Warning: Permanently added '[localhost]:44889' (ECDSA) to the list of known hosts.
2025/04/27 10:54:00 fuzzer started
2025/04/27 10:54:01 dialing manager at localhost:46629
syzkaller login: [   93.922536] cgroup: Unknown subsys name 'net'
[   94.080332] cgroup: Unknown subsys name 'cpuset'
[   94.124903] cgroup: Unknown subsys name 'rlimit'
2025/04/27 10:54:19 syscalls: 201
2025/04/27 10:54:19 code coverage: enabled
2025/04/27 10:54:19 comparison tracing: enabled
2025/04/27 10:54:19 extra coverage: enabled
2025/04/27 10:54:19 setuid sandbox: enabled
2025/04/27 10:54:19 namespace sandbox: enabled
2025/04/27 10:54:19 Android sandbox: enabled
2025/04/27 10:54:19 fault injection: enabled
2025/04/27 10:54:19 leak checking: enabled
2025/04/27 10:54:19 net packet injection: enabled
2025/04/27 10:54:19 net device setup: enabled
2025/04/27 10:54:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/27 10:54:19 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/27 10:54:19 USB emulation: enabled
2025/04/27 10:54:19 hci packet injection: enabled
2025/04/27 10:54:19 wifi device emulation: enabled
2025/04/27 10:54:19 802.15.4 emulation: enabled
2025/04/27 10:54:19 fetching corpus: 0, signal 0/0 (executing program)
2025/04/27 10:54:20 starting 8 fuzzer processes
10:54:20 executing program 0:
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x8041)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x28}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4000005)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b40)={&(0x7f0000001780)=@getsa={0x390, 0x12, 0x1, 0x70bd2c, 0x25dfdbfb, {@in=@private=0xa010101, 0x4d4, 0x2, 0xff}, [@XFRMA_SET_MARK={0x8, 0x1d, 0xff}, @migrate={0x180, 0x11, [{@in6=@empty, @in6=@mcast2, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x1, 0x0, 0x0, 0x2, 0x2}, {@in=@loopback, @in=@private=0xa010102, @in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x33, 0x3, 0x0, 0x3501, 0x2, 0xa}, {@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x21}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x32, 0x1, 0x0, 0x0, 0xa, 0x2}, {@in=@empty, @in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x6c, 0x3, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@mcast1, @in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in6=@mcast1, 0xff, 0x0, 0x0, 0x3503, 0x2, 0xa}]}, @address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@empty, 0xa, 0x8, 0x80}}, @mark={0xc, 0x15, {0x223, 0x6fc1}}, @algo_auth={0xfe, 0x1, {{'blake2b-160-generic\x00'}, 0x5b0, "db6797c4ab6032f4a075794304200f6444a1ea109dc44d8bf363b69e25485a2fd80560061eda0160f287ef4dbf2acd428a1abb0d02da35534b230a62635a71e8c6a47987a0a16e84f1e1657dde727e4a45d149e525e746c5d2b1067aa7e86c36542124e4a90907384fb1238bd70e1f1cf1060033b5866aadb9838a9787ec24c6881d3ddafb73d001ea75be0df72dc16e6c7e90661f320292e12aca078fdb6d7d6becd934f0859cd539c0014132994e8f38a3f79cb27c"}}, @sec_ctx={0x7e, 0x8, {0x7a, 0x8, 0x0, 0x7, 0x72, "7f875adf3453fb4f7eb09e5f8c834552dff350a03b1f4555924ddb36c346a47a1d5895aaf219e94bec91ad3cdb22bfddb03556a00a9ca04533033152ba58adb8143d192973c8a3426a6e8091536cabc61c444db334cd08ca2355ec4997c448b8a6640e0606ed50eeb187aabccf3abfd7171f"}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010100, @in=@private=0xa010102, 0x0, 0xa}}]}, 0x390}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4c000)
ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00'})
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER(r1, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x6c, 0x3ed, 0x300, 0x70bd29, 0x25dfdbfd, "4a28a28d6620c87caa24e1987963ea7067e0e780339ded8a681d4a3782ad01603c1324de22c944f3e32e697cd28b7234e664d7e2d923c0ee29cac744f05f0c99cec364c9e9465097febd7ee0b2935a2bb560514f694de0f23c", ["", "", "", "", "", "", "", "", ""]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x4000000)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x18, 0x3f9, 0x220, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000094)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001e40), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x100, 0x20}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001fc0), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002000)={<r5=>0xffffffffffffffff})
r6 = socket(0x29, 0x5, 0x5)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x78, r4, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x44d}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff00000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040040}, 0x80)
sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002240)={&(0x7f0000002180)={0xc0, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7c4c}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xbcb}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0xc0}}, 0x8000)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002300), r3)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x24000080}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x48, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c084}, 0x4001)

10:54:20 executing program 1:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8004}, 0x40000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x400c000}, 0x4040004)
ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x1)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xe880}, 0x20008000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80c9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c850}, 0x1)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x700, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x40}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40010)
