Warning: Permanently added '[localhost]:32856' (ECDSA) to the list of known hosts.
2025/06/27 00:59:37 fuzzer started
2025/06/27 00:59:37 dialing manager at localhost:45637
syzkaller login: [   99.792407] cgroup: Unknown subsys name 'net'
[   99.932963] cgroup: Unknown subsys name 'cpuset'
[   99.982597] cgroup: Unknown subsys name 'rlimit'
2025/06/27 01:00:02 syscalls: 200
2025/06/27 01:00:02 code coverage: enabled
2025/06/27 01:00:02 comparison tracing: enabled
2025/06/27 01:00:02 extra coverage: enabled
2025/06/27 01:00:02 setuid sandbox: enabled
2025/06/27 01:00:02 namespace sandbox: enabled
2025/06/27 01:00:02 Android sandbox: enabled
2025/06/27 01:00:02 fault injection: enabled
2025/06/27 01:00:02 leak checking: enabled
2025/06/27 01:00:02 net packet injection: enabled
2025/06/27 01:00:02 net device setup: enabled
2025/06/27 01:00:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/27 01:00:02 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/27 01:00:02 USB emulation: enabled
2025/06/27 01:00:02 hci packet injection: enabled
2025/06/27 01:00:02 wifi device emulation: enabled
2025/06/27 01:00:02 802.15.4 emulation: enabled
2025/06/27 01:00:02 fetching corpus: 0, signal 0/0 (executing program)
2025/06/27 01:00:04 starting 8 fuzzer processes
01:00:04 executing program 0:
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x7fffffff, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000000)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000004)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xc0, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004001}, 0x10000)
r2 = accept4(0xffffffffffffffff, &(0x7f0000000440)=@l2tp={0x2, 0x0, @remote}, &(0x7f00000004c0)=0x80, 0x800)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x8001)
r4 = accept4(r3, &(0x7f0000000640)=@ax25={{}, [@remote, @null, @null, @bcast, @remote, @bcast, @bcast, @rose]}, &(0x7f00000006c0)=0x80, 0x80000)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r3)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000005)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000e80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000880)={0x5a4, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x274}]}, @TIPC_NLA_NODE={0x248, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "fdb9e3d37c3c4c9f698cd4707369568b5870f91be466504b86a6c8240c6d2abcb3"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ID={0x85, 0x3, "ce761397509fb1518f90700b315e70e89a3654459f0a67149e74dbdd7065ccf2d1df30a5824fcde7a1c5a755db179fbee17c94cd1f787c294734604c2bf24fd82892de49f8b6403fee60f9dbf42f24d3bfd056f3661d00f28097836265c588f2e55b321b2b70c8b5c2c434a6386f6cb44a8427731365e077703b348b178e378d73"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "2014c3e40374eb351430d9bde46e22fcc171e751f597d0cd9ab83fccc0"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "3d177f3db20d269790bcb72998228ff48ec3769bc7"}}, @TIPC_NLA_NODE_ID={0x88, 0x3, "b6ad09f718aa0e04dbe60dc73fbde1483af0a7c4f59b7fb359fcef196abab36f8a1bcee6cba0348c0b15426f24584ac92d74ce0fc3e005654ef4a804ee4d70519df5d97e0d8dfbba43cb9875218fa96323084469abfe13037dd9aa137c3cb0d4f5c464b0787e5ca7969882cafa9088efb242e2576f1c0e7d4b224caeeda7b928bb8f5314"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "59434d91dc9072547036728d8c92616072fa6f8ae556e86d"}}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "800d94c736ed13490d577f355567d32751c8ed5ffd3e81311bb7"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd3}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdf, 0x3, "97eea1be91ce7c64ba50795b40a5a3bba8d606ab506a205b0bbc736cba192941df36b3b25dce61528516b8c25a73342608c7d68729a438650167c99c107ba0a8c1016144f1d549d75d3789935a1e610fbbeb2818f3c1d65063872e53ed06caa5dae29b1befc60dacfa088a6e0637f4e0ebeddac89d9ce53d8196e732719f11ef98ebcab4c0930c1aa44b2444a1446b9e45adf71ccd7da5ab9aa7552c7aaf1b3ec13a89b08fecd8fd48494aeaa3ddc6b0d0eb3bee5b6f85f75191a1651a8719f08b5d1b532b3e08e6fafd23b4be30fd79b4ad30fc6864731d572067"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40d6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @private0, 0x10000}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x95a1, @private1, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x6}}}}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5b2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}]}, 0x5a4}, 0x1, 0x0, 0x0, 0xe0124748883f7390}, 0x10)
r6 = accept4(r2, 0x0, &(0x7f0000000ec0), 0x80000)
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000f40), r4)
sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r7, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}}, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000001140), r4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r2)
mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, r3, 0x7fffffff)

01:00:04 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x5, 0x0, 0x6, 0x2, 0x5}, 0x2, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x9, 0x0, 0x7, 0x9})
write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x47, 0x2}, 0x7)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x13, 0x1, {0x20, 0x2, 0x3}}, 0x14)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe8bf, 0x43}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
write$P9_RCREATE(r0, &(0x7f0000000300)={0x18, 0x73, 0x2, {{0x20, 0x4, 0x6}, 0x7f}}, 0x18)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40054}, 0x4040004)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r2=>0x0})
