Warning: Permanently added '[localhost]:18358' (ECDSA) to the list of known hosts.
2025/04/27 06:05:22 fuzzer started
2025/04/27 06:05:23 dialing manager at localhost:46629
syzkaller login: [  101.318790] cgroup: Unknown subsys name 'net'
[  101.464708] cgroup: Unknown subsys name 'cpuset'
[  101.505704] cgroup: Unknown subsys name 'rlimit'
2025/04/27 06:05:39 syscalls: 205
2025/04/27 06:05:39 code coverage: enabled
2025/04/27 06:05:39 comparison tracing: enabled
2025/04/27 06:05:39 extra coverage: enabled
2025/04/27 06:05:39 setuid sandbox: enabled
2025/04/27 06:05:39 namespace sandbox: enabled
2025/04/27 06:05:39 Android sandbox: enabled
2025/04/27 06:05:39 fault injection: enabled
2025/04/27 06:05:39 leak checking: enabled
2025/04/27 06:05:39 net packet injection: enabled
2025/04/27 06:05:39 net device setup: enabled
2025/04/27 06:05:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/27 06:05:39 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/27 06:05:39 USB emulation: enabled
2025/04/27 06:05:39 hci packet injection: enabled
2025/04/27 06:05:39 wifi device emulation: enabled
2025/04/27 06:05:39 802.15.4 emulation: enabled
2025/04/27 06:05:39 fetching corpus: 0, signal 0/0 (executing program)
2025/04/27 06:05:41 starting 8 fuzzer processes
06:05:41 executing program 0:
r0 = memfd_secret(0x0)
write$eventfd(r0, &(0x7f0000000000)=0x6, 0x8)
r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r0, 0x1)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x20010, r0, 0x8000000)
r2 = syz_io_uring_setup(0x6e83, &(0x7f0000000080)={0x0, 0xe3da, 0x4, 0x0, 0x306, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
r3 = syz_io_uring_setup(0x70d2, &(0x7f0000000180)={0x0, 0xa065, 0x4, 0x1, 0x20f, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240))
r4 = io_uring_setup(0x2bbb, &(0x7f0000000280)={0x0, 0x5a2d, 0x8, 0x2, 0x35c, 0x0, r3})
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000340)={0xffffffffffffffff, r5, 0x3})
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/suspend', 0x10400, 0x8)
epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4)
ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f00000003c0)=0x400)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x18, r7, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000011}, 0x8811)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000540)={0x2})
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000580)=r0, 0x1)
epoll_wait(r6, &(0x7f00000005c0), 0x0, 0x4)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000600))

06:05:41 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1685, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0xb43b83a6bf1e04b4}, 0x48084)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xcc, r0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x7b, 0xac, "7468e57a98a4efb1a4e02a9b544e9760664f326443ff24147b309ddd6c4d44cc6cc0d502c2f7de740fe6d8cfb2c954d899ba7c514c29c4e847d608991fd8b2e0fb2d3510b81b2e9587b4de5b1d7b5590fad8e6e0305060626e79b4a7c3f4b968cf43730b3bbcb6882a1462505ef15c2f2ea7c23a220509"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x301}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x340}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x7b8}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3f}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x11}, 0x50)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc006}, 0x15)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2000, 0x6f}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x282080}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x13c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5d}}}}, [@NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x40}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xe19]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x338}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x6, 0x81]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3ff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x6, 0xb0, 0xffffffff, 0x6, 0x6, 0x1, 0xe5158261]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7f}]}, @NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x9, 0x2, 0x20, 0x1ffe, 0x10001, 0x0, 0x20, 0x5, 0x6, 0x400]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x683}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3f3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffff001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x81}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1ca}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x677}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x46}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x400}]}]}, 0x13c}}, 0x8001)
syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa8, r0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x85, 0xbe, "79cb9901336f54b1e5ebe6ad26f809c0abeda185413c7d2c2aa6d7c2dbded37622308759dc29b951086dedd7b80b423e52d32146c7f074115c44958b205684de84cda1609f3711ee9239a8e852c3382a7e8a805d5280b64e8f001b830f92b207ed6af788fc7200dc8295d7687db9afce62b6d177d19749ae551c65cb229be7f6eb"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8800}, 0x90)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r1, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4001)
r2 = memfd_secret(0x80000)
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r3 = memfd_secret(0x80000)
write$vga_arbiter(r3, &(0x7f0000000b80)=@other={'unlock', ' ', 'mem'}, 0xb)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x5c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8f}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd7}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x80cf6afa481175ec)
io_uring_setup(0x4b3b, &(0x7f0000000d00)={0x0, 0xe1cf, 0x10, 0x0, 0x25e, 0x0, r2})
r4 = socket(0x15, 0x80000, 0x8)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000dc0)=@buf={0x16, &(0x7f0000000d80)="811fe92e4281dc949b499fc41ab38f6abc0eea51bf85"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f00)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffff)

06:05:41 executing program 2:
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080))
r0 = getuid()
setresuid(0xee00, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000140))
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0xd7c, 0x80000000, 0x1, 0x1, 0x2d}, 0x14)
getsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r2 = syz_io_uring_setup(0x501c, &(0x7f0000000240)={0x0, 0xce42, 0x4, 0x2, 0x343}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300))
r3 = socket$inet(0x2, 0x4, 0x8000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x7, 0xff, {0x0, r2}, 0x80, 0xd, 0x1, {0x0, 0x0, r3}}, 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000380), 0x4)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, "b622889771ebbc66", "a2cbd27c8399c1282baaae085b8acc62", "e1dd5bbe", "527c787745ef39e7"}, 0x28)
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000440), 0x4)
write$tun(0xffffffffffffffff, &(0x7f0000000480)={@val={0x0, 0x6004}, @val={0x2, 0x1, 0x40, 0x81, 0x3ff, 0x400}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @private2={0xfc, 0x2, '\x00', 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x42)
socketpair(0x2, 0x3, 0x7, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000540))
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000580)=0xbb5dc402f0af5a50, 0x4)
getsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f00000005c0), &(0x7f0000000600)=0x4)

06:05:41 executing program 3:
getitimer(0x2, &(0x7f0000000000))
modify_ldt$read_default(0x2, &(0x7f0000000040)=""/182, 0xb6)
getitimer(0x2, &(0x7f0000000100))
modify_ldt$read_default(0x2, &(0x7f0000000140)=""/239, 0xef)
modify_ldt$read_default(0x2, &(0x7f0000000240)=""/14, 0xe)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='oom_score\x00')
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000002c0)={'mangle\x00', 0x5, "95384c83ff"}, &(0x7f0000000300)=0x29)
prctl$PR_GET_THP_DISABLE(0x2a)
modify_ldt$read_default(0x2, &(0x7f0000000340)=""/210, 0xd2)
getsockname(r0, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000004c0)=0x80)
getsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000500), &(0x7f0000000540)=0x4)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000580), &(0x7f00000005c0)=0x14)
r2 = semget$private(0x0, 0x1, 0x20)
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000600)=""/16)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000640)={0x3})
r3 = semget$private(0x0, 0x0, 0x340)
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000680)=""/23)
sched_setattr(0x0, &(0x7f00000006c0)={0x38, 0x6, 0x0, 0x7fffffff, 0x4, 0x2, 0xfffffffffffffffa, 0x80, 0x10000, 0x8}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r1)

[  118.743127] audit: type=1400 audit(1745733941.207:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
06:05:41 executing program 4:
sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0xc68)
sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x10001)
prlimit64(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x7, 0x3}, &(0x7f00000000c0))
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00')
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "9c6e4dfb92d6984c", "789bdd925e287853c2e39a652ccbd938", "abf9405e", "0a9062a6a62a094d"}, 0x28)
ptrace$setregs(0xf, 0x0, 0x8, &(0x7f0000000180)="bce8efa69c9455524c7317dcdad3d90c9d06fc6d23caad43dfa8b804c9f76b6bfc54f6f8ec907cf9a3e6b2882d2a90f580749c568c07a23346483088bc3118891de78b98c9a499c4b5b2e94953be23b2f8c6d3acb174c646fc4c5dbed2d9f10b2c72ff2734479fafd8adac5e432917614334c4c89fc35b2777e9b35d87a52cc9f60461b5501680ab900fdca21a0e")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='cmdline\x00')
capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x84e, 0x2, 0x800, 0x401, 0x2})
capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000340)={0x3e4, 0x2, 0x0, 0x40, 0x1000, 0x1})
rt_sigqueueinfo(0x0, 0x17, &(0x7f0000000380)={0x3, 0x3800000, 0x7f})
ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x5, 0x2)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000400)=0xfffff54b, 0x4)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001340)=@filter={'filter\x00', 0xe, 0x5, 0xeb6, [0x0, 0x20000480, 0x200006d4, 0x20000842], 0x0, &(0x7f0000000440), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x3, 0x49, 0x6004, 'hsr0\x00', 'veth0_virt_wifi\x00', 'ip_vti0\x00', 'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, [0xff, 0xff], @multicast, [0xff, 0xff, 0x0, 0xff, 0xff], 0xfe, 0xfe, 0x12e, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'snmp_trap\x00'}}}, @time={{'time\x00', 0x0, 0x18}, {{0x7, 0x6, 0x14dac, 0x6ed5, 0x9, 0x5, 0x3}}}], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}}, {0x11, 0x202172cd1385ae0c, 0x8808, 'ipvlan0\x00', 'vlan0\x00', 'veth0_vlan\x00', 'geneve0\x00', @multicast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @random="ab827fcdbb83", [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0xbe, 0xbe, 0xf6, [@helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'amanda\x00'}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x11, 0x44, 0x2, 'team_slave_1\x00', 'veth0_vlan\x00', 'geneve0\x00', 'rose0\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @multicast, [0x80, 0xff, 0x0, 0xff], 0x10e, 0x10e, 0x13e, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x0, 0x1}}}, @rateest={{'rateest\x00', 0x0, 0x48}, {{'veth0_to_hsr\x00', 'team_slave_0\x00', 0x22, 0x1, 0xe2, 0x0, 0xfffffffa, 0x6, {}, {0x9}}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{0x5, 0x0, 0x888e, 'virt_wifi0\x00', 'veth1_vlan\x00', 'batadv0\x00', 'lo\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff, 0x0, 0xa90d9c6f4bae02bb, 0xff], 0xde, 0x13e, 0x1b6, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0xd4, 0x5, 0x2, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x8, 0x40, 0xe2c6, 0x10dbd, 0x6a, 0x5, 0x2}}}], [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@nflog={'nflog\x00', 0x50, {{0x4, 0x7, 0x200, 0x0, 0x0, "1b80c18db90909afe4d67df560a9adb2a3a8bfb9890b2d52f0ba12a5150420a8cb27329bdadefd3eab9a37b05fd9c3b1d2bc157b9d1cb50907c689e0b842ef98"}}}}, {0x5, 0x2a, 0x805, 'veth0\x00', 'ipvlan1\x00', 'dummy0\x00', 'macvtap0\x00', @random="daaabddafd68", [0xff, 0xff, 0xff, 0x0, 0xff], @local, [0x0, 0x0, 0xff], 0x896, 0x896, 0x90e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x1, 0x2}, {0xc01c, 0x3}, {0x7fffffff, 0x3}, {0x400, 0x3}, {0x7, 0x3}, {0x20}, {0x3e, 0x1}, {0x7fffffff, 0x1}, {0x4, 0x1}, {0x5}, {0x1}], [{0x1, 0x1}, {0x7fffffff, 0x4}, {0x2, 0x7}, {0xba, 0x5}, {0x8000, 0x1}, {0x3, 0x200}, {0x9, 0x4}, {0xeab, 0x7}, {0x4871, 0x4}, {0xed, 0x6}, {0x4abfd522, 0x6}], 0x3, 0x7}, {[{0x80000000, 