Warning: Permanently added '[localhost]:12206' (ECDSA) to the list of known hosts.
2024/11/05 17:11:27 fuzzer started
2024/11/05 17:11:28 dialing manager at localhost:46317
syzkaller login: [   72.678861] cgroup: Unknown subsys name 'net'
[   72.798682] cgroup: Unknown subsys name 'cpuset'
[   72.816007] cgroup: Unknown subsys name 'rlimit'
2024/11/05 17:11:45 syscalls: 201
2024/11/05 17:11:45 code coverage: enabled
2024/11/05 17:11:45 comparison tracing: enabled
2024/11/05 17:11:45 extra coverage: enabled
2024/11/05 17:11:45 setuid sandbox: enabled
2024/11/05 17:11:45 namespace sandbox: enabled
2024/11/05 17:11:45 Android sandbox: enabled
2024/11/05 17:11:45 fault injection: enabled
2024/11/05 17:11:45 leak checking: enabled
2024/11/05 17:11:45 net packet injection: enabled
2024/11/05 17:11:45 net device setup: enabled
2024/11/05 17:11:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/11/05 17:11:45 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/11/05 17:11:45 USB emulation: enabled
2024/11/05 17:11:45 hci packet injection: enabled
2024/11/05 17:11:45 wifi device emulation: enabled
2024/11/05 17:11:45 802.15.4 emulation: enabled
2024/11/05 17:11:45 fetching corpus: 0, signal 0/0 (executing program)
2024/11/05 17:11:47 starting 8 fuzzer processes
17:11:47 executing program 0:
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0)
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100)=0x18, 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0xab, 0x2}}, './file0\x00'})
r3 = openat$cgroup_int(r0, &(0x7f0000000180)='io.latency\x00', 0x2, 0x0)
openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_type(r4, &(0x7f0000000240), 0x2, 0x0)
geteuid()
openat$cgroup_freezer_state(r2, &(0x7f0000000280), 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x44}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x4c}}, 0x8004001)
openat$cgroup_devices(r0, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10001}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040004}, 0x40)
mkdirat$cgroup(r2, &(0x7f00000005c0)='syz1\x00', 0x1ff)

17:11:47 executing program 1:
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8080)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r1, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x400, 0x5, 0xfffff801, 0x2, 0x7]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x13b8}, @SEG6_ATTR_SECRET={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4040)
syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x8, 0x2, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x81)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x3f, 0x79e, 0xb8e2, 0x6, 0xf4c]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000010}, 0x4040)
r4 = syz_open_dev$mouse(&(0x7f00000006c0), 0x100000001, 0x181000)
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1224008e}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x800)
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8f}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r5)
sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r6 = io_uring_setup(0x62c, &(0x7f0000000a40)={0x0, 0x7634, 0x10, 0x2, 0x38f, 0x0, r4})
io_uring_setup(0x6ca0, &(0x7f0000000ac0)={0x0, 0x2fce, 0x0, 0x1, 0x1e9, 0x0, r6})
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000b80), r4)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000e40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x228, r7, 0x120, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x1b0, 0x8, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a0fe9866521bce2ad915d96457df5303cdb8c752789cce931ea09b71cbe796d9"}, @WGPEER_A_FLAGS={0x8, 0x3, 0xa}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010101}}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010100}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x228}, 0x1, 0x0, 0x0, 0x48c0}, 0x80)

17:11:47 executing program 2:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
read$usbmon(0xffffffffffffffff, &(0x7f0000000080)=""/31, 0x1f)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x8000, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x3, 0xaa2}}, './file0\x00'})
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x400, 0x2, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffc0}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x1)
syz_open_dev$hiddev(&(0x7f0000000240), 0x9, 0x1010c2)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000280)={0x3, 0x2, 0x6, 0x50, 0x80000000, 0x7c2})
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000002c0)={0x3, 0x100, 0x3, 0x3, 0x6, 0x4})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x65}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000)
openat$cgroup_freezer_state(r0, &(0x7f0000000480), 0x2, 0x0)
r3 = syz_open_dev$mouse(&(0x7f00000004c0), 0x1000, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff48b3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000)
ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000000640))
io_uring_setup(0x2a6d, &(0x7f0000000680)={0x0, 0xd175, 0x20, 0x3, 0x279})
r4 = syz_open_dev$mouse(&(0x7f0000000700), 0x9, 0x4000)
ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000740))
sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x80)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0x98, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xc94}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7f}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2f1}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x10000}]}, 0x98}, 0x1, 0x0, 0x0, 0x20080884}, 0x6c3b3da935d9c66)

17:11:47 executing program 3:
ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x3, 0x100, 0x40})
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000040))
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000080)={0x3, 0x3, 0x4, 0x8a5, 0x436, 0x8})
r0 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x9b64, 0x600100)
