Warning: Permanently added '[localhost]:1971' (ECDSA) to the list of known hosts.
2025/01/07 10:29:34 fuzzer started
2025/01/07 10:29:35 dialing manager at localhost:41745
syzkaller login: [   73.840116] cgroup: Unknown subsys name 'net'
[   73.936177] cgroup: Unknown subsys name 'cpuset'
[   73.952462] cgroup: Unknown subsys name 'rlimit'
[   79.706316] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
[   90.204261] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/07 10:29:53 syscalls: 206
2025/01/07 10:29:53 code coverage: enabled
2025/01/07 10:29:53 comparison tracing: enabled
2025/01/07 10:29:53 extra coverage: enabled
2025/01/07 10:29:53 setuid sandbox: enabled
2025/01/07 10:29:53 namespace sandbox: enabled
2025/01/07 10:29:53 Android sandbox: enabled
2025/01/07 10:29:53 fault injection: enabled
2025/01/07 10:29:53 leak checking: enabled
2025/01/07 10:29:53 net packet injection: enabled
2025/01/07 10:29:53 net device setup: enabled
2025/01/07 10:29:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/07 10:29:53 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/07 10:29:53 USB emulation: enabled
2025/01/07 10:29:53 hci packet injection: enabled
2025/01/07 10:29:53 wifi device emulation: enabled
2025/01/07 10:29:53 802.15.4 emulation: enabled
2025/01/07 10:29:53 fetching corpus: 0, signal 0/0 (executing program)
2025/01/07 10:29:54 starting 8 fuzzer processes
10:29:54 executing program 0:
r0 = getuid()
keyctl$get_persistent(0x16, r0, 0xfffffffffffffffa)
r1 = getpgid(0x0)
r2 = getpgid(r1)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = getuid()
get_robust_list(0xffffffffffffffff, &(0x7f0000000600)=&(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)}}, &(0x7f0000000640)=0x18)
r4 = getpgid(r2)
ptrace$cont(0x7, r4, 0x2, 0x8)
keyctl$get_persistent(0x16, r3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setuid(r3)
getuid()
getuid()
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000680)={0x1f, 0x0, @none, 0xfffa, 0x3}, 0xe)
r5 = gettid()
ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000780)={&(0x7f00000006c0)=""/143, 0x8f})
r6 = add_key(&(0x7f00000007c0)='rxrpc_s\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r6, 0x0, 0xfffffffffffffffc, 0x0)
getuid()

10:29:54 executing program 1:
r0 = eventfd2(0x2, 0x800)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x20}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x5}}, './file0\x00'})
r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x147102)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {<r4=>r1}}, './file0\x00'})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x880)
setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000240)=0x1, 0x4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r0, {0x7}}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r6=>r0}, './file0\x00'})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x34, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x2}, @increfs, @request_death={0x400c630e, 0x1}], 0x40, 0x0, &(0x7f0000000340)="c78ba791b0ac2e75ea61a05766a4b1e96240ac1771f162dd7e5f77810c75f368c6eb5c6a775dea065954f1363433da62c3b0ebd662e191268538bdab7eb642a2"})
r7 = syz_open_dev$usbmon(&(0x7f00000003c0), 0x9, 0x20000)
ioctl$MON_IOCQ_URB_LEN(r7, 0x9201)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x21}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r9=>r0}, './file0\x00'})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r9, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x2000, 0x0)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r6)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r11, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)

10:29:54 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x999, 0x0)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000040)=0x214, 0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x473ea96}}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'})
getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e)
r2 = socket(0x3, 0x800, 0x3)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
io_uring_setup(0x73ad, &(0x7f00000002c0)={0x0, 0xc51, 0x0, 0x6, 0x1c7, 0x0, r1})
r3 = accept4$inet(r2, &(0x7f0000000540)={0x2, 0x0, @remote}, &(0x7f0000000580)=0x10, 0x80800)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', <r4=>0x0})
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x441, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000640)={@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, r4}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r6=>r3, {0xfffffffffffffffe}}, './file0\x00'})
sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20020095}, 0x40)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1)
recvmmsg(r6, &(0x7f0000007080)=[{{&(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/190, 0xbe}, {&(0x7f0000001940)=""/166, 0xa6}, {&(0x7f0000001a00)=""/252, 0xfc}, {&(0x7f0000001b00)=""/80, 0x50}, {&(0x7f0000001b80)=""/140, 0x8c}], 0x6}}, {{&(0x7f0000001cc0)=@alg, 0x80, &(0x7f0000003080)=[{&(0x7f0000001d40)=""/41, 0x29}, {&(0x7f0000001d80)=""/47, 0x2f}, {&(0x7f0000001dc0)=""/10, 0xa}, {&(0x7f0000001e00)=""/110, 0x6e}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/207, 0xcf}, {&(0x7f0000002f80)=""/213, 0xd5}], 0x7}, 0xfe5}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000003100)=""/140, 0x8c}, {&(0x7f00000031c0)=""/196, 0xc4}, {&(0x7f00000032c0)}, {&(0x7f0000003300)=""/72, 0x48}, {&(0x7f0000003380)=""/217, 0xd9}, {&(0x7f0000003480)=""/210, 0xd2}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/229, 0xe5}, {&(0x7f0000004680)=""/222, 0xde}, {&(0x7f0000004780)=""/119, 0x77}], 0xa, &(0x7f00000048c0)=""/8, 0x8}, 0xc34}, {{&(0x7f0000004900)=@ax25={{0x3, @default}, [@default, @null, @bcast, @rose, @netrom, @bcast, @null, @null]}, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000004980)=""/3, 0x3}, {&(0x7f00000049c0)=""/130, 0x82}, {&(0x7f0000004a80)=""/13, 