.957977] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  253.962879] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  253.969859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  254.016400] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  254.018409] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  254.024870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  254.042036] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  254.090001] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  255.618781] Bluetooth: hci0: command tx timeout
[  255.682951] Bluetooth: hci1: command tx timeout
[  255.746739] Bluetooth: hci2: command tx timeout
[  255.875309] Bluetooth: hci3: command tx timeout
[  255.939029] Bluetooth: hci6: command tx timeout
[  256.002741] Bluetooth: hci4: command tx timeout
[  256.134469] Bluetooth: hci7: command tx timeout
[  256.258786] Bluetooth: hci5: command tx timeout
[  257.667880] Bluetooth: hci0: command tx timeout
[  257.731731] Bluetooth: hci1: command tx timeout
[  257.795700] Bluetooth: hci2: command tx timeout
[  257.923959] Bluetooth: hci3: command tx timeout
[  257.988019] Bluetooth: hci6: command tx timeout
[  258.051744] Bluetooth: hci4: command tx timeout
[  258.179082] Bluetooth: hci7: command tx timeout
[  258.308660] Bluetooth: hci5: command tx timeout
[  259.714691] Bluetooth: hci0: command tx timeout
[  259.778732] Bluetooth: hci1: command tx timeout
[  259.842711] Bluetooth: hci2: command tx timeout
[  259.970738] Bluetooth: hci3: command tx timeout
[  260.036646] Bluetooth: hci6: command tx timeout
[  260.099733] Bluetooth: hci4: command tx timeout
[  260.226880] Bluetooth: hci7: command tx timeout
[  260.355727] Bluetooth: hci5: command tx timeout
[  261.763058] Bluetooth: hci0: command tx timeout
[  261.826978] Bluetooth: hci1: command tx timeout
[  261.891973] Bluetooth: hci2: command tx timeout
[  262.018937] Bluetooth: hci3: command tx timeout
[  262.084718] Bluetooth: hci6: command tx timeout
[  262.146763] Bluetooth: hci4: command tx timeout
[  262.274737] Bluetooth: hci7: command tx timeout
[  262.403792] Bluetooth: hci5: command tx timeout
[  316.271130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  316.273016] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  316.274544] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  316.288923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  316.296263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  316.320467] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  316.322407] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  316.324059] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  316.332790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  316.335566] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  316.389307] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  316.391847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  316.417901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  316.418497] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  316.424145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  316.426830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  316.440431] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  316.446908] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  316.448123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  316.451792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  316.532443] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  316.539276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  316.566932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  316.568812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  316.580105] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  316.582253] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  316.588003] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  316.604523] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  316.609916] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  316.611369] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  316.613925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  316.622782] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  316.625441] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  316.632276] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  316.636823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  316.638292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  316.658202] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  316.661542] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  316.667533] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  316.680372] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  318.340678] Bluetooth: hci0: command tx timeout
[  318.404211] Bluetooth: hci1: command tx timeout
[  318.530772] Bluetooth: hci2: command tx timeout
[  318.531834] Bluetooth: hci3: command tx timeout
[  318.659844] Bluetooth: hci4: command tx timeout
[  318.725689] Bluetooth: hci6: command tx timeout
[  318.786797] Bluetooth: hci5: command tx timeout
[  318.880110] Bluetooth: hci7: command tx timeout
[  320.387045] Bluetooth: hci0: command tx timeout
[  320.450961] Bluetooth: hci1: command tx timeout
[  320.581032] Bluetooth: hci2: command tx timeout
[  320.581060] Bluetooth: hci3: command tx timeout
[  320.707412] Bluetooth: hci4: command tx timeout
[  320.770716] Bluetooth: hci6: command tx timeout
[  320.835870] Bluetooth: hci5: command tx timeout
[  320.898679] Bluetooth: hci7: command tx timeout
[  322.434680] Bluetooth: hci0: command tx timeout
[  322.498701] Bluetooth: hci1: command tx timeout
[  322.626894] Bluetooth: hci2: command tx timeout
[  322.627030] Bluetooth: hci3: command tx timeout
[  322.755882] Bluetooth: hci4: command tx timeout
[  322.818922] Bluetooth: hci6: command tx timeout
[  322.882675] Bluetooth: hci5: command tx timeout
[  322.948712] Bluetooth: hci7: command tx timeout
