Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:4185' (ECDSA) to the list of known hosts.
2025/04/24 12:42:28 fuzzer started
2025/04/24 12:42:28 dialing manager at localhost:37747
syzkaller login: [   96.338367] cgroup: Unknown subsys name 'net'
[   96.554791] cgroup: Unknown subsys name 'cpuset'
[   96.589022] cgroup: Unknown subsys name 'rlimit'
2025/04/24 12:42:43 syscalls: 234
2025/04/24 12:42:43 code coverage: enabled
2025/04/24 12:42:43 comparison tracing: enabled
2025/04/24 12:42:43 extra coverage: enabled
2025/04/24 12:42:43 setuid sandbox: enabled
2025/04/24 12:42:43 namespace sandbox: enabled
2025/04/24 12:42:43 Android sandbox: enabled
2025/04/24 12:42:43 fault injection: enabled
2025/04/24 12:42:43 leak checking: enabled
2025/04/24 12:42:43 net packet injection: enabled
2025/04/24 12:42:43 net device setup: enabled
2025/04/24 12:42:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/24 12:42:43 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/24 12:42:43 USB emulation: enabled
2025/04/24 12:42:43 hci packet injection: enabled
2025/04/24 12:42:43 wifi device emulation: enabled
2025/04/24 12:42:43 802.15.4 emulation: enabled
2025/04/24 12:42:43 fetching corpus: 0, signal 0/0 (executing program)
2025/04/24 12:42:44 starting 8 fuzzer processes
12:42:45 executing program 0:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000080)=0x80)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x4d}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfe}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4004001)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x181100, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x4d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20008000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r5, 0x421, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x40, 0x5c}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r6 = accept(r1, &(0x7f0000000540)=@sco={0x1f, @fixed}, &(0x7f00000005c0)=0x80)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001)
r7 = accept(r1, &(0x7f0000000800)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000880)=0x80)
syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r7)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r6)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, r9, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xfd}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x20000050)
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000ac0))
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7fffffff}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x14)
r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000c00), 0xc00, 0x0)
sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x220, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x1)

12:42:45 executing program 1:
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/uts\x00')
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', <r4=>r1, 0x2f, 0x0, 0x5, 0x8, 0x36, @private0, @mcast2, 0x874e, 0x10, 0x5a, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', <r7=>r1, 0x2f, 0x9, 0x20, 0x4, 0x40, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x36, 0x8, 0x3829, 0xbe}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'sit0\x00', <r10=>r1, 0x2f, 0x80, 0x7f, 0x200, 0x0, @local, @empty, 0x20, 0x40, 0x8, 0x1000}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000001c0), 0xc, &(0x7f0000000d00)={&(0x7f0000000740)={0x5a0, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8, 0x1, r5}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5f}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x19}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9a}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r8}, {0x188, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}, {{0x8, 0x1, r10}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x58a}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}]}}]}, 0x5a0}}, 0x4000)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000d80)={0x7fff, 0x5, 0x3, 0x400})
r12 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCL_SETVESABLANK(r12, 0x541c, &(0x7f0000000dc0))
ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0x3)

12:42:45 executing program 2:
r0 = syz_io_uring_complete(0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xd7}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xfffb}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8, 0x3, r1}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x8800)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x282, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa0, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "25107ff1c1d89e3b11a8492f6c"}]}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "584481deb87e0a538f4c294997d791"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4854}, 0x10)
r3 = openat$cgroup(r2, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r3, &(0x7f00000005c0)='cpu.max\x00', 0x2, 0x0)
io_uring_setup(0x4249, &(0x7f0000000600)={0x0, 0xa8ea, 0x10, 0x2, 0x6b, 0x0, r0})
openat$cgroup_int(r3, &(0x7f0000000680)='cpu.weight\x00', 0x2, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0x70}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x840)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x326}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}}, 0x4000000)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000980)='syz1\x00', 0x1ff)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x400080, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r6)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r4, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7cc}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x231d}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c081}, 0x8)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x70, 0x1, 0x9, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000001}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, 0x70}, 0x1, 0x0, 0x0, 0x48002}, 0x0)

