Warning: Permanently added '[localhost]:35754' (ECDSA) to the list of known hosts.
2024/11/13 05:34:42 fuzzer started
2024/11/13 05:34:42 dialing manager at localhost:46317
syzkaller login: [   76.900364] cgroup: Unknown subsys name 'net'
[   77.056363] cgroup: Unknown subsys name 'cpuset'
[   77.089404] cgroup: Unknown subsys name 'rlimit'
2024/11/13 05:35:00 syscalls: 223
2024/11/13 05:35:00 code coverage: enabled
2024/11/13 05:35:00 comparison tracing: enabled
2024/11/13 05:35:00 extra coverage: enabled
2024/11/13 05:35:00 setuid sandbox: enabled
2024/11/13 05:35:00 namespace sandbox: enabled
2024/11/13 05:35:00 Android sandbox: enabled
2024/11/13 05:35:00 fault injection: enabled
2024/11/13 05:35:00 leak checking: enabled
2024/11/13 05:35:00 net packet injection: enabled
2024/11/13 05:35:00 net device setup: enabled
2024/11/13 05:35:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/11/13 05:35:00 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/11/13 05:35:00 USB emulation: enabled
2024/11/13 05:35:00 hci packet injection: enabled
2024/11/13 05:35:00 wifi device emulation: enabled
2024/11/13 05:35:00 802.15.4 emulation: enabled
2024/11/13 05:35:00 fetching corpus: 0, signal 0/0 (executing program)
2024/11/13 05:35:01 starting 8 fuzzer processes
05:35:01 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x75818d86456240e}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x1)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f8, 0x1, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000802}, 0x84)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r1)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c091}, 0x800)
futex(&(0x7f0000000480)=0x2, 0x5, 0x2, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000500), 0x2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
clock_getres(0x5, &(0x7f0000000540))
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580), r3)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000600), r1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001dc0)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000021c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002180)={&(0x7f0000001e00)={0x34c, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x8, 0x3, 0xc00}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc6}}, {0x8}}}]}}]}, 0x34c}}, 0x1)
futex(&(0x7f0000002200)=0x2, 0x3, 0x2, &(0x7f0000002240), &(0x7f0000002280)=0x2, 0x1)
r6 = memfd_secret(0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000022c0), r6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x40010, r1, 0x0)
r7 = memfd_secret(0x80000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000002300), r7)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

05:35:01 executing program 1:
r0 = epoll_create(0x4)
epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000080), &(0x7f00000000c0)={[0x2]}, 0x8)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x3000, 0x2})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x802, 0x0)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000001c0)={0x0, 0x1, 0x100})
kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x8b88})
r3 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@hci, &(0x7f00000002c0)=0x80, 0x100800)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x88, 0x0, &(0x7f00000003c0)=[@request_death, @dead_binder_done, @dead_binder_done, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x0, 0x1, 0x1c}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x3}], 0x63, 0x0, &(0x7f0000000480)="6295ac0247ecddd8060afd6bf805cbe0fd30e8a6f50966b8cc25566f726660d05a3ce4374472adc1a056f742d38b34e6c793d8a39fe30766ac64507759df09f1183bde56528e8bc6b4a9170ff412ee453e2b708c0f76ac0fd7f7981758cbc4b09c7b2a"})
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000540)={0x5, 0x20, 0x9, 0x20, 0x1000}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x2, 0x2, 0x2, @remote, @private2, 0x10, 0x700, 0x3, 0x9d2}})
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r3)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x38}}, 0x20000800)
sendmsg$AUDIT_USER(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, 0x3ed, 0x1, 0x70bd2b, 0x25dfdbfb, "9ba904d0cf192340fcd8eb61572b4b1cbca800cfd5dd4c50445b72f8c17ebf3f46c0478beb89a2088aee38420553427631dfb7d3f84ecc0e", ["", "", "", "", ""]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000900)=[{}], 0x1, &(0x7f0000000940)={0x0, 0x989680}, &(0x7f0000000980)={[0x5]}, 0x8)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000b00))
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x3fa, 0x2, 0x70bd2d, 0x25dfdbff, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x845)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r3)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x930ea062839132f6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffff000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x13d978bb}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4001)

05:35:01 executing program 2:
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8048085}, 0x5)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x300, 0x70bd26, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4c004}, 0x4090)
