Warning: Permanently added '[localhost]:36366' (ECDSA) to the list of known hosts.
2025/04/28 07:11:15 fuzzer started
2025/04/28 07:11:15 dialing manager at localhost:46629
syzkaller login: [   93.768588] cgroup: Unknown subsys name 'net'
[   93.903352] cgroup: Unknown subsys name 'cpuset'
[   93.938646] cgroup: Unknown subsys name 'rlimit'
2025/04/28 07:11:36 syscalls: 200
2025/04/28 07:11:36 code coverage: enabled
2025/04/28 07:11:36 comparison tracing: enabled
2025/04/28 07:11:36 extra coverage: enabled
2025/04/28 07:11:36 setuid sandbox: enabled
2025/04/28 07:11:36 namespace sandbox: enabled
2025/04/28 07:11:36 Android sandbox: enabled
2025/04/28 07:11:36 fault injection: enabled
2025/04/28 07:11:36 leak checking: enabled
2025/04/28 07:11:36 net packet injection: enabled
2025/04/28 07:11:36 net device setup: enabled
2025/04/28 07:11:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/28 07:11:36 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/28 07:11:36 USB emulation: enabled
2025/04/28 07:11:36 hci packet injection: enabled
2025/04/28 07:11:36 wifi device emulation: enabled
2025/04/28 07:11:36 802.15.4 emulation: enabled
2025/04/28 07:11:36 fetching corpus: 0, signal 0/0 (executing program)
2025/04/28 07:11:38 starting 8 fuzzer processes
07:11:38 executing program 0:
get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7, &(0x7f0000ff5000/0xa000)=nil, 0x1)
munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r0 = syz_io_uring_setup(0x2504, &(0x7f0000000080)={0x0, 0x999b, 0x8, 0x3, 0x2fc}, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, r0, 0x10000000)
socketpair(0x9, 0x5, 0x4851, &(0x7f0000000180))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0)
shmat(0x0, &(0x7f0000ff7000/0x1000)=nil, 0x0)
r3 = syz_io_uring_setup(0x7d22, &(0x7f00000001c0)={0x0, 0xa286, 0x1, 0x2, 0x344, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000280))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_io_uring_submit(r4, r2, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)={0x10000000}, r5, 0x3, 0x0, 0x1}, 0x3f)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000007, 0x11, r3, 0x8000000)
syz_io_uring_submit(r7, r1, &(0x7f0000000380)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r6, 0x5, 0x0, 0x4, 0x6}, 0x3)
ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000003c0))
syz_io_uring_setup(0x334, &(0x7f0000000400)={0x0, 0x2d99, 0x10, 0x0, 0x17a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
munlock(&(0x7f0000ff9000/0x3000)=nil, 0x3000)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4012010, r0, 0x0)
syz_io_uring_setup(0x37df, &(0x7f0000000500)={0x0, 0xde02, 0x4, 0x2, 0x12d, 0x0, r3}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000580), &(0x7f00000005c0)=<r9=>0x0)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000600), 0x20000, 0x0)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000006c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r10, &(0x7f0000000640)={0x800, 0x80, 0x10}, &(0x7f0000000680)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r11}}, 0x3ff)

07:11:38 executing program 2:
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe4001, 0x0)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080))
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100))
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x81, 0x3f, 0x0, 0x7cc5}]})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
io_uring_setup(0x495e, &(0x7f00000001c0)={0x0, 0x7c0e, 0x20, 0x0, 0x201})
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000240)={'veth0\x00'})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4091}, 0x4044000)
r3 = syz_io_uring_complete(0x0)
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000003c0)={'macvlan1\x00'})
syz_open_dev$sg(&(0x7f0000000400), 0x0, 0xc1adc0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000480)={0x0, &(0x7f0000000440)})
r4 = syz_io_uring_complete(0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000004c0))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x7, 0x700, 0xfffffff9, 0x6, {{0x27, 0x4, 0x3, 0x7, 0x9c, 0x68, 0x0, 0x81, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@end, @cipso={0x86, 0x23, 0x0, [{0x16536b3584f3c9d0, 0x5, "3e7192"}, {0x6, 0x5, "ce2401"}, {0x0, 0x2}, {0x5, 0x11, "2753bf131fd8838f950e30daeec158"}]}, @end, @timestamp_prespec={0x44, 0xc, 0xf3, 0x3, 0x2, [{@empty, 0x64bd}]}, @timestamp_addr={0x44, 0x3c, 0xe1, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private=0xa010101, 0x8000000}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x4ea}, {@loopback, 0x6}, {@remote}, {@loopback, 0x2}, {@multicast1, 0x75}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xe8, 0x1, 0xf, [{@multicast2}, {@rand_addr=0x64010101, 0x7f}]}]}}}}})

07:11:38 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000400)
