Warning: Permanently added '[localhost]:10394' (ECDSA) to the list of known hosts.
2025/01/25 07:02:19 fuzzer started
2025/01/25 07:02:20 dialing manager at localhost:40883
syzkaller login: [   70.532719] cgroup: Unknown subsys name 'net'
[   70.640828] cgroup: Unknown subsys name 'cpuset'
[   70.675523] cgroup: Unknown subsys name 'rlimit'
[   77.380403] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/25 07:02:38 syscalls: 208
2025/01/25 07:02:38 code coverage: enabled
2025/01/25 07:02:38 comparison tracing: enabled
2025/01/25 07:02:38 extra coverage: enabled
2025/01/25 07:02:38 setuid sandbox: enabled
2025/01/25 07:02:38 namespace sandbox: enabled
2025/01/25 07:02:38 Android sandbox: enabled
2025/01/25 07:02:38 fault injection: enabled
2025/01/25 07:02:38 leak checking: enabled
2025/01/25 07:02:38 net packet injection: enabled
2025/01/25 07:02:38 net device setup: enabled
2025/01/25 07:02:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/25 07:02:38 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/25 07:02:38 USB emulation: enabled
2025/01/25 07:02:38 hci packet injection: enabled
2025/01/25 07:02:38 wifi device emulation: enabled
2025/01/25 07:02:38 802.15.4 emulation: enabled
2025/01/25 07:02:38 fetching corpus: 0, signal 0/0 (executing program)
2025/01/25 07:02:40 starting 8 fuzzer processes
07:02:40 executing program 1:
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040008}, 0x80094)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1a0, r0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x7b, 0x3, "e7082c0e063e1e6ef65024f766fc4316f00629c4ac4418204e59bbfa2836806733add5d38bee7cfb9e8df284f804f129ce57e825d8addc39307f679e70e066578f6d07d14c94b46fc667fe799efef8528ac663e733cc1fb70c70b07aa6afb72dc08927344287872ebc35e303803b914258ec4335cfd041"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x67}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x556}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6d3a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4040040)
r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f00000006c0)=0x1c)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000700)={'IDLETIMER\x00'}, &(0x7f0000000740)=0x1e)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1f}]}, 0x64}, 0x1, 0x0, 0x0, 0x10000}, 0xc0)
r5 = socket$netlink(0x10, 0x3, 0xf)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r3)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x840)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000dc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a80)={0x2ec, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x9c2d}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @local, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcb}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2132effe}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @local, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff0000}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23b}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6ed}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x218}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff0e}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008000)
r7 = socket(0xa, 0x800, 0xdeb0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), r3)
sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r8, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8080)

07:02:40 executing program 0:
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x4044000)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0xc00, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000011)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x40, 0x3ff, 0x48, 0x400, 0x1f, 0x3120087})
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004001}, 0x10)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4015}, 0x44)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000600)=0x8001, 0x4)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x104, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffc0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa07c}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket(0x22, 0xa, 0x7)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29b}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4005}, 0x40440c1)
getsockopt$inet_mreqn(r2, 0x0, 0x15, &(0x7f0000000a40)={@rand_addr, @loopback, <r4=>0x0}, &(0x7f0000000a80)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@private2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000bc0)=0xe8)
getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000c00)={@broadcast, @rand_addr, <r6=>0x0}, &(0x7f0000000c40)=0xc)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000cc0)={'gre0\x00', &(0x7f0000000c80)={'syztnl0\x00', <r7=>0x0, 0x8000, 0x8000, 0x20, 0x7, {{0x7, 0x4, 0x0, 0x34, 0x1c, 0x64, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback, {[@generic={0x7, 0x8, "5e2000381313"}]}}}}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000d00)={@multicast2, @local, <r8=>0x0}, &(0x7f0000000d40)=0xc)
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001200)={&(0x7f0000000a00), 0xc, &(0x7f00000011c0)={&(0x7f0000000d80)={0x414, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xfc, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfffc, 0x2, 0x80, 0x7ff}, {0x1, 0x7, 0xe2, 0x200}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd9aa}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x234, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x4a, 0x4, 0x7fffffff}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}]}, 0x414}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048810)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4)

07:02:40 executing program 2:
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0}}, {{@in6=@local}}}, &(0x7f0000000100)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in6=@private0}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x0, 0x4e23, 0x800, 0x2, 0x20, 0x90, 0x4, r0, r3}, {0x3, 0x2, 0xffffffffffffffe1, 0x2, 0x5c6, 0x1ff, 0x4, 0xfff}, {0x0, 0x1000, 0x3, 0x1bd}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d2, 0x32}, 0xa, @in6=@loopback, 0x0, 0x1, 0x1, 0x7, 0x10000, 0x402, 0x4b}}, 0xe8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000380)={@mcast1}, &(0x7f00000003c0)=0x14)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000400)={@loopback, @multicast2}, &(0x7f0000000440)=0xc)
getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000480)={@empty, @initdev}, &(0x7f00000004c0)=0xc)
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000600))
r6 = syz_open_dev$vcsa(&(0x7f0000000640), 0x10001, 0x102)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000002}, 0x30727ad78cd0d391)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r6)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r7, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x6afdb93a881b3585}, 0x24000014)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000008c0)=0x1, 0x4)
r8 = syz_open_dev$vcsa(&(0x7f0000000900), 0x4, 0x200c0)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xc4, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "68753bdfc6"}], @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x169}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5efef5eb3e"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0xc4}, 0x1, 0x0, 0x0, 0x40010}, 0x81)
ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x1)
setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000b00)={{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e20, 0x1, 0xa, 0x20, 0x0, 0x6c, r2, r1}, {0x8, 0x3, 0x9, 0xfffffffffffffd08, 0x401, 0x3, 0x3, 0xffff}, {0x6, 0x75, 0x3, 0x6}, 0x8, 0x0, 0x2, 0x0, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3506, 0x4, 0x1, 0x4e, 0x3, 0x1f, 0x9}}, 0xe8)

07:02:40 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x4, 0x81}, 'port0\x00', 0x41, 0x20000, 0x1487e11e, 0x8, 0x3, 0x5, 0x2, 0x0, 0x5, 0x7})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000000c0)={{0x0, 0x3}, 'port1\x00', 0x98, 0x40020, 0x9, 0x5, 0xf4, 0x8000, 0x6cdd, 0x0, 0x2, 0x7})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x6, 0x40}, 'port0\x00', 0x0, 0x40000, 0x2000000, 0xf2b, 0x626e7cc5, 0xa3a, 0x1, 0x0, 0x2, 0x2})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x400)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000280)={0x62da, 0xe23, 0x0, 'queue1\x00'})
eventfd(0x7ff)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000340)={0x0, 0x8, 0x7})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000380)={{0x3f, 0x40}, 'port1\x00', 0x1, 0x8, 0x3, 0x80000001, 0xff, 0x4, 0x6, 0x0, 0x1, 0x7})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x10, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0x0, 0x7, 0x80, 0x6}, {0x9, 0xe0, 0x7, 0x5}, {0x800, 0xfd, 0x4, 0x81}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000004c0)={0x0, 0x10000, 0x7})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
accept4$bt_l2cap(r2, &(0x7f0000000500), &(0x7f0000000540)=0xe, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000580), 0x10000, 0x40)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000005c0)={0x800, 0x0, 'client0\x00', 0x0, "68de45de2ac2907e", "af3d3b7c9715444caec4757244a01f0c57a131d2777beec5e74117f70ea5a016", 0x6, 0x1})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000680)={{0x5, 0x7d}, 'port1\x00', 0x74, 0xb0c0d, 0x9, 0x0, 0x2, 0x0, 0x5, 0x0, 0x4, 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000740)={0x4, 0xfffffff9, 0x1, 'queue1\x00', 0x3})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000800))
write$cgroup_pressure(r3, &(0x7f0000000840)={'some', 0x20, 0x80, 0x20, 0x4}, 0x2f)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000880)={{0x74, 0xfd}, 'port1\x00', 0x2a, 0x40000, 0x800, 0x5, 0x3, 0x5, 0x101, 0x0, 0x5, 0x8})
socket$inet(0x2, 0x80000, 0x20000)

07:02:40 executing program 4:
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x1d, 0xe, 0x2, 0x9, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0x1e}, @private1]}, 0x78)
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c)
getpeername$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@remote, @multicast1, <r1=>0x0}, &(0x7f0000000200)=0xc)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x254, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x67bf}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x254}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r2 = accept$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000580)=0x1c)
r3 = accept$inet6(r2, &(0x7f00000005c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000600)=0x1c)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000640)={0x52, 0x9, 0x800, 0x8001}, 0x10)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f00000006c0)={{0x8, 0x3f}, 'port0\x00', 0x82, 0x2, 0x2, 0x8001, 0x6, 0x1, 0x7, 0x0, 0x4, 0x2})
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000780)={@loopback, @mcast1, @mcast2, 0x6, 0x2, 0x2, 0x400, 0x100000001, 0x80540224, r1})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', <r5=>0x0})
r6 = accept$inet6(r3, &(0x7f0000000840)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000880)=0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000009c0)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@broadcast, @in=@empty, 0x4e21, 0xfc01, 0x4e23, 0x3, 0x2, 0x20, 0x20, 0x2b, r5, r8}, {0x6, 0x7, 0x100000001, 0x90f4, 0x2, 0x100, 0x40, 0x8}, {0xa9a60000000, 0xab, 0xfff, 0x7}, 0x7, 0x6e6bbe, 0x0, 0x1, 0x2, 0x2}, {{@in=@local, 0x4d2, 0x32}, 0xa, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xf86d, 0xfffffffa, 0x3fab}}, 0xe8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b00)={@dev}, &(0x7f0000000b40)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x90, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040000)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000d00)=""/27, &(0x7f0000000d40)=0x1b)
r9 = pidfd_getfd(0xffffffffffffffff, r6, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r9, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x70, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

[   90.532274] audit: type=1400 audit(1737788560.622:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
