Warning: Permanently added '[localhost]:40384' (ECDSA) to the list of known hosts.
2025/06/25 05:01:33 fuzzer started
2025/06/25 05:01:33 dialing manager at localhost:42423
syzkaller login: [  109.107792] cgroup: Unknown subsys name 'net'
[  109.240395] cgroup: Unknown subsys name 'cpuset'
[  109.282292] cgroup: Unknown subsys name 'rlimit'
2025/06/25 05:01:53 syscalls: 213
2025/06/25 05:01:53 code coverage: enabled
2025/06/25 05:01:53 comparison tracing: enabled
2025/06/25 05:01:53 extra coverage: enabled
2025/06/25 05:01:53 setuid sandbox: enabled
2025/06/25 05:01:53 namespace sandbox: enabled
2025/06/25 05:01:53 Android sandbox: enabled
2025/06/25 05:01:53 fault injection: enabled
2025/06/25 05:01:53 leak checking: enabled
2025/06/25 05:01:53 net packet injection: enabled
2025/06/25 05:01:53 net device setup: enabled
2025/06/25 05:01:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/25 05:01:53 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/25 05:01:53 USB emulation: enabled
2025/06/25 05:01:53 hci packet injection: enabled
2025/06/25 05:01:53 wifi device emulation: enabled
2025/06/25 05:01:53 802.15.4 emulation: enabled
2025/06/25 05:01:53 fetching corpus: 0, signal 0/0 (executing program)
2025/06/25 05:01:55 starting 8 fuzzer processes
05:01:55 executing program 1:
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000000))
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x6, 0x10001, 0x1, 0x8, 0x14, "b99a3df124f1cc27208da8f4446591b8e1a4a4"})
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x400, 0x4e23, 0xfe, 0x2, 0xb0, 0x40, 0x33, 0x0, 0xee01}, {0x20, 0x4, 0xa318, 0xb1, 0x6, 0x8000, 0x40, 0x7}, {0x3, 0x3, 0x1, 0x4}, 0x2, 0x6e6bbf, 0x2, 0x0, 0x2, 0x3}, {{@in=@private=0xa010100, 0x4d4, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x34ff, 0x0, 0x1, 0x1, 0x5, 0x3f}}, 0xe8)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000180)="48391e2851ad5e679f960b80fd250306ee6754fd659ca65e6c83a2aa2aeeec8620f55a5c68236c06faee5bb5af2b113fba05785291f73ec719f65cf057308baf72650f60a23f44848797a88709d2392033ddf5c5708e9fd49cd0ac27879a42524901c62cdb5f3a234ce598ea06be7a27fd0ae517e824bede63407261f254a8342a73a5ca5ba83f003f012dc76170eb5dc0e0739a551837a9d31147aa23d23fc31fec4ea54cda224f0978e265fe73fec488e4d14a311fb0ee8bf7ce")
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x8001, 0x1, 0x400, 0x3f, 0x1a, "a648f6e6370d8f21b1f9d7757f8f047edc472a"})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl2\x00', <r5=>0x0, 0x2f, 0x9, 0x0, 0x6, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, 0x8, 0x1, 0x8, 0x7}})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000a00)={&(0x7f00000002c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000480)={0x518, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x635}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x214, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xa2, 0x4, 0xd0, 0xe00}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x47}}}]}}]}, 0x518}, 0x1, 0x0, 0x0, 0x5}, 0x4)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000a40))
getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000a80)=0x464, &(0x7f0000000ac0)=0x4)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}]}, 0x24}}, 0xc0)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x49}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r1)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2120}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r6, 0x404, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xf}, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000f80)={0x14, &(0x7f0000000e80)={0x40, 0x4, 0x90, {0x90, 0xe, "14542dc308524e489722bab1878998dba3c3fefac8880b0049313a31000fc5560a3ae0b3dd752258daff200154dd5f0469c2df4bdf7982ae9e7123dc0c912ed71a6cae374047ad0163a5b09d349b80359e7fea69d3696c045d67e341db55ad02016397b82926f737c2f520dcc8459bc1a90c6d4549937b3a978a53e50bc617676cdb14ca08941feb7910e921a2ab"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001240)={0x44, &(0x7f0000000fc0)={0x0, 0x11, 0x87, "d136788b4d6acd483320a3192d1bbeea9e15144a03588fd53c00a741473e982b301332f39328dab9b3f10b4df7e9eb28c0d52ecd12f1841b974d1552304644db96595b2dcf3a19830ebaf045b2d71afa9bbd700bf2be64dbbe6d7b1826514da11c98e5ea57dc21c4cf88850967410f7f1740ca68b910ac49332c150f9ac90e50d44012e88ca58c"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000001100)={0x20, 0x80, 0x1c, {0x9, 0x2, 0xfff, 0x401, 0x200, 0x0, 0x1, 0xffffffff, 0x6, 0x8, 0x2, 0x5}}, &(0x7f0000001140)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000001180)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000011c0)={0x20, 0x87, 0x2, 0x55de}, &(0x7f0000001200)={0x20, 0x89, 0x2, 0x1}})

05:01:55 executing program 2:
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x4, 0x2)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x81, &(0x7f00000000c0)=0x4)
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80800)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000180)=0xfffffffa, &(0x7f00000001c0)=0x4)
r1 = socket(0x9, 0x4, 0xdb2f)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x1)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6d}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_1\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000400)=0x3, &(0x7f0000000440)=0x2)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x2c6, 0x13}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x40)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008044}, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x88)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000680)={0x8001, 0x8, 0x9, 0x7f, 0x9, 0x10, 0x3}, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xae0}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb5a}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc0}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40880}, 0x40000)
setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000800), 0x2)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000840)=0x81, &(0x7f0000000880)=0x2)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f00000008c0)=0x7, 0x2)
ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000900)={0x5, 0x4})

05:01:55 executing program 3:
r0 = fsmount(0xffffffffffffffff, 0x1, 0x70)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x3c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x841)
r1 = fsmount(r0, 0x1, 0x2)
r2 = fsopen(&(0x7f0000000100)='affs\x00', 0x0)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x64}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
write$tcp_mem(r1, &(0x7f0000000240)={0x1000, 0x20, 0x9, 0x20, 0x100}, 0x48)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x374d09b2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4008080)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000580)={0x3, 0xe8e, 0xaee, 0x160, 0x9, 0x7ff})
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000005c0))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000600)='./file0\x00', 0xc0, 0x500040, 0x23456}, 0x9c6)
r5 = fsmount(r0, 0x1, 0x4d)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r6, 0x20, 0x70bd27, 0xcac, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x4000001)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000007c0)='batadv\x00', &(0x7f0000000800)="bed7a3fe43d3f0c9fa026aae93a8ae93686ba9d2b12ffd0cdb55edba3ef8fc4bab1291739a8c3c9b78ce7221ca77b40c50fa575ec84c1c10584ea75ed7553e54701e28050d5baf5ca404d335ad4c548db6ae34f4eb548cc6327092b6fb074d1cdfdea561b19298170888b5bae285799a34227865ff6c0e4db0feeb69a70d03b78be290eae9ef0017de86583ab63ce68260ada7876687cd7676b52bc38852ae69b14a220dbd63a1b9209c8acac651b3", 0xaf)
ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f00000008c0)={'\x00', 0x2, 0x1, 0x4d9bd823})

05:01:55 executing program 0:
r0 = syz_usb_connect$cdc_ncm(0x5, 0x115, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x103, 0x2, 0x1, 0x9, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e43efe"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x0, 0x1f}, {0x6, 0x24, 0x1a, 0x3f, 0x7}, [@mdlm_detail={0x96, 0x24, 0x13, 0x5, "0614c8987c83686b8f7e7ddcf811b27dd4b346b41f27ac17ff62b83bb0cd332197f12275589cc8e054d7b22fd5a8a85d0b36c9c23d65b411a1f08e94262121f9da48b56ab1f4a361d889a5dd1db574616f5ce2bdd8322b973081fd85fbc3105d39347df29ee8c4d7436347275b4f2cc097e27e77ebaad933a778ce6fad2dd5af209df23942ee701a64f19062df97335ef54b"}, @acm={0x4, 0x24, 0x2, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x5, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x90}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x80, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1f, 0xe4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x75, 0x0, 0xe5}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x81, 0xb, 0x4, 0x8, 0x1}, 0x4c, &(0x7f0000000180)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "ed107f19bb4ebe8915dfac1a1a191ae6"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "82a320258f01870803778c09ee3377f2"}, @ssp_cap={0x1c, 0x10, 0xa, 0x80, 0x4, 0x19e, 0xf, 0x1000, [0xc0, 0xc00f, 0xee, 0xc000]}]}, 0x2, [{0x15, &(0x7f0000000200)=@string={0x15, 0x3, "dd5a3b069bdd9ab4690a9d99467e490bf0eb88"}}, {0x4d, &(0x7f0000000240)=@string={0x4d, 0x3, "c6bc3d4ebf23417f253d472fd640120a9be74dd011519e4592f7c26c81fd3f142f52783e8b390de4bcb81cf263a58b72b6e53eb42950f0e9fa37af235e7b1ba333c97e3bd49c3ca1235c3c"}}]})
syz_usb_ep_write(r0, 0x5, 0x5, &(0x7f0000000300)="69c8ea0edb")
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x4, 0x91, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x1, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "c90891cb3823"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3748, 0xcc, 0x80}, {0x6, 0x24, 0x1a, 0x1, 0x8}, [@obex={0x5, 0x24, 0x15, 0x3}, @obex={0x5, 0x24, 0x15, 0x5}, @country_functional={0xe, 0x24, 0x7, 0x1f, 0x40, [0x0, 0x1ff, 0x9, 0x1]}, @obex={0x5, 0x24, 0x15, 0x200}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x6f, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x6, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x97, 0xf1, 0xcd}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x300, 0x7, 0x7f, 0x3f, 0xe6e4e408c7f1ecee, 0x5a}, 0x1b, &(0x7f0000000440)={0x5, 0xf, 0x1b, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x3, 0x0, 0x9b6e, [0x3f30]}, @ptm_cap={0x3}]}, 0x3, [{0x25, &(0x7f0000000480)=@string={0x25, 0x3, "ff208b7550cb75a5aa0c5d97fb027b504cbd3483471312bb57e6edf55582808ad4e22d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x43f}}, {0xd9, &(0x7f0000000500)=@string={0xd9, 0x3, "396fa0dbe8df9628bd44568f40fd687b85a6239cdbf25afcd8d1bdaaa558999cd340b9c4902b767bafd06cb58c82ff514ea9bd0c6419cfc5f1571a2de1a65f2854089cc5724a110b96cc79d51cfe3bcd4569838e0627d9417c35392ca3314a32c4940ecd3126a01b96231dad1b9fe1d52a7cb3746fa96fa1cfb82d87cb15f6544cc4c06576d84583ee1d9a3ca9b14e5d5957d6f22f718252ddca45329362c7c13b9f75987cb5fc601a16b9274aba610c34943382d9256cfbe29c5fbe3978f034f2fd097884e20aaf5888ebd942d551d5de14f3fe5c503b"}}]})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x40, 0x22, 0xe5, {0xe5, 0xc, "583f66695c24fd4cfb9fc12520d0fbd1c2452572cedfd0a06c6902cd603391ee78bfd0df4705ebb2bf3a602ff55b870e06df65208e5918c5dd167d33e8e96e602b680b632b945a2a4a42e1e9e9543bef288c7d03ad7464f410aef73bf3671a7f7f5dbb0205062780b9afb73cebc3ecd56e99eda11fe950c7d75165ed814626493b2cff0f599792bb576d663ce45165e2c794f1554ba0137538ba7590cf6e67600fbc9a4412349361437b65fee865cb49598d437d0fc10267dacd95c87c41404c50e0222ddeb471133738226d12e5727a3e5efa51b01125268fe8c8f285e95138cc8607"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x44, &(0x7f00000007c0)={0x0, 0x2c, 0xd4, "c074329fd139e8beb0e00b71134ebab48318eb1fb5812d842c389218480b5d587e0d2b624ac16a40a93bb0ebcb0a37bef55052100818a0bdcd7c5efa0ed30ec5929d3ba9f5df86ab04aae43b83c18a9080e571dc7bb4c998afdc6e3d0699c8d6dfa9bd70b3615f3088351477a4205745d91892b8eefd97eae59c503efe05467de82b675a14bd897c12434da0a80f0f92dadfc31c7be5c4a0840e0d6b27d91cc96750b7307052fdb96570d8668fd5a27275cd90b517585fb75c459ef710f53a1ae6a0998ec210d283369a44e40f07c26bae8b7211"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x69}, &(0x7f0000000940)={0x20, 0x80, 0x1c, {0xffff, 0x200, 0xfffffff7, 0x0, 0x1, 0x3ff, 0x5d6, 0x3, 0x56b, 0x6, 0xfffa, 0x4}}, &(0x7f0000000980)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000009c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000a00)={0x20, 0x87, 0x2, 0x8a}, &(0x7f0000000a40)={0x20, 0x89, 0x2, 0x1}})
syz_usb_connect$cdc_ncm(0x4, 0x95, &(0x7f0000000b00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x1, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "11ed96fbd7"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x5, 0x2, 0x7}, {0x6, 0x24, 0x1a, 0xffff, 0x1}, [@mdlm_detail={0x5, 0x24, 0x13, 0x3, 'G'}, @country_functional={0xc, 0x24, 0x7, 0x3f, 0x7f, [0x5a10, 0x9, 0xd16f]}, @dmm={0x7, 0x24, 0x14, 0x8, 0x6a2a}, @obex={0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x0, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0xe4, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x1f, 0x40}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x201, 0x81, 0xe0, 0x0, 0x8}, 0x59, &(0x7f0000000c00)={0x5, 0xf, 0x59, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x60, 0xfb, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "693d25281320195b8438a7fe12b7c400"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x40, 0xd8, 0x5, 0x40}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x850d, 0xf00f, 0x36, [0xc0, 0xc09f, 0x30, 0x6030, 0xcf]}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x0, 0x6}]}, 0x1, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x829}}]})
syz_usb_connect(0x4, 0x448, &(0x7f0000000d00)={{0x12, 0x1, 0x200, 0xa2, 0x9e, 0x26, 0x40, 0x19d2, 0xffb0, 0x941b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x436, 0x2, 0x7, 0xb0, 0xc0, 0x0, [{{0x9, 0x4, 0xfb, 0x8, 0x2, 0xff, 0xff, 0xff, 0x80, [@hid_hid={0x9, 0x21, 0x20, 0x53, 0x1, {0x22, 0xe31}}, @generic={0xe1, 0x9, "b989246c2bc4bc0159fc968026991bf0448bf21c5937b757df086c8109bbfd51a700a12d7bfdb21d235a6bf2de0ebc0c78eb8aa3aeba5386c45c51d44ca5b249b14a972841e76ab471350830a4dbdc5fb9b92b4e98d0c05bb6d6583be9751a2084bbf79c53909ef3813c23952e907cee4d79e4979d64f8eae972722e07e61b013395141f17d850d8a3212219e36c92e6c52650bf1a2c9b89c1b819701ecf2ab5b5b88155cffdc22c2ba1b24d09bbeb885d42d50a386c25b09b25edf39a9bc54e742f47174c8cc383f0aba369344e36462d0cbb6793137ab992635b11b28157"}], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x20, 0x20, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0xaa}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x1, 0x20, 0xc8, [@generic={0x55, 0x1, "54b967790e1156cad4300337d02d91470edb55b8663e895cb7acc656c7b739fbc89d1d10424fdb5f9443bd0f6fc918661ddcd8116183dd1e398b77ef2ec4a96365143202b679622d9b5663fa694d368fcd3ab7"}]}}]}}, {{0x9, 0x4, 0xb4, 0x8, 0x4, 0xc3, 0x3f, 0x8d, 0x2, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "fe"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0xf4df, 0x200, 0x40}, {0x6, 0x24, 0x1a, 0xff, 0x20}, [@country_functional={0x12, 