Warning: Permanently added '[localhost]:56259' (ECDSA) to the list of known hosts.
2025/06/13 02:43:57 fuzzer started
2025/06/13 02:43:57 dialing manager at localhost:40113
syzkaller login: [   98.260052] cgroup: Unknown subsys name 'net'
[   98.428209] cgroup: Unknown subsys name 'cpuset'
[   98.482764] cgroup: Unknown subsys name 'rlimit'
2025/06/13 02:44:14 syscalls: 205
2025/06/13 02:44:14 code coverage: enabled
2025/06/13 02:44:14 comparison tracing: enabled
2025/06/13 02:44:14 extra coverage: enabled
2025/06/13 02:44:14 setuid sandbox: enabled
2025/06/13 02:44:14 namespace sandbox: enabled
2025/06/13 02:44:14 Android sandbox: enabled
2025/06/13 02:44:14 fault injection: enabled
2025/06/13 02:44:14 leak checking: enabled
2025/06/13 02:44:14 net packet injection: enabled
2025/06/13 02:44:14 net device setup: enabled
2025/06/13 02:44:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/13 02:44:14 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/13 02:44:14 USB emulation: enabled
2025/06/13 02:44:14 hci packet injection: enabled
2025/06/13 02:44:14 wifi device emulation: enabled
2025/06/13 02:44:14 802.15.4 emulation: enabled
2025/06/13 02:44:14 fetching corpus: 0, signal 0/0 (executing program)
2025/06/13 02:44:16 starting 8 fuzzer processes
02:44:16 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x40000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0xff, 0x6, 0x0, {0x0, 0x0, r0}}, 0x3)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x2000)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x10000)
ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x1ff)
r3 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000140)='.\\%/[[\xcd\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0)={'ip6gretap0', 0x32, 0x36}, 0xd)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x4, 0x0, 0x12, 0x11, 0x10, "c6f596eda60a7c4c74924124b2a71b5f0796ae7be17650b0b2f0fb005ee42f7c0553f16f0401147999a7f0b1e6621b3d5e19f188c281e263642a2aeeba8a7f7d", "100d731313014a18c7c94875db92c14db21de94d0972d76d14916d7572c438d5386decf88e12d0c5f6d5c942640bdecce7a4641b78553045025f61ed0b5a3f06", "16e41c312a8ccb5574674de90b73a678321740a41343037b1ab37f19ca805043", [0x7, 0x13c1]})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300))
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008008)
r4 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x20400)
r5 = io_uring_setup(0x6532, &(0x7f0000000480)={0x0, 0x4b50, 0x0, 0x3, 0x3c0})
ioctl$LOOP_SET_FD(r4, 0x4c00, r5)
r6 = memfd_secret(0x0)
ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000500)={0x0, {}, 0x0, {}, 0x7, 0x3, 0x16, 0x0, "b5e2aa6c38b23cd87d961f095d624c99f47cce3a058eccfcb91221c04fed784399e9f8f49fd860cb30b8d2c1d024f52fb573c9b4087d261c03c7b9a26c418d2c", "0126c627c604e7030a907fef514c792cd9514bff1c0d3703d7896d84ff916bd3", [0x5, 0x101]})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5abd918a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x74}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040084}, 0x20000840)
syz_genetlink_get_family_id$SEG6(&(0x7f00000006c0), 0xffffffffffffffff)

02:44:16 executing program 1:
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4)
r0 = msgget$private(0x0, 0x18)
r1 = getegid()
r2 = clone3(&(0x7f0000001240)={0x22800, &(0x7f0000000040), &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0), {0x3}, &(0x7f0000000100)=""/198, 0xc6, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x9}, 0x58)
msgctl$IPC_SET(r0, 0x1, &(0x7f00000012c0)={{0x0, 0xee00, r1, 0xee01, 0xee00, 0x8, 0x7}, 0x0, 0x0, 0xfffffffffffffffc, 0x6, 0x8001, 0x5, 0x1, 0x5, 0x3, 0x2, r3, 0xffffffffffffffff})
r4 = getegid()
msgget$private(0x0, 0x208)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001380), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, r5, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8808}, 0x810)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = msgget$private(0x0, 0x0)
r8 = getuid()
r9 = getuid()
getgroups(0x3, &(0x7f00000015c0)=[r1, r4, <r10=>r1])
r11 = getpgid(r2)
msgctl$IPC_SET(r7, 0x1, &(0x7f0000001600)={{0x3, r8, r1, r9, r10, 0x144, 0x80}, 0x0, 0x0, 0x8, 0xffffffffffffff5c, 0xdb54, 0x0, 0x5, 0x7ff, 0x80, 0xc724, r2, r11})
sched_setattr(r11, &(0x7f0000001680)={0x38, 0x2, 0x10000021, 0x2, 0x2, 0x1, 0xfffffffffffff93c, 0x4, 0x80000000, 0x401}, 0x0)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001700), r6)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f00000017c0)={&(0x7f00000016c0), 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x2c, r12, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x44800)
pidfd_open(0x0, 0x0)

02:44:16 executing program 2:
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x86d2abfc0cb9965f}, 0x24008000)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000081)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000091)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40040d1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'tunl0\x00', &(0x7f00000005c0)={'ip_vti0\x00', <r5=>0x0, 0x700, 0x20, 0x0, 0x7, {{0x1b, 0x4, 0x1, 0x3a, 0x6c, 0x68, 0x0, 0x1f, 0x2d, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@noop, @noop, @cipso={0x86, 0x12, 0x3, [{0x7, 0xc, "9b34886f451765b3039b"}]}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0xf7, [@private=0xa010101]}, @ssrr={0x89, 0x27, 0x2f, [@loopback, @remote, @empty, @rand_addr=0x64010100, @loopback, @private=0xa010101, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}]}, @generic={0x88, 