Warning: Permanently added '[localhost]:23177' (ECDSA) to the list of known hosts.
2024/11/08 22:45:47 fuzzer started
2024/11/08 22:45:47 dialing manager at localhost:46317
syzkaller login: [   67.639872] cgroup: Unknown subsys name 'net'
[   67.745724] cgroup: Unknown subsys name 'cpuset'
[   67.782162] cgroup: Unknown subsys name 'rlimit'
2024/11/08 22:46:04 syscalls: 204
2024/11/08 22:46:04 code coverage: enabled
2024/11/08 22:46:04 comparison tracing: enabled
2024/11/08 22:46:04 extra coverage: enabled
2024/11/08 22:46:04 setuid sandbox: enabled
2024/11/08 22:46:04 namespace sandbox: enabled
2024/11/08 22:46:04 Android sandbox: enabled
2024/11/08 22:46:04 fault injection: enabled
2024/11/08 22:46:04 leak checking: enabled
2024/11/08 22:46:04 net packet injection: enabled
2024/11/08 22:46:04 net device setup: enabled
2024/11/08 22:46:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/11/08 22:46:04 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/11/08 22:46:04 USB emulation: enabled
2024/11/08 22:46:04 hci packet injection: enabled
2024/11/08 22:46:04 wifi device emulation: enabled
2024/11/08 22:46:04 802.15.4 emulation: enabled
2024/11/08 22:46:04 fetching corpus: 0, signal 0/0 (executing program)
2024/11/08 22:46:06 starting 8 fuzzer processes
22:46:06 executing program 0:
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffffa}}, './file0\x00'})
openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xda}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x684a}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3cbc}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc832}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r5=>r1, {0x1819a5bf}}, './file0\x00'})
sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffff99}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x20440d0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r6=>r0, {0x3f}}, './file0\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000600)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r9=>r1, {0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000880)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000900)={'ip_vti0\x00', <r10=>r7, 0x700, 0x40, 0xb77, 0x7, {{0x2e, 0x4, 0x1, 0x10, 0xb8, 0x64, 0x0, 0x20, 0x29, 0x0, @private=0xa010101, @local, {[@end, @ssrr={0x89, 0x13, 0xff, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xcd, 0x0, 0x2, [0x7f, 0x7]}, @timestamp_prespec={0x44, 0x2c, 0x1a, 0x3, 0xd, [{@loopback, 0x74c}, {@loopback, 0x2}, {@local, 0x80000001}, {@rand_addr=0x64010100, 0x5a28}, {@rand_addr=0x64010100, 0x2}]}, @cipso={0x86, 0x53, 0x2, [{0x0, 0x7, "a81c15bd22"}, {0x2, 0x5, 'E9?'}, {0x2, 0x7, "15444cd810"}, {0x0, 0x10, "9207663498c8f48851b55eca376a"}, {0x1, 0xd, "0d455bd63771f0d72285ee"}, {0x2, 0xd, "799175c18fe5498e8993a9"}, {0x1, 0x9, "1ba910c7e30764"}, {0x6, 0x7, "4ee1f3f76b"}]}]}}}}})
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r4, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x10)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040014}, 0x40000)

22:46:06 executing program 1:
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
inotify_rm_watch(0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x3}}, './file0\x00'})
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)
inotify_rm_watch(r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xffff, 0x7}}, './file0\x00'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x0, 0x2, 0x20}, @flat=@handle={0x73682a85, 0x101, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/83, 0x53, 0x1, 0x10}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x1d, 0x0, &(0x7f0000000280)="2dea0d0c326c53b5fb94e2be0c88a199650206688a9d7c51c9efb3b3e4"})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r4=>r2, {<r5=>r3}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r6=>r4, {0x2}}, './file0\x00'})
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x5)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@private0, @in6=@initdev}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000500)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r7=>r4, {0x7f}}, './file0\x00'})
setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000580)=0x1, 0x4)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r9=>0xffffffffffffffff, {0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000640)={{0x1, 0x1, 0x18, r9, {0x5}}, './file0\x00'})
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000680)={0x9014053127c065f8, 0x12, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x30}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x4, 0x67, "0f81816b31b114c1dcb40644ca448d589ef7bc93f9bd4636c22e309969398098160fda889bf6d6fb569ef9dbca087f258f2fce0b05810dc111ba4b7d1000958c2a77ccd1da29f27acdd9dc3d6e68a70a8851cc43f54a9b87444e8b2aa30c8b407c11323b03fe45"}, @pad1, @enc_lim={0x4, 0x1, 0x3f}, @ra={0x5, 0x2, 0x85bf}, @pad1, @ra={0x5, 0x2, 0x6}]}, 0xa0)

22:46:06 executing program 3:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000))