read$hiddev(r0, &(0x7f0000000100)=""/48, 0x30)
ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000140))
ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000180))
ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000001c0)={0x1, 0x2, 0x401, 0x6, 0xec29, 0x7e53472})
ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000200)={0x1, 0xffffffff, 0x9, 0x7, 0x1ff, 0x7fff})
read$hiddev(r0, &(0x7f0000000240)=""/115, 0x73)
ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0)
ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f00000002c0)={0x4d, "f66b84eb3ea713ae9e3e6013bed2703ed49204a4df2ef763e462baae2f3217618b93b58fdf71d21f558caef25d1fd6ae25205981b95374bb564881d94448613506a1a1601ec0cb322da9f4e315"})
ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000340), 0xdc34, 0x191060)
ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0xe2, 0x500)
ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f00000003c0)={0x1, 0x2, 0x7d, 0xfffffff8, 0x3f, 0x637b})
r3 = syz_open_dev$hiddev(&(0x7f0000000400), 0x6, 0x600081)
ioctl$HIDIOCAPPLICATION(r3, 0x4802, 0x67)
ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000440)=0x1)

17:11:47 executing program 5:
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x80, 0x600200)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x111, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000084}, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f00000002c0)={0x2, 0x2, 0x1f, 0xffff, 0x4, 0xe7c})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x9290048}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r2, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x844}, 0x4040891)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb00}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x4100}, 0x4000000)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d80), r0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5a}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24040881)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x50, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x2c, r5, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x10)
r6 = syz_open_dev$mouse(&(0x7f00000020c0), 0x1, 0x204000)
r7 = openat$cgroup_ro(r6, &(0x7f0000002100)='memory.numa_stat\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORUNLOCK(r7, 0x5381)
r8 = accept$packet(r6, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002180)=0x14)
recvmsg(r8, &(0x7f00000023c0)={&(0x7f00000021c0)=@hci, 0x80, &(0x7f0000002380)=[{&(0x7f0000002240)=""/28, 0x1c}, {&(0x7f0000002280)=""/246, 0xf6}], 0x2}, 0x2000)

17:11:47 executing program 4:
read$hiddev(0xffffffffffffffff, &(0x7f0000000000)=""/68, 0x44)
ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000080)={0x1, 0x100, 0x20, 0xffffffff, 0x7f, 0x8, 0x8001, 0xffffffe1, 0xb, 0x6, 0x1f, 0xfff, 0x7fffffff, 0x5})
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
r0 = socket(0x22, 0xa, 0x3ff)
syz_genetlink_get_family_id$team(&(0x7f0000000100), r0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x0, 0x0)
recvmsg(r0, &(0x7f0000002440)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/156, 0x9c}, {&(0x7f0000001300)=""/229, 0xe5}], 0x3, &(0x7f0000001440)=""/4096, 0x1000}, 0x10000)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4bf}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x801)
socketpair(0x15, 0x6, 0x8001, &(0x7f00000025c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x69}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x20000000)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20008080)
getsockname(r0, &(0x7f0000002840)=@alg, &(0x7f00000028c0)=0x80)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f00000029c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xed}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000)
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a40)={0xbc, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20f5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8040004}, 0x40000)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002bc0), r3)
sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x34, r6, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r7 = socket$inet(0x2, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004440))
read$hiddev(r2, &(0x7f0000004480)=""/96, 0x60)

[   90.805503] audit: type=1400 audit(1730826707.296:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
17:11:47 executing program 6:
ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000000)={0x1, 0x0, 0x401, 0x8, 0x8, 0x80000001})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x49, 0x800}}, './file0\x00'})
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080))
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x1b, 0x0, 0x1, 0x1, 0x6, @link_local}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000004ac0)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000004b80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004b40)={&(0x7f0000004b00)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c1}, 0x4800)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000004c80)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004c40)={&(0x7f0000004c00)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff80}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x255}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2e9}]}, 0x3c}}, 0x24000004)
ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000004cc0)={0x2, 0x1, 0x2})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000004d80)={'ip6_vti0\x00', &(0x7f0000004d00)={'ip6_vti0\x00', <r2=>r1, 0x2f, 0x0, 0x5, 0xfffffffa, 0x2b, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, 0x7880, 0x40, 0xb88c, 0x800}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000004e40)={'syztnl1\x00', &(0x7f0000004dc0)={'ip6_vti0\x00', <r3=>r2, 0x29, 0x0, 0x6, 0x3, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x10, 0x8, 0x400, 0xd41a}})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004f40)={&(0x7f0000004e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004f00)={&(0x7f0000004ec0)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x14)
ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000004f80)={0x2, 0x2, 0x80000000, 0x10000, 0x81, 0x7fff})
r4 = accept$packet(r0, &(0x7f0000004fc0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005000)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000050c0)={'syztnl0\x00', &(0x7f0000005040)={'ip6gre0\x00', <r6=>r5, 0x4, 0x8, 0x7, 0x5, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0xd}, 0x0, 0x7840, 0x1, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000051c0)={'syztnl1\x00', &(0x7f0000005140)={'ip6tnl0\x00', <r7=>r6, 0x2f, 0x5, 0x3f, 0xe7, 0x21, @empty, @mcast2, 0x1, 0x40, 0xfffffeff, 0x800}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000005200)={'batadv_slave_1\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007780)={'team0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000077c0)={'batadv_slave_0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000007800)={'batadv_slave_0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000008440)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000008400)={&(0x7f0000007840)={0xb88, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8d3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x20, 0x1, 0x20, 0x7}, {0x3, 0x5, 0x4, 0x8000}, {0x3, 0x6, 0x6, 0x1}, {0x15d, 0x20, 0x20, 0x69}, {0x6ca, 0x4, 0x7f, 0x7ff}, {0x5, 0x1, 0x2, 0xfffffffe}]}}}]}}, {{0x8, 0x1, r7}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xf57, 0xf8, 0x37, 0x8000800}, {0x1, 0x8, 0x1c, 0xfffffeff}, {0x7fff, 0x3, 0xb2, 0x9}, {0x4, 0x0, 0x6, 0x2}, {0x6, 0xaf, 0xc1, 0x3f}, {0x2, 0xe5}, {0xfff, 0x1f, 0x1, 0x30}, {0x20, 0x81, 0x3f, 0x1ff}, {0x7, 0x5, 0x36, 0x200}]}}}]}}, {{0x8, 0x1, r3}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x4, 0x1, 0x3f, 0x1}, {0xff, 0x1, 0x81, 0xfff}, {0x4, 0x6, 0x7f, 0x7}, {0x4, 0x20, 0x5, 0x7}, {0xfffe, 0x4, 0x7f, 0x81}, {0x5, 0x4, 0x0, 0x81}, {0x80, 0x0, 0xff, 0x4}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8, 0x1, r9}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r5}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1a5}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1840}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r5}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r6}, {0xd8, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x0, 0xdf, 0x9}, {0x6, 0x1, 0x5, 0x6}, {0xfffa, 0x8, 0x9e, 0xe6}, {0x4, 0x8, 0x1}, {0x101, 0x9, 0x7f, 0x4}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r2}, {0x148, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x81, 0x9, 0xd0, 0x3ff}, {0x3, 0x3, 0x20, 0x10001}, {0x401, 0x6, 0x9, 0xd0b}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf0}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0xb88}, 0x1, 0x0, 0x0, 0x4008041}, 0x40004)

17:11:47 executing program 7:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000011)
r1 = socket(0x15, 0x4, 0x5)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
recvmsg(r1, &(0x7f0000000640)={&(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/192, 0xc0}, {&(0x7f0000000400)=""/255, 0xff}], 0x2, &(0x7f0000000540)=""/248, 0xf8}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, <r3=>r1, {0x0, 0x5}}, './file0\x00'})
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0xf71b34a2f14c0942}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x74, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x400c012)
r4 = syz_open_dev$mouse(&(0x7f0000000d00), 0x2a, 0x43c0)
sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffff801}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6b96}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x24004085)
r5 = socket(0x1a, 0x80000, 0x7fba)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r1)
sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100a000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r6, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000051}, 0x2000c805)
socketpair(0x2a, 0x3, 0x7, &(0x7f0000000f80)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x1c}}, 0x1)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r8 = syz_open_dev$mouse(&(0x7f00000011c0), 0x2, 0x80000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'batadv0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0x88, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xffffff26}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7fffffff}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x5)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000002)

[   92.172524] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.176762] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.179822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.181233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.182444] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.186573] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.190555] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.191722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.205037] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   92.206457] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.212566] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   92.213576] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.235250] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.246901] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.249584] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.250889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.252317] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.255963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.258569] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   