Warning: Permanently added '[localhost]:4679' (ECDSA) to the list of known hosts.
2025/06/26 15:00:00 fuzzer started
2025/06/26 15:00:01 dialing manager at localhost:41253
syzkaller login: [  106.963269] cgroup: Unknown subsys name 'net'
[  107.103093] cgroup: Unknown subsys name 'cpuset'
[  107.130062] cgroup: Unknown subsys name 'rlimit'
2025/06/26 15:00:18 syscalls: 202
2025/06/26 15:00:18 code coverage: enabled
2025/06/26 15:00:18 comparison tracing: enabled
2025/06/26 15:00:18 extra coverage: enabled
2025/06/26 15:00:18 setuid sandbox: enabled
2025/06/26 15:00:18 namespace sandbox: enabled
2025/06/26 15:00:18 Android sandbox: enabled
2025/06/26 15:00:18 fault injection: enabled
2025/06/26 15:00:18 leak checking: enabled
2025/06/26 15:00:18 net packet injection: enabled
2025/06/26 15:00:18 net device setup: enabled
2025/06/26 15:00:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/26 15:00:18 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/26 15:00:18 USB emulation: enabled
2025/06/26 15:00:18 hci packet injection: enabled
2025/06/26 15:00:18 wifi device emulation: enabled
2025/06/26 15:00:18 802.15.4 emulation: enabled
2025/06/26 15:00:18 fetching corpus: 0, signal 0/0 (executing program)
2025/06/26 15:00:20 starting 8 fuzzer processes
15:00:20 executing program 0:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80, 0x100000)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r1, 0x4, 0x70bd26, 0x400, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x4000)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c000}, 0x5)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x622}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x5)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000580)=@buf)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r4)
sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x134, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "0ec714222ce3c2eed860ddad9938623340c60fb7fc05ec8ce9424ce1c9"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x54}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xee5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xadc8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x37501c14}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9583}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r4)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x10c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x80000000}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xffff}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x38}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1ff}, {0xc, 0x90, 0x2}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8021}, 0x8080)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000a40))
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), r4)
sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xe4, r6, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x52e3e7e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0x40000)
socket$inet6_udplite(0xa, 0x2, 0x88)

15:00:20 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40, 0x3}, {0x0, 0x3}, {0x3f, 0x2}, {0x56, 0x2}, {0x9, 0x6}, {0x5}, {0x1, 0x3}, {0x8, 0x5}, {0x1f, 0x1}, {0x1, 0x3}, {0x7f, 0x6}, {0x0, 0x2}, {0x3}, {0x9, 0x1}], "a77c9c4f4c4fb18a"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x1, 0x2}, {0x20, 0x7}, {0x9, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0x7}, {0x80, 0x1}, {0x40, 0x4}, {0x9, 0x2}, {0x6, 0x1}, {0x7, 0x3}, {0xb5, 0x5}, {0x1, 0x7}, {0x42, 0x4}, {0x1, 0x5}], "f0beaecf0a3062d1"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x80, 0x7}, {0x0, 0x1}, {0x3, 0x6}, {0x20, 0x2}, {0x64}, {0x1, 0x5}, {0x72, 0x1}, {0x9}, {0x7f, 0x4}, {0x6, 0x4}, {0x4, 0x6}, {0x1, 0x7}, {0xbf}, {0x2e}, {0x1, 0x7}, {0xfa, 0x3}, {0x5}], "e1ff3a98ad76e69e"}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x48801)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', <r2=>0x0, 0x29, 0xfd, 0x97, 0x8, 0x40, @mcast2, @loopback, 0x1, 0x80, 0x40, 0x9}})
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000006c0)={0x0, @llc={0x1a, 0x2, 0x40, 0x3, 0x6, 0x3, @local}, @xdp={0x2c, 0x8, <r3=>0x0, 0xa}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, 0x8000, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)='veth0_to_bridge\x00', 0x8, 0x80000000})
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1d0, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x2404c001}, 0x4000840)
r4 = accept4(0xffffffffffffffff, &(0x7f00000009c0)=@x25={0x9, @remote}, &(0x7f0000000a40)=0x80, 0x80000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1ff}, @NL80211_ATTR_VENDOR_DATA={0x26, 0xc5, "133afffc7649e3031f79bf1169610191d5effab9d393125aa013e2bde3077996b811"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008805}, 0x20000801)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c40), r4)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4804)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r4)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x68, r7, 0x10, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x10000000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r4)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r8, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x98, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000810}, 0x40804)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000001180)=@req={0x3, 0x8, 0x8, 0x1000}, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001200), r9)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000001380)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r10, 0x509, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18040}, 0x40010)