12:42:45 executing program 3:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r0=>0x0})
r1 = socket(0x3, 0xa, 0xffff)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r2=>r0, 0x4, 0x0, 0x7f, 0x0, 0x7, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, 0x20, 0xd12bc8360463d6d0, 0x5, 0x6}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000180)={0x3d0, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2661}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r0}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x46}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6eac}}}]}}, {{0x8, 0x1, r3}, {0x114, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x17d}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0xff, 0xfe, 0xfffffe01}, {0x6, 0x9, 0x80, 0x9}, {0x80, 0xd2, 0x7, 0xc2}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x4}, 0x4008000)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6_vti0\x00', <r5=>r0, 0x4, 0x20, 0xff, 0x980, 0x8, @empty, @local, 0x40, 0x700, 0x2, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', <r6=>r0, 0x8000, 0x8, 0x0, 0x2, {{0xa, 0x4, 0x2, 0xf, 0x28, 0x66, 0x0, 0x74, 0x2f, 0x0, @empty, @broadcast, {[@generic={0x89, 0x12, "2771f5a81fcd263db0df2df710e8d43b"}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000840)={'sit0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', <r7=>0x0, 0x2f, 0x5, 0x80, 0x38de8ba7, 0x4, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x7800, 0x1000, 0x7fffffff}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000880)={0x344, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r7}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x344}, 0x1, 0x0, 0x0, 0x20000890}, 0x88e4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', <r9=>r0, 0x29, 0x1c, 0x3f, 0xfffffffe, 0x2, @local, @loopback, 0x7, 0x788, 0x1, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000e00)={'syztnl0\x00', &(0x7f0000000d80)={'syztnl2\x00', <r10=>r3, 0x2f, 0x54, 0x5, 0x2, 0x20, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x80, 0x0, 0x5}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000001200)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000000e40)={0x360, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3, 0x40, 0x1, 0x74b3}, {0x800, 0x9, 0x4, 0x3}, {0x4, 0x5b, 0x7, 0x3}, {0x0, 0x6, 0x20, 0x7}, {0x77, 0x2, 0x80, 0x3f}, {0x7, 0x80, 0x5, 0xfffffff9}, {0x1f, 0x1, 0x1, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x72b}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe3b4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa0000000}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x6, 0x81, 0x3, 0x4}, {0x8001, 0x4, 0x1}, {0x7, 0x0, 0x80, 0x9}, {0xffff, 0xd3, 0xfb, 0x1}, {0x6, 0x0, 0x0, 0x3f}, {0x3f, 0x23, 0x0, 0x6}, {0xff, 0x5f, 0xe1}, {0xda, 0x2, 0x2, 0x9}]}}}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x33}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0xc091)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r1)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x3c, r11, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "61df607bba"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1f26672f90b8a96621988a9f34"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x20004800)
r12 = accept(r1, &(0x7f0000001480)=@caif=@dbg, &(0x7f0000001500)=0x80)
r13 = syz_genetlink_get_family_id$team(&(0x7f0000001580), r1)
sendmsg$TEAM_CMD_OPTIONS_GET(r12, &(0x7f0000002040)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002000)={&(0x7f0000001b40)={0x490, r13, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x2ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x4, 0x0, 0xce, 0x9}, {0x8000, 0x7f, 0x9, 0x100}, {0xe8f, 0x0, 0x3, 0x5}, {0x5, 0xf7, 0x4, 0x6}, {0x7, 0x0, 0x20, 0x1}, {0x400, 0x9, 0x8, 0x19d}, {0x8, 0xc0, 0x1f, 0x9}, {0xcbda, 0x2, 0x17, 0x5}, {0x800, 0x6, 0x0, 0x8}, {0xff01, 0x40, 0x5, 0x70d4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}]}}]}, 0x490}, 0x1, 0x0, 0x0, 0x4c004}, 0x804)

[  112.304053] audit: type=1400 audit(1745498565.099:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:42:45 executing program 4:
r0 = syz_io_uring_complete(0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r1, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x80}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0x11, 0x4, "b2d258605ca96304519ec2c757"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b711a6b4bd9c422a5c6a8c3a7c"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "93e77282e9fcd5e6ab8e1df36c"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5ea58b36bd8e0e2bef7766886c"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "96daeae20f8f413659fbcce7d9c9ec"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4e32c05342"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5528959be725ed8a21c6965d2b"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "43732a546c346e15ed59830282"}]}, 0xec}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000)
r3 = socket(0x8, 0x2, 0x2)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x170, r4, 0x20, 0x2, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff00}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xae9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x12a}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5ef5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9840}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r1, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5a}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x32}}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20004081)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="53f2237d90f4"}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x20008040)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x48800)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x28}, @void, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8814}, 0x4004800)
ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000009c0))
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000a00)={0xd, 0x7})