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/cgroup\x00')
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/mnt\x00')
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000740)={0x7, 0x6d, 0x1}, 0x7)
r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f00000008c0)={&(0x7f00000007c0), &(0x7f0000000800)=""/161, 0xa1})
pipe2$9p(&(0x7f0000000900)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_ROPEN(r6, &(0x7f0000000940)={0x18, 0x71, 0x1, {{0x4, 0x2}, 0x5}}, 0x18)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r5)
sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r8, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x22}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000)

01:00:04 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x7c}}, 0x80)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x38}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', <r1=>0x0, 0x29, 0x99, 0x3f, 0x6, 0x40, @remote, @mcast1, 0x10, 0x40, 0x7, 0x8}})
r2 = socket(0x1f, 0x4, 0x20)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x420, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r2)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x103, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4004)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004000}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xc0, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x97}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x31}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4004010}, 0x4801)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r6 = accept4(r2, &(0x7f0000000940)=@caif=@dgm, &(0x7f00000009c0)=0x80, 0x80800)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000000a40), r2)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000b40)={'team0\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'syztnl2\x00', <r9=>r1, 0x1e4c41a254093252, 0x0, 0x6, 0x1, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x20, 0x10, 0x9, 0xffff8d43}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000f80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d00)={0x224, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x14000000}}}]}}, {{0x8, 0x1, r8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1ff, 0x4, 0x1, 0xfffffff7}, {0x40, 0x9, 0x2, 0x40}, {0x3, 0xff, 0x52, 0x9}]}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r1}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x1}, 0x20800)
sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000)
sendmsg$TEAM_CMD_NOOP(r6, &(0x7f00000013c0)={&(0x7f00000010c0), 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x11c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}]}, 0x11c}}, 0x10)

[  126.787263] audit: type=1400 audit(1750986004.741:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
01:00:04 executing program 3:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4000)
write$P9_RWALK(r0, &(0x7f0000000040)={0x64, 0x6f, 0x1, {0x7, [{0x40, 0x2}, {0x8, 0x4, 0x4}, {0x10, 0x4}, {0x0, 0x2}, {0x20, 0x3, 0x4}, {0x20, 0x4, 0x2}, {0x0, 0x0, 0x6}]}}, 0x64)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RLINK(r1, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7)
write$P9_RMKNOD(r0, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x0, 0x1, 0x4}}, 0x14)
write$P9_RUNLINKAT(r0, &(0x7f0000000180)={0x7, 0x4d, 0x1}, 0x7)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000001c0)={0x4a, 0x7d, 0x2, {0x0, 0x43, 0x5, 0x2, {0x4, 0x3, 0x5}, 0x10000, 0x400, 0x2, 0x80000001, 0x10, '\x0f}.\'+$@)*&,.,@%\x1a'}}, 0x4a)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
write$P9_RFLUSH(r2, &(0x7f0000000280)={0x7, 0x6d, 0x1}, 0x7)
write$P9_RCREATE(r1, &(0x7f00000002c0)={0x18, 0x73, 0x1, {{0x10, 0x0, 0x5}, 0x2f}}, 0x18)
write$P9_RREADLINK(r1, &(0x7f0000000300)={0x10, 0x17, 0x3, {0x7, './file0'}}, 0x10)
write$P9_RSYMLINK(r1, &(0x7f0000000340)={0x14, 0x11, 0x1, {0x10, 0x4}}, 0x14)
write$P9_RATTACH(r1, &(0x7f0000000380)={0x14, 0x69, 0x2, {0x1, 0x3, 0x3}}, 0x14)
pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
write$P9_RMKNOD(r3, &(0x7f0000000400)={0x14, 0x13, 0x2, {0x42, 0x0, 0x3}}, 0x14)
pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80800)
write$P9_RLINK(r4, &(0x7f0000000480)={0x7, 0x47, 0x1}, 0x7)
pipe2$9p(&(0x7f00000004c0), 0x800)
pipe2$9p(&(0x7f0000000500), 0x80000)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000580)={0x7, 0x33, 0x2}, 0x7)

01:00:04 executing program 4:
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'sit0\x00', <r0=>0x0, 0x2, 0x20, 0x5c, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x20, 0x354, 0x4b6}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', <r3=>0x0, 0x4, 0x3, 0xd3, 0x2, 0x4, @private1, @mcast2, 0x8, 0x40, 0x400, 0x5}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', <r5=>0x0, 0x4, 0x7, 0x0, 0xffff2929, 0x17, @dev={0xfe, 0x80, '\x00', 0x34}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x7, 0x0, 0x3}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', <r8=>0x0, 0x4, 0x8, 0x3, 0x2, 0x4, @local, @mcast1, 0x7800, 0x10, 0x2d5c00, 0xffffffff}})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x61000100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000680)={0x7e0, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8, 0x1, r0}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r3}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x40, 