Warning: Permanently added '[localhost]:32130' (ECDSA) to the list of known hosts.
2023/08/21 09:50:21 fuzzer started
2023/08/21 09:50:21 dialing manager at localhost:46849
syzkaller login: [   92.246333] cgroup: Unknown subsys name 'net'
[   92.390113] cgroup: Unknown subsys name 'rlimit'
[  103.696821] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2023/08/21 09:50:34 syscalls: 209
2023/08/21 09:50:34 code coverage: enabled
2023/08/21 09:50:34 comparison tracing: enabled
2023/08/21 09:50:34 extra coverage: enabled
2023/08/21 09:50:34 setuid sandbox: enabled
2023/08/21 09:50:34 namespace sandbox: enabled
2023/08/21 09:50:34 Android sandbox: enabled
2023/08/21 09:50:34 fault injection: enabled
2023/08/21 09:50:34 leak checking: enabled
2023/08/21 09:50:34 net packet injection: enabled
2023/08/21 09:50:34 net device setup: enabled
2023/08/21 09:50:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2023/08/21 09:50:34 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/08/21 09:50:34 USB emulation: enabled
2023/08/21 09:50:34 hci packet injection: enabled
2023/08/21 09:50:34 wifi device emulation: enabled
2023/08/21 09:50:34 802.15.4 emulation: enabled
2023/08/21 09:50:34 fetching corpus: 0, signal 0/0 (executing program)
2023/08/21 09:50:36 starting 8 fuzzer processes
09:50:36 executing program 1:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x7)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001080)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/4096, 0x1000})
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
getegid()
r0 = memfd_secret(0x80000)
read$usbmon(r0, &(0x7f00000010c0)=""/73, 0x49)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000001240)={&(0x7f0000001140), &(0x7f0000001180)=""/153, 0x99})
msgrcv(0x0, &(0x7f0000001280)={0x0, ""/18}, 0x1a, 0x0, 0x800)
r1 = open(&(0x7f00000012c0)='./file0\x00', 0x200, 0x21)
read$usbmon(r1, &(0x7f0000001300)=""/48, 0x30)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000013c0), 0x733400, 0x0)
r3 = getuid()
r4 = getuid()
r5 = getuid()
stat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_fd(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380), 0xc2, &(0x7f00000015c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x9}}, {@debug={'debug', 0x3d, 0x1f}}, {@msize={'msize', 0x3d, 0x80000000}}, {@access_uid={'access', 0x3d, r3}}, {@loose}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@access_client}, {@nodevmap}], [{@euid_eq={'euid', 0x3d, r5}}, {@obj_role}, {@fowner_gt={'fowner>', r6}}, {@fowner_eq}]}})
stat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780))
stat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840))
stat(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900))

09:50:36 executing program 0:
r0 = memfd_secret(0x0)
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@obj_user}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, ')'}}]}})
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_io_uring_setup(0x4ebf, &(0x7f0000000100)={0x0, 0x5c8b, 0x0, 0x3, 0x14a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x1c9e, &(0x7f0000000200)={0x0, 0x6801, 0x2, 0x0, 0x3bc, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000006c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/55, 0x37}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/152, 0x98}], 0x4, &(0x7f0000000580)=""/245, 0xf5}, 0x0, 0x140, 0x0, {0x3}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000b40)={&(0x7f0000000700), 0xc, &(0x7f0000000b00)={&(0x7f0000000740)={0x384, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x358, 0x8, 0x0, 0x1, [{0x354, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x308, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x4000811}, 0x800)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x120, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x600000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x568d4d4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8a9f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x33d3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2f1a}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008010)
syz_io_uring_setup(0x4dcd, &(0x7f0000000d80)={0x0, 0xec0e, 0x8, 0x2, 0x2ba, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000e00), &(0x7f0000000e40))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000e80), 0x80, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xf8, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x90}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x71}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x16}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x59}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r4)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x6c, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x99}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}]}]}, 0x6c}}, 0x4000050)
r6 = syz_open_dev$usbmon(&(0x7f0000001240), 0xffffffffffffff7f, 0x101081)
ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x8)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x38}, 0x1, 0x0, 0x0, 0x54}, 0x2000a000)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x34, r5, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x20009085)