0xd}, {&(0x7f0000004ac0)=""/4096, 0x1000}], 0x4, &(0x7f0000005b00)=""/160, 0xa0}, 0xb4b}, {{&(0x7f0000005bc0)=@pppol2tpin6={0x18, 0x1, {0x0, <r9=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005c40)=""/152, 0x98}, {&(0x7f0000005d00)=""/124, 0x7c}, {&(0x7f0000005d80)=""/219, 0xdb}, {&(0x7f0000005e80)=""/140, 0x8c}], 0x4, &(0x7f0000005f80)=""/165, 0xa5}, 0x3}, {{&(0x7f0000006040)=@alg, 0x80, &(0x7f0000006100)=[{&(0x7f00000060c0)=""/50, 0x32}], 0x1, &(0x7f0000006140)=""/13, 0xd}, 0x3e00000}, {{&(0x7f0000006180)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000062c0)=[{&(0x7f0000006200)=""/179, 0xb3}], 0x1, &(0x7f0000006300)=""/11, 0xb}}, {{&(0x7f0000006340)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000006580)=[{&(0x7f00000063c0)=""/129, 0x81}, {&(0x7f0000006480)=""/167, 0xa7}, {&(0x7f0000006540)=""/13, 0xd}], 0x3, &(0x7f00000065c0)=""/65, 0x41}, 0x1}, {{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f0000006640)=""/200, 0xc8}, {&(0x7f0000006740)=""/224, 0xe0}, {&(0x7f0000006840)=""/207, 0xcf}, {&(0x7f0000006940)=""/41, 0x29}], 0x4, &(0x7f00000069c0)=""/223, 0xdf}, 0x3f}, {{&(0x7f0000006ac0), 0x80, &(0x7f0000006f80)=[{&(0x7f0000006b40)=""/207, 0xcf}, {&(0x7f0000006c40)=""/163, 0xa3}, {&(0x7f0000006d00)=""/39, 0x27}, {&(0x7f0000006d40)=""/127, 0x7f}, {&(0x7f0000006dc0)=""/131, 0x83}, {&(0x7f0000006e80)=""/216, 0xd8}], 0x6, &(0x7f0000007000)=""/93, 0x5d}, 0x81}], 0xa, 0x40000002, &(0x7f0000007300))
ioctl$sock_inet_SIOCGARP(r8, 0x8954, &(0x7f0000007340)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306}, 0x54, {0x2, 0x4e23, @local}, 'veth0\x00'})
r10 = syz_genetlink_get_family_id$mptcp(0x0, r8)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000007500)={&(0x7f00000073c0)={0x10, 0x0, 0x0, 0x20740100}, 0xc, &(0x7f00000074c0)={&(0x7f0000007400)={0xac, r10, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x8004880}, 0x24040041)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000007600)={&(0x7f0000007540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000075c0)={&(0x7f0000007580)={0x34, r7, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010004}, 0x4008080)

10:29:54 executing program 2:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x9, &(0x7f0000000000), 0x1, 0x0, 0x1}, 0x9)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7}}, './file0\x00'})
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000000c0), 0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xfffff800}}, './file0\x00'})
r2 = syz_io_uring_complete(0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000140)=r2, 0x1)
r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x9, 0x20000)
io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}]}, 0x6)
ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205)
getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4)
io_uring_setup(0x50d, &(0x7f0000000280)={0x0, 0x6f17, 0x1, 0x3, 0xcb, 0x0, r0})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r2, {0x4b}}, './file0\x00'})
r5 = eventfd2(0x1, 0x80001)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5}, './file0/file0\x00'})
io_uring_setup(0x57f8, &(0x7f00000003c0)={0x0, 0xa710, 0x0, 0x1, 0x20f, 0x0, r2})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r6=>r4}, './file0/file0\x00'})
accept4$packet(r6, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14, 0x81800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r7)

10:29:54 executing program 4:
r0 = socket(0x18, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x1, 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2769}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x80)
recvfrom$packet(r0, &(0x7f0000000180)=""/208, 0xd0, 0x2000, &(0x7f0000000280)={0x11, 0x16, 0x0, 0x1, 0xc9, 0x6, @remote}, 0x14)
r1 = socket$inet(0x2, 0xa, 0xffff3b85)
setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000002c0)="d57f0c8c9ed767dd9a4177e1dbf9007cd587cd473472f0ebf4f6890d3b777b4bf24590999dd268da3f7ba06e7a07dcc4e8f23932593e1fc1269ee71ae29f35fde1a205e24cac77e3a0f62eb48aec00e365b713de770d70f08f2701c3b80775cfdc7146050feb95d6e4cc44abad8137ab728f447d877e73", 0x77)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4050}, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000004c0))
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x12, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'})
socket$inet(0x2, 0x80000, 0x663982ca)
recvmmsg(r3, &(0x7f0000001a80)=[{{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001740)=[{&(0x7f00000005c0)=""/148, 0x94}, {&(0x7f0000000680)=""/106, 0x6a}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/38, 0x26}], 0x4}, 0x4b}, {{&(0x7f0000001780)=@un=@abs, 0x80, &(0x7f0000001940)=[{&(0x7f0000001800)=""/245, 0xf5}, {&(0x7f0000001900)}], 0x2, &(0x7f0000001980)=""/194, 0xc2}, 0x9}], 0x2, 0x40010140, &(0x7f0000001b00))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001b40)={{0x1, 0x1, 0x18, <r5=>r4, {<r6=>r1}}, './file0\x00'})
sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x44, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$PTP_EXTTS_REQUEST(r5, 0x40103d02, &(0x7f0000001cc0)={0x101, 0x6})
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000001d40)={0x4, 0x5})

[   92.305458] audit: type=1400 audit(1736245794.959:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:29:54 executing program 5:
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x2, 0x4)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4040044)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xd3}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', <r1=>0x0, 0x29, 0x31, 0x7, 0x7, 0x50, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x8001, 0x8000, 0x1, 0x3f5d}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r1, 0x2f, 0xc0, 0x1, 0x800, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7800, 0x80, 0x6, 0xdf29}})
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10000000)