07:02:40 executing program 5:
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@empty, @private1, @empty, 0x3, 0x0, 0x7, 0x500, 0x81, 0x800000})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r0=>0x0})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x28000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={r0, 0x1, r1, 0x200})
r2 = socket$netlink(0x10, 0x3, 0x8)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000200)={'syztnl2\x00', <r4=>0x0, 0x8, 0x8000, 0x1, 0x7ff, {{0x49, 0x4, 0x0, 0x27, 0x124, 0x66, 0x0, 0xd3, 0x4, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x44, 0x12, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@remote, 0x8f}, {@remote, 0x4}, {@rand_addr=0x64010102, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x2}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@empty, 0x40}]}, @timestamp_addr={0x44, 0x34, 0x95, 0x1, 0xe, [{@multicast2, 0x4}, {@remote, 0x40}, {@empty, 0x6}, {@loopback, 0x23a}, {@local, 0xffffffff}, {@private=0xa010102, 0x37}]}, @ssrr={0x89, 0xb, 0xe3, [@private=0xa010101, @empty]}, @timestamp={0x44, 0x10, 0xb9, 0x0, 0x4, [0xda, 0x0, 0x200]}, @end, @timestamp_addr={0x44, 0x3c, 0xd3, 0x1, 0x2, [{@rand_addr=0x64010102, 0x1}, {@local, 0xfffffe00}, {@rand_addr=0x64010102, 0x9}, {@multicast2, 0x80}, {@local, 0x1000}, {@remote, 0x1f}, {@multicast2, 0xd7}]}, @cipso={0x86, 0x6, 0x1}, @cipso={0x86, 0x38, 0x1, [{0x2, 0xd, "b88b1abac26b77db15c341"}, {0x7, 0xa, "601b3a12a68b9c2a"}, {0x7, 0xa, "3eef48097fcf90a5"}, {0x6, 0x11, "951399cef39ea5871bf6234169e322"}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f00000003c0)={'gretap0\x00', <r5=>0x0, 0x8000, 0x40, 0x9, 0x4, {{0x33, 0x4, 0x1, 0xc, 0xcc, 0x64, 0x0, 0xa, 0x4, 0x0, @local, @private=0xa010102, {[@timestamp={0x44, 0x20, 0x33, 0x0, 0x3, [0x6, 0x9, 0x2, 0x5, 0x10001, 0x0, 0x1ff]}, @generic={0x44, 0x12, "ebfdc511b316d4a0c6eae9227d63d22c"}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0xf6, [@empty, @loopback, @private=0xa010100, @local]}, @timestamp_prespec={0x44, 0x44, 0x9a, 0x3, 0x8, [{@multicast1, 0x7fff}, {@rand_addr=0x64010102, 0xfdd}, {@broadcast, 0xff}, {@remote, 0x10000}, {@loopback}, {@loopback, 0x5c6e}, {@rand_addr=0x64010101, 0x8}, {@remote, 0x7}]}, @ssrr={0x89, 0x23, 0x1e, [@dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010100, @broadcast, @loopback, @rand_addr=0x64010100, @multicast1]}, @ra={0x94, 0x4, 0x1}, @end]}}}}})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000600)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000d80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000680)={0x6a4, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb2f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0xff, 0x7, 0x7}, {0x7ff, 0x3f, 0x1, 0x66dd}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa8}}, {0x8, 0x6, r4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x1, 0x0, 0x5}, {0x6, 0x6, 0x1, 0x8000}, {0x7f, 0xbb, 0x4, 0x8}, {0x3, 0x2, 0xa8, 0xd19}, {0x40, 0x6, 0x1, 0x4}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0x0, 0xf8, 0x7}, {0x2, 0x9, 0x28, 0x3ff}, {0x91f1, 0x20, 0x3}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x9, 0x0, 0x401}, {0x6, 0x3, 0x8, 0xe0bf}, {0x6, 0x7, 0x1f, 0x114}, {0x0, 0x4d, 0x6, 0x2}, {0xd722, 0x8, 0x4, 0x200}, {0x7, 0x40, 0xff, 0x1}, {0x25, 0x9, 0x3, 0x7}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x14}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x1000, 0x20, 0xaa, 0x7}, {0x200, 0x1, 0x0, 0xfff}, {0x9, 0x2, 0x8, 0x4}, {0x9, 0xa, 0x2, 0x1}, {0x6, 0x20, 0x8, 0x6}, {0x8, 0x0, 0x9, 0x80000001}, {0x7, 0xee, 0x7f, 0x5}, {0x8d, 0x80, 0xff, 0x7c}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9e}}, {0x8}}}]}}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x10004084}, 0x4000000)
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000dc0), &(0x7f0000000e00)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000e40)={@remote, @loopback, <r8=>0x0}, &(0x7f0000000e80)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000f00)={@broadcast, @multicast1, <r9=>0x0}, &(0x7f0000000f40)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000f80)={'batadv_slave_1\x00', <r10=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001040)={'gretap0\x00', &(0x7f0000000fc0)={'erspan0\x00', <r11=>r5, 0x1, 0x80, 0x20, 0x1, {{0x17, 0x4, 0x0, 0x8, 0x5c, 0x64, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast, {[@generic={0x88, 0x9, "49478b8c989b50"}, @timestamp_prespec={0x44, 0x2c, 0xa2, 0x3, 0x4, [{@private=0xa010101, 0x1}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010100, 0x20}, {@multicast1, 0x3}, {@broadcast, 0x40}]}, @ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0xb, 0x6, [@local, @remote]}]}}}}})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001080)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000001180)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000014c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f00000011c0)={0x2a4, r3, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xf61b}}}]}}, {{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1f, 0x3, 0x7, 0x80}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x24bc3981}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8, 0x1, r8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x43c4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf92}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb1}}, {0x8, 0x6, r6}}}]}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4040004}, 0x48840)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_GET(r13, &(0x7f0000001b80)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f0000001b40)={&(0x7f0000001880)={0x2b0, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe1}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x80, 0x6, 0x9, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x764}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)