r9 = syz_genetlink_get_family_id$team(&(0x7f00000009c0), 0xffffffffffffffff)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000a00)={@loopback, @local, <r10=>0x0}, &(0x7f0000000a40)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000a80)={'batadv0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000dc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x2b8, r9, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5d}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x40000}, 0x80011)

10:54:20 executing program 2:
read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x6)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'team0\x00', <r0=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40081}, 0x40488d0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001180)='$+/)\a/&\xff--(]\x00', 0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc107}, 0x40)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r1)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f00000017c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001780)={&(0x7f0000001380)={0x3dc, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x3ac, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7800}, @device_a, @broadcast, @from_mac=@device_b, {0xf, 0x2}}, @a_msdu=[{@device_a, @device_a, 0x9c, "36c272d2de5d7dca3251577ef143178c37c23b3cd159d1fd9d0f5f92c00fc2e6d70b71609fe3434729d0a13ceb453e66e6875511a2740a317ee06596ceba86ee77554954c98917e0aae0ba79f14175033ad3cd2b44979e1fa34e6becfa2b9cea76d668a136346b5c8217359aafb960355a1305b0e4597b31a9afae540b0ca67588e058d431b3085c88ca26a223f33da7a1fb4acaaf670ae77446574a"}, {@device_b, @broadcast, 0xdd, "d0e52efa788126c41c1440859b466eddadd7a5c43cbdbfb05a546a78178e43c4c84dbc80fc6f69fa38e707d161c2151afcda796b6ab45f66a0da8ea883fa98ddb83c83494f9ebe2e235cf52747970dd7035471957581b24aab62c069e795bb60357e8d1dd45e8d882550ae3e95d73e61c75fd0cfe1ffda86ec00aed0739378a69bb6e7b7baa4e14181e1dda59c7a66e90304d6b9bd38ddd3d74254e0a86735f4508eab08fcf1745408b1658dee8bdaba0e5be1b217138df8ff9f4035bd405586219d272ef761335974c37af67b1ad3e23e547c96514d834b6c33b57a90"}, {@device_a, @device_b, 0xff, "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"}, {@broadcast, @device_b, 0xd9, "987654eda91efab8f7a3cba010797cc111fefb05c5e33fd2982ab71bb2f54576fd06fca62da65b841571726604635614370e153b2d815366e34e77876bde0c9acc498f1016469508c19eb949ffb36deafff5b29873a0662f551802fd8bbc9e46e65557288d7028baf3c2c00cbfa2750e0d5b18709cea7529a791ad982630c83da014e29dc5b5388bfebc9804a0f614fd22b292698f8772e442927eee6a4974fe468be7f2046765909842e4612d653f55bf14dff36720ba22e2f63ec7085a78c6cf98ca09d8fe22affa242abdbe86808e3666539e597fdcc01b"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x5}, @broadcast, @from_mac=@device_b}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x40851}, 0x20004000)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
syz_genetlink_get_family_id$team(&(0x7f0000001800), r1)
sendto$unix(0xffffffffffffffff, &(0x7f0000001840)="d2caad523813fc650c5903f6059ce663649bd99c920f8d325ab8479083d9b623fc6e39c58dcb040130591e18b6c2c691d6524c0b9e9052b694ec059f24c71cbf4a199227762ebae9d9f962d2090c429c825e", 0x52, 0x28000001, &(0x7f00000018c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000001e00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001980)={0x430, 0x3f4, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0xd, [0x80000000, 0x101, 0xfffffffd, 0x2, 0x2, 0xff, 0x8000, 0x40, 0x6, 0x9, 0x200, 0xfffff3a3, 0x4, 0x7ff, 0x4, 0x45, 0x1, 0x5, 0x2, 0x800, 0x7, 0x9, 0x3, 0x2, 0x3, 0x7f, 0x1000, 0x3, 0x28000000, 0x8, 0x1, 0x6, 0x79, 0x8, 0x4, 0x81, 0x6, 0x7, 0xcf97, 0x9, 0x101, 0x15, 0x4, 0x1, 0x80000000, 0x99, 0x6, 0x200, 0x4, 0xa3, 0x1, 0x7fffffff, 0x9, 0x8000, 0x21, 0x3ff, 0x8, 0x8, 0x2, 0x6, 0x6, 0x7, 0x2, 0x7f], [0xd4b, 0x1, 0xfff, 0xffffffc1, 0x1, 0x8, 0x101, 0x2, 0x5, 0x100, 0x7, 0x101, 0x200, 0x7ff, 0xffff3693, 0x10001, 0x40, 0x80000001, 0x6, 0x96, 0x3, 0x9, 0x2, 0xfffffffb, 0x80, 0x6, 0x5, 0x0, 0x80, 0x4, 0x8, 0x81, 0x6a35, 0x9, 0x1000, 0x2, 0x6, 0x2, 0x81, 0x6, 0x9, 0x8, 0x9, 0x127, 0x6, 0x8001, 0x3, 0x100, 0x6, 0x630230fa, 0x683, 0x0, 0x7, 0x8000, 0x8, 0x80, 0x4, 0x401, 0x0, 0x47, 0x4, 0x3, 0xffffff53, 0x6675], [0x4, 0x1, 0x4, 0x702, 0x2, 0x2, 0x8, 0xffffffff, 0x0, 0x1000, 0x40, 0x0, 0x5, 0x6, 0x1ff, 0x9, 0x8, 0x5, 0x10000000, 0x5, 0x5, 0x6, 0x5, 0x4, 0xd7, 0x5, 0x3, 0x4, 0x9, 0x0, 0x9, 0x5, 0x1b, 0x0, 0x8, 0x88c, 0x1d1, 0x1, 0xfffffffb, 0x62, 0x1, 0x6, 0x8, 0x1, 0x20, 0x9, 0x9, 0xfff, 0x8, 0x7, 0x2, 0x19, 0x9, 0x9, 0x7fffffff, 0x0, 0x7, 0x1, 0x3, 0x5, 0x4, 0x3dfc, 0x7ff, 0x4], [0x0, 0x10001, 0x10001, 0x7, 0x8, 0x5, 0x1, 0x1, 0xfffffffd, 0x1, 0x27a, 0xffffaf8c, 0x8000, 0x2, 0x0, 0x1, 0x9, 0x6, 0x8, 0x7fff, 0x1, 0xffffffe1, 0x0, 0x3, 0x7ff, 0x3, 0x10000, 0x8000, 0x1, 0x1f, 0x80000001, 0x1, 0x6, 0x7ff, 0x400, 0x7f, 0x3, 0xecf7, 0x7, 0x47, 0x7, 0xc487, 0x400, 0x31f4edcd, 0x10000, 0x6, 0x5, 0x3f, 0x6, 0x4, 0x40, 0x5, 0x4, 0x100, 0x9, 0xffffffff, 0x0, 0x3f, 0x6, 0xcc, 0x10001, 0x1, 0x800, 0x6], 0xe, [':)*\x00', '*\x00', ':$\x00', '!\'-@\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x40}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r2)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x35, 0x1a}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x17}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24004080}, 0x8010)
