Warning: Permanently added '[localhost]:26573' (ECDSA) to the list of known hosts.
2025/06/22 15:51:57 fuzzer started
2025/06/22 15:51:57 dialing manager at localhost:33119
syzkaller login: [  102.051733] cgroup: Unknown subsys name 'net'
[  102.211761] cgroup: Unknown subsys name 'cpuset'
[  102.261254] cgroup: Unknown subsys name 'rlimit'
2025/06/22 15:52:21 syscalls: 201
2025/06/22 15:52:21 code coverage: enabled
2025/06/22 15:52:21 comparison tracing: enabled
2025/06/22 15:52:21 extra coverage: enabled
2025/06/22 15:52:21 setuid sandbox: enabled
2025/06/22 15:52:21 namespace sandbox: enabled
2025/06/22 15:52:21 Android sandbox: enabled
2025/06/22 15:52:21 fault injection: enabled
2025/06/22 15:52:21 leak checking: enabled
2025/06/22 15:52:21 net packet injection: enabled
2025/06/22 15:52:21 net device setup: enabled
2025/06/22 15:52:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/22 15:52:21 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/22 15:52:21 USB emulation: enabled
2025/06/22 15:52:21 hci packet injection: enabled
2025/06/22 15:52:21 wifi device emulation: enabled
2025/06/22 15:52:21 802.15.4 emulation: enabled
2025/06/22 15:52:21 fetching corpus: 0, signal 0/0 (executing program)
2025/06/22 15:52:22 starting 8 fuzzer processes
15:52:22 executing program 0:
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x85)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xe1af3023acd6f18e}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8010)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000800)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x300, 0x70bd2b, 0x6, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan1\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000540)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0)
sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "7685313e0e3a18a156f04ae0cda39460"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8000}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0xc8050)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r7, 0x200, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008818)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a00), r0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0)

15:52:22 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x5044}, 0x2010)
r1 = socket(0x2a, 0x1, 0x80)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0xa08, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x4000000)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x7}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004104}, 0x44)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x876dd9f4b47d973f)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r2, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040884}, 0x4000050)
io_setup(0x10000, &(0x7f00000006c0)=<r6=>0x0)
io_cancel(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0xfff9, r0, &(0x7f0000000700)="12e49ef794548a2192fe9cc1fb06dbefd0dc480afbdb0bf1305cfa8fa2f5f408fe72af3177bdb5e046f1761fa1880c1e3974a772be134b532aaeba313617ce4ddfa47ddb5ab336c7ef6a81961b49af2c02c03c259eb8ca16dd18751f723631c01c835cb08448b2718ee3838668ebfb4c085dbcdbc4e39434a41374cf9f8cbfa265c211461f64f672c164f619fd2b072d54e45922", 0x94, 0x6, 0x0, 0x2, r0}, &(0x7f0000000800))
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'ip6gre0\x00', <r8=>r5, 0x29, 0x80, 0x6, 0x9, 0x38, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x40, 0x80, 0x101, 0x8}})
getpeername$packet(r0, &(0x7f0000000940)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000980)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', <r10=>r5, 0x29, 0x7c, 0xff, 0x6, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}, @loopback, 0x1, 0x7800, 0x2, 0x7}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000b80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x98, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x54}, 0x804)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9a}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xe}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x84}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xc}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x40808)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000d00))

15:52:22 executing program 3:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20000800)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x845)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)
r4 = accept4(r2, 0x0, &(0x7f0000000600), 0x80800)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}]}, 0x30}}, 0x4)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3f}}}}, ["", ""]}, 0x20}}, 0x891)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r6)
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10002080}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, 0x0, 0x300, 0x70bd26, 0x7ff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xc}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008014}, 0x4000000)
inotify_init()