07:02:40 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040055)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x16c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd473, 0x39}}}}, [@NL80211_ATTR_IE={0x123, 0x2a, [@mic={0x8c, 0x18, {0xe4c, "d07f8e391015", @long="c87e78f34921b67d83f64b4de8e2488a"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @challenge={0x10, 0x1, 0x17}, @measure_req={0x26, 0xed, {0x70, 0xfd, 0x6, "f7e314a8d8f043be55269462c76ba2c1f95d2d4a0d2e4a3375f34525ba2a0e26b6fe413c12c9b66ab268968d70614b373b8db7d07fe88cb23e9b2193baefdf518b1a1d1e30043834a89af11a3a1776e3f05e7801704408ac6347e1f1eabc351f3ce78a5ea1d43dbe05342726a8daba1e34d0a1a3b70155bbaa481fa80734b58f7c47828d4bfd0a8d527415414693a58f00e9ea7460654dbd27b2a55361f746455302a463a8afa48da1771b4d7a8b333d9347df551fd1cd029b938213e7627974362f28c057d12d13df2ff8cea4a20ba20dec472fdd11cc9c1c3ec7b47e4c91da79b1def2b49e078ca113"}}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xe}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4048811)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x4008850)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000c00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000740)={0x478, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "f320d009d61110203d8156272f47d4bcd26fdc498aa4496c2199b4c68c31caf3880274b1"}}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @remote, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xde1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @remote, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @local, 0x10000}}}}]}, @TIPC_NLA_NODE={0x1d8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "7eb19da1640c47a131054ca0708cc3c451e2e12778b939911d6d48e4"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0xde, 0x3, "b2fb2a5a4e871fd8814202a56e260324bbcba75c79a15d6b2463d110b0cd7ab42461cc396b59733129d99c4fff442061a168e2c48c47a099959b7fbc2819ead6719e2b60b5ca204df9919239b72f378706de735dbe24e8727a7641317b4f0503d057246cb260b77283e2e8c834983c49b0c0cc062a47418ab3a2aa786e56fad0f0f7305867950117751ecf65403d826c2df4011111de387feb56c369e8db38a63c34133defbf7b20d6840ffdd928ba39b29f8aeae7cbed29aa89ae468d7116738626f2a47733a9b2f1e170eabc72cad9d6159fd863e507e55b87"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "223f92eaa579dcc611b2eb58a3fa2bbc2d715e8728fe7c17fe702dc0c6f4ebafbf1aabfa"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "ad0d1941a6a8b387fb01c53bcf8731128801cd617519fddc5efca7"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x60}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdcd8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x478}, 0x1, 0x0, 0x0, 0x8004}, 0x20000040)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r0)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc4)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c005}, 0x24048891)
syz_open_dev$evdev(&(0x7f0000000e80), 0x2, 0x440800)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000ec0), 0x80, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000f00), r5)

07:02:40 executing program 7:
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r0=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000140)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x3c}, @in=@private=0xa010102, 0x4e21, 0x3, 0x4e20, 0x3, 0xa, 0x20, 0x0, 0x1d, r0, r1}, {0x3f, 0x1ff, 0x7, 0x3, 0x9, 0x7, 0x2, 0x7fff}, {0x9, 0x0, 0x3f, 0x80000000}, 0x800, 0x6e6bbe, 0x2, 0x0, 0x3, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d5, 0x2b}, 0x2, @in=@private=0xa010102, 0x3501, 0x1, 0x0, 0x80, 0x3a, 0x3, 0x2}}, 0xe8)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@broadcast, @loopback, <r2=>0x0}, &(0x7f0000000300)=0xc)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48040}, 0x40050)
r3 = syz_open_dev$vcsa(&(0x7f0000000400), 0xfff, 0x159200)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x12000040)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6tnl0\x00', <r6=>r5, 0x4, 0x0, 0x4, 0xffffffff, 0x1, @local, @mcast2, 0x700, 0x80, 0x20, 0x6219}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', <r7=>r6, 0x2b, 0x5, 0x80, 0x40, 0x8, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x2, 0x8000}})
r8 = syz_open_dev$vcsa(&(0x7f0000000780), 0xfff, 0x580040)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000007c0)={0x101, 0x401, 0x0, 'queue1\x00'})
r9 = syz_open_dev$vcsa(&(0x7f0000000880), 0x8dea, 0x200000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000940)={'gretap0\x00', &(0x7f00000008c0)={'ip_vti0\x00', <r10=>r7, 0x10, 0x10, 0x0, 0x8, {{0x18, 0x4, 0x0, 0x26, 0x60, 0x65, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @broadcast, {[@timestamp={0x44, 0x8, 0x11, 0x0, 0x2, [0x0]}, @noop, @ssrr={0x89, 0xb, 0x66, [@rand_addr=0x64010102, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xd, [@empty]}, @cipso={0x86, 0x8, 0x2, [{0xfa6a5a5302b9d3fc, 0x2}]}, @ssrr={0x89, 0xf, 0x3d, [@empty, @loopback, @multicast2]}, @rr={0x7, 0x13, 0xb0, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}}})
setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@private0, @in=@multicast1, 0x4e20, 0x0, 0x4e21, 0x2, 0x2, 0x60, 0xc0, 0x3c, r10, r1}, {0x1, 0x9, 0x8, 0x8001, 0x0, 0x3, 0x8, 0x8}, {0x0, 0x40, 0x2, 0x100000000}, 0x9, 0x6e6bbc, 0x1, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x4d3, 0x33}, 0x2, @in=@local, 0x3505, 0x1, 0x2, 0x0, 0x8, 0x20, 0x7}}, 0xe8)
r11 = socket(0x27, 0x8aaf9f4b3a48a187, 0x7)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r11, 0x6, 0x1, &(0x7f0000000a80)={0x4, 0x8, 0xb1, 0x95, 0x9, 0x4, 0x939a}, 0xc)
ioctl$EVIOCGSND(r8, 0x8040451a, &(0x7f0000000ac0)=""/134)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000b80)=0x1)