r3 = accept$packet(r0, &(0x7f0000000500)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'sit0\x00', r4, 0x2f, 0x6, 0x4, 0xaa2, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x0, 0x0, 0x8000, 0x1000}})
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x367}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x24004080)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x2}}, './file0\x00'})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004004)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000008c0)="572d3eb9d2e26a5c33d0d22810304ab6b32f24520ab1e814b9faefb11dcf7f58cd2093aa284d999a9dfec86284be4b42d9800f5668f36e591f661c72cd783abaa20b28b023189609ac72966c71e4634ccc275e622748b9185db959025487796df2c8674dfcfcad98dfe9b48227c51dd5b41854043393dbe41af99d809809895d6274a53965ab4bb66b3107eaa196c8f938f097abdcfb40b92c589c00cb10fa6db8e56a4c1d00b64e75716a6dad3235920a28de6002c7bd64716f", 0xba)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), r5)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r6, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040811)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}]}, 0x24}}, 0x40)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, <r7=>r3, {r3}}, './file0\x00'})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040011}, 0x24008895)
r8 = syz_open_dev$vcsn(&(0x7f0000000d40), 0x5f34, 0x1040)
ioctl$sock_inet_SIOCGARP(r8, 0x8954, &(0x7f0000000d80)={{0x2, 0x4e20, @private=0xa010100}, {0x1, @multicast}, 0x4, {0x2, 0x4e20, @loopback}, 'wg2\x00'})

10:29:54 executing program 6:
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'bond_slave_0\x00', 0x2}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000080)={0x1, 0xa})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000010)
r2 = accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xbe}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffc01}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0xd9b8a30d4768adae, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x180}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r5=>r0, {<r6=>r2}}, './file1\x00'})
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r7, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008805}, 0x4004895)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x60}, 0x14)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
r8 = syz_open_dev$vcsn(&(0x7f0000000780), 0x7, 0x101440)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r9=>r5, {<r10=>r6}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000800)={{0x1, 0x1, 0x18, r10}, './file0/file0\x00'})
sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x411, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x40010)

10:29:55 executing program 7:
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x3})
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$link(0x8, r0, 0xfffffffffffffffe)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x1}}, './file0\x00'})
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x4103052, r1, 0x10000000)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x184801, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r3, &(0x7f0000000180)=0x80, &(0x7f00000001c0)=@x25={0x9, @remote}, 0x0, 0x80000, 0x1}, 0xfffffbff)
ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x21, 0x3ff, 0x33, @local, @private2, 0x20, 0x80, 0x5bc, 0x45e6}})
r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$reject(0x13, r4, 0x7, 0x3, r0)
sendmsg$802154_dgram(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, @short={0x2, 0x2}}, 0x14, &(0x7f0000000500)={&(0x7f0000000400)="0ae4687cc825df86f1516bc08c10aa8566017ca7bf0f428d5135d8fca29d06771d0c89d5d15b0c2e2c4022f2384b10578b4e7442ae64651da0f8f2566232ab89456ee17e4c64426ea4aa6eb669b5989b04e0ad5087241756002eed063b8cfb50ff097fe8c32b3a516efb884a7c5e490926833d16f95799f63f51b8f93c4659783f0b71df23de07644a9f4f7831d0c93103d41bb33386bd68d15ad7565a8eaf379c0189adb2538e4aee6e8be18e9feadacc1fb02ddd0d92188fe0e73db0ab580960b6a98a7e0dce1e966021ada48483d1abbe", 0xd2}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000000)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x60000000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r5=>r1}, './file0\x00'})
accept4$packet(r5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14, 0xc0800)
r6 = syz_open_dev$vcsn(&(0x7f0000000840), 0x5, 0x280180)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0/file0\x00'})
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000009c0)={0x9, 0x0, &(0x7f0000000980)=[0xffffffffffffffff]}, 0x1)

[   93.814412] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.822119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   93.823868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.825889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   93.828917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   93.831064] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   93.837083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.838182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   93.839314] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   93.840366] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.844087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.847989] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   93.849810] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   93.850750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   93.855734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   93.857277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.860209] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   93.865753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   93.866991] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   93.871992] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   93.876612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   93.883452] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   