Warning: Permanently added '[localhost]:46187' (ECDSA) to the list of known hosts.
2023/08/27 07:01:07 fuzzer started
2023/08/27 07:01:08 dialing manager at localhost:42391
syzkaller login: [  105.298148] cgroup: Unknown subsys name 'net'
[  105.511091] cgroup: Unknown subsys name 'rlimit'
[  118.518551] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2023/08/27 07:01:22 syscalls: 203
2023/08/27 07:01:22 code coverage: enabled
2023/08/27 07:01:22 comparison tracing: enabled
2023/08/27 07:01:22 extra coverage: enabled
2023/08/27 07:01:22 setuid sandbox: enabled
2023/08/27 07:01:22 namespace sandbox: enabled
2023/08/27 07:01:22 Android sandbox: enabled
2023/08/27 07:01:22 fault injection: enabled
2023/08/27 07:01:22 leak checking: enabled
2023/08/27 07:01:22 net packet injection: enabled
2023/08/27 07:01:22 net device setup: enabled
2023/08/27 07:01:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2023/08/27 07:01:22 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/08/27 07:01:22 USB emulation: enabled
2023/08/27 07:01:22 hci packet injection: enabled
2023/08/27 07:01:22 wifi device emulation: enabled
2023/08/27 07:01:22 802.15.4 emulation: enabled
2023/08/27 07:01:22 fetching corpus: 0, signal 0/0 (executing program)
2023/08/27 07:01:23 starting 8 fuzzer processes
07:01:23 executing program 0:
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101582, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040))
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000080)={0x40, {{0xa, 0x4e20, 0x2, @private0, 0x7}}, {{0xa, 0x4e21, 0x2, @mcast2, 0x4d}}}, 0x108)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=<r1=>0x0)
ioctl$TUNSETOWNER(r0, 0x400454cc, r1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x6000, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x3ff, 0x2, 0x0, 0x6}, {0xff, 0x92, 0x3f, 0x62e}]})
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000340)=0x1e)
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000380))
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd074}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ef}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8040)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'ip6_vti0\x00'})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r3)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48801)
getpgid(0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x214, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x28db}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000400}, 0x8000)
sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80440842}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0c1}, 0x4040054)

07:01:23 executing program 1:
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)={0x0, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0xf9, 0x0, [0x3]}}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0x8, 0xb7, "807011e802e17f22f0e1ed58270fd0e905d12040c14d8e748fc58c175d6606af3f8e683bab17625338ff93507577e352cf887da4a790ff2549f34393899754f9d1ae83c1795ca162d2bbb1a4a99bc4f75dd49aaf7cfb7930b29f2b1bd43975aa8cf87ebd9b0f6c36dfe1ac036556b4e1b6c48f33ac2db3640d31dae14a78538712fdc76037fec3e0fd97f1ed2abb6baabac8dc2932143fcd36ab48d21a3274f9ff8e0eb713412c1ea95179bb3cc0650a46d0ccc79f6907"}]}, 0xf0)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x80800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14)
getsockname$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x1c)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x819e}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xee}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x240c4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_FP_MODE(0x2d, 0x3)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0x4e23, 0x6, @private2}, 0x1c)
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x7}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x48000)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffb}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0x48010}, 0x20000000)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000840), 0x420200, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc040}, 0x81)
sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffff8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2c004080}, 0x811)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000b00)={@mcast2, 0x7fffffff, 0x1, 0x1, 0xa, 0x4, 0x9180}, &(0x7f0000000b40)=0x20)
syz_genetlink_get_family_id$gtp(&(0x7f0000000b80), r4)

07:01:23 executing program 2:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000140)=r1)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000180)=r0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000200)={'syztnl2\x00', <r2=>0x0, 0x700, 0x1, 0x8, 0x3c, {{0x1a, 0x4, 0x0, 0x8, 0x68, 0x66, 0x0, 0x5, 0x29, 0x0, @multicast1, @private=0xa010102, {[@noop, @lsrr={0x83, 0xb, 0x77, [@broadcast, @remote]}, @timestamp_addr={0x44, 0x1c, 0x1e, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x6}, {@local, 0x1}, {@private=0xa010100, 0x1f}]}, @rr={0x7, 0x1f, 0x8e, [@empty, @rand_addr=0x64010101, @remote, @empty, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xcd, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x80000000}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'syztnl2\x00', <r3=>0x0, 0x20, 0x1, 0x64f0, 0xfffffff8, {{0x22, 0x4, 0x0, 0x4, 0x88, 0x68, 0x0, 0x1, 0x29, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x1b, 0x25, [@multicast1, @remote, @local, @private=0xa010100, @multicast2, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x4d, 