0x11, "a3ef23bfbe775a57b86045539aebbb"}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', <r6=>0x0, 0x4, 0x3, 0x1, 0xffffff04, 0x80, @dev={0xfe, 0x80, '\x00', 0xc}, @mcast2, 0x0, 0x20, 0x7fffffff, 0x79}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl2\x00', <r7=>0x0, 0x2f, 0x0, 0xc, 0x1, 0x12, @loopback, @remote, 0x78b0, 0x8000, 0xd46f, 0x17}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'sit0\x00', <r8=>0x0, 0x29, 0x6, 0xfe, 0x18, 0x0, @private2, @remote, 0x700, 0x80, 0x0, 0xffff0001}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', <r9=>0x0, 0x29, 0xe6, 0x5, 0xffff8000, 0x1d, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x20, 0x7800, 0x1, 0x3}})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000e40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f00000009c0)={0x410, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x676b}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x410}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000ec0), r2)
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x64, r10, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r3)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r11, 0x0, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048090}, 0x8845)

02:44:16 executing program 3:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x6316, &(0x7f0000000000)={0x77359400}, 0x1, 0x0, 0x1}, 0x8)
r0 = fsmount(0xffffffffffffffff, 0x0, 0xe)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000080)={'gre0\x00', <r1=>0x0, 0x20, 0x8, 0x76, 0x6, {{0x8, 0x4, 0x0, 0x3c, 0x20, 0x68, 0x0, 0x1f, 0x29, 0x0, @local, @remote, {[@rr={0x7, 0xb, 0x11, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x50040000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'ip_vti0\x00', r1, 0x20, 0x1, 0x2, 0x8000, {{0x13, 0x4, 0x0, 0x37, 0x4c, 0x64, 0x0, 0x1f, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x34, 0x7b, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x22}, 0xd7c}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0xd9ad}, {@private=0xa010100, 0xbe}, {@local, 0x3f}, {@local, 0x7}, {@remote, 0x7}]}, @noop, @noop]}}}}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2004, @fd_index=0x9, 0x101, 0x0, 0x3, 0x10, 0x1, {0x1}}, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000380)={'syztnl2\x00', <r4=>r1, 0x80a3, 0x7, 0x8, 0x8, {{0x1d, 0x4, 0x3, 0xa, 0x74, 0x67, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @loopback, {[@rr={0x7, 0xb, 0xa6, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x54, 0x12, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x8001}, {@multicast2, 0xfff}, {@multicast1, 0x6}, {@empty, 0x2e67}, {@remote, 0xff}, {@loopback}, {@private=0xa010101, 0xfffffff8}, {@rand_addr=0x64010101, 0x2}, {@empty, 0x1}, {@remote}]}]}}}}})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20000840)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6gre0\x00', <r5=>0x0, 0x4, 0x4, 0x5, 0x4000, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7, 0x700, 0x0, 0x80}})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_STATX={0x15, 0x5, 0x0, r0, &(0x7f0000000880), &(0x7f0000000980)='./file0\x00', 0x40, 0x6000}, 0xa46)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r6, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x40)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4000800)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040001)
clock_gettime(0x1, &(0x7f0000000d40))

02:44:16 executing program 4:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r0=>0x0, 0x4, 0x1f, 0x1, 0x6e, 0x4, @private2, @mcast1, 0x8000, 0x80, 0x1, 0x20}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', <r1=>r0, 0x2f, 0x0, 0x1, 0xffff0000, 0xd098484d6b858b32, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, 0x66, 0x80, 0x0, 0x8000}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', <r2=>r1, 0x29, 0x1, 0x5, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, @dev={0xfe, 0x80, '\x00', 0x29}, 0x10, 0x10, 0x88, 0x80000000}})
r3 = fsmount(0xffffffffffffffff, 0x0, 0x80)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', r0, 0x4, 0x4b, 0xec, 0x401, 0x1, @local, @empty, 0x7, 0x40, 0x8, 0xffffffe0}})
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x64904002ffb53b08}, 0x20000080)
r4 = memfd_secret(0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r1, 0x29, 0x3f, 0x7, 0x4, 0x46, @ipv4={'\x00', '\xff\xff', @local}, @private1, 0xe66dff14639da3f8, 0x80, 0x80000000, 0xffffffff}})
socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = fsmount(r4, 0x0, 0x5)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x8b9b6c0135b9c5cc, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5f2b}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048800}, 0x20000024)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'ip6gre0\x00', <r7=>r2, 0x4, 0x4, 0x0, 0x3d85, 0x1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xff24, 0x7800, 0x3, 0xfffffff9}})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, 0x0, 0x501, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x25}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x20000000)
r8 = syz_open_dev$loop(&(0x7f0000000800), 0x6a2e, 0x80)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000007c0)='syztnl1\x00', 0x0, r8)
r9 = openat$cgroup_ro(r4, &(0x7f0000000840)='blkio.bfq.sectors\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000880)='ip6tnl0\x00', &(0x7f00000008c0)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0)
