Warning: Permanently added '[localhost]:51824' (ECDSA) to the list of known hosts.
2025/01/29 03:25:59 fuzzer started
2025/01/29 03:25:59 dialing manager at localhost:40187
syzkaller login: [   67.010731] cgroup: Unknown subsys name 'net'
[   67.119730] cgroup: Unknown subsys name 'cpuset'
[   67.155455] cgroup: Unknown subsys name 'rlimit'
[   72.314589] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
[   84.367788] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/29 03:26:17 syscalls: 202
2025/01/29 03:26:17 code coverage: enabled
2025/01/29 03:26:17 comparison tracing: enabled
2025/01/29 03:26:17 extra coverage: enabled
2025/01/29 03:26:17 setuid sandbox: enabled
2025/01/29 03:26:17 namespace sandbox: enabled
2025/01/29 03:26:17 Android sandbox: enabled
2025/01/29 03:26:17 fault injection: enabled
2025/01/29 03:26:17 leak checking: enabled
2025/01/29 03:26:17 net packet injection: enabled
2025/01/29 03:26:17 net device setup: enabled
2025/01/29 03:26:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/29 03:26:17 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/29 03:26:17 USB emulation: enabled
2025/01/29 03:26:17 hci packet injection: enabled
2025/01/29 03:26:17 wifi device emulation: enabled
2025/01/29 03:26:17 802.15.4 emulation: enabled
2025/01/29 03:26:17 fetching corpus: 0, signal 0/0 (executing program)
2025/01/29 03:26:19 starting 8 fuzzer processes
03:26:20 executing program 1:
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x31}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40048d0}, 0x40000)
r1 = fsmount(0xffffffffffffffff, 0x1, 0x70)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4feddc43}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x59}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80080}, 0x20008000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300))
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x40)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$unix(r2, &(0x7f0000000cc0)={&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="769b524a", 0x4}, {&(0x7f0000000700)="ce00f8b3a3fee1509a1591e10d54b0e0af1992fb4ab6fef97098d74863f5c7968762b10a95293e2ee3b5ce70ea5a852e35245a52c6b23c6445067f55856f359820f96487a9c3dda5e094fcccea5a1511243b7030c4c8c0562cd5dab6b0170435ef927227be679f5cc6c8da269e00d6a0f530bc9eeb28c634015fb136acae48af3d0c2c1ac8825065b30a880220804177eb77b661ba186c53536fcfe463f18d30e144e1e106dc6ddc1955b5b4542299b02cf1926344e1a6fe7c759f85406ecf5d52f869bc210eb3dd845b6ba749f4f723ca4599b2852bd0fd68", 0xd9}, {&(0x7f0000000800)="b0f800631152f2fa029d4a04345575f1c4b234380bc3193d5cde3388335b6049c8dcfd", 0x23}, {&(0x7f0000000840)="a9ebe7d1a4be93e212165a074a13c3cdc31f21fa79852885d6e0cff8afac20d38d87ae84e46938d03d136274556b5ed5cac0756472d4e1bc908636dd17a013c2f06a66b8ffbe267bc189956e60d1add61140e064d6ef29b6a2c6595f7c5833d28321cfc2d9fceaced65c53abaa4c62c7addbe3985db2b696bd1414215f9a5ff6d889096b00d48124fa6c9a776ff85ea8dff0a292237ba5ad639ce92a649d8b9f9baee14fe112c4c3748a5fa1c3847ead5ba9f8", 0xb3}, {&(0x7f0000000900)="2c40c218d373132f53d1bb74df073c1d4ef723357485f80ed41ae8257881374ad58da203e34e39dc54d656b1f38b08f087312ee165ab0ab6a882f4c5cb76ddbe3fe57422c6f60cbed59836fa643597e8ac5a367f3a3d6fdfe0", 0x59}, {&(0x7f0000000980)="b3af9fd8065c457049592aac12eb1e65a64f3410e16ca0d16d617d8a010acc544223e5f310b528222996ab6a5dcdce84ad68fcf437f7a1f80bf53a5c0f5348a7ff12400334c1cd0b0abb472fd2a689b43ec1b57104ba97af1a0a402c71c6cdcdd7cebb4a94c11739521b4232af13d1430421c640688406a76f995094bfba499e3b45d046da007a7fdbcf0f8ff2c33089b480", 0x92}, {&(0x7f0000000a40)="a2794ef6ff3c88d9fbd05f76a1a50d", 0xf}, {&(0x7f0000000a80)="25a263d6b217f0d51a10986cba2107666019aa13085f106fa69da53c3e7d002dd0e3bd35351b0035b1a7c8e7ea545e90c28425c625540b3810c95fde5c5f561691d3f2dcebfa8a64fba23952f614f499c94560a638b068fb7bdb0b33145e4be077ed0a9bc1d849b771a1668d243372048e65417df5f2ab9ea390", 0x7a}, {&(0x7f0000000b00)="b24f9050c96dc48fdcf404cff18c27194985a7ecd45dcfb62d770a2a63e0f13050984069d508efb810b93e3078a4d1d3e647d8281354ce0bfc96c5abafb846def6da9b67a8c9b760ffff4d7b51bc38f41ad2d579ada786a10779d446a877f6a7fdf90a3d85863a6357af25af573a03f7c29b8910ed3ca1bd66030310ed8a6f61bab268d2ae7257705a5c1c9f21509d8fdcbefbcdd14db0397ac5cbb8", 0x9c}], 0x9, &(0x7f0000000c80)=[@rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r3, r1, r4, r1, r1]}}], 0x38, 0x4000040}, 0x4044000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r3)
sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x94, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x63}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x14)
socket$inet_udp(0x2, 0x2, 0x0)
read$eventfd(r1, &(0x7f0000000ec0), 0x8)
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000f40), 0x100, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000f00), r7)
r8 = fspick(r7, &(0x7f0000000f80)='./file0/file0\x00', 0x0)
ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000fc0))

03:26:20 executing program 0:
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x80)
mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, &(0x7f0000000080)={0x71, 0x85, 0x80000, {r1}}, 0x20)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x109041, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4080)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x4, 0x4, @l2={'ib', 0x3a, 'gretap0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40855}, 0x8040)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c1}, 0x4c810)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x434c00)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3a0}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040005)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200408a0}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc4}, 0x800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x84, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x1)