0x3, 0x7, [{@private=0xa010101, 0xde}, {@remote, 0xaf}, {@broadcast, 0x9}]}, @noop, @timestamp_addr={0x44, 0x24, 0xdf, 0x1, 0x3, [{@remote, 0x1f}, {@remote, 0x5}, {@remote, 0x4}, {@multicast2, 0x3}]}, @rr={0x7, 0x3, 0x7d}, @lsrr={0x83, 0x13, 0xa2, [@dev={0xac, 0x14, 0x14, 0x15}, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000400)={'syztnl1\x00', <r4=>0x0, 0x700, 0x8, 0x7, 0x20, {{0x20, 0x4, 0x0, 0x8, 0x80, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast2, @local, {[@end, @rr={0x7, 0x7, 0x5f, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0x8a, 0x3, 0x0, [{@loopback, 0x1ff}, {@remote, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@private=0xa010101, 0x400}, {@local, 0x215}, {@broadcast, 0x4}]}, @cipso={0x86, 0x28, 0x1, [{0x5, 0x11, "29f9b3e97f35a0b67ac99e97691b2e"}, {0x7, 0x9, "6b876b67023d6d"}, {0x5, 0x8, "d0de8789d7b1"}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000500)={'gre0\x00', <r5=>0x0, 0x1, 0x8, 0x5, 0x82, {{0x35, 0x4, 0x0, 0x2e, 0xd4, 0x68, 0x0, 0x20, 0x2f, 0x0, @broadcast, @empty, {[@timestamp={0x44, 0xc, 0x1e, 0x0, 0xe, [0x10001, 0xf9a1]}, @generic={0x7, 0xd, "640f53d41c2e2c517aa07a"}, @lsrr={0x83, 0x7, 0xb5, [@remote]}, @cipso={0x86, 0x62, 0x2, [{0x1, 0x2}, {0x0, 0x8, "d53b7ff8ddd4"}, {0x6, 0x12, "e89589af68c65584cdd750c1b931524a"}, {0x0, 0x2}, {0x5, 0xe, "31ba888a48216884d78ca4ee"}, {0x1, 0x12, "142f1e2def8272270b9016d4091c39ca"}, {0x7, 0x10, "7909f84f1834dd02f22e8df36e7e"}, {0x6, 0xc, "3f0ce601f8df813bcf59"}, {0x1, 0x2}]}, @lsrr={0x83, 0x23, 0x9b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @broadcast, @broadcast, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x3a}]}, @timestamp={0x44, 0x18, 0xdb, 0x0, 0x1, [0x2, 0x22683ae2, 0x2, 0x10000, 0x1ff]}, @end]}}}}})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000640)={0x664, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r3}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0xf9, 0x0, 0x80}, {0x5, 0x7, 0x8, 0x82}, {0x4c18, 0x40, 0x2, 0x3f}, {0x6, 0x6, 0x6, 0x8001}, {0x8, 0xff, 0x81}]}}}]}}, {{0x8, 0x1, r4}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}]}}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000040}, 0xc0c0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d40), 0x440020, 0x0)
ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000d80)=0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={<r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f00)={'syztnl0\x00', &(0x7f0000000e80)={'ip6gre0\x00', <r9=>0x0, 0x29, 0x6, 0x3f, 0xfe31, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x80, 0x0, 0x8}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf0bd}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x240448c2)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001040)={<r10=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000010c0)={r10, 0x0, r7, 0xe5})
r11 = socket$inet6(0xa, 0xa, 0x10000)
getsockopt$inet6_mreq(r11, 0x29, 0x1c, &(0x7f0000001100)={@local}, &(0x7f0000001140)=0x14)

07:01:23 executing program 3:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r0=>0x0})
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@empty, @in=@multicast2, 0x4e22, 0x1, 0x4e23, 0x46, 0xa, 0x0, 0x0, 0x62, r0, 0xee01}, {0x400, 0x8, 0x7, 0xfffffffffffffffe, 0x4, 0x8, 0xebe, 0xff}, {0x8, 0x8, 0x5, 0x1f}, 0x1, 0x6e6bbd, 0x2, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010102, 0x3500, 0x1730f8e6d44dcef6, 0x0, 0x81, 0x1, 0x6}}, 0xe8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x1)
getitimer(0x1, &(0x7f00000002c0))
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x48b052509b5a923b}, 0x4008081)
sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x14424000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x20004815)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x2000, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r4)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000007c0), 0x400000, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4810}, 0x10000)
r6 = socket(0x2, 0x2, 0x80)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r3)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r7, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x15}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x2e004881}, 0x20008045)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000a40))
ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000a80))

[  119.644870] audit: type=1400 audit(1693119683.673:6): avc:  denied  { execmem } for  pid=277 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
07:01:23 executing program 4:
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x8048801)
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000001c0)={0x2, {{0xa, 0x4e24, 0x592, @empty, 0x9}}, {{0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}}, 0x108)
r1 = accept4$inet6(r0, 0x0, &(0x7f0000000300), 0xc0800)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000340)={@local, 0x0, 0x0, 0xff, 0x5, 0x1103, 0x4}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x51)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540))
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x24008001)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000006c0)={@dev={0xfe, 0x80, '\x00', 0x29}, 0x7fffffff, 0x0, 0x2, 0x4, 0x5, 0x493}, 0x20)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000084}, 0x800)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000840)={@empty, <r3=>0x0}, &(0x7f0000000880)=0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f00000008c0)={@loopback, r3}, 0x14)
