Warning: Permanently added '[localhost]:8326' (ECDSA) to the list of known hosts.
2025/06/09 01:48:00 fuzzer started
2025/06/09 01:48:00 dialing manager at localhost:40003
syzkaller login: [  108.205051] cgroup: Unknown subsys name 'net'
[  108.334075] cgroup: Unknown subsys name 'cpuset'
[  108.377125] cgroup: Unknown subsys name 'rlimit'
2025/06/09 01:48:24 syscalls: 200
2025/06/09 01:48:24 code coverage: enabled
2025/06/09 01:48:24 comparison tracing: enabled
2025/06/09 01:48:24 extra coverage: enabled
2025/06/09 01:48:24 setuid sandbox: enabled
2025/06/09 01:48:24 namespace sandbox: enabled
2025/06/09 01:48:24 Android sandbox: enabled
2025/06/09 01:48:24 fault injection: enabled
2025/06/09 01:48:24 leak checking: enabled
2025/06/09 01:48:24 net packet injection: enabled
2025/06/09 01:48:24 net device setup: enabled
2025/06/09 01:48:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/09 01:48:24 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/09 01:48:24 USB emulation: enabled
2025/06/09 01:48:24 hci packet injection: enabled
2025/06/09 01:48:24 wifi device emulation: enabled
2025/06/09 01:48:24 802.15.4 emulation: enabled
2025/06/09 01:48:24 fetching corpus: 0, signal 0/0 (executing program)
2025/06/09 01:48:26 starting 8 fuzzer processes
01:48:26 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0x1ff, 0x12)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x50000, 0x0)
r3 = io_uring_setup(0x30a3, &(0x7f0000000100)={0x0, 0x2e3, 0x8, 0x1, 0x24a, 0x0, r2})
r4 = pidfd_getfd(r1, r3, 0x0)
ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000180))
ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381)
ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f00000001c0)=""/10)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00')
ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000240)=0x1)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid_for_children\x00')
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000002c0))
io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000300)=r1, 0x1)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000340)={"5c0f0e9fb08dfa1561f1426b6000b256", 0x0, 0x0, {0x3, 0x4}, {0x7, 0x7ff}, 0x1, [0x40, 0x100, 0x6, 0x39b, 0x4, 0x2, 0x100000001, 0xd36, 0x5, 0x7c, 0x1, 0x0, 0x4, 0x100000000000000, 0x7, 0x4]})
bind$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
r6 = syz_open_dev$hidraw(&(0x7f0000000580), 0x4, 0x200)
read$hidraw(r6, &(0x7f00000005c0)=""/50, 0x32)

01:48:26 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x148024000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000000)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x200040c0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x80100, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x28044011}, 0x20000000)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x11c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x992}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x466}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000)
pipe2$9p(&(0x7f0000000740), 0x0)
write$P9_RLOPEN(r3, &(0x7f0000000780)={0x18, 0xd, 0x2, {{0x0, 0x0, 0x1}, 0x3f}}, 0x18)
r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000800), r0)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r5, 0x800, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4008000)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x200, 0x70bd2c, 0x1, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80045)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40), r3)
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x4084)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000c40), r0)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x141)

01:48:26 executing program 2:
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/98, &(0x7f0000000080)=0x62)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000100))
getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r1=>0x0)
write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x4, {0x2, 0x3, 0x5}, 0x84, 0xee01, r1, 0xfffffffffffff000, 0x7, 0x2, 0x8, 0x4, 0x10001, 0x83, 0x100000000, 0x6, 0x3, 0x4, 0x5, 0xfffffffffffffffb, 0x80000001, 0x100}}, 0xa0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000002c0))
r2 = pidfd_getfd(r0, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x204802, 0x0)
sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x128, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x20004000)
r4 = socket(0x23, 0x6, 0x2)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x428}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0x800)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r2)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x783}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x8000)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000007c0)={0x7, 0x7b, 0x1}, 0x7)
r6 = perf_event_open$cgroup(&(0x7f0000000840)={0x1, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x9, 0x102, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000800), 0xe}, 0x4a021, 0x393, 0x99, 0x9, 0x81f, 0x2, 0x4, 0x0, 0x80000000, 0x0, 0x10001}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f00000008c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, r7, 0x401, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}}, 0x4814)

01:48:26 executing program 3:
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x44884)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6baeccd8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r0=>0x0})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x70}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x8001)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480), 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1c0, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x71dd}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x101}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x20}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x7}}]}, 0x1c0}}, 0xc000800)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x81)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040051)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4004005)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xdf86}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0xc0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x391}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x3c}}, 0x8000)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x11c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x41}, 0x4004001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_DEL(r6, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x18, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x20044001)