r1 = socket(0x22, 0x80000, 0x97)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1cd}]}, 0x70}, 0x1, 0x0, 0x0, 0x8094}, 0x20000000)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa839b5b99416ac5e}, 0x20000810)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x801)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf94f685}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000814}, 0x4040800)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000680), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6tnl0\x00', <r6=>0x0, 0x29, 0x0, 0x7, 0x4, 0x9, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x20, 0x2, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl1\x00', <r7=>0x0, 0x4, 0x9, 0x7, 0x101, 0x10, @remote, @empty, 0x7800, 0x0, 0x8, 0x7}})
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000cc0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000880)={0x3d8, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb27}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}]}}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x5f341d9509587eef}, 0x4855)
syz_genetlink_get_family_id$fou(&(0x7f0000000d00), r1)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48005}, 0x20048891)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000e40), 0xc000, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r3, 0x2d, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x4804)
recvmmsg(r0, &(0x7f0000001640)=[{{&(0x7f0000000f80)=@pppol2tpv3={0x18, 0x1, {0x0, <r9=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000001000)=""/2, 0x2}], 0x1}, 0x8}, {{&(0x7f0000001080)=@x25, 0x80, &(0x7f0000001500)=[{&(0x7f0000001100)=""/245, 0xf5}, {&(0x7f0000001200)=""/216, 0xd8}, {&(0x7f0000001300)=""/255, 0xff}, {&(0x7f0000001400)=""/246, 0xf6}], 0x4, &(0x7f0000001540)=""/199, 0xc7}, 0x6}], 0x2, 0x20, &(0x7f00000016c0))
sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f0000005a80)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005a40)={&(0x7f0000005640)={0x3e8, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x80, 0x40, 0x7f, 0x1}, {0x1f, 0x1, 0x80, 0x4}, {0x81, 0x6d, 0x1f}, {0x400, 0x1f, 0x6, 0x3}, {0x8001, 0xf4, 0x0, 0x7}, {0x6, 0x0, 0x20, 0xb711}, {0x2, 0x99, 0x40}, {0x101, 0x1, 0x5, 0x7}, {0xff, 0x40, 0x40, 0x7f}, {0x4987, 0x0, 0x6, 0x80}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x101, 0xff, 0x6, 0x1}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x40200c0}, 0x4000)

07:11:38 executing program 3:
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x6, 0x1000, 0x3, @local, @mcast2, 0x20, 0x80, 0x5, 0x2}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0x322, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x48000)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10020020}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x48000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'batadv0\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'batadv\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, ',(!-+,\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000004)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x40010)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48800)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x20048044)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008080}, 0xc802)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff98d}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4810}, 0x404c082)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r3)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x24}}, 0x4004)
r6 = syz_io_uring_complete(0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r3)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r7, 0x30, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x1)

[  116.445532] audit: type=1400 audit(1745824298.550:7): avc:  denied  { execmem } for  pid=283 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
07:11:38 executing program 4:
socketpair(0x8, 0x4, 0x7f, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
recvmmsg(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f0000000180)=""/165, 0xa5}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x3}, 0x3f}, {{&(0x7f0000001280)=@xdp={0x2c, 0x0, <r3=>0x0}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001300)=""/75, 0x4b}], 0x1, &(0x7f00000013c0)=""/195, 0xc3}, 0x6}, {{&(0x7f00000014c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/138, 0x8a}], 0x1, &(0x7f0000001640)=""/76, 0x4c}, 0xc00}, {{&(0x7f00000016c0)=@ax25={{0x3, @rose}, [@netrom, @remote, @netrom, @default, @remote, @remote, @rose, @netrom]}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001740)=""/64, 0x40}, {&(0x7f0000001780)=""/160, 0xa0}], 0x2, &(0x7f0000001880)=""/243, 0xf3}, 0xb6}, {{&(0x7f0000001980)=@ax25={{0x3, @default}, [@netrom, @remote, @default, @default, @default, @rose, @null, @default]}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a00)=""/35, 0x23}, {&(0x7f0000001a40)=""/112, 0x70}, {&(0x7f0000001ac0)=""/87, 0x57}, {&(0x7f0000001b40)=""/195, 0xc3}, {0x0}], 0x5, &(0x7f0000001cc0)=""/4096, 0x1000}, 0x10000}, {{&(0x7f0000002cc0)=@hci, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002d40)=""/159, 0x9f}, {&(0x7f0000002e00)=""/184, 0xb8}, {&(0x7f0000002ec0)=""/55, 0x37}, {&(0x7f0000002f00)=""/78, 0x4e}, {&(0x7f0000002f80)=""/35, 0x23}], 0x5}, 0x4}], 0x6, 0x40, &(0x7f00000031c0))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000032c0)={'gre0\x00', &(0x7f0000003240)={'gre0\x00', <r4=>r3, 0x8, 0xb0, 0x800, 0x5ee, {{0xa, 0x4, 0x0, 