r10 = memfd_secret(0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000a00)={'erspan0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x5, 0x100, {{0x8, 0x4, 0x1, 0x3f, 0x20, 0x67, 0x0, 0xfd, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@rr={0x7, 0xb, 0x57, [@broadcast, @remote]}]}}}}})

[  116.912385] audit: type=1400 audit(1749782656.623:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
02:44:16 executing program 5:
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x2})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x75, 0x8, 0x4, 0x79, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7807, 0x7, 0x8, 0x5}})
clone3(&(0x7f00000003c0)={0x108000, &(0x7f0000000100)=<r0=>0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0x39}, &(0x7f00000001c0)=""/193, 0xc1, &(0x7f00000002c0)=""/152, &(0x7f0000000380)=[0x0], 0x1}, 0x58)
shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000440)=""/58)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', r1, 0x2, 0x6, 0x8, 0x7fff, 0x12, @rand_addr=' \x01\x00', @empty, 0x8000, 0x7, 0x1, 0xffffffff}})
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000580)={0x7, 0x20, 0x5, 0x20, 0x8}, 0x48)
r2 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x200)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005}, 0x20000000)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000700)='cgroup.threads\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000740))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'syztnl2\x00', <r6=>r1, 0x4, 0x55, 0x2, 0x7, 0x41, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x1, 0x81, 0x2}})
sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000009c0)={0x12})

02:44:16 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x58}}, 0x40)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0)
sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xc7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x80}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x24000011)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008854}, 0x8810)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x80a0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan0\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008090}, 0x4)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan4\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'})
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x48841)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "0a1e4b7ecc7835d09a1da752b1036b98"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x5c}}, 0x8000)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8080)

02:44:16 executing program 7:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r1=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc17}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r2)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2)
sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r4, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d881}, 0x4)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r3, 0x601, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3d}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe484}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x2008004)
sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x2a}, @IEEE802154_ATTR_BAT_EXT={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20040054)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x36}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x44)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r2)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xf5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x60000801)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x63}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x8}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$team(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'syztnl0\x00', <r10=>0x0, 0x2f, 0x1f, 0x7, 0xc5, 0xa, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7888, 0x1, 0x2}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000001940)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x209002}, 0xc, &(0x7f0000001900)={&(0x7f0000001040)={0x894, r9, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1380}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7d56}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x5, 0x1f, 0x21, 0x1}, {0x40, 0x3, 0x1f}, {0x0, 0x40, 0x5, 0x8}, {0x6cec, 0x7f, 0x7, 0x2}, {0x1, 0x7, 0x7, 0xffff}, {0x1, 0xfc, 0x0, 0x9}, {0x6, 0x1, 0xa1, 0x8000}, {0x3, 0xff, 0x9}, {0x613, 0x3, 0xfa}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8001, 0x9, 0x80, 0x9c2}, {0x0, 0x3f, 0x4, 0xaed9}, {0xfffb, 0x1f, 0xc0, 0xff}, {0x1, 0x0, 0x8f, 0x6064e3e5}, {0x2, 0x54, 0x6, 0x7}, {0x5, 0x1, 0x5, 0x6}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}]}, 0x894}, 0x1, 0x0, 0x0, 0x4008040}, 0x8080)

