Warning: Permanently added '[localhost]:5035' (ECDSA) to the list of known hosts.
2025/06/23 04:27:00 fuzzer started
2025/06/23 04:27:00 dialing manager at localhost:33119
syzkaller login: [   98.411973] cgroup: Unknown subsys name 'net'
[   98.551401] cgroup: Unknown subsys name 'cpuset'
[   98.602119] cgroup: Unknown subsys name 'rlimit'
2025/06/23 04:27:24 syscalls: 204
2025/06/23 04:27:24 code coverage: enabled
2025/06/23 04:27:24 comparison tracing: enabled
2025/06/23 04:27:24 extra coverage: enabled
2025/06/23 04:27:24 setuid sandbox: enabled
2025/06/23 04:27:24 namespace sandbox: enabled
2025/06/23 04:27:24 Android sandbox: enabled
2025/06/23 04:27:24 fault injection: enabled
2025/06/23 04:27:24 leak checking: enabled
2025/06/23 04:27:24 net packet injection: enabled
2025/06/23 04:27:24 net device setup: enabled
2025/06/23 04:27:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/23 04:27:24 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/23 04:27:24 USB emulation: enabled
2025/06/23 04:27:24 hci packet injection: enabled
2025/06/23 04:27:24 wifi device emulation: enabled
2025/06/23 04:27:24 802.15.4 emulation: enabled
2025/06/23 04:27:24 fetching corpus: 0, signal 0/0 (executing program)
2025/06/23 04:27:26 starting 8 fuzzer processes
04:27:26 executing program 0:
syz_io_uring_complete(0x0)
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
write$char_usb(r0, &(0x7f0000000040)="dab6e267d34a974b0ab9136f0d117220a5e991572b303ef031a8bed9a04b4e717a04b36f89ae3648bac98c9cecb44b725e79c47f5f5817c47860d6af161353542602063e", 0x44)
socketpair(0x26, 0x800, 0x2, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000100), {[{{@arp={@multicast2, @remote, 0xffffff00, 0x0, 0x8, 0xc, {@empty, {[0xff, 0xff, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x72014dc787629ac2]}}, 0x4, 0x1, 0x0, 0x3f, 0x3, 0xc3, 'veth0_to_bond\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x0, 0x6}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x80}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 0x0, 0x4, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x2, 0xe9, 0x200, 0x7ff, 0x9e8, 0x7fff, 'veth0_vlan\x00', 'wlan1\x00', {0xff}, {0xff}, 0x0, 0x131}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x11}, @local, 0x2, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x10000}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
getsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000580), &(0x7f00000005c0)=0x4)
r3 = syz_io_uring_complete(0x0)
read$char_usb(r3, &(0x7f0000000600)=""/51, 0x33)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}}, 0x400c0c0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000740), &(0x7f0000000780)=0x6)
accept4$inet(r3, &(0x7f00000007c0)={0x2, 0x0, @local}, &(0x7f0000000800)=0x10, 0x80400)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @private=0xa010102}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e23, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x4, 0x2})
r5 = syz_io_uring_complete(0x0)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000008c0)={@multicast2, @local, 0x0, 0x1, [@initdev={0xac, 0x1e, 0x3, 0x0}]}, 0x14)
syz_usb_disconnect(0xffffffffffffffff)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000900), 0x2000, 0x0)
getpeername$inet(r6, &(0x7f0000000940)={0x2, 0x0, @multicast2}, &(0x7f0000000980)=0x10)
accept4$inet(r2, &(0x7f00000009c0)={0x2, 0x0, @multicast2}, &(0x7f0000000a00)=0x10, 0x81000)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xc9}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xf5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048018}, 0x4004004)

04:27:26 executing program 1:
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000), 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x80010, 0xffffffffffffffff, 0x10000000)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040), 0x1)
r0 = io_uring_setup(0x5b84, &(0x7f0000000080)={0x0, 0x30d6, 0x4, 0x3, 0x16})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x418e013, r0, 0x0)
r1 = io_uring_setup(0x2b18, &(0x7f0000000100)={0x0, 0x72f2, 0x20, 0x0, 0x186, 0x0, r0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x10, r1, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x2, 0x8006}, 0x4)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004044)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300))
syz_io_uring_setup(0x584c, &(0x7f0000000340)={0x0, 0xb456, 0x10, 0x3, 0x283, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400))
epoll_create1(0x80000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in=@broadcast, @in6=@empty, 0x4e20, 0xfffa, 0x4e21, 0x6, 0xa, 0x0, 0xa0, 0x2c}, {0x298, 0x10001, 0x2, 0xfffffffeffffffff, 0x1000, 0x9, 0xffffffff}, {0x1, 0x1ff, 0x3, 0xaf3}, 0x7fffffff, 0x6e6bbf, 0x2, 0x1, 0x3, 0x2}, {{@in=@empty, 0x4d6, 0x3c}, 0x8, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x0, 0x2, 0x3f, 0x8001, 0x2, 0x7}}, 0xe8)
pause()
r4 = fork()
syz_open_procfs$userns(r4, &(0x7f0000000540))
syz_io_uring_setup(0x3c87, &(0x7f0000000580)={0x0, 0xd9f3, 0x4, 0x3, 0x141, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640))

04:27:26 executing program 2:
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r0=>0x0})
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x2c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x1, 'lblc\x00', 0x33, 0x3, 0x60}, 0x2c)
socketpair(0x6, 0x3, 0x6, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}}, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40440d4}, 0x24004800)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xce3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x80)