0x7, 0x28, 0x65, 0x0, 0x98, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@generic={0x44, 0x5, "500f27"}, @rr={0x7, 0xf, 0x11, [@broadcast, @multicast1, @multicast2]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000003400)={'ip_vti0\x00', &(0x7f0000003300)={'gre0\x00', <r5=>r3, 0x10, 0x8, 0xcd5, 0x60, {{0x37, 0x4, 0x0, 0x1b, 0xdc, 0x65, 0x0, 0x2, 0x29, 0x0, @broadcast, @local, {[@end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x99, 0x0, 0x3, [0x6, 0x200, 0x7f, 0xfffffffe, 0x4, 0x8, 0x1, 0x9bbd]}, @timestamp_addr={0x44, 0x4c, 0x63, 0x1, 0xf, [{@empty, 0x1000}, {@broadcast, 0xca7}, {@local, 0x7fffffff}, {@empty, 0x3}, {@multicast2, 0x81}, {@remote, 0x3}, {@multicast1, 0x1}, {@multicast2, 0x7}, {@rand_addr=0x64010102, 0x8001}]}, @ssrr={0x89, 0x7, 0x5b, [@local]}, @timestamp_prespec={0x44, 0x1c, 0xba, 0x3, 0x5, [{@multicast1}, {@multicast1, 0x6}, {@multicast1, 0x1b4}]}, @generic={0x7, 0xc, "c934e435792a151f1699"}, @timestamp_addr={0x44, 0x24, 0x3e, 0x1, 0x9, [{@local, 0x400}, {@local, 0x3507}, {@broadcast, 0x21}, {@remote, 0x4}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003440)={'team0\x00', <r6=>0x0})
clock_gettime(0x0, &(0x7f0000006fc0)={<r7=>0x0, <r8=>0x0})
recvmmsg(r1, &(0x7f0000006e80)=[{{&(0x7f0000004840)=@pppoe, 0x80, &(0x7f0000004b80)=[{&(0x7f00000048c0)=""/90, 0x5a}, {&(0x7f0000004940)=""/112, 0x70}, {&(0x7f00000049c0)=""/208, 0xd0}, {&(0x7f0000004ac0)=""/143, 0x8f}], 0x4}, 0x9}, {{&(0x7f0000004bc0)=@xdp={0x2c, 0x0, <r9=>0x0}, 0x80, &(0x7f0000004d00)=[{&(0x7f0000004c40)=""/185, 0xb9}], 0x1, &(0x7f0000004d40)=""/105, 0x69}, 0x9}, {{&(0x7f0000004dc0)=@tipc=@id, 0x80, &(0x7f0000005280)=[{&(0x7f0000004e40)=""/62, 0x3e}, {&(0x7f0000004e80)=""/115, 0x73}, {&(0x7f0000004f00)=""/110, 0x6e}, {&(0x7f0000004f80)=""/51, 0x33}, {&(0x7f0000004fc0)=""/154, 0x9a}, {&(0x7f0000005080)}, {&(0x7f00000050c0)=""/164, 0xa4}, {&(0x7f0000005180)=""/237, 0xed}], 0x8, &(0x7f0000005300)=""/222, 0xde}, 0x3}, {{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f0000005400)=""/207, 0xcf}, {&(0x7f0000005500)=""/112, 0x70}, {&(0x7f0000005580)=""/75, 0x4b}, {&(0x7f0000005600)=""/176, 0xb0}, {&(0x7f00000056c0)=""/159, 0x9f}, {&(0x7f0000005780)=""/4096, 0x1000}], 0x6, &(0x7f0000006800)=""/65, 0x41}, 0x800}, {{&(0x7f0000006880)=@un=@abs, 0x80, &(0x7f0000006d00)=[{&(0x7f0000006900)=""/176, 0xb0}, {&(0x7f00000069c0)=""/171, 0xab}, {&(0x7f0000006a80)=""/24, 0x18}, {&(0x7f0000006ac0)=""/124, 0x7c}, {&(0x7f0000006b40)=""/13, 0xd}, {&(0x7f0000006b80)=""/89, 0x59}, {&(0x7f0000006c00)=""/235, 0xeb}], 0x7, &(0x7f0000006d80)=""/199, 0xc7}, 0x2}], 0x5, 0x10122, &(0x7f0000007000)={r7, r8+10000000})
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000007300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000072c0)={&(0x7f0000007040)={0x250, 0x0, 0x897, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x81614e00efc13e97}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x24008880}, 0x4008004)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000007480)={&(0x7f0000007340), 0xc, &(0x7f0000007440)={&(0x7f00000073c0)={0x4c, r11, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x50)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r12, &(0x7f0000007580)={&(0x7f00000074c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007540)={&(0x7f0000007500)={0x24, r11, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x40000)
r13 = openat$nvram(0xffffffffffffff9c, &(0x7f0000008b00), 0x812700, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r13, &(0x7f0000008c00)={&(0x7f0000008b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000008bc0)={&(0x7f0000008b80)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5b}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008801}, 0x81)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000008c80), r10)
sendmsg$NLBL_CALIPSO_C_LIST(r14, &(0x7f0000008d40)={&(0x7f0000008c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000008d00)={&(0x7f0000008cc0)={0x1c, r15, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f000000a040))

07:11:38 executing program 5:
prctl$PR_SET_FPEMU(0xa, 0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000000), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0xc47176f2fbfd16c1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42}, 0x20040000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x604, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8880)
syz_genetlink_get_family_id$fou(&(0x7f0000000280), r0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x8c002, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000300)=@v1={0x0, @adiantum, 0x0, @auto="c17cce6fffe44762"})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000340))
sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x810, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20044080)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044000}, 0x4)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000600), 0x40002, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r6)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x4942c1, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r7, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_complete(0x0)