ioctl$TCFLSH(r0, 0x540b, 0x1)
r6 = accept(r3, 0x0, &(0x7f0000000b00))
sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000c40)={&(0x7f0000000b40), 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x200}}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xff}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000000}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000f80)={'ip6gre0\x00', &(0x7f0000000f00)={'syztnl2\x00', <r7=>0x0, 0x2f, 0x2, 0x1f, 0x8000, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7, 0x1, 0x18d}})
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001080)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x44, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}}, 0x10)

12:42:45 executing program 6:
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/13, 0xd})
r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x7fffffff, 0x2)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000180)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/52, 0x34})
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x6})
r1 = socket(0x23, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip6gre0\x00', <r2=>0x0, 0x4, 0x8, 0x4, 0x4, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x700, 0x1, 0xf2}})
ioctl$CDROMEJECT(r1, 0x5309)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x208, 0x70bd2d, 0x8, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8805)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x28100, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040881}, 0x800)
syz_genetlink_get_family_id$smc(&(0x7f0000000540), r3)
r4 = fork()
syz_open_procfs$namespace(r4, &(0x7f0000000580)='ns/cgroup\x00')
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000b40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000600)={0x4cc, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7e0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xd163, @mcast1, 0xffc00000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x174, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xedce}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x10001, @loopback, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @empty, 0x200}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xff89}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @local, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0x20c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x65, 0x3, "9380d63b9e4016a3c9fec899a29327cea3b866b7f895c10573a9e23fe1257366c013b76a3eb88d81f74177289d5d1d04fc318f9c1d7397f9fb79922808ea65044f78073c4cf6581a02ae73a7c65f5d843078508dbfd8011252b77db218aa254bc3"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "1754bfd51b3358cbd9627d98084703b107aa43f5367a48b6525e96413b549c442a9225ec"}}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "66c99f01dadb67f6e7d021308f9af5581692786f36c8668d63795ade87d87414e8b9dc6596bfca5c90a9"}, @TIPC_NLA_NODE_ID={0xc3, 0x3, "2bfa18f3942bf431c9d2da3839331742c8d107175c99d341110e13fbf3ca3890d10cb618c3bf44d85abeb875586191ccfc2ad4b5d6801bc08fb5011476c882de6a14ed260d4735af5045916d6b94c30c1a20dbc03517795f561732b17c2896192454e08f94b7475cc3f1682d5fff8a9c97425c8e9b3373dd8a305a9381015892698b9591cf2ee9f1fc4896d98cc4b56dd31c67460e8e9c5dcfee5b439afaa4c7007cf2ddb11f5b29b81e603717d7226b2d31dee0f1102d6ba58fb2573a2895"}, @TIPC_NLA_NODE_ID={0xb, 0x3, "72ad60e16ddf62"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a5a6a17b89aca4b6c82d293505bb8dbadf38cd59a0242f1ee8eca5e38f1116e9847163"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x24000000}, 0x4804)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x4c000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x10)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000880}, 0x80)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r1)
ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000f00)={0x8, 0x1, 0x81, 0xa0, 0x3f, 0xc0})

12:42:45 executing program 5:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x10)
r1 = socket(0x1d, 0x6, 0xd56d)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840}, 0x4)
r3 = syz_io_uring_complete(0x0)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041040}, 0x40004)
syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000380), 0x0, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r4=>r2, 0x2f, 0x9, 0xff, 0x7f, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x8, 0x7800, 0x1ff, 0x7f}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}}, 0x8845)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x101000, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r5)
r6 = syz_io_uring_complete(0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000640)={'batadv0\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000680)={'tunl0\x00', <r8=>0x0, 0x1, 0x8, 0x3, 0x6, {{0x8, 0x4, 0x3, 0x1f, 0x20, 0x64, 0x0, 0x81, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0xa, "11734c5f70bbb019"}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'ip6_vti0\x00', <r9=>r4, 0x2f, 0x5, 0xf2, 0x648e, 0x1, @mcast1, @mcast1, 0x40, 0x7800, 0x4, 0x3}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000880)={'vxcan1\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000001340)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f00000008c0)={0xa04, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r4}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9c}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r4}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1cb6}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9f0}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xde76}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1e62d64e}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r4}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x264, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xfff8, 0x8, 0x4, 0x4}, {0x36, 0x3f, 0x5, 0x101}, {0x7, 0x2, 0x2, 0xc11}, {0x401, 0x2, 0x8, 0x7}, {0x5, 0x81, 0x3f, 0x9}, {0x8001, 0x40, 0x7, 0xfffffffc}, {0x0, 0x9, 0x1, 0x6}, {0x81, 0x40, 0x9, 0x8001}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0xa04}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