03:26:20 executing program 2:
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000))
r0 = fsmount(0xffffffffffffffff, 0x1, 0x72)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000100)={0x100, 0x3, 0x1, 'queue0\x00', 0x9})
r1 = accept$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e)
recvmsg$unix(r1, &(0x7f0000001680)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/51, 0x33}, {&(0x7f0000001340)=""/149, 0x95}, {&(0x7f0000001400)=""/2, 0x2}, {&(0x7f0000001440)}, {&(0x7f0000001480)=""/175, 0xaf}, {&(0x7f0000001540)=""/16, 0x10}, {&(0x7f0000001580)=""/38, 0x26}], 0x8, &(0x7f0000001640)=[@cred={{0x1c}}], 0x20}, 0x40)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000001800)=@buf={0x1b, &(0x7f00000017c0)="32d32550b3efcf9f6be7865d5baa8dab15afa3c957e840945ae016"})
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001840)=@ccm_128={{0x303}, "375035d198f0118e", "ca1bdf6d85fb0a5a8107eb037ab7b8a6", "0f210bb0", "aa8e5372d8f1c554"}, 0x28)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004841)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001980)={'wg0\x00', <r3=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001a80)={'syztnl2\x00', &(0x7f00000019c0)={'erspan0\x00', r3, 0x80, 0x40, 0x81, 0x928, {{0x1d, 0x4, 0x3, 0x4, 0x74, 0x68, 0x0, 0x3e, 0x29, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x5, [{@empty, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbeaa}]}, @generic={0x93, 0x9, "e17fe94ed5d8d0"}, @ssrr={0x89, 0xf, 0xbd, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100]}, @noop, @generic={0x7, 0x12, "f9dbf3a4c23960e12a84c5d8a48dd7ac"}, @end, @lsrr={0x83, 0x1f, 0xc4, [@broadcast, @loopback, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000001ac0)={{0x8, 0x7}, 0x0, 0x5, 0x3ff, {0x2, 0x68}, 0x9, 0x10001})
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x80, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfb}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40040}, 0x20008014)
r4 = fsopen(&(0x7f0000001c80)='devpts\x00', 0x1)
r5 = fsmount(r4, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000001cc0))
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000001e80)={&(0x7f0000001d80), 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x48, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x24000810)

[   86.937933] audit: type=1400 audit(1738121180.068:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:26:20 executing program 3:
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000080)=""/183, 0xb7}, {&(0x7f0000000140)=""/186, 0xba}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/103, 0x67}, {&(0x7f0000000340)=""/185, 0xb9}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000540)=""/115, 0x73}, {&(0x7f00000005c0)=""/29, 0x1d}, {&(0x7f0000000600)=""/239, 0xef}], 0xa, &(0x7f00000007c0)=[@rights={{0x24, 0x1, 0x1, [<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [<r6=>0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x10000)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r8, 0x80083314, &(0x7f00000008c0))
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0xc0000, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r9, 0x8008330e, &(0x7f0000000940))
r10 = fsmount(r0, 0x1, 0x5)
write$cgroup_netprio_ifpriomap(r10, &(0x7f0000000980)={'geneve1', 0x32, 0x36}, 0xa)
socketpair(0x2a, 0x1, 0x1, &(0x7f00000009c0)={<r11=>0xffffffffffffffff})
sendmsg$SMC_PNETID_FLUSH(r11, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x48000)
ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
r12 = accept$unix(r0, &(0x7f0000000b40)=@abs, &(0x7f0000000bc0)=0x6e)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f0000000c00)={'wg2\x00'})
recvmsg$unix(r1, &(0x7f0000001000)={&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000cc0)=""/69, 0x45}, {&(0x7f0000000d40)=""/76, 0x4c}, {&(0x7f0000000dc0)=""/116, 0x74}, {&(0x7f0000000e40)=""/193, 0xc1}], 0x4, &(0x7f0000000f80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r13=>0x0}}}], 0x70}, 0x40002120)
socketpair(0x1d, 0x3, 0xd54, &(0x7f0000001040)={<r14=>0xffffffffffffffff})
r15 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r6)
sendmsg$IPVS_CMD_NEW_DEST(r14, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xcc, r15, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x6ce2d48529ef2f92}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x845b}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x8040)
r16 = syz_open_procfs$userns(r13, &(0x7f0000001280))
ioctl$NS_GET_PARENT(r16, 0xb702, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r3)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x64, 0x0, 0x4, 0x70bd2a, 0xffff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040800}, 0x20008018)

03:26:20 executing program 5:
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "a96553a37fed8b5e", "0a313262190fc3d17f4b0aa9e343bd99", "7bd9d9ef", "f0d7a0ba7c7a5fb0"}, 0x28)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "934c8f6617a75a4a", "05582e2a3f1b447b059a25324f31ba6d", "dfe4b823", "be61ce47736dcc98"}, 0x28)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080), 0x4)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4e000}, 0x40000)