15:00:20 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x90, 0x1f, 0x2, 0x1, @mcast2, @remote, 0x8000, 0x8, 0x0, 0x493}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0))
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8f7f, 0x50}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004001}, 0x884)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = accept(r0, 0x0, &(0x7f0000000740))
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000900)={&(0x7f0000000780), 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x88, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x200, 0x6c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r4 = accept(r0, &(0x7f0000000940)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f00000009c0)=0x80)
getpeername$packet(r2, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a40)=0x14)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000a80)={'wg0\x00'})
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000b00)={0x0, @llc={0x1a, 0x300, 0xe5, 0x35, 0x8, 0x5, @local}, @l2tp={0x2, 0x0, @broadcast, 0x3}, @generic={0x10, "e26061855f5d0dfa412b41e353b1"}, 0x3, 0x0, 0x0, 0x0, 0x35, &(0x7f0000000ac0)='veth0_vlan\x00', 0x3, 0x1, 0xfffc})
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xa0, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8f}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x48000}, 0x40004)
accept$packet(r2, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d40)=0x14)
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000001000)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x1cc, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x41}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x254}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6786147e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7bc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000844}, 0x20000080)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), r4)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, r7, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x401}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfffff4bf}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000800}, 0x4)

15:00:20 executing program 3:
rt_sigaction(0x38, &(0x7f0000000080)={&(0x7f0000000000)="c40225012ec4a255ace8400f9230c4c1585652aef2460f5a6e02c4818e5af4c441bc5c1f0fdd5b00c46259ab8700000000c401cc5e258e899999", 0x0, &(0x7f0000000040)="c4a1c414430467660f3a0e89cf5e00001cc4826946772f0febe9d9e0c423fd09d507c4c3116ecb6ec441917ccfc401697c5076c403fd00993a6543430f", {[0x2]}}, &(0x7f0000000140)={&(0x7f00000000c0)="660f3802c7c4a1b173ffa8c4a37bf040c930c4214571e1d58c443d00f0803600c442e1a730d266a4470f0f70b10c66f20f31", 0x0, &(0x7f0000000100)="f243ac40dfde0fe28ceb36080000c4a22d0984fe5ebd2f8d420fd5fa360f38f957360f97c9660fd94e40660f3833737b646f"}, 0x8, &(0x7f0000000180))
prctl$PR_SET_FPEXC(0xc, 0x80000)
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0x20000)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x80000)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001700)={0x0, @xdp={0x2c, 0x2, <r2=>0x0, 0x3b}, @l2tp={0x2, 0x0, @multicast1, 0x3}, @nfc={0x27, 0x0, 0x0, 0x3}, 0x5a, 0x0, 0x0, 0x0, 0x9, 0x0, 0x101, 0x1, 0xaf12})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001800)={'syztnl1\x00', &(0x7f0000001780)={'ip6gre0\x00', <r3=>0x0, 0x4, 0x4, 0x4, 0x7, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x80, 0x100, 0x7ff}})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a00)={&(0x7f0000001840)={0x1a0, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001ac0), r1)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x64, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x2000c850)
prctl$PR_SET_FPEXC(0xc, 0x80)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r1)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x78, r5, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x34dd}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd1}]}, 0x78}}, 0x4000000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), r1)
sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x14, r6, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10000010)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}}, 0x20044814)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002000), r1)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x1c, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000002100))

[  125.832934] audit: type=1400 audit(1750950020.312:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
15:00:20 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0xb0, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd73}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x29800}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x42}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb9f9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x7f9337fcb621c0d2}, 0x20000000)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x65}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x1)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xf5de6fc7f776a8cb}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="fdbeaf7fcb31"}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xeed7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x8880)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c4050}, 0x4000000)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x441c4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x11e}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4060}, 0x80)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009940), r3)
sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000009a40)={&(0x7f0000009900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000009a00)={&(0x7f0000009980)={0x4c, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x2}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x3}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x2}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x4}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040)
sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000009b40)={&(0x7f0000009a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000009b00)={&(0x7f0000009ac0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004000)
sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000009c40)={&(0x7f0000009b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000009c00)={&(0x7f0000009bc0)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x800)
socketpair(0x3, 0x5, 0x1ff, &(0x7f0000009c80)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$TIPC_NL_KEY_FLUSH(r8, &(0x7f000000a000)={&(0x7f0000009cc0), 0xc, &(0x7f0000009fc0)={&(0x7f0000009d00)={0x294, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7ff, @mcast2, 0x18}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x75, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x64e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2487bdf7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0e}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc90e}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x2040}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f000000a040), r7)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f000000a180)={&(0x7f000000a080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f000000a140)={&(0x7f000000a0c0)={0x58, r2, 0x100, 0x70bd26, 0x401, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0xd0)

15:00:20 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x0, 0x2})
r1 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0x24, 0x4, 0x9, 0x70, @private0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x20, 0x8000, 0x4, 0xfd6a}})
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000200))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x5e}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9747}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r4, 0x4, 0x70bd2b, 0x7, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008801}, 0x54)
r5 = accept$packet(r1, &(0x7f00000004c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6tnl0\x00', r6, 0x2f, 0x3f, 0xfe, 0x7, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x7, 0x8000, 0x2f0, 0x8}})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r1)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r7, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3f}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7fffffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0xc000015)
r8 = accept4(r5, &(0x7f00000030c0)=@un=@abs, &(0x7f0000003140)=0x80, 0x80000)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000031c0), r1)
sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000003340)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x800886}, 0xc, &(0x7f0000003300)={&(0x7f0000003200)={0xf8, r9, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf3}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xe0}, @NL80211_ATTR_REG_RULES={0xb4, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6e9b}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc720}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x64d2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000)
syz_genetlink_get_family_id$team(&(0x7f0000003380), r8)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000033c0))

15:00:20 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44881)
socketpair(0x1, 0x2, 0x4d, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
r4 = accept4(r1, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000540)=0x80, 0x800)
r6 = accept4(r5, &(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000600)=0x80, 0x800)
socketpair(0xf, 0x3, 0x5, &(0x7f0000000640)={<r8=>0xffffffffffffffff})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, r3, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x59}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x7b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x74}, 0x1, 0x0, 0x0, 0x8d4}, 0x4000090)
recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/59, 0x3b}, {&(0x7f00000008c0)=""/138, 0x8a}, {&(0x7f0000000980)=""/253, 0xfd}, {&(0x7f0000000a80)=""/223, 0xdf}, {&(0x7f0000000b80)=""/16, 0x10}, {&(0x7f0000000bc0)=""/83, 0x53}], 0x7, &(0x7f0000000cc0)=""/13, 0xd}, 0x4}, {{&(0x7f0000000d00)=@ax25={{0x3, @default}, [@rose, @rose, @default, @bcast, @null, @netrom, @default, @bcast]}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000d80)=""/218, 0xda}, {&(0x7f0000000e80)=""/217, 0xd9}, {&(0x7f0000000f80)=""/211, 0xd3}, {&(0x7f0000001080)=""/75, 0x4b}, {&(0x7f0000001100)=""/154, 0x9a}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x6}, 0x8000}, {{&(0x7f0000002240)=@ll={0x11, 0x0, <r9=>0x0}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000022c0)=""/251, 0xfb}], 0x1, &(0x7f0000002400)=""/115, 0x73}, 0x2}, {{&(0x7f0000002480)=@hci, 0x80, &(0x7f0000002740)=[{&(0x7f0000002500)=""/30, 0x1e}, {&(0x7f0000002540)=""/6, 0x6}, {&(0x7f0000002580)=""/184, 0xb8}, {&(0x7f0000002640)=""/204, 0xcc}], 0x4, &(0x7f0000002780)=""/198, 0xc6}, 0x1}], 0x4, 0x100, &(0x7f0000002980))