getpeername$inet6(r1, &(0x7f0000000900)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000940)=0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000980))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090)

07:01:23 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'caif0\x00'}}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140))
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x894}, 0xac20679b1640641b)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008805}, 0x20000000)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4041}, 0x85)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r5)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xd0, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x100}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x69d}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x81}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x5}, {0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000085}, 0x8000)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3b}]}, 0x30}, 0x1, 0x0, 0x0, 0x9c985072f384dde}, 0x40000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000011)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x174, 0x12, 0x2, 0x70bd26, 0x25dfdbff, {0xa}, [@nested={0x15e, 0x26, 0x0, 0x1, [@generic="3d83bcbd66202fb0d2785a90e09352800a72df42a9bb00d1ecab61b09fcf3039d7291815b26071a9ecfeb430d66f94148389115e3b6e114860b4753a817a22e948a2d3ea7eec7099f9f325c9c070a6e1db52b57b550b82c0ba19808e86f91609c50f6e83709aff6c35cc0e81393c660d5d18f4a8586d08a668652e6892f28f38a4f7b4cfb667a5607c7e", @generic="591cc133261d0d70a90f18417f84511d3b64d2260053e941bdf70a9c400b96fcb0e116e0b1dae6339e77fb56b9bcfec4c2a5cf6cee3dcc4a59490e3fa71dd523c207f080b37bd6d1883ca1067db71aed9348aea2382b7c87c14971976158467d1fcbace0b3943a43633aee5b2361286c6770ed6b4b7c92d61ebd0254153da31242caf203132a865e3647c3cd656d2e1ece3255299ab8fb2b26451dcdbae3d9a29d8a92a0abfc827a0de89cd2a9663f53db273f8d373ff8adfff1b05b30c12fc5aecfd90789345ab9bae7ac319f495cda"]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4}, 0x0)

07:01:23 executing program 6:
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'team_slave_0\x00'})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r0, 0x670cfd850aa53034, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xdffb}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1c71}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x408c0}, 0x8000)
syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r1)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x100, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xca}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xcf}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x101}}]}, 0x100}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10d}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6d}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2bc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)
r2 = socket(0x21, 0x1, 0xfdcd)
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xac, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x840}, 0x2000)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700))
syz_genetlink_get_family_id$gtp(&(0x7f0000000740), r1)
syz_open_dev$evdev(&(0x7f0000000780), 0x2000000, 0x40001)
ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f00000007c0)=0x26a5, 0x4)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'vlan0\x00'}}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000045}, 0x4000)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000900)=0x7)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x538}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4)

07:01:23 executing program 7:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r0=>0x0})
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x410, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r2=>r0, 0x20, 0x7, 0x1000, 0x1ff, {{0x12, 0x4, 0x0, 0xa, 0x48, 0x64, 0x0, 0x1f, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0x75, 0x0, 0x4, [0x0, 0x35b, 0x800, 0x8, 0x0]}, @lsrr={0x83, 0x1b, 0xd7, [@empty, @local, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', <r4=>r0, 0x2f, 0x9c, 0x19, 0x80, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x700, 0x80, 0x1, 0x101}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', <r5=>r0, 0x4, 0x4, 0x1a, 0x7, 0x2, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7, 0x45, 0x9a0}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', <r6=>r0, 0x29, 0x0, 0x5, 0xfff, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, @dev={0xfe, 0x80, '\x00', 0x39}, 0x8, 0x7800, 0x4, 0x4}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000540)={0x710, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x6, 0x2, 0xfff}]}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x88bf}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x154, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xe21}}, {0x8, 0x6, r0}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x3, 0x0, 0x3f, 0x2c}, {0x20, 0x2, 0x8, 0x4}, {0x0, 0x4, 0x3, 0x9}, {0x200, 0x1c, 0x80, 0x1fb}, {0x3, 0x40, 0x7f}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0x4}}]}, 0x710}, 0x1, 0x0, 0x0, 0x40090}, 0x884)
r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0)
connect$bt_sco(r8, &(0x7f0000000d40), 0x8)
r9 = socket(0x2, 0x1000, 0x65)
setsockopt$inet6_MCAST_LEAVE_GROUP(r9, 0x29, 0x2d, &(0x7f0000000d80)={0x4, {{0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x88)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r8)