[  118.469600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  118.481142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  118.485040] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  118.486193] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  118.490548] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  118.493613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  118.496549] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  118.498845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  118.526161] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  118.526344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  118.528185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  118.534588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  118.541574] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  118.542908] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  118.552186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  118.554344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  118.556336] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  118.558129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  118.560294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  118.563339] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  118.566558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  118.582153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  118.584478] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  118.589861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  118.593417] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  118.596086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  118.606668] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  118.614416] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  118.621341] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  118.632396] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  118.633760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  118.640557] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  118.642697] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  118.645008] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  118.646461] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  118.653685] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  118.656578] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  118.658545] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  118.669774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  118.720213] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.565824] Bluetooth: hci1: command tx timeout
[  120.629128] Bluetooth: hci0: command tx timeout
[  120.630371] Bluetooth: hci5: command tx timeout
[  120.693261] Bluetooth: hci7: command tx timeout
[  120.694279] Bluetooth: hci2: command tx timeout
[  120.758033] Bluetooth: hci3: command tx timeout
[  120.758731] Bluetooth: hci6: command tx timeout
[  120.821186] Bluetooth: hci4: command tx timeout
[  122.613711] Bluetooth: hci1: command tx timeout
[  122.677602] Bluetooth: hci5: command tx timeout
[  122.680144] Bluetooth: hci0: command tx timeout
[  122.741343] Bluetooth: hci7: command tx timeout
[  122.742596] Bluetooth: hci2: command tx timeout
[  122.805153] Bluetooth: hci3: command tx timeout
[  122.806508] Bluetooth: hci6: command tx timeout
[  122.869534] Bluetooth: hci4: command tx timeout
[  124.661108] Bluetooth: hci1: command tx timeout
[  124.725074] Bluetooth: hci5: command tx timeout
[  124.725925] Bluetooth: hci0: command tx timeout
[  124.789147] Bluetooth: hci2: command tx timeout
[  124.790101] Bluetooth: hci7: command tx timeout
[  124.853149] Bluetooth: hci3: command tx timeout
[  124.854041] Bluetooth: hci6: command tx timeout
[  124.919083] Bluetooth: hci4: command tx timeout
[  126.711124] Bluetooth: hci1: command tx timeout
[  126.773232] Bluetooth: hci0: command tx timeout
[  126.773710] Bluetooth: hci5: command tx timeout
[  126.837966] Bluetooth: hci2: command tx timeout
[  126.838422] Bluetooth: hci7: command tx timeout
[  126.901397] Bluetooth: hci6: command tx timeout
[  126.901860] Bluetooth: hci3: command tx timeout
[  126.965124] Bluetooth: hci4: command tx timeout
[  181.654279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.660325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.661779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.673835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.688700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  181.704448] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  181.707500] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  181.711209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  181.715758] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  181.725772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  181.746799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  181.749862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  181.753653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  181.764233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  181.777371] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  181.788670] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  181.792614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  181.796748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  181.805224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  181.809050] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  181.860816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  181.862396] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  181.865531] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  181.870284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  181.873576] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  181.908237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  181.914510] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  181.917339] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  181.925234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  181.932096] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  182.227451] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  182.297314] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  182.307397] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  182.441562] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  182.460429] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  182.576123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  182.605262] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  182.665546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  182.746760] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  182.762734] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.797500] Bluetooth: hci0: command tx timeout