0x7f, 0x7, 0xff}, {0x8, 0x0, 0x40, 0x76}, {0x3, 0x98, 0xff, 0x2}, {0x7ff, 0x1, 0x8, 0xffffffff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r5}, {0x4}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x44}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x283a4f94}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}]}, 0x7e0}, 0x1, 0x0, 0x0, 0x20000050}, 0x6008804)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000f00), 0x9)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x240000d8}, 0x200c084)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000001040)=0x1)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f00000010c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001180)={'ip6_vti0\x00', &(0x7f0000001100)={'syztnl2\x00', <r10=>r1, 0x2f, 0x2, 0x3f, 0x7, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0xd7, 0x3, 0xfffffe01}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'team0\x00', <r11=>0x0})
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x40, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r10}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x200}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8020}, 0x8000)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x20008840)

01:00:04 executing program 5:
r0 = socket(0x1f, 0x7, 0x8)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x1)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000100)="185e92b01e98d9d4d7d6fdeacc1cb1c1f1bfe835fe103463b493ebb814beba4661f2babe66a857fdafa686c64c0e92bacb06b7ad854d12bf302ab65cf48c844528b47e48a2f365186f0523ed3bb4b083366858b23a5d8a829cc5cb0b331b5f47121ba9fe36224f06eb51f211bee310acd8c08a243d70f1ad5410cd8516418796cb73e8f4d326ed62e1d8091c87427a6ca2219baf751cba29775050286bb050a7596345fc75fe4ae0629eed7bc30b03d9c800469117edc3a29a6746cde69f12d842b2732f2a8cb910c658c816934e870fc7a16cb9b20b76ce6829cd1b09323570641c7ad04c783debf451bbdc0aa9037703b02a90e0f0b261e1541a8e0743", 0xfe, 0x2, 0x0, 0x3, r1}, &(0x7f0000000280))
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00'})
clock_gettime(0x0, &(0x7f00000003c0)={<r2=>0x0, <r3=>0x0})
io_getevents(0x0, 0x590b5ebd, 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], &(0x7f0000000400)={r2, r3+60000000})
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x18602, 0x0)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x80000001)
io_setup(0x1, &(0x7f0000000480)=<r5=>0x0)
r6 = timerfd_create(0x0, 0x0)
io_cancel(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, r6, &(0x7f00000004c0)="f8ce45e8c29abc38017afa3af74cb79164db792fc5419068eafa633eb532879e244b0a", 0x23, 0xfffffffffffffff8, 0x0, 0x3, r1}, &(0x7f0000000540))
clock_gettime(0x5, &(0x7f0000000580))
r7 = getpid()
sched_rr_get_interval(r7, &(0x7f00000005c0))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
io_pgetevents(r5, 0x10001, 0x2, &(0x7f0000000600)=[{}, {}], &(0x7f0000000640)={0x77359400}, &(0x7f00000006c0)={&(0x7f0000000680)={[0x3f]}, 0x8})
write$P9_RSTAT(r1, &(0x7f0000000700)={0x4e, 0x7d, 0x1, {0x0, 0x47, 0x47f, 0x7ff, {0x20, 0x2, 0x2}, 0x80880000, 0xff, 0x3, 0x2, 0x0, '', 0x0, '', 0x6, '^)),&/', 0xe, '/dev/snapshot\x00'}}, 0x4e)
clock_gettime(0x0, &(0x7f0000000800)={<r8=>0x0, <r9=>0x0})
io_getevents(r5, 0x1, 0x4, &(0x7f0000000780)=[{}, {}, {}, {}], &(0x7f0000000840)={r8, r9+60000000})

01:00:04 executing program 6:
membarrier(0x40, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xd4}}, 0x40)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x64}, 0x1, 0x0, 0x0, 0x240408d1}, 0x840)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfffffffa}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x100}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x408c005}, 0x4000040)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x421, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000740)={'team0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x8c, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000811}, 0x24000880)
membarrier(0x4, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000900)={0x2c4, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b5d8f17}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7693}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd453}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41b8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd250}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74e521de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2261}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x760849e6}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaae0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc45}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e126704}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25f6dab6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfd6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x436c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x208f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42b1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x486f7d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x61cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1692ac78}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68ebcfe3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf350}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51b3b2b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