09:50:36 executing program 2:
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r0=>0x0, @remote, @private}, &(0x7f0000000040)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000080)={'erspan0\x00', <r1=>r0, 0x40, 0x8000, 0x2, 0x0, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x65, 0x0, 0x55, 0x29, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @broadcast, {[@timestamp={0x44, 0xc, 0x6a, 0x0, 0x8, [0x10001, 0x3]}, @lsrr={0x83, 0xf, 0xb7, [@broadcast, @local, @private=0xa010100]}]}}}}})
r2 = memfd_secret(0x0)
write$vga_arbiter(r2, &(0x7f0000000140)=@other={'decodes', ' ', 'mem'}, 0xc)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x8c00, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000200)={0xb40, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0xab8, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bc4f469dabd1e3249af5a4b387b3d143d18e8953506c1d67e946d29982c0eecb"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "af0a502d4f3c3aa0a33076d95e1d97ce1adfc266a6b3af0d42611f15f1d1f672"}]}, {0x1bc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6f8, @loopback, 0x9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x6, @remote, 0x3}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @empty, 0x6}}, @WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}]}]}, {0x264, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "51b3dffcb7c66c08d0bd8326bb7f33aeaf957bf3efdc57c0dae26904de221503"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a068da027409992c096a9e964bf5c472b0c6f87e24af3e4851b24fa895f3bb29"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffb}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x48b}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4c4d781b3fdc4791de2f86c846997b4981ea7da1d50fbdd1fd60fbcadbe8fc7e"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff8}}, @WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}]}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x3fc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ALLOWEDIPS={0x3a0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x2}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "622677685746600d4e5047d8f438a0952511f6f527e6bb1365ddbba469215ead"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1d677df144b686bd23def67226d86c196043702fb0a7403c10afa0b59e15fd0a"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ffdc08d11c56628bedcd99d89d7c615b240abc10cfa04be91dece0be95f36f56"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7ff, @mcast2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7a3c22a7a4f9619557e0ccd7fae598a0bddc68db7d83b767406c338445d1dd75"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x80, @mcast2, 0x80000001}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @remote, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b31620724d58dc0377bc07eef507426ee575b1fd88b27cfc21b41505019f1b08"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xb40}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000011)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0)
ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000e80)={&(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000e40)=""/22, 0x16})
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2040, 0x0)
r5 = getegid()
ioctl$TUNSETGROUP(r4, 0x400454ce, r5)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000fc0)={'ip6gre0\x00', &(0x7f0000000f40)={'ip6tnl0\x00', <r6=>r1, 0x29, 0x80, 0x7, 0xfffffffb, 0x40, @loopback, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x20, 0x10, 0x8, 0x19b}})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x196}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000804}, 0x0)
openat$cgroup_ro(r2, &(0x7f0000001100)='cgroup.controllers\x00', 0x0, 0x0)
r7 = syz_open_dev$vcsn(&(0x7f0000001140), 0x1, 0x501b80)
write$nbd(r7, &(0x7f0000001180)={0x67446698, 0x0, 0x3, 0x2, 0x4, "6fb6ac0639d86d2227b692855107610a8f2d94fdb38747c132cd8b62ed7a85118428e8e8af6e651ab1555bf0db69ebebb34c74860a6afb1e0371f989b879e3bdc61a8100c75f5692454cd9a5a10c5775461abf2c649939902b1c8589718b3476016c29"}, 0x73)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001200)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x8, 0x0, 0x4, 0x3, 0x1}, 0x7ff)
r8 = open(&(0x7f0000001240)='./file0\x00', 0x12100, 0x188)
ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x4)
mount_setattr(r7, &(0x7f0000001280)='./file1\x00', 0x8000, &(0x7f00000012c0)={0x100008, 0x8, 0x1c0000, {r2}}, 0x20)

09:50:36 executing program 3:
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x700, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}]}, 0x68}}, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x138, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x16}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xc}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x689f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xde}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x83d9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffff01}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x68}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2720}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x24000005)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1e}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x4c}}, 0x80)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4)