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002440)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002400)={&(0x7f0000001840)={0xb9c, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x204, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xc000, 0x9, 0x2, 0x6}, {0x401, 0x40, 0x5, 0x6}, {0x80, 0x8, 0x1, 0x691c}, {0x400, 0xc0, 0x3, 0x6}, {0x3, 0x61, 0xbe, 0x1000}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfe9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x0, 0xfd}, {0x4, 0x9, 0x3, 0x6}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x101, 0x1, 0x1, 0xfffffff9}, {0x20, 0x5, 0x1f, 0x10001}, {0x6, 0x2, 0x7, 0x10}, {0x8, 0x0, 0x1, 0x1}, {0x7, 0x3, 0x7, 0xffff004f}, {0x8000, 0x0, 0x5, 0xbc}]}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3d3f}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xdfb}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xea6, 0xb0, 0x80, 0xfffffffa}, {0x3f, 0xe8, 0xa8, 0x2}, {0x8, 0x1, 0x0, 0x3}, {0x401, 0x3, 0x7}, {0x8001, 0x1f, 0x20, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xb9c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008000)

15:52:22 executing program 1:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80, 0x80800)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1a4, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4004000}, 0x20008081)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x5, 0x31f]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x6, 0x2, 0x1, 0x6]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0xffff]}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), r0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x210000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x47009410}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6b99d60e, 0x2e}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "be3e9e7f56"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "ace1c686"}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "1f"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2dc5f1d81b0aa434a5dad407b0"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x91}, 0x404c000)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x16}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x13}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x5, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a80)={'wlan0\x00'})
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40040, 0x0)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000b40), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'syztnl0\x00', <r7=>0x0, 0x4, 0x3f, 0x80, 0x8000000, 0x45, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x700, 0x80, 0x5, 0xac}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000d80)={'syztnl0\x00', &(0x7f0000000d00)={'ip6_vti0\x00', <r8=>0x0, 0x4, 0x7, 0x0, 0x1, 0x8, @private1, @dev={0xfe, 0x80, '\x00', 0x34}, 0x7800, 0x20, 0xff, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000e40)={'syztnl2\x00', &(0x7f0000000dc0)={'syztnl1\x00', <r9=>0x0, 0x4, 0x3, 0x1, 0x1ff, 0xc, @mcast2, @empty, 0x7, 0x8, 0x6, 0x6}})
sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001180)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000000e80)={0x284, r6, 0xd3182329de0b4147, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x0, 0x8, 0x9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NET_DM_CMD_START(r10, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x14, 0x0, 0x908, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8400}, 0x40000)

15:52:22 executing program 4:
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x14041)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x55}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x10)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x800)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x24}}, 0x68080)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffff55, 0x25}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x8000)
io_uring_setup(0x17f3, &(0x7f0000000740)={0x0, 0xe24f, 0x0, 0x2, 0x52})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x94}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c803)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc844}, 0x40844)
r2 = socket(0x3, 0x1, 0xfff)
syz_genetlink_get_family_id$SEG6(&(0x7f00000009c0), r2)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r2)
sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60004084}, 0x4000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b80), r2)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r5, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}]}, 0x2c}}, 0x4001)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x24008080)

[  127.059327] audit: type=1400 audit(1750607542.946:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
15:52:22 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x17}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xfb}]}, 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x210, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40484)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f580e}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6b6ceb6096de2928aca809bd24"}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "ec65ab6bcad3bd78ec2610af"}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x10)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000005c0), 0x48302, 0x0)
stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2a01000, &(0x7f00000006c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl}, {@mmap}, {@debug={'debug', 0x3d, 0x10000}}, {@msize={'msize', 0x3d, 0x6}}, {@version_9p2000}, {@uname={'uname', 0x3d, '802.15.4 MAC\x00'}}, {@msize={'msize', 0x3d, 0xfffffffffffffffd}}], [{@obj_type={'obj_type', 0x3d, '802.15.4 MAC\x00'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, '}:*'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'wlan1\x00'}}, {@obj_type}, {@euid_lt={'euid<', r5}}, {@uid_eq}]}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0xbe708c4fe2c1157b}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r7, 0x0, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x400c010)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'ip6tnl0\x00', <r8=>r6, 0x2f, 0x8, 0x98, 0xdd, 0x42, @empty, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x1, 0x80, 0x80000000, 0x1}})
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000b00)={0x0, @xdp={0x2c, 0x8, <r9=>r6, 0x2}, @isdn={0x22, 0x81, 0x6, 0x3e, 0xd2}, @phonet={0x23, 0x0, 0xfa, 0x1}, 0xc290, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000ac0)='team_slave_1\x00', 0x18, 0x0, 0x900})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'ip6gre0\x00', <r10=>r6, 0x4, 0xff, 0x61, 0x800, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8, 0x2, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'syztnl0\x00', <r11=>r6, 0x4, 0x1, 0x0, 0x6, 0x8, @remote, @loopback, 0x700, 0x10, 0x800, 0xfffffff9}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000dc0)={'syztnl0\x00', <r12=>0x0, 0x2f, 0x6, 0x7, 0x6, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x20, 0x8, 0x9, 0x1000}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f00)={'ip6_vti0\x00', &(0x7f0000000e80)={'ip6tnl0\x00', <r13=>0x0, 0x0, 0x20, 0x1, 0x8, 0x30, @local, @private2, 0x10, 0x8, 0x9, 0x4}})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2a0008c}, 0xc, &(0x7f0000001b80)={&(0x7f0000001200)={0x954, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1c7f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x90, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x7, 0x7f, 0x20}, {0x857, 0x1, 0xff, 0xffff}, {0x8, 0x0, 0x3, 0x800}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xac}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51b}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x88ea}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x954}, 0x1, 0x0, 0x0, 0x4008000}, 0xe466ad78347ee61a)

15:52:23 executing program 6:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4040)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc080}, 0x2000c814)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x1)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004004)
socketpair(0x2, 0xa, 0x0, &(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x4, 0xfffffffd, 0x1, 0x2, 0x8]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x5b9a, 0x4, 0x2, 0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4044884)
syz_genetlink_get_family_id$team(&(0x7f0000000600), r4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x200040, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffb, 0x6}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "92b3a1f330a3792af43f925c3b"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x800)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r3)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0), 0x24a101, 0x0)
ioctl$CDROMCLOSETRAY(r2, 0x5319)
r6 = accept4(0xffffffffffffffff, &(0x7f0000000900)=@alg, &(0x7f0000000980)=0x80, 0x800)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a00)={0x24c, r5, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8000}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7fff}, {0x8, 0x0, 0x80000001}, {0x8, 0x0, 0xfffffff7}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8e8}, {0x8, 0x0, 0x7f}, {0x8, 0x0, 0x1}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x80}, @NL80211_ATTR_IE={0x12f, 0x2a, [@mesh_chsw={0x76, 0x6, {0x7, 0x88, 0x6, 0x2}}, @gcr_ga={0xbd, 0x6, @broadcast}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6}, @perr={0x84, 0xfb, {0x80, 0xf, [@not_ext={{}, @broadcast, 0x5, "", 0x2b}, @not_ext={{}, @device_a, 0x9, "", 0x1e}, @ext={{}, @device_b, 0x1, @broadcast, 0x31}, @not_ext={{}, @device_a, 0x0, "", 0xf}, @ext={{}, @device_b, 0x2, @device_a, 0x7}, @not_ext={{}, @broadcast, 0xffffa654, "", 0x24}, @ext={{}, @broadcast, 0xfffeffff, @device_a, 0x38}, @ext={{}, @device_b, 0x8, @broadcast, 0x37}, @ext={{}, @broadcast, 0x0, @broadcast, 0x26}, @not_ext={{}, @device_a, 0x9, "", 0x14}, @ext={{}, @device_b, 0x1b, @device_a, 0x27}, @ext={{}, @broadcast, 0xffff}, @ext={{}, @device_b, 0x1, @broadcast, 0x3c}, @ext={{}, @device_a, 0x3, @device_b, 0x26}, @not_ext={{}, @device_a, 0xdb, "", 0x9}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0x7c, 0xae}}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x48, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, "57960bb48119b7f343589f19151e21f3b7b976cda16625fadaae8df25821a9ed078a4707074c44128c5a7e82b4f1c2de8a63c2299990f17bdb634d7777063905"}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x48, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x67483566}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x101}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7fff}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x24c}}, 0x84)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000d00)=0x1d2d)
sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}}, 0x40040)

15:52:23 executing program 7:
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x3, 0x1f, 0xfffffffffffffffa}, &(0x7f0000000040))
r0 = mq_open(&(0x7f0000000080)='\x00', 0x800, 0x20, &(0x7f00000000c0)={0x212, 0xffb, 0x3, 0x1ff})
r1 = mq_open(&(0x7f0000000100)='}%{/$&{%,\\\x00', 0x1, 0x30, &(0x7f0000000140)={0x4, 0x0, 0xfffffffffffffffe, 0x3fffffffc000})
mq_timedreceive(r0, &(0x7f0000000180)=""/87, 0x57, 0x401, &(0x7f0000000200)={0x77359400})
r2 = mq_open(&(0x7f0000000240)='\x00', 0x40, 0x1c4, &(0x7f0000000280)={0x8, 0x8, 0x2, 0x3})
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/vlan/vlan1\x00')
clock_gettime(0x0, &(0x7f0000000380)={<r4=>0x0, <r5=>0x0})
mq_timedsend(r3, &(0x7f0000000300)="8f2f1850e153226cb3ee5aee0a8ab865901f23f6264ec81ed1eb448a04c7de710885fdb6ee07288e8d504a7d10111263bf449314ec52160229e2ff3fa15d23c7c9507ef20f344ff55f6737dc4a6f3c708eb08453fd26b834d9c546388eab457cb80ad82c919266e451cf8beae56be05d15e8b8db00830e0eed7571", 0x7b, 0x8, &(0x7f00000003c0)={r4, r5+60000000})
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000400))
write$vga_arbiter(r3, &(0x7f0000000440)=@target={'target ', {'PCI:', '2', ':', '4', ':', '16', '.', '9'}}, 0x14)
io_getevents(0x0, 0xe27, 0x3, &(0x7f0000000480)=[{}, {}, {}], 0x0)
mq_getsetattr(r1, &(0x7f0000000500)={0x0, 0xc75, 0x8, 0x3}, &(0x7f0000000540))
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x10)
mq_timedsend(r2, &(0x7f0000000680)="866b86b70af417d4f785cbacb54b4c22f39fe2687be867079b3fdc3d859edaed2684bda66960c7b8d21d1641b7f0b84eb77d02de2e88bbe362a5f4162ee2c6f814af7592f0d31a7167eed3aa0ed0132e75316ce8aaba97cc31fbd1e150e36d1cdcc011688e2e040d9a127c9b889a01e742e1d08338f2f125b6335393a1ba57be0b496bb507f3840b8c38b7e3ea6ae11df8ef423dabd4f1f52d3e1071666a88478a5ed9868fb7b3ae95d03982eac0a4f0", 0xb0, 0x4, &(0x7f0000000740)={0x77359400})
mq_open(&(0x7f0000000780)='net/vlan/vlan1\x00', 0x40, 0x1e, &(0x7f00000007c0)={0x6, 0x800, 0x9, 0x7})
io_pgetevents(0x0, 0x9, 0x2, &(0x7f0000000800)=[{}, {}], &(0x7f0000000840)={0x0, 0x989680}, &(0x7f00000008c0)={&(0x7f0000000880)={[0x1]}, 0x8})
mq_getsetattr(r3, &(0x7f0000000900)={0xffc0000000000000, 0x63f9, 0x1, 0x6d}, 0xfffffffffffffffe)
io_setup(0xffffffff, &(0x7f0000000940)=<r6=>0x0)
r7 = syz_open_dev$ttys(0xc, 0x2, 0x1)
io_submit(r6, 0x2, &(0x7f0000000b40)=[&(0x7f00000009c0)={0x0, 0x0, 0x0, 0x6, 0x1be, r7, &(0x7f0000000980)="37a69ce1b9f2eb5dab79d871ec411bb473e75aefd248251c", 0x18, 0x9b, 0x0, 0x1, r3}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x8b, 0xffffffffffffffff, &(0x7f0000000a00)="6f8f9d69dcc0285ed0d270458e2fe79928d11bd3d011b942c4b829f6dc46c89e2f423ad9099dc6a124060ab108e67b1d1e2cd143b08aa22a0e9174228b300462b443322aaa8feec682dd23ff5b1aedec2bbbbcfdd6f038de541738555690bd96c60fb58a3f2d6be8f6addd81a9bfc3f947e7a54ee2f1cce0635f836e710c8a6aceabb633a86418399804d4031197ff09ad8a49a1b2a3fb556e24ac3cd873f0c33f9e085f3fc9a0f4f62e010fb5778d8de3ab1fb1c08d9a53150c126fa0e77fc941cfc9898cb9752fd5000c26aaa197cec29eefb090f88eea7028582e23be0f35bb97dc6243", 0xe5, 0xffffffffffff9157, 0x0, 0x1, r3}])

[  128.614008] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  128.621376] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  128.628541] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  128.636987] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  128.643482] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  128.687803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  128.694323] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  128.702101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  128.718097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  128.733857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.739796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  128.750507] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  128.755516] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  128.764378] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  128.766236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  128.768876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  128.771881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  128.773304] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  128.798133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  128.811232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  128.842401] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  128.849786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  128.854215] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  128.860111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  128.865059] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  