kexec_load(0x9, 0x8, &(0x7f0000000540)=[{&(0x7f0000000040)="a9d3e967f1cdcd56ccd2794ee1a35e266b81ee7e9afd47ff6461fefae62d00d7b672ab", 0x23, 0x5, 0x8001}, {&(0x7f0000000080)="c42645415f275b9fb96b293f0f94dd47fe6b9462e67eb5b45f857d637ac606f2", 0x20}, {&(0x7f00000000c0)="9615986edac5b253c1c234999b3625b1371f37ea26ca574ef87951facfd6e72d9a829c28785c9e9b92409546fa731a6efe7ecfb2f57ac42178f498dde88d36b15d2fdaa4983f57d88cb025642f9bc5e85b4fc7736d131a8144097def2cea2d2bb57a0528abd2f833df210cc1d4af07c517dc03f773576b7482ea2e027e0eaca804f4c5e190ae70b679e6e5dd75b2c4e4aa114d13448eaaa1b74c2795a5db17825dbd66664fd95344b4c8db1f97f610ec1decfc8e8d094126bbb8e2658f128a7e683a667501804f2b", 0xc8, 0x9e, 0x9}, {&(0x7f00000001c0)="0a255c996a003f5a4a1c789f47f56e5a1c8259b21223e41b7d4e33980aa8c493778dfafee8d90b19e36bd962850e35d523eedbe2fef1007c72afe27996b346218ab41316f0df0297b2fafbfbd0679cd4eb036b6c06d39e2900540d3f69e60d1aa506dca8df8d51e9bb35545427530305f7d42a3888e0527cd4ee5535a1f4a02bd90f841b7525478c71cbd053a393758d1fcdd5aa0061471985b58dd0e0c5adce9799b58f9810f3b9421569d293443ed87e2be59c68b391eec0adf721", 0xbc, 0x9, 0xffffffffffffffff}, {&(0x7f0000000280)="d32d3b4e1873d3556e57c0bef0dfb85e9469b80e0abbf4a444d3a7efe99a7b730f8f6f088b3c8028ba187747d41fd06520e48ce16deb4869e4624286f657d35f1679204b1b4a388a4d44587d82153b011c1960795f8f8d9a5f66b9076cdc33dfbbe521", 0x63, 0x9, 0x8e6}, {&(0x7f0000000300)="5cb9bb06e434a057116d76e045f165dd70aac8a7978afd9436838db4f5200b72ce777817888760fa3145ca94617358952a941dd3472d0b863968c2279441b06f3898cf1a2e4596d04bd5d8e10fc632719c856bce10cf66dd2dd0464f0fc07eb12303ef8a8dba3fe56dc54efcfb311e01b24f0f6d083e096c332cf624de0a66d3b113e7a2453ab89d9fa4d935469c1e24720b26fcb8e148b5a7d9e76edb5c6428bb888a168be1e770f09cca3be00ca38bbf1e32143267c79c77b3c9fcab6f2a7ad4a64c0b82b0d8932e9b6275d79dde12c8e981a74f7cf7d99adc286bd4cd8524fa2331982f8ec635effca5a4", 0xec, 0x6, 0x400}, {&(0x7f0000000400)="1a82e38b732af0a7020e5528b7d6af8d1cadcf304542626ac4f3227be5b5f08357bc54196855b441c3b38393549423f0d0ee8df4506a27ea6dbf6d86e2a4e354e357ee787df0a6c8c29fc598daa5998137509c32ae251b489b1ddd4f046884ac2ed3c9e28c38e154161c1e14315a1bf143c12651a67379ac1fd4572762a54350dacb229a2531720ff1b8f57a23e30f48dc0b8375c8c69c28053b3aa54b318dc7d72cba", 0xa3, 0x80000001, 0x3f}, {&(0x7f00000004c0)="0cb667cd30f80e2c1e8b1901b4469b9c2c83f992581990fef8c101ff6052064bd9ef64b13fe3a639904a5a2f0478cb041506c65e8c09eafdcab0ad4b4410e353553538a0b25f493ba56c85fd1ef6", 0x4e, 0x6, 0x7fffffff}], 0x160000)
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000640)='io.latency\x00', 0x2, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000680))
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000006c0)=0xf0)
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000700))
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000740)={0xffffffffffffffff, 0x1, 0x20})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r1=>r0, @in_args={0x2}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000007c0)={0x0, 0x0, 0xffffffffffffffff, 0x10000, 0x80000})
ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000800)={0x1000, ""/4096})
r2 = syz_open_dev$sg(&(0x7f0000001840), 0x0, 0x20003)
ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000001880))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000018c0)={{0x1, 0x1, 0x18, <r3=>r0, {0xfffffff9}}, './file0\x00'})
mq_timedreceive(r3, &(0x7f0000001900)=""/140, 0x8c, 0x40, &(0x7f00000019c0)={0x0, 0x989680})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001a00)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000001a40)=0x41)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001a80)={0x8c, 0x1, 0x400, "8979575facbc0ffcafe4a08a894ac8697ea72e1071f4815b62be64f45b7522e2ad9d79f106250e8c835290d5211269bee10f0afaa543922d620de6251f3fdba84b49dfd8d676848168b5cf233b3c334b0f6d0546c8261de7c8e1ded1af7728810ffcab6c3fa150083e35b6608d0ced07b08402afaf92bc3f846bb1bae009e7aa8799831ea6f25ddac91f2b55"})

22:46:06 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0xffffffffffffffff}}, './file0\x00'})
r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x2}}, './file0\x00'})
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c001)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r5=>r2, {0x2}}, './file0/../file0\x00'})
socketpair(0x1e, 0x1, 0x7, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x1c}}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r7=>r3, {0x4, 0xc89}}, './file0\x00'})
getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=<r8=>0x0)
getresuid(&(0x7f0000000640)=<r9=>0x0, &(0x7f0000000680), &(0x7f00000006c0))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000880)={'tunl0\x00', &(0x7f0000000700)={'syztnl2\x00', <r10=>0x0, 0x7, 0x1, 0xba4, 0xffffff5e, {{0x55, 0x4, 0x3, 0x2, 0x154, 0x65, 0x0, 0x3f, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0x13, 0x3, 0x3, [{@multicast1, 0xde}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x55d}, {@rand_addr=0x64010100, 0xc00000}]}, @cipso={0x86, 0x18, 0x1, [{0x7, 0x12, "5d2e88f31c37ff9509fcb623572d0104"}]}, @generic={0x83, 0x8, "885b66f24fe7"}, @timestamp_prespec={0x44, 0x24, 0x84, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@private=0xa010101, 0xb8}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xffffff01}]}, @cipso={0x86, 0x6a, 0xffffffffffffffff, [{0x7, 0x5, "df9b2d"}, {0x0, 0x10, "22a7c2c6804d1577446038abe5d9"}, {0x7, 0x11, "d139bbaee16fad16c6a7e137f6a8c2"}, {0x7, 0x7, "bea21d270b"}, {0x2, 0x9, "e486372dac580f"}, {0x1, 0xe, "36e9f89d39c879140ada3864"}, {0x6, 0xb, "763d9af58aa90dcb8e"}, {0x6453eca605564f5d, 0x5, "41172b"}, {0x2, 0x10, "5f177b4b098709f0d49520f9ba6c"}]}, @timestamp_addr={0x44, 0x14, 0xc5, 0x1, 0x9, [{@remote, 0x6}, {@rand_addr=0x64010100, 0x8}]}, @end, @timestamp={0x44, 0x1c, 0x5c, 0x0, 0xa, [0x8, 0x20, 0x3, 0x81, 0x0, 0x2]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x37, 0x3, [{0x1, 0x9, "cdb2457a501753"}, {0x7, 0xb, "b7e071b476169c8f00"}, {0x6, 0xa, "c360d418a23f5126"}, {0x5, 0x7, "87213496be"}, {0x0, 0xc, "4b45a504c66f83564e5f"}]}]}}}}})