sendmsg$NL80211_CMD_LEAVE_IBSS(r8, &(0x7f0000001040)={&(0x7f0000000f40), 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r10, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4084)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000001080), r11)
syz_genetlink_get_family_id$team(&(0x7f00000010c0), 0xffffffffffffffff)

[  120.961702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  120.968137] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  120.970064] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  120.977739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  120.983117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  120.985178] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  121.049150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  121.051652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  121.054020] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  121.064024] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  121.068592] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  121.071723] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  121.076943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  121.081844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  121.084108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  121.103283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  121.113651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  121.126852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  121.169853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  121.174942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  121.177692] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  121.220841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  121.233569] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  121.249696] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  123.047042] Bluetooth: hci0: command 0x0409 tx timeout
[  123.110263] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  123.173312] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  123.174351] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  123.174609] Bluetooth: hci2: command 0x0409 tx timeout
[  123.175512] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  123.238283] Bluetooth: hci1: command 0x0409 tx timeout
[  123.365531] Bluetooth: hci4: command 0x0409 tx timeout
[  125.095416] Bluetooth: hci0: command 0x041b tx timeout
[  125.221621] Bluetooth: hci2: command 0x041b tx timeout
[  125.286261] Bluetooth: hci1: command 0x041b tx timeout
[  125.414450] Bluetooth: hci4: command 0x041b tx timeout
[  126.270733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  126.286215] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  126.287575] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  126.302571] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  126.307616] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  126.309545] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  126.471097] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  126.475684] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  126.477679] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  126.482189] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  126.486752] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  126.488960] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  127.142312] Bluetooth: hci0: command 0x040f tx timeout
[  127.269728] Bluetooth: hci2: command 0x040f tx timeout
[  127.334291] Bluetooth: hci1: command 0x040f tx timeout
[  127.464008] Bluetooth: hci4: command 0x040f tx timeout
[  128.358311] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  128.421382] Bluetooth: hci3: command 0x0409 tx timeout
[  128.422322] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  128.613496] Bluetooth: hci7: command 0x0409 tx timeout
[  129.189341] Bluetooth: hci0: command 0x0419 tx timeout
[  129.317447] Bluetooth: hci2: command 0x0419 tx timeout
[  129.382347] Bluetooth: hci1: command 0x0419 tx timeout
[  129.509521] Bluetooth: hci4: command 0x0419 tx timeout
[  130.469307] Bluetooth: hci3: command 0x041b tx timeout
[  130.665126] Bluetooth: hci7: command 0x041b tx timeout
[  132.040732] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  132.043155] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  132.087474] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  132.166591] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  132.169869] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  132.172046] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  132.517864] Bluetooth: hci3: command 0x040f tx timeout
[  132.709303] Bluetooth: hci7: command 0x040f tx timeout
[  133.925921] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  134.309359] Bluetooth: hci6: command 0x0409 tx timeout
[  134.565453] Bluetooth: hci3: command 0x0419 tx timeout
[  134.757485] Bluetooth: hci7: command 0x0419 tx timeout
[  136.358581] Bluetooth: hci6: command 0x041b tx timeout
[  136.847025] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  136.858275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  136.873709] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  136.892333] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  136.909501] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  136.933944] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  138.405267] Bluetooth: hci6: command 0x040f tx timeout