128.907660] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  128.922054] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  128.926758] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  128.933831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  128.934079] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  128.948969] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  128.952274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  128.959526] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  128.962135] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  128.965703] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  128.971169] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  128.975702] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  128.981174] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  128.990103] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  129.008886] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  130.697281] Bluetooth: hci0: command tx timeout
[  130.824202] Bluetooth: hci2: command tx timeout
[  130.824932] Bluetooth: hci1: command tx timeout
[  130.887637] Bluetooth: hci4: command tx timeout
[  130.888927] Bluetooth: hci3: command tx timeout
[  131.079663] Bluetooth: hci5: command tx timeout
[  131.080245] Bluetooth: hci6: command tx timeout
[  131.143635] Bluetooth: hci7: command tx timeout
[  132.744866] Bluetooth: hci0: command tx timeout
[  132.872805] Bluetooth: hci1: command tx timeout
[  132.873310] Bluetooth: hci2: command tx timeout
[  132.935902] Bluetooth: hci3: command tx timeout
[  132.936383] Bluetooth: hci4: command tx timeout
[  133.127983] Bluetooth: hci5: command tx timeout
[  133.128489] Bluetooth: hci6: command tx timeout
[  133.191970] Bluetooth: hci7: command tx timeout
[  134.793596] Bluetooth: hci0: command tx timeout
[  134.920135] Bluetooth: hci2: command tx timeout
[  134.920174] Bluetooth: hci1: command tx timeout
[  134.984877] Bluetooth: hci3: command tx timeout
[  134.984915] Bluetooth: hci4: command tx timeout
[  135.176073] Bluetooth: hci6: command tx timeout
[  135.176622] Bluetooth: hci5: command tx timeout
[  135.240875] Bluetooth: hci7: command tx timeout
[  136.842778] Bluetooth: hci0: command tx timeout
[  136.967773] Bluetooth: hci1: command tx timeout
[  136.968730] Bluetooth: hci2: command tx timeout
[  137.031646] Bluetooth: hci4: command tx timeout
[  137.033590] Bluetooth: hci3: command tx timeout
[  137.223634] Bluetooth: hci6: command tx timeout
[  137.224870] Bluetooth: hci5: command tx timeout
[  137.288609] Bluetooth: hci7: command tx timeout
[  191.084402] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  191.086201] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  191.088211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  191.092113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  191.094700] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  191.094726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  191.097582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  191.101118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  191.115773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  191.123840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  191.129097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  191.134251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  191.138351] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  191.151422] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  191.162908] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  191.209274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  191.215072] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  191.218925] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  191.222842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  191.225082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.227890] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  191.229362] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.232101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  191.244195] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  191.245505] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  191.252867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  191.257250] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  191.258890] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  191.263834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  191.265413] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  191.280300] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  191.283334] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  191.285690] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  191.296641] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  191.298967] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  191.320998] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  191.323971] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  191.340193] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  191.357831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  191.362996] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  193.159675] Bluetooth: hci0: command tx timeout