[  133.162190] audit: type=1400 audit(1749433706.182:7): avc:  denied  { execmem } for  pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
01:48:26 executing program 4:
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x801c0, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x44, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x62e}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2a37a0af4ae182e}, 0x8010)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x4c, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1d589d5a}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x91a}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4083}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x4c}}, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x2c, 0x0, 0xa00, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x69b}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001ac0)={0x19c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x200}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x56}, {0x6}, {0x5}, {0x6}, {0x8, 0xb, 0x39f8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xc968}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x41}, {0x5}, {0x6, 0x11, 0x100}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xef7}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x6}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001f40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d40)={0x188, 0x0, 0x105, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8001}, {0x8, 0x13, 0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffff00}, {0x6, 0x11, 0x201}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8000}, {0x8, 0x13, 0x7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x92f}, {0x8, 0x13, 0xdc9a}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x40}, {0x8, 0x13, 0x9}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0xaf}, {0x8, 0x13, 0x200}, {0x5, 0x14, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x8000}, 0x8804)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001f80)={'batadv_slave_0\x00', <r4=>0x0})
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000001fc0))
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002000), 0x101200, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002080), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8002}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x54, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x48e}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0xc800)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1)
openat$cgroup_devices(r6, &(0x7f00000021c0)='devices.deny\x00', 0x2, 0x0)
socketpair(0x9, 0xa, 0xdf2, &(0x7f0000002200)={<r8=>0xffffffffffffffff})
sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000002400)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000023c0)={&(0x7f0000002280)={0x13c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb65f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x36}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x48041}, 0x233c3281d0d1fefc)

01:48:26 executing program 5:
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x10, 0x1, 0x6}, 0x9}}, 0x18)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x7, 0x1, {{0x1, '-'}, 0xf3f6}}, 0xe)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x851)
io_uring_setup(0x1b4a, &(0x7f0000000240)={0x0, 0xfe4f, 0x8, 0x1, 0xf})
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000100)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x10000, 0x0)
write$P9_RXATTRCREATE(r1, &(0x7f0000000540)={0x7, 0x21, 0x2}, 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000}, 0x18001)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000680), 0x200000, 0x0)
waitid$P_PIDFD(0x3, r3, 0x0, 0x8, 0x0)
process_mrelease(r3, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000006c0)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x6f4d283545dada16, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4040845)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r5, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2400c840}, 0x880)
syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r1)

01:48:26 executing program 6:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x800, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20004005)
r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa31}}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4000040)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000080)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x40010)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000980))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000a00)={0x0, <r6=>0x0})
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, r3, 0x0, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c000}, 0x8000000)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000bc0), 0x20001, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000b80), r7)
waitid$P_PIDFD(0x3, r7, &(0x7f0000000c00), 0x2, &(0x7f0000000c80))
connect$bt_sco(r7, &(0x7f0000000d40), 0x8)
write$cgroup_int(r5, &(0x7f0000000d80)=0xfffffffffffffff7, 0x12)

01:48:26 executing program 7:
socketpair(0x1d, 0x3, 0x3, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)={0x444, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x51fb}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x3b8, 0x8, 0x0, 0x1, [{0x1b8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x128, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6a030ccd161468fa9e740265d079bbf8ea34b5b83ec25504dd511465e3dfbee5"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x919}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x1d8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x81, @mcast1, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x13c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8e}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x444}, 0x1, 0x0, 0x0, 0x10}, 0x1)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x805)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x40c2, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r5, 0x490a55f942a24072, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x6000820}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x34, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "821a741f710d1fa115c986077892be0eadee24e57289ddf7af5852496ee2126f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000004}, 0x15)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000009c0), r4)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x80}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x9}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x40041)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x40)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffe}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x86}, 0x40)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), r7)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, r8, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x408c0}, 0x4008000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_GET_DEVICE(r10, &(0x7f0000001240)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001200)={&(0x7f0000000f40)={0x2ac, r6, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x298, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xd8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @private1, 0x380}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8501054cd433ae61f6d973aad3cde948be54b77159a41283dbd94e3a903de94a"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffe1}, @WGPEER_A_FLAGS={0x8}]}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x65}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0xfc, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}]}]}]}, 0x2ac}}, 0x0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c044}, 0x24040880)

[  134.644419] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  134.649214] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  134.659666] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  134.680768] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  134.683952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  134.687386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  134.689978] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  134.695823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  134.704110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  134.709031] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  134.741543] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.755116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.762535] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  134.769540] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  134.772708] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  134.778299] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  134.784967] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  134.807110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  134.826029] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  134.836804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  134.839552] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.842778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  134.861711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  134.865762] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  134.878640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  134.881017] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  134.882993] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  134.885424] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  134.889720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  134.893672] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  134.898697] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  134.905694] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  134.926067] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  134.938614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  134.951682] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  134.956420] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  134.964712] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  134.992571] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  135.018807] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  135.031751] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  136.768627] Bluetooth: hci2: command tx timeout
[  136.832593] Bluetooth: hci0: command tx timeout
[  136.833154] Bluetooth: hci4: command tx timeout
[  136.960402] Bluetooth: hci1: command tx timeout
[  137.024446] Bluetooth: hci6: command tx timeout
[  137.025064] Bluetooth: hci5: command tx timeout
[  137.088300] Bluetooth: hci7: command tx timeout
[  137.088871] Bluetooth: hci3: command tx timeout
[  138.816406] Bluetooth: hci2: command tx timeout
[  138.882618] Bluetooth: hci0: command tx timeout
[  138.882899] Bluetooth: hci4: command tx timeout
[  139.009286] Bluetooth: hci1: command tx timeout
[  139.072729] Bluetooth: hci6: command tx timeout
[  139.073707] Bluetooth: hci5: command tx timeout
[  139.136293] Bluetooth: hci3: command tx timeout
[  139.136340] Bluetooth: hci7: command tx timeout
[  140.865748] Bluetooth: hci2: command tx timeout
[  140.928297] Bluetooth: hci4: command tx timeout
[  140.930255] Bluetooth: hci0: command tx timeout
[  141.056300] Bluetooth: hci1: command tx timeout
[  141.121287] Bluetooth: hci6: command tx timeout
[  141.121302] Bluetooth: hci5: command tx timeout
[  141.186504] Bluetooth: hci3: command tx timeout
[  141.186750] Bluetooth: hci7: command tx timeout
[  142.913634] Bluetooth: hci2: command tx timeout
[  142.976339] Bluetooth: hci0: command tx timeout