sendmsg$nl_xfrm(r7, &(0x7f0000000d00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000008c0)=@acquire={0x3dc, 0x17, 0x400, 0x70bd28, 0x25dfdbfb, {{@in6=@mcast1, 0x4d5}, @in6=@private1, {@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e21, 0x0, 0x4e23, 0x8000, 0xa, 0x30, 0x0, 0x88, 0x0, 0xffffffffffffffff}, {{@in=@multicast2, @in=@multicast1, 0x4e23, 0x0, 0x4e23, 0x7fff, 0x2, 0x80, 0x80, 0x2f, 0x0, r8}, {0x1, 0x9, 0xf622, 0x1, 0x2, 0x2, 0x0, 0xcf}, {0x7, 0x0, 0x10000, 0xffffffff7fffffff}, 0x10001, 0x6e6bb2, 0x0, 0x1}, 0x40, 0x8, 0xffff, 0x70bd2d}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}, @tmpl={0xc4, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x3504, 0x4, 0x3, 0x2, 0x7, 0x8, 0x5}, {{@in6=@empty, 0x4d6, 0xff}, 0xa, @in=@empty, 0x0, 0x0, 0x0, 0x80, 0x8, 0x80000001, 0x6}, {{@in=@private=0xa010102, 0x4d3, 0x33}, 0xa, @in6=@local, 0x3500, 0x2, 0x2, 0x4, 0x6, 0x5, 0x8}]}, @tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x4d2, 0xff}, 0x2, @in=@multicast2, 0x34ff, 0x3, 0x2, 0x79, 0x5, 0xfffffffc, 0x6}]}, @lastused={0xc, 0xf, 0x602d}, @XFRMA_IF_ID={0x8}, @policy={0xac, 0x7, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0xfff, 0x4e24, 0x200, 0xa, 0xa0, 0x20, 0x3c, 0x0, r9}, {0xa0, 0x400, 0xb4, 0x200, 0x6, 0x1, 0x9, 0xe24}, {0x1000, 0xfffffffffffffe00, 0x6, 0x4}, 0xa71, 0x6e6bb6, 0x2, 0x0, 0x0, 0x770f82e018b0e0f8}}, @sa={0xe4, 0x6, {{@in=@rand_addr=0x64010101, @in=@multicast2, 0x4e22, 0x4, 0x4e24, 0x2356, 0xa, 0x80, 0x20, 0x0, r10, 0xee01}, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4d2, 0x32}, @in6=@mcast2, {0x8, 0x1, 0x0, 0x100000001, 0x8e74, 0x0, 0x7ff, 0x80000001}, {0x100000000, 0x3, 0x1, 0x6f7d}, {0x0, 0x0, 0x2}, 0x70bd2c, 0x3502, 0xa, 0x4, 0x3, 0x30}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x4000000}, 0x48c1)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r4, {0xa49c}}, './file0/../file0\x00'})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000d80), 0x84000, 0x0)
getresuid(&(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000e80)={{0x1, 0x1, 0x18, <r11=>r4}, './file0\x00'})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000f80)={&(0x7f0000000ec0), 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, 0x0, 0x311, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x39a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x20000050)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000)

[   85.601335] audit: type=1400 audit(1731105966.387:7): avc:  denied  { execmem } for  pid=277 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
22:46:06 executing program 7:
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x1, 0x200, 0x4, 0x2, 0x2, 0x4})
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000040)={0x3, 0x200, 0xf7, 0x1, 0x200, 0x6})
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x89}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, '\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000300)=0x5, 0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x100}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r5=>r0, @in_args={0x1}}, './file0\x00'})
r6 = mq_open(&(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x800, 0x20, &(0x7f0000000400)={0x9, 0x8f5e, 0xfffffffffffffffb, 0x7f})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6, {0xc760}}, './file0\x00'})
ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000480)={0x3, 0x100, 0x20, 0x11, 0xaf6, 0x2})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {<r7=>r2}}, './file0\x00'})
ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000500))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r8, {0x3}}, './file0\x00'})

22:46:06 executing program 4:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x280204, 0x0)
getrusage(0xffffffffffffffff, &(0x7f0000000040))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x404a2a78}]}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x24040014)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r3=>r0, {0x7}}, './file0\x00'})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040010}, 0x1)
shmctl$SHM_LOCK(0xffffffffffffffff, 0xb)
r4 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil)
shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000500)=""/177)
getrusage(0x1, &(0x7f00000005c0))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680))
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x44010)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0x5, 0x4}}, './file0\x00'})
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffe01}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000000940)=""/194)
shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001140)={&(0x7f0000000d40)=@delpolicy={0x3d8, 0x14, 0x8, 0x70bd2a, 0x25dfdbfc, {{@in=@private=0xa010102, @in6=@empty, 0x4e23, 0x0, 0x4e20, 0x9, 0x0, 0x60, 0x80, 0x88}, 0x6e6bbd, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x30}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x40}, 0x3502, 0x0, 0x3, 0x9, 0x2, 0xb6a, 0x3}, {{@in=@loopback, 0x4d2, 0x33}, 0xa, @in6=@remote, 0x3505, 0x2, 0x1, 0xc0, 0x7, 0x8102, 0x81}, {{@in=@multicast2, 0x4d5, 0x2b}, 0x2, @in=@private=0xa010101, 0x3503, 0x2, 0x2, 0x0, 0x7ff, 0xfff, 0x1000}]}, @algo_comp={0xb4, 0x3, {{'lzjh\x00'}, 0x360, "74866eb8c05134ab0883a3991d4a3279c925f8a1025e7e31167b190e95b5d725ac645a1f207e3534488f86eafe811b4ae9531722f8fa49366c21f9a4e4fa6da6ac52e211cc6e8914a8c3ccc382bb0798cf5c5840b648dce9748472f8f642d21471ce980194a9b9fcb690985e"}}, @lastused={0xc, 0xf, 0x9}, @tfcpad={0x8, 0x16, 0x1}, @replay_esn_val={0x44, 0x17, {0xa, 0x70bd2b, 0x70bd2a, 0x70bd26, 0x70bd29, 0x46e78cb0, [0x9, 0x0, 0x2, 0x2, 0xbf2, 0x20, 0x1ff, 0x60, 0x6, 0x2]}}, @tmpl={0x144, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x6c}, 0x2, @in=@multicast1, 0x3505, 0x0, 0x0, 0x5, 0x5328, 0x3f, 0x3}, {{@in6=@remote, 0x4d4, 0x6c}, 0xa, @in=@rand_addr=0x64010100, 0x3502, 0x6, 0x0, 0x6, 0x10000, 0x3, 0x7f}, {{@in6=@mcast2, 0x4d3, 0x2b}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3503, 0x0, 0x0, 0xe6, 0x4, 0x9, 0x9}, {{@in6=@remote, 0x4d6}, 0xa, @in=@multicast1, 0x3505, 0x4, 0x3, 0x0, 0x1, 0x6}, {{@in=@loopback, 0x4d3, 0x3c}, 0xa, @in=@remote, 0x3505, 0x3, 0x2, 0x6, 0x7ff, 0x0, 0x200}]}, @sec_ctx={0x4c, 0x8, {0x48, 0x8, 0x1, 0x96, 0x40, "b2e9ea385191d4a00e4ba09ab9783921cac58c1acca302db21ce048eac5528bbeef80498bf1e9360ada00f62d41b77b1e3505873ad2043ecc22bb15779d73a60"}}, @encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e23, @in6=@empty}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x3d8}}, 0x94)

22:46:06 executing program 6:
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1b51}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5d}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x304404}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000884)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r2=>0x0})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, 0x0, 0x518, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x40080)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r3=>r1, {0x44}}, './file0\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in=@empty}}, &(0x7f0000000700)=0xe8)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1400801c}, 0x4040000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000800)=[@acquire_done={0x40106309, 0x2}], 0x1000, 0x0, &(0x7f0000000840)="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"})
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x60800000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x24, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x840)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001980)='./binderfs/binder0\x00', 0x3, 0x0)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000001a40), r7)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5ceb)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x4c, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5d}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xb3a9}]}, 0x4c}}, 0x20004810)

22:46:06 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r0=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c041}, 0x804)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000240)=0xe8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'gre0\x00', <r2=>r1, 0x1, 0x8000, 0x40, 0xbb7f, {{0x2b, 0x4, 0x0, 0xc, 0xac, 0x68, 0x0, 0xff, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0x52, [@multicast1]}, @timestamp_addr={0x44, 0x1c, 0xde, 0x1, 0x2, [{@broadcast, 0x5}, {@private=0xa010102, 0x4}, {@local, 0x6}]}, @ssrr={0x89, 0x7, 0x45, [@local]}, @timestamp_addr={0x44, 0x1c, 0xbd, 0x1, 0xf, [{@remote, 0x2}, {@local, 0x5}, {@loopback, 0x1ff}]}, @end, @lsrr={0x83, 0xb, 0xb9, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0xc, 0x64, 0x0, 0x4, [0x9, 0x8001]}, @rr={0x7, 0x1b, 0xe2, [@remote, @multicast1, @private=0xa010101, @multicast2, @local, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0xc5, 0x3, 0x9, [{@private=0xa010101, 0x100}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x20}, {@empty, 0xe}]}, @ssrr={0x89, 0x3, 0x6}]}}}}})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x50}}, 0x1)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r4, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r2}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24008004)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4c2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', r1, 0x80, 0x8, 0x0, 0x9, {{0x2f, 0x4, 0x2, 0xc, 0xbc, 0x66, 0x0, 0x0, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0xc, 0xb5, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}]}, @ssrr={0x89, 0x1b, 0x9b, [@rand_addr=0x64010101, @loopback, @rand_addr=0x64010101, @multicast1, @multicast1, @rand_addr=0x64010102]}, @cipso={0x86, 0x25, 0x0, [{0x1, 0xe, "d4ebc66b06c9bed153d3f05d"}, {0x2, 0x11, "e5001cef4d90b7f2508a349f97c7bc"}]}, @timestamp={0x44, 0x28, 0x69, 0x0, 0xa, [0x5, 0x26e, 0x7f, 0x6, 0x7fffffff, 0x74, 0x1f, 0x7fff, 0xffffffff]}, @lsrr={0x83, 0x7, 0x26, [@multicast2]}, @generic={0x94, 0x5, "a268be"}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x5, 0xd, "4fe0f6231a9d211521be26"}, {0x7, 0x12, "931af5c74144a0f82178c84421bf55d5"}]}]}}}}})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x121000, 0x0)
socketpair(0x27, 0x8000a, 0x5, &(0x7f0000000a40)={<r6=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffe}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000c00))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000c40)='./binderfs/custom0\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000c80)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff, {0x77}}, './file0\x00'})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r3, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040000)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x64, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000005)

[   87.005136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.006528] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.008410] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.012258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.013623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.015168] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.017169] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.019498] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.023505] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   87.025526] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.042011] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.054017] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   87.056466] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.063573] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.072091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.073476] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.078037] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.079338] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.080430] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.083483] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   87.098988] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.102951] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   87.104166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.111268] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   87.112660] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.113653] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   