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}}, 0x2000c015)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000800), 0x400000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000880)={'ip6_vti0\x00', <r8=>0x0, 0x29, 0x92, 0x7, 0x448, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x8, 0x8, 0x8}})
sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8010)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000a40), r7)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, r6, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000c00)={'ip6gre0\x00', &(0x7f0000000b80)={'ip6tnl0\x00', <r10=>0x0, 0x2f, 0x3f, 0xaf, 0x200, 0x50, @private2, @mcast1, 0x10, 0x8000, 0x4, 0x1000}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6tnl0\x00', r10, 0x2f, 0x3f, 0x28, 0xfff, 0x8, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8, 0x8, 0x7e, 0xffffffe0}})

[  105.262749] audit: type=1400 audit(1692611436.237:6): avc:  denied  { execmem } for  pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:50:36 executing program 4:
msgget(0x2, 0x5c8)
r0 = msgget$private(0x0, 0x400)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/101)
msgget(0x0, 0x4)
r1 = msgget(0x1, 0x0)
r2 = msgget(0x0, 0xf5)
msgsnd(r2, &(0x7f0000000080)={0x1, "1eb363647d65da8dc3cf4c85dd569fa0ce1f0d83dc7a61b013c3cc30584654fb7786bd4115dcf48be280cb62c4a0f7afbdf8f3ef99a00e51688b5312f13881643317993fe4dec71ecd407b"}, 0x53, 0x800)
msgctl$IPC_RMID(r1, 0x0)
r3 = msgget(0x2, 0x8)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000140)=0x5, 0x4)
syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff)
r5 = msgget(0x2, 0x0)
msgsnd(r1, &(0x7f00000001c0)={0x0, "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"}, 0x1008, 0x0)
msgsnd(r3, &(0x7f0000001200)={0x2, "69fa27b337dcf3b0ecbd867a030d4ef4381bf3c164733ce85c116c0023d18112d606c416fb6653ec75b39cc2e9bb1d549e9371ab83430f1af19ad64d1985740c79d7e33b877a7aa4ea837a1ee0b0468ca08777f213dc1866b48a2a4827d52b69f1f2b3956d990b8451b729056c8cfe919b4efe9ad0519bdf6b12dc4140f577a163f30e870139108d6c9401da03d9cc59eccc8bccc4822172ac215407c3a0ccb8a7f30f4776f135d82e37a711153ed3cd62a56116da657b5856cbddc4a0a2f0a2ea30927ae8c80cd58de8e91f16"}, 0xd5, 0x0)
msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000001300)=""/47)
msgsnd(r1, &(0x7f0000001340)={0x3, "86e1c739c4c5d9b902cd258bc4c1c457cbd516a9513fee1fb09430dbc5a4f7e047736eb5e3c31c00ba383e0b6b0714b2ea1499e3db4a2b2dcec70b77720ae9f8586e93e70c957b918bb6e9cdd5bd23cf51b448e01927babdc0ea6b1b76008d52a3cc4b0692f125d54d22656e58598591ecbe452081979a465332e9dc28de246e720e0e6b8bc623aaf88cbe1877d5200d3be7d904c09bfb3ea5d7df49e56381f7b67e16fa8af419e0015fe3f989069ad9cf8632f68166758a044da6ea707027fa9d17762a19fd2dd3d08a31f66f91d1351c6822b1da19950d26b953b9a11c2e27e4f5126db82289918bda5341529a326e013632"}, 0xfb, 0x0)
msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001440)=""/4096)
msgsnd(r5, &(0x7f0000002440)={0x2, "dc9c3c04ff86b382d8c7ad18bf0b2cb048c489f78fdb"}, 0x1e, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002a40)={&(0x7f0000002780)={0x2bc, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x24}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff7fff}}}]}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x20000055}, 0x40001)

09:50:36 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x3f)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000180)={'bridge_slave_0\x00'})
r3 = dup2(r2, r2)
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000001c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$nbd(r3, &(0x7f0000000200)={0x67446698, 0x1, 0x0, 0x3, 0x2, "b7ef87ccb52f252e6f61be9ac736f67fbf8d0d91"}, 0x24)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x1, 0x1, [@empty]})
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000280)=0x8)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r4=>r0}, './file0\x00'})
ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000300))
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000340)=0x1)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000380)={0x0, 0x4, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @remote, @empty, @multicast]})
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=@getae={0x174, 0x1f, 0x20, 0x70bd29, 0x25dfdbfe, {{@in6=@loopback, 0x2, 0xa, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400, 0x34ff}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @lifetime_val={0x24, 0x9, {0xfab5, 0x100000001, 0xffffffffffffffe0, 0x80000000}}, @algo_crypt={0xfe, 0x2, {{'xts(aes)\x00'}, 0x5b0, "7c3db592db91fd500b95c0a1d1c0f7a5b288c447d7b8932e8030dfafb9593359aec1138d354e7d1cf5c6fa65e15e6681857402f56c8fab8ce402487ec654ef87a15289246214099a109d10ac3fad4e01a241a465d132e18b1c12cae14837540c87ff0843e99fad3cf479654c9757600a88b9ad564df78a19255bb27872309e7fd176fc01f0a526de20257eb43fa8de35af7eb6eddf471512f3a6bfa1a684689fa334936babaf20a1462a53ba91b8c598fdb19cb1d29c"}}, @extra_flags={0x8, 0x18, 0xfe}]}, 0x174}, 0x1, 0x0, 0x0, 0x1000c004}, 0x20008000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x1, &(0x7f0000000640)}, 0x9)

09:50:36 executing program 6:
timer_create(0x7, &(0x7f0000000000)={0x0, 0x3f, 0x2}, &(0x7f0000000040))
timer_create(0x2, &(0x7f0000000240)={0x0, 0x3f, 0x0, @thr={&(0x7f0000000080)="93027728e768a74f38a02a42a8500dc38f71cabfc0c1f965ca1bfac2c14613d1929809bd6d8d77cbf37f24ba5b0db2905f18e861a010bbebd424c2b2066ff323d825e95063e22d0f65b6c570160c4714eec4d8d36aab1b71a98c01d8401e932da05cc025074e6dd1fad9cece35cfb4e177629d3f0cc8d4c15329823d900df9878ba1545f4fe1e5ee", &(0x7f0000000140)="7662010c659be03cf796b15089b6fc023887452cd438298af49247b2e78aceaeb031662ecd867d36a9608acbf0f84061dbe112954dbcee34e7b2c60049c0c069d46ec726a17d8f7ddbf980d89ee6d56a5deb6f0440b9ce5820570b25aaf6b40b8507f53cb9eebce024af938807d45f11610e909c711b1b565b32cfb1422f8a5ed66cea156baa45aa2080231c5ee3b75d9b9c39a4b4f925a832e8fd61ae2a4da29fe4fc3afbe0553d90b220b35a40530b01073c909b4eb1c9468e2209df0d5e1ddb"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f00000002c0))
timer_create(0x2, &(0x7f0000000300)={0x0, 0x1d, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000340)=<r1=>0x0)
timer_gettime(r1, &(0x7f0000000380))
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={0x0, @generic={0x8, "da37c672d166beb68920b4484120"}, @isdn={0x22, 0xec, 0x8, 0x0, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0x4000}, 0x5, 0x0, 0x0, 0x0, 0x1000, &(0x7f00000003c0)='macvlan1\x00', 0x100, 0x9})
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000844)
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x1c, 0x4}, &(0x7f0000000600))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x6)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40041)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r2)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000940), r2)
sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000000}, 0x844)
timer_gettime(r1, &(0x7f0000000a40))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000a80))
r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304)

09:50:36 executing program 7:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xc4100, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080))
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f00000000c0))
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x20200, 0x0)
syz_io_uring_setup(0x5846, &(0x7f0000000240)={0x0, 0x2d99, 0x8, 0x0, 0x362, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300))
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000340))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, 0x3}], 0x61, 0x0, &(0x7f00000003c0)="3fa2654bcc4da992ce00d15be4925ea0b2a0e4be5d6771a8d1d52661f297ac021c7eb17abd4d9d74e89b897a97bc5b27694f0a967a1651be14cd4494193bd0bd8c6d1d18d1613e639dcfe1283284e485672ad5e84d87421eada5e0593ce1bccb33"})
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x301001, 0x0)
write$snapshot(r3, &(0x7f00000004c0)="bc50f5abe0cdf2bbb07158b8850706ab7977cbe1963598ddbd55d81331908a7e9ef3bec6ec305f8056404506ce966b0592a4680425426ae1761d08525b7e1cfcfa641848480d0bea25204c46f57892964957c7b179f3ac", 0x57)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x5000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x9, 0x2055, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @private1, 0x20, 0x7800, 0x25, 0x8}})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x6c, 0x0, &(0x7f0000000700)=[@clear_death={0x400c630f, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@flat=@binder={0x73622a85, 0x100, 0x3}, @flat=@handle={0x73682a85, 0x105, 0x2}, @fda={0x66646185, 0x3}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x2}, @release, @increfs], 0x9, 0x0, &(0x7f0000000780)="7478c835056bd6abd6"})
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000880)=@buf={0x6d, &(0x7f0000000800)="d101fc201087591416e63ac3f5cbc873d6c208de51505fd29bda2a6f847d3047d83d14a4864305f09bd85da5bca842d6f9847b1683cbacd24778595fe57f24af9c604616b02dd7e347b1eac96faf023291af3e88a4ebabf517dd3f8c857b72c4f53f5dd42d188b0498713adb60"})
ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x100000000)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x7f)
ioctl$SNAPSHOT_S2RAM(r4, 0x330b)
write$cgroup_pid(r4, &(0x7f00000008c0)=0xffffffffffffffff, 0x12)

[  106.612822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  106.620727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  106.627428] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  106.632475] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  106.635206] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  106.636773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  106.688150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  106.693038] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  106.694706] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  106.696690] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  106.698149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  106.698918] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  106.701754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  106.712114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  106.713899] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  106.723676] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  106.729968] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  