getpeername$unix(0xffffffffffffffff, &(0x7f00000020c0), &(0x7f0000002140)=0x6e)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x4480320c}, 0xc, &(0x7f0000002480)={&(0x7f00000021c0)=@newae={0x2a4, 0x1e, 0x800, 0x70bd25, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0xa, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x7, 0x3507}, [@sec_ctx={0xfc, 0x8, {0xf8, 0x8, 0x1, 0x6, 0xf0, "6277aa7db673eaa1e87f29597f6c51083cf88d3d09b7ef01aa70862c8b69d7832ae51cfbb22a34b5578ec8bf9417d5cc41f93bb01b205f2e8ec9b22701a27225d7e5fe6308b6961cd8ae2f4be3674c5c108fad1f468368c345ca6fc7ad901a4bc0151982f4beea1555859875a79c69b869d11e5b022a65826fb775735ac82d8d46c227b78397bfb7c01816dfe2fee834e6a086cac701881f9d8934ef65e8f8b710432eebb26fb5f28dbf98760e6f4fa85c78504bd6f356748d41574ab61d68f95f4fc33741d42f5c76eca7a0baf7a0317e4bf466652914ed76610fe193d9a295c5f85814053922f08dab8d1b0ccd9c9e"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e21, @in6=@local}}, @proto={0x5, 0x19, 0xff}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x800}, @extra_flags={0x8, 0x18, 0xff}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in6=@local}}, @algo_comp={0x81, 0x3, {{'lzjh\x00'}, 0x1c8, "bb0ee610156a8c21ead5e94e62768c3f7dcf810423f521b168c81b1fbf1f44e40a763c8e39f963ab7ece61cc41407bb2d1a468d50df72caaae"}}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x2a}}, @algo_aead={0x78, 0x12, {{'gcm-aes-ce\x00'}, 0x160, 0x80, "f5a304f93883b0989e9502d24cc560d8c9eba78504651842d6b9dd5e784185afa6a20fd0f05d2c65d8e34bcd"}}, @extra_flags={0x8}]}, 0x2a4}}, 0x20000040)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002600)={0x94, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0)

10:54:20 executing program 3:
ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000))
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, r0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0xe}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x30000100}, 0x8080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3e, 0x12}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x79d92792abe1e800}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9c}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@rand_addr, @loopback, <r4=>0x0}, &(0x7f0000000440)=0xc)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xa312cef567ee4413}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004880}, 0x20000000)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x39c}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0xc084)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, r0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa0}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8d0}, 0xc000)
r5 = socket(0xf, 0x2, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'team0\x00', <r6=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000008c0)={@multicast2, @broadcast, <r7=>0x0}, &(0x7f0000000900)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000bc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)={0x214, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1a}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xba}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x801}, 0x814)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40), r5)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf228}]}, 0x1c}}, 0x810)
socket(0x1e, 0x2, 0x1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, 0x0, 0x110, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x259}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20040015)

[  113.297641] audit: type=1400 audit(1745751260.942:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:54:20 executing program 4:
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0x6e, &(0x7f0000000100)=[{0xfffffffffffffffd}, {&(0x7f0000000080)=""/111, 0x6f}], 0x2, &(0x7f0000000140)=[@rights={{0x30, 0x1, 0x1, [<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x10073)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='{*(,-\x00', &(0x7f0000000280)='&}\x00', 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r11 = fsopen(&(0x7f0000000300)='aio\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH(r11, 0x3, &(0x7f0000000340)='{*(,-\x00', &(0x7f0000000380)='./file0\x00', r0)
fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000003c0)='&h\x00', 0x0, r3)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000)
ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f0000000500))
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbd}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20008000)
syz_genetlink_get_family_id$team(&(0x7f0000000640), r1)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r10)
sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r12, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x14}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044020}, 0x40000)
ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f0000000900)={0x1, 0xfffffeff, 0xffffffff, 0xead5, 0x80, 0xe2})
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = socket(0x2b, 0x5, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)={<r15=>0xffffffffffffffff})
r16 = socket(0x27, 0x4, 0xffff)
sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r14}, {0x8, 0x1, r4}, {0x8, 0x1, r8}, {0x8, 0x1, r15}, {0x8, 0x1, r16}, {0x8, 0x1, r10}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x4)