2485b722}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8045}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5709}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e84}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c26eebc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f62f665}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xde54f24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75c258a0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c7b27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78ec531c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x574c1923}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ccd11ed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x614d1de4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a7c56c1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x529b1828}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dbf017f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x196b2ecc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x671fb568}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23f7c67a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bd7b33e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7540e9ab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x220623a0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x535516ea}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c59a8c4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x84, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8fea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ea59f2b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf546be1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdd22b34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1de0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39bfe8f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a889a49}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e3bcc0c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57e59e82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e958dba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde2b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7201dd66}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x359c}]}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20040014}, 0x20000000)
r5 = accept4(r2, &(0x7f0000000c80)=@l2tp6, &(0x7f0000000d00)=0x80, 0x800)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r5)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r6, 0x20, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x404c000)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r2)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000010c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x14c, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "73704dd40760f99318d814fe106487533b0113a81e1d1e2a00"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x23, 0x3, "c318a43440089797dfcebd04617cc44f22c976b67a4e217bd53cd2617cea80"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "9555985d5ca4ba94417e9f791e9eac3c86334e29cf"}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6fc}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x24010, 0xffffffffffffffff, 0x0)

01:00:04 executing program 7:
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/186)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000000c0))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r1=>0x0})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000001c0)={0x4, 0x24de, 0xffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000240), r2)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000280))
r3 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x7fff, 0x82080)
ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x7bf08)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r4, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x80)
sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x15, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040800)
prctl$PR_GET_FPEMU(0x9, &(0x7f00000007c0))
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xac, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x2004c845}, 0x20000080)

[  128.297296] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  128.302718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  128.306899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  128.315432] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  128.322737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  128.470594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  128.474666] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  128.489006] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  128.490825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  128.497375] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  128.502893] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  128.505997] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  128.508411] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  128.511755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  128.525954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  128.528797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  128.535562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  128.544336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  