0x1}, {0xffffff01, 0x2}, {0x5df8, 0x3}, {0x2, 0x2}, {0x4}, {0x8, 0x1}, {0x6, 0x3}, {0x1f, 0x1}, {0x7, 0x4}, {}, {0x5, 0x2}], [{0x1, 0x8000}, {0x40000000, 0x200}, {0x68, 0x4}, {0x7, 0x3}, {0x401, 0xfe000000}, {0x4, 0x1ff}, {0x6, 0x2}, {0x8d83, 0x8}, {0x3, 0x101}, {0x9, 0x1}, {0x1ff, 0x114d}], 0x9, 0xb}, {[{0x5ce2}, {0xfff, 0x2}, {0x2, 0x3}, {0x80, 0x1}, {0x3, 0x2}, {0x907f, 0x1}, {0x8, 0x3}, {0x1, 0x1}, {0x7fff, 0x2}, {0x4, 0x2}, {0x8, 0x2}], [{0x7fff, 0xa89}, {0x8, 0x9}, {0x5, 0xffffff78}, {0xff, 0xfff}, {0x9dc, 0x9}, {0x1f}, {0x9, 0xb848}, {0x9, 0x4}, {0x5, 0xd1a}, {0x9, 0x2}, {0x1876, 0x20}], 0x9, 0x4}, {[{0x2, 0x1}, {0x7fff, 0x3}, {0x2, 0x2}, {0x6, 0x1}, {0x9, 0x3}, {0x80000001, 0x2}, {0x80000000, 0x3}, {0x8, 0x3}, {0x1, 0x3}, {0x5, 0x3}, {0x912, 0x3}], [{0x8, 0x1}, {0xfffffff7}, {0x3, 0x5}, {0x2, 0x8}, {0x49, 0x1}, {0x2, 0x5}, {0x2, 0x6}, {0x3, 0x20}, {0x58d7, 0x3}, {0xe2, 0x81}, {0x7}], 0x1}, {[{0x3f, 0x2}, {}, {0x80000000, 0x2}, {0x6, 0x2}, {0x3}, {0x9, 0x2}, {0x6, 0x3}, {0x3ff, 0x3}, {0x3f00000, 0x3}, {0x9}, {0x1000, 0x1}], [{0x3, 0x3}, {0x100, 0x8}, {0x0, 0x2}, {0x8001, 0x2}, {0x2, 0x5}, {0x80000000}, {0x10000, 0x6}, {0x7, 0xc13f}, {0x80000000, 0x80000000}, {0x9, 0x7fffffff}, {0x323, 0xda}], 0x2, 0x4}, {[{0x6, 0x2}, {0x2, 0x3}, {0x80, 0x3}, {0x6, 0x3}, {0x8001, 0x1}, {0xca2, 0x1}, {0x3ff, 0x1}, {0x1ff, 0x1}, {0x9}, {0x101, 0x2}, {0x5, 0x2}], [{0xe85, 0x401}, {0x8, 0x9}, {0x9, 0x7fff}, {0x11, 0x6}, {0x63, 0x2d8a}, {0x4, 0x4}, {0xd6, 0x1000}, {0xfffffffc, 0x7fff}, {0x401, 0x3ff}, {0x3, 0x1}, {0x8, 0x4}], 0x1, 0x3}, {[{0x7fff, 0x2}, {0xfffffffe, 0x1}, {0xfffffff8, 0x3}, {0x3, 0x3}, {0x80, 0x3}, {0x0, 0x2}, {0x9, 0x3}, {0x73}, {0x1000, 0x3}, {0x861, 0x3}, {0x80000001, 0x2}], [{0xd72, 0x100}, {0xffffffff, 0x7fff}, {0x400, 0x9}, {0x4, 0x4}, {0x5, 0x100}, {0x8, 0x5}, {0x3ba9, 0x20}, {0x6, 0x100}, {0xa94, 0xfff}, {0x1000, 0x10000}, {0x6}], 0x6, 0x4}, {[{0x8, 0x2}, {0x8, 0x3}, {0x6, 0x2}, {0x6, 0x1}, {0xff, 0x2}, {0x8}, {0x4}, {0x7, 0x1}, {0x1, 0x2}, {0x1, 0x1}, {0x6, 0x1}], [{0x8, 0x2}, {0x6, 0x7}, {0x0, 0x8}, {0x800, 0x20}, {0x9, 0x1}, {0x9, 0x4}, {0x3ff, 0x4}, {0x1, 0x8001}, {0x5, 0xe232}, {0x80000, 0x5}, {0x200, 0xff}], 0x0, 0x9}, {[{0x9}, {0x1}, {0x5}, {0x97}, {0x3}, {0x3}, {0x0, 0x1}, {0x1}, {0x23}, {0xfffffffb, 0x3}, {0x1, 0x2}], [{0x7f, 0x1}, {0x8, 0xfffffffe}, {0x3f}, {0xa, 0x200}, {0x7, 0x4}, {0x0, 0x9}, {0x4, 0x4}, {0x0, 0x9}, {0x282, 0xffffffe1}, {0x0, 0x80}, {0x3, 0xab69}], 0x9, 0x5}, {[{0x3, 0x1}, {0x8}, {0x8000, 0x3}, {0x1000, 0x3}, {0x1, 0x2}, {0x6, 0x1}, {}, {0x1ff, 0x3}, {0x3f, 0x2}, {0x5900, 0x1}, {0x80000001, 0x1}], [{0x9, 0x4}, {0x20, 0x9}, {0xbae5, 0x3ff}, {0x1, 0xc0000000}, {0x10a00000, 0x400}, {0x800, 0x3}, {0x4, 0x3}, {0x1f, 0x5}, {0xfffffe78, 0x20}, {0x2, 0x3}, {0x8, 0x6be}], 0xa, 0x7}, {[{0x1, 0x2}, {0xc1a, 0x1}, {0x8, 0x2}, {0x4, 0x1}, {0x6, 0x1}, {0x2, 0x3}, {0xffffffff, 0x2}, {0x1, 0x2}, {0x3a251b07, 0x1}, {0x1}, {0x1, 0x1}], [{0x3, 0xfffffffd}, {0x6, 0x6}, {0x0, 0x5}, {0xfffffc00, 0x80000001}, {0x4, 0x7}, {0x6, 0xffffffff}, {0x3, 0x6}, {0xff, 0x6}, {0x2, 0x6}, {0x7ff, 0x10001}, {0x7ff, 0x805}], 0x3, 0x4}], 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x7, 0x4, 0x65cc, 0x4afa, 0x80000001, 0x8, 0x1}}}], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x7, 0x4, 0x5, 0x1, 0x0, "432404f45c9a3f0baed76768fc55cfa865a315886a4c3560d07188144f1dc36a8f17332fa95ee53ec813b3d2910d3fe9afa626447ab5403b5349a3de32a6c52f"}}}}]}]}, 0xf2e)
rt_sigqueueinfo(0x0, 0x2, &(0x7f00000013c0)={0xa, 0x1, 0xd1c8})
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@empty, @in6=@mcast2, 0x4e20, 0x7ff, 0x4e22, 0x9, 0xa, 0xa0, 0x20, 0x16, 0x0, 0xee01}, {0x1, 0x9, 0x1, 0xfffffffffffffffc, 0x9, 0x9, 0x5, 0x5}, {0x0, 0x9, 0xffffffff, 0x4}, 0x3ff, 0x6e6bbf, 0x2, 0x1, 0x2, 0x3}, {{@in6=@empty, 0x4d6, 0x6c}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x1, 0x3, 0x6, 0x15, 0x7f, 0x20}}, 0xe8)
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000001540))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r1)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0xa8, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x48, 0xbe, "b485076052007446093ae87d61ea8eb793d2bea8d7535eecf867cf85c511bfd2d03d6f710ac4affa4a87f4211a15c83d02273e0fdb044e49def0de66ae9614644062db68"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x25, 0xac, "9a8c22dc95b5401765db7b307bf221661f187bdfdd591caedb40adf7247c177128"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x101}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008000}, 0x10)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000001780)={@val={0x0, 0x888e}, @val={0x1, 0x80, 0xff, 0x2, 0x3ff, 0x8}, @ipv6=@generic={0x9, 0x6, "409839", 0xdc, 0x64, 0xff, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1d}, {[@hopopts={0x3c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x80}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @hopopts={0x6c, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x39}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x3}]}, @fragment={0x21, 0x0, 0x56, 0x0, 0x0, 0x16, 0x67}, @fragment={0x2b, 0x0, 0x5, 0x1, 0x0, 0x7, 0x68}], "130a059239fdf8db56331255cf34baf22af89aa815be040b8ba8f369dfc636126b6e3f028b5efe91b975690950d42a1717a820ed888d548c79765842ca3dd477197d042c60c4211dd6dc1ba168ce0588f652a6d1969b107e3b5b3f90d8d661e18390dcc83e2e11c829278bfa"}}}, 0x112)

06:05:41 executing program 5:
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000000)={0xfff})
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x680241, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x80010, r0, 0x8000000)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4001)
sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f00000001c0))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r3=>0x0, 0x5e, 0x0, 0x5, 0xa67, 0x32, @mcast1, @loopback, 0x8000, 0x1, 0x5, 0x80000000}})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x868090}, 0xc, &(0x7f0000000700)={&(0x7f0000000340)={0x38c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_OURS={0x2ec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe3, 0x4, "333e6fd16a260d079715f9e59d5b3451a970f23fa597a211b286308bbb9d7720c355a4977de2add3bc0a70f9f4a2db314481cbf6b624d8881d29d3f3734eaaa5d1972e2adbf6d25abbecd8b752fd7d069a5e8b42f5e7097be8662eb2be542b1724bfd6a80365f7781210d7037b3bc0202daefe6538234e5b327141a22e62809895754f7976a253fd5b78d82beba2323e977c10f3b66d8d0f5aa7cbb69cd931e286e684af77efe3a94f0b91a8175b50f6aa2c6ee6d5539c9141fb21027e46b647c033e20c6c432511bb7519725470fdf46b191f9799ea81ed537dfca92e6134"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',\xaf\\(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'team\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_MASK={0xde, 0x5, "c4f0f5d38ebffa5178445245d62cd655bb49723ae05784c7240e3027cb80869a909d7878485772cd64d781d38832d7b2c27b3397f8105b7430ff20ebb7e0a7431bc7b5f8a50ae9bcb5317ae11d0216fe11c787bee320cf6728a38531d9d1cd87e7fc99986fd922397e5f8ba9d0228ba84e7b2063da24a310d060265fe97b8164571639b58238771d3ad86b67cca5c64b0fd42d5fc2a064816926b7aa65c9947b683b19866762a72d6d5dd0263f5b81c2cd5cccb6580a465c8139ac3a6a29c4180973800aa7088fb7d36cdbae26947e28212aac2b895b42af6ef4"}, @ETHTOOL_A_BITSET_MASK={0x74, 0x5, "b5375b7b3645100797e0797492d7c91cae39f82d8e197b05945b04192e8c50145061dd9b6bbb81ae08fd974d7a5cffc7347fdccd8be1bd785812a3de87cc14e0d0a3afa1ec9facb0de49ce07cfcfe67d12a3ad507cc49232ee92857f38c055250df5ed75392773db0cc6746f652d82fb"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}, @ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x10}, 0x821)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000780)='ns/mnt\x00')
r5 = syz_io_uring_setup(0x7c87, &(0x7f00000007c0)={0x0, 0xd1aa, 0x1, 0x0, 0xaf, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000840), &(0x7f0000000880))
r6 = openat$full(0xffffffffffffff9c, &(0x7f00000008c0), 0x111000, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000900)=r6, 0x1)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'ip6tnl0\x00', <r7=>r3, 0x4, 0x80, 0x2, 0x7, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x40, 0x7, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'ip6gre0\x00', <r8=>r3, 0x29, 0x5, 0x81, 0x3f, 0x32, @mcast2, @mcast1, 0x8, 0x8000, 0x8, 0xfff}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'sit0\x00', &(0x7f0000000bc0)={'syztnl0\x00', <r9=>r3, 0x2f, 0x81, 0x0, 0x5, 0x46, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x40, 0x4, 0x3e}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c80)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000001080)={'syztnl1\x00', &(0x7f0000001000)={'ip6_vti0\x00', <r11=>r3, 0x29, 0x8, 0x7f, 0x8000, 0x10, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x8, 0x44ff, 0x401}})
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f00000017c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001780)={&(0x7f00000010c0)={0x6ac, r1, 0x210, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x2b8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4b}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x400, 0x1, 0x2, 0x8}, {0x100, 0x2, 0x80, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0xfff7, 0x0, 0xc0, 0x1f}, {0x0, 0x29, 0x2, 0x800}, {0x2, 0x7f, 0x7, 0x7}, {0x474, 0xcf, 0x9, 0x3}, {0x4, 0x1, 0x8b, 0x4}, {0x1, 0x6, 0x8, 0x8}, {0xc331, 0x9, 0x1, 0x200}, {0x1, 0x0, 0x81}, {0x9, 0xff, 0x5, 0x2}, {0x18be, 0x3, 0x3e, 0x7fffffff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x8001, 0x4, 0x8, 0x96}, {0x6, 0xff, 0x0, 0xff}, {0x7, 0x3f, 0xea, 0x7}, {0x4b, 0x2, 0x9d, 0x400}, {0x1d46, 0x3, 0x10, 0x7}, {0xf749, 0x40, 0x9a, 0x4}, {0x42, 0xc5, 0x1c, 0x101}, {0x8, 0x1, 0x6, 0x5}]}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x420}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x1c8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa2b4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x6ac}, 0x1, 0x0, 0x0, 0x48080}, 0x4000010)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r4, &(0x7f0000001800)={r0, r5, 0xffffffff})

06:05:41 executing program 6:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', 'b', ':', '10', ':', '8', '.', 'd'}}, 0x14)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c, 0x100800)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x2, 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', <r1=>0x0, 0x4, 0x3, 0x2, 0x4, 0x40, @loopback, @loopback, 0x20, 0x1, 0x7, 0x27bc}})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x40040, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x2}, @mss={0x2, 0xfffffffc}], 0x2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x5, 0x9, 0x800, 0x9, 0x200, 0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4e4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x2000000c)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000b80)={'ip6_vti0\x00', &(0x7f0000000b00)={'ip6_vti0\x00', <r6=>r1, 0x2f, 0x6, 0x3, 0x0, 0x8, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x700, 0xfffffbff, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c00)={'team0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'syztnl1\x00', <r8=>0x0, 0x4, 0x0, 0x6, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback, 0x700, 0x10, 0xfff, 0x3}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)={'team0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000f00)={&(0x7f00000004c0), 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xe8, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PAUSE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0xe8}}, 0x24000881)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000f40)=0x1, 0x4)

06:05:41 executing program 7:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pcmcia_core', 0x0, 0x10c)
sendto$inet(r0, &(0x7f0000000040)="3d3d064cc7fcdf964a8e3b6e41d23496845074373169559ad02634c4c8c85d509ddd3c25a36249a19efd91ac0460436d92c05e51dcc643b1559d29c5c30f99fed8d3a8de3872f7b2b8d23631523722076f987dc3c9db5da2484ae5350079f2833dcd132c37548ce4aeea5d58c23d0c0ee5bdda55c805608e8fe61718056fd95d14a1436106e2450b4da03228d951b2cb6aefa00a5afc5ebabeb5a64a080cb6", 0x9f, 0x20000011, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0xffffffff, 0x2, 0x6, 0x2, 0x3}, 0x14)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000180)={0x0, 0x275a6e0e, 0x3f}, 0xc)
r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200))