[  139.046315] Bluetooth: hci5: command 0x0409 tx timeout
[  140.453320] Bluetooth: hci6: command 0x0419 tx timeout
[  141.094255] Bluetooth: hci5: command 0x041b tx timeout
[  143.141579] Bluetooth: hci5: command 0x040f tx timeout
[  145.191630] Bluetooth: hci5: command 0x0419 tx timeout
[  181.083587] syz-executor.2 (288) used greatest stack depth: 23720 bytes left
[  183.666665] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  183.674650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  183.677754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  183.699765] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  183.704507] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  183.708899] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  185.256022] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  185.509536] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  185.766639] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  185.831318] Bluetooth: hci2: command 0x0409 tx timeout
[  187.390138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  187.392861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  187.394903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  187.399663] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  187.403048] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  187.406956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  187.481708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  187.485821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  187.490859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  187.498889] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  187.556576] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  187.561538] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  187.826034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  187.834540] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  187.836311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  187.844054] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  187.851356] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  187.853617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  187.878521] Bluetooth: hci2: command 0x041b tx timeout
[  188.176642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  188.179419] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  188.186775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  188.211367] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  188.221458] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  188.222379] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  188.415222] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  188.437505] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  188.466913] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  188.478960] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  188.507906] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  188.518697] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  189.477335] Bluetooth: hci0: command 0x0409 tx timeout
[  189.669380] Bluetooth: hci1: command 0x0409 tx timeout
[  189.925316] Bluetooth: hci2: command 0x040f tx timeout
[  189.925410] Bluetooth: hci3: command 0x0409 tx timeout
[  190.309326] Bluetooth: hci4: command 0x0409 tx timeout
[  190.629773] Bluetooth: hci7: command 0x0409 tx timeout
[  191.526671] Bluetooth: hci0: command 0x041b tx timeout
[  191.719261] Bluetooth: hci1: command 0x041b tx timeout
[  191.973291] Bluetooth: hci2: command 0x0419 tx timeout
[  191.974972] Bluetooth: hci3: command 0x041b tx timeout
[  192.358673] Bluetooth: hci4: command 0x041b tx timeout
[  192.678376] Bluetooth: hci7: command 0x041b tx timeout
[  193.565107] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  193.570361] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  193.574263] Bluetooth: hci0: command 0x040f tx timeout
[  193.580470] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  193.623015] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  193.638529] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  193.641863] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  193.766525] Bluetooth: hci1: command 0x040f tx timeout
[  194.022287] Bluetooth: hci3: command 0x040f tx timeout
[  194.407325] Bluetooth: hci4: command 0x040f tx timeout
[  194.726268] Bluetooth: hci7: command 0x040f tx timeout
[  195.621285] Bluetooth: hci0: command 0x0419 tx timeout
[  195.685334] Bluetooth: hci6: command 0x0409 tx timeout
[  195.813668] Bluetooth: hci1: command 0x0419 tx timeout
[  196.069522] Bluetooth: hci3: command 0x0419 tx timeout
[  196.453508] Bluetooth: hci4: command 0x0419 tx timeout
[  196.773842] Bluetooth: hci7: command 0x0419 tx timeout
[  197.733933] Bluetooth: hci6: command 0x041b tx timeout
[  198.556574] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  198.559694] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  198.562027] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  198.628757] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  198.653023] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  198.675491] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  199.781303] Bluetooth: hci6: command 0x040f tx timeout
[  200.741489] Bluetooth: hci5: command 0x0409 tx timeout
[  201.830265] Bluetooth: hci6: command 0x0419 tx timeout
[  202.790269] Bluetooth: hci5: command 0x041b tx timeout
[  204.838281] Bluetooth: hci5: command 0x040f tx timeout