[   92.019130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.030763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.033308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.036596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.047483] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.050084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.051924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.054370] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.056279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.061956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.065625] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   92.067889] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.074868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.076842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.083749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.086346] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   92.090370] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   92.092747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.104505] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.106776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.106951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   92.109511] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.115931] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.122410] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.124644] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   92.126608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.130837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   92.132902] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.136604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   92.136923] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   92.140425] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   92.142102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.143441] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   92.145600] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   92.155101] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   92.155477] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   92.161256] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.163568] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.167939] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   92.171308] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   92.176703] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   92.178440] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   92.187442] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   92.194237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   92.201799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   92.262593] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   92.290402] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   92.292162] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   94.154602] Bluetooth: hci2: command tx timeout
[   94.218228] Bluetooth: hci3: command tx timeout
[   94.282138] Bluetooth: hci6: command tx timeout
[   94.282772] Bluetooth: hci4: command tx timeout
[   94.283361] Bluetooth: hci1: command tx timeout
[   94.283418] Bluetooth: hci0: command tx timeout
[   94.346491] Bluetooth: hci5: command tx timeout
[   94.410282] Bluetooth: hci7: command tx timeout
[   96.204169] Bluetooth: hci2: command tx timeout
[   96.266411] Bluetooth: hci3: command tx timeout
[   96.331371] Bluetooth: hci0: command tx timeout
[   96.331419] Bluetooth: hci4: command tx timeout
[   96.332687] Bluetooth: hci6: command tx timeout
[   96.333180] Bluetooth: hci1: command tx timeout
[   96.394155] Bluetooth: hci5: command tx timeout
[   96.459113] Bluetooth: hci7: command tx timeout
[   98.250234] Bluetooth: hci2: command tx timeout
[   98.314186] Bluetooth: hci3: command tx timeout
[   98.378789] Bluetooth: hci6: command tx timeout
[   98.379685] Bluetooth: hci4: command tx timeout
[   98.380228] Bluetooth: hci1: command tx timeout
[   98.380908] Bluetooth: hci0: command tx timeout
[   98.442474] Bluetooth: hci5: command tx timeout
[   98.506284] Bluetooth: hci7: command tx timeout
[  100.298120] Bluetooth: hci2: command tx timeout
[  100.362170] Bluetooth: hci3: command tx timeout
[  100.426324] Bluetooth: hci0: command tx timeout
[  100.426822] Bluetooth: hci4: command tx timeout
[  100.428072] Bluetooth: hci1: command tx timeout
[  100.428328] Bluetooth: hci6: command tx timeout
[  100.492059] Bluetooth: hci5: command tx timeout
[  100.554264] Bluetooth: hci7: command tx timeout
[  151.871817] syz-executor.6 (286) used greatest stack depth: 23584 bytes left
[  154.272563] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  154.274333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  154.275425] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  154.278060] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  154.280038] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  154.281179] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  154.333727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  154.341622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  154.342915] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  154.346174] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  154.347752] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  154.349176] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  154.352840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  154.356817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  154.357937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  154.359244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  154.360294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  154.361228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  154.364530] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  154.365341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  154.367193] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  154.368497] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  154.370039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  154.371385] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  154.523808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  154.559551] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  154.564911] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  154.568242] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  154.572481] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  154.582215] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  