128.547644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.553982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  128.593359] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  128.599009] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  128.603785] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  128.610990] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  128.616620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  128.626707] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  128.634781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  128.639367] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  128.643386] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  128.652831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  128.671374] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  128.673177] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  128.693352] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  128.702013] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  128.721848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  128.723797] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  128.739661] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  128.756958] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  128.789285] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  128.807685] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  130.378964] Bluetooth: hci0: command tx timeout
[  130.634943] Bluetooth: hci2: command tx timeout
[  130.636409] Bluetooth: hci1: command tx timeout
[  130.698379] Bluetooth: hci3: command tx timeout
[  130.762736] Bluetooth: hci4: command tx timeout
[  130.764162] Bluetooth: hci5: command tx timeout
[  130.826607] Bluetooth: hci6: command tx timeout
[  130.890152] Bluetooth: hci7: command tx timeout
[  132.426386] Bluetooth: hci0: command tx timeout
[  132.683065] Bluetooth: hci2: command tx timeout
[  132.683534] Bluetooth: hci1: command tx timeout
[  132.747137] Bluetooth: hci3: command tx timeout
[  132.810704] Bluetooth: hci4: command tx timeout
[  132.811935] Bluetooth: hci5: command tx timeout
[  132.874130] Bluetooth: hci6: command tx timeout
[  132.938271] Bluetooth: hci7: command tx timeout
[  134.475332] Bluetooth: hci0: command tx timeout
[  134.730186] Bluetooth: hci1: command tx timeout
[  134.730649] Bluetooth: hci2: command tx timeout
[  134.794414] Bluetooth: hci3: command tx timeout
[  134.858266] Bluetooth: hci5: command tx timeout
[  134.858710] Bluetooth: hci4: command tx timeout
[  134.922169] Bluetooth: hci6: command tx timeout
[  134.986105] Bluetooth: hci7: command tx timeout
[  136.522288] Bluetooth: hci0: command tx timeout
[  136.779218] Bluetooth: hci2: command tx timeout
[  136.779693] Bluetooth: hci1: command tx timeout
[  136.842367] Bluetooth: hci3: command tx timeout
[  136.906126] Bluetooth: hci5: command tx timeout
[  136.906564] Bluetooth: hci4: command tx timeout
[  136.972070] Bluetooth: hci6: command tx timeout
[  137.034098] Bluetooth: hci7: command tx timeout
[  188.844117] syz-executor.6 (289) used greatest stack depth: 24864 bytes left
[  191.391438] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  191.394577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  191.399932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  191.411415] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  191.417289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  191.447376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  191.454689] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  191.460397] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  191.461930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  191.468562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  191.471134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  191.473261] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  191.477939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  191.481703] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  191.483600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  191.536286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  191.545537] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  191.554603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  191.554942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.559344] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.561288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  191.562385] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  191.570362] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  191.580297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  191.585675] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  191.590679] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  191.600927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  191.602541] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  191.607643] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  191.610928] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  191.613778] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  191.619485] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  191.621149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  191.625517] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  191.631184] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  191.632263] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  191.634835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  191.644143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  191.663363] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  191.666386] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  193.482175] Bluetooth: hci0: command tx timeout