87.120290] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   87.124823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   87.125744] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   87.127942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.130477] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   87.131722] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   87.133258] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   87.140398] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   87.142878] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   87.150433] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   87.151460] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   87.157172] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.158120] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   87.159121] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   87.163613] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   87.165429] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   87.168983] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   87.171691] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.176564] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   87.226508] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.235974] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   87.237146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   89.071876] Bluetooth: hci0: command tx timeout
[   89.133893] Bluetooth: hci1: command tx timeout
[   89.199049] Bluetooth: hci7: command tx timeout
[   89.199379] Bluetooth: hci2: command tx timeout
[   89.261936] Bluetooth: hci4: command tx timeout
[   89.262920] Bluetooth: hci5: command tx timeout
[   89.263537] Bluetooth: hci6: command tx timeout
[   89.263639] Bluetooth: hci3: command tx timeout
[   91.119810] Bluetooth: hci0: command tx timeout
[   91.182060] Bluetooth: hci1: command tx timeout
[   91.246361] Bluetooth: hci2: command tx timeout
[   91.247970] Bluetooth: hci7: command tx timeout
[   91.309978] Bluetooth: hci5: command tx timeout
[   91.310458] Bluetooth: hci4: command tx timeout
[   91.311240] Bluetooth: hci6: command tx timeout
[   91.311695] Bluetooth: hci3: command tx timeout
[   93.167525] Bluetooth: hci0: command tx timeout
[   93.230825] Bluetooth: hci1: command tx timeout
[   93.293945] Bluetooth: hci7: command tx timeout
[   93.295320] Bluetooth: hci2: command tx timeout
[   93.358923] Bluetooth: hci3: command tx timeout
[   93.359043] Bluetooth: hci6: command tx timeout
[   93.360442] Bluetooth: hci4: command tx timeout
[   93.361463] Bluetooth: hci5: command tx timeout
[   95.214874] Bluetooth: hci0: command tx timeout
[   95.277961] Bluetooth: hci1: command tx timeout
[   95.342221] Bluetooth: hci7: command tx timeout
[   95.342720] Bluetooth: hci2: command tx timeout
[   95.405919] Bluetooth: hci4: command tx timeout
[   95.406400] Bluetooth: hci6: command tx timeout
[   95.407190] Bluetooth: hci3: command tx timeout
[   95.407639] Bluetooth: hci5: command tx timeout
[  147.156860] syz-executor.6 (289) used greatest stack depth: 24224 bytes left
[  149.627576] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  149.629468] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  149.631260] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  149.640177] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  149.641632] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  149.642693] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  149.698110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  149.701026] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  149.705006] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  149.710444] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  149.717443] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  149.719283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  149.765207] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  149.769281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  149.770631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  149.774128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  149.775903] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  149.776925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  149.783985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  149.786223] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  149.786376] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  149.790123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  149.796105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  149.797720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  149.893318] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  149.909016] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  149.914603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  149.922307] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  149.924168] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  149.942103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  149.943247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  149.958977] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  149.966185] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  149.967264] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  149.968108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  149.976096] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  149.984953] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  149.985101] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  149.986973] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  149.992875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  150.000195] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  150.007249] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  150.028222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  150.034005] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  150.062597] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  150.063393] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  150.070078] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  150.070981] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  151.726929] Bluetooth: hci0: command tx timeout