r10 = accept4(r2, &(0x7f0000005980)=@phonet, &(0x7f0000005a00)=0x80, 0x80800)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005a80), r6)
sendmsg$NL80211_CMD_JOIN_OCB(r10, &(0x7f0000005b80)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005b40)={&(0x7f0000005ac0)={0x5c, r11, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x84)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000005d00)={'syztnl0\x00', &(0x7f0000005c80)={'sit0\x00', <r12=>r9, 0x29, 0x3f, 0x81, 0xddb, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x8, 0x40, 0x7, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000005dc0)={'ip6tnl0\x00', &(0x7f0000005d40)={'ip6gre0\x00', <r13=>r9, 0x0, 0x3f, 0x6, 0x3, 0x12, @mcast1, @remote, 0x0, 0x8, 0x8001, 0xffffff31}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000005e00)={'batadv0\x00', <r14=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000005e40)={'team0\x00', <r15=>0x0})
getpeername$packet(r2, &(0x7f0000005f00)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005f40)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000006000)={'ip6gre0\x00', &(0x7f0000005f80)={'ip6_vti0\x00', <r17=>r9, 0x2f, 0x2, 0x80, 0x40, 0x7a, @remote, @private1, 0x10, 0x8, 0x81, 0x8}})
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000006100)={'team0\x00', <r18=>0x0})
sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f0000006440)={&(0x7f0000005bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006400)={&(0x7f0000006140)={0x28c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x20}, 0x8041)

15:00:20 executing program 7:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040))
futex(&(0x7f0000000080)=0x1, 0x80, 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000100)=0x1, 0x2)
r0 = socket(0x21, 0x5, 0x16bca55c)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5d}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20004000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r2, &(0x7f0000002040)=[{{&(0x7f0000000280)=@caif=@rfm, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)=""/129, 0x81}, {&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f0000000440)=""/12, 0xc}, {&(0x7f0000000480)=""/85, 0x55}, {&(0x7f0000000500)=""/117, 0x75}, {&(0x7f0000000580)=""/194, 0xc2}], 0x6, &(0x7f0000000700)=""/250, 0xfa}, 0x9}, {{&(0x7f0000000800)=@hci, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000880)=""/124, 0x7c}, {&(0x7f0000000900)=""/1, 0x1}, {&(0x7f0000000940)=""/26, 0x1a}, {&(0x7f0000000980)=""/227, 0xe3}], 0x4, &(0x7f0000000ac0)=""/142, 0x8e}, 0x612}, {{&(0x7f0000000b80)=@sco={0x1f, @none}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000d00)=""/93, 0x5d}, {&(0x7f0000000d80)=""/180, 0xb4}, {&(0x7f0000000e40)=""/180, 0xb4}, {&(0x7f0000000f00)=""/40, 0x28}, {&(0x7f0000000f40)=""/81, 0x51}], 0x6, &(0x7f0000001040)=""/4096, 0x1000}, 0x9}], 0x3, 0x40000000, 0x0)
sched_rr_get_interval(0x0, &(0x7f0000002100))
clock_gettime(0x0, &(0x7f0000002180)={<r3=>0x0, <r4=>0x0})
futex(&(0x7f0000002140)=0x1, 0xd, 0x1, &(0x7f00000021c0)={r3, r4+60000000}, &(0x7f0000002200), 0x2)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000)
r5 = gettid()
sched_rr_get_interval(r5, &(0x7f0000002340))
recvmmsg(r2, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000002380)=""/79, 0x4f}, {&(0x7f0000002400)=""/93, 0x5d}, {&(0x7f0000002480)=""/161, 0xa1}, {&(0x7f0000002540)=""/51, 0x33}, {&(0x7f0000002580)=""/251, 0xfb}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/134, 0x86}], 0x8, &(0x7f00000047c0)=""/20, 0x14}, 0x9}, {{&(0x7f0000004800)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004880)=""/230, 0xe6}, {&(0x7f0000004980)=""/152, 0x98}], 0x2}, 0x751}], 0x2, 0x40000000, &(0x7f0000004b00)={0x77359400})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004b80), r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000004c80)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004c40)={&(0x7f0000004bc0)={0x78, r6, 0x101, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6c}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7a30a32edd94c7cc68f7bd2ad6cddd850750efce1ec7a280"}], @NL80211_ATTR_IFTYPE={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008810}, 0x8c1)
accept4(0xffffffffffffffff, 0x0, &(0x7f0000004cc0), 0x80000)
socketpair(0xa, 0x89274b2e67c87e2, 0x3, &(0x7f0000007bc0)={<r7=>0xffffffffffffffff})
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000007d00)={&(0x7f0000007c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007cc0)={&(0x7f0000007c80)={0x24, 0x0, 0x634acbff179a9a5d, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x5a}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x20000000)