154.590831] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  154.592233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  154.597889] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  154.599264] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  154.609620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  154.619438] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  154.620544] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  154.621546] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  154.630036] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  154.632232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  154.633602] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  154.642568] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  154.651493] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  154.653176] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  154.654248] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  154.667131] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  154.671046] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  154.674291] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  156.364081] Bluetooth: hci0: command tx timeout
[  156.427107] Bluetooth: hci3: command tx timeout
[  156.427136] Bluetooth: hci2: command tx timeout
[  156.427765] Bluetooth: hci1: command tx timeout
[  156.682317] Bluetooth: hci5: command tx timeout
[  156.747217] Bluetooth: hci7: command tx timeout
[  156.747864] Bluetooth: hci6: command tx timeout
[  156.747935] Bluetooth: hci4: command tx timeout
[  158.411082] Bluetooth: hci0: command tx timeout
[  158.475116] Bluetooth: hci2: command tx timeout
[  158.475587] Bluetooth: hci3: command tx timeout
[  158.476720] Bluetooth: hci1: command tx timeout
[  158.731218] Bluetooth: hci5: command tx timeout
[  158.794126] Bluetooth: hci7: command tx timeout
[  158.794569] Bluetooth: hci6: command tx timeout
[  158.794979] Bluetooth: hci4: command tx timeout
[  160.460075] Bluetooth: hci0: command tx timeout
[  160.523237] Bluetooth: hci1: command tx timeout
[  160.523692] Bluetooth: hci3: command tx timeout
[  160.523755] Bluetooth: hci2: command tx timeout
[  160.778098] Bluetooth: hci5: command tx timeout
[  160.842151] Bluetooth: hci4: command tx timeout
[  160.842586] Bluetooth: hci6: command tx timeout
[  160.843338] Bluetooth: hci7: command tx timeout
[  162.507186] Bluetooth: hci0: command tx timeout
[  162.572058] Bluetooth: hci2: command tx timeout
[  162.572199] Bluetooth: hci1: command tx timeout
[  162.572531] Bluetooth: hci3: command tx timeout
[  162.826193] Bluetooth: hci5: command tx timeout
[  162.890199] Bluetooth: hci7: command tx timeout
[  162.890658] Bluetooth: hci4: command tx timeout
[  162.891175] Bluetooth: hci6: command tx timeout
[  216.282458] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  216.286877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  216.289484] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  216.294402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  216.297519] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  216.301494] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  216.403694] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  216.408555] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  216.410301] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  216.414717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  216.416823] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  216.418323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  216.476423] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  216.482715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  216.484129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  216.489728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  216.498544] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  216.500459] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  216.541288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  216.545650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  216.546662] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  216.556252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  216.559075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  216.559272] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  216.567260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  216.567800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  216.569849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  216.574117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  216.583260] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  216.592309] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  216.627790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  216.633186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  216.635252] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  216.642216] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  216.646787] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  216.648109] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  216.706767] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  216.709494] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  216.714891] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  216.714900] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  216.733193] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  216.734768] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  216.750314] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  216.752070] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  216.759157] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  216.765454] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  216.767351] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  216.773353] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  218.379111] Bluetooth: hci0: command tx timeout
[  218.443180] Bluetooth: hci1: command tx timeout
[  218.570167] Bluetooth: hci2: command tx timeout