r0 = socket$inet6(0xa, 0xa, 0x3)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpeername(r2, &(0x7f00000003c0)=@ax25={{0x3, @default}, [@default, @null, @null, @remote, @rose, @netrom, @remote, @netrom]}, &(0x7f0000000440)=0x80)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x98, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:ipmi_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:gpg_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x98}, 0x1, 0x0, 0x0, 0xab4d80ca48d60f12}, 0x50)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x8, &(0x7f00000006c0)={[0x5dbc0709]}, 0x8)
sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x800)
getgid()
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r5, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000041}, 0x80)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r3)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x400c4)

05:35:01 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xa8000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110b, 0x1})
r1 = gettid()
kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r0, &(0x7f0000000080)={r0, r0, 0x3})
rt_sigaction(0x2f, &(0x7f0000000180)={&(0x7f00000000c0)="0f90dc6565d9fa2c15c42361484b881cc483757d854e940000df4a0f7ea10f73202f66460f68d8f30f6f8640310000c461917451d46466460f383c6758", 0x80000000, &(0x7f0000000100)="36660fd90e8f0a401206cb760000c4c2f93494a500000000c481917c6536a26103a64000000000656436362e0f01d0440a40dec423155f7b0e00460fa57e5fc443fd0936e7", {[0x100]}}, 0x0, 0x8, &(0x7f00000001c0))
r2 = epoll_create(0x7)
epoll_pwait2(r2, &(0x7f0000000200)=[{}, {}], 0x2, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)={[0x5630f7a1]}, 0x8)
wait4(r1, &(0x7f00000002c0), 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={<r3=>0x0}, &(0x7f0000000340)=0xc)
migrate_pages(r3, 0x6, &(0x7f0000000380)=0x8f4, &(0x7f00000003c0)=0x7)
r4 = accept4(r0, &(0x7f0000000400)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000480)=0x80, 0x80800)
sendmsg$AUDIT_SET(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x1, r1, 0x7, 0x1, 0x0, 0x3, 0x0, 0x9}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, r6, &(0x7f0000000700)={r0, r7, 0x8000})
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000800)=@buf={0xa3, &(0x7f0000000740)="d812e234221610d5d380f48ccd4b23133fc657b9e2858a4b0f3b4ad2785ef2d9a3da3c9022caa0b29bd92c7cd36b61aa799e959a49915815a606a54577f1ad221510b36b95b47eef1c5e4f8db83e327589b3d33df1a493144f8852dc4ec933e2e99ffd5ec9486a0c179c6e5b7b92ffafdf6142ab278c548a5458eca4bca3e342afc28ff7ca28a711fdd1ba3737cfc76fff91e2e5783553d6139e53c6ce9c47b587911f"})
epoll_pwait(r0, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x80000000, &(0x7f00000008c0)={[0x5]}, 0x8)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000900)={0x1})

05:35:01 executing program 4:
r0 = mq_open(&(0x7f0000000000)='\x00', 0x80, 0x0, &(0x7f0000000040)={0x7786, 0x0, 0x2c5d1350, 0x10001})
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x110, r0, 0xae6eb000)
r1 = getpid()
capget(&(0x7f0000000080)={0x20071026, r1}, &(0x7f00000000c0)={0x3, 0x3f, 0x5, 0x1f, 0x1, 0x7fff})
migrate_pages(r1, 0xfffffffffffffffe, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x3b1)
getpeername(0xffffffffffffffff, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000200)=0x80)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f5, 0x300, 0x70bd25, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4045}, 0x0)
getpeername(r2, &(0x7f0000000340)=@isdn, &(0x7f00000003c0)=0x80)
r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000440)={'veth1_virt_wifi', 0x32, 0x37}, 0x12)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
fcntl$getownex(r3, 0x10, &(0x7f00000004c0))
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x406803, 0x0)
sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f8, 0x200, 0x70bd29, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40480c0)
openat$cgroup_devices(r4, &(0x7f0000000640)='devices.allow\x00', 0x2, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0)
ioctl$SNAPSHOT_S2RAM(r5, 0x330b)
openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000006c0), 0x2, 0x0)
wait4(r1, &(0x7f0000000700), 0x4, &(0x7f0000000740))

[   95.154832] audit: type=1400 audit(1731476101.882:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:35:01 executing program 6:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x505040, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080))
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x3})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0, <r2=>0x0})
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000200)={r2, 0x0, 0x9b})
ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000240))
getpid()
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0, <r3=>0x0})
fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, <r4=>0x0})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r1, &(0x7f0000000400)={r0, r5, 0x400})
r6 = memfd_secret(0x80000)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x20008011)
r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x98000, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f00000005c0)={0x0, 0x2a})