106.732580] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  106.734562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  106.736620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  106.741942] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  106.743362] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  106.755887] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  106.771466] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  106.780017] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  106.810600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  106.812656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  106.816237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  106.818978] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  106.820170] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  108.704970] Bluetooth: hci0: command 0x0409 tx timeout
[  108.768618] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  108.771472] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  108.832353] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  108.833361] Bluetooth: hci3: command 0x0409 tx timeout
[  108.833808] Bluetooth: hci2: command 0x0409 tx timeout
[  108.896376] Bluetooth: hci4: command 0x0409 tx timeout
[  108.897028] Bluetooth: hci1: command 0x0409 tx timeout
[  110.754284] Bluetooth: hci0: command 0x041b tx timeout
[  110.880588] Bluetooth: hci2: command 0x041b tx timeout
[  110.882302] Bluetooth: hci3: command 0x041b tx timeout
[  110.944357] Bluetooth: hci4: command 0x041b tx timeout
[  110.944872] Bluetooth: hci1: command 0x041b tx timeout
[  112.504039] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.570748] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  112.579895] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  112.582285] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  112.584745] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  112.592836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  112.595969] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  112.597101] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  112.608952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  112.614719] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  112.628132] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  112.666637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.803283] Bluetooth: hci0: command 0x040f tx timeout
[  112.928350] Bluetooth: hci3: command 0x040f tx timeout
[  112.928737] Bluetooth: hci2: command 0x040f tx timeout
[  112.992538] Bluetooth: hci4: command 0x040f tx timeout
[  112.992580] Bluetooth: hci1: command 0x040f tx timeout
[  114.593524] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  114.656710] Bluetooth: hci6: command 0x0409 tx timeout
[  114.720598] Bluetooth: hci5: command 0x0409 tx timeout
[  114.848432] Bluetooth: hci0: command 0x0419 tx timeout
[  114.976316] Bluetooth: hci2: command 0x0419 tx timeout
[  114.978023] Bluetooth: hci3: command 0x0419 tx timeout
[  115.040686] Bluetooth: hci4: command 0x0419 tx timeout
[  115.041510] Bluetooth: hci1: command 0x0419 tx timeout
[  116.705309] Bluetooth: hci6: command 0x041b tx timeout
[  116.771274] Bluetooth: hci5: command 0x041b tx timeout
[  117.646131] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  117.658670] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  117.666657] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  117.686767] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  117.711995] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  117.721454] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  118.753655] Bluetooth: hci6: command 0x040f tx timeout
[  118.817320] Bluetooth: hci5: command 0x040f tx timeout
[  119.841495] Bluetooth: hci7: command 0x0409 tx timeout
[  120.802279] Bluetooth: hci6: command 0x0419 tx timeout
[  120.865390] Bluetooth: hci5: command 0x0419 tx timeout
[  121.890188] Bluetooth: hci7: command 0x041b tx timeout
[  123.936512] Bluetooth: hci7: command 0x040f tx timeout
[  125.984649] Bluetooth: hci7: command 0x0419 tx timeout
[  169.342126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  169.344728] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  169.346554] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  169.354933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  169.357895] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  169.361663] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  169.553499] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  169.557021] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  169.566572] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  169.610618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  169.620014] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  169.621380] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  169.657823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  169.659991] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  169.663577] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  169.671848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  169.674217] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  169.676127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  171.105709] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  171.424498] Bluetooth: hci1: command 0x0409 tx timeout