93.885335] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   93.886744] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   93.889057] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   93.889156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   93.890461] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   93.891855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   93.892825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   93.897784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   93.898949] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   93.899745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.900582] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   93.900834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   93.910802] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   93.917728] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   93.927278] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   93.929620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   93.930768] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   93.933772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.935326] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   93.939260] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   93.945588] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   93.947242] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   93.948731] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   93.963703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   94.028944] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   94.034771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   95.896599] Bluetooth: hci0: command tx timeout
[   95.957607] Bluetooth: hci6: command tx timeout
[   95.958575] Bluetooth: hci3: command tx timeout
[   95.959137] Bluetooth: hci5: command tx timeout
[   96.021641] Bluetooth: hci1: command tx timeout
[   96.023575] Bluetooth: hci7: command tx timeout
[   96.096673] Bluetooth: hci4: command tx timeout
[   96.097745] Bluetooth: hci2: command tx timeout
[   97.942657] Bluetooth: hci0: command tx timeout
[   98.007555] Bluetooth: hci5: command tx timeout
[   98.008097] Bluetooth: hci3: command tx timeout
[   98.008822] Bluetooth: hci6: command tx timeout
[   98.070589] Bluetooth: hci1: command tx timeout
[   98.071080] Bluetooth: hci7: command tx timeout
[   98.133714] Bluetooth: hci4: command tx timeout
[   98.134224] Bluetooth: hci2: command tx timeout
[   99.990680] Bluetooth: hci0: command tx timeout
[  100.053706] Bluetooth: hci5: command tx timeout
[  100.054207] Bluetooth: hci3: command tx timeout
[  100.055601] Bluetooth: hci6: command tx timeout
[  100.117791] Bluetooth: hci7: command tx timeout
[  100.118280] Bluetooth: hci1: command tx timeout
[  100.182388] Bluetooth: hci2: command tx timeout
[  100.182965] Bluetooth: hci4: command tx timeout
[  102.037607] Bluetooth: hci0: command tx timeout
[  102.104603] Bluetooth: hci3: command tx timeout
[  102.105150] Bluetooth: hci6: command tx timeout
[  102.105978] Bluetooth: hci5: command tx timeout
[  102.165875] Bluetooth: hci1: command tx timeout
[  102.166450] Bluetooth: hci7: command tx timeout
[  102.234689] Bluetooth: hci4: command tx timeout
[  102.235233] Bluetooth: hci2: command tx timeout
[  156.615446] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  156.616988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  156.648754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  156.662214] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  156.674263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  156.675880] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  156.682455] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  156.684297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  156.685718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  156.687854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  156.689502] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  156.690810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  156.722240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  156.767891] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  156.776078] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  156.780425] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  156.787755] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  156.790366] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  156.799705] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  156.813326] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  156.814749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  156.824714] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  156.856640] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  156.870266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  156.875620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  156.877324] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  156.881703] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  156.899431] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  156.902129] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  156.903652] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  156.904712] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  156.938313] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  156.943615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  156.976680] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  156.994824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  157.012894] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  157.018699] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  157.038361] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  157.048185] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  157.054235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  157.056601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  157.061364] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  157.067095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  157.070188] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  157.075072] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  157.076313] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  157.098835] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  157.228631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  158.742575] Bluetooth: hci0: command tx timeout