[  151.790098] Bluetooth: hci1: command tx timeout
[  151.855625] Bluetooth: hci2: command tx timeout
[  151.856390] Bluetooth: hci3: command tx timeout
[  152.047870] Bluetooth: hci5: command tx timeout
[  152.048692] Bluetooth: hci4: command tx timeout
[  152.173981] Bluetooth: hci6: command tx timeout
[  152.174726] Bluetooth: hci7: command tx timeout
[  153.773828] Bluetooth: hci0: command tx timeout
[  153.839788] Bluetooth: hci1: command tx timeout
[  153.901842] Bluetooth: hci2: command tx timeout
[  153.903022] Bluetooth: hci3: command tx timeout
[  154.093884] Bluetooth: hci4: command tx timeout
[  154.094455] Bluetooth: hci5: command tx timeout
[  154.224839] Bluetooth: hci6: command tx timeout
[  154.225369] Bluetooth: hci7: command tx timeout
[  155.821856] Bluetooth: hci0: command tx timeout
[  155.885848] Bluetooth: hci1: command tx timeout
[  155.950007] Bluetooth: hci2: command tx timeout
[  155.950514] Bluetooth: hci3: command tx timeout
[  156.141950] Bluetooth: hci5: command tx timeout
[  156.142488] Bluetooth: hci4: command tx timeout
[  156.285710] Bluetooth: hci7: command tx timeout
[  156.286345] Bluetooth: hci6: command tx timeout
[  157.870822] Bluetooth: hci0: command tx timeout
[  157.933946] Bluetooth: hci1: command tx timeout
[  157.999823] Bluetooth: hci2: command tx timeout
[  158.000336] Bluetooth: hci3: command tx timeout
[  158.189974] Bluetooth: hci4: command tx timeout
[  158.190554] Bluetooth: hci5: command tx timeout
[  158.318837] Bluetooth: hci7: command tx timeout
[  158.319373] Bluetooth: hci6: command tx timeout
[  212.052912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  212.059507] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  212.060651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  212.064342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  212.065915] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  212.068012] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  212.088711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  212.090561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  212.092848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  212.096717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  212.098538] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  212.099934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  212.153694] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  212.157127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  212.158334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  212.161981] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  212.163334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  212.170444] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  212.180607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  212.187693] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  212.190045] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  212.191211] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  212.195028] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  212.196681] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  212.218436] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  212.221634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  212.222996] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  212.235014] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  212.237442] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  212.238855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  212.352687] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  212.366005] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  212.368812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  212.388646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  212.414401] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  212.416225] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  212.432022] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  212.439307] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  212.447688] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  212.464593] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  212.486565] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  212.498218] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  212.507132] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  212.523210] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  212.523633] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  212.525468] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  212.542287] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  212.576432] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  214.126837] Bluetooth: hci1: command tx timeout
[  214.126934] Bluetooth: hci0: command tx timeout
[  214.253950] Bluetooth: hci3: command tx timeout
[  214.255162] Bluetooth: hci2: command tx timeout
[  214.318190] Bluetooth: hci4: command tx timeout
[  214.509886] Bluetooth: hci5: command tx timeout
[  214.637864] Bluetooth: hci7: command tx timeout
[  214.703868] Bluetooth: hci6: command tx timeout
[  216.173819] Bluetooth: hci1: command tx timeout
[  216.174847] Bluetooth: hci0: command tx timeout
[  216.301936] Bluetooth: hci2: command tx timeout
[  216.303147] Bluetooth: hci3: command tx timeout