r4 = syz_io_uring_complete(0x0)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x1, 0x6}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000400)={'erspan0\x00', <r5=>r0, 0x7800, 0x40, 0x3, 0x5, {{0x1b, 0x4, 0x0, 0x9, 0x6c, 0x65, 0x0, 0x40, 0x29, 0x0, @loopback, @private=0xa010100, {[@lsrr={0x83, 0x1f, 0x6a, [@multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x9b, 0x3, 0x6, [{@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb46}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}]}, @noop]}}}}})
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000500)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
socketpair(0x5, 0x2, 0x401, &(0x7f0000000540)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r3)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x510160}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r7, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044801}, 0x2400c8c0)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x200000, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r7, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e1bdcfe10ff2"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ec}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004899}, 0x20050)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r9, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r7, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4050}, 0x40000000)

04:27:26 executing program 3:
r0 = io_uring_setup(0x6849, &(0x7f0000000000)={0x0, 0xd34e, 0x33, 0x2, 0x2c})
io_uring_enter(r0, 0x53e7, 0x35e0, 0x1, &(0x7f0000000080)={[0x9]}, 0x8)
io_uring_enter(r0, 0x123d, 0xa19, 0x1, &(0x7f00000000c0)={[0x2]}, 0x8)
epoll_create1(0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@local, @private=0xa010100}, 0x8)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x1, 0x9}, @sack_perm, @mss={0x2, 0x80000000}, @sack_perm, @mss={0x2, 0x1000}, @window={0x3, 0x3, 0x1}, @mss={0x2, 0x4000000}, @sack_perm, @timestamp], 0x9)
r1 = syz_io_uring_setup(0x2f8b, &(0x7f00000001c0)={0x0, 0xcd0f, 0x0, 0x0, 0xee}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000002c0)={'icmp\x00'}, &(0x7f0000000300)=0x1e)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f0000000340), 0x0, 0x4)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x4010, r1, 0x0)
syz_io_uring_setup(0x873, &(0x7f0000000380)={0x0, 0xc0bd, 0x1, 0x2, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000007c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)="857df7ba020edd532d23c8974d8d", 0xe}, {&(0x7f00000004c0)="9d2041fa17e34c962935d351b0b817e845530467fd781b41b7a9c0c1d5c220a0f149ab5f3ba66177e248e0f7bc2d06037757cc788cba343b34f1bab2316103f80eedd4d4f1ac875381512702cb5083f42991d4b864204d223d64b18adaff5ada08ac0cc5c9a2105d237caf596d6ae8a2fc3bd704c9ea73b82a705404829df66c91469a0818d7dc1b236126313a1f65c47e47226ea90f5a83851d2b9e6553e7eb01589a7aa82a86f761beb526d144a26339e4ed6dfda1741095c4a6c6ffb4ae86fe3c1cd3d8fc99602cdb015ceb9c2a8b77b8bfad9f6486d5cf222a2c812bce5fea461f04608c78f1a969cf10a05dbe1fea8c", 0xf2}, {&(0x7f00000005c0)="ee9d22b2bf30418bbcc5907069241faa7b481ddadc61d8ed1329f01a1c2f5cb2696ba8a2b28f9bc9207717f75c57a8a0854fdc654cf84b5b17f710ee462ff9ffdc55b3bc4cf4183e61412481236acd0a8212bf2d50a036e457fd6ca11005f8b76590fb149d77755c2b7a402bf4d05b583b283fdfd6ce18010152635b1e1242d3977fc8876156ba6216055291521e408f238a630219c43a7b91b9b2ab0b59b272cf88e9c3f5a10826c22ea71b782f0ca8ec823f15adbef81e41c68e957009276417321d", 0xc3}, {&(0x7f00000006c0)="059503d2f6b2443cc6db39b9b30d40969385236d88556a3eab82991203cbb0ee6ecf6e57b68c2c5351235eeb6b9bd6fff4b0", 0x32}, {&(0x7f0000000700)="f5fc66135c4f8d7a2bb560652608519f8fc97842ca02540d96a48cede4e075da3e817e599847d0da4bec", 0x2a}], 0x5, 0x20, 0x1, {0x1, r5}}, 0x7)
socketpair(0x26, 0x800, 0x2, &(0x7f0000000800)={<r6=>0xffffffffffffffff})
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000840)={@loopback, @multicast2, 0x1, 0x2, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x44}]}, 0x18)
r7 = syz_io_uring_complete(r2)
getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f0000000900)={0x4, "be55bd"}, 0x6)

[  124.001887] audit: type=1400 audit(1750652846.687:7): avc:  denied  { execmem } for  pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
04:27:26 executing program 4:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0xf04, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4aa}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc006}, 0x800)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x2800004, 0x50, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000240), 0x1, 0x0, 0x1}, 0x9)
r2 = syz_io_uring_complete(r1)
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4050)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x210800, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xd0004ad0}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r0, 0x60a, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffd}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x40808)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}]}, 0x1c}}, 0x20000000)
socketpair(0x1f, 0x5, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x2c}}, 0x0)
socketpair(0x1f, 0x80000, 0x1000, &(0x7f0000000800)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x93}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040000}, 0x10)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x210080, 0x0)
read$char_usb(r8, &(0x7f0000000a00)=""/4096, 0x1000)
connect$bt_l2cap(r4, &(0x7f0000001a00)={0x1f, 0xfffa, @none, 0x101, 0x2}, 0xe)