[  193.159849] Bluetooth: hci1: command tx timeout
[  193.224792] Bluetooth: hci2: command tx timeout
[  193.287653] Bluetooth: hci4: command tx timeout
[  193.352593] Bluetooth: hci3: command tx timeout
[  193.352669] Bluetooth: hci6: command tx timeout
[  193.353162] Bluetooth: hci5: command tx timeout
[  193.415654] Bluetooth: hci7: command tx timeout
[  195.207637] Bluetooth: hci1: command tx timeout
[  195.208970] Bluetooth: hci0: command tx timeout
[  195.271605] Bluetooth: hci2: command tx timeout
[  195.335965] Bluetooth: hci4: command tx timeout
[  195.399635] Bluetooth: hci5: command tx timeout
[  195.401185] Bluetooth: hci6: command tx timeout
[  195.401647] Bluetooth: hci3: command tx timeout
[  195.463610] Bluetooth: hci7: command tx timeout
[  197.256621] Bluetooth: hci0: command tx timeout
[  197.257106] Bluetooth: hci1: command tx timeout
[  197.320048] Bluetooth: hci2: command tx timeout
[  197.383797] Bluetooth: hci4: command tx timeout
[  197.448832] Bluetooth: hci3: command tx timeout
[  197.449129] Bluetooth: hci6: command tx timeout
[  197.449620] Bluetooth: hci5: command tx timeout
[  197.511682] Bluetooth: hci7: command tx timeout
[  199.303800] Bluetooth: hci1: command tx timeout
[  199.303868] Bluetooth: hci0: command tx timeout
[  199.370595] Bluetooth: hci2: command tx timeout
[  199.431594] Bluetooth: hci4: command tx timeout
[  199.495980] Bluetooth: hci5: command tx timeout
[  199.496071] Bluetooth: hci3: command tx timeout
[  199.496677] Bluetooth: hci6: command tx timeout
[  199.559641] Bluetooth: hci7: command tx timeout
[  253.407081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  253.412135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  253.416075] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  253.429380] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  253.434358] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  253.482061] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  253.488253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  253.491165] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  253.500426] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  253.505533] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  253.671048] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  253.679165] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  253.695164] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  253.710070] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  253.721277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  253.726804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  253.741876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  253.772068] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  253.789119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  253.810082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  253.844728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  253.858455] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  253.871783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  253.901955] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  253.905824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  253.907225] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  253.915525] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  253.919174] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  253.927181] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  253.938278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  253.945691] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  253.957031] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  253.960046] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  253.964996] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  253.976191] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  253.976727] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  253.993027] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  253.995047] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  254.021811] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  254.069879] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  255.495622] Bluetooth: hci0: command tx timeout
[  255.559604] Bluetooth: hci1: command tx timeout
[  255.817334] Bluetooth: hci2: command tx timeout
[  256.200265] Bluetooth: hci3: command tx timeout
[  256.200288] Bluetooth: hci4: command tx timeout
[  256.201371] Bluetooth: hci6: command tx timeout
[  256.263648] Bluetooth: hci5: command tx timeout
[  256.391630] Bluetooth: hci7: command tx timeout
[  257.545593] Bluetooth: hci0: command tx timeout
[  257.608744] Bluetooth: hci1: command tx timeout
[  257.863628] Bluetooth: hci2: command tx timeout
[  258.247822] Bluetooth: hci6: command tx timeout
[  258.248086] Bluetooth: hci4: command tx timeout
[  258.248279] Bluetooth: hci3: command tx timeout
[  258.311761] Bluetooth: hci5: command tx timeout
[  258.439717] Bluetooth: hci7: command tx timeout
[  259.592024] Bluetooth: hci0: command tx timeout