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x21c0000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x15}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000080)

05:35:01 executing program 5:
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x420, 0x3f4, 0x100, 0x70bd25, 0x25dfdbfd, {0x6, 0x0, 0x2a, [0xa354, 0x8, 0x80, 0x9, 0xffffffc1, 0x101, 0x3, 0x9, 0xfff, 0x0, 0x2, 0xb76, 0x7fff, 0x401, 0x9, 0x0, 0x0, 0x8001, 0x40, 0x5, 0xffffffff, 0x4, 0x7fffffff, 0x6, 0x94, 0x7, 0x7, 0x8, 0x200, 0xfffffffa, 0x8000, 0xfff, 0x8, 0x8, 0x7f, 0xb28, 0x8, 0x9, 0x9, 0x6, 0x9, 0x2850, 0x1, 0x7fffffff, 0x100, 0x20, 0x3, 0x8, 0x6, 0x4, 0xe8, 0xcb41, 0x5, 0x9, 0x3, 0x5, 0x4, 0x19, 0xfff, 0x91ac, 0x101, 0x400, 0x400, 0x4], [0x100, 0x2, 0x4d56, 0x6, 0x10001, 0x7, 0x57582800, 0x695, 0x93ca, 0x20, 0x8, 0x3, 0x2, 0x59, 0x4, 0xb67, 0x401, 0x7fff, 0x3, 0x7f, 0x2, 0xe92a49ef, 0x1c2, 0x4, 0x7fffffff, 0x7940, 0x5, 0x200, 0x7, 0x80, 0x7fff, 0x6, 0x9, 0x2, 0x5, 0xfff, 0x81, 0x8, 0xa1, 0x4, 0x0, 0xab92, 0x8, 0x7, 0x1, 0x9, 0xfffffffb, 0x81, 0x1, 0x3ff, 0xb63, 0x2, 0x9, 0x9, 0x6, 0x4, 0xc39f, 0x1, 0x1, 0x6, 0x1, 0x40, 0x2, 0x20], [0xa6, 0x3, 0x7, 0xffffffff, 0x8, 0x5, 0x8000, 0x20, 0x8, 0x7, 0x3ff, 0x5, 0x3, 0x5, 0x9b, 0x158e, 0x1, 0x9, 0x7fff, 0x7f, 0x3cc, 0xffffffff, 0x5, 0x7fffffff, 0x0, 0x200, 0x10001, 0x8, 0x9, 0x9, 0x7, 0x1, 0x0, 0x7, 0x6, 0xd2c5, 0xbbc, 0x7, 0x6, 0x0, 0x8, 0x369, 0x0, 0x10000, 0xffffffff, 0x5, 0x1000, 0xfffffffc, 0x42c8, 0x9, 0x8, 0x7, 0x101, 0x9, 0x4, 0x10001, 0x9, 0x800, 0x80, 0x6fb, 0x0, 0x3, 0x32, 0x1], [0xffffffff, 0x2, 0xaf1b, 0x7, 0xfdc, 0x3ff, 0x8, 0x81, 0x7ff, 0x10001, 0x7, 0xb8, 0x101, 0x9, 0x5, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x3, 0x9, 0x6, 0xebb, 0x200, 0x10001, 0xfffffff9, 0x2, 0x7, 0x7, 0x8, 0x9, 0x3, 0x6, 0xfffff9a3, 0x7f, 0x81, 0x3, 0x5, 0x84, 0xe74a, 0x2, 0x2, 0xffffffff, 0xcf6f, 0x80000000, 0x3, 0x8, 0x6, 0x301, 0xe04, 0x4, 0x3, 0x9c, 0xe6d, 0x200, 0x5, 0x0, 0x712, 0xfffffff9, 0x800, 0x4, 0x3f, 0x3f]}, ["", "", "", "", "", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x40000}, 0x10045014)
recvmsg(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000980)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a00)=""/123, 0x7b}, {&(0x7f0000000a80)=""/73, 0x49}, {&(0x7f0000000b00)=""/13, 0xd}, {&(0x7f0000000b40)=""/23, 0x17}, {&(0x7f0000000b80)=""/156, 0x9c}], 0x5}, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000d00)={'syzkaller0\x00', 0x8})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000e40)={'ip6tnl0\x00', &(0x7f0000000dc0)={'ip6_vti0\x00', <r2=>0x0, 0x29, 0x0, 0x5, 0x0, 0x4, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x10, 0x3}})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x54, 0x0, 0x603, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x3}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x54}}, 0x4)
r3 = accept4(r0, 0x0, &(0x7f00000010c0), 0x80000)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6c7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r4, &(0x7f0000001540)={&(0x7f00000012c0)=@ll={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001340)=""/67, 0x43}, {&(0x7f00000013c0)=""/136, 0x88}], 0x2, &(0x7f00000014c0)=""/66, 0x42}, 0x10000)
r6 = memfd_secret(0x0)
sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x44}}, 0x20000000)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000001700), r6)
getsockname(r6, &(0x7f0000001780)=@xdp={0x2c, 0x0, <r8=>0x0}, &(0x7f0000001800)=0x80)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f00000018c0)={'syztnl2\x00', &(0x7f0000001840)={'sit0\x00', <r9=>r5, 0x2f, 0x8, 0xb5, 0x0, 0x20, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, 0x80, 0x5, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001980)={'syztnl2\x00', &(0x7f0000001900)={'syztnl0\x00', <r10=>r2, 0x29, 0x20, 0xff, 0x9, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x8, 0x8, 0x7a87, 0x3}})
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000005fc0)={@mcast1, <r11=>0x0}, &(0x7f0000006000)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000006b00)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000006ac0)={&(0x7f0000006280)={0x810, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa4a}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r5}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}, {{0x8, 0x1, r5}, {0x4}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4b70}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x8, 0x1, 0x2}, {0x40, 0x80, 0x5, 0x8}, {0x1ff, 0x20, 0x8, 0x5}]}}}]}}]}, 0x810}, 0x1, 0x0, 0x0, 0xc890}, 0x4000)

05:35:01 executing program 7:
ioctl$CDROMEJECT_SW(0xffffffffffffffff, 0x530f, 0x1)
ioctl$CDROMEJECT_SW(0xffffffffffffffff, 0x530f, 0x1)
ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, &(0x7f0000000000)=@lstk={0x7, 0x1, "97c1498127", 0x2, 0x1, 0x1, 0x1})
ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000040)=0x2)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x181800)
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0)
ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f00000003c0)=0xe)