07:11:38 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x58, 0x0, 0x200, 0x1, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4b8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbe4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="6ac5fb1d11ea"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x202c810)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000023c0), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x3c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010)
r3 = socket(0x23, 0x2, 0x7)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000002500), r1)
sendmsg$FOU_CMD_GET(r3, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x70, r4, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xb}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40040}, 0x4044051)
sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x30, 0x0, 0xc04, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}]}, 0x30}}, 0x4000040)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000002740))
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000027c0), r3)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000028c0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x58, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1b}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002940), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x44, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\\$\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5e4cef9db23e1a37}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x81)
syz_genetlink_get_family_id$nbd(&(0x7f0000002a80), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002b00)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x24048000)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x3c, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004015}, 0x48000)
syz_genetlink_get_family_id$team(&(0x7f0000002d00), r0)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d80)={0x68, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}]}, 0x68}}, 0x24000880)

07:11:38 executing program 6:
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x4, 0x0, @auto=[0x35, 0x24, 0x27, 0x13, 0x3c, 0x1a, 0x13, 0x30]}, 0x10, 0xfffffffffffffffc)
add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)={0x1, 0x0, @a}, 0x48, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_io_uring_complete(0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x280400, 0x0)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x476a}]}, 0x64}, 0x1, 0x0, 0x0, 0x44084}, 0x26040015)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000003c0)={r3, 0x1, r2, 0x91a, 0x80000})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x420, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x34}}, 0x4048080)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x29, 0x4e, 0x0, 0x0, 0x40, @remote, @private2, 0x8000, 0x80, 0x8, 0x3}})
socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000640)={0x2, &(0x7f0000000600)=[{0x8, 0x3, 0x0, 0x80000001}, {0x7fff, 0x2, 0x3f, 0xdd7}]})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000680)=r3)
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}]}, 0x68}, 0x1, 0x0, 0x0, 0x40840}, 0x20040005)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x25}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x404c085)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

[  117.754032] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  117.758006] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  117.762339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  117.768906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  117.774598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  117.886609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  117.896199] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  117.903763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  117.906220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  117.917904] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  117.922622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  117.928050] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  117.932553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  117.949715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  117.972695] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  118.033243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  118.037930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  118.040039] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  118.053403] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  118.057070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  118.068920] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  118.073421] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  118.075716] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  118.077264] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  118.088632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  118.092579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  118.103029] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  