getsockname(r6, &(0x7f0000001380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000001400)=0x80)

12:42:45 executing program 7:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040804}, 0x400c880)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x110, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2a}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3f}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x40}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}]}, 0x110}, 0x1, 0x0, 0x0, 0x80000}, 0x4c001)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1000}, 0x10)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x90, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x62}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10001}, {0x6, 0x16, 0x3f}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x9, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xd92334377c2584ca)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000044)
write$rfkill(0xffffffffffffffff, &(0x7f0000000a00)={0x7, 0x4, 0x3, 0x0, 0x1}, 0x8)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r3, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040001)
r4 = accept(r1, &(0x7f0000000b80)=@ethernet={0x0, @dev}, &(0x7f0000000c00)=0x80)
sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x80, 0xd, 0x6, 0xa01, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000d80), 0x1c5440, 0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008940}, 0x80)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1)

[  113.880369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  113.884789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  113.887168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  113.891057] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  113.893410] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  113.905473] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  113.910751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  113.913802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  113.914927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  113.920099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  113.921710] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  113.924151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  113.924183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  113.926689] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  113.929578] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  113.933610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  113.936648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  113.942770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  113.948723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  113.956706] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  113.962596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  113.964408] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  113.966007] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  113.987497] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  113.996828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  113.999107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  114.001920] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  114.010835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  114.040323] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  114.043765] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  114.046087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  114.054016] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  114.054228] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  114.058597] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  114.060703] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  114.087972] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  114.098926] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  114.106769] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  114.111855] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  114.132444] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  115.944945] Bluetooth: hci2: command tx timeout
[  116.009347] Bluetooth: hci1: command tx timeout
[  116.009424] Bluetooth: hci0: command tx timeout
[  116.072645] Bluetooth: hci4: command tx timeout
[  116.137343] Bluetooth: hci5: command tx timeout
[  116.137478] Bluetooth: hci3: command tx timeout
[  116.200367] Bluetooth: hci7: command tx timeout
[  116.200399] Bluetooth: hci6: command tx timeout
[  117.993016] Bluetooth: hci2: command tx timeout
[  118.056665] Bluetooth: hci1: command tx timeout
[  118.058364] Bluetooth: hci0: command tx timeout
[  118.121066] Bluetooth: hci4: command tx timeout
[  118.186314] Bluetooth: hci5: command tx timeout
[  118.187535] Bluetooth: hci3: command tx timeout
[  118.248807] Bluetooth: hci7: command tx timeout
[  118.248916] Bluetooth: hci6: command tx timeout
[  120.040728] Bluetooth: hci2: command tx timeout
[  120.104378] Bluetooth: hci0: command tx timeout
[  120.105632] Bluetooth: hci1: command tx timeout
[  120.168825] Bluetooth: hci4: command tx timeout
[  120.232582] Bluetooth: hci3: command tx timeout
[  120.233848] Bluetooth: hci5: command tx timeout
[  120.297075] Bluetooth: hci7: command tx timeout
[  120.297793] Bluetooth: hci6: command tx timeout
[  122.089569] Bluetooth: hci2: command tx timeout
[  122.154304] Bluetooth: hci1: command tx timeout
[  122.154405] Bluetooth: hci0: command tx timeout
[  122.216337] Bluetooth: hci4: command tx timeout
[  122.280343] Bluetooth: hci5: command tx timeout
[  122.280369] Bluetooth: hci3: command tx timeout
[  122.344375] Bluetooth: hci6: command tx timeout
[  122.344533] Bluetooth: hci7: command tx timeout
[  174.081230] syz-executor.7 (288) used greatest stack depth: 24456 bytes left