92.262539] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.275461] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.287153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.291482] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.298868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.304054] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.305165] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   92.307049] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   92.308135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.313111] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   92.316850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   92.317965] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   92.319140] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   92.320535] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.321618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   92.323758] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   92.324914] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.325798] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   92.331645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   92.333949] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   92.339792] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   92.340665] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   92.340700] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   92.349938] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   92.351396] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   92.353197] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   92.362948] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   92.372575] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   92.374441] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   94.262924] Bluetooth: hci0: command tx timeout
[   94.262947] Bluetooth: hci1: command tx timeout
[   94.325981] Bluetooth: hci3: command tx timeout
[   94.389415] Bluetooth: hci6: command tx timeout
[   94.389471] Bluetooth: hci2: command tx timeout
[   94.391032] Bluetooth: hci4: command tx timeout
[   94.453516] Bluetooth: hci5: command tx timeout
[   94.453566] Bluetooth: hci7: command tx timeout
[   96.309431] Bluetooth: hci1: command tx timeout
[   96.309488] Bluetooth: hci0: command tx timeout
[   96.373437] Bluetooth: hci3: command tx timeout
[   96.438313] Bluetooth: hci2: command tx timeout
[   96.438774] Bluetooth: hci4: command tx timeout
[   96.439985] Bluetooth: hci6: command tx timeout
[   96.503331] Bluetooth: hci7: command tx timeout
[   96.503848] Bluetooth: hci5: command tx timeout
[   98.357412] Bluetooth: hci1: command tx timeout
[   98.359424] Bluetooth: hci0: command tx timeout
[   98.421476] Bluetooth: hci3: command tx timeout
[   98.485424] Bluetooth: hci4: command tx timeout
[   98.486890] Bluetooth: hci6: command tx timeout
[   98.488845] Bluetooth: hci2: command tx timeout
[   98.549386] Bluetooth: hci5: command tx timeout
[   98.550924] Bluetooth: hci7: command tx timeout
[  100.405539] Bluetooth: hci1: command tx timeout
[  100.407122] Bluetooth: hci0: command tx timeout
[  100.469874] Bluetooth: hci3: command tx timeout
[  100.533444] Bluetooth: hci4: command tx timeout
[  100.534857] Bluetooth: hci6: command tx timeout
[  100.536185] Bluetooth: hci2: command tx timeout
[  100.597380] Bluetooth: hci5: command tx timeout
[  100.598862] Bluetooth: hci7: command tx timeout
[  152.028693] syz-executor.0 (286) used greatest stack depth: 23792 bytes left
[  154.823877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  154.826224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  154.828282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  154.830171] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  154.833066] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  154.841607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  154.855025] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  154.859060] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  154.861883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  154.870657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  154.873696] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  154.876058] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  154.889722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  154.903814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  154.907572] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  154.912455] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  154.915199] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  154.926560] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  154.943078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  154.946760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  154.953568] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  154.956670] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  154.959825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  154.961225] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  155.030030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  155.031971] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  155.033463] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  155.037804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  155.039754] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  155.041036] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  155.099635] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  155.105694] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  155.114053] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  155.118819] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  155.128511] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  155.130444] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  155.130468] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  155.144464] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  155.144588] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  155.148203] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  155.170687] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  155.172863] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  155.173788] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  155.175376] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  155.179169] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  155.189966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  155.192608] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  155.196912] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  156.917435] Bluetooth: hci0: command tx timeout