[  218.635063] Bluetooth: hci3: command tx timeout
[  218.699216] Bluetooth: hci5: command tx timeout
[  218.699880] Bluetooth: hci4: command tx timeout
[  218.826101] Bluetooth: hci6: command tx timeout
[  218.826916] Bluetooth: hci7: command tx timeout
[  220.427075] Bluetooth: hci0: command tx timeout
[  220.490189] Bluetooth: hci1: command tx timeout
[  220.618111] Bluetooth: hci2: command tx timeout
[  220.682292] Bluetooth: hci3: command tx timeout
[  220.746355] Bluetooth: hci4: command tx timeout
[  220.747698] Bluetooth: hci5: command tx timeout
[  220.876033] Bluetooth: hci7: command tx timeout
[  220.876518] Bluetooth: hci6: command tx timeout
[  222.474072] Bluetooth: hci0: command tx timeout
[  222.538589] Bluetooth: hci1: command tx timeout
[  222.667235] Bluetooth: hci2: command tx timeout
[  222.730088] Bluetooth: hci3: command tx timeout
[  222.795036] Bluetooth: hci5: command tx timeout
[  222.795782] Bluetooth: hci4: command tx timeout
[  222.922153] Bluetooth: hci6: command tx timeout
[  222.922734] Bluetooth: hci7: command tx timeout
[  224.523200] Bluetooth: hci0: command tx timeout
[  224.587137] Bluetooth: hci1: command tx timeout
[  224.714068] Bluetooth: hci2: command tx timeout
[  224.780039] Bluetooth: hci3: command tx timeout
[  224.842056] Bluetooth: hci4: command tx timeout
[  224.842510] Bluetooth: hci5: command tx timeout
[  224.971079] Bluetooth: hci7: command tx timeout
[  224.971547] Bluetooth: hci6: command tx timeout
[  278.488930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  278.492160] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  278.494643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  278.511533] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  278.515381] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  278.520423] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  278.616947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  278.620868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  278.622886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  278.630567] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  278.636229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  278.638657] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  278.690898] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  278.697357] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  278.699840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  278.710038] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  278.716342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  278.726080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  278.828107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  278.835409] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  278.838498] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  278.848080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  278.855477] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  278.857868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  278.914457] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  278.927620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  278.934295] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  278.954294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  278.956302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  278.984507] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  278.987117] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  279.005808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  279.016330] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  279.018376] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  279.020140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  279.021529] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  279.026329] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  279.035403] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  279.036902] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  279.044776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  279.070415] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  279.070531] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  279.086840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  279.099143] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  279.104193] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  279.104282] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  279.158123] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  279.166444] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  280.587122] Bluetooth: hci0: command tx timeout
[  280.714120] Bluetooth: hci1: command tx timeout
[  280.778058] Bluetooth: hci2: command tx timeout
[  280.971060] Bluetooth: hci3: command tx timeout
[  281.162063] Bluetooth: hci5: command tx timeout
[  281.227089] Bluetooth: hci4: command tx timeout
[  281.227122] Bluetooth: hci7: command tx timeout
[  281.290066] Bluetooth: hci6: command tx timeout
[  282.636022] Bluetooth: hci0: command tx timeout
[  282.762047] Bluetooth: hci1: command tx timeout
[  282.826102] Bluetooth: hci2: command tx timeout
[  283.018096] Bluetooth: hci3: command tx timeout
[  283.210043] Bluetooth: hci5: command tx timeout
[  283.274140] Bluetooth: hci4: command tx timeout
[  283.275114] Bluetooth: hci7: command tx timeout
[  283.339091] Bluetooth: hci6: command tx timeout
[  284.683052] Bluetooth: hci0: command tx timeout
[  284.812340] Bluetooth: hci1: command tx timeout
[  284.875125] Bluetooth: hci2: command tx timeout
[  285.066110] Bluetooth: hci3: command tx timeout
[  285.258394] Bluetooth: hci5: command tx timeout
[  285.322337] Bluetooth: hci7: command tx timeout
[  285.322487] Bluetooth: hci4: command tx timeout
[  285.388032] Bluetooth: hci6: command tx timeout
[  286.730091] Bluetooth: hci0: command tx timeout
[  286.858089] Bluetooth: hci1: command tx timeout
[  286.922814] Bluetooth: hci2: command tx timeout
[  287.114386] Bluetooth: hci3: command tx timeout
[  287.306256] Bluetooth: hci5: command tx timeout