syz_genetlink_get_family_id$team(&(0x7f0000000400), r0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x230000, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000480)={{<r2=>0x0, 0x2, 0x0, 0xfffffffffffffffb, 0x2, 0x7f, 0x7, 0x3, 0x7fffffff, 0x400, 0x5, 0x4, 0x1, 0xb195, 0xf000000000000000}, 0x10, [0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000500)={r2, 0x80000001})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001540), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044005}, 0x80)
syz_genetlink_get_family_id$wireguard(&(0x7f0000001640), r0)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001680), 0x400002, 0x0)
ioctl$CDROMEJECT_SW(r4, 0x530f, 0x1)
r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000016c0), 0x280100, 0x0)
ioctl$CDROMSETSPINDOWN(r5, 0x531e, &(0x7f0000001700)=0x9)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000001740)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f00000017c0), &(0x7f0000001800)={[0x7]}, 0x8)

[   96.631165] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   96.632767] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.637107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.640017] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   96.647065] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   96.649830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   96.651910] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   96.655124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   96.657273] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   96.658335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   96.659412] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   96.659686] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   96.662571] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   96.666495] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   96.666637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   96.669229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   96.674376] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   96.676376] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   96.678393] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   96.679223] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   96.680179] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   96.682501] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   96.683666] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   96.685241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   96.701462] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   96.703718] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   96.706281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   96.707459] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   96.726565] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   96.735348] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   96.767524] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   96.771806] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   96.775241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   96.777426] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   96.780702] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   96.784588] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   96.788429] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   96.817047] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   96.820151] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   96.823753] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   96.827097] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   96.828755] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   96.830239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   96.832425] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   96.837529] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   96.852305] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   96.864587] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   96.869359] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   98.740086] Bluetooth: hci2: command tx timeout
[   98.740826] Bluetooth: hci3: command tx timeout
[   98.817984] Bluetooth: hci4: command tx timeout
[   98.818653] Bluetooth: hci1: command tx timeout
[   98.866994] Bluetooth: hci0: command tx timeout
[   98.868580] Bluetooth: hci6: command tx timeout
[   98.869935] Bluetooth: hci5: command tx timeout
[   98.946774] Bluetooth: hci7: command tx timeout
[  100.787615] Bluetooth: hci3: command tx timeout
[  100.788503] Bluetooth: hci2: command tx timeout
[  100.853017] Bluetooth: hci4: command tx timeout
[  100.854988] Bluetooth: hci1: command tx timeout
[  100.915261] Bluetooth: hci0: command tx timeout
[  100.917389] Bluetooth: hci5: command tx timeout
[  100.918768] Bluetooth: hci6: command tx timeout
[  100.996348] Bluetooth: hci7: command tx timeout
[  102.835013] Bluetooth: hci3: command tx timeout
[  102.835582] Bluetooth: hci2: command tx timeout
[  102.900037] Bluetooth: hci4: command tx timeout
[  102.900140] Bluetooth: hci1: command tx timeout
[  102.963106] Bluetooth: hci6: command tx timeout
[  102.963208] Bluetooth: hci5: command tx timeout
[  102.963721] Bluetooth: hci0: command tx timeout