10:54:21 executing program 6:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x434, 0x3f4, 0x400, 0x70bd2a, 0x25dfdbff, {0x6, 0x0, 0x21, [0x7fff, 0x3b4d, 0x7, 0xd8, 0x1c, 0x7, 0x2, 0xb36a, 0x2, 0x1f, 0x80000000, 0x3ff, 0x8000, 0xc6, 0x6, 0x8000, 0x80, 0x7, 0xf6, 0x3800, 0x7f, 0x6, 0x1, 0x5, 0x7f3, 0xff, 0x3, 0x9, 0x800, 0x1000, 0x4, 0x9, 0x10001, 0x2, 0x7628, 0x1ff, 0x8, 0x7, 0xfff, 0x7, 0x3, 0xce94, 0x7, 0x9, 0xfffffffa, 0x8, 0x1, 0x3, 0x1dc5, 0x1, 0x7, 0xffff5a15, 0x5, 0x8, 0x1ff, 0x4, 0xf0fb, 0x6, 0x2, 0x80000000, 0x1, 0x8, 0x6, 0x4], [0x1f, 0x2, 0x1ff, 0x75, 0x7, 0x5, 0x0, 0x400, 0x2, 0x18fe0, 0x5, 0x692, 0x4, 0xffffae29, 0x1, 0xbb, 0xffff, 0x3, 0x80000001, 0x4, 0x1ff, 0xffffff81, 0x6, 0x0, 0x0, 0x0, 0x8e3, 0x5, 0xfff, 0x9, 0x7fff, 0x2495166f, 0xfff, 0x2, 0x0, 0xe0, 0xffff, 0xc61, 0x3f, 0x7, 0x0, 0x0, 0x8001, 0x1000, 0x85, 0x2, 0x3, 0xffff, 0x0, 0x617, 0x2eb0, 0xffffffff, 0x7f, 0x200, 0xffffffff, 0x9, 0x8, 0x1, 0x5, 0xffffffff, 0x7, 0x61be8e23, 0x1, 0x8], [0x6, 0x10001, 0x5, 0x0, 0x6, 0x0, 0x7d77, 0x100, 0x10001, 0x4d, 0x80000000, 0x78, 0x2, 0x10000, 0x6, 0x2, 0x5, 0x6cf2, 0x80, 0x4, 0x8, 0x7f, 0x101, 0x10001, 0x1, 0x45ad, 0x7, 0x8, 0x0, 0x9, 0x0, 0x3, 0x81, 0x1e, 0x4, 0x3, 0xffffff7f, 0x7, 0x5, 0x3ff, 0x80000000, 0x1, 0x1, 0x20, 0x4f388e94, 0x2, 0x3, 0x7, 0xf456, 0x1, 0x1, 0x80000001, 0x8, 0x10001, 0x200, 0x5, 0x3, 0x80000001, 0x100, 0x2, 0x1000, 0x7, 0x2, 0x5], [0x100, 0x100, 0x7, 0xa9, 0x0, 0x80000001, 0x1, 0x1f, 0x5, 0x3ff, 0x7fff, 0x9, 0x400, 0x65f, 0x6, 0xfffffff8, 0x6, 0x7fc00, 0x9, 0x1, 0x0, 0x522, 0x3, 0x8, 0xfffffff9, 0x800, 0x12e4de43, 0x7a, 0x0, 0x1f, 0x1, 0x7fffffff, 0x1, 0x80, 0x0, 0x6, 0x0, 0x8001, 0x4, 0x4, 0x3, 0x8, 0x0, 0x4e8, 0x9, 0x0, 0x0, 0x8, 0xffffffff, 0xd152, 0x1f, 0x10001, 0x9, 0x2, 0x1ff, 0x80000000, 0x2, 0x7fffffff, 0x8, 0x2, 0x4, 0x1c29, 0x4, 0x4], 0x12, ['+\x00', 'batadv0\x00', 'batadv0\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f6, 0x800, 0x70bd2b, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x703}]}, 0x1c}}, 0x40000)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x3fb, 0x200, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1f}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x1)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffeffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x20000000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r3)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r4, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd9}, {0x6, 0x16, 0xfff7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xf801}, {0x8, 0xb, 0x1f06}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4)
ioctl$CDROM_DEBUG(0xffffffffffffffff, 0x5330, 0x1)
recvmsg$unix(r2, &(0x7f0000002640)={&(0x7f0000001240)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f00000012c0)=""/252, 0xfc}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/130, 0x82}], 0x3, &(0x7f00000024c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}, 0x40000040)
sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40)
recvmsg$unix(r7, &(0x7f0000002a80)={&(0x7f0000002780)=@abs, 0x6e, &(0x7f0000002900)=[{&(0x7f0000002800)=""/242, 0xf2}], 0x1, &(0x7f0000002940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}, 0x0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b00), r6)
sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000002c80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002c40)={&(0x7f0000002b40)={0xc8, r9, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb73}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x41)

10:54:21 executing program 5:
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe4, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x31}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8041}, 0x4004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xee4}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xe34c877323974348}, 0x48800)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x844}, 0x4041051)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040404}, 0x4004015)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4894)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1)
sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x14}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8004)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xb0, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xaa}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x80)
pipe2(&(0x7f0000000a80)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4800)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r1)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x81)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffff167}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x6}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x60f315c64c3d9379)
getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000d80)={@remote, @multicast2, <r7=>0x0}, &(0x7f0000000dc0)=0xc)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf1bc}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4b}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x3c}}, 0x20000002)

10:54:21 executing program 7:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000080)="a488646628", 0x5)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x86000)
ioctl$CDROMSTOP(r2, 0x5307)
ioctl$CDROM_DISC_STATUS(r1, 0x5327)
r4 = socket(0x22, 0x6, 0x3)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe4, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x7e}}}}, [@NL80211_ATTR_TESTDATA={0xbc, 0x45, "eb50c00d8ae600820210798a1c5cf1ed24faac317d10b79102a9f215807db369e81919e6da8769ca9920490fd565cd4d423a282851ed585cd4a218505a4fe1faaa179bdb436588a6cca294340ef93be58e2b9fc28d4f1a0a54a4c5d898c5bcb25014c0c91c2c4f308e63796112dc3801fc1d29fe5d1528c7ca79a36f19f4c28833adb42582ca43e018f8381b18ba80494186048d8ca252e2841b15397c7853fda73ff5f79bed4c39ebbd94d393ad46d8af2db32d284c86f5"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x40c1)
ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x2})
r6 = fsopen(&(0x7f0000001840)='logfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0)
keyctl$join(0x1, &(0x7f0000001880)={'syz', 0x3})
syz_80211_inject_frame(&(0x7f00000018c0), &(0x7f0000001900)=@ctrl_frame=@cf_end={{}, {}, @device_a, @from_mac=@device_b}, 0x10)
ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000001940)={0xeb, 0x7, 0x9, 0x7f, 0x9, 0xc3})
ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f00000023c0)={0x1, 0x2, 0x6, 0xc, 0x80, 0x6, @lba=0x1ff, @lba})