[  183.861200] Bluetooth: hci3: command tx timeout
[  183.862080] Bluetooth: hci1: command tx timeout
[  183.862634] Bluetooth: hci2: command tx timeout
[  183.990999] Bluetooth: hci4: command tx timeout
[  184.054067] Bluetooth: hci6: command tx timeout
[  184.502182] Bluetooth: hci7: command tx timeout
[  184.949078] Bluetooth: hci5: command tx timeout
[  185.845248] Bluetooth: hci0: command tx timeout
[  185.909540] Bluetooth: hci1: command tx timeout
[  185.909611] Bluetooth: hci2: command tx timeout
[  185.910652] Bluetooth: hci3: command tx timeout
[  186.037238] Bluetooth: hci4: command tx timeout
[  186.101097] Bluetooth: hci6: command tx timeout
[  186.549184] Bluetooth: hci7: command tx timeout
[  186.997006] Bluetooth: hci5: command tx timeout
[  187.893133] Bluetooth: hci0: command tx timeout
[  187.957113] Bluetooth: hci2: command tx timeout
[  187.957566] Bluetooth: hci1: command tx timeout
[  187.957598] Bluetooth: hci3: command tx timeout
[  188.085245] Bluetooth: hci4: command tx timeout
[  188.149466] Bluetooth: hci6: command tx timeout
[  188.597063] Bluetooth: hci7: command tx timeout
[  189.046355] Bluetooth: hci5: command tx timeout
[  189.941364] Bluetooth: hci0: command tx timeout
[  190.005285] Bluetooth: hci2: command tx timeout
[  190.005716] Bluetooth: hci1: command tx timeout
[  190.006981] Bluetooth: hci3: command tx timeout
[  190.134019] Bluetooth: hci4: command tx timeout
[  190.198164] Bluetooth: hci6: command tx timeout
[  190.645179] Bluetooth: hci7: command tx timeout
[  191.093270] Bluetooth: hci5: command tx timeout
[  243.860553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  243.864611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  243.874611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  243.889600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  243.903708] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  243.930051] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  243.947186] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  243.949520] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  243.951818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  243.962482] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  243.969082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  243.971364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  243.974263] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  243.980105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  243.997471] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  244.002992] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  244.008278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  244.013756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  244.047817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  244.055456] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  244.079585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  244.102917] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  244.118635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  244.147513] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  244.189204] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.196435] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  244.202794] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  244.207899] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  244.212390] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  244.227723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  244.232495] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  244.243689] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  244.250729] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  244.257842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  244.265416] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  244.270796] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  244.285469] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  244.376821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  244.387426] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  244.390523] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  246.006050] Bluetooth: hci0: command tx timeout
[  246.070100] Bluetooth: hci2: command tx timeout
[  246.071709] Bluetooth: hci1: command tx timeout
[  246.133160] Bluetooth: hci3: command tx timeout
[  246.327440] Bluetooth: hci4: command tx timeout
[  246.390064] Bluetooth: hci5: command tx timeout
[  246.391141] Bluetooth: hci7: command tx timeout
[  246.453358] Bluetooth: hci6: command tx timeout
[  248.054970] Bluetooth: hci0: command tx timeout