[  103.027556] Bluetooth: hci7: command tx timeout
[  104.883196] Bluetooth: hci3: command tx timeout
[  104.885889] Bluetooth: hci2: command tx timeout
[  104.946936] Bluetooth: hci4: command tx timeout
[  104.948118] Bluetooth: hci1: command tx timeout
[  105.010949] Bluetooth: hci5: command tx timeout
[  105.011449] Bluetooth: hci6: command tx timeout
[  105.012025] Bluetooth: hci0: command tx timeout
[  105.076907] Bluetooth: hci7: command tx timeout
[  156.676454] syz-executor.6 (288) used greatest stack depth: 23728 bytes left
[  159.483942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  159.487085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  159.488239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  159.490954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  159.492780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  159.494334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  159.758662] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  159.760080] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  159.762263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  159.762288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  159.763713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  159.765975] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  159.769414] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  159.770817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  159.773524] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  159.775215] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  159.776875] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  159.783063] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  159.866556] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  159.875900] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  159.880060] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  159.898101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  159.904166] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  159.905263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  159.941460] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  159.947937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  159.970479] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  159.989132] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  160.002143] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  160.015341] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  160.093738] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  160.098445] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  160.120241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  160.143158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  160.149106] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  160.154169] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  160.232555] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  160.246825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  160.288202] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  160.299553] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  160.319050] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  160.331212] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  160.544042] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  160.558648] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  160.593138] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  160.608413] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  160.667575] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  160.681331] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  161.523012] Bluetooth: hci0: command tx timeout
[  161.843054] Bluetooth: hci2: command tx timeout
[  161.844068] Bluetooth: hci1: command tx timeout
[  161.970985] Bluetooth: hci3: command tx timeout
[  162.099309] Bluetooth: hci4: command tx timeout
[  162.226931] Bluetooth: hci5: command tx timeout
[  162.482986] Bluetooth: hci6: command tx timeout
[  162.802943] Bluetooth: hci7: command tx timeout
[  163.571873] Bluetooth: hci0: command tx timeout
[  163.890948] Bluetooth: hci2: command tx timeout
[  163.891482] Bluetooth: hci1: command tx timeout
[  164.019603] Bluetooth: hci3: command tx timeout
[  164.146979] Bluetooth: hci4: command tx timeout
[  164.274952] Bluetooth: hci5: command tx timeout
[  164.532955] Bluetooth: hci6: command tx timeout
[  164.850919] Bluetooth: hci7: command tx timeout
[  165.619020] Bluetooth: hci0: command tx timeout
[  165.938944] Bluetooth: hci1: command tx timeout
[  165.939487] Bluetooth: hci2: command tx timeout
[  166.066977] Bluetooth: hci3: command tx timeout
[  166.194949] Bluetooth: hci4: command tx timeout
[  166.323209] Bluetooth: hci5: command tx timeout
[  166.582926] Bluetooth: hci6: command tx timeout
[  166.899226] Bluetooth: hci7: command tx timeout
[  167.667062] Bluetooth: hci0: command tx timeout
[  167.987180] Bluetooth: hci1: command tx timeout
[  167.987716] Bluetooth: hci2: command tx timeout
[  168.114969] Bluetooth: hci3: command tx timeout
[  168.242921] Bluetooth: hci4: command tx timeout
[  168.370912] Bluetooth: hci5: command tx timeout