04:27:26 executing program 5:
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0xea, "07595fa60c6841f009dae767da933c50dd655d18478dbc03ef1670308a8c76c710a6a55deb4cde250305338fd6990061ac0b5800e79ace02b4b3dc4359ec6af2d1ffe9576641c52118563abe64a8b623192d8f70bf1456328b0846a88ce31fbc80374d2b281712b2a3b2f17258dd213555d6bd3a7a8779c9ab6329abdfa336af9fb5740c37b73e993c323bbc340f4480c30972dcd4e62b7de79951a4af346d591c8f9e438260371c48bdb25a0046cf3b487248446e65d49cf8b0caead408331988101b9f91c159f4d257d75915ee2a225b00e48252f0595092e84aae6787b41e3a50c18cb2137d0aa161"}, &(0x7f0000000140)=0x10e)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x7b1440, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@remote, @loopback, 0x0, 0x6, [@remote, @private=0xa010100, @local, @loopback, @multicast1, @private=0xa010100]}, 0x28)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x2, 0x8, 0x200, 0x101, 0x5ee2], 0x1, &(0x7f0000000200)=[{}], 0x0, [{}]}, 0x88)
r2 = accept$inet(r1, &(0x7f0000000300)={0x2, 0x0, @empty}, &(0x7f0000000340)=0x10)
setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000380)="00bd8a39ef061f5307c103ae507c8ec9bd8a2806bafd41b8876c530249f5fb0e0bdef5181bdac1b22b60ab093571149b903605f04679de9cc8e1ca62c7cea2bfa2bc3269890e4c296d6cfcce1f0d4b47f1eabe928292976797d666dce2aa6697f7b77f909a17a4cf2616d076efe1fe977cc769db33e42b9c5b83b4b48b15a44318a6da7f0842c4cf55b0843546d9bbd8d0422e11fe1b23cb71ede9b895802a0f49f3a2592fe46860a7db6571f83da8fa3e0a40c0159be1e418cb776850cd0e6e5cbb4f5da2ffce9060a78c73af73fcf2b8721b7bbb385b", 0xd7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x39, &(0x7f0000000500)={0x9, {{0x2, 0x4e22, @rand_addr=0x64010101}}, {{0x2, 0x4e24, @remote}}}, 0x108)
r5 = syz_io_uring_complete(0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x410, 0x110, 0x110, 0x110, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000640), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @remote, @private=0xa010100, 0x1}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0xc, 0xc, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x7fff, 0x7, 0x0, 0x400, 0x6, 0x200, 'netdevsim0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x0, 0x301}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xee66, 0x8acc, 0x8001, 0x0, 0x0, "2258056f420f975edc2a0d1eb5c1a10678ad61dc678bab521f99f7ea4e4e214da2e50ea994a0fc304c28abb6b284715d2a9522340cbc5f0f8f30ba090773afb2"}}}, {{@arp={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x39}, 0xff000000, 0xffffffff, 0xb, 0xc, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x6dd2, 0x401, 0x3, 0xfff8, 0x1, 0x6, 'gretap0\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x142}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000b00)=0x5, 0x4)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0xa0140, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x54, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd743}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xf5e}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x20c4)
setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000cc0)={0x2c, @loopback, 0x4e20, 0x2, 'lblcr\x00', 0x32, 0x6, 0x58}, 0x2c)
r8 = syz_io_uring_complete(0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000d00))

04:27:26 executing program 6:
keyctl$assume_authority(0x10, 0x0)
socketpair(0x9, 0x2, 0x3, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}}, 0x850)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x50}}, 0x1)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}}, 0x4891)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4004)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x24004000)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0xc01, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}}, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x61c, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40880)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000800), 0x65e480, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r3)
sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0x4, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000006, 0x2010, r4, 0x10000000)
syz_io_uring_submit(0x0, r6, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x80)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r8, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000811}, 0x0)

04:27:26 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14819}, 0x4005)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xb9}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20008084)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x811}, 0x8c11)
r3 = syz_io_uring_complete(0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x21d}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="52e0b86c7cb8"}]}, 0x60}, 0x1, 0x0, 0x0, 0x24020841}, 0x4000000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan1\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000540)={'wpan4\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004080}, 0xc0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "e105dbe24c37d1dc99fa3d78cb50c276"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "d8b375552db74f1988c47a230ad9567544c16c8d9508903c86a0558399ddb2ec"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "6b6aa305b9518a3af0e0062398239ba79d70784df9bc6698337754d37828d88f"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x40800}, 0x24040880)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x34}}, 0x20000040)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r10, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000845}, 0x40000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r10, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000)