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x3, 0x342, [0x0, 0x20000280, 0x2000039e, 0x200003ce], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0x3, 0x1, [{0x9, 0x19, 0x9, 'vlan1\x00', 'macvlan0\x00', 'veth0_to_bridge\x00', 'wlan0\x00', @local, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @random="34c146831d80", [0x0, 0xff, 0xff, 0xff], 0xb6, 0xb6, 0xee, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfa, 0x7, 0x9, 0x20, 0xfffffff9, 0x2}}}], [], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x3, 0x6, 0x18, 'veth0_to_bond\x00', 'veth1_virt_wifi\x00', 'caif0\x00', 'ip6tnl0\x00', @multicast, [0xff, 0x0, 0xff, 0xff], @multicast, [0x0, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x5, 0x10, 0x892f, 'veth1\x00', 'veth0\x00', 'ipvlan0\x00', 'vlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, [0xff, 0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xbe, 0xbe, 0xee, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x80000001}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x100}}}}]}]}, 0x3ba)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast2, @loopback}, 0xc)
r3 = epoll_create(0xffff8001)
epoll_wait(r3, &(0x7f00000006c0)=[{}, {}], 0x2, 0xfffffc00)
socketpair(0x27, 0x800, 0x4, &(0x7f0000000700)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000c00)=@filter={'filter\x00', 0xe, 0x3, 0x452, [0x0, 0x20000780, 0x200007b0, 0x20000a64], 0x0, &(0x7f0000000740), &(0x7f0000000780)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x86a0d706d445e6c9, 0x40, 0x8100, 'vxcan1\x00', 'vlan1\x00', 'ip6_vti0\x00', 'ip6erspan0\x00', @random="e0981d7e6939", [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x9e, 0xce, [], [@common=@STANDARD={'\x00', 0x8, {0x69245165d802cc9f}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}}, {0x5, 0x4b, 0x88f8, 'nr0\x00', 'syz_tun\x00', 'ipvlan0\x00', 'vxcan1\x00', @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0xff, 0x0, 0xff], 0x116, 0x186, 0x1b6, [@mac={{'mac\x00', 0x0, 0x10}, {{@remote, 0x1}}}, @physdev={{'physdev\x00', 0x0, 0x48}, {{'sit0\x00', {0xff}, 'wg2\x00', {}, 0xc, 0x11}}}], [@common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}, @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffc}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x9, 0x1, 0x600, 'macvlan1\x00', 'veth0_to_team\x00', 'netpci0\x00', 'veth1_to_team\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xde, 0x10e, 0x13e, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0xcae7, 0x1}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0xa, 0x3, 0x9, 0x4, 0x3}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}]}, 0x4ca)
socketpair(0x8, 0x4, 0x7fff, &(0x7f0000000c80)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000cc0)={r2, r6, 0x2})
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000d00)=0x1, 0x4)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000d40)=@ccm_128={{0x304}, "e38871124116d5f7", "91777f92c76cf7f4c14431237dee2eca", "0ea9dd81", "1ab64b26bb1da56e"}, 0x28)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000d80)=0x101, 0x4)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

[  120.236995] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  120.243240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  120.246516] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  120.252697] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  120.257488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  120.285217] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  120.289394] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  120.299322] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  120.339362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  120.362343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  120.367584] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  120.379595] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  120.381312] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  120.383284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  120.386556] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  120.393429] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  120.395485] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  120.402286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  120.406116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  120.409649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  120.411723] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  120.416157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  120.421388] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  120.426440] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  120.426812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  120.428232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  120.433365] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.436650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  120.453151] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  120.456415] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  120.462755] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  120.464449] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  120.482548] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  120.486155] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  120.503265] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  120.505506] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  120.511458] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  120.513484] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  120.547723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  120.555504] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  122.318505] Bluetooth: hci0: command tx timeout
[  122.509947] Bluetooth: hci4: command tx timeout
[  122.510868] Bluetooth: hci1: command tx timeout
[  122.573920] Bluetooth: hci3: command tx timeout
[  122.638578] Bluetooth: hci5: command tx timeout
[  122.639339] Bluetooth: hci2: command tx timeout
[  122.639930] Bluetooth: hci6: command tx timeout
[  122.701913] Bluetooth: hci7: command tx timeout
[  124.366986] Bluetooth: hci0: command tx timeout
[  124.560861] Bluetooth: hci1: command tx timeout
[  124.561351] Bluetooth: hci4: command tx timeout
[  124.622967] Bluetooth: hci3: command tx timeout
[  124.687943] Bluetooth: hci6: command tx timeout
[  124.688560] Bluetooth: hci2: command tx timeout
[  124.689778] Bluetooth: hci5: command tx timeout
[  124.749934] Bluetooth: hci7: command tx timeout
[  126.414030] Bluetooth: hci0: command tx timeout
[  126.605945] Bluetooth: hci4: command tx timeout
[  126.606239] Bluetooth: hci1: command tx timeout
[  126.673113] Bluetooth: hci3: command tx timeout