[  168.626956] Bluetooth: hci6: command tx timeout
[  168.947398] Bluetooth: hci7: command tx timeout
[  221.699804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  221.705954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  221.710096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  221.716565] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  221.721620] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  221.723712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  221.845237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  221.851353] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  221.852782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  221.859701] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  221.864720] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  221.866201] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  221.909391] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  221.932719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  221.937755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  221.960472] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  221.972255] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  221.977110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  222.017802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  222.044253] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  222.051216] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  222.057429] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  222.092600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  222.100303] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  222.101474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  222.102797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  222.108104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  222.134956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  222.142743] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  222.144792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  222.148952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  222.157802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  222.159982] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  222.160156] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  222.163353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  222.166218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  222.166643] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  222.182430] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  222.184503] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  222.188484] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  222.189753] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  222.194495] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  222.198117] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  222.199202] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  222.222104] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  222.304254] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  222.308956] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  222.325066] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  223.796985] Bluetooth: hci0: command tx timeout
[  223.924010] Bluetooth: hci1: command tx timeout
[  224.050901] Bluetooth: hci3: command tx timeout
[  224.179091] Bluetooth: hci2: command tx timeout
[  224.243968] Bluetooth: hci7: command tx timeout
[  224.245006] Bluetooth: hci4: command tx timeout
[  224.309065] Bluetooth: hci5: command tx timeout
[  224.500149] Bluetooth: hci6: command tx timeout
[  225.843879] Bluetooth: hci0: command tx timeout
[  225.971931] Bluetooth: hci1: command tx timeout
[  226.098929] Bluetooth: hci3: command tx timeout
[  226.228017] Bluetooth: hci2: command tx timeout
[  226.291937] Bluetooth: hci7: command tx timeout
[  226.292478] Bluetooth: hci4: command tx timeout
[  226.356319] Bluetooth: hci5: command tx timeout
[  226.548042] Bluetooth: hci6: command tx timeout
[  227.931972] Bluetooth: hci0: command tx timeout
[  228.020140] Bluetooth: hci1: command tx timeout
[  228.148165] Bluetooth: hci3: command tx timeout
[  228.274967] Bluetooth: hci2: command tx timeout
[  228.339995] Bluetooth: hci4: command tx timeout
[  228.340537] Bluetooth: hci7: command tx timeout
[  228.403946] Bluetooth: hci5: command tx timeout
[  228.595901] Bluetooth: hci6: command tx timeout
[  229.939057] Bluetooth: hci0: command tx timeout
[  230.069897] Bluetooth: hci1: command tx timeout
[  230.196044] Bluetooth: hci3: command tx timeout
[  230.323879] Bluetooth: hci2: command tx timeout
[  230.386928] Bluetooth: hci7: command tx timeout
[  230.387403] Bluetooth: hci4: command tx timeout
[  230.451912] Bluetooth: hci5: command tx timeout
[  230.644004] Bluetooth: hci6: command tx timeout