[  171.680612] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  171.745375] Bluetooth: hci2: command 0x0409 tx timeout
[  171.808391] Bluetooth: hci3: command 0x0409 tx timeout
[  173.473345] Bluetooth: hci1: command 0x041b tx timeout
[  173.792949] Bluetooth: hci2: command 0x041b tx timeout
[  173.856431] Bluetooth: hci3: command 0x041b tx timeout
[  174.238129] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  174.255176] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  174.270669] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  174.304877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  174.314641] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  174.325849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  174.499185] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  174.504229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  174.509660] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  174.565404] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  174.569817] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  174.571692] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  174.704038] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  174.705857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  174.709756] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  174.769119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  174.798849] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  174.802105] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  175.520317] Bluetooth: hci1: command 0x040f tx timeout
[  175.840332] Bluetooth: hci2: command 0x040f tx timeout
[  175.904617] Bluetooth: hci3: command 0x040f tx timeout
[  176.224521] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  176.417355] Bluetooth: hci4: command 0x0409 tx timeout
[  176.673411] Bluetooth: hci5: command 0x0409 tx timeout
[  176.864378] Bluetooth: hci6: command 0x0409 tx timeout
[  177.570287] Bluetooth: hci1: command 0x0419 tx timeout
[  177.888300] Bluetooth: hci2: command 0x0419 tx timeout
[  177.952344] Bluetooth: hci3: command 0x0419 tx timeout
[  178.464548] Bluetooth: hci4: command 0x041b tx timeout
[  178.720436] Bluetooth: hci5: command 0x041b tx timeout
[  178.912493] Bluetooth: hci6: command 0x041b tx timeout
[  179.853561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  179.861223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  179.873940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  179.907023] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  179.939378] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  179.942801] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  179.944592] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  179.950295] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  179.968597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  179.997568] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  180.011997] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  180.013873] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  180.514276] Bluetooth: hci4: command 0x040f tx timeout
[  180.768315] Bluetooth: hci5: command 0x040f tx timeout
[  180.960673] Bluetooth: hci6: command 0x040f tx timeout
[  182.049573] Bluetooth: hci0: command 0x0409 tx timeout
[  182.113357] Bluetooth: hci7: command 0x0409 tx timeout
[  182.560314] Bluetooth: hci4: command 0x0419 tx timeout
[  182.816306] Bluetooth: hci5: command 0x0419 tx timeout
[  183.008328] Bluetooth: hci6: command 0x0419 tx timeout
[  184.097329] Bluetooth: hci0: command 0x041b tx timeout
[  184.162287] Bluetooth: hci7: command 0x041b tx timeout
[  186.144948] Bluetooth: hci0: command 0x040f tx timeout
[  186.210300] Bluetooth: hci7: command 0x040f tx timeout
[  188.192302] Bluetooth: hci0: command 0x0419 tx timeout
[  188.256315] Bluetooth: hci7: command 0x0419 tx timeout
[  232.151402] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  232.155667] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  232.161670] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  232.171275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  232.194603] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  232.203649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  232.288236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  232.296694] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  232.311863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  232.348962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  232.357939] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  232.364938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  233.956337] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  234.272434] Bluetooth: hci2: command 0x0409 tx timeout
[  234.464420] Bluetooth: hci3: command 0x0409 tx timeout
[  236.320312] Bluetooth: hci2: command 0x041b tx timeout
[  236.512628] Bluetooth: hci3: command 0x041b tx timeout