[  324.482888] Bluetooth: hci0: command tx timeout
[  324.548734] Bluetooth: hci1: command tx timeout
[  324.674971] Bluetooth: hci2: command tx timeout
[  324.675498] Bluetooth: hci3: command tx timeout
[  324.803035] Bluetooth: hci4: command tx timeout
[  324.866958] Bluetooth: hci6: command tx timeout
[  324.931924] Bluetooth: hci5: command tx timeout
[  324.994692] Bluetooth: hci7: command tx timeout
[  378.918510] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  378.926360] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  378.929519] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  378.954702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  378.960129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  379.153080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  379.158782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  379.164071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  379.178141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  379.180391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  379.182221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  379.184583] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  379.193265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  379.200716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  379.205322] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  379.285576] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  379.304390] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  379.309103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  379.335033] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  379.350277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  379.403155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  379.406784] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  379.412022] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  379.420642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  379.439976] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  379.441501] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  379.449221] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  379.452897] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  379.456551] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  379.459177] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  379.462783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  379.463789] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  379.465150] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  379.467865] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  379.472151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  379.473025] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  379.475127] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  379.490161] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  379.501214] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  379.515323] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  380.994850] Bluetooth: hci0: command tx timeout
[  381.250739] Bluetooth: hci2: command tx timeout
[  381.252011] Bluetooth: hci1: command tx timeout
[  381.442829] Bluetooth: hci3: command tx timeout
[  381.571788] Bluetooth: hci4: command tx timeout
[  381.572684] Bluetooth: hci5: command tx timeout
[  381.634776] Bluetooth: hci7: command tx timeout
[  381.635575] Bluetooth: hci6: command tx timeout
[  383.042730] Bluetooth: hci0: command tx timeout
[  383.299174] Bluetooth: hci2: command tx timeout
[  383.299862] Bluetooth: hci1: command tx timeout
[  383.490792] Bluetooth: hci3: command tx timeout
[  383.619023] Bluetooth: hci4: command tx timeout
[  383.619566] Bluetooth: hci5: command tx timeout
[  383.682947] Bluetooth: hci7: command tx timeout
[  383.683483] Bluetooth: hci6: command tx timeout
[  385.091589] Bluetooth: hci0: command tx timeout
[  385.347434] Bluetooth: hci1: command tx timeout
[  385.349147] Bluetooth: hci2: command tx timeout
[  385.538741] Bluetooth: hci3: command tx timeout
[  385.667178] Bluetooth: hci4: command tx timeout
[  385.668946] Bluetooth: hci5: command tx timeout
[  385.730795] Bluetooth: hci6: command tx timeout
[  385.732409] Bluetooth: hci7: command tx timeout
[  387.138702] Bluetooth: hci0: command tx timeout
[  387.395070] Bluetooth: hci1: command tx timeout
[  387.395979] Bluetooth: hci2: command tx timeout
[  387.589014] Bluetooth: hci3: command tx timeout
[  387.714756] Bluetooth: hci5: command tx timeout
[  387.715250] Bluetooth: hci4: command tx timeout
[  387.779653] Bluetooth: hci6: command tx timeout
[  387.780131] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
13:27:03  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000082 RCX=1ffff1100d9c6f37 RDX=ffff88802706b700
RSI=ffffffff812bf6a7 RDI=ffff88806ce37a58 RBP=ffff888009603738 RSP=ffff88806ce08948
R8 =0000000000000001 R9 =ffffed100d9c111b R10=0000000000000000 R11=0000000000000001
R12=1ffff1100d9c1130 R13=ffff888009603738 R14=0000000000000000 R15=ffff88806ce36f00
RIP=ffffffff81481bee RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5634000 00000000 00000000
LDT=0000 fffffe0600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f643d32427c CR3=000000001cf0f000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e
XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249
XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=1ffff110061d6fa7 RCX=ffffffff819d3db1 RDX=ffff8880280a8000
RSI=ffffffff819d3dbf RDI=0000000000000007 RBP=0000000019d6f007 RSP=ffff888030eb7cf0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000019d6f007 R11=0000000000000001
R12=ffff8880151a7290 R13=ffff88800d254a00 R14=0000000019d6f007 R15=ffff88800d254a20
RIP=ffffffff81738198 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5734000 00000000 00000000
LDT=0000 fffffe4c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f484a535028 CR3=00000000308f8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000