0x24, 0x7, 0x7, 0x7, [0x8, 0x0, 0x1, 0x6, 0x2bf, 0xf95e]}, @mdlm={0x15, 0x24, 0x12, 0xe00}, @obex={0x5, 0x24, 0x15, 0x8001}, @mdlm={0x15, 0x24, 0x12, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0xff, 0x7, 0x6}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x80, 0x7, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0xa5}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x2e, 0x20, 0x1}]}], [{{0x9, 0x5, 0x6, 0x8, 0x20, 0x3, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0xa547}, @generic={0x7b, 0x11, "0ca912707255d8da3d878e3eea1b6763ccbb69f9cb36bd038d0c2def69331cbfcd023b4555660f67b4eb499f528805eda86fcd3e7584c8f765a057abd3129245a4d7978d069141c90d9aa594fb5d21f8c19cd11c7c92abea546bc3b1e594acc50d9eb1028bd49bcb430de19963708843e32667aa567e4482ab"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x1, 0x9, 0x5, [@generic={0x81, 0xd, "5a97522b0a65943b3970999a48aed61ae082e5633af169b5c45cefe5ae16e0813f0efbc3959ce2e2ec01624c657681bf0fcb3368d6e5cb05d1b108eb0d15c264f1187bef28127866ef0bce6a4012d70154e709290a4f67f1d20dc508cf3b05136fa9c35eecd596a6f0bbd7bb8f46dcd5627cdcb88410e0e29d049ce6b59340"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x7f, 0x9, 0x2, [@generic={0xf0, 0x8, "a63f791f5efb031fe72e0b98a30e2436402d9b08d201db3d200e03c5c064aa8bdd37af70b6be4358ded1ad8f63c1c474bdd424f4395fe6a4f0b65486a99346152e82f60117307cb090543b646952e89ab196daa0b482f380e1e7e34f9a22d0457a15d5f5c130c6d51548318ea4f43906c1844a252b428645997ae157508d89b3483ba12f912f78f038099ffad57a1fb1063a42a48c11bd176c7d5fd6571c323b0b10d6b67b7473781bdea8387fae13b3ee924d1d1edc4422bf69c5a260f68ba76f793b82b3af31c8d4a8de710d9c9ade0cd2423165436abbd22b31babff1f251081da08b6db57b937ad74a37d215"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x3, 0x7, 0x7, [@generic={0x1c, 0x0, "ee14138fce3302e8f52a69f5c691d2e8ca1f088a4cd7ad794556"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x4}]}}]}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x250, 0x0, 0x7f, 0x1f, 0x20, 0xab}, 0xc3, &(0x7f00000011c0)={0x5, 0xf, 0xc3, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x81, 0x5, 0x7fde, 0x0, 0x2, [0x3f0f, 0xff0000, 0xc000, 0xc0, 0x1bf3f]}, @generic={0x9e, 0x10, 0x2, "6aa437770c20ae82bebef34caa96a2a16e24145144cd0837a1b37acebc26bade036c903e66837f87ec0c9bc32e4ab623d5d8b0ac2c4ff7eb6beafd1d6eb94eab6945530b736bd472c888ea2d97d7717ba3caa8d9b00124840c6da84a47fbc10f5db7901749f39accf2d687801ff732003c054a1a862686fc16fb4cbd1288923716ea0a4afc93244f329f49492bc28b7bf750bf42ac9b73b48e99a1"}]}, 0x1, [{0xd2, &(0x7f00000012c0)=@string={0xd2, 0x3, "417309f834424db442ec8e215c28edac69655596a1426df916b605fe47bbf0c35c5b0e5b06d86463305637c92c93ec2e783956983e11ae488a6d5d5a67064aa9ea2f2f5b655731609fb9c71956a82fdc493bac5a62716760e41d21e007eb291e2224df9ce6589e5f682946f3c2acacd9fcd3af68452a4d7d943813fdb1d1e546fb36d268b14a680ef9d0ad0ac73691957ee004b6826128c06cbbaf761cdc0440f3b5f4cfecb9bc8dcce088c4de32892d1cf585d34713b2e4d525840ca3aab3ad080d1394832c563fcb5e9b9c4f19629b"}}]})
syz_usb_connect$cdc_ncm(0x3, 0x81, &(0x7f0000001400)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0x6, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "70995050b016"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0xb7c, 0x9, 0x200}, {0x6, 0x24, 0x1a, 0x2, 0x31}, [@network_terminal={0x7, 0x24, 0xa, 0x3f, 0xc3, 0xb8, 0xff}, @country_functional={0x6, 0x24, 0x7, 0x1, 0x4921}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x80, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x2, 0xc8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x3}}}}}}}]}}, &(0x7f00000016c0)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x250, 0x9, 0x8, 0x7, 0xff, 0xaa}, 0x10a, &(0x7f0000001500)={0x5, 0xf, 0x10a, 0x2, [@ptm_cap={0x3}, @generic={0x102, 0x10, 0xb, "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"}]}, 0x2, [{0xd, &(0x7f0000001640)=@string={0xd, 0x3, "e7e92a2a533a8290011ca6"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0xfceb}}]})
syz_usb_control_io(r0, &(0x7f00000018c0)={0x2c, &(0x7f0000001700)={0x0, 0x3, 0x98, {0x98, 0x21, "56f0520c23ad4fff377d017d8220ee7640d55baab8637ec1cfe8bb8d28ac732f0b2e9ef4be55962ac8e081e43d973a4d7a1827653acfca5efbd560a919a5c49b94883be14a9bbf7e261d655a3d481dd8a30076e6029e9218a9d6e90239cd0a5e85d4d0decea8ab3012c6cec5da1d595d53eb137d3803a3c73b6903ddf63cfa9ead0a7fd2c0081273679cfd4b53ae959a0fab81d13e1e"}}, &(0x7f00000017c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, &(0x7f0000001800)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x40, 0x8000}]}}, &(0x7f0000001840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x4, 0x0, 0x37, "7890d445", "b155f516"}}, &(0x7f0000001880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa0, 0x3, 0x3, 0x0, 0xdb, 0x0, 0x1ff}}}, &(0x7f0000001dc0)={0x84, &(0x7f0000001900)={0x20, 0xe, 0xf3, "9edc5dadaa93a3b569ae66554c51e816cd23c10234a7b3f5c5be78915886e9f2bcae19b1d5ff0fcde025b1d90df959a697e91beb35e7321fd4ea8cb529f12fd5227a53c5e03f2d81d3b5607c63acd153e59b3977c0ecf9dbfe8f474a09e19fef9591254a95bc01f0eccee1fe49fb58ec9314452f795a84acfaaf5fc649b83b97e60db8f58a902e3af815754678df1f9c84201577fdce9d677414f20507aad146e03a568354cc6e6284945e1af85448f83c3f66b5b4b523b055da1fa99f32b4a61c337cbcc97c8d47397d896881d206a4bcaf73a60023fdc3fb6104946e7a7824ce058952a7d31a432a3cfed4c2283c2021fb42"}, &(0x7f0000001a00)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000001a40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001a80)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001ac0)={0x20, 0x0, 0x8, {0x8, 0x2, [0xf000]}}, &(0x7f0000001b00)={0x40, 0x7, 0x2, 0x63ef}, &(0x7f0000001b40)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001b80)={0x40, 0xb, 0x2, 'h:'}, &(0x7f0000001bc0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001c00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001c40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001c80)={0x40, 0x19, 0x2, "05e2"}, &(0x7f0000001cc0)={0x40, 0x1a, 0x2, 0x7f8}, &(0x7f0000001d00)={0x40, 0x1c, 0x1}, &(0x7f0000001d40)={0x40, 0x1e, 0x1, 0x18}, &(0x7f0000001d80)={0x40, 0x21, 0x1, 0x8}})
syz_usb_connect(0x5, 0x22b, &(0x7f0000001e80)={{0x12, 0x1, 0x110, 0x3e, 0x6f, 0x8b, 0x10, 0x1e59, 0x2, 0x6bc1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x219, 0x3, 0x35, 0x8, 0x0, 0x8, [{{0x9, 0x4, 0x18, 0x20, 0x0, 0xed, 0xe1, 0xfa, 0x8}}, {{0x9, 0x4, 0xfd, 0x0, 0xb, 0x14, 0x38, 0x8e, 0x20, [], [{{0x9, 0x5, 0xf, 0x0, 0x20, 0x1, 0x2d, 0x8a}}, {{0x9, 0x5, 0xd, 0x2, 0x3ff, 0x5, 0x4, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x3f, 0x1f, 0x80}}, {{0x9, 0x5, 0x2, 0xc, 0x7ff, 0x0, 0xb5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x5}, @generic={0x5, 0x31, "a1cc88"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x80, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x28}, @generic={0xa8, 0x10, "56c8f55caf4781805eedad7f5af39f3f7d260203f3d48502e6c0cfcc41d8c8aa8df97a30758956e7552387e6eeb3f02041aac27a97c80cab4ddde8d6b4e35f41e8140ffe58b06b176ad634abcff35e058569abd64fcebdeec53ad731748d0770bba1f3071cabf744151e09ebcc4fe6ab8e42f00a627e6deaa5e10269d558f337a864f6ae6b8fbbd76d4988103e8c3bf0d8aa4fffa35375edbb76b1712fe5cf12ee9cc81ec45c"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x2, 0x1, 0x7, [@generic={0xc, 0x8, "9b2fb96bc11cbd1e77f9"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x6, 0x0, 0x28, [@generic={0xd, 0x2, "f890b8b3105c24d65e3dc8"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x5, 0x2, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x8}]}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x1, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x3f}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x0, 