r7 = socket(0x1a, 0x2, 0x5)
sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000002580)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002540)={&(0x7f0000002440)={0xcc, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x804}, 0x40000)
r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000004900), 0xa000, 0x0)
ioctl$CDROMSEEK(r8, 0x5316, &(0x7f0000004940)={0xae, 0x20, 0x7, 0x1f, 0x5, 0x1})

[  114.749952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  114.751393] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  114.753144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  114.754462] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  114.757505] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  114.760324] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  114.765221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  114.771039] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  114.783970] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  114.795373] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  114.805623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  114.812646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  114.816423] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  114.821577] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  114.825872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  114.828237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  114.852439] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  114.854604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  114.858472] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  114.865975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  114.892665] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  114.905732] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  114.925304] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  114.939521] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  114.947295] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  114.950131] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  114.956821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  114.959084] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  114.966783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  114.969552] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  114.972749] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  114.982290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.035541] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  115.036639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  115.039583] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  115.060135] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  115.081379] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  115.097370] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  115.112425] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  115.134553] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  116.833626] Bluetooth: hci1: command tx timeout
[  116.833638] Bluetooth: hci0: command tx timeout
[  116.897153] Bluetooth: hci3: command tx timeout
[  116.961289] Bluetooth: hci2: command tx timeout
[  117.026231] Bluetooth: hci4: command tx timeout
[  117.089464] Bluetooth: hci6: command tx timeout
[  117.089509] Bluetooth: hci5: command tx timeout
[  117.217269] Bluetooth: hci7: command tx timeout
[  118.881517] Bluetooth: hci0: command tx timeout
[  118.882322] Bluetooth: hci1: command tx timeout
[  118.945276] Bluetooth: hci3: command tx timeout
[  119.010316] Bluetooth: hci2: command tx timeout
[  119.074769] Bluetooth: hci4: command tx timeout
[  119.137313] Bluetooth: hci6: command tx timeout
[  119.137755] Bluetooth: hci5: command tx timeout
[  119.265358] Bluetooth: hci7: command tx timeout
[  120.929434] Bluetooth: hci1: command tx timeout
[  120.929942] Bluetooth: hci0: command tx timeout
[  120.993881] Bluetooth: hci3: command tx timeout
[  121.057059] Bluetooth: hci2: command tx timeout
[  121.123117] Bluetooth: hci4: command tx timeout
[  121.185073] Bluetooth: hci6: command tx timeout
[  121.185575] Bluetooth: hci5: command tx timeout
[  121.313100] Bluetooth: hci7: command tx timeout
[  122.977260] Bluetooth: hci0: command tx timeout
[  122.977774] Bluetooth: hci1: command tx timeout
[  123.041082] Bluetooth: hci3: command tx timeout
[  123.105070] Bluetooth: hci2: command tx timeout
[  123.169091] Bluetooth: hci4: command tx timeout
[  123.236045] Bluetooth: hci5: command tx timeout
[  123.236548] Bluetooth: hci6: command tx timeout
[  123.361264] Bluetooth: hci7: command tx timeout
[  175.677544] syz-executor.3 (283) used greatest stack depth: 24680 bytes left
[  177.969474] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.972585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.977685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.983715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.988948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  178.057609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  178.061038] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  178.064693] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  178.069495] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  178.072415] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  178.161242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  178.165541] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  178.169812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  178.189922] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  178.192817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  