[  259.655752] Bluetooth: hci1: command tx timeout
[  259.912089] Bluetooth: hci2: command tx timeout
[  260.295791] Bluetooth: hci6: command tx timeout
[  260.296014] Bluetooth: hci4: command tx timeout
[  260.296711] Bluetooth: hci3: command tx timeout
[  260.359667] Bluetooth: hci5: command tx timeout
[  260.488182] Bluetooth: hci7: command tx timeout
[  261.639973] Bluetooth: hci0: command tx timeout
[  261.704640] Bluetooth: hci1: command tx timeout
[  261.960578] Bluetooth: hci2: command tx timeout
[  262.343733] Bluetooth: hci3: command tx timeout
[  262.343914] Bluetooth: hci4: command tx timeout
[  262.344204] Bluetooth: hci6: command tx timeout
[  262.407809] Bluetooth: hci5: command tx timeout
[  262.536570] Bluetooth: hci7: command tx timeout
[  315.869072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  315.872865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  315.881288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  315.896673] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  315.906218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  316.071272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  316.076408] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  316.084409] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  316.102743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  316.112045] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  316.146044] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  316.158831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  316.177145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  316.218058] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  316.220908] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  316.222894] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  316.225300] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  316.235878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  316.248003] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  316.264198] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  316.267447] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  316.270444] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  316.283248] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  316.285223] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  316.290604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  316.358888] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  316.362441] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  316.365125] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  316.371269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  316.376485] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  316.656594] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  316.664231] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  316.705089] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  316.770318] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  316.782505] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  317.154475] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  317.205602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  317.235080] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  317.265721] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  317.295088] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  317.959681] Bluetooth: hci0: command tx timeout
[  318.152620] Bluetooth: hci1: command tx timeout
[  318.472606] Bluetooth: hci2: command tx timeout
[  318.472639] Bluetooth: hci4: command tx timeout
[  318.535666] Bluetooth: hci3: command tx timeout
[  318.535749] Bluetooth: hci5: command tx timeout
[  318.919771] Bluetooth: hci7: command tx timeout
[  319.495903] Bluetooth: hci6: command tx timeout
[  320.008642] Bluetooth: hci0: command tx timeout
[  320.199639] Bluetooth: hci1: command tx timeout
[  320.519658] Bluetooth: hci4: command tx timeout
[  320.519705] Bluetooth: hci2: command tx timeout
[  320.583635] Bluetooth: hci3: command tx timeout
[  320.583674] Bluetooth: hci5: command tx timeout
[  320.968560] Bluetooth: hci7: command tx timeout
[  321.543889] Bluetooth: hci6: command tx timeout
[  322.055774] Bluetooth: hci0: command tx timeout
[  322.247902] Bluetooth: hci1: command tx timeout
[  322.568793] Bluetooth: hci4: command tx timeout
[  322.568965] Bluetooth: hci2: command tx timeout
[  322.631944] Bluetooth: hci3: command tx timeout
[  322.632773] Bluetooth: hci5: command tx timeout
[  323.016179] Bluetooth: hci7: command tx timeout
[  323.592761] Bluetooth: hci6: command tx timeout
[  324.103636] Bluetooth: hci0: command tx timeout
[  324.295772] Bluetooth: hci1: command tx timeout
[  324.615694] Bluetooth: hci4: command tx timeout
[  324.615746] Bluetooth: hci2: command tx timeout
[  324.679638] Bluetooth: hci3: command tx timeout
[  324.679712] Bluetooth: hci5: command tx timeout
[  325.064774] Bluetooth: hci7: command tx timeout
[  325.640124] Bluetooth: hci6: command tx timeout