0x5c, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x1, 0xca80}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x20, 0x6, 0x7, [@generic={0x2e, 0xc, "f21b459002f971bcd81474b4919691fddbe643c2cf9c55e2ddc79f4375481814566bb1e6d70636ed0769f3e2"}]}}]}}, {{0x9, 0x4, 0x12, 0x73, 0x8, 0x62, 0x11, 0x8, 0x6, [], [{{0x9, 0x5, 0x5, 0x2, 0x400, 0xb1, 0x0, 0x6}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x39, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x800}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x81, 0x9, 0x58}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x0, 0x20, 0x18}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x4, 0x7f}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x7f, 0x20, 0x81}}, {{0x9, 0x5, 0xd, 0x10, 0x648, 0x8, 0x7, 0x68, [@generic={0x1e, 0xb, "614a54c589e07246d38c9c33147b6ffefc447084e0bb4a86021a8df9"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x1, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x90d8}]}}]}}]}}]}}, &(0x7f0000002140)={0xa, &(0x7f00000020c0)={0xa, 0x6, 0x110, 0x9, 0x6, 0x7, 0x10, 0x5}, 0x5, &(0x7f0000002100)={0x5, 0xf, 0x5}})
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x2)
ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000002180))
r3 = syz_usb_connect$cdc_ncm(0x6, 0x9f, &(0x7f0000002280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x2, 0x1, 0x6, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "921760"}, {0x5, 0x24, 0x0, 0xfffc}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5, 0xfffe, 0x1}, {0x6, 0x24, 0x1a, 0x6, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x9, 0x9, 0x9b}, @country_functional={0xc, 0x24, 0x7, 0x1, 0x3, [0x3, 0x8, 0x0]}, @call_mgmt={0x5}, @dmm={0x7, 0x24, 0x14, 0x800, 0x87}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x7, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xff, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x3f, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x71, 0xa3}}}}}}}]}}, &(0x7f0000002740)={0xa, &(0x7f0000002340)={0xa, 0x6, 0x0, 0x8, 0x8, 0x47, 0x20}, 0x160, &(0x7f0000002380)={0x5, 0xf, 0x160, 0x3, [@generic={0x6f, 0x10, 0xa, "912cd415de691d2c1d4b51d6c64dea5c662dd5c845a98197cf1d798532045ae97383c653da56b721435c84b183287ff4082a17096a94b5df7bf0923c19639c1b2a27ad544392d5483310111f573873b744994dc8eb701189a72fa96779434d475fadec80fa55340dfa54c5ac"}, @generic={0x6c, 0x10, 0x1, "ca616302267b1e82e2cf84e72d1ebb0cd87a0e70d3cddd035288c750bb895d65552466aa9275365e128f9fa3a641809f3fd0ba3e0d6f2bad1e829db68a87461f999862994b46350c8e74117b7e756922bb7f6876967f116b0292eb86d2e1d9895aedd5050d4a92a306"}, @generic={0x80, 0x10, 0x3, "1abe418aa7288b709f3624c4292d12b8fb220c14e2c62d31f999c95738a586f02dcbe9deef0ba3375f9af1e304c1744cb16b41002a7c068fbb4e2153a901d233439f1a6d96a306eac8cf5983a3a0389791e2b0cb86e53f98427409bba30e774e636d9d068edf4e49b0a1208fab8956ce85ad42f91c51f072573da482d6"}]}, 0x5, [{0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0x44f}}, {0xbf, &(0x7f0000002540)=@string={0xbf, 0x3, "42545b71051b2faed0192c200cd46a9f0095bb70a8639a74030ab34991ce383ec0e9c5d45554f4ceca4d02392ac2d53206a051b7f35ba332b0de28921e216309583caf507f936123738318b6894221e714b938cd12903e202586cbf429ce807e03229629d621cfe2ff70cab960535fc6b140cfbbc7fff3c00fc65bb0129b418f4de7300a6785bb3693880b5691a90a81cd76e394d98e32fc6625eb22cac343e9385f63a5d5dcd41a0a5e9b15a29d39ed944d373e203fbe65ddbbbbe399"}}, {0x4, &(0x7f0000002600)=@lang_id={0x4}}, {0x4, &(0x7f0000002640)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x96, &(0x7f0000002680)=@string={0x96, 0x3, "7a81b83f74757785761f3aa9beaa605cd479c909687db0b193423da776b8083e1a1da8c373334d64c068bfebb2ca8e4bf3173e5db3a3d2589ef6571ba6e6f8123a22f0b717b6d822c4df72e7d01376b0d28ffdea9409c0d27a12f850537ffb4686ab31d559ea10732899e7c916fd5d145881fb48e94a399f80dfccb5bb580dd2f99764b050b8ea9bd079e996316dd8dd62b5d645"}}]})
syz_usb_ep_write(r3, 0x6f, 0x5d, &(0x7f00000027c0)="770b9e046531405236af9bde52d33ea7bdb2dc27166cc92d211c23596aa23c920e242ae032f428b0aaa6567674a0f83703af2ba73858fd2ab473279596b26c202f59375565b6d5ccc8905c3d90a1dead80a4302473672e11c87b2c936a")
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x3, 0xa, 0x8, "b557370ed90d192b2db3f50b5183d38c7e074dd32ad13af735147d9b1824eabf119a5a785b5b7154979b9a5cef6bd271f34faccf4ac87565ee590ddb95cf5bd3", "99c9f61f940c1019af04cbd838ed6c21ea4d1aeee48f540dfcbd57c5a705ac29efb70028b9af5d8ee4b2cc55d7dbc7066c86a251f5add79593b8af495eed2b05", "7d662b550c686992e4e3c76824bd88c44ed43793345ab3712d831de144a8440b", [0x5, 0x8]})
openat$sr(0xffffffffffffff9c, &(0x7f0000002940), 0x145842, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x58, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xb02}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x20000001)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000002ac0)=0x60, 0x2)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000032c0)={0x14, &(0x7f00000031c0)={0x40, 0x6, 0x89, {0x89, 0xc, "f279def327ac98c10ce349ae08ed1a41ea493ac8e25b20cfdcb4dccb9f8c2f93b323fa9f785f7692d2c012534044a04b844e790caf82dbd18ddb634ffedb9a61d251d264527ee4d94d1512fd23129fa661d2a414b37514ccdd03d85e06840868d003f36c7068fa28bac6195517479b5b7c2e6ab1a3194747b135eff1c91b600f3ee631c44b6711"}}, &(0x7f0000003280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003540)={0x44, &(0x7f0000003300)={0x0, 0x11, 0x73, "e4fca9e63e0b8e5dc2a878937cfbbe59303b1ae7e0e8908022eb2f641ce4c5bc680b07cbf8434cbf2b3dd895d11d6d1d8f53acd65296a8ca3b391f7cbc88ae6e810df38fc845227957d0c448e43368ac2fc82ff03b4a54651eb73e2cbbc8faaec5016017f464da54afb7a61e44e2c09ebc21fc"}, &(0x7f0000003380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000033c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000003400)={0x20, 0x80, 0x1c, {0x3f, 0x9, 0xffff, 0x1000, 0x0, 0x7, 0x0, 0x400, 0x0, 0x0, 0x3, 0x1000}}, &(0x7f0000003440)={0x20, 0x85, 0x4, 0xfff}, &(0x7f0000003480)={0x20, 0x83, 0x2}, &(0x7f00000034c0)={0x20, 0x87, 0x2, 0x40}, &(0x7f0000003500)={0x20, 0x89, 0x2, 0x1}})

05:01:55 executing program 4:
syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x40240d1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x400240, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x15}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x40, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x22, 0x0, @random="8d8c962de2fb0fecb51f4c666220dbc18cb20c0b7a77c573d941f814210f"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}]}, 0x6c}}, 0x20000000)
write$vga_arbiter(r2, &(0x7f0000000380), 0xf)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
fsopen(&(0x7f00000003c0)='cramfs\x00', 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4)
openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0)
r5 = fsopen(&(0x7f0000000480)='ufs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000004c0)='/dev/loop-control\x00', 0x0, r0)
r6 = syz_open_dev$loop(&(0x7f0000000500), 0x7, 0x0)
ioctl$LOOP_SET_CAPACITY(r6, 0x4c07)
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x101800, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080)

[  130.892861] audit: type=1400 audit(1750827715.694:7): avc:  denied  { execmem } for  pid=285 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:01:55 executing program 5:
r0 = socket$inet6(0xa, 0x80000, 0x20)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@empty}, 0x14)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment={0x3b, 0x0, 0x8, 0x1, 0x0, 0x1, 0x66}, 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000080)="5cb39f6533d900a0eeca767644bd1c28bc1d70918a11867381724720ddd2a568867de1d5dfd292dc557c2f13818e3531398aeafcd0a922f7ff24b22c6fe698f3627e93609fd142bbbbbd2c1e9b0e91e2390dc4ce6d1266bb0408bc563e4a427d4696fa48076365d6fb8d16d5c0a0e3cc0fac7ad252fbc5dcb655", 0x7a)
setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000000100)="2914855696518ab8f23e05780afefbc21f98ac3d5cf88fff8c34e027f7f9ed9501d1e1b2aaa98692280d977ba4e75efda99b8c7df6a5ad8fddb10d", 0x3b)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000240)={0x8, 0xc})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1d5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x801, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x42}]}, 0x30}, 0x1, 0x0, 0x0, 0x40b0}, 0x4044010)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x2b, &(0x7f00000005c0)="e895eb6b15097a94035abbb3b10ae602aac45deeed0ee61e573c0965773efe7873e668855941531130ee6c377e7386f92f21f9b3f0f513054802d0074f816c819fa6a1ef9b14a0c3382e6b9b2ca52433bd05964c91e32dd9bff8f5b6172a8d968097e4a7e296ed88b0e27703abb53b19bdf47c09bc4d6affd9c5b63de6e265c1efdac3b89c8739ebcd20d6d76d72a9d4e1ba", 0x92)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x9}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000805}, 0x8000)
ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f00000007c0)={0xfa9e, 0x5})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000019c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000009}, 0xc, &(0x7f0000001980)={&(0x7f0000000840)={0x1118, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x5}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10b8, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_5GHZ={0xa4, 0x1, "65d0c8f8ef3f819f7401212e709aff27b352bb7440a7c66fd66b211bcfaaa8e188ff8b478d2f7a4073d7fc086f4c67a178eda8aee0d131c678021c35af31bf14314fc7975cc9e32680e28820efd8837787e7a87e73246364be61cfc02b1bd204fb2af728a1eaf8356cbd180db92eab31b4b5c2ce61bfeee947ea1519696288a83e50d1a0e292d22b9f2c5c7ea89fdda33ee0d8738db5747f1f313cd6df40e291"}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x6, 0x1, "5b06"}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x101}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x400}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x24, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="a6ac6bf591fd"}]}]}, 0x1118}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000001a00)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14)

05:01:55 executing program 6:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x2c}}, 0x20004080)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x408000, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000200)={'erspan0\x00', <r3=>0x0, 0xf80e, 0x40, 0xff, 0x2, {{0x4b, 0x4, 0x1, 0x5, 0x12c, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @private=0xa010100, {[@ssrr={0x89, 0x27, 0xa8, [@rand_addr=0x64010101, @multicast1, @local, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @local]}, @noop, @lsrr={0x83, 0x1f, 0xd1, [@rand_addr=0x64010100, @loopback, @multicast2, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0xc, 0x5e, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp={0x44, 0x14, 0x1f, 0x0, 0x5, [0xf2, 0x9, 0x7f, 0xff]}, @cipso={0x86, 0x16, 0x0, [{0x0, 0xc, "a5bc20201a1680c3d59e"}, {0x2, 0x4, "44ff"}]}, @cipso={0x86, 0x5c, 0x3, [{0x5, 0x12, "1eb80d89197227548323934baa5c5111"}, {0x1, 0xe, "ad6d811810ba4c40ee7af265"}, {0x1, 0xa, "a000803ea44443ab"}, {0x2, 0xf, "43ab3200cd810df789f06485e0"}, {0x1, 0xf, "c43ab98f298511a48994223fb3"}, {0x6, 0xe, "84663823a76fc44904093e43"}]}, @end, @timestamp_addr={0x44, 0x3c, 0xfb, 0x1, 0x0, [{@local, 0x6}, {@rand_addr=0x64010100, 0x2}, {@remote, 0x3}, {@multicast1, 0x5}, {@remote, 0x6}, {@local, 0x2}, {@local, 0x2}]}]}}}}})
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xda1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000808)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', <r6=>r3, 0x4, 0x7, 0x8, 0x80000000, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x40, 0x7800, 0x9, 0x810}})
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x74e}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000481}, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x20008000)
r7 = fsmount(r1, 0x1, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000081}, 0x14)
r8 = fsmount(r7, 0x0, 0x1)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3e}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004004}, 0x80)
r9 = fsmount(r8, 0x1, 0x80)
r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x501000, 0x0)
fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000000a40)='batadv_slave_1\x00', 0x0, r10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r10)
sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r11, 0x900, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x4000050)

05:01:55 executing program 7:
getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xf, 0x4, "51548fafb933fb9b96cffe"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "946a0fb29a"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x200c0c1)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x161000, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r0, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9eb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048002}, 0x20040000)
r4 = socket$inet6(0xa, 0x6, 0xc2)
sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f00000004c0)={0xa, 0x4e23, 0xca, @ipv4={'\x00', '\xff\xff', @local}, 0x34136881}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000500)="fb9b3b7e50d57e329ea66f0944dcdfd006b6201ca4e15f7be2bce542cf7b5f4195345f44275cb4b80ebace7f3e4408740d9f35681b33f9dd180fc4c69fec2854de17319b05b3875f9e7ca0ad6893f33928e848998fa53ee2163d45aabb90e0120c56dde34da719bd3054588dba5230380a95135feb7afd912508943d254f9d9b4530b3", 0x83}, {&(0x7f00000005c0)="42f2830ab82c3bd9758a5038e43214724a44a947d8083d1d1bed99f8531cf90fd384e72865c079355a23da1323191d72e3af7b26708d7e6129d5eb92c4b2a2ed8f36305b736a", 0x46}, {&(0x7f0000000640)="2176a4af1e08906dcaab17201df85da047e3356184c3cab13ca1c1db47bd1ac6595b6442c3c7924c62a2ac14b3cf6201ee98bd9d4cc0e04848db9cf3477d185fc63b039584320d621541653394ac1f90e9c327251067c14724e5", 0x5a}, {&(0x7f00000006c0)="b143176b", 0x4}, {&(0x7f0000000700)="c8b0a0af1d4c051fb8f7226dcdf40986e189a07e445d600aa586ced0881895f1f4e3589ec13327fab60b1fdd16da83c221bc39c82c173c6ed5e4dde7986ecd2380f80c773e7ec32321dd0086ee57e9aef29f3b459f33a1136055e0360b49ddd03e741a33c5707ad3117f68005d4cb90bd17b5081cf44ad4ae7419701413e9b18173e7007d4098dbad6e441706013b672720bf2", 0x93}], 0x5, &(0x7f0000000840)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x18}, 0x20008004)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r2)
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x44000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r5, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000844)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000b80)=0x80, 0x1)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r2)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r6, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6_vti0\x00', <r7=>0x0, 0x29, 0x9, 0x40, 0x5, 0x22, @dev={0xfe, 0x80, '\x00', 0x23}, @private2, 0x20, 0x8050, 0x6, 0x5}})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x60, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x684}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040880}, 0x40844)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r2)