[  156.918388] Bluetooth: hci1: command tx timeout
[  156.983288] Bluetooth: hci2: command tx timeout
[  157.046335] Bluetooth: hci3: command tx timeout
[  157.109374] Bluetooth: hci4: command tx timeout
[  157.237593] Bluetooth: hci6: command tx timeout
[  157.303304] Bluetooth: hci7: command tx timeout
[  157.303353] Bluetooth: hci5: command tx timeout
[  158.967362] Bluetooth: hci1: command tx timeout
[  158.967888] Bluetooth: hci0: command tx timeout
[  159.029326] Bluetooth: hci2: command tx timeout
[  159.093316] Bluetooth: hci3: command tx timeout
[  159.157318] Bluetooth: hci4: command tx timeout
[  159.285391] Bluetooth: hci6: command tx timeout
[  159.349533] Bluetooth: hci5: command tx timeout
[  159.350023] Bluetooth: hci7: command tx timeout
[  161.013455] Bluetooth: hci0: command tx timeout
[  161.013988] Bluetooth: hci1: command tx timeout
[  161.077545] Bluetooth: hci2: command tx timeout
[  161.141350] Bluetooth: hci3: command tx timeout
[  161.205371] Bluetooth: hci4: command tx timeout
[  161.334373] Bluetooth: hci6: command tx timeout
[  161.397411] Bluetooth: hci7: command tx timeout
[  161.398952] Bluetooth: hci5: command tx timeout
[  163.061360] Bluetooth: hci1: command tx timeout
[  163.061385] Bluetooth: hci0: command tx timeout
[  163.126313] Bluetooth: hci2: command tx timeout
[  163.190313] Bluetooth: hci3: command tx timeout
[  163.253387] Bluetooth: hci4: command tx timeout
[  163.382364] Bluetooth: hci6: command tx timeout
[  163.445364] Bluetooth: hci5: command tx timeout
[  163.445848] Bluetooth: hci7: command tx timeout
[  217.291884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  217.297013] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  217.298021] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  217.301828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  217.304166] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  217.305354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  217.411537] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  217.414946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  217.418999] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  217.425487] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  217.427931] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  217.432654] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  217.474797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  217.479609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  217.491367] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  217.505949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  217.507493] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  217.514766] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  217.541025] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  217.546493] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  217.547629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  217.551958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  217.554537] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  217.556621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  217.640811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  217.673414] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  217.676645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  217.684674] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  217.695917] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  217.696689] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  217.703440] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  217.728830] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  217.729879] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  217.743841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  217.745160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  217.763780] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  217.764916] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  217.775568] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  217.797924] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  217.798797] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  217.852760] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  217.862087] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  217.864327] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  217.869737] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  217.882849] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  217.890608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  217.901002] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  217.904558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  219.381316] Bluetooth: hci0: command tx timeout
[  219.446305] Bluetooth: hci1: command tx timeout
[  219.574669] Bluetooth: hci3: command tx timeout
[  219.575758] Bluetooth: hci2: command tx timeout
[  219.829486] Bluetooth: hci4: command tx timeout
[  219.957475] Bluetooth: hci7: command tx timeout
[  220.021452] Bluetooth: hci5: command tx timeout