118.105012] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  118.108332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  118.114382] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  118.118175] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  118.135587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  118.140480] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  118.145632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  118.148650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  118.201343] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  118.219503] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  118.247061] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  118.289314] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  118.323940] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  119.835615] Bluetooth: hci0: command tx timeout
[  119.963035] Bluetooth: hci1: command tx timeout
[  120.027136] Bluetooth: hci2: command tx timeout
[  120.221034] Bluetooth: hci4: command tx timeout
[  120.283059] Bluetooth: hci6: command tx timeout
[  120.283121] Bluetooth: hci5: command tx timeout
[  120.285036] Bluetooth: hci3: command tx timeout
[  120.411426] Bluetooth: hci7: command tx timeout
[  121.883918] Bluetooth: hci0: command tx timeout
[  122.011504] Bluetooth: hci1: command tx timeout
[  122.075076] Bluetooth: hci2: command tx timeout
[  122.267755] Bluetooth: hci4: command tx timeout
[  122.331234] Bluetooth: hci3: command tx timeout
[  122.332209] Bluetooth: hci5: command tx timeout
[  122.332875] Bluetooth: hci6: command tx timeout
[  122.459103] Bluetooth: hci7: command tx timeout
[  123.930872] Bluetooth: hci0: command tx timeout
[  124.058855] Bluetooth: hci1: command tx timeout
[  124.125069] Bluetooth: hci2: command tx timeout
[  124.314855] Bluetooth: hci4: command tx timeout
[  124.378861] Bluetooth: hci6: command tx timeout
[  124.379952] Bluetooth: hci3: command tx timeout
[  124.380007] Bluetooth: hci5: command tx timeout
[  124.507210] Bluetooth: hci7: command tx timeout
[  125.979008] Bluetooth: hci0: command tx timeout
[  126.107876] Bluetooth: hci1: command tx timeout
[  126.170949] Bluetooth: hci2: command tx timeout
[  126.363052] Bluetooth: hci4: command tx timeout
[  126.427185] Bluetooth: hci5: command tx timeout
[  126.428098] Bluetooth: hci3: command tx timeout
[  126.428521] Bluetooth: hci6: command tx timeout
[  126.554966] Bluetooth: hci7: command tx timeout
[  177.671138] syz-executor.1 (294) used greatest stack depth: 25024 bytes left
[  177.792858] syz-executor.4 (291) used greatest stack depth: 23800 bytes left
[  180.462684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  180.465842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  180.468451] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  180.477450] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  180.483476] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  180.551868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  180.556314] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  180.558552] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  180.565959] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  180.572236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  180.609548] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  180.612505] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  180.614972] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  180.622323] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  180.633401] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  180.683151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  180.701015] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  180.702962] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  180.711300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  180.720375] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  180.736384] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  180.744035] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  180.777482] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  180.798428] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  180.800686] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  180.802526] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  180.807131] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  180.810003] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  180.815218] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  180.818282] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  180.831606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  180.870575] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  180.872038] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  180.904117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  180.938351] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  181.059199] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  181.081366] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  181.113297] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  181.169250] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  181.179480] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  182.555022] Bluetooth: hci0: command tx timeout