[  236.868176] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  236.874636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  236.877132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  236.895588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  236.902032] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  236.903365] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  237.122118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  237.129797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  237.131896] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  237.147970] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  237.151050] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  237.174822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  237.177444] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  237.190169] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  237.190914] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  237.205960] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  237.240367] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  237.246464] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  238.368371] Bluetooth: hci2: command 0x040f tx timeout
[  238.560480] Bluetooth: hci3: command 0x040f tx timeout
[  238.689945] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  239.011358] Bluetooth: hci4: command 0x0409 tx timeout
[  239.264586] Bluetooth: hci5: command 0x0409 tx timeout
[  239.392376] Bluetooth: hci6: command 0x0409 tx timeout
[  240.418814] Bluetooth: hci2: command 0x0419 tx timeout
[  240.608323] Bluetooth: hci3: command 0x0419 tx timeout
[  241.057065] Bluetooth: hci4: command 0x041b tx timeout
[  241.312655] Bluetooth: hci5: command 0x041b tx timeout
[  241.441430] Bluetooth: hci6: command 0x041b tx timeout
[  242.074669] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  242.077440] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  242.079765] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  242.089187] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  242.124614] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  242.125946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  243.104784] Bluetooth: hci4: command 0x040f tx timeout
[  243.360675] Bluetooth: hci5: command 0x040f tx timeout
[  243.488444] Bluetooth: hci6: command 0x040f tx timeout
[  243.744575] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  244.128340] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  244.195363] Bluetooth: hci1: command 0x0409 tx timeout
[  245.153314] Bluetooth: hci4: command 0x0419 tx timeout
[  245.408360] Bluetooth: hci5: command 0x0419 tx timeout
[  245.536336] Bluetooth: hci6: command 0x0419 tx timeout
[  246.240622] Bluetooth: hci1: command 0x041b tx timeout
[  248.288659] Bluetooth: hci1: command 0x040f tx timeout
[  248.800703] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  249.248912] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  250.338450] Bluetooth: hci1: command 0x0419 tx timeout
[  252.031672] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  252.046768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  252.048664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  252.081640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  252.090685] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  252.114667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  254.240390] Bluetooth: hci0: command 0x0409 tx timeout
[  254.432613] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  256.288532] Bluetooth: hci0: command 0x041b tx timeout
[  257.565206] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  257.571601] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  257.587453] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  257.621640] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  257.645829] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  257.655735] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  258.337330] Bluetooth: hci0: command 0x040f tx timeout
[  259.809735] Bluetooth: hci7: command 0x0409 tx timeout
[  260.384312] Bluetooth: hci0: command 0x0419 tx timeout
[  261.856394] Bluetooth: hci7: command 0x041b tx timeout
[  263.905623] Bluetooth: hci7: command 0x040f tx timeout
[  265.952337] Bluetooth: hci7: command 0x0419 tx timeout
[  294.697044] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  294.706082] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  294.717381] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  294.747184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  294.761904] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  294.799806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  296.481540] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  296.865370] Bluetooth: hci3: command 0x0409 tx timeout
[  298.696706] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  298.700810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  298.703110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  298.733081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  298.745610] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  298.749837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  298.913356] Bluetooth: hci3: command 0x041b tx timeout