[  126.733944] Bluetooth: hci2: command tx timeout
[  126.734170] Bluetooth: hci6: command tx timeout
[  126.735178] Bluetooth: hci5: command tx timeout
[  126.797965] Bluetooth: hci7: command tx timeout
[  128.461982] Bluetooth: hci0: command tx timeout
[  128.654314] Bluetooth: hci4: command tx timeout
[  128.654461] Bluetooth: hci1: command tx timeout
[  128.718069] Bluetooth: hci3: command tx timeout
[  128.782258] Bluetooth: hci6: command tx timeout
[  128.782753] Bluetooth: hci5: command tx timeout
[  128.783365] Bluetooth: hci2: command tx timeout
[  128.845911] Bluetooth: hci7: command tx timeout
[  180.203520] syz-executor.4 (284) used greatest stack depth: 24504 bytes left
[  182.502129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  182.504727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  182.510213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  182.520944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  182.531144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  182.550143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  182.555009] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  182.566113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  182.573290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  182.582103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  182.642340] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  182.646328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  182.652567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  182.654565] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  182.660091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  182.664747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  182.697786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  182.715145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  182.723529] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  182.728267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  182.728458] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  182.730603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  182.734211] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  182.734351] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  182.737437] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  182.739310] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  182.744438] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  182.750343] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  182.767643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  182.770549] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  182.819680] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  182.850150] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  182.870129] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  182.885225] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  182.891251] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  182.892262] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  182.909038] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  182.910272] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  182.914081] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  182.916362] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  184.590408] Bluetooth: hci0: command tx timeout
[  184.653980] Bluetooth: hci1: command tx timeout
[  184.718995] Bluetooth: hci2: command tx timeout
[  184.846894] Bluetooth: hci5: command tx timeout
[  184.847933] Bluetooth: hci4: command tx timeout
[  184.848674] Bluetooth: hci3: command tx timeout
[  184.974110] Bluetooth: hci7: command tx timeout
[  184.974135] Bluetooth: hci6: command tx timeout
[  186.638891] Bluetooth: hci0: command tx timeout
[  186.702225] Bluetooth: hci1: command tx timeout
[  186.767095] Bluetooth: hci2: command tx timeout
[  186.895952] Bluetooth: hci3: command tx timeout
[  186.896877] Bluetooth: hci4: command tx timeout
[  186.896934] Bluetooth: hci5: command tx timeout
[  187.022036] Bluetooth: hci7: command tx timeout
[  187.023290] Bluetooth: hci6: command tx timeout
[  188.686036] Bluetooth: hci0: command tx timeout
[  188.751893] Bluetooth: hci1: command tx timeout
[  188.814894] Bluetooth: hci2: command tx timeout
[  188.941952] Bluetooth: hci5: command tx timeout
[  188.942438] Bluetooth: hci3: command tx timeout
[  188.944411] Bluetooth: hci4: command tx timeout
[  189.069945] Bluetooth: hci6: command tx timeout
[  189.069967] Bluetooth: hci7: command tx timeout
[  190.734005] Bluetooth: hci0: command tx timeout
[  190.798100] Bluetooth: hci1: command tx timeout
[  190.863858] Bluetooth: hci2: command tx timeout
[  190.989959] Bluetooth: hci3: command tx timeout
[  190.990401] Bluetooth: hci4: command tx timeout
[  190.990854] Bluetooth: hci5: command tx timeout
[  191.117911] Bluetooth: hci6: command tx timeout
[  191.117970] Bluetooth: hci7: command tx timeout
[  244.712503] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  244.714455] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  244.722056] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  244.729441] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  244.734072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  244.897733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  244.902418] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  244.904333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  244.911582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  244.915751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  244.985721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  244.993175] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  244.994652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  245.024903] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  245.043877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  245.052412] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  245.061686] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  245.074500] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  245.089099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  245.093518] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  245.120354] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  