[  193.551478] Bluetooth: hci1: command tx timeout
[  193.552677] Bluetooth: hci2: command tx timeout
[  193.674234] Bluetooth: hci3: command tx timeout
[  193.738216] Bluetooth: hci4: command tx timeout
[  193.802227] Bluetooth: hci6: command tx timeout
[  193.803404] Bluetooth: hci5: command tx timeout
[  193.930689] Bluetooth: hci7: command tx timeout
[  195.531527] Bluetooth: hci0: command tx timeout
[  195.597169] Bluetooth: hci2: command tx timeout
[  195.597645] Bluetooth: hci1: command tx timeout
[  195.723167] Bluetooth: hci3: command tx timeout
[  195.787332] Bluetooth: hci4: command tx timeout
[  195.850312] Bluetooth: hci5: command tx timeout
[  195.850800] Bluetooth: hci6: command tx timeout
[  195.979454] Bluetooth: hci7: command tx timeout
[  197.579674] Bluetooth: hci0: command tx timeout
[  197.642396] Bluetooth: hci2: command tx timeout
[  197.643252] Bluetooth: hci1: command tx timeout
[  197.770126] Bluetooth: hci3: command tx timeout
[  197.834119] Bluetooth: hci4: command tx timeout
[  197.899073] Bluetooth: hci5: command tx timeout
[  197.899563] Bluetooth: hci6: command tx timeout
[  198.026137] Bluetooth: hci7: command tx timeout
[  199.627859] Bluetooth: hci0: command tx timeout
[  199.690875] Bluetooth: hci1: command tx timeout
[  199.692572] Bluetooth: hci2: command tx timeout
[  199.818213] Bluetooth: hci3: command tx timeout
[  199.882961] Bluetooth: hci4: command tx timeout
[  199.946846] Bluetooth: hci6: command tx timeout
[  199.948138] Bluetooth: hci5: command tx timeout
[  200.074430] Bluetooth: hci7: command tx timeout
[  253.344767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  253.352630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  253.361668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  253.371698] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  253.377657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  253.533947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  253.538851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  253.541450] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  253.546794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  253.560781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  253.688565] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  253.703549] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  253.722382] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  253.727994] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  253.735758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  253.741787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  253.746643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  253.751818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  253.761206] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  253.766823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  253.768803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  253.806786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  253.809540] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  253.811727] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  253.828834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  253.830285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  253.834973] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  253.844287] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  253.848627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  253.856526] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  253.859320] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  253.863444] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  253.871948] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  253.880695] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  253.885258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  253.890061] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  253.910395] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  253.923841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  253.928382] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  253.956634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  255.434384] Bluetooth: hci0: command tx timeout
[  255.626305] Bluetooth: hci1: command tx timeout
[  255.820221] Bluetooth: hci3: command tx timeout
[  255.820434] Bluetooth: hci2: command tx timeout
[  255.947391] Bluetooth: hci4: command tx timeout
[  256.010671] Bluetooth: hci5: command tx timeout
[  256.011119] Bluetooth: hci6: command tx timeout
[  256.139454] Bluetooth: hci7: command tx timeout
[  257.482767] Bluetooth: hci0: command tx timeout
[  257.674246] Bluetooth: hci1: command tx timeout
[  257.868650] Bluetooth: hci3: command tx timeout
[  257.868696] Bluetooth: hci2: command tx timeout
[  257.997084] Bluetooth: hci4: command tx timeout
[  258.058183] Bluetooth: hci6: command tx timeout
[  258.061093] Bluetooth: hci5: command tx timeout
[  258.186159] Bluetooth: hci7: command tx timeout
[  259.531297] Bluetooth: hci0: command tx timeout