[  248.117058] Bluetooth: hci2: command tx timeout
[  248.117556] Bluetooth: hci1: command tx timeout
[  248.181278] Bluetooth: hci3: command tx timeout
[  248.373158] Bluetooth: hci4: command tx timeout
[  248.437069] Bluetooth: hci7: command tx timeout
[  248.437544] Bluetooth: hci5: command tx timeout
[  248.502436] Bluetooth: hci6: command tx timeout
[  250.101195] Bluetooth: hci0: command tx timeout
[  250.166356] Bluetooth: hci1: command tx timeout
[  250.166815] Bluetooth: hci2: command tx timeout
[  250.229954] Bluetooth: hci3: command tx timeout
[  250.423257] Bluetooth: hci4: command tx timeout
[  250.485203] Bluetooth: hci7: command tx timeout
[  250.485687] Bluetooth: hci5: command tx timeout
[  250.550011] Bluetooth: hci6: command tx timeout
[  252.150370] Bluetooth: hci0: command tx timeout
[  252.213205] Bluetooth: hci2: command tx timeout
[  252.213638] Bluetooth: hci1: command tx timeout
[  252.277755] Bluetooth: hci3: command tx timeout
[  252.470335] Bluetooth: hci4: command tx timeout
[  252.534056] Bluetooth: hci5: command tx timeout
[  252.534532] Bluetooth: hci7: command tx timeout
[  252.599360] Bluetooth: hci6: command tx timeout
[  306.519715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  306.525272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  306.527720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  306.543544] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  306.547824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  306.593795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  306.596878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  306.602604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  306.609911] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  306.619136] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  306.637068] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  306.647574] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  306.650660] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  306.671288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  306.689481] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  306.858387] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  306.890890] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  306.893423] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  306.896030] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  306.910315] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  306.910361] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  306.912537] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  306.917708] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  306.917854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  306.919186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  306.922793] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  306.925599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  306.937099] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  306.944827] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  306.951240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  306.951491] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  306.955776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  306.956782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  306.962631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  306.985552] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  306.989251] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  307.013659] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  307.025308] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  307.053237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  307.080809] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  308.597402] Bluetooth: hci0: command tx timeout
[  308.661095] Bluetooth: hci1: command tx timeout
[  308.725316] Bluetooth: hci2: command tx timeout
[  308.981528] Bluetooth: hci3: command tx timeout
[  309.110007] Bluetooth: hci5: command tx timeout
[  309.173397] Bluetooth: hci4: command tx timeout
[  309.174084] Bluetooth: hci6: command tx timeout
[  309.237293] Bluetooth: hci7: command tx timeout
[  310.646981] Bluetooth: hci0: command tx timeout
[  310.709167] Bluetooth: hci1: command tx timeout
[  310.773394] Bluetooth: hci2: command tx timeout
[  311.031071] Bluetooth: hci3: command tx timeout
[  311.157027] Bluetooth: hci5: command tx timeout
[  311.221219] Bluetooth: hci6: command tx timeout
[  311.221427] Bluetooth: hci4: command tx timeout
[  311.286113] Bluetooth: hci7: command tx timeout
[  312.694220] Bluetooth: hci0: command tx timeout
[  312.760361] Bluetooth: hci1: command tx timeout
[  312.821103] Bluetooth: hci2: command tx timeout
[  313.078514] Bluetooth: hci3: command tx timeout
[  313.205338] Bluetooth: hci5: command tx timeout
[  313.269013] Bluetooth: hci6: command tx timeout
[  313.269449] Bluetooth: hci4: command tx timeout
[  313.333233] Bluetooth: hci7: command tx timeout
[  314.741048] Bluetooth: hci0: command tx timeout
[  314.805389] Bluetooth: hci1: command tx timeout
[  314.869001] Bluetooth: hci2: command tx timeout
[  315.125019] Bluetooth: hci3: command tx timeout
[  315.253093] Bluetooth: hci5: command tx timeout
[  315.317300] Bluetooth: hci4: command tx timeout
[  315.317759] Bluetooth: hci6: command tx timeout
[  315.381118] Bluetooth: hci7: command tx timeout