[  158.805699] Bluetooth: hci1: command tx timeout
[  158.997639] Bluetooth: hci4: command tx timeout
[  159.062647] Bluetooth: hci7: command tx timeout
[  159.062660] Bluetooth: hci2: command tx timeout
[  159.126902] Bluetooth: hci3: command tx timeout
[  159.126988] Bluetooth: hci5: command tx timeout
[  159.381634] Bluetooth: hci6: command tx timeout
[  160.790735] Bluetooth: hci0: command tx timeout
[  160.854545] Bluetooth: hci1: command tx timeout
[  161.050450] Bluetooth: hci4: command tx timeout
[  161.111601] Bluetooth: hci2: command tx timeout
[  161.114178] Bluetooth: hci7: command tx timeout
[  161.173990] Bluetooth: hci5: command tx timeout
[  161.174628] Bluetooth: hci3: command tx timeout
[  161.429624] Bluetooth: hci6: command tx timeout
[  162.837833] Bluetooth: hci0: command tx timeout
[  162.922534] Bluetooth: hci1: command tx timeout
[  163.093584] Bluetooth: hci4: command tx timeout
[  163.157717] Bluetooth: hci7: command tx timeout
[  163.157761] Bluetooth: hci2: command tx timeout
[  163.221772] Bluetooth: hci3: command tx timeout
[  163.221792] Bluetooth: hci5: command tx timeout
[  163.479532] Bluetooth: hci6: command tx timeout
[  164.885578] Bluetooth: hci0: command tx timeout
[  164.949627] Bluetooth: hci1: command tx timeout
[  165.141708] Bluetooth: hci4: command tx timeout
[  165.206703] Bluetooth: hci7: command tx timeout
[  165.206735] Bluetooth: hci2: command tx timeout
[  165.269694] Bluetooth: hci5: command tx timeout
[  165.270131] Bluetooth: hci3: command tx timeout
[  165.525586] Bluetooth: hci6: command tx timeout
[  219.167855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  219.170677] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  219.171703] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  219.173860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  219.175343] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  219.176363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  219.236130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  219.238098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  219.241845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  219.242994] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  219.244279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  219.249059] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  219.251954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  219.254349] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  219.255598] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  219.262359] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  219.263986] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  219.265124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  219.562110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  219.566866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  219.578675] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  219.590704] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  219.596896] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  219.600740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  219.693146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  219.714966] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  219.720060] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  219.750765] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  219.755689] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  219.757712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  219.821201] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  219.841855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  219.856713] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  219.914732] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  219.917898] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  219.928302] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  219.931996] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  219.945676] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  219.948748] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  219.949705] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  219.955724] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  219.961581] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  219.963196] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  219.968841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  219.998760] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  220.001970] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  220.003350] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  220.007696] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  221.205749] Bluetooth: hci0: command tx timeout
[  221.336612] Bluetooth: hci1: command tx timeout
[  221.337740] Bluetooth: hci2: command tx timeout
[  221.653586] Bluetooth: hci3: command tx timeout
[  221.845590] Bluetooth: hci4: command tx timeout
[  222.037792] Bluetooth: hci5: command tx timeout
[  222.102603] Bluetooth: hci6: command tx timeout
[  222.421555] Bluetooth: hci7: command tx timeout
[  223.253594] Bluetooth: hci0: command tx timeout
[  223.382126] Bluetooth: hci1: command tx timeout
[  223.382710] Bluetooth: hci2: command tx timeout