178.202521] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  178.216407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  178.217689] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  178.246264] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  178.281952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  178.302506] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  178.307231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  178.317661] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  178.330263] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  178.348730] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  178.378179] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  178.398479] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  178.446275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  178.449818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  178.493752] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  178.496530] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  178.498560] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  178.505146] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  178.505890] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  178.508615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  178.514429] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  178.515317] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  178.532725] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  178.538294] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  178.548281] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  180.066099] Bluetooth: hci0: command tx timeout
[  180.130407] Bluetooth: hci1: command tx timeout
[  180.322189] Bluetooth: hci2: command tx timeout
[  180.386223] Bluetooth: hci3: command tx timeout
[  180.450053] Bluetooth: hci4: command tx timeout
[  180.641203] Bluetooth: hci6: command tx timeout
[  180.641270] Bluetooth: hci5: command tx timeout
[  180.641911] Bluetooth: hci7: command tx timeout
[  182.113117] Bluetooth: hci0: command tx timeout
[  182.177222] Bluetooth: hci1: command tx timeout
[  182.369215] Bluetooth: hci2: command tx timeout
[  182.433270] Bluetooth: hci3: command tx timeout
[  182.497067] Bluetooth: hci4: command tx timeout
[  182.689187] Bluetooth: hci7: command tx timeout
[  182.690181] Bluetooth: hci5: command tx timeout
[  182.690611] Bluetooth: hci6: command tx timeout
[  184.161128] Bluetooth: hci0: command tx timeout
[  184.228023] Bluetooth: hci1: command tx timeout
[  184.418146] Bluetooth: hci2: command tx timeout
[  184.481273] Bluetooth: hci3: command tx timeout
[  184.545074] Bluetooth: hci4: command tx timeout
[  184.740029] Bluetooth: hci6: command tx timeout
[  184.740544] Bluetooth: hci5: command tx timeout
[  184.740972] Bluetooth: hci7: command tx timeout
[  186.209061] Bluetooth: hci0: command tx timeout
[  186.274394] Bluetooth: hci1: command tx timeout
[  186.466046] Bluetooth: hci2: command tx timeout
[  186.530212] Bluetooth: hci3: command tx timeout
[  186.593495] Bluetooth: hci4: command tx timeout
[  186.786426] Bluetooth: hci7: command tx timeout
[  186.786932] Bluetooth: hci5: command tx timeout
[  186.788013] Bluetooth: hci6: command tx timeout
[  240.183863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  240.190137] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  240.194159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  240.203282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  240.215893] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  240.252966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  240.257785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  240.261975] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  240.267533] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  240.275327] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  240.308191] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  240.314838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  240.317254] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  240.324531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  240.334884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  240.452608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  240.468294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  240.471857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  240.498587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  240.505683] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  240.521556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  240.530879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  240.533755] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  240.538857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  240.540501] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  240.543521] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  240.604331] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  240.608533] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  240.611170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  240.616198] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  240.619569] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  240.621706] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  240.628358] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  240.637183] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  240.659321] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  240.667779] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  240.681648] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  240.696946] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  240.735634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  240.747499] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  242.274582] Bluetooth: hci0: command tx timeout