[  125.342523] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  125.345735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  125.348683] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  125.355339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  125.361463] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  125.440065] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  125.463704] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  125.465901] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  125.481235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  125.495668] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  125.499280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  125.501264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  125.503642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  125.508745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  125.510502] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  125.514832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  125.516553] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  125.520463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  125.530684] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  125.533826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  125.611529] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  125.631629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  125.634261] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  125.647322] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  125.653134] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  125.654984] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  125.676427] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  125.679614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  125.690719] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  125.694857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  125.696235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  125.700510] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  125.707489] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  125.713698] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  125.720673] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  125.750198] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  125.752681] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  125.765319] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  125.771503] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  125.788554] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  127.423835] Bluetooth: hci0: command tx timeout
[  127.553089] Bluetooth: hci2: command tx timeout
[  127.615269] Bluetooth: hci1: command tx timeout
[  127.615982] Bluetooth: hci3: command tx timeout
[  127.871189] Bluetooth: hci6: command tx timeout
[  127.871888] Bluetooth: hci7: command tx timeout
[  127.871938] Bluetooth: hci5: command tx timeout
[  127.872838] Bluetooth: hci4: command tx timeout
[  129.473047] Bluetooth: hci0: command tx timeout
[  129.599138] Bluetooth: hci2: command tx timeout
[  129.663137] Bluetooth: hci3: command tx timeout
[  129.663624] Bluetooth: hci1: command tx timeout
[  129.921097] Bluetooth: hci5: command tx timeout
[  129.921603] Bluetooth: hci6: command tx timeout
[  129.922399] Bluetooth: hci7: command tx timeout
[  129.922826] Bluetooth: hci4: command tx timeout
[  131.520711] Bluetooth: hci0: command tx timeout
[  131.647277] Bluetooth: hci2: command tx timeout
[  131.711879] Bluetooth: hci1: command tx timeout
[  131.712837] Bluetooth: hci3: command tx timeout
[  131.967347] Bluetooth: hci4: command tx timeout
[  131.968282] Bluetooth: hci7: command tx timeout
[  131.969201] Bluetooth: hci6: command tx timeout
[  131.970067] Bluetooth: hci5: command tx timeout
[  133.568052] Bluetooth: hci0: command tx timeout
[  133.695143] Bluetooth: hci2: command tx timeout
[  133.759401] Bluetooth: hci1: command tx timeout
[  133.759898] Bluetooth: hci3: command tx timeout
[  134.015423] Bluetooth: hci7: command tx timeout
[  134.015903] Bluetooth: hci6: command tx timeout
[  134.016871] Bluetooth: hci5: command tx timeout
[  134.017319] Bluetooth: hci4: command tx timeout
[  188.434986] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.438643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.441591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.459672] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.469922] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  188.538602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  188.542910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  188.553639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  188.567465] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  188.571887] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  188.648043] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  188.656829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  188.670680] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  188.688959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  188.704841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  188.878499] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  188.882274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  188.884772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  