245.160230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  245.192709] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  245.209491] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  245.218197] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  245.248539] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  245.295205] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  245.308247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  245.326931] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  245.329050] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  245.333056] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  245.338949] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  245.340432] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  245.344292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  245.351307] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  245.356923] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  245.364459] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  245.393452] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  245.419248] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  245.421277] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  246.797971] Bluetooth: hci0: command tx timeout
[  246.989929] Bluetooth: hci1: command tx timeout
[  247.117893] Bluetooth: hci2: command tx timeout
[  247.182025] Bluetooth: hci3: command tx timeout
[  247.311079] Bluetooth: hci4: command tx timeout
[  247.437951] Bluetooth: hci5: command tx timeout
[  247.565972] Bluetooth: hci7: command tx timeout
[  247.566598] Bluetooth: hci6: command tx timeout
[  248.846261] Bluetooth: hci0: command tx timeout
[  249.037938] Bluetooth: hci1: command tx timeout
[  249.167865] Bluetooth: hci2: command tx timeout
[  249.229972] Bluetooth: hci3: command tx timeout
[  249.357909] Bluetooth: hci4: command tx timeout
[  249.486142] Bluetooth: hci5: command tx timeout
[  249.613898] Bluetooth: hci6: command tx timeout
[  249.614897] Bluetooth: hci7: command tx timeout
[  250.893928] Bluetooth: hci0: command tx timeout
[  251.086998] Bluetooth: hci1: command tx timeout
[  251.215044] Bluetooth: hci2: command tx timeout
[  251.278887] Bluetooth: hci3: command tx timeout
[  251.407088] Bluetooth: hci4: command tx timeout
[  251.536072] Bluetooth: hci5: command tx timeout
[  251.662906] Bluetooth: hci7: command tx timeout
[  251.663145] Bluetooth: hci6: command tx timeout
[  252.941927] Bluetooth: hci0: command tx timeout
[  253.133940] Bluetooth: hci1: command tx timeout
[  253.263181] Bluetooth: hci2: command tx timeout
[  253.326167] Bluetooth: hci3: command tx timeout
[  253.454044] Bluetooth: hci4: command tx timeout
[  253.584077] Bluetooth: hci5: command tx timeout
[  253.709921] Bluetooth: hci6: command tx timeout
[  253.709958] Bluetooth: hci7: command tx timeout
[  307.253545] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  307.257782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  307.261427] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  307.263178] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  307.267589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  307.270105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  307.282124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  307.291618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  307.294684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  307.298754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  307.333573] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  307.353525] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  307.360074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  307.365806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  307.369372] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  307.507795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  307.512330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  307.514736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  307.522352] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  307.547077] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.580507] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  307.591679] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  307.594192] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  307.600091] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  307.603335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  307.662477] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  307.666074] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  307.672153] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  307.680995] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  307.695179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  307.697120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  307.706079] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  307.711178] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  307.717433] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  307.722365] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  308.006680] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  308.010324] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  308.027290] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  308.058829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  308.066172] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  309.327598] Bluetooth: hci1: command tx timeout
[  309.390054] Bluetooth: hci2: command tx timeout
[  309.390886] Bluetooth: hci0: command tx timeout
[  309.646025] Bluetooth: hci3: command tx timeout
[  309.646360] Bluetooth: hci4: command tx timeout
[  309.839044] Bluetooth: hci5: command tx timeout
[  309.902353] Bluetooth: hci6: command tx timeout
[  310.158137] Bluetooth: hci7: command tx timeout
[  311.373956] Bluetooth: hci1: command tx timeout
[  311.438500] Bluetooth: hci2: command tx timeout
[  311.438971] Bluetooth: hci0: command tx timeout
[  311.695042] Bluetooth: hci3: command tx timeout
[  311.695482] Bluetooth: hci4: command tx timeout
[  311.886443] Bluetooth: hci5: command tx timeout
[  311.949898] Bluetooth: hci6: command tx timeout
[  312.206769] Bluetooth: hci7: command tx timeout
[  313.422017] Bluetooth: hci1: command tx timeout