[  182.618995] Bluetooth: hci1: command tx timeout
[  182.682931] Bluetooth: hci2: command tx timeout
[  182.939437] Bluetooth: hci6: command tx timeout
[  183.066888] Bluetooth: hci3: command tx timeout
[  183.131049] Bluetooth: hci4: command tx timeout
[  183.322929] Bluetooth: hci7: command tx timeout
[  183.322992] Bluetooth: hci5: command tx timeout
[  184.602952] Bluetooth: hci0: command tx timeout
[  184.667645] Bluetooth: hci1: command tx timeout
[  184.731331] Bluetooth: hci2: command tx timeout
[  184.987370] Bluetooth: hci6: command tx timeout
[  185.116887] Bluetooth: hci3: command tx timeout
[  185.179471] Bluetooth: hci4: command tx timeout
[  185.372154] Bluetooth: hci5: command tx timeout
[  185.372228] Bluetooth: hci7: command tx timeout
[  186.651136] Bluetooth: hci0: command tx timeout
[  186.714876] Bluetooth: hci1: command tx timeout
[  186.779089] Bluetooth: hci2: command tx timeout
[  187.035038] Bluetooth: hci6: command tx timeout
[  187.164812] Bluetooth: hci3: command tx timeout
[  187.227173] Bluetooth: hci4: command tx timeout
[  187.418874] Bluetooth: hci7: command tx timeout
[  187.420056] Bluetooth: hci5: command tx timeout
[  188.698857] Bluetooth: hci0: command tx timeout
[  188.762894] Bluetooth: hci1: command tx timeout
[  188.826991] Bluetooth: hci2: command tx timeout
[  189.083114] Bluetooth: hci6: command tx timeout
[  189.211929] Bluetooth: hci3: command tx timeout
[  189.275820] Bluetooth: hci4: command tx timeout
[  189.466916] Bluetooth: hci5: command tx timeout
[  189.467403] Bluetooth: hci7: command tx timeout
[  242.351599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  242.355446] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  242.361413] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  242.371187] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  242.383342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  242.482878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  242.493150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  242.496642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  242.510334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  242.521284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  242.765152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  242.777485] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  242.791629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  242.824653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  242.829042] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  242.835903] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  242.841895] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  242.843694] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  242.857365] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  242.875609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  242.880214] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  242.900690] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  242.901059] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  242.910698] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  242.913806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  242.929812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  242.931492] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  242.940235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  242.942220] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  242.945709] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  242.954140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  242.980458] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  242.990629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  242.994107] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  243.000397] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  243.037405] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  243.039152] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  243.045155] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  243.045605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  243.081030] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  244.443155] Bluetooth: hci0: command tx timeout
[  244.570914] Bluetooth: hci1: command tx timeout
[  245.019027] Bluetooth: hci4: command tx timeout
[  245.020095] Bluetooth: hci2: command tx timeout
[  245.146998] Bluetooth: hci6: command tx timeout
[  245.275134] Bluetooth: hci3: command tx timeout
[  245.338859] Bluetooth: hci7: command tx timeout
[  245.339896] Bluetooth: hci5: command tx timeout
[  246.491889] Bluetooth: hci0: command tx timeout
[  246.620804] Bluetooth: hci1: command tx timeout
[  247.066875] Bluetooth: hci2: command tx timeout
[  247.067358] Bluetooth: hci4: command tx timeout
[  247.195325] Bluetooth: hci6: command tx timeout
[  247.323314] Bluetooth: hci3: command tx timeout
[  247.387405] Bluetooth: hci5: command tx timeout
[  247.387429] Bluetooth: hci7: command tx timeout