[  176.697063] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  176.700705] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  176.702791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  176.706856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  176.710557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  176.767205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.775867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.777620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.785585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.789725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.853647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.856842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.859218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.862941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.864880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.902732] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.908050] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  176.911559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  176.914820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  176.932551] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.940853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  176.949689] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  176.950761] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  176.953783] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  176.955403] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  176.957368] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.960620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  176.966341] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  176.967997] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  176.969969] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  176.972125] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.973338] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  177.000674] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  177.005542] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  177.009745] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  177.011713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  177.031918] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  177.057079] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  177.078350] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  177.092499] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  178.728546] Bluetooth: hci0: command tx timeout
[  178.856701] Bluetooth: hci1: command tx timeout
[  178.920479] Bluetooth: hci2: command tx timeout
[  179.049937] Bluetooth: hci4: command tx timeout
[  179.050772] Bluetooth: hci7: command tx timeout
[  179.113798] Bluetooth: hci3: command tx timeout
[  179.114694] Bluetooth: hci5: command tx timeout
[  179.176682] Bluetooth: hci6: command tx timeout
[  180.778539] Bluetooth: hci0: command tx timeout
[  180.905610] Bluetooth: hci1: command tx timeout
[  180.969349] Bluetooth: hci2: command tx timeout
[  181.097364] Bluetooth: hci4: command tx timeout
[  181.097848] Bluetooth: hci7: command tx timeout
[  181.160365] Bluetooth: hci3: command tx timeout
[  181.160850] Bluetooth: hci5: command tx timeout
[  181.224640] Bluetooth: hci6: command tx timeout
[  182.824738] Bluetooth: hci0: command tx timeout
[  182.952354] Bluetooth: hci1: command tx timeout
[  183.016364] Bluetooth: hci2: command tx timeout
[  183.145581] Bluetooth: hci7: command tx timeout
[  183.146094] Bluetooth: hci4: command tx timeout
[  183.208382] Bluetooth: hci5: command tx timeout
[  183.208872] Bluetooth: hci3: command tx timeout
[  183.272828] Bluetooth: hci6: command tx timeout
[  184.873304] Bluetooth: hci0: command tx timeout
[  185.000445] Bluetooth: hci1: command tx timeout
[  185.064501] Bluetooth: hci2: command tx timeout
[  185.192354] Bluetooth: hci4: command tx timeout
[  185.192857] Bluetooth: hci7: command tx timeout
[  185.256487] Bluetooth: hci3: command tx timeout
[  185.256968] Bluetooth: hci5: command tx timeout
[  185.322415] Bluetooth: hci6: command tx timeout
[  239.293028] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  239.294036] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  239.297668] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  239.299399] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  239.299461] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  239.304812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  239.310437] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  239.310547] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  239.313607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  239.319683] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  239.425981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  239.445683] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  239.462636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  239.475209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  239.479115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  239.583994] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  239.586620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  239.588582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  239.615856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  239.631148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  239.636402] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  239.638135] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  239.644023] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  239.646015] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  239.648638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  239.679027] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  239.686850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  239.697097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  239.700781] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  239.707096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  239.734601] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  239.767691] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  239.768262] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  239.776534] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  239.778179] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  239.813790] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  239.815781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  239.822516] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  239.929806] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  239.972192] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  241.384358] Bluetooth: hci1: command tx timeout