[  284.104288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  284.109618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  284.113947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  284.118080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  284.125183] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  284.127307] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  284.167419] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  284.173323] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  284.175200] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  284.179052] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  284.180834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  284.182425] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  284.288409] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  284.290565] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  284.292434] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  284.296382] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  284.300291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  284.302187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  284.424486] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  284.427035] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  284.430035] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  284.435000] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  284.440057] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  284.441604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  284.450052] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  284.453916] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  284.455488] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  284.460058] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  284.471560] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  284.472937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  284.494351] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  284.505987] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  284.518919] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  284.520574] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  284.522095] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  284.523353] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  284.527190] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  284.531002] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  284.533157] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  284.534288] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  284.538087] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  284.539317] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  284.544226] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  284.565044] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  284.566392] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  284.581209] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  284.606116] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  284.640486] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  286.194900] Bluetooth: hci0: command tx timeout
[  286.259897] Bluetooth: hci1: command tx timeout
[  286.322978] Bluetooth: hci2: command tx timeout
[  286.514983] Bluetooth: hci3: command tx timeout
[  286.579157] Bluetooth: hci4: command tx timeout
[  286.643629] Bluetooth: hci5: command tx timeout
[  286.643692] Bluetooth: hci7: command tx timeout
[  286.708854] Bluetooth: hci6: command tx timeout
[  288.243055] Bluetooth: hci0: command tx timeout
[  288.306884] Bluetooth: hci1: command tx timeout
[  288.372842] Bluetooth: hci2: command tx timeout
[  288.563025] Bluetooth: hci3: command tx timeout
[  288.627013] Bluetooth: hci4: command tx timeout
[  288.690904] Bluetooth: hci7: command tx timeout
[  288.692029] Bluetooth: hci5: command tx timeout
[  288.755048] Bluetooth: hci6: command tx timeout
[  290.291098] Bluetooth: hci0: command tx timeout
[  290.355064] Bluetooth: hci1: command tx timeout
[  290.418990] Bluetooth: hci2: command tx timeout
[  290.610889] Bluetooth: hci3: command tx timeout
[  290.674978] Bluetooth: hci4: command tx timeout
[  290.738921] Bluetooth: hci5: command tx timeout
[  290.739407] Bluetooth: hci7: command tx timeout
[  290.802986] Bluetooth: hci6: command tx timeout
[  292.338997] Bluetooth: hci0: command tx timeout
[  292.402885] Bluetooth: hci1: command tx timeout
[  292.467072] Bluetooth: hci2: command tx timeout
[  292.660851] Bluetooth: hci3: command tx timeout
[  292.722905] Bluetooth: hci4: command tx timeout
[  292.787001] Bluetooth: hci7: command tx timeout
[  292.787035] Bluetooth: hci5: command tx timeout
[  292.851918] Bluetooth: hci6: command tx timeout