[  142.976369] Bluetooth: hci4: command tx timeout
[  143.104433] Bluetooth: hci1: command tx timeout
[  143.168325] Bluetooth: hci6: command tx timeout
[  143.168366] Bluetooth: hci5: command tx timeout
[  143.232465] Bluetooth: hci7: command tx timeout
[  143.232938] Bluetooth: hci3: command tx timeout
[  194.654619] syz-executor.6 (298) used greatest stack depth: 24544 bytes left
[  197.396940] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  197.400374] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  197.412269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  197.416580] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  197.423818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  197.427779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  197.435833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  197.439422] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  197.480499] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  197.486414] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  197.538331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  197.542774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  197.544997] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  197.547498] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  197.549458] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  197.553585] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  197.561926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  197.563878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  197.574739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  197.576016] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  197.667780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  197.678917] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  197.682990] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  197.706760] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  197.720506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  197.850595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  197.863992] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  197.891569] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  197.906528] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  197.913007] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  197.918158] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  197.924905] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  197.931958] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  197.934984] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  197.940377] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  197.942106] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  197.945654] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  197.951724] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  197.999549] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  198.029362] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  199.488835] Bluetooth: hci0: command tx timeout
[  199.681589] Bluetooth: hci1: command tx timeout
[  199.682610] Bluetooth: hci3: command tx timeout
[  199.683125] Bluetooth: hci2: command tx timeout
[  199.809418] Bluetooth: hci4: command tx timeout
[  200.000353] Bluetooth: hci5: command tx timeout
[  200.128374] Bluetooth: hci6: command tx timeout
[  200.129028] Bluetooth: hci7: command tx timeout
[  201.538433] Bluetooth: hci0: command tx timeout
[  201.728468] Bluetooth: hci3: command tx timeout
[  201.729386] Bluetooth: hci2: command tx timeout
[  201.729814] Bluetooth: hci1: command tx timeout
[  201.857350] Bluetooth: hci4: command tx timeout
[  202.049654] Bluetooth: hci5: command tx timeout
[  202.177658] Bluetooth: hci7: command tx timeout
[  202.178148] Bluetooth: hci6: command tx timeout
[  203.586625] Bluetooth: hci0: command tx timeout
[  203.777701] Bluetooth: hci1: command tx timeout
[  203.778173] Bluetooth: hci2: command tx timeout
[  203.779034] Bluetooth: hci3: command tx timeout
[  203.905315] Bluetooth: hci4: command tx timeout
[  204.097334] Bluetooth: hci5: command tx timeout
[  204.225869] Bluetooth: hci6: command tx timeout
[  204.225891] Bluetooth: hci7: command tx timeout
[  205.632306] Bluetooth: hci0: command tx timeout
[  205.826286] Bluetooth: hci3: command tx timeout
[  205.826328] Bluetooth: hci2: command tx timeout
[  205.826748] Bluetooth: hci1: command tx timeout
[  205.952396] Bluetooth: hci4: command tx timeout
[  206.145297] Bluetooth: hci5: command tx timeout
[  206.272310] Bluetooth: hci7: command tx timeout
[  206.272341] Bluetooth: hci6: command tx timeout
[  259.473364] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  259.479920] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  259.483166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  259.499976] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  259.511527] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  259.637882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  259.643868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  259.646121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  259.671701] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  259.671902] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  259.676052] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  259.682676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  259.697723] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  259.704580] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  259.708289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  259.909388] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  259.920980] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  259.942841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  259.964003] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  259.965790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  259.976263] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  259.977544] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  259.988068] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  260.023348] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  