[  313.485941] Bluetooth: hci0: command tx timeout
[  313.486420] Bluetooth: hci2: command tx timeout
[  313.743032] Bluetooth: hci4: command tx timeout
[  313.743522] Bluetooth: hci3: command tx timeout
[  313.934262] Bluetooth: hci5: command tx timeout
[  313.998420] Bluetooth: hci6: command tx timeout
[  314.253911] Bluetooth: hci7: command tx timeout
[  315.469957] Bluetooth: hci1: command tx timeout
[  315.534127] Bluetooth: hci2: command tx timeout
[  315.534157] Bluetooth: hci0: command tx timeout
[  315.792381] Bluetooth: hci3: command tx timeout
[  315.793385] Bluetooth: hci4: command tx timeout
[  315.984009] Bluetooth: hci5: command tx timeout
[  316.046531] Bluetooth: hci6: command tx timeout
[  316.301933] Bluetooth: hci7: command tx timeout
[  370.662198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  370.670990] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  370.683384] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  370.691456] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  370.696537] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  370.790232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  370.796355] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  370.801793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  370.807175] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  370.811089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  371.055769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  371.058613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  371.062599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  371.070977] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  371.075452] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  371.164753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  371.181444] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  371.206491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  371.221343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  371.256378] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  371.263787] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  371.266744] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  371.269608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  371.275530] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  371.282664] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  371.294380] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  371.303038] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  371.305867] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  371.314665] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  371.325528] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  371.610638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  371.613662] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  371.617272] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  371.623551] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  371.627336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  371.942763] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  371.954298] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  371.966507] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  371.978643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  372.000143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  372.750144] Bluetooth: hci0: command tx timeout
[  372.877920] Bluetooth: hci1: command tx timeout
[  373.133907] Bluetooth: hci2: command tx timeout
[  373.326206] Bluetooth: hci3: command tx timeout
[  373.390056] Bluetooth: hci7: command tx timeout
[  373.454147] Bluetooth: hci6: command tx timeout
[  374.157916] Bluetooth: hci5: command tx timeout
[  374.349990] Bluetooth: hci4: command tx timeout
[  374.799147] Bluetooth: hci0: command tx timeout
[  374.926889] Bluetooth: hci1: command tx timeout
[  375.182228] Bluetooth: hci2: command tx timeout
[  375.373892] Bluetooth: hci3: command tx timeout
[  375.438135] Bluetooth: hci7: command tx timeout
[  375.504022] Bluetooth: hci6: command tx timeout
[  376.206077] Bluetooth: hci5: command tx timeout
[  376.398064] Bluetooth: hci4: command tx timeout
[  376.845925] Bluetooth: hci0: command tx timeout
[  376.974346] Bluetooth: hci1: command tx timeout
[  377.230185] Bluetooth: hci2: command tx timeout
[  377.422864] Bluetooth: hci3: command tx timeout
[  377.486887] Bluetooth: hci7: command tx timeout
[  377.549906] Bluetooth: hci6: command tx timeout
[  378.254131] Bluetooth: hci5: command tx timeout
[  378.445979] Bluetooth: hci4: command tx timeout
[  378.893893] Bluetooth: hci0: command tx timeout
[  379.021917] Bluetooth: hci1: command tx timeout
[  379.278750] Bluetooth: hci2: command tx timeout
[  379.470099] Bluetooth: hci3: command tx timeout
[  379.535853] Bluetooth: hci7: command tx timeout
[  379.598451] Bluetooth: hci6: command tx timeout
[  380.301999] Bluetooth: hci5: command tx timeout
[  380.493875] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
06:10:41  Registers:
info registers vcpu 0
RAX=ffffffff87a381c8 RBX=ffff88802fe28000 RCX=0000000000000200 RDX=268a623779737364
RSI=ffff88802fe28a80 RDI=ffff88802fe28a58 RBP=0000000000000000 RSP=ffff88802474f378
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000026de2
R12=ffff88802fe28a80 R13=0000000000000000 R14=0000000000000001 R15=ffff88802fe28a58
RIP=ffffffff81516cb4 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe2f00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000565549c81080 CR3=00000000153b2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000000000ff000000000000ff000000
XMM02=0000000000ff00000000000000000000 XMM03=0000000000ff00000000000000000000
XMM04=00000000ff000000000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff8640ec18 RBX=0000000000000001 RCX=ffffffff817afc36 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8640ec10 RBP=ffff888008c4b780 RSP=ffff888009707be8
R8 =0000000000000000 R9 =fffffbfff0c81d82 R10=ffffffff8640ec17 R11=0000000000000000
R12=0000000000000200 R13=0000000000000001 R14=0000000000000000 R15=ffff88800d77a378
RIP=ffffffff81adf6ca RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe5800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe704b1c78 CR3=00000000350a6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000