[  206.886275] Bluetooth: hci5: command 0x0419 tx timeout
[  247.461297] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  249.207689] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  249.212362] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  249.213868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  249.221317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  249.223433] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  249.224823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  249.336738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  249.358576] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  249.365466] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  249.377943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  249.383453] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  249.384809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  249.672416] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  249.684910] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  249.686192] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  249.691959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  249.704986] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  249.714099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  249.779605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  249.782140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  249.783805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  249.794375] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  249.796920] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  249.802461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  250.035141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  250.040562] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  250.057556] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  250.123351] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  250.127419] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  250.132456] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  251.301529] Bluetooth: hci0: command 0x0409 tx timeout
[  251.429309] Bluetooth: hci1: command 0x0409 tx timeout
[  251.749443] Bluetooth: hci2: command 0x0409 tx timeout
[  251.877438] Bluetooth: hci3: command 0x0409 tx timeout
[  252.134418] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  252.197379] Bluetooth: hci4: command 0x0409 tx timeout
[  253.349658] Bluetooth: hci0: command 0x041b tx timeout
[  253.477304] Bluetooth: hci1: command 0x041b tx timeout
[  253.798280] Bluetooth: hci2: command 0x041b tx timeout
[  253.925289] Bluetooth: hci3: command 0x041b tx timeout
[  254.246257] Bluetooth: hci4: command 0x041b tx timeout
[  255.122901] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  255.133718] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  255.137611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  255.173962] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  255.190142] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  255.201958] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  255.397783] Bluetooth: hci0: command 0x040f tx timeout
[  255.525292] Bluetooth: hci1: command 0x040f tx timeout
[  255.845269] Bluetooth: hci2: command 0x040f tx timeout
[  255.973284] Bluetooth: hci3: command 0x040f tx timeout
[  256.295558] Bluetooth: hci4: command 0x040f tx timeout
[  257.256306] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  257.317483] Bluetooth: hci6: command 0x0409 tx timeout
[  257.445476] Bluetooth: hci0: command 0x0419 tx timeout
[  257.573394] Bluetooth: hci1: command 0x0419 tx timeout
[  257.895262] Bluetooth: hci2: command 0x0419 tx timeout
[  258.022437] Bluetooth: hci3: command 0x0419 tx timeout
[  258.341291] Bluetooth: hci4: command 0x0419 tx timeout
[  259.367300] Bluetooth: hci6: command 0x041b tx timeout
[  260.496893] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  260.505367] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  260.509488] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  260.542362] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  260.560006] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  260.562598] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  261.414274] Bluetooth: hci6: command 0x040f tx timeout
[  262.311297] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  262.694353] Bluetooth: hci7: command 0x0409 tx timeout
[  263.461295] Bluetooth: hci6: command 0x0419 tx timeout
[  264.742267] Bluetooth: hci7: command 0x041b tx timeout
[  265.292819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  265.297458] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  265.303484] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  265.309462] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  265.336457] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  265.337372] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  266.789271] Bluetooth: hci7: command 0x040f tx timeout
[  267.430545] Bluetooth: hci5: command 0x0409 tx timeout
[  268.838290] Bluetooth: hci7: command 0x0419 tx timeout
[  269.478504] Bluetooth: hci5: command 0x041b tx timeout
[  271.527212] Bluetooth: hci5: command 0x040f tx timeout
[  273.574272] Bluetooth: hci5: command 0x0419 tx timeout