[  220.087913] Bluetooth: hci6: command tx timeout
[  221.429281] Bluetooth: hci0: command tx timeout
[  221.493345] Bluetooth: hci1: command tx timeout
[  221.622986] Bluetooth: hci2: command tx timeout
[  221.623663] Bluetooth: hci3: command tx timeout
[  221.878298] Bluetooth: hci4: command tx timeout
[  222.006325] Bluetooth: hci7: command tx timeout
[  222.069366] Bluetooth: hci5: command tx timeout
[  222.134905] Bluetooth: hci6: command tx timeout
[  223.478495] Bluetooth: hci0: command tx timeout
[  223.541314] Bluetooth: hci1: command tx timeout
[  223.669594] Bluetooth: hci2: command tx timeout
[  223.670110] Bluetooth: hci3: command tx timeout
[  223.927403] Bluetooth: hci4: command tx timeout
[  224.054888] Bluetooth: hci7: command tx timeout
[  224.118423] Bluetooth: hci5: command tx timeout
[  224.183266] Bluetooth: hci6: command tx timeout
[  225.525557] Bluetooth: hci0: command tx timeout
[  225.591273] Bluetooth: hci1: command tx timeout
[  225.717313] Bluetooth: hci2: command tx timeout
[  225.718697] Bluetooth: hci3: command tx timeout
[  225.973497] Bluetooth: hci4: command tx timeout
[  226.101312] Bluetooth: hci7: command tx timeout
[  226.165379] Bluetooth: hci5: command tx timeout
[  226.229424] Bluetooth: hci6: command tx timeout
[  279.676130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  279.681744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  279.683121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  279.688651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  279.692119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  279.694855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  279.825973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  279.828798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  279.834885] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  279.840978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  279.843836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  279.845370] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  279.876922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  279.878926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  279.884580] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  279.890980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  279.906708] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  279.909634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  279.978479] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  279.986494] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  279.993479] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  280.003742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  280.008698] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  280.012722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  280.040897] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  280.042515] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  280.047069] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  280.050378] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  280.053636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  280.057583] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  280.058878] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  280.074269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  280.075533] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  280.079589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  280.081875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  280.089013] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  280.090357] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  280.091508] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  280.094119] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  280.095960] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  280.097108] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  280.098612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  280.274364] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  280.309900] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  280.316030] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  280.383487] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  280.385540] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  280.408465] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  281.718307] Bluetooth: hci0: command tx timeout
[  281.910394] Bluetooth: hci1: command tx timeout
[  281.973773] Bluetooth: hci2: command tx timeout
[  282.103289] Bluetooth: hci3: command tx timeout
[  282.165495] Bluetooth: hci4: command tx timeout
[  282.230286] Bluetooth: hci5: command tx timeout
[  282.293438] Bluetooth: hci6: command tx timeout
[  282.421429] Bluetooth: hci7: command tx timeout
[  283.767085] Bluetooth: hci0: command tx timeout
[  283.958593] Bluetooth: hci1: command tx timeout
[  284.022249] Bluetooth: hci2: command tx timeout
[  284.151308] Bluetooth: hci3: command tx timeout
[  284.214874] Bluetooth: hci4: command tx timeout
[  284.278780] Bluetooth: hci5: command tx timeout
[  284.342318] Bluetooth: hci6: command tx timeout
[  284.472305] Bluetooth: hci7: command tx timeout
[  285.814377] Bluetooth: hci0: command tx timeout
[  286.007294] Bluetooth: hci1: command tx timeout
[  286.069503] Bluetooth: hci2: command tx timeout
[  286.197391] Bluetooth: hci3: command tx timeout
[  286.262369] Bluetooth: hci4: command tx timeout
[  286.326326] Bluetooth: hci5: command tx timeout
[  286.390404] Bluetooth: hci6: command tx timeout
[  286.519830] Bluetooth: hci7: command tx timeout
[  287.862284] Bluetooth: hci0: command tx timeout
[  288.054365] Bluetooth: hci1: command tx timeout
[  288.119276] Bluetooth: hci2: command tx timeout
[  288.245294] Bluetooth: hci3: command tx timeout
[  288.310288] Bluetooth: hci4: command tx timeout