[  216.366982] Bluetooth: hci4: command tx timeout
[  216.558803] Bluetooth: hci5: command tx timeout
[  216.685818] Bluetooth: hci7: command tx timeout
[  216.751466] Bluetooth: hci6: command tx timeout
[  218.221852] Bluetooth: hci0: command tx timeout
[  218.221889] Bluetooth: hci1: command tx timeout
[  218.351000] Bluetooth: hci3: command tx timeout
[  218.351024] Bluetooth: hci2: command tx timeout
[  218.414820] Bluetooth: hci4: command tx timeout
[  218.606937] Bluetooth: hci5: command tx timeout
[  218.733895] Bluetooth: hci7: command tx timeout
[  218.800874] Bluetooth: hci6: command tx timeout
[  220.269822] Bluetooth: hci0: command tx timeout
[  220.270355] Bluetooth: hci1: command tx timeout
[  220.397894] Bluetooth: hci3: command tx timeout
[  220.398964] Bluetooth: hci2: command tx timeout
[  220.462800] Bluetooth: hci4: command tx timeout
[  220.654848] Bluetooth: hci5: command tx timeout
[  220.782843] Bluetooth: hci7: command tx timeout
[  220.846822] Bluetooth: hci6: command tx timeout
[  274.414801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  274.417000] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  274.420166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  274.427373] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  274.429023] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  274.429223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  274.431215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  274.433032] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  274.434386] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  274.436760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  274.443315] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  274.450051] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  274.566711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  274.572181] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  274.573594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  274.574991] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  274.578072] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  274.579005] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  274.588039] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  274.590839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  274.591968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  274.609656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  274.616452] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  274.622370] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  274.626043] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  274.627980] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  274.634062] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  274.643107] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  274.654105] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  274.655545] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  274.760069] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  274.774504] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  274.775996] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  274.814684] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  274.822124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  274.833476] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  274.834447] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  274.835894] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  274.837142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  274.841999] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  274.845918] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  274.847565] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  274.858956] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  274.905111] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  274.919990] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  274.923636] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  274.930188] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  274.931520] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  276.462816] Bluetooth: hci0: command tx timeout
[  276.530993] Bluetooth: hci1: command tx timeout
[  276.656794] Bluetooth: hci2: command tx timeout
[  276.717892] Bluetooth: hci3: command tx timeout
[  276.718892] Bluetooth: hci4: command tx timeout
[  276.973889] Bluetooth: hci6: command tx timeout
[  276.975013] Bluetooth: hci5: command tx timeout
[  277.037815] Bluetooth: hci7: command tx timeout
[  278.509981] Bluetooth: hci0: command tx timeout
[  278.573831] Bluetooth: hci1: command tx timeout
[  278.701850] Bluetooth: hci2: command tx timeout
[  278.765984] Bluetooth: hci4: command tx timeout
[  278.767472] Bluetooth: hci3: command tx timeout
[  279.022798] Bluetooth: hci5: command tx timeout
[  279.024185] Bluetooth: hci6: command tx timeout
[  279.086819] Bluetooth: hci7: command tx timeout
[  280.558501] Bluetooth: hci0: command tx timeout
[  280.621829] Bluetooth: hci1: command tx timeout
[  280.750053] Bluetooth: hci2: command tx timeout
[  280.813834] Bluetooth: hci4: command tx timeout
[  280.813925] Bluetooth: hci3: command tx timeout
[  281.071775] Bluetooth: hci6: command tx timeout
[  281.071791] Bluetooth: hci5: command tx timeout
[  281.133869] Bluetooth: hci7: command tx timeout
[  282.605898] Bluetooth: hci0: command tx timeout
[  282.669853] Bluetooth: hci1: command tx timeout
[  282.797796] Bluetooth: hci2: command tx timeout
[  282.862108] Bluetooth: hci3: command tx timeout
[  282.862200] Bluetooth: hci4: command tx timeout
[  283.117955] Bluetooth: hci6: command tx timeout
[  283.118784] Bluetooth: hci5: command tx timeout
[  283.182775] Bluetooth: hci7: command tx timeout