[  346.436773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  346.437603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  346.440074] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  346.441315] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  346.441488] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  346.443466] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  346.445935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  346.446309] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  346.448078] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  346.449077] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  346.456128] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  346.457364] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  346.563602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  346.566501] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  346.569083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  346.586326] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  346.590562] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  346.594086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  346.630198] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  346.636057] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  346.643333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  346.649056] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  346.660031] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  346.662748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  346.690089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  346.705452] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  346.710129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  346.736132] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  346.741226] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  346.747351] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  346.754836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  346.761021] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  346.763759] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  346.781115] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  346.783714] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  346.791239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  346.793491] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  346.800993] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  346.803476] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  346.806455] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  346.818586] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  346.823442] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  346.828081] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  346.839412] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  346.844096] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  346.846415] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  346.885010] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  346.886916] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  348.467989] Bluetooth: hci1: command tx timeout
[  348.530906] Bluetooth: hci0: command tx timeout
[  348.659932] Bluetooth: hci2: command tx timeout
[  348.723172] Bluetooth: hci3: command tx timeout
[  348.852884] Bluetooth: hci5: command tx timeout
[  348.853178] Bluetooth: hci4: command tx timeout
[  348.914950] Bluetooth: hci6: command tx timeout
[  348.915861] Bluetooth: hci7: command tx timeout
[  350.517824] Bluetooth: hci1: command tx timeout
[  350.580057] Bluetooth: hci0: command tx timeout
[  350.706898] Bluetooth: hci2: command tx timeout
[  350.771102] Bluetooth: hci3: command tx timeout
[  350.899210] Bluetooth: hci4: command tx timeout
[  350.900568] Bluetooth: hci5: command tx timeout
[  350.964926] Bluetooth: hci7: command tx timeout
[  350.965935] Bluetooth: hci6: command tx timeout
[  352.563950] Bluetooth: hci1: command tx timeout
[  352.628860] Bluetooth: hci0: command tx timeout
[  352.755965] Bluetooth: hci2: command tx timeout
[  352.819918] Bluetooth: hci3: command tx timeout
[  352.947024] Bluetooth: hci4: command tx timeout
[  352.947069] Bluetooth: hci5: command tx timeout
[  353.010947] Bluetooth: hci6: command tx timeout
[  353.012603] Bluetooth: hci7: command tx timeout
[  354.612915] Bluetooth: hci1: command tx timeout
[  354.674870] Bluetooth: hci0: command tx timeout
[  354.802864] Bluetooth: hci2: command tx timeout
[  354.866928] Bluetooth: hci3: command tx timeout
[  354.995344] Bluetooth: hci4: command tx timeout
[  354.996949] Bluetooth: hci5: command tx timeout
[  355.059984] Bluetooth: hci7: command tx timeout
[  355.060043] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
05:40:11  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88802a2c71f0 RCX=0000000000000001 RDX=ffff88802a2c7160
RSI=ffff88802a2c7128 RDI=ffff88802a2c7168 RBP=dffffc0000000000 RSP=ffff88802a2c7108
R8 =0000000000000001 R9 =ffff88802a2c7198 R10=000000000003c001 R11=00000000000065e1
R12=ffffed1005458e2d R13=ffffed1005458e2c R14=ffff88802a2c71a0 R15=ffff88802a2c7158
RIP=ffffffff8114ba42 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8964b628e0 CR3=000000000a82a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff812efc06 RDX=0000000000000000
RSI=0000000000000008 RDI=ffff88806cf365d0 RBP=ffffffff85c15ca0 RSP=ffff88806cf09dd8
R8 =0000000000000000 R9 =fffffbfff0c7eef2 R10=ffffffff863f7797 R11=00000000000c36d9
R12=0000000000000000 R13=0000000000000000 R14=0000000000000002 R15=000000000003a6cc
RIP=ffffffff812efd09 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f47175f1540 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe6100000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4717850000 CR3=0000000034fe0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000