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x47}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40)

[  132.236639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  132.241272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  132.247859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  132.249891] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  132.253145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  132.255180] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  132.264923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  132.267506] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  132.271760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  132.277121] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  132.403033] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  132.414779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  132.418416] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  132.424506] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  132.442128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  132.443725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  132.448189] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  132.453568] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  132.461466] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  132.497419] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  132.517801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  132.522800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  132.532401] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  132.546581] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  132.556321] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  132.560406] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  132.574137] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  132.579689] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  132.583200] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  132.585344] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  132.592471] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  132.598724] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  132.600274] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  132.602607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  132.604682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  132.610527] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  132.612845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  132.619524] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  132.663443] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  132.695481] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  134.303074] Bluetooth: hci0: command tx timeout
[  134.366398] Bluetooth: hci1: command tx timeout
[  134.494020] Bluetooth: hci3: command tx timeout
[  134.558255] Bluetooth: hci2: command tx timeout
[  134.686071] Bluetooth: hci7: command tx timeout
[  134.686727] Bluetooth: hci5: command tx timeout
[  134.688071] Bluetooth: hci4: command tx timeout
[  134.816987] Bluetooth: hci6: command tx timeout
[  136.350179] Bluetooth: hci0: command tx timeout
[  136.414125] Bluetooth: hci1: command tx timeout
[  136.542009] Bluetooth: hci3: command tx timeout
[  136.607003] Bluetooth: hci2: command tx timeout
[  136.734147] Bluetooth: hci7: command tx timeout
[  136.734602] Bluetooth: hci4: command tx timeout
[  136.736103] Bluetooth: hci5: command tx timeout
[  136.863991] Bluetooth: hci6: command tx timeout
[  138.399023] Bluetooth: hci0: command tx timeout
[  138.462043] Bluetooth: hci1: command tx timeout
[  138.590149] Bluetooth: hci3: command tx timeout
[  138.654975] Bluetooth: hci2: command tx timeout
[  138.782896] Bluetooth: hci4: command tx timeout
[  138.783400] Bluetooth: hci5: command tx timeout
[  138.783804] Bluetooth: hci7: command tx timeout
[  138.910226] Bluetooth: hci6: command tx timeout
[  140.446387] Bluetooth: hci0: command tx timeout
[  140.510014] Bluetooth: hci1: command tx timeout
[  140.638241] Bluetooth: hci3: command tx timeout
[  140.702013] Bluetooth: hci2: command tx timeout
[  140.830052] Bluetooth: hci7: command tx timeout
[  140.831175] Bluetooth: hci5: command tx timeout
[  140.831191] Bluetooth: hci4: command tx timeout
[  140.959072] Bluetooth: hci6: command tx timeout
[  194.672836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  194.678588] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  194.681723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  194.690669] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  194.697385] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.864219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  194.867243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  194.872583] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  194.881815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  194.887858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  194.953082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  194.957416] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  194.959869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  194.970262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  194.994679] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  195.087227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  195.092892] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  195.095516] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  195.113432] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  195.141794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  195.144918] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  195.150711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  195.157725] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  195.178062] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  195.185459] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  195.196108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  195.196244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  195.231477] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  195.233841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  195.240581] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  195.243563] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  195.257457] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  195.264571] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  195.270344] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  195.308100] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  195.360907] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  195.371771] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  195.376323] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  195.384600] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  195.390396] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  196.767203] Bluetooth: hci0: command tx timeout
[  196.958262] Bluetooth: hci1: command tx timeout
[  197.022217] Bluetooth: hci2: command tx timeout
[  197.280887] Bluetooth: hci3: command tx timeout
[  197.406044] Bluetooth: hci6: command tx timeout
[  197.470442] Bluetooth: hci7: command tx timeout
[  197.471481] Bluetooth: hci4: command tx timeout
[  197.535032] Bluetooth: hci5: command tx timeout
[  198.816050] Bluetooth: hci0: command tx timeout