[  248.538854] Bluetooth: hci0: command tx timeout
[  248.667200] Bluetooth: hci1: command tx timeout
[  249.115884] Bluetooth: hci2: command tx timeout
[  249.118039] Bluetooth: hci4: command tx timeout
[  249.244055] Bluetooth: hci6: command tx timeout
[  249.372011] Bluetooth: hci3: command tx timeout
[  249.434938] Bluetooth: hci5: command tx timeout
[  249.435381] Bluetooth: hci7: command tx timeout
[  250.586980] Bluetooth: hci0: command tx timeout
[  250.715425] Bluetooth: hci1: command tx timeout
[  251.163189] Bluetooth: hci4: command tx timeout
[  251.163215] Bluetooth: hci2: command tx timeout
[  251.290882] Bluetooth: hci6: command tx timeout
[  251.418875] Bluetooth: hci3: command tx timeout
[  251.482874] Bluetooth: hci7: command tx timeout
[  251.483061] Bluetooth: hci5: command tx timeout
[  304.820331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  304.828404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  304.830910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  304.840748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  304.845404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  304.946700] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  304.957297] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  304.969121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  304.978165] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  304.989033] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  305.224359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  305.235517] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  305.249412] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  305.253326] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  305.260542] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  305.263261] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  305.268150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  305.291394] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  305.292157] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  305.294739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  305.300458] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  305.302267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  305.325467] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  305.368381] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  305.374483] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  305.403872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  305.422694] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  305.431563] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  305.435458] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  305.446043] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  305.461075] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  305.474590] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  305.483555] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  305.485940] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  305.508105] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  305.652997] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  305.664668] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  305.690352] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  305.701485] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  305.705686] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  306.908962] Bluetooth: hci0: command tx timeout
[  307.034905] Bluetooth: hci1: command tx timeout
[  307.355923] Bluetooth: hci2: command tx timeout
[  307.482884] Bluetooth: hci4: command tx timeout
[  307.556621] Bluetooth: hci5: command tx timeout
[  307.612489] Bluetooth: hci6: command tx timeout
[  307.674868] Bluetooth: hci3: command tx timeout
[  307.738849] Bluetooth: hci7: command tx timeout
[  308.956159] Bluetooth: hci0: command tx timeout
[  309.084012] Bluetooth: hci1: command tx timeout
[  309.404808] Bluetooth: hci2: command tx timeout
[  309.531968] Bluetooth: hci4: command tx timeout
[  309.596094] Bluetooth: hci5: command tx timeout
[  309.659901] Bluetooth: hci6: command tx timeout
[  309.725856] Bluetooth: hci3: command tx timeout
[  309.787902] Bluetooth: hci7: command tx timeout
[  311.003890] Bluetooth: hci0: command tx timeout
[  311.132078] Bluetooth: hci1: command tx timeout
[  311.453701] Bluetooth: hci2: command tx timeout
[  311.580830] Bluetooth: hci4: command tx timeout
[  311.643885] Bluetooth: hci5: command tx timeout
[  311.706865] Bluetooth: hci6: command tx timeout
[  311.771875] Bluetooth: hci3: command tx timeout
[  311.835191] Bluetooth: hci7: command tx timeout
[  313.051142] Bluetooth: hci0: command tx timeout
[  313.178840] Bluetooth: hci1: command tx timeout
[  313.499914] Bluetooth: hci2: command tx timeout
[  313.626846] Bluetooth: hci4: command tx timeout
[  313.690866] Bluetooth: hci5: command tx timeout
[  313.755002] Bluetooth: hci6: command tx timeout
[  313.820064] Bluetooth: hci3: command tx timeout
[  313.884285] Bluetooth: hci7: command tx timeout