[  241.385094] Bluetooth: hci0: command tx timeout
[  241.512468] Bluetooth: hci2: command tx timeout
[  241.704738] Bluetooth: hci4: command tx timeout
[  241.768419] Bluetooth: hci3: command tx timeout
[  241.832328] Bluetooth: hci6: command tx timeout
[  241.896607] Bluetooth: hci5: command tx timeout
[  242.089417] Bluetooth: hci7: command tx timeout
[  243.433607] Bluetooth: hci0: command tx timeout
[  243.434156] Bluetooth: hci1: command tx timeout
[  243.561455] Bluetooth: hci2: command tx timeout
[  243.754279] Bluetooth: hci4: command tx timeout
[  243.817506] Bluetooth: hci3: command tx timeout
[  243.880336] Bluetooth: hci6: command tx timeout
[  243.945437] Bluetooth: hci5: command tx timeout
[  244.137496] Bluetooth: hci7: command tx timeout
[  245.480401] Bluetooth: hci0: command tx timeout
[  245.480956] Bluetooth: hci1: command tx timeout
[  245.608673] Bluetooth: hci2: command tx timeout
[  245.800460] Bluetooth: hci4: command tx timeout
[  245.864764] Bluetooth: hci3: command tx timeout
[  245.928365] Bluetooth: hci6: command tx timeout
[  245.992350] Bluetooth: hci5: command tx timeout
[  246.184557] Bluetooth: hci7: command tx timeout
[  247.528349] Bluetooth: hci1: command tx timeout
[  247.528894] Bluetooth: hci0: command tx timeout
[  247.657300] Bluetooth: hci2: command tx timeout
[  247.848593] Bluetooth: hci4: command tx timeout
[  247.912585] Bluetooth: hci3: command tx timeout
[  247.976452] Bluetooth: hci6: command tx timeout
[  248.041349] Bluetooth: hci5: command tx timeout
[  248.233503] Bluetooth: hci7: command tx timeout
[  302.014803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  302.017473] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  302.022324] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  302.034017] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  302.039602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  302.202215] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  302.205348] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  302.210833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  302.218592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  302.220593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  302.222510] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  302.224191] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  302.224779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  302.230128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  302.233369] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  302.272833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  302.281598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  302.290953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  302.309387] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  302.312143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  302.329940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  302.336708] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  302.337968] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  302.340608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  302.340725] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  302.347938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  302.348990] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  302.353929] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  302.359787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  302.364118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  302.366039] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  302.394365] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  302.401539] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  302.402530] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  302.412701] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  302.418725] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  302.422930] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  302.437658] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  302.437675] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  302.442304] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  304.104498] Bluetooth: hci0: command tx timeout
[  304.296365] Bluetooth: hci1: command tx timeout
[  304.297200] Bluetooth: hci2: command tx timeout
[  304.424377] Bluetooth: hci4: command tx timeout
[  304.425091] Bluetooth: hci5: command tx timeout
[  304.433821] Bluetooth: hci3: command tx timeout
[  304.490339] Bluetooth: hci6: command tx timeout
[  304.554328] Bluetooth: hci7: command tx timeout
[  306.152798] Bluetooth: hci0: command tx timeout
[  306.344747] Bluetooth: hci1: command tx timeout
[  306.345453] Bluetooth: hci2: command tx timeout
[  306.472795] Bluetooth: hci5: command tx timeout
[  306.474400] Bluetooth: hci4: command tx timeout
[  306.476302] Bluetooth: hci3: command tx timeout
[  306.537539] Bluetooth: hci6: command tx timeout
[  306.600354] Bluetooth: hci7: command tx timeout
[  308.200335] Bluetooth: hci0: command tx timeout
[  308.393343] Bluetooth: hci1: command tx timeout
[  308.393890] Bluetooth: hci2: command tx timeout
[  308.520629] Bluetooth: hci5: command tx timeout
[  308.521159] Bluetooth: hci4: command tx timeout