[  287.370299] Bluetooth: hci4: command tx timeout
[  287.370820] Bluetooth: hci7: command tx timeout
[  287.436121] Bluetooth: hci6: command tx timeout
[  341.154074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  341.156619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  341.163111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  341.169863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  341.172615] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  341.174438] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  341.349457] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  341.351491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  341.353885] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  341.359449] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  341.362575] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  341.364396] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  341.604459] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  341.617580] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  341.629529] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  341.632067] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  341.654321] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  341.657737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  341.657797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  341.672595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  341.672714] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  341.676765] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  341.681655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  341.683867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  341.688483] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  341.690198] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  341.692594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  341.711171] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  341.740042] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  341.742544] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  341.756347] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  341.773255] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  341.780252] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  341.792572] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  341.812302] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  341.816752] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  341.822313] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  341.822613] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  341.838224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  341.839884] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  341.846244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  341.847663] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  341.863722] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  341.875269] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  341.880220] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  341.881449] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  341.920397] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  341.931577] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  343.242111] Bluetooth: hci0: command tx timeout
[  343.434189] Bluetooth: hci1: command tx timeout
[  343.756199] Bluetooth: hci3: command tx timeout
[  343.819076] Bluetooth: hci2: command tx timeout
[  343.882414] Bluetooth: hci4: command tx timeout
[  343.946188] Bluetooth: hci5: command tx timeout
[  344.010080] Bluetooth: hci6: command tx timeout
[  344.138279] Bluetooth: hci7: command tx timeout
[  345.291216] Bluetooth: hci0: command tx timeout
[  345.483057] Bluetooth: hci1: command tx timeout
[  345.803382] Bluetooth: hci3: command tx timeout
[  345.869014] Bluetooth: hci2: command tx timeout
[  345.930552] Bluetooth: hci4: command tx timeout
[  345.996009] Bluetooth: hci5: command tx timeout
[  346.058197] Bluetooth: hci6: command tx timeout
[  346.186049] Bluetooth: hci7: command tx timeout
[  347.339012] Bluetooth: hci0: command tx timeout
[  347.531250] Bluetooth: hci1: command tx timeout
[  347.851148] Bluetooth: hci3: command tx timeout
[  347.915358] Bluetooth: hci2: command tx timeout
[  347.979148] Bluetooth: hci4: command tx timeout
[  348.043154] Bluetooth: hci5: command tx timeout
[  348.107985] Bluetooth: hci6: command tx timeout
[  348.235239] Bluetooth: hci7: command tx timeout
[  349.387061] Bluetooth: hci0: command tx timeout
[  349.578104] Bluetooth: hci1: command tx timeout
[  349.898036] Bluetooth: hci3: command tx timeout
[  349.963999] Bluetooth: hci2: command tx timeout
[  350.026036] Bluetooth: hci4: command tx timeout
[  350.090185] Bluetooth: hci5: command tx timeout
[  350.154085] Bluetooth: hci6: command tx timeout
[  350.283042] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
07:07:49  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffffffff81a1bc32 RCX=0000000000000001 RDX=1ffff1100553ae5e
RSI=ffff88802a9d77c8 RDI=ffffffff81a1bc32 RBP=ffffffff81a1bc32 RSP=ffff88802a9d7258
R8 =0000000000000001 R9 =ffff88802a9d72d8 R10=000000000003ab7c R11=0000000000021e6c
R12=ffff88802a9d7360 R13=0000000000000000 R14=ffff88800b5c1bc0 R15=0000000000000cc0
RIP=ffffffff81421ed3 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f49ea2ae028 CR3=000000002b5f6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8192fe26 RDX=ffff888026c51bc0
RSI=0000000000000001 RDI=0000000000000005 RBP=0000000000000002 RSP=ffff88802971f8c8
R8 =0000000000000000 R9 =ffff888026c52608 R10=0000000000000000 R11=0000000000000001
R12=ffff888015a71300 R13=0000000000000001 R14=ffffffff85ccc180 R15=0000000000000002
RIP=ffffffff8192fe29 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0d00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff6dc703438 CR3=0000000035efc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e
XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249
XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000