[  127.203372] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  127.245744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  127.247757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  127.255906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  127.258963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  127.330373] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.333056] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.338974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.341304] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  127.343056] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  127.348817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  127.350837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  127.352170] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  127.363597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.367747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.377316] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  127.392102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  127.402125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  127.418308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  127.430100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  127.432330] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  127.435216] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  127.442592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  127.479870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  127.482078] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  127.486006] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  127.487199] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  127.490614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  127.491845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  127.498308] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  127.502209] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  127.507751] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  127.510819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  127.521588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  127.524984] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  127.526334] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  127.531720] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  127.534508] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  127.561113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  127.573048] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  129.302948] Bluetooth: hci0: command tx timeout
[  129.430610] Bluetooth: hci1: command tx timeout
[  129.494655] Bluetooth: hci2: command tx timeout
[  129.494680] Bluetooth: hci3: command tx timeout
[  129.558512] Bluetooth: hci4: command tx timeout
[  129.622514] Bluetooth: hci5: command tx timeout
[  129.622589] Bluetooth: hci6: command tx timeout
[  129.623117] Bluetooth: hci7: command tx timeout
[  131.351501] Bluetooth: hci0: command tx timeout
[  131.479332] Bluetooth: hci1: command tx timeout
[  131.542563] Bluetooth: hci3: command tx timeout
[  131.542676] Bluetooth: hci2: command tx timeout
[  131.606718] Bluetooth: hci4: command tx timeout
[  131.670624] Bluetooth: hci7: command tx timeout
[  131.671109] Bluetooth: hci6: command tx timeout
[  131.671788] Bluetooth: hci5: command tx timeout
[  133.398501] Bluetooth: hci0: command tx timeout
[  133.526958] Bluetooth: hci1: command tx timeout
[  133.590709] Bluetooth: hci3: command tx timeout
[  133.591201] Bluetooth: hci2: command tx timeout
[  133.654548] Bluetooth: hci4: command tx timeout
[  133.719661] Bluetooth: hci5: command tx timeout
[  133.719861] Bluetooth: hci6: command tx timeout
[  133.720129] Bluetooth: hci7: command tx timeout
[  135.448501] Bluetooth: hci0: command tx timeout
[  135.575041] Bluetooth: hci1: command tx timeout
[  135.639638] Bluetooth: hci2: command tx timeout
[  135.639673] Bluetooth: hci3: command tx timeout
[  135.702613] Bluetooth: hci4: command tx timeout
[  135.766592] Bluetooth: hci7: command tx timeout
[  135.766713] Bluetooth: hci6: command tx timeout
[  135.767079] Bluetooth: hci5: command tx timeout
[  187.354875] syz-executor.0 (284) used greatest stack depth: 24736 bytes left
[  187.428498] syz-executor.3 (287) used greatest stack depth: 24576 bytes left
[  189.995457] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  190.012750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  190.022357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  190.028111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  190.036797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  190.036845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  190.043925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  190.065348] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  190.069391] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  190.071498] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  190.079204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  190.079257] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  190.085333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  190.091051] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  190.092724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  190.094844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  190.097183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  190.102289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  190.105933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  190.110487] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  190.112388] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  190.116050] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  190.124297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  190.125919] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  190.131575] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  190.162799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  