[  378.073965] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  378.079093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  378.081916] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  378.094129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  378.099242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  378.251921] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  378.257405] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  378.260321] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  378.270368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  378.278042] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  378.535192] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  378.548835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  378.561488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  378.565435] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  378.577919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  378.582111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  378.586436] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  378.605742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  378.608122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  378.631063] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  378.638015] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  378.654125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  378.657690] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  378.694993] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  378.702207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  378.722921] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  378.729046] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  378.737145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  378.743302] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  378.756224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  378.764060] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  378.775108] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  378.788463] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  378.793655] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  378.797087] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  378.799772] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  378.808783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  378.813453] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  378.824074] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  378.830069] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  380.167853] Bluetooth: hci0: command tx timeout
[  380.359723] Bluetooth: hci1: command tx timeout
[  380.679646] Bluetooth: hci2: command tx timeout
[  381.000592] Bluetooth: hci4: command tx timeout
[  381.001165] Bluetooth: hci3: command tx timeout
[  381.064728] Bluetooth: hci5: command tx timeout
[  381.065356] Bluetooth: hci7: command tx timeout
[  381.128703] Bluetooth: hci6: command tx timeout
[  382.216965] Bluetooth: hci0: command tx timeout
[  382.409606] Bluetooth: hci1: command tx timeout
[  382.727597] Bluetooth: hci2: command tx timeout
[  383.047636] Bluetooth: hci3: command tx timeout
[  383.048157] Bluetooth: hci4: command tx timeout
[  383.112622] Bluetooth: hci7: command tx timeout
[  383.113128] Bluetooth: hci5: command tx timeout
[  383.177590] Bluetooth: hci6: command tx timeout
[  384.264870] Bluetooth: hci0: command tx timeout
[  384.456641] Bluetooth: hci1: command tx timeout
[  384.775735] Bluetooth: hci2: command tx timeout
[  385.096790] Bluetooth: hci4: command tx timeout
[  385.097574] Bluetooth: hci3: command tx timeout
[  385.160687] Bluetooth: hci5: command tx timeout
[  385.161189] Bluetooth: hci7: command tx timeout
[  385.224043] Bluetooth: hci6: command tx timeout
[  386.312925] Bluetooth: hci0: command tx timeout
[  386.503604] Bluetooth: hci1: command tx timeout
[  386.823766] Bluetooth: hci2: command tx timeout
[  387.144588] Bluetooth: hci3: command tx timeout
[  387.145090] Bluetooth: hci4: command tx timeout
[  387.208978] Bluetooth: hci7: command tx timeout
[  387.209423] Bluetooth: hci5: command tx timeout
[  387.271629] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
15:57:26  Registers:
info registers vcpu 0
RAX=0000000000000007 RBX=0000000000000001 RCX=ffffffff8100012f RDX=0000000000000001
RSI=0000000000000001 RDI=ffffffff86c61ae4 RBP=ffff888023b8f180 RSP=ffff888023b8f0b8
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=0000000000000003
R12=ffff888023b8f188 R13=ffff888023b8f170 R14=ffff888023b8f169 R15=ffff888023b8f128
RIP=ffffffff81353e9a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe2500000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f971d204028 CR3=000000000f547000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=00000000012e0010 RBX=0000000000089800 RCX=ffff888009468970 RDX=000000000000002d
RSI=ffff88800e7f9de0 RDI=ffffffff8100148a RBP=ffff888008c4b780 RSP=ffff88806cf08de8
R8 =0000000011eab0e0 R9 =ffff88806be641a0 R10=000000000003b53d R11=0000000000000000
R12=ffff88800e7f9de0 R13=ffffea000039fe40 R14=0000000000000000 R15=ffff88800e7f9de0
RIP=ffffffff81aed17b RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe90cbfb8e0 CR3=00000000312df000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000