260.027011] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  260.168140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  260.175889] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  260.180419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  260.201670] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  260.205607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  260.518030] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  260.543492] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  260.566113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  260.573560] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  260.619776] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  260.635271] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  260.675462] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  260.711545] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  260.719713] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  260.747495] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  261.570352] Bluetooth: hci0: command tx timeout
[  261.761574] Bluetooth: hci2: command tx timeout
[  261.763250] Bluetooth: hci1: command tx timeout
[  262.081463] Bluetooth: hci4: command tx timeout
[  262.337459] Bluetooth: hci3: command tx timeout
[  262.529338] Bluetooth: hci5: command tx timeout
[  262.849583] Bluetooth: hci7: command tx timeout
[  262.912538] Bluetooth: hci6: command tx timeout
[  263.618296] Bluetooth: hci0: command tx timeout
[  263.808391] Bluetooth: hci1: command tx timeout
[  263.808875] Bluetooth: hci2: command tx timeout
[  264.131276] Bluetooth: hci4: command tx timeout
[  264.385299] Bluetooth: hci3: command tx timeout
[  264.576470] Bluetooth: hci5: command tx timeout
[  264.897635] Bluetooth: hci7: command tx timeout
[  264.960540] Bluetooth: hci6: command tx timeout
[  265.665291] Bluetooth: hci0: command tx timeout
[  265.856328] Bluetooth: hci1: command tx timeout
[  265.856780] Bluetooth: hci2: command tx timeout
[  266.177305] Bluetooth: hci4: command tx timeout
[  266.432341] Bluetooth: hci3: command tx timeout
[  266.624647] Bluetooth: hci5: command tx timeout
[  266.945442] Bluetooth: hci7: command tx timeout
[  267.011122] Bluetooth: hci6: command tx timeout
[  267.712727] Bluetooth: hci0: command tx timeout
[  267.905354] Bluetooth: hci1: command tx timeout
[  267.905810] Bluetooth: hci2: command tx timeout
[  268.226329] Bluetooth: hci4: command tx timeout
[  268.481371] Bluetooth: hci3: command tx timeout
[  268.672560] Bluetooth: hci5: command tx timeout
[  268.993456] Bluetooth: hci7: command tx timeout
[  269.057705] Bluetooth: hci6: command tx timeout
[  322.138025] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  322.141056] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  322.148778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  322.156203] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  322.162066] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  322.266758] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  322.272862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  322.276785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  322.286867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  322.291833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  322.396720] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  322.410080] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  322.424945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  322.432041] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  322.435835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  322.458076] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  322.472387] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  322.482880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  322.489881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  322.492921] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  322.593878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  322.597802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  322.601753] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  322.615665] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  322.624047] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  322.716332] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  322.737931] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  322.758633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  322.779548] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  322.801935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  322.808416] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  322.827915] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  322.850920] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  322.861533] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  322.864621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  322.873711] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  322.881119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  322.900507] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  322.906013] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  322.915460] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  324.224438] Bluetooth: hci0: command tx timeout
[  324.352898] Bluetooth: hci1: command tx timeout
[  324.608497] Bluetooth: hci3: command tx timeout
[  324.608808] Bluetooth: hci2: command tx timeout
[  324.672846] Bluetooth: hci4: command tx timeout
[  324.992461] Bluetooth: hci5: command tx timeout
[  324.992584] Bluetooth: hci6: command tx timeout
[  325.056704] Bluetooth: hci7: command tx timeout
[  326.273357] Bluetooth: hci0: command tx timeout
[  326.400697] Bluetooth: hci1: command tx timeout
[  326.656356] Bluetooth: hci2: command tx timeout
[  326.656843] Bluetooth: hci3: command tx timeout
[  326.720367] Bluetooth: hci4: command tx timeout
[  327.040298] Bluetooth: hci5: command tx timeout
[  327.042291] Bluetooth: hci6: command tx timeout
[  327.105465] Bluetooth: hci7: command tx timeout
[  328.321796] Bluetooth: hci0: command tx timeout