[  336.917043] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  336.919241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  336.922335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  336.934937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  336.940208] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  336.945966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  336.960239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  336.961133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  336.963457] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  336.964865] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  336.966298] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  336.967101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  337.062130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  337.069893] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  337.071490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  337.083353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  337.088232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  337.097349] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  337.106033] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  337.108614] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  337.113991] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  337.119234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  337.121755] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  337.126151] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  337.132262] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  337.133862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  337.135039] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  337.136550] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  337.137894] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  337.138196] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  337.145642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  337.149144] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  337.153276] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  337.162977] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  337.165027] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  337.173004] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  337.174190] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  337.176187] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  337.177271] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  337.183947] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  337.188955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  337.196481] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  337.202940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  337.205963] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  337.207604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  337.211200] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  337.222531] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  337.225165] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  338.990835] Bluetooth: hci1: command tx timeout
[  338.991918] Bluetooth: hci0: command tx timeout
[  339.182004] Bluetooth: hci2: command tx timeout
[  339.248284] Bluetooth: hci3: command tx timeout
[  339.249124] Bluetooth: hci7: command tx timeout
[  339.309879] Bluetooth: hci6: command tx timeout
[  339.310860] Bluetooth: hci5: command tx timeout
[  339.374787] Bluetooth: hci4: command tx timeout
[  341.037806] Bluetooth: hci1: command tx timeout
[  341.038334] Bluetooth: hci0: command tx timeout
[  341.229770] Bluetooth: hci2: command tx timeout
[  341.293849] Bluetooth: hci3: command tx timeout
[  341.294336] Bluetooth: hci7: command tx timeout
[  341.357834] Bluetooth: hci6: command tx timeout
[  341.358323] Bluetooth: hci5: command tx timeout
[  341.423924] Bluetooth: hci4: command tx timeout
[  343.086123] Bluetooth: hci1: command tx timeout
[  343.086653] Bluetooth: hci0: command tx timeout
[  343.277916] Bluetooth: hci2: command tx timeout
[  343.341826] Bluetooth: hci3: command tx timeout
[  343.343344] Bluetooth: hci7: command tx timeout
[  343.405999] Bluetooth: hci5: command tx timeout
[  343.406483] Bluetooth: hci6: command tx timeout
[  343.469827] Bluetooth: hci4: command tx timeout
[  345.133874] Bluetooth: hci0: command tx timeout
[  345.134410] Bluetooth: hci1: command tx timeout
[  345.326303] Bluetooth: hci2: command tx timeout
[  345.389824] Bluetooth: hci3: command tx timeout
[  345.390346] Bluetooth: hci7: command tx timeout
[  345.453838] Bluetooth: hci6: command tx timeout
[  345.454362] Bluetooth: hci5: command tx timeout
[  345.517985] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
22:51:07  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff867cfa01 RDX=1ffff11005137ed5
RSI=ffffffff818edb86 RDI=ffff8880289bf6a8 RBP=ffff8880289bf740 RSP=ffff8880289bf638
R8 =ffffffff867cfa24 R9 =ffff8880289bf6e8 R10=000000000003c001 R11=00000000000122e6
R12=ffff8880289bf770 R13=0000000000000000 R14=ffff8880340a3700 R15=ffff8880289bf6a8
RIP=ffffffff811490b9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f566b4b4000 CR3=00000000238d0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ffffffffffffffffffffffffffffffff
XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000000000766e65
XMM04=6c665f7465735f5854435f43414d4800 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff81fe69ea RDX=ffff888018910000
RSI=ffffffff8200ed84 RDI=ffff88801521f028 RBP=1ffff11006603f20 RSP=ffff88803301f8f8
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001
R12=ffff888018910000 R13=ffff888009367870 R14=ffff88801521f028 R15=dffffc0000000000
RIP=ffffffff848390b4 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd0b0a38368 CR3=00000000099ce000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000