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000400))
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000004c0)="bd3b898b6c1d68ad9c5f37b86a", 0xd}], 0x1, 0x0, 0x0, 0x20000000}, 0x4001004)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000580)="f047ff961ed6366ac1046fa5117de44b0d4e37d170ef707f19b0b17a6ec11a5714c96f1ea28fdd4273fadbb6db8e6ddae5009e3e7927a4e2d75ab70089687b3faea2cdd9bbc5ce82ff", 0x49)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000600), &(0x7f0000000640)=0x4)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000840)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/156, 0x9c, 0x0, &(0x7f0000000740)=""/244, 0xf4}, &(0x7f0000000880)=0x40)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x1)
sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x84, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x91}, 0x10)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "ac637db783bd0e7f", "b8f76d4719229e49e2ab21bd789501e9", "474b148e", "c81953db766258af"}, 0x28)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = fsmount(r1, 0x0, 0x9)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000a80)=[@mss={0x2, 0x68bb}, @sack_perm, @timestamp, @window={0x3, 0x9, 0x5}, @window={0x3, 0x5, 0x3f}], 0x5)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004041)

03:26:20 executing program 7:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x8, 0x5, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)
r1 = socket(0x1d, 0x3, 0xffffffff)
r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044081}, 0x20000080)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x111283, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x40)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480), 0x10040, 0x0)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2120801}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc0d0bc3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048011}, 0x90)
sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r3)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffff80}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x14004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x475d6d5e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x3, 0xa2, 0x3, 0x80, 0x0, 0xffff, 0x40000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000980), 0x8}, 0x10002, 0x400, 0x81, 0x5, 0x7f, 0x8, 0x4cdd, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r3, 0x21cfe53a21f198e3)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xd6ff94b471260da5}, 0x40005)
syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
io_destroy(0x0)

03:26:20 executing program 4:
recvmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000000), 0x6e, &(0x7f0000001380)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/20, 0x14}, {&(0x7f00000010c0)=""/24, 0x18}, {&(0x7f0000001100)=""/76, 0x4c}, {&(0x7f0000001180)=""/228, 0xe4}, {&(0x7f0000001280)=""/20, 0x14}, {&(0x7f00000012c0)=""/59, 0x3b}, {&(0x7f0000001300)=""/7, 0x7}, {&(0x7f0000001340)=""/16, 0x10}], 0x9, &(0x7f0000001440)=[@rights={{0x20, 0x1, 0x1, [<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x2000)
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000001500), 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001540)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x3f, "058cd64e0cc953"})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000002540)={{<r5=>0x0, 0x2, 0x0, 0x800, 0x5, 0x3, 0xc, 0x1653, 0x4, 0xb7, 0x2, 0x800, 0xfffffffffffffff8, 0x8001, 0x1ff}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003540)={0x0, ""/256, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000003740)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}], 0x7, "8869d6b737681e"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000004740)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}], 0x44, "a3d4d1f02433c0"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000005740)={{<r9=>0x0, 0x401, 0x9, 0x5, 0x9, 0x7ff, 0xffffffffffff88ee, 0x5, 0x1, 0x2370, 0x9, 0x9, 0x9, 0x100000001, 0x200}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000006740)={0x0, ""/256, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000006940)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r11=>0x0}], 0x8, "74c68988edcedc"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000007940)={0x14, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r12=>0x0}], 0x0, "1fd165dbc51783"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000008940)={0x0, ""/256, <r13=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000008b40)={{<r14=>0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x7, 0x2, 0xad7, 0xfffffff7, 0x4, 0x3, 0xef, 0xfff, 0x7}})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000009b40)={{<r15=>0x0, 0x4, 0x154, 0x81, 0x8, 0x7, 0x200, 0x0, 0xffffffff, 0x99b7, 0x2, 0x40, 0x101, 0x0, 0x8}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000000ab40)={0x0, ""/256, 0x0, <r16=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000000ad40)={0x7ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r17=>0x0}], 0x2, "5fb8e77cb9fe35"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000000bd40)={0x0, ""/256, 0x0, <r18=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000bf40)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r19=>0x0}], 0xe1, "dc39fcd61baea8"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000000cf40)={0x0, ""/256, <r20=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000007db40)={0x40, [{}, {r4}, {r5}, {}, {0x0, r6}, {}, {}, {0x0, r7}, {0x0, r8}, {r9}, {}, {}, {}, {}, {0x0, r10}, {}, {r11}, {r12}, {}, {}, {r13}, {r14}, {}, {r15, r16}, {}, {r17, r18}, {0x0, r19}, {r20}], 0x9, "7e7f06d0f77c8f"})