[  259.722147] Bluetooth: hci1: command tx timeout
[  259.914560] Bluetooth: hci2: command tx timeout
[  259.914594] Bluetooth: hci3: command tx timeout
[  260.042684] Bluetooth: hci4: command tx timeout
[  260.106183] Bluetooth: hci5: command tx timeout
[  260.106213] Bluetooth: hci6: command tx timeout
[  260.234097] Bluetooth: hci7: command tx timeout
[  261.578099] Bluetooth: hci0: command tx timeout
[  261.770720] Bluetooth: hci1: command tx timeout
[  261.962442] Bluetooth: hci2: command tx timeout
[  261.962707] Bluetooth: hci3: command tx timeout
[  262.091943] Bluetooth: hci4: command tx timeout
[  262.154479] Bluetooth: hci5: command tx timeout
[  262.154514] Bluetooth: hci6: command tx timeout
[  262.282079] Bluetooth: hci7: command tx timeout
[  316.059774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  316.062966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  316.068005] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  316.078109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  316.082887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  316.385530] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  316.391695] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  316.393930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  316.409576] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  316.416626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  316.659674] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  316.665645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  316.674742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  316.681579] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  316.686267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  316.716697] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  316.732969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  316.740743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  316.776924] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  316.780475] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  316.798826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  316.806881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  316.823414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  316.851588] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  316.867295] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  316.957491] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  316.964637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  316.967856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  316.988359] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  317.007003] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  317.255016] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  317.286514] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  317.289138] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  317.301142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  317.326469] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  317.485154] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  317.536768] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  317.546729] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  317.598912] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  317.618451] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  318.154425] Bluetooth: hci0: command tx timeout
[  318.477080] Bluetooth: hci1: command tx timeout
[  318.794211] Bluetooth: hci2: command tx timeout
[  318.922146] Bluetooth: hci3: command tx timeout
[  318.987102] Bluetooth: hci5: command tx timeout
[  319.178163] Bluetooth: hci4: command tx timeout
[  319.498453] Bluetooth: hci6: command tx timeout
[  319.692420] Bluetooth: hci7: command tx timeout
[  320.202117] Bluetooth: hci0: command tx timeout
[  320.522094] Bluetooth: hci1: command tx timeout
[  320.842109] Bluetooth: hci2: command tx timeout
[  320.970114] Bluetooth: hci3: command tx timeout
[  321.034596] Bluetooth: hci5: command tx timeout
[  321.226121] Bluetooth: hci4: command tx timeout
[  321.546104] Bluetooth: hci6: command tx timeout
[  321.740154] Bluetooth: hci7: command tx timeout
[  322.250142] Bluetooth: hci0: command tx timeout
[  322.570106] Bluetooth: hci1: command tx timeout
[  322.891196] Bluetooth: hci2: command tx timeout
[  323.018115] Bluetooth: hci3: command tx timeout
[  323.083060] Bluetooth: hci5: command tx timeout
[  323.274200] Bluetooth: hci4: command tx timeout
[  323.594982] Bluetooth: hci6: command tx timeout
[  323.786502] Bluetooth: hci7: command tx timeout
[  324.298273] Bluetooth: hci0: command tx timeout
[  324.619459] Bluetooth: hci1: command tx timeout
[  324.939346] Bluetooth: hci2: command tx timeout
[  325.066259] Bluetooth: hci3: command tx timeout
[  325.130092] Bluetooth: hci5: command tx timeout
[  325.322433] Bluetooth: hci4: command tx timeout
[  325.642206] Bluetooth: hci6: command tx timeout
[  325.834112] Bluetooth: hci7: command tx timeout