190.177119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  190.181248] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  190.194618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  190.201398] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  190.286745] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  190.292295] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  190.294177] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  190.305066] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  190.309306] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  190.309430] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  190.316928] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  190.323850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  190.352619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  190.367783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  192.150565] Bluetooth: hci0: command tx timeout
[  192.215057] Bluetooth: hci4: command tx timeout
[  192.215085] Bluetooth: hci1: command tx timeout
[  192.215803] Bluetooth: hci5: command tx timeout
[  192.216179] Bluetooth: hci2: command tx timeout
[  192.279768] Bluetooth: hci3: command tx timeout
[  192.406575] Bluetooth: hci6: command tx timeout
[  192.408482] Bluetooth: hci7: command tx timeout
[  194.199679] Bluetooth: hci0: command tx timeout
[  194.263469] Bluetooth: hci5: command tx timeout
[  194.265227] Bluetooth: hci2: command tx timeout
[  194.265274] Bluetooth: hci1: command tx timeout
[  194.266899] Bluetooth: hci4: command tx timeout
[  194.326822] Bluetooth: hci3: command tx timeout
[  194.456477] Bluetooth: hci6: command tx timeout
[  194.457845] Bluetooth: hci7: command tx timeout
[  196.247395] Bluetooth: hci0: command tx timeout
[  196.310665] Bluetooth: hci2: command tx timeout
[  196.312187] Bluetooth: hci4: command tx timeout
[  196.313331] Bluetooth: hci5: command tx timeout
[  196.313400] Bluetooth: hci1: command tx timeout
[  196.375535] Bluetooth: hci3: command tx timeout
[  196.502819] Bluetooth: hci7: command tx timeout
[  196.504247] Bluetooth: hci6: command tx timeout
[  198.294487] Bluetooth: hci0: command tx timeout
[  198.359570] Bluetooth: hci2: command tx timeout
[  198.360072] Bluetooth: hci1: command tx timeout
[  198.360189] Bluetooth: hci4: command tx timeout
[  198.360581] Bluetooth: hci5: command tx timeout
[  198.423054] Bluetooth: hci3: command tx timeout
[  198.550520] Bluetooth: hci6: command tx timeout
[  198.551005] Bluetooth: hci7: command tx timeout
[  252.523315] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  252.526829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  252.529478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  252.553816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  252.559904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  252.711055] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  252.715205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  252.719938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  252.729080] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  252.742764] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  252.863749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  252.883317] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  252.886629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  252.892864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  252.895524] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  252.902180] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  252.909592] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  252.916851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  252.918096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  252.922008] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  252.924076] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  252.929811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  252.938252] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  252.943591] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  252.970619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  252.977840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  252.979962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  252.986750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  252.989549] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  252.997438] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  253.005392] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  253.011629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  253.016959] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  253.021473] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  253.032904] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  253.034594] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  253.110765] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  253.113738] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  253.122707] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  253.126135] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  254.614578] Bluetooth: hci0: command tx timeout
[  254.806566] Bluetooth: hci1: command tx timeout
[  254.999529] Bluetooth: hci6: command tx timeout
[  254.999551] Bluetooth: hci2: command tx timeout
[  255.063478] Bluetooth: hci4: command tx timeout
[  255.063526] Bluetooth: hci3: command tx timeout
[  255.191657] Bluetooth: hci5: command tx timeout