[  223.701642] Bluetooth: hci3: command tx timeout
[  223.893587] Bluetooth: hci4: command tx timeout
[  224.085570] Bluetooth: hci5: command tx timeout
[  224.159641] Bluetooth: hci6: command tx timeout
[  224.473505] Bluetooth: hci7: command tx timeout
[  225.302627] Bluetooth: hci0: command tx timeout
[  225.430574] Bluetooth: hci1: command tx timeout
[  225.431120] Bluetooth: hci2: command tx timeout
[  225.749531] Bluetooth: hci3: command tx timeout
[  225.941684] Bluetooth: hci4: command tx timeout
[  226.133531] Bluetooth: hci5: command tx timeout
[  226.197882] Bluetooth: hci6: command tx timeout
[  226.518554] Bluetooth: hci7: command tx timeout
[  227.349585] Bluetooth: hci0: command tx timeout
[  227.477578] Bluetooth: hci2: command tx timeout
[  227.478122] Bluetooth: hci1: command tx timeout
[  227.798373] Bluetooth: hci3: command tx timeout
[  227.989724] Bluetooth: hci4: command tx timeout
[  228.182634] Bluetooth: hci5: command tx timeout
[  228.246681] Bluetooth: hci6: command tx timeout
[  228.565609] Bluetooth: hci7: command tx timeout
[  281.910258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  281.912975] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  281.914246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  281.917182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  281.922556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  281.924249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  281.925241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  281.926770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  281.929916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  281.952009] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  281.954017] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  281.955153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  281.955929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  281.958232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  281.959756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  281.964079] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  281.965657] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  281.971010] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  282.015531] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  282.018849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  282.022659] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  282.025514] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  282.027218] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  282.029079] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  282.163832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  282.177610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  282.184366] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  282.200739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  282.251629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  282.277807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  282.281680] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  282.304709] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  282.307032] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  282.309376] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  282.310305] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  282.312679] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  282.315868] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  282.319188] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  282.342994] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  282.359612] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  282.362811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  282.372809] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  282.374486] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  282.378750] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  282.432593] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  282.491133] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  282.514855] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  282.518961] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  283.990567] Bluetooth: hci1: command tx timeout
[  283.991914] Bluetooth: hci0: command tx timeout
[  284.065703] Bluetooth: hci3: command tx timeout
[  284.091627] Bluetooth: hci2: command tx timeout
[  284.382516] Bluetooth: hci6: command tx timeout
[  284.437666] Bluetooth: hci5: command tx timeout
[  284.445918] Bluetooth: hci4: command tx timeout
[  284.693781] Bluetooth: hci7: command tx timeout
[  286.037773] Bluetooth: hci0: command tx timeout
[  286.038295] Bluetooth: hci1: command tx timeout
[  286.101579] Bluetooth: hci3: command tx timeout
[  286.102066] Bluetooth: hci2: command tx timeout
[  286.422521] Bluetooth: hci6: command tx timeout
[  286.485605] Bluetooth: hci5: command tx timeout
[  286.486167] Bluetooth: hci4: command tx timeout
[  286.741617] Bluetooth: hci7: command tx timeout
[  288.085579] Bluetooth: hci0: command tx timeout
[  288.086116] Bluetooth: hci1: command tx timeout
[  288.149573] Bluetooth: hci3: command tx timeout
[  288.150095] Bluetooth: hci2: command tx timeout
[  288.471490] Bluetooth: hci6: command tx timeout
[  288.533670] Bluetooth: hci4: command tx timeout
[  288.534189] Bluetooth: hci5: command tx timeout
[  288.789530] Bluetooth: hci7: command tx timeout
[  290.134584] Bluetooth: hci1: command tx timeout
[  290.135102] Bluetooth: hci0: command tx timeout
[  290.197605] Bluetooth: hci2: command tx timeout
[  290.198091] Bluetooth: hci3: command tx timeout
[  290.517605] Bluetooth: hci6: command tx timeout
[  290.581564] Bluetooth: hci5: command tx timeout
[  290.582075] Bluetooth: hci4: command tx timeout
[  290.837680] Bluetooth: hci7: command tx timeout