[  368.647309] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  368.650482] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  368.653674] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  368.660492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  368.665265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  368.910325] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  368.915579] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  368.920666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  368.932698] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  368.937674] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  368.991537] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  368.995575] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  368.998299] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  369.008888] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  369.012439] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  369.016772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  369.048167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  369.052736] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  369.075826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  369.099656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  369.104566] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  369.107471] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  369.110403] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  369.129598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  369.134618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  369.144407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  369.147449] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  369.151954] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  369.201325] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  369.212605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  369.218885] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  369.235524] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  369.247873] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  369.253457] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  369.276258] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  369.287888] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  369.302342] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  369.311413] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  369.318780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  369.332050] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  370.741026] Bluetooth: hci0: command tx timeout
[  370.998152] Bluetooth: hci1: command tx timeout
[  371.125241] Bluetooth: hci2: command tx timeout
[  371.381017] Bluetooth: hci6: command tx timeout
[  371.445078] Bluetooth: hci4: command tx timeout
[  371.445124] Bluetooth: hci5: command tx timeout
[  371.445779] Bluetooth: hci7: command tx timeout
[  371.573695] Bluetooth: hci3: command tx timeout
[  372.789124] Bluetooth: hci0: command tx timeout
[  373.045967] Bluetooth: hci1: command tx timeout
[  373.173086] Bluetooth: hci2: command tx timeout
[  373.430394] Bluetooth: hci6: command tx timeout
[  373.493053] Bluetooth: hci7: command tx timeout
[  373.493517] Bluetooth: hci4: command tx timeout
[  373.494095] Bluetooth: hci5: command tx timeout
[  373.621410] Bluetooth: hci3: command tx timeout
[  374.838297] Bluetooth: hci0: command tx timeout
[  375.093219] Bluetooth: hci1: command tx timeout
[  375.220996] Bluetooth: hci2: command tx timeout
[  375.478221] Bluetooth: hci6: command tx timeout
[  375.541947] Bluetooth: hci5: command tx timeout
[  375.542426] Bluetooth: hci4: command tx timeout
[  375.542823] Bluetooth: hci7: command tx timeout
[  375.669204] Bluetooth: hci3: command tx timeout
[  376.885964] Bluetooth: hci0: command tx timeout
[  377.142229] Bluetooth: hci1: command tx timeout
[  377.269046] Bluetooth: hci2: command tx timeout
[  377.525412] Bluetooth: hci6: command tx timeout
[  377.589169] Bluetooth: hci7: command tx timeout
[  377.590116] Bluetooth: hci4: command tx timeout
[  377.590879] Bluetooth: hci5: command tx timeout
[  377.718999] Bluetooth: hci3: command tx timeout

VM DIAGNOSIS:
02:49:26  Registers:
info registers vcpu 0
RAX=00000000c3a25eeb RBX=ffff888027673700 RCX=0000000070cf0975 RDX=0000000070cf0975
RSI=00000000777031f7 RDI=00000000dae38d08 RBP=ffff888027674158 RSP=ffff8880278f7518
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffff888027674180 R13=00000000e83f3b6c R14=0000000000000001 R15=0000000000000001
RIP=ffffffff815192be RFL=00000886 [-OS--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fd1a6d5a540 00000000 00000000
GS =0000 ffff8880e562f000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd1a6e2b710 CR3=000000000d736000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00
XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffffffff85d0d680 RCX=ffffffff8151f733 RDX=0000000000000000
RSI=0000000000000004 RDI=ffffffff85d0d680 RBP=ffffffff85d0d688 RSP=ffff88803743f690
R8 =0000000000000000 R9 =fffffbfff0ba1ad0 R10=ffffffff85d0d683 R11=0000000000000001
R12=ffffffff85d0d690 R13=0000000000000138 R14=0000000000000001 R15=0000000000000286
RIP=ffffffff8151f842 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fc71ced8540 00000000 00000000
GS =0000 ffff8880e572f000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557789e064c8 CR3=000000000e2ca000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000