[  255.320676] Bluetooth: hci7: command tx timeout
[  256.662494] Bluetooth: hci0: command tx timeout
[  256.855482] Bluetooth: hci1: command tx timeout
[  257.047032] Bluetooth: hci2: command tx timeout
[  257.047375] Bluetooth: hci6: command tx timeout
[  257.112511] Bluetooth: hci4: command tx timeout
[  257.113809] Bluetooth: hci3: command tx timeout
[  257.239698] Bluetooth: hci5: command tx timeout
[  257.367499] Bluetooth: hci7: command tx timeout
[  258.711497] Bluetooth: hci0: command tx timeout
[  258.903531] Bluetooth: hci1: command tx timeout
[  259.095490] Bluetooth: hci2: command tx timeout
[  259.095825] Bluetooth: hci6: command tx timeout
[  259.158662] Bluetooth: hci3: command tx timeout
[  259.158951] Bluetooth: hci4: command tx timeout
[  259.287508] Bluetooth: hci5: command tx timeout
[  259.415529] Bluetooth: hci7: command tx timeout
[  260.759531] Bluetooth: hci0: command tx timeout
[  260.950717] Bluetooth: hci1: command tx timeout
[  261.143540] Bluetooth: hci6: command tx timeout
[  261.143565] Bluetooth: hci2: command tx timeout
[  261.207002] Bluetooth: hci3: command tx timeout
[  261.207492] Bluetooth: hci4: command tx timeout
[  261.336567] Bluetooth: hci5: command tx timeout
[  261.462775] Bluetooth: hci7: command tx timeout
[  315.439231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  315.441880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  315.444138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  315.444242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  315.459831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  315.459857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  315.468222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  315.471278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  315.481030] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  315.492060] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  315.625168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  315.639623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  315.647812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  315.653153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  315.655213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  315.658057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  315.674984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  315.681634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  315.683280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  315.687975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  315.694212] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  315.712667] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  315.723308] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  315.727040] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  315.731577] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  315.740055] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  315.791195] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  315.810807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  315.812229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  315.829758] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  315.839811] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  315.860001] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  315.863820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  315.876767] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  315.878214] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  315.879695] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  315.896839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  315.907086] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  315.922242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  315.924858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  317.526692] Bluetooth: hci0: command tx timeout
[  317.526725] Bluetooth: hci1: command tx timeout
[  317.782686] Bluetooth: hci4: command tx timeout
[  317.782830] Bluetooth: hci2: command tx timeout
[  317.910655] Bluetooth: hci3: command tx timeout
[  317.974530] Bluetooth: hci7: command tx timeout
[  317.974602] Bluetooth: hci6: command tx timeout
[  318.039858] Bluetooth: hci5: command tx timeout
[  319.574508] Bluetooth: hci1: command tx timeout
[  319.575773] Bluetooth: hci0: command tx timeout
[  319.831802] Bluetooth: hci4: command tx timeout
[  319.832339] Bluetooth: hci2: command tx timeout
[  319.960639] Bluetooth: hci3: command tx timeout
[  320.022507] Bluetooth: hci6: command tx timeout
[  320.023976] Bluetooth: hci7: command tx timeout
[  320.086657] Bluetooth: hci5: command tx timeout
[  321.622526] Bluetooth: hci0: command tx timeout
[  321.623092] Bluetooth: hci1: command tx timeout
[  321.878520] Bluetooth: hci2: command tx timeout
[  321.878596] Bluetooth: hci4: command tx timeout
[  322.007678] Bluetooth: hci3: command tx timeout
[  322.071503] Bluetooth: hci7: command tx timeout
[  322.072014] Bluetooth: hci6: command tx timeout
[  322.136447] Bluetooth: hci5: command tx timeout
[  323.670632] Bluetooth: hci0: command tx timeout
[  323.672493] Bluetooth: hci1: command tx timeout
[  323.926584] Bluetooth: hci4: command tx timeout
[  323.927646] Bluetooth: hci2: command tx timeout
[  324.055485] Bluetooth: hci3: command tx timeout
[  324.118543] Bluetooth: hci7: command tx timeout
[  324.118574] Bluetooth: hci6: command tx timeout