[  344.394514] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  344.395982] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  344.397707] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  344.398834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  344.400013] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  344.401698] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  344.407140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  344.416673] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  344.417869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  344.424202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  344.428721] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  344.430498] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  344.506642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  344.517079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  344.523785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  344.544533] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  344.546110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  344.560285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  344.565243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  344.566870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  344.570917] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  344.593713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  344.599256] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  344.603767] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  344.623702] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  344.628251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  344.632311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  344.643916] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  344.651906] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  344.658014] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  344.659978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  344.663735] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  344.668537] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  344.688009] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  344.691211] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  344.692316] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  344.695249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  344.697589] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  344.703908] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  344.706166] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  344.708840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  344.728920] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  344.729035] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  344.731522] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  344.732690] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  344.753704] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  344.760752] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  344.773987] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  346.453739] Bluetooth: hci1: command tx timeout
[  346.455730] Bluetooth: hci0: command tx timeout
[  346.645710] Bluetooth: hci2: command tx timeout
[  346.711519] Bluetooth: hci3: command tx timeout
[  346.773728] Bluetooth: hci4: command tx timeout
[  346.775837] Bluetooth: hci6: command tx timeout
[  346.837605] Bluetooth: hci7: command tx timeout
[  346.903550] Bluetooth: hci5: command tx timeout
[  348.501541] Bluetooth: hci0: command tx timeout
[  348.502075] Bluetooth: hci1: command tx timeout
[  348.694530] Bluetooth: hci2: command tx timeout
[  348.760578] Bluetooth: hci3: command tx timeout
[  348.822552] Bluetooth: hci4: command tx timeout
[  348.823056] Bluetooth: hci6: command tx timeout
[  348.885657] Bluetooth: hci7: command tx timeout
[  348.949691] Bluetooth: hci5: command tx timeout
[  350.549626] Bluetooth: hci1: command tx timeout
[  350.550238] Bluetooth: hci0: command tx timeout
[  350.741513] Bluetooth: hci2: command tx timeout
[  350.807581] Bluetooth: hci3: command tx timeout
[  350.871159] Bluetooth: hci6: command tx timeout
[  350.871901] Bluetooth: hci4: command tx timeout
[  350.936235] Bluetooth: hci7: command tx timeout
[  350.997531] Bluetooth: hci5: command tx timeout
[  352.602485] Bluetooth: hci0: command tx timeout
[  352.603017] Bluetooth: hci1: command tx timeout
[  352.790610] Bluetooth: hci2: command tx timeout
[  352.853791] Bluetooth: hci3: command tx timeout
[  352.918612] Bluetooth: hci4: command tx timeout
[  352.919137] Bluetooth: hci6: command tx timeout
[  352.982739] Bluetooth: hci7: command tx timeout
[  353.049796] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
10:35:04  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=00000000677d0357 RCX=1ffff110043cef18 RDX=ffff8880339eb780
RSI=ffffffff81b88b8c RDI=0000000000000005 RBP=ffff888021e77948 RSP=ffff888021e778b0
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001
R12=0000000000000001 R13=000000002e8851db R14=ffffffff80000000 R15=00000000677d0357
RIP=ffffffff81b88b90 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f61fe678269 CR3=0000000030b5a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff888034c87c50 RCX=ffffffff84a5a759 RDX=ffff88800b859080
RSI=ffffffff84a5a784 RDI=0000000000000006 RBP=000000000000001d RSP=ffff888034c87a68
R8 =0000000000000001 R9 =fffff9400002c7a6 R10=000000000000001d R11=0000000000000000
R12=ffff88800b859080 R13=000000000000001d R14=000000000000001d R15=dffffc0000000000
RIP=ffffffff84a5a791 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5d5c6dd269 CR3=000000002ad58000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff000000000000000000000000000000 XMM01=0000000000000000657268747062696c
XMM02=00000000000000362e6f732e6362696c XMM03=00000000000000000000000000000000
XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000