188.893317] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  188.898544] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  189.131659] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  189.134449] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  189.154555] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  189.214487] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  189.219207] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  189.789439] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  189.805548] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  189.808611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  189.850379] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  189.893938] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  189.937810] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  189.947746] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  189.979466] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.989248] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  189.996441] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  190.008480] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  190.073220] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  190.090464] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  190.095698] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  190.117489] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  190.527106] Bluetooth: hci0: command tx timeout
[  190.655127] Bluetooth: hci1: command tx timeout
[  190.847094] Bluetooth: hci2: command tx timeout
[  190.975315] Bluetooth: hci3: command tx timeout
[  191.679096] Bluetooth: hci5: command tx timeout
[  191.999262] Bluetooth: hci6: command tx timeout
[  192.191103] Bluetooth: hci4: command tx timeout
[  192.320113] Bluetooth: hci7: command tx timeout
[  192.575111] Bluetooth: hci0: command tx timeout
[  192.706129] Bluetooth: hci1: command tx timeout
[  192.895192] Bluetooth: hci2: command tx timeout
[  193.024212] Bluetooth: hci3: command tx timeout
[  193.727086] Bluetooth: hci5: command tx timeout
[  194.047096] Bluetooth: hci6: command tx timeout
[  194.239368] Bluetooth: hci4: command tx timeout
[  194.367232] Bluetooth: hci7: command tx timeout
[  194.623260] Bluetooth: hci0: command tx timeout
[  194.751083] Bluetooth: hci1: command tx timeout
[  194.943098] Bluetooth: hci2: command tx timeout
[  195.071550] Bluetooth: hci3: command tx timeout
[  195.776111] Bluetooth: hci5: command tx timeout
[  196.095085] Bluetooth: hci6: command tx timeout
[  196.287193] Bluetooth: hci4: command tx timeout
[  196.415226] Bluetooth: hci7: command tx timeout
[  196.671150] Bluetooth: hci0: command tx timeout
[  196.799240] Bluetooth: hci1: command tx timeout
[  196.993429] Bluetooth: hci2: command tx timeout
[  197.119108] Bluetooth: hci3: command tx timeout
[  197.823097] Bluetooth: hci5: command tx timeout
[  198.143254] Bluetooth: hci6: command tx timeout
[  198.335214] Bluetooth: hci4: command tx timeout
[  198.463382] Bluetooth: hci7: command tx timeout
[  251.088038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  251.092309] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  251.103818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  251.121805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  251.135903] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  251.226198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  251.237572] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  251.239973] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  251.246383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  251.250692] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  251.300101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  251.304030] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  251.324894] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  251.330594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  251.336657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  251.338695] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  251.350308] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  251.364338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  251.372213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  251.374068] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  251.380710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  251.384581] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.388914] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  251.421569] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  251.427399] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  251.431206] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  251.439753] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  251.447895] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  251.453613] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  251.456695] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  251.459689] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  251.468833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  251.474712] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  251.478981] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  251.480202] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  251.487354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  251.561706] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  251.587602] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  251.618321] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  251.645794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  253.183142] Bluetooth: hci0: command tx timeout