[  367.029026] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  367.034466] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  367.037879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  367.045005] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  367.050278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  367.152196] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  367.159649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  367.165312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  367.183292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  367.187195] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  367.413365] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  367.416924] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  367.424357] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  367.433575] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  367.436937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  367.446329] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  367.457289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  367.463904] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  367.465216] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  367.481369] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  367.487278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  367.495340] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  367.503817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  367.505622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  367.520090] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  367.526363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  367.542557] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  367.546931] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  367.564032] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  367.564377] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  367.568073] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  367.574214] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  367.576492] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  367.585938] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  367.627704] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  367.633135] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  367.648188] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  367.654371] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  367.666109] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  367.677822] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  369.116059] Bluetooth: hci0: command tx timeout
[  369.244910] Bluetooth: hci1: command tx timeout
[  369.626880] Bluetooth: hci3: command tx timeout
[  369.626967] Bluetooth: hci4: command tx timeout
[  369.693824] Bluetooth: hci2: command tx timeout
[  369.756088] Bluetooth: hci5: command tx timeout
[  369.818855] Bluetooth: hci7: command tx timeout
[  369.882885] Bluetooth: hci6: command tx timeout
[  371.163887] Bluetooth: hci0: command tx timeout
[  371.292820] Bluetooth: hci1: command tx timeout
[  371.675008] Bluetooth: hci3: command tx timeout
[  371.675510] Bluetooth: hci4: command tx timeout
[  371.739109] Bluetooth: hci2: command tx timeout
[  371.802868] Bluetooth: hci5: command tx timeout
[  371.866891] Bluetooth: hci7: command tx timeout
[  371.932213] Bluetooth: hci6: command tx timeout
[  373.210865] Bluetooth: hci0: command tx timeout
[  373.339130] Bluetooth: hci1: command tx timeout
[  373.722951] Bluetooth: hci4: command tx timeout
[  373.723026] Bluetooth: hci3: command tx timeout
[  373.788800] Bluetooth: hci2: command tx timeout
[  373.852810] Bluetooth: hci5: command tx timeout
[  373.914997] Bluetooth: hci7: command tx timeout
[  373.979871] Bluetooth: hci6: command tx timeout
[  375.258942] Bluetooth: hci0: command tx timeout
[  375.387002] Bluetooth: hci1: command tx timeout
[  375.772128] Bluetooth: hci4: command tx timeout
[  375.772290] Bluetooth: hci3: command tx timeout
[  375.835857] Bluetooth: hci2: command tx timeout
[  375.900038] Bluetooth: hci5: command tx timeout
[  375.964817] Bluetooth: hci7: command tx timeout
[  376.027513] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
07:16:43  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000005 RCX=ffffffff84a899c5 RDX=ffff88802b41b780
RSI=0000000000000004 RDI=0000000000000005 RBP=ffffffff852e96e0 RSP=ffff88802bcf76e0
R8 =0000000000000000 R9 =fffffbfff0c81d82 R10=0000000000000003 R11=0000000000000000
R12=0000000000000003 R13=0000000000000005 R14=000000000000000a R15=ffff88802bcf7948
RIP=ffffffff8172e747 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd97ffca710 CR3=00000000255a6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=00000000ffffffff RBX=0000000000000000 RCX=b30f96e79d24f230 RDX=0000000019d6cd52
RSI=000000002e6343c6 RDI=00000000483a1118 RBP=ffffffff85c1bac0 RSP=ffff8880360971f8
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=00000000000224e3
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200
RIP=ffffffff815185b3 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055df9d974080 CR3=000000000dcde000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000