03:26:20 executing program 6:
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e)
recvmsg$unix(r0, &(0x7f0000000500)={&(0x7f00000000c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/177, 0xb1}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000300)=""/180, 0xb4}], 0x3, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}], 0x100}, 0x2040)
r5 = socket(0x11, 0x5, 0x6)
recvfrom$unix(r5, &(0x7f0000000540)=""/127, 0x7f, 0x12162, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000640), 0x4)
r6 = accept4$unix(r1, &(0x7f0000000680), &(0x7f0000000700)=0x6e, 0x80000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/31, 0x1f}], 0x1, &(0x7f0000000840)=[@rights={{0x2c, 0x1, 0x1, [<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}, 0x10000)
r11 = fsmount(r2, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r11, 0x6, 0x1, &(0x7f00000009c0)=@ccm_128={{0x303}, "d06e62c50eea6c92", "c641d48984b467dfbce669c926675736", "23e92dee", "fb3a5a2b8a1a1cd5"}, 0x28)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/11, 0xb}, {&(0x7f0000000a40)=""/21, 0x15}, {&(0x7f0000000a80)=""/99, 0x63}], 0x3, &(0x7f0000000b40)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}, 0x102)
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000c00)={'vxcan0\x00'})
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000c40)=r7, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000c80)={'vxcan1\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000cc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r13=>0x0}], 0x4, "cbf1cdb58c5f03"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000001cc0)={0x0, ""/256, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000001ec0)={0xfff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}], 0x4, "702d73b9505094"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000002ec0)={0x0, ""/256, 0x0, <r16=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000030c0)={0x203, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r17=>0x0}], 0xfc, "654639e6f98a83"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f00000040c0)={0x0, ""/256, <r18=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000073ac0)={0x4, [{r13}, {r14}, {0x0, r15}, {0x0, r16}, {}, {}, {}, {}, {}, {r17}, {}, {r18}], 0x6, "d76143869f7000"})

[   88.395860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.404649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.406929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.412163] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.416825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.423941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.426185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.437070] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   88.440040] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.441677] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.446945] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   88.454065] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.514652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.521470] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.525511] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.533731] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.536988] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   88.539004] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.578818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.582008] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.584186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.593557] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   88.597663] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.600061] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.605656] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.610145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.611497] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   88.615404] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   88.615481] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   88.621584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.638960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.640357] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   88.645146] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   88.646634] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   88.648866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.651123] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   88.904743] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   88.910168] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   88.915585] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   88.924059] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   88.926825] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   88.928613] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   89.040844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   89.046916] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   89.055546] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   89.062853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   89.078499] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   89.080860] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   90.477856] Bluetooth: hci0: command tx timeout