[  378.976404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  378.985975] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  378.998153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  379.004457] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  379.012609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  379.054747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  379.061433] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  379.066671] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  379.073365] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  379.076906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  379.107676] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  379.123415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  379.125959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  379.132375] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  379.140640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  379.255599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  379.269476] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  379.288600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  379.293807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  379.298719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  379.416786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  379.426464] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  379.437405] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  379.459767] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  379.484906] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  379.488830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  379.492375] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  379.493523] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  379.496808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  379.500961] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  379.512335] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  379.517489] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  379.519858] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  379.540356] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  379.555465] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  379.562822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  379.568455] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  379.619521] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  379.625811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  379.667623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  381.068116] Bluetooth: hci0: command tx timeout
[  381.130249] Bluetooth: hci1: command tx timeout
[  381.195158] Bluetooth: hci2: command tx timeout
[  381.386133] Bluetooth: hci3: command tx timeout
[  381.642177] Bluetooth: hci7: command tx timeout
[  381.770188] Bluetooth: hci6: command tx timeout
[  382.026407] Bluetooth: hci4: command tx timeout
[  382.027338] Bluetooth: hci5: command tx timeout
[  383.116320] Bluetooth: hci0: command tx timeout
[  383.178370] Bluetooth: hci1: command tx timeout
[  383.242249] Bluetooth: hci2: command tx timeout
[  383.434412] Bluetooth: hci3: command tx timeout
[  383.690306] Bluetooth: hci7: command tx timeout
[  383.818185] Bluetooth: hci6: command tx timeout
[  384.074156] Bluetooth: hci5: command tx timeout
[  384.074178] Bluetooth: hci4: command tx timeout
[  385.164284] Bluetooth: hci0: command tx timeout
[  385.227201] Bluetooth: hci1: command tx timeout
[  385.290479] Bluetooth: hci2: command tx timeout
[  385.482294] Bluetooth: hci3: command tx timeout
[  385.739113] Bluetooth: hci7: command tx timeout
[  385.867183] Bluetooth: hci6: command tx timeout
[  386.122197] Bluetooth: hci4: command tx timeout
[  386.123115] Bluetooth: hci5: command tx timeout
[  387.212214] Bluetooth: hci0: command tx timeout
[  387.274339] Bluetooth: hci1: command tx timeout
[  387.338496] Bluetooth: hci2: command tx timeout
[  387.530359] Bluetooth: hci3: command tx timeout
[  387.786163] Bluetooth: hci7: command tx timeout
[  387.914150] Bluetooth: hci6: command tx timeout
[  388.170244] Bluetooth: hci4: command tx timeout
[  388.171170] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
01:05:05  Registers:
info registers vcpu 0
RAX=ffffffff8160512e RBX=0000000000000001 RCX=0000000000000001 RDX=ffff8880242af801
RSI=ffff8880242af890 RDI=ffff8880242af848 RBP=ffff8880242af848 RSP=ffff8880242af730
R8 =ffffffff867cca18 R9 =ffff8880242af830 R10=000000000003b9fd R11=000000000000441c
R12=ffff8880242af850 R13=ffff8880242af838 R14=ffff8880242af898 R15=ffff8880242af7f0
RIP=ffffffff81354820 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55f6000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f87f7acd27c CR3=0000000026084000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e
XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249
XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffffffff81604da0 RCX=ffff88806cf089ec RDX=1ffff1100d9e1153
RSI=ffffffff81ae96b4 RDI=ffff88806cf08a98 RBP=ffff88806cf08b30 RSP=ffff88806cf08a70
R8 =ffffffff8688e68c R9 =ffff88806cf08ad8 R10=000000000003b9fd R11=00000000000248db
R12=ffff88806cf08b60 R13=0000000000000000 R14=ffff888023ff5280 R15=ffff88806cf08a98
RIP=ffffffff81353c80 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f140b51b540 00000000 00000000
GS =0000 ffff8880e56f6000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f140b706620 CR3=000000002d50b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ff00ff00ff00ff00ff00ffffff00 XMM01=010001000100010001000100010100ff
XMM02=61305f315f315f4c53534e45504f0030 XMM03=000000000000000000000000004f0030
XMM04=504f0061305f315f315f4c53534e4550 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000