[  310.904760] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  310.919526] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  310.922645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  310.934749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  310.946435] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  310.952000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  311.161912] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  311.164156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  311.166696] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  311.176838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  311.178494] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  311.179972] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  311.499874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  311.505466] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  311.506731] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  311.528713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  311.530585] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  311.545621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  311.809981] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  311.813869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  311.825159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  311.872505] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  311.906504] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  311.909497] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  312.997340] Bluetooth: hci0: command 0x0409 tx timeout
[  313.253579] Bluetooth: hci1: command 0x0409 tx timeout
[  313.640330] Bluetooth: hci2: command 0x0409 tx timeout
[  313.829326] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  314.023056] Bluetooth: hci3: command 0x0409 tx timeout
[  315.045534] Bluetooth: hci0: command 0x041b tx timeout
[  315.301264] Bluetooth: hci1: command 0x041b tx timeout
[  315.686499] Bluetooth: hci2: command 0x041b tx timeout
[  316.069351] Bluetooth: hci3: command 0x041b tx timeout
[  316.994171] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  317.013537] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  317.033920] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  317.038676] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  317.040208] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  317.041687] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  317.063192] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  317.066862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  317.070581] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  317.079979] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  317.083511] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  317.086519] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  317.093594] Bluetooth: hci0: command 0x040f tx timeout
[  317.349295] Bluetooth: hci1: command 0x040f tx timeout
[  317.733570] Bluetooth: hci2: command 0x040f tx timeout
[  318.118639] Bluetooth: hci3: command 0x040f tx timeout
[  319.141277] Bluetooth: hci0: command 0x0419 tx timeout
[  319.141732] Bluetooth: hci4: command 0x0409 tx timeout
[  319.205293] Bluetooth: hci6: command 0x0409 tx timeout
[  319.398270] Bluetooth: hci1: command 0x0419 tx timeout
[  319.781450] Bluetooth: hci2: command 0x0419 tx timeout
[  320.165520] Bluetooth: hci3: command 0x0419 tx timeout
[  321.189297] Bluetooth: hci4: command 0x041b tx timeout
[  321.254293] Bluetooth: hci6: command 0x041b tx timeout
[  323.238312] Bluetooth: hci4: command 0x040f tx timeout
[  323.304259] Bluetooth: hci6: command 0x040f tx timeout
[  323.941527] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  325.285703] Bluetooth: hci4: command 0x0419 tx timeout
[  325.350361] Bluetooth: hci6: command 0x0419 tx timeout
[  329.063327] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  329.254278] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  332.106959] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  332.109128] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  332.126011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  332.158183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  332.188464] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  332.189616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  334.183275] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  334.247272] Bluetooth: hci5: command 0x0409 tx timeout
[  336.293310] Bluetooth: hci5: command 0x041b tx timeout
[  337.092792] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  337.099148] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  337.118516] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  337.167527] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  337.181011] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  337.193498] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  338.342865] Bluetooth: hci5: command 0x040f tx timeout
[  339.302305] Bluetooth: hci7: command 0x0409 tx timeout
[  340.389314] Bluetooth: hci5: command 0x0419 tx timeout
[  341.349384] Bluetooth: hci7: command 0x041b tx timeout
[  343.399267] Bluetooth: hci7: command 0x040f tx timeout
[  345.446808] Bluetooth: hci7: command 0x0419 tx timeout