[   90.477867] Bluetooth: hci1: command tx timeout
[   90.606505] Bluetooth: hci2: command tx timeout
[   90.670321] Bluetooth: hci4: command tx timeout
[   90.733371] Bluetooth: hci3: command tx timeout
[   90.733669] Bluetooth: hci5: command tx timeout
[   90.990355] Bluetooth: hci6: command tx timeout
[   91.117370] Bluetooth: hci7: command tx timeout
[   92.525743] Bluetooth: hci0: command tx timeout
[   92.525986] Bluetooth: hci1: command tx timeout
[   92.653970] Bluetooth: hci2: command tx timeout
[   92.717424] Bluetooth: hci4: command tx timeout
[   92.781392] Bluetooth: hci3: command tx timeout
[   92.781636] Bluetooth: hci5: command tx timeout
[   93.037550] Bluetooth: hci6: command tx timeout
[   93.166072] Bluetooth: hci7: command tx timeout
[   94.574305] Bluetooth: hci0: command tx timeout
[   94.574821] Bluetooth: hci1: command tx timeout
[   94.701355] Bluetooth: hci2: command tx timeout
[   94.765307] Bluetooth: hci4: command tx timeout
[   94.829369] Bluetooth: hci3: command tx timeout
[   94.829855] Bluetooth: hci5: command tx timeout
[   95.087278] Bluetooth: hci6: command tx timeout
[   95.214576] Bluetooth: hci7: command tx timeout
[   96.622130] Bluetooth: hci1: command tx timeout
[   96.622778] Bluetooth: hci0: command tx timeout
[   96.749444] Bluetooth: hci2: command tx timeout
[   96.813335] Bluetooth: hci4: command tx timeout
[   96.877305] Bluetooth: hci5: command tx timeout
[   96.877826] Bluetooth: hci3: command tx timeout
[   97.133292] Bluetooth: hci6: command tx timeout
[   97.261297] Bluetooth: hci7: command tx timeout
[  148.828149] syz-executor.4 (285) used greatest stack depth: 23520 bytes left
[  151.033521] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  151.038935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  151.046131] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  151.054860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  151.062990] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  151.065074] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  151.283839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  151.287833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  151.292693] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  151.297521] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  151.301011] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  151.304700] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  151.352156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  151.356784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  151.359114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  151.365841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  151.370745] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  151.372903] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  151.416610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  151.422591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  151.424721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  151.431056] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  151.433840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  151.435845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  151.501762] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  151.509320] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  151.511130] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  151.523976] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  151.541656] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  151.542395] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  151.602162] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  151.617329] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  151.626828] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  151.627656] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  151.630891] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  151.631676] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  151.632646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  151.638569] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  151.639424] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  151.640251] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  151.641920] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  151.644476] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  151.670851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  151.673278] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  151.682177] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  151.691954] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  151.695686] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  151.701400] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  153.133359] Bluetooth: hci0: command tx timeout
[  153.325474] Bluetooth: hci1: command tx timeout
[  153.453386] Bluetooth: hci2: command tx timeout
[  153.517648] Bluetooth: hci3: command tx timeout
[  153.709855] Bluetooth: hci5: command tx timeout
[  153.709913] Bluetooth: hci4: command tx timeout
[  153.773621] Bluetooth: hci6: command tx timeout
[  153.837438] Bluetooth: hci7: command tx timeout
[  155.181314] Bluetooth: hci0: command tx timeout
[  155.373322] Bluetooth: hci1: command tx timeout
[  155.501478] Bluetooth: hci2: command tx timeout