[  253.312577] Bluetooth: hci1: command tx timeout
[  253.439194] Bluetooth: hci2: command tx timeout
[  253.505255] Bluetooth: hci3: command tx timeout
[  253.568059] Bluetooth: hci7: command tx timeout
[  253.632133] Bluetooth: hci5: command tx timeout
[  253.632883] Bluetooth: hci4: command tx timeout
[  253.695676] Bluetooth: hci6: command tx timeout
[  255.232119] Bluetooth: hci0: command tx timeout
[  255.359226] Bluetooth: hci1: command tx timeout
[  255.487420] Bluetooth: hci2: command tx timeout
[  255.552659] Bluetooth: hci3: command tx timeout
[  255.616044] Bluetooth: hci7: command tx timeout
[  255.680275] Bluetooth: hci5: command tx timeout
[  255.680751] Bluetooth: hci4: command tx timeout
[  255.744157] Bluetooth: hci6: command tx timeout
[  257.279108] Bluetooth: hci0: command tx timeout
[  257.409073] Bluetooth: hci1: command tx timeout
[  257.536757] Bluetooth: hci2: command tx timeout
[  257.600073] Bluetooth: hci3: command tx timeout
[  257.663082] Bluetooth: hci7: command tx timeout
[  257.727377] Bluetooth: hci4: command tx timeout
[  257.727843] Bluetooth: hci5: command tx timeout
[  257.791229] Bluetooth: hci6: command tx timeout
[  259.327187] Bluetooth: hci0: command tx timeout
[  259.456463] Bluetooth: hci1: command tx timeout
[  259.584171] Bluetooth: hci2: command tx timeout
[  259.649019] Bluetooth: hci3: command tx timeout
[  259.712324] Bluetooth: hci7: command tx timeout
[  259.775615] Bluetooth: hci5: command tx timeout
[  259.777185] Bluetooth: hci4: command tx timeout
[  259.839073] Bluetooth: hci6: command tx timeout
[  313.618396] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  313.624881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  313.627585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  313.637765] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  313.644323] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  313.691502] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  313.695116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  313.697348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  313.704111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  313.711328] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  313.891614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  313.902786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  313.907112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  313.913201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  313.916841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  313.972419] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  313.988534] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  313.991170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  313.994853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  314.004272] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  314.009877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  314.035642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  314.040615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  314.048677] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  314.054510] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  314.068254] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  314.073611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  314.076577] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  314.090757] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  314.102215] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  314.110368] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  314.120505] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  314.122974] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  314.127883] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  314.150468] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  314.160393] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  314.163901] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  314.172238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  314.181400] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  314.204812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  315.711113] Bluetooth: hci0: command tx timeout
[  315.775243] Bluetooth: hci1: command tx timeout
[  315.967283] Bluetooth: hci2: command tx timeout
[  316.159137] Bluetooth: hci3: command tx timeout
[  316.160497] Bluetooth: hci4: command tx timeout
[  316.223135] Bluetooth: hci5: command tx timeout
[  316.289066] Bluetooth: hci7: command tx timeout
[  316.289839] Bluetooth: hci6: command tx timeout
[  317.759131] Bluetooth: hci0: command tx timeout
[  317.823127] Bluetooth: hci1: command tx timeout
[  318.015088] Bluetooth: hci2: command tx timeout
[  318.209072] Bluetooth: hci4: command tx timeout
[  318.209574] Bluetooth: hci3: command tx timeout
[  318.271096] Bluetooth: hci5: command tx timeout
[  318.335159] Bluetooth: hci6: command tx timeout
[  318.335636] Bluetooth: hci7: command tx timeout
[  319.807625] Bluetooth: hci0: command tx timeout
[  319.871205] Bluetooth: hci1: command tx timeout
[  320.063407] Bluetooth: hci2: command tx timeout
[  320.255135] Bluetooth: hci4: command tx timeout
[  320.255603] Bluetooth: hci3: command tx timeout
[  320.319094] Bluetooth: hci5: command tx timeout
[  320.383399] Bluetooth: hci7: command tx timeout