[  373.504710] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  373.508685] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  373.512925] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  373.519942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  373.525000] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  373.527070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  373.894746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  373.907926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  373.917100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  373.923959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  373.928248] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  373.932469] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  374.218814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  374.220882] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  374.225486] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  374.251089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  374.255870] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  374.258075] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  375.078623] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  375.590410] Bluetooth: hci1: command 0x0409 tx timeout
[  375.973353] Bluetooth: hci2: command 0x0409 tx timeout
[  376.358434] Bluetooth: hci3: command 0x0409 tx timeout
[  377.638471] Bluetooth: hci1: command 0x041b tx timeout
[  378.022269] Bluetooth: hci2: command 0x041b tx timeout
[  378.408371] Bluetooth: hci3: command 0x041b tx timeout
[  378.756486] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  378.767404] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  378.769581] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  378.771092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  378.772632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  378.781952] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  378.790487] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  378.793972] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  378.803847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  378.805965] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  378.811733] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  378.840787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  379.686657] Bluetooth: hci1: command 0x040f tx timeout
[  380.070284] Bluetooth: hci2: command 0x040f tx timeout
[  380.453362] Bluetooth: hci3: command 0x040f tx timeout
[  380.453860] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  380.837558] Bluetooth: hci4: command 0x0409 tx timeout
[  380.965506] Bluetooth: hci6: command 0x0409 tx timeout
[  381.734606] Bluetooth: hci1: command 0x0419 tx timeout
[  382.118589] Bluetooth: hci2: command 0x0419 tx timeout
[  382.502294] Bluetooth: hci3: command 0x0419 tx timeout
[  382.886825] Bluetooth: hci4: command 0x041b tx timeout
[  383.014452] Bluetooth: hci6: command 0x041b tx timeout
[  383.368195] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  383.379843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  383.389660] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  383.403149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  383.416611] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  383.419496] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  384.935248] Bluetooth: hci4: command 0x040f tx timeout
[  385.063432] Bluetooth: hci6: command 0x040f tx timeout
[  385.446492] Bluetooth: hci0: command 0x0409 tx timeout
[  386.982535] Bluetooth: hci4: command 0x0419 tx timeout
[  387.110329] Bluetooth: hci6: command 0x0419 tx timeout
[  387.494613] Bluetooth: hci0: command 0x041b tx timeout
[  389.543286] Bluetooth: hci0: command 0x040f tx timeout
[  391.589666] Bluetooth: hci0: command 0x0419 tx timeout
[  395.559086] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  400.614687] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  401.061302] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  403.739781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  403.747523] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  403.776973] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  403.787527] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  403.817590] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  403.830642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  405.925804] Bluetooth: hci5: command 0x0409 tx timeout
[  406.054671] Bluetooth: hci7: Opcode 0x c03 failed: -110
2023/08/27 07:06:10 executor 6 failed 11 times:
executor 6: exit status 67
SYZFAIL: wrong response packet
 (errno 2: No such file or directory)
loop exited with status 67

VM DIAGNOSIS:
07:06:10  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000005 RCX=ffffffff8113bcda RDX=ffff8880266a0000
RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff84854540 RSP=ffff88802cf57788
R8 =0000000000000001 R9 =0000000000000006 R10=0000000000000005 R11=0000000000000001
R12=0000000000000005 R13=0000000000000001 R14=0000000000000008 R15=ffffffff8614f06a
RIP=ffffffff814d8adc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbfea9eb260 CR3=000000000d782000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000080000102 RBX=0000000000000003 RCX=ffffffff8113c4da RDX=ffff8880266a3680
RSI=0000000000000100 RDI=0000000000000001 RBP=ffffffff84854480 RSP=ffff88806cf099d8
R8 =0000000000000001 R9 =0000000000000004 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000001 R14=0000000000000003 R15=0000000000000000
RIP=ffffffff814d8ac1 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f8433e92540 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f843407d620 CR3=000000002dce6000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff
XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f
XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000