[  155.566280] Bluetooth: hci3: command tx timeout
[  155.758338] Bluetooth: hci5: command tx timeout
[  155.758366] Bluetooth: hci4: command tx timeout
[  155.821550] Bluetooth: hci6: command tx timeout
[  155.885510] Bluetooth: hci7: command tx timeout
[  157.229610] Bluetooth: hci0: command tx timeout
[  157.421458] Bluetooth: hci1: command tx timeout
[  157.551334] Bluetooth: hci2: command tx timeout
[  157.613364] Bluetooth: hci3: command tx timeout
[  157.805290] Bluetooth: hci4: command tx timeout
[  157.805321] Bluetooth: hci5: command tx timeout
[  157.869304] Bluetooth: hci6: command tx timeout
[  157.934414] Bluetooth: hci7: command tx timeout
[  159.278242] Bluetooth: hci0: command tx timeout
[  159.470249] Bluetooth: hci1: command tx timeout
[  159.599242] Bluetooth: hci2: command tx timeout
[  159.661284] Bluetooth: hci3: command tx timeout
[  159.853437] Bluetooth: hci4: command tx timeout
[  159.853970] Bluetooth: hci5: command tx timeout
[  159.919250] Bluetooth: hci6: command tx timeout
[  159.981347] Bluetooth: hci7: command tx timeout
[  213.310605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  213.313368] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  213.314856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  213.317439] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  213.318865] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  213.319980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  213.386159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  213.390534] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  213.391689] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  213.393808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  213.395469] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  213.396543] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  213.446820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  213.449094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  213.450315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  213.453835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  213.455114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  213.456259] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  213.580253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  213.590558] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  213.601074] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  213.606834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.611553] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  213.613171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.627308] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.629967] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.633816] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  213.635597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  213.662030] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  213.664617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  213.670403] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  213.674306] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  213.686493] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  213.699435] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  213.736558] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  213.737299] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  213.796545] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  213.809691] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  213.811766] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  213.812921] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  213.819690] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  213.822016] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  213.826751] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  213.833617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  213.922718] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  213.944724] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  213.953034] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  213.986366] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  215.342299] Bluetooth: hci0: command tx timeout
[  215.406280] Bluetooth: hci1: command tx timeout
[  215.469534] Bluetooth: hci2: command tx timeout
[  215.726281] Bluetooth: hci4: command tx timeout
[  215.726317] Bluetooth: hci3: command tx timeout
[  215.981414] Bluetooth: hci6: command tx timeout
[  215.982387] Bluetooth: hci5: command tx timeout
[  216.110354] Bluetooth: hci7: command tx timeout
[  217.392277] Bluetooth: hci0: command tx timeout
[  217.454520] Bluetooth: hci1: command tx timeout
[  217.518600] Bluetooth: hci2: command tx timeout
[  217.773465] Bluetooth: hci3: command tx timeout
[  217.774260] Bluetooth: hci4: command tx timeout
[  218.030374] Bluetooth: hci5: command tx timeout
[  218.030404] Bluetooth: hci6: command tx timeout
[  218.159235] Bluetooth: hci7: command tx timeout
[  219.437394] Bluetooth: hci0: command tx timeout
[  219.501378] Bluetooth: hci1: command tx timeout
[  219.565388] Bluetooth: hci2: command tx timeout
[  219.821394] Bluetooth: hci3: command tx timeout
[  219.822468] Bluetooth: hci4: command tx timeout
[  220.077491] Bluetooth: hci5: command tx timeout
[  220.079301] Bluetooth: hci6: command tx timeout
[  220.205540] Bluetooth: hci7: command tx timeout
[  221.485503] Bluetooth: hci0: command tx timeout
[  221.551218] Bluetooth: hci1: command tx timeout