[  328.449530] Bluetooth: hci1: command tx timeout
[  328.706407] Bluetooth: hci2: command tx timeout
[  328.706429] Bluetooth: hci3: command tx timeout
[  328.769620] Bluetooth: hci4: command tx timeout
[  329.088471] Bluetooth: hci6: command tx timeout
[  329.088574] Bluetooth: hci5: command tx timeout
[  329.153275] Bluetooth: hci7: command tx timeout
[  330.369654] Bluetooth: hci0: command tx timeout
[  330.496551] Bluetooth: hci1: command tx timeout
[  330.752294] Bluetooth: hci2: command tx timeout
[  330.752318] Bluetooth: hci3: command tx timeout
[  330.817531] Bluetooth: hci4: command tx timeout
[  331.136379] Bluetooth: hci5: command tx timeout
[  331.137456] Bluetooth: hci6: command tx timeout
[  331.201766] Bluetooth: hci7: command tx timeout
[  384.919038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  384.923090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  384.926696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  384.934032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  384.945798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  384.991289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  384.998508] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  384.998638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  385.002728] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  385.007048] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  385.014457] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  385.020925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  385.026812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  385.061976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  385.073180] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  385.205852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  385.226940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  385.257986] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  385.259840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  385.266790] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  385.280912] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  385.285879] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  385.287330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  385.290930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  385.294391] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  385.300847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  385.306152] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  385.312853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  385.321779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  385.325144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  385.330726] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  385.332481] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  385.339742] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  385.344990] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  385.351496] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  385.383185] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  385.449344] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  385.462954] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  385.501827] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  385.522183] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  387.010149] Bluetooth: hci0: command tx timeout
[  387.072498] Bluetooth: hci1: command tx timeout
[  387.136538] Bluetooth: hci2: command tx timeout
[  387.456343] Bluetooth: hci4: command tx timeout
[  387.457073] Bluetooth: hci6: command tx timeout
[  387.457148] Bluetooth: hci5: command tx timeout
[  387.458496] Bluetooth: hci3: command tx timeout
[  387.648321] Bluetooth: hci7: command tx timeout
[  389.056767] Bluetooth: hci0: command tx timeout
[  389.120311] Bluetooth: hci1: command tx timeout
[  389.185477] Bluetooth: hci2: command tx timeout
[  389.505029] Bluetooth: hci4: command tx timeout
[  389.505544] Bluetooth: hci5: command tx timeout
[  389.505978] Bluetooth: hci6: command tx timeout
[  389.506689] Bluetooth: hci3: command tx timeout
[  389.696410] Bluetooth: hci7: command tx timeout
[  391.104612] Bluetooth: hci0: command tx timeout
[  391.170349] Bluetooth: hci1: command tx timeout
[  391.232501] Bluetooth: hci2: command tx timeout
[  391.552355] Bluetooth: hci6: command tx timeout
[  391.552847] Bluetooth: hci5: command tx timeout
[  391.553322] Bluetooth: hci3: command tx timeout
[  391.553729] Bluetooth: hci4: command tx timeout
[  391.745618] Bluetooth: hci7: command tx timeout
[  393.154362] Bluetooth: hci0: command tx timeout
[  393.216369] Bluetooth: hci1: command tx timeout
[  393.280848] Bluetooth: hci2: command tx timeout
[  393.600370] Bluetooth: hci6: command tx timeout
[  393.600874] Bluetooth: hci4: command tx timeout
[  393.601385] Bluetooth: hci3: command tx timeout
[  393.601829] Bluetooth: hci5: command tx timeout
[  393.792280] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
01:53:29  Registers:
info registers vcpu 0
RAX=ffff88801c2e50b8 RBX=ffff88801c2dea00 RCX=ffffffff8151f5f3 RDX=ffff88801c2a1ec0
RSI=0000000000000000 RDI=ffff88801c2dea00 RBP=ffff88801c2dea00 RSP=ffff88806ce08df0
R8 =0000000000000001 R9 =ffffed100d9c11ae R10=0000000000000003 R11=0000000000000001
R12=ffff88800dcfb190 R13=0000000000000246 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81b21610 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f11210ef540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fabc6c5d610 CR3=000000002755b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff
XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69
XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=5c6e90dbbbbbed3a RDX=1ffff11006936eef
RSI=00000000346b6402 RDI=ffff88806cf31850 RBP=ffff8880349b7790 RSP=ffff8880349b76c8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffff8880349b7798 R13=ffff8880349b7780 R14=ffff8880349b7779 R15=ffff8880349b7738
RIP=ffffffff81353ea2 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe2c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbc82d9c260 CR3=000000002759d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000