[  242.337311] Bluetooth: hci1: command tx timeout
[  242.401528] Bluetooth: hci2: command tx timeout
[  242.593280] Bluetooth: hci3: command tx timeout
[  242.723174] Bluetooth: hci4: command tx timeout
[  242.723410] Bluetooth: hci5: command tx timeout
[  242.850174] Bluetooth: hci6: command tx timeout
[  242.850202] Bluetooth: hci7: command tx timeout
[  244.321063] Bluetooth: hci0: command tx timeout
[  244.385269] Bluetooth: hci1: command tx timeout
[  244.449227] Bluetooth: hci2: command tx timeout
[  244.641055] Bluetooth: hci3: command tx timeout
[  244.769071] Bluetooth: hci4: command tx timeout
[  244.769122] Bluetooth: hci5: command tx timeout
[  244.897471] Bluetooth: hci7: command tx timeout
[  244.897564] Bluetooth: hci6: command tx timeout
[  246.369323] Bluetooth: hci0: command tx timeout
[  246.435148] Bluetooth: hci1: command tx timeout
[  246.497050] Bluetooth: hci2: command tx timeout
[  246.690055] Bluetooth: hci3: command tx timeout
[  246.817164] Bluetooth: hci5: command tx timeout
[  246.818208] Bluetooth: hci4: command tx timeout
[  246.945166] Bluetooth: hci7: command tx timeout
[  246.946409] Bluetooth: hci6: command tx timeout
[  248.417050] Bluetooth: hci0: command tx timeout
[  248.481286] Bluetooth: hci1: command tx timeout
[  248.548070] Bluetooth: hci2: command tx timeout
[  248.738102] Bluetooth: hci3: command tx timeout
[  248.865076] Bluetooth: hci4: command tx timeout
[  248.865588] Bluetooth: hci5: command tx timeout
[  248.994086] Bluetooth: hci6: command tx timeout
[  248.994606] Bluetooth: hci7: command tx timeout
[  300.585608] syz-executor.2 (5452) used greatest stack depth: 24328 bytes left
[  302.778957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  302.787067] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  302.791528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  302.799114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  302.807881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  303.035539] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  303.038625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  303.047669] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  303.054886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  303.066312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  303.068503] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  303.078596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  303.086601] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  303.099847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  303.105064] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  303.158651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  303.179506] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  303.184402] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  303.198143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  303.216835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  303.221313] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  303.223629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  303.229421] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  303.232391] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  303.235406] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  303.249617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  303.251870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  303.259230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  303.262200] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  303.274607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  303.337172] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  303.365954] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  303.416509] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  303.425606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  303.445798] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  303.455744] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  303.477186] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  303.492915] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  303.576502] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  303.635581] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  304.865382] Bluetooth: hci0: command tx timeout
[  305.122030] Bluetooth: hci1: command tx timeout
[  305.185243] Bluetooth: hci2: command tx timeout
[  305.313100] Bluetooth: hci5: command tx timeout
[  305.313132] Bluetooth: hci3: command tx timeout
[  305.377103] Bluetooth: hci4: command tx timeout
[  305.634225] Bluetooth: hci6: command tx timeout
[  305.761226] Bluetooth: hci7: command tx timeout
[  306.915169] Bluetooth: hci0: command tx timeout
[  307.169215] Bluetooth: hci1: command tx timeout
[  307.233137] Bluetooth: hci2: command tx timeout
[  307.361245] Bluetooth: hci5: command tx timeout
[  307.362243] Bluetooth: hci3: command tx timeout
[  307.425403] Bluetooth: hci4: command tx timeout
[  307.682603] Bluetooth: hci6: command tx timeout
[  307.811621] Bluetooth: hci7: command tx timeout
[  308.961107] Bluetooth: hci0: command tx timeout
[  309.218435] Bluetooth: hci1: command tx timeout
[  309.282046] Bluetooth: hci2: command tx timeout
[  309.409339] Bluetooth: hci5: command tx timeout
[  309.409600] Bluetooth: hci3: command tx timeout
[  309.475096] Bluetooth: hci4: command tx timeout
[  309.729105] Bluetooth: hci6: command tx timeout