[  221.613331] Bluetooth: hci2: command tx timeout
[  221.869444] Bluetooth: hci3: command tx timeout
[  221.869949] Bluetooth: hci4: command tx timeout
[  222.126280] Bluetooth: hci6: command tx timeout
[  222.126321] Bluetooth: hci5: command tx timeout
[  222.255294] Bluetooth: hci7: command tx timeout
[  275.386913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  275.389725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  275.394699] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  275.403479] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  275.409447] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  275.412373] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  275.581527] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  275.589405] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  275.602255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  275.603695] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  275.612559] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  275.615587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  275.617625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  275.622400] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  275.628559] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  275.630836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  275.635588] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  275.639866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  275.651037] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  275.662576] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  275.711805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  275.727287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  275.730366] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  275.733061] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  275.734810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  275.735400] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  275.738015] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  275.745753] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  275.745811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  275.757467] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  275.763605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  275.779394] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  275.802980] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  275.805879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  275.810530] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  275.815468] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  275.818611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  275.820698] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  275.823387] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  275.836015] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  275.840483] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  275.844986] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  275.852582] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  275.877461] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  275.880614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  275.882763] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  275.912566] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  275.922928] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  277.485419] Bluetooth: hci0: command tx timeout
[  277.677273] Bluetooth: hci1: command tx timeout
[  277.741401] Bluetooth: hci2: command tx timeout
[  277.805298] Bluetooth: hci3: command tx timeout
[  277.869426] Bluetooth: hci5: command tx timeout
[  277.933277] Bluetooth: hci4: command tx timeout
[  277.935115] Bluetooth: hci6: command tx timeout
[  278.125274] Bluetooth: hci7: command tx timeout
[  279.533489] Bluetooth: hci0: command tx timeout
[  279.725255] Bluetooth: hci1: command tx timeout
[  279.790258] Bluetooth: hci2: command tx timeout
[  279.853283] Bluetooth: hci3: command tx timeout
[  279.918256] Bluetooth: hci5: command tx timeout
[  279.982298] Bluetooth: hci4: command tx timeout
[  279.982753] Bluetooth: hci6: command tx timeout
[  280.174255] Bluetooth: hci7: command tx timeout
[  281.582296] Bluetooth: hci0: command tx timeout
[  281.774393] Bluetooth: hci1: command tx timeout
[  281.838256] Bluetooth: hci2: command tx timeout
[  281.902443] Bluetooth: hci3: command tx timeout
[  281.966297] Bluetooth: hci5: command tx timeout
[  282.029249] Bluetooth: hci4: command tx timeout
[  282.029703] Bluetooth: hci6: command tx timeout
[  282.221357] Bluetooth: hci7: command tx timeout
[  283.630236] Bluetooth: hci0: command tx timeout
[  283.822359] Bluetooth: hci1: command tx timeout
[  283.885633] Bluetooth: hci2: command tx timeout
[  283.950235] Bluetooth: hci3: command tx timeout
[  284.014333] Bluetooth: hci5: command tx timeout
[  284.077271] Bluetooth: hci6: command tx timeout
[  284.077713] Bluetooth: hci4: command tx timeout
[  284.270359] Bluetooth: hci7: command tx timeout