[  199.007045] Bluetooth: hci1: command tx timeout
[  199.071991] Bluetooth: hci2: command tx timeout
[  199.327013] Bluetooth: hci3: command tx timeout
[  199.454006] Bluetooth: hci6: command tx timeout
[  199.518274] Bluetooth: hci4: command tx timeout
[  199.519789] Bluetooth: hci7: command tx timeout
[  199.582382] Bluetooth: hci5: command tx timeout
[  200.862426] Bluetooth: hci0: command tx timeout
[  201.054550] Bluetooth: hci1: command tx timeout
[  201.118116] Bluetooth: hci2: command tx timeout
[  201.374353] Bluetooth: hci3: command tx timeout
[  201.502179] Bluetooth: hci6: command tx timeout
[  201.566026] Bluetooth: hci7: command tx timeout
[  201.566104] Bluetooth: hci4: command tx timeout
[  201.630145] Bluetooth: hci5: command tx timeout
[  202.911169] Bluetooth: hci0: command tx timeout
[  203.102465] Bluetooth: hci1: command tx timeout
[  203.168316] Bluetooth: hci2: command tx timeout
[  203.423965] Bluetooth: hci3: command tx timeout
[  203.550285] Bluetooth: hci6: command tx timeout
[  203.614016] Bluetooth: hci7: command tx timeout
[  203.614714] Bluetooth: hci4: command tx timeout
[  203.678408] Bluetooth: hci5: command tx timeout
[  256.886431] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  256.891545] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  256.896739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  256.907403] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  256.913546] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  257.068088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  257.072688] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  257.075801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  257.084871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  257.092135] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  257.147858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  257.160337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  257.165743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  257.179628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  257.187491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  257.229305] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  257.233540] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  257.237566] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  257.247653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  257.254654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  257.288147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  257.299745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  257.303716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  257.306068] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  257.320323] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  257.324688] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  257.334214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  257.356378] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  257.370093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  257.389308] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  257.399337] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  257.402748] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  257.413492] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  257.430014] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  257.459768] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  257.464827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  257.483515] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  257.491540] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  257.510774] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  257.512624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  258.974030] Bluetooth: hci0: command tx timeout
[  259.166317] Bluetooth: hci1: command tx timeout
[  259.294055] Bluetooth: hci2: command tx timeout
[  259.358082] Bluetooth: hci5: command tx timeout
[  259.358256] Bluetooth: hci3: command tx timeout
[  259.550016] Bluetooth: hci4: command tx timeout
[  259.614274] Bluetooth: hci6: command tx timeout
[  259.678139] Bluetooth: hci7: command tx timeout
[  261.022966] Bluetooth: hci0: command tx timeout
[  261.217050] Bluetooth: hci1: command tx timeout
[  261.343626] Bluetooth: hci2: command tx timeout
[  261.406176] Bluetooth: hci5: command tx timeout
[  261.406247] Bluetooth: hci3: command tx timeout
[  261.599971] Bluetooth: hci4: command tx timeout
[  261.662200] Bluetooth: hci6: command tx timeout
[  261.726066] Bluetooth: hci7: command tx timeout
[  263.070083] Bluetooth: hci0: command tx timeout
[  263.262388] Bluetooth: hci1: command tx timeout
[  263.390033] Bluetooth: hci2: command tx timeout
[  263.454228] Bluetooth: hci3: command tx timeout
[  263.455280] Bluetooth: hci5: command tx timeout
[  263.646281] Bluetooth: hci4: command tx timeout
[  263.711455] Bluetooth: hci6: command tx timeout
[  263.774124] Bluetooth: hci7: command tx timeout
[  265.119039] Bluetooth: hci0: command tx timeout
[  265.311044] Bluetooth: hci1: command tx timeout
[  265.438635] Bluetooth: hci2: command tx timeout
[  265.503050] Bluetooth: hci5: command tx timeout
[  265.503536] Bluetooth: hci3: command tx timeout
[  265.694215] Bluetooth: hci4: command tx timeout
[  265.758025] Bluetooth: hci6: command tx timeout
[  265.822114] Bluetooth: hci7: command tx timeout
[  319.288251] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  319.292372] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  319.304577] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  319.316625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  319.322802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  319.660289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  319.664117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  319.666580] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  319.677367] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  319.682418] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  319.686823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  319.689858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  319.699407] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  319.725460] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  319.734558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  319.756858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  319.767193] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  319.776477] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  319.778681] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  319.786201] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  319.802439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  319.816582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  319.823903] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  319.827597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  319.834181] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  319.842544] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  319.847747] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  319.851247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  319.867237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  319.880256] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  319.884397] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  319.902562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  319.906490] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  319.914907] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  319.944393] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  319.953672] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  319.955223] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  319.969559] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  320.007421] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  320.027754] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  321.375013] Bluetooth: hci0: command tx timeout