[  308.522188] Bluetooth: hci3: command tx timeout
[  308.584320] Bluetooth: hci6: command tx timeout
[  308.648649] Bluetooth: hci7: command tx timeout
[  310.248566] Bluetooth: hci0: command tx timeout
[  310.441302] Bluetooth: hci2: command tx timeout
[  310.441872] Bluetooth: hci1: command tx timeout
[  310.568393] Bluetooth: hci3: command tx timeout
[  310.568930] Bluetooth: hci4: command tx timeout
[  310.569444] Bluetooth: hci5: command tx timeout
[  310.632479] Bluetooth: hci6: command tx timeout
[  310.696316] Bluetooth: hci7: command tx timeout
[  364.547011] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  364.552151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  364.558975] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  364.564855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  364.580664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  364.792905] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  364.796998] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  364.799373] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  364.815621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  364.819510] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  364.874029] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  364.884763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  364.887492] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  364.892225] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  364.899898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  364.936006] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  364.939657] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  364.952402] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  364.980557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  364.994664] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  364.997900] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  365.003436] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  365.008635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  365.012602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  365.042441] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  365.044216] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  365.048880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  365.052783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  365.053751] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  365.058499] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  365.061404] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  365.068988] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  365.072215] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  365.080526] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  365.086760] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  365.497672] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  365.505495] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  365.513634] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  365.527060] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  365.558549] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  366.632394] Bluetooth: hci0: command tx timeout
[  366.888562] Bluetooth: hci1: command tx timeout
[  366.952371] Bluetooth: hci2: command tx timeout
[  367.144404] Bluetooth: hci3: command tx timeout
[  367.146512] Bluetooth: hci4: command tx timeout
[  367.208416] Bluetooth: hci6: command tx timeout
[  367.210365] Bluetooth: hci5: command tx timeout
[  367.656995] Bluetooth: hci7: command tx timeout
[  368.681329] Bluetooth: hci0: command tx timeout
[  368.936344] Bluetooth: hci1: command tx timeout
[  369.000742] Bluetooth: hci2: command tx timeout
[  369.192382] Bluetooth: hci3: command tx timeout
[  369.193878] Bluetooth: hci4: command tx timeout
[  369.256396] Bluetooth: hci6: command tx timeout
[  369.258084] Bluetooth: hci5: command tx timeout
[  369.704711] Bluetooth: hci7: command tx timeout
[  370.729483] Bluetooth: hci0: command tx timeout
[  370.984574] Bluetooth: hci1: command tx timeout
[  371.048907] Bluetooth: hci2: command tx timeout
[  371.243498] Bluetooth: hci3: command tx timeout
[  371.245001] Bluetooth: hci4: command tx timeout
[  371.304341] Bluetooth: hci5: command tx timeout
[  371.305953] Bluetooth: hci6: command tx timeout
[  371.752972] Bluetooth: hci7: command tx timeout
[  372.777400] Bluetooth: hci0: command tx timeout
[  373.032352] Bluetooth: hci1: command tx timeout
[  373.096533] Bluetooth: hci2: command tx timeout
[  373.288338] Bluetooth: hci4: command tx timeout
[  373.289836] Bluetooth: hci3: command tx timeout
[  373.352401] Bluetooth: hci5: command tx timeout
[  373.353814] Bluetooth: hci6: command tx timeout
[  373.800353] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
12:47:48  Registers:
info registers vcpu 0
RAX=0000000000000002 RBX=ffffffff81600480 RCX=ffff88806ce089cc RDX=0000000000000000
RSI=ffffffff85c1bac0 RDI=ffff888029d89fbc RBP=ffff88806ce08b10 RSP=ffff88806ce08a78
R8 =0000000000000001 R9 =ffff88806ce08ab8 R10=000000000003b074 R11=0000000000008626
R12=ffff88806ce08b40 R13=0000000000000000 R14=ffff888029d89bc0 R15=ffff88800cf4c378
RIP=ffffffff812d711c RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564e000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9c81f0d000 CR3=000000002ed7a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f
XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff88802d5cf468 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff81350bc2 RDI=ffff88806cf31850 RBP=ffffffff85c1bac0 RSP=ffff88806cf089c0
R8 =0000000000000001 R9 =ffff88806cf08ab8 R10=000000000003b074 R11=0000000000006b32
R12=ffffffff81350bc2 R13=ffff88806cf08ac0 R14=ffff88802d5cf438 R15=ffff88806cf08a78
RIP=ffffffff81518497 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574e000 00000000 00000000
LDT=0000 fffffe2500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f335e6d6028 CR3=000000002ec48000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000