[  337.506137] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  337.509793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  337.512841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  337.517899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  337.521003] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  337.523277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  337.787906] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  337.793723] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  337.796960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  337.807583] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  337.811847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  337.814611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  337.855697] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  337.860521] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  337.862023] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  337.865735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  337.868620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  337.870752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  337.880634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  337.884649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  337.891496] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  337.896447] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  337.908582] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  337.912841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  337.933242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  337.947522] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  337.949497] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  337.973794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  337.976576] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  337.978558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  338.062599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  338.079033] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  338.085588] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  338.087634] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  338.089087] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  338.101599] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  338.102890] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  338.103657] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  338.108244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  338.110506] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  338.112636] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  338.114786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  338.126348] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  338.127546] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  338.130790] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  338.131014] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  338.134040] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  338.136319] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  339.567205] Bluetooth: hci0: command tx timeout
[  339.885381] Bluetooth: hci1: command tx timeout
[  339.949239] Bluetooth: hci2: command tx timeout
[  340.014286] Bluetooth: hci4: command tx timeout
[  340.014316] Bluetooth: hci3: command tx timeout
[  340.205352] Bluetooth: hci6: command tx timeout
[  340.270260] Bluetooth: hci7: command tx timeout
[  340.270333] Bluetooth: hci5: command tx timeout
[  341.613239] Bluetooth: hci0: command tx timeout
[  341.934232] Bluetooth: hci1: command tx timeout
[  341.997351] Bluetooth: hci2: command tx timeout
[  342.063197] Bluetooth: hci4: command tx timeout
[  342.063680] Bluetooth: hci3: command tx timeout
[  342.253301] Bluetooth: hci6: command tx timeout
[  342.317230] Bluetooth: hci5: command tx timeout
[  342.317717] Bluetooth: hci7: command tx timeout
[  343.662312] Bluetooth: hci0: command tx timeout
[  343.983188] Bluetooth: hci1: command tx timeout
[  344.046264] Bluetooth: hci2: command tx timeout
[  344.111204] Bluetooth: hci3: command tx timeout
[  344.111232] Bluetooth: hci4: command tx timeout
[  344.301388] Bluetooth: hci6: command tx timeout
[  344.365305] Bluetooth: hci7: command tx timeout
[  344.365436] Bluetooth: hci5: command tx timeout
[  345.709236] Bluetooth: hci0: command tx timeout
[  346.030787] Bluetooth: hci1: command tx timeout
[  346.093368] Bluetooth: hci2: command tx timeout
[  346.159514] Bluetooth: hci4: command tx timeout
[  346.159556] Bluetooth: hci3: command tx timeout
[  346.350265] Bluetooth: hci6: command tx timeout
[  346.413286] Bluetooth: hci5: command tx timeout
[  346.415335] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
03:31:28  Registers:
info registers vcpu 0
RAX=ffffea0000b69740 RBX=0000000000000000 RCX=ffffffff818e317a RDX=0000000000000000
RSI=0000000000000008 RDI=ffffea0000b69740 RBP=ffffea0000b69740 RSP=ffff888034b2f7b0
R8 =0000000000000000 R9 =fffff9400016d2e8 R10=0000000000000000 R11=0000000000000001
R12=ffff888009444440 R13=ffff888034b2f860 R14=0000000000000000 R15=ffff88807ffdc680
RIP=ffffffff81abc692 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9c4ef8a6f4 CR3=000000003610e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f9c4ef9947000007f9c4ef98f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff888036bba638 RCX=1ffffffff0fe6705 RDX=1ffff11006d774cb
RSI=ffff888036bba638 RDI=ffff888036bba658 RBP=ffff888036bb9bc0 RSP=ffff888037ce76a8
R8 =0000000000000000 R9 =fffffbfff0fe15f0 R10=ffffffff87f0af87 R11=0000000000000001
R12=0000000000000008 R13=0000000000000100 R14=ffff888036bba638 R15=0000000000000004
RIP=ffffffff814f3fbd RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d8ba7e9080 CR3=0000000032eac000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000