[  309.857115] Bluetooth: hci7: command tx timeout
[  311.009291] Bluetooth: hci0: command tx timeout
[  311.266050] Bluetooth: hci1: command tx timeout
[  311.330070] Bluetooth: hci2: command tx timeout
[  311.457202] Bluetooth: hci3: command tx timeout
[  311.458778] Bluetooth: hci5: command tx timeout
[  311.521140] Bluetooth: hci4: command tx timeout
[  311.777174] Bluetooth: hci6: command tx timeout
[  311.905283] Bluetooth: hci7: command tx timeout
[  365.372935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  365.379267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  365.385410] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  365.398933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  365.407711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  365.443276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  365.448681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  365.451930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  365.462552] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  365.469238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  365.634953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  365.644697] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  365.659492] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  365.668542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  365.680455] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  365.687711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  365.690572] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  365.699698] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  365.705616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  365.713642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  365.731344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  365.762510] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  365.771526] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  365.779279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  365.783499] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  365.814805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  365.833838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  365.843949] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  365.858600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  365.885720] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  365.895482] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  365.898949] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  365.942424] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  365.972961] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  365.985776] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  365.991473] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  366.008676] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  366.020812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  366.051761] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  366.058630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  367.457160] Bluetooth: hci0: command tx timeout
[  367.523397] Bluetooth: hci1: command tx timeout
[  367.778350] Bluetooth: hci2: command tx timeout
[  367.905347] Bluetooth: hci4: command tx timeout
[  367.970346] Bluetooth: hci3: command tx timeout
[  367.971502] Bluetooth: hci6: command tx timeout
[  368.161189] Bluetooth: hci5: command tx timeout
[  368.290571] Bluetooth: hci7: command tx timeout
[  369.505506] Bluetooth: hci0: command tx timeout
[  369.570677] Bluetooth: hci1: command tx timeout
[  369.826166] Bluetooth: hci2: command tx timeout
[  369.953760] Bluetooth: hci4: command tx timeout
[  370.017621] Bluetooth: hci3: command tx timeout
[  370.018679] Bluetooth: hci6: command tx timeout
[  370.209111] Bluetooth: hci5: command tx timeout
[  370.337690] Bluetooth: hci7: command tx timeout
[  371.554140] Bluetooth: hci0: command tx timeout
[  371.617566] Bluetooth: hci1: command tx timeout
[  371.873167] Bluetooth: hci2: command tx timeout
[  372.001613] Bluetooth: hci4: command tx timeout
[  372.066149] Bluetooth: hci6: command tx timeout
[  372.066946] Bluetooth: hci3: command tx timeout
[  372.257535] Bluetooth: hci5: command tx timeout
[  372.385101] Bluetooth: hci7: command tx timeout
[  373.601245] Bluetooth: hci0: command tx timeout
[  373.665235] Bluetooth: hci1: command tx timeout
[  373.921070] Bluetooth: hci2: command tx timeout
[  374.049068] Bluetooth: hci4: command tx timeout
[  374.114021] Bluetooth: hci3: command tx timeout
[  374.114467] Bluetooth: hci6: command tx timeout
[  374.306274] Bluetooth: hci5: command tx timeout
[  374.433044] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
10:59:29  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffffffff81a84e46 RDX=ffff888026b23780
RSI=ffffffff81a84e54 RDI=0000000000000007 RBP=ffffea0000167580 RSP=ffff88802fdaf8e8
R8 =0000000000000000 R9 =ffffed100d9c7858 R10=0000000000000000 R11=ffff88806ce3c300
R12=ffff8880310e34e8 R13=ffffea0000167580 R14=0000000000000000 R15=00000000000000b3
RIP=ffffffff8172eb60 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8369f10000 CR3=000000002a210000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff88806cf08a50 RCX=ffff88806cf089a4 RDX=1ffff1100d9e1155
RSI=ffffffff85c1bac0 RDI=ffff88806cf08a50 RBP=ffff88806cf08aa8 RSP=ffff88806cf08a38
R8 =0000000000000001 R9 =ffff88806cf08a90 R10=000000000003b0c2 R11=0000000000003787
R12=ffff88806cf08b18 R13=0000000000000000 R14=ffff888033f5b780 R15=ffff888023657e00
RIP=ffffffff813505ce RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f153bd66310 CR3=00000000167da000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000