[  321.758326] Bluetooth: hci1: command tx timeout
[  321.823088] Bluetooth: hci2: command tx timeout
[  321.887015] Bluetooth: hci3: command tx timeout
[  321.950018] Bluetooth: hci4: command tx timeout
[  322.079047] Bluetooth: hci6: command tx timeout
[  322.079064] Bluetooth: hci7: command tx timeout
[  322.142124] Bluetooth: hci5: command tx timeout
[  323.422014] Bluetooth: hci0: command tx timeout
[  323.806909] Bluetooth: hci1: command tx timeout
[  323.871048] Bluetooth: hci2: command tx timeout
[  323.934315] Bluetooth: hci3: command tx timeout
[  323.997992] Bluetooth: hci4: command tx timeout
[  324.126282] Bluetooth: hci6: command tx timeout
[  324.127173] Bluetooth: hci7: command tx timeout
[  324.191273] Bluetooth: hci5: command tx timeout
[  325.472106] Bluetooth: hci0: command tx timeout
[  325.854205] Bluetooth: hci1: command tx timeout
[  325.918008] Bluetooth: hci2: command tx timeout
[  325.982172] Bluetooth: hci3: command tx timeout
[  326.046383] Bluetooth: hci4: command tx timeout
[  326.175382] Bluetooth: hci7: command tx timeout
[  326.175466] Bluetooth: hci6: command tx timeout
[  326.238111] Bluetooth: hci5: command tx timeout
[  327.518130] Bluetooth: hci0: command tx timeout
[  327.902028] Bluetooth: hci1: command tx timeout
[  327.968064] Bluetooth: hci2: command tx timeout
[  328.030203] Bluetooth: hci3: command tx timeout
[  328.093983] Bluetooth: hci4: command tx timeout
[  328.222043] Bluetooth: hci6: command tx timeout
[  328.223316] Bluetooth: hci7: command tx timeout
[  328.286002] Bluetooth: hci5: command tx timeout
[  381.685867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  381.693851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  381.696910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  381.712010] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  381.720136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  382.134330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  382.138857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  382.142261] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  382.151364] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  382.156978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  382.229093] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  382.231534] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  382.234358] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  382.266816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  382.270427] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  382.282320] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  382.293031] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  382.294562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  382.301565] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  382.332716] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  382.334544] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  382.339497] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  382.348154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  382.357188] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  382.360867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  382.446326] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  382.484204] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  382.521344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  382.538898] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  382.552888] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  382.561578] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  382.563874] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  382.600912] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  382.603731] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  382.606253] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  382.610358] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  382.618777] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  382.627606] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  382.635884] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  382.638819] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  383.774118] Bluetooth: hci0: command tx timeout
[  384.222303] Bluetooth: hci1: command tx timeout
[  384.416074] Bluetooth: hci2: command tx timeout
[  384.416816] Bluetooth: hci3: command tx timeout
[  384.478007] Bluetooth: hci4: command tx timeout
[  384.670169] Bluetooth: hci6: command tx timeout
[  384.670894] Bluetooth: hci7: command tx timeout
[  384.799223] Bluetooth: hci5: command tx timeout
[  385.822984] Bluetooth: hci0: command tx timeout
[  386.270391] Bluetooth: hci1: command tx timeout
[  386.464846] Bluetooth: hci3: command tx timeout
[  386.465366] Bluetooth: hci2: command tx timeout
[  386.525987] Bluetooth: hci4: command tx timeout
[  386.719413] Bluetooth: hci7: command tx timeout
[  386.719902] Bluetooth: hci6: command tx timeout
[  386.846699] Bluetooth: hci5: command tx timeout
[  387.871263] Bluetooth: hci0: command tx timeout
[  388.321002] Bluetooth: hci1: command tx timeout
[  388.511033] Bluetooth: hci3: command tx timeout
[  388.511523] Bluetooth: hci2: command tx timeout
[  388.574143] Bluetooth: hci4: command tx timeout
[  388.766114] Bluetooth: hci7: command tx timeout
[  388.766606] Bluetooth: hci6: command tx timeout
[  388.895269] Bluetooth: hci5: command tx timeout
[  389.918991] Bluetooth: hci0: command tx timeout
[  390.366051] Bluetooth: hci1: command tx timeout
[  390.558728] Bluetooth: hci2: command tx timeout
[  390.560076] Bluetooth: hci3: command tx timeout
[  390.622545] Bluetooth: hci4: command tx timeout
[  390.815536] Bluetooth: hci7: command tx timeout
[  390.816691] Bluetooth: hci6: command tx timeout
[  390.942081] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
05:07:02  Registers:
info registers vcpu 0
RAX=0000000000020005 RBX=ffff888036c0b700 RCX=0000000000000000 RDX=0000000000000005
RSI=0000000000000000 RDI=ffffffff85c1cc40 RBP=ffff888036c0c158 RSP=ffff888025546eb0
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000
R12=ffff888036c0c180 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81518dc4 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe5000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f23fdc63260 CR3=000000001c13b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff84b2231f RBX=ffffffff816049e0 RCX=ffff88801a4bf4fc RDX=1ffff11003497ec0
RSI=ffffffff85c1cc40 RDI=ffffffff84b2231f RBP=ffff88801a4bf640 RSP=ffff88801a4bf5a8
R8 =0000000000000001 R9 =ffff88801a4bf5e8 R10=000000000003b53d R11=000000000002610f
R12=ffff88801a4bf670 R13=0000000000000000 R14=ffff888028f21b80 R15=0000000000092cc0
RIP=ffffffff812d960c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f56302c0260 CR3=000000000bb9f000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000