[  288.374289] Bluetooth: hci5: command tx timeout
[  288.439294] Bluetooth: hci6: command tx timeout
[  288.565303] Bluetooth: hci7: command tx timeout
[  342.291662] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  342.299757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  342.301631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  342.313124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  342.314785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  342.321365] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  342.322829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  342.323177] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  342.325313] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  342.347624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  342.391628] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  342.395391] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  342.401134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  342.403657] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  342.413431] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  342.416528] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  342.422104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  342.427082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  342.478864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  342.481896] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  342.484428] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  342.497118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  342.499464] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  342.501990] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  342.543151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  342.555459] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  342.570035] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  342.576983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  342.589845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  342.607337] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  342.616094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  342.617672] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  342.618717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  342.649279] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  342.658826] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  342.672617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  342.674688] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  342.675959] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  342.680538] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  342.681629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  342.696792] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  342.698477] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  342.699888] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  342.703718] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  342.704840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  342.734093] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  342.745566] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  342.751969] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  344.437461] Bluetooth: hci1: command tx timeout
[  344.437525] Bluetooth: hci2: command tx timeout
[  344.438389] Bluetooth: hci0: command tx timeout
[  344.567267] Bluetooth: hci3: command tx timeout
[  344.694283] Bluetooth: hci4: command tx timeout
[  344.759238] Bluetooth: hci7: command tx timeout
[  344.885503] Bluetooth: hci5: command tx timeout
[  345.334495] Bluetooth: hci6: command tx timeout
[  346.485320] Bluetooth: hci2: command tx timeout
[  346.485339] Bluetooth: hci1: command tx timeout
[  346.486313] Bluetooth: hci0: command tx timeout
[  346.613284] Bluetooth: hci3: command tx timeout
[  346.741253] Bluetooth: hci4: command tx timeout
[  346.805419] Bluetooth: hci7: command tx timeout
[  346.934298] Bluetooth: hci5: command tx timeout
[  347.381367] Bluetooth: hci6: command tx timeout
[  348.533291] Bluetooth: hci0: command tx timeout
[  348.533342] Bluetooth: hci1: command tx timeout
[  348.534414] Bluetooth: hci2: command tx timeout
[  348.661924] Bluetooth: hci3: command tx timeout
[  348.792392] Bluetooth: hci4: command tx timeout
[  348.853487] Bluetooth: hci7: command tx timeout
[  348.982337] Bluetooth: hci5: command tx timeout
[  349.429415] Bluetooth: hci6: command tx timeout
[  350.581302] Bluetooth: hci2: command tx timeout
[  350.581839] Bluetooth: hci1: command tx timeout
[  350.582361] Bluetooth: hci0: command tx timeout
[  350.709247] Bluetooth: hci3: command tx timeout
[  350.840232] Bluetooth: hci4: command tx timeout
[  350.903387] Bluetooth: hci7: command tx timeout
[  351.029300] Bluetooth: hci5: command tx timeout
[  351.478357] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
17:16:57  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=1ffff11004fbbef0 RCX=0000000000000000 RDX=1ffff11006516146
RSI=ffffffff85c15dc0 RDI=ffff8880328b0a30 RBP=1bfd9a6b385ec1cc RSP=ffff888027ddf770
R8 =0000000000000001 R9 =ffff8880328b0a38 R10=ffffffff863f7797 R11=00000000000c36d9
R12=0000000000000002 R13=ffffffff81525916 R14=0000000000000003 R15=ffff8880328b0000
RIP=ffffffff81300ea7 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f02edcd3028 CR3=000000000edac000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff817ef6b5 RDX=ffff888033d1b700
RSI=ffffffff817e8e46 RDI=ffffea0000223bb0 RBP=ffffea0000223b80 RSP=ffff88802abb7ab0
R8 =00007f621f914000 R9 =fffff94000044770 R10=0000000000000000 R11=00000000000c36d9
R12=ffffea0000223b80 R13=0000000000000001 R14=0000000000000000 R15=ffffea0000223b98
RIP=ffffffff817e8e4a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f621f912260 CR3=000000000ef12000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000