[  324.185479] Bluetooth: hci5: command tx timeout
[  377.891903] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  377.898684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  377.902778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  377.906309] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  377.920733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  378.085141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  378.088837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  378.091896] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  378.098784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  378.105853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  378.173933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  378.177236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  378.180798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  378.192376] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  378.207769] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  378.311080] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  378.315657] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  378.320594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  378.323190] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  378.325032] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  378.350039] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  378.357710] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  378.362986] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  378.410814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  378.420683] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  378.423331] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  378.462257] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  378.470084] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  378.473509] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  378.475816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  378.479671] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  378.487174] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  378.492905] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  378.504604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  378.527744] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  378.529827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  378.536776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  378.544745] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  378.559863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  378.605943] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  379.990545] Bluetooth: hci0: command tx timeout
[  380.118560] Bluetooth: hci1: command tx timeout
[  380.247975] Bluetooth: hci2: command tx timeout
[  380.438612] Bluetooth: hci3: command tx timeout
[  380.502534] Bluetooth: hci4: command tx timeout
[  380.631502] Bluetooth: hci6: command tx timeout
[  380.759641] Bluetooth: hci7: command tx timeout
[  381.014696] Bluetooth: hci5: command tx timeout
[  382.040442] Bluetooth: hci0: command tx timeout
[  382.166532] Bluetooth: hci1: command tx timeout
[  382.295436] Bluetooth: hci2: command tx timeout
[  382.486548] Bluetooth: hci3: command tx timeout
[  382.550732] Bluetooth: hci4: command tx timeout
[  382.678522] Bluetooth: hci6: command tx timeout
[  382.806482] Bluetooth: hci7: command tx timeout
[  383.062698] Bluetooth: hci5: command tx timeout
[  384.088776] Bluetooth: hci0: command tx timeout
[  384.215680] Bluetooth: hci1: command tx timeout
[  384.343906] Bluetooth: hci2: command tx timeout
[  384.534497] Bluetooth: hci3: command tx timeout
[  384.599561] Bluetooth: hci4: command tx timeout
[  384.726488] Bluetooth: hci6: command tx timeout
[  384.854497] Bluetooth: hci7: command tx timeout
[  385.110564] Bluetooth: hci5: command tx timeout
[  386.135653] Bluetooth: hci0: command tx timeout
[  386.263551] Bluetooth: hci1: command tx timeout
[  386.391647] Bluetooth: hci2: command tx timeout
[  386.584839] Bluetooth: hci3: command tx timeout
[  386.646545] Bluetooth: hci4: command tx timeout
[  386.774488] Bluetooth: hci6: command tx timeout
[  386.903562] Bluetooth: hci7: command tx timeout
[  387.160468] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
15:05:30  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81741447 RDX=ffff88801708d280
RSI=ffffffff81741396 RDI=ffffffff85c1cc40 RBP=ffffffff85c1cc40 RSP=ffff88802bdf7800
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffffffff81741396 R13=0000000000000000 R14=ffffffff85c75328 R15=0000000000092800
RIP=ffffffff8151abec RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f4f3454a540 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff53ffa9570 CR3=000000000d299000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2e7473696c6b63616c622d7665646266 XMM01=00666e6f632e7473696c6b63616c622d
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=00000000000037c3 RBX=0000000000000001 RCX=ffffffff812af546 RDX=00000000000037d5
RSI=0000000000002af5 RDI=ffffffff867a15d2 RBP=ffff88802b41f220 RSP=ffff88802b41f158
R8 =ffffffff867a1566 R9 =0000000000000000 R10=000000000003b53d R11=00000000000037c3
R12=ffff88802b41f228 R13=ffff88802b41f210 R14=ffff88802b41f209 R15=ffff88802b41f1c8
RIP=ffffffff81353f46 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe5e00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe6a2cec18 CR3=0000000035752000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000