[  320.383831] Bluetooth: hci6: command tx timeout
[  321.855242] Bluetooth: hci0: command tx timeout
[  321.919063] Bluetooth: hci1: command tx timeout
[  322.111381] Bluetooth: hci2: command tx timeout
[  322.303414] Bluetooth: hci3: command tx timeout
[  322.303853] Bluetooth: hci4: command tx timeout
[  322.367364] Bluetooth: hci5: command tx timeout
[  322.432037] Bluetooth: hci6: command tx timeout
[  322.432474] Bluetooth: hci7: command tx timeout
[  375.893252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  375.898147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  375.904668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  375.915692] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  375.921730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.237219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.246231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.249665] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.258659] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.264372] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  376.279892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  376.296598] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  376.301704] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  376.310989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  376.325942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  376.397718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  376.401633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  376.404224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  376.406317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  376.413652] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  376.417104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  376.432836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  376.448789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  376.463278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  376.465932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  376.470515] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  376.473674] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  376.473897] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  376.516073] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  376.557293] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  376.559217] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  376.580955] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  376.613316] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  376.648897] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  376.692656] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  376.723617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  376.724795] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  376.734689] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  376.777787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  376.803621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  377.983430] Bluetooth: hci0: command tx timeout
[  378.305092] Bluetooth: hci1: command tx timeout
[  378.368177] Bluetooth: hci2: command tx timeout
[  378.496102] Bluetooth: hci4: command tx timeout
[  378.496247] Bluetooth: hci3: command tx timeout
[  378.687080] Bluetooth: hci5: command tx timeout
[  378.815171] Bluetooth: hci7: command tx timeout
[  378.943086] Bluetooth: hci6: command tx timeout
[  380.031181] Bluetooth: hci0: command tx timeout
[  380.351216] Bluetooth: hci1: command tx timeout
[  380.415443] Bluetooth: hci2: command tx timeout
[  380.543205] Bluetooth: hci4: command tx timeout
[  380.546177] Bluetooth: hci3: command tx timeout
[  380.736293] Bluetooth: hci5: command tx timeout
[  380.863101] Bluetooth: hci7: command tx timeout
[  380.992064] Bluetooth: hci6: command tx timeout
[  382.080379] Bluetooth: hci0: command tx timeout
[  382.399097] Bluetooth: hci1: command tx timeout
[  382.464179] Bluetooth: hci2: command tx timeout
[  382.593062] Bluetooth: hci3: command tx timeout
[  382.593529] Bluetooth: hci4: command tx timeout
[  382.784139] Bluetooth: hci5: command tx timeout
[  382.911462] Bluetooth: hci7: command tx timeout
[  383.039231] Bluetooth: hci6: command tx timeout
[  384.128255] Bluetooth: hci0: command tx timeout
[  384.448387] Bluetooth: hci1: command tx timeout
[  384.511125] Bluetooth: hci2: command tx timeout
[  384.641055] Bluetooth: hci4: command tx timeout
[  384.641545] Bluetooth: hci3: command tx timeout
[  384.834079] Bluetooth: hci5: command tx timeout
[  384.960124] Bluetooth: hci7: command tx timeout
[  385.089019] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
04:32:29  Registers:
info registers vcpu 0
RAX=00000000ffffffff RBX=0000000000000000 RCX=dfb8078e475e76a4 RDX=0000000085cb9a3e
RSI=000000008301a466 RDI=0000000081125d94 RBP=ffffffff85c1cc40 RSP=ffff88806ce08918
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200
RIP=ffffffff8151b063 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe6000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7bb713d820 CR3=0000000034324000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8174137b RDX=ffff888015e11b80
RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff88802d3f7850
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=ffffffff85c75228 R15=ffff88800ca48540
RIP=ffffffff8174137d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe0600000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8a7dc74b70 CR3=000000002f0b2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000