[  299.237390] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  299.247046] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  299.270708] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  299.301650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  299.317132] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  299.321202] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  299.526198] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  299.541602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  299.542816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  299.548733] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  299.550519] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  299.551848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  300.832601] Bluetooth: hci2: command 0x0409 tx timeout
[  300.961372] Bluetooth: hci3: command 0x040f tx timeout
[  301.088354] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  301.409364] Bluetooth: hci5: command 0x0409 tx timeout
[  301.664509] Bluetooth: hci6: command 0x0409 tx timeout
[  302.881298] Bluetooth: hci2: command 0x041b tx timeout
[  303.009606] Bluetooth: hci3: command 0x0419 tx timeout
[  303.456992] Bluetooth: hci5: command 0x041b tx timeout
[  303.712507] Bluetooth: hci6: command 0x041b tx timeout
[  304.141184] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  304.161680] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  304.199115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  304.215097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  304.227524] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  304.262720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  304.929684] Bluetooth: hci2: command 0x040f tx timeout
[  305.504372] Bluetooth: hci5: command 0x040f tx timeout
[  305.505028] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  305.760400] Bluetooth: hci6: command 0x040f tx timeout
[  306.338332] Bluetooth: hci4: command 0x0409 tx timeout
[  306.979302] Bluetooth: hci2: command 0x0419 tx timeout
[  307.552328] Bluetooth: hci5: command 0x0419 tx timeout
[  307.808646] Bluetooth: hci6: command 0x0419 tx timeout
[  308.384353] Bluetooth: hci4: command 0x041b tx timeout
[  310.432327] Bluetooth: hci4: command 0x040f tx timeout
[  310.560316] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  312.480859] Bluetooth: hci4: command 0x0419 tx timeout
[  314.077185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  314.097677] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  314.112836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  314.184503] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  314.220697] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  314.231713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  316.129022] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  316.321345] Bluetooth: hci0: command 0x0409 tx timeout
[  318.368990] Bluetooth: hci0: command 0x041b tx timeout
[  320.417764] Bluetooth: hci0: command 0x040f tx timeout
[  321.569446] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  321.761319] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  322.464357] Bluetooth: hci0: command 0x0419 tx timeout
[  324.805162] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  324.808876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  324.816225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  324.876477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  324.905352] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  324.907859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  327.008379] Bluetooth: hci1: command 0x0409 tx timeout
[  327.136693] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  329.056301] Bluetooth: hci1: command 0x041b tx timeout
[  331.104820] Bluetooth: hci1: command 0x040f tx timeout
[  332.257485] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  333.153331] Bluetooth: hci1: command 0x0419 tx timeout
[  337.313563] Bluetooth: hci7: Opcode 0x c03 failed: -110
2023/08/21 09:54:28 executor 7 failed 11 times:
executor 7: exit status 67
SYZFAIL: wrong response packet
 (errno 2: No such file or directory)
loop exited with status 67

VM DIAGNOSIS:
09:54:28  Registers:
info registers vcpu 0
RAX=0000000080000001 RBX=ffff888033e1f460 RCX=0000000080000001 RDX=1ffff110067c3e8d
RSI=ffffffff8113b471 RDI=ffff888033e1f468 RBP=ffff888033e1f500 RSP=ffff888033e1f338
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=0000000000000008 R13=ffff888033e18000 R14=ffff888033e1f508 R15=0000000000000001
RIP=ffffffff814d9141 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f30995c81f0 CR3=0000000033f60000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88806cf09a68 RCX=0000000000000001 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000001 RBP=ffffffff8614e954 RSP=ffff88806cf099e8
R8 =0000000000000001 R9 =0000000000000009 R10=0000000000000005 R11=0000000000000001
R12=0000000000000001 R13=ffff88802a7eff20 R14=ffff88806cf09aa9 R15=ffffffff8614e958
RIP=ffffffff8113bd72 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5a12eff8e0 CR3=00000000317a4000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000