syzkaller login: [   91.498348] sshd (239) used greatest stack depth: 25000 bytes left
Warning: Permanently added '[localhost]:28564' (ECDSA) to the list of known hosts.
2025/04/23 08:11:26 fuzzer started
2025/04/23 08:11:27 dialing manager at localhost:42253
[   93.431770] cgroup: Unknown subsys name 'net'
[   93.586135] cgroup: Unknown subsys name 'cpuset'
[   93.632558] cgroup: Unknown subsys name 'rlimit'
2025/04/23 08:11:44 syscalls: 200
2025/04/23 08:11:44 code coverage: enabled
2025/04/23 08:11:44 comparison tracing: enabled
2025/04/23 08:11:44 extra coverage: enabled
2025/04/23 08:11:44 setuid sandbox: enabled
2025/04/23 08:11:44 namespace sandbox: enabled
2025/04/23 08:11:44 Android sandbox: enabled
2025/04/23 08:11:44 fault injection: enabled
2025/04/23 08:11:44 leak checking: enabled
2025/04/23 08:11:44 net packet injection: enabled
2025/04/23 08:11:44 net device setup: enabled
2025/04/23 08:11:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/23 08:11:44 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/23 08:11:44 USB emulation: enabled
2025/04/23 08:11:44 hci packet injection: enabled
2025/04/23 08:11:44 wifi device emulation: enabled
2025/04/23 08:11:44 802.15.4 emulation: enabled
2025/04/23 08:11:44 fetching corpus: 0, signal 0/0 (executing program)
2025/04/23 08:11:45 starting 8 fuzzer processes
08:11:45 executing program 0:
r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff)
r1 = syz_io_uring_complete(0x0)
openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000140)={0x1}, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2)
sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf51}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x20004010)
r6 = openat$cgroup(r2, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000003c0)='blkio.bfq.dequeue\x00', 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x8000)
r8 = gettid()
r9 = openat$cgroup_ro(r7, &(0x7f00000007c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
clone3(&(0x7f0000000800)={0x83010c00, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x3e}, &(0x7f00000005c0)=""/182, 0xb6, &(0x7f0000000680)=""/244, &(0x7f0000000780)=[0x0, 0xffffffffffffffff, r8, 0xffffffffffffffff], 0x4, {r9}}, 0x58)

08:11:45 executing program 1:
r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
semctl$GETVAL(0x0, 0x2, 0xc, &(0x7f0000000000)=""/50)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/174)
r1 = semget$private(0x0, 0x3, 0x80)
semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000100)=""/219)
semctl$IPC_INFO(r1, 0x2, 0x3, &(0x7f0000000200)=""/225)
r2 = semget$private(0x0, 0x3, 0x0)
semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000300))
semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000340))
semget$private(0x0, 0x0, 0x420)
semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000000380)=0x7)
semtimedop(r2, &(0x7f00000003c0)=[{0x4, 0x7ff, 0x1000}, {0x4, 0xfffe, 0x1000}, {0x4, 0x7}, {0x0, 0x7, 0x1000}, {0x2, 0x8, 0x1000}, {0x3, 0x8, 0x800}, {0x3, 0xfff, 0x800}], 0x7, &(0x7f0000000400))
semctl$GETNCNT(r2, 0x3, 0xe, &(0x7f0000000440)=""/210)
r3 = semget(0x3, 0x4, 0x114)
semop(r3, &(0x7f0000000540)=[{0x1, 0x537a, 0x1000}, {0x2, 0x800, 0x1800}, {0x5, 0x4, 0x800}, {0x4, 0x6, 0x1000}, {0x0, 0x4, 0x800}, {0x3, 0x3, 0x1800}, {0x2, 0x1}, {0x2, 0x8, 0x800}], 0x8)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.io_merged\x00', 0x0, 0x0)
setsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f00000005c0)="753d2e4cd7f1a73feae40fc1415dbea32b20c531a065805aabb5531bae8b6de575e3ae116b0ba45c1f7873816c4d9a6774b5cf5a69393a1b4ba2fed363888fbac5d3ae03aebf0a8f0032bbdc47704a22c6902168592a88ee8a45e26a4ff6fc323f5c24ba13f2d63e8d6fb15e7068f4bcb2c163e81f3ce7e05f76c48123436daba9f387ad85fc8fde0e85402217a3fe71737886ae44124de1fb9ce28b6fdf51891af4b76742", 0xa5)
r5 = getuid()
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000680)={{0x0, r5, 0x0, 0x0, 0xee00, 0x0, 0x400}, 0x8000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x9})

08:11:46 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40883050}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x93}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x2004c004)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000180)={0xff, 0x1})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x871)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001140)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001100)={&(0x7f00000003c0)={0xd24, 0x0, 0xa00, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffff01}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x34c, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9ae88603e13d4a42b71415870b6d52ffb9c5eb38ae686172ef4fafecd0acd1b3"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ae07372e766f4d5f55a8e2503addab24f630884cca907b4745d05410bc986867"}]}, {0x238, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}, @WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "61edd10f085177df663e744bf28380258f8d09c7b50f388ff975d872328b9c6c"}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "98258bb53255f378d513296ae02c8c4cefcee935bd3bf6313730d8808469e96a"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d24caec11673daf3c5f9554c3a80765ed910ac2e3f6c175f3eb8611f794f804a"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x96}, @WGDEVICE_A_PEERS={0x978, 0x8, 0x0, 0x1, [{0x264, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb24}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x178, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7fff, @local, 0x8000}}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @mcast1, 0x35}}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x101}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3, @loopback, 0x7fffffff}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x1dc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @empty, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x194, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x454, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "531fdb40eb195bf03afe9861eba12b252059752f2a1663b6347de60b2752925d"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_ALLOWEDIPS={0x41c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}]}]}]}, 0xd24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080)
openat$cgroup_pressure(r4, &(0x7f0000001180)='io.pressure\x00', 0x2, 0x0)
r5 = socket(0x25, 0x80000, 0x6)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001200), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001240)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x54, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9e}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe40a}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffff38}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000004)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x24040015)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000014c0), r4)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001900)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000018c0)={&(0x7f0000001500)={0x394, r8, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xa0000000}, @WGDEVICE_A_PEERS={0x300, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @remote, 0x401}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x284, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x238, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010100}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0xc474145a09c531f4}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9495}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x101}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xa9ef}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8}]}, 0x394}, 0x1, 0x0, 0x0, 0x20004005}, 0x91)
r9 = syz_open_dev$vcsn(&(0x7f0000001940), 0x80000000, 0x40800)
sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x3c, r6, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8040)

08:11:46 executing program 3:
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)=""/163, &(0x7f0000000140)=0xa3)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000001c0)="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", 0xfb)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000002c0)={0x80}, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @sack_perm, @sack_perm, @sack_perm, @sack_perm, @sack_perm, @sack_perm], 0x7)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2)
r3 = syz_io_uring_complete(0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14)
r4 = syz_open_dev$vcsn(&(0x7f0000000400), 0x2, 0x282800)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000440), 0x3ff, 0x100)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xaf1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd67a}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1c0, 0x14, 0x800, 0x70bd27, 0x25dfdbfb, {0x6, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x20, 0x1, "a30f37f8aa3ef85ee223db2a473fd440804d7afa94daad77a041a793"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "b5c1ce39c65c8e9e882f363d254759eaab403aa7500ca69309a330373660e758ff1374035209fc8a30f423415a599a9b17edffb71bd71987db2e1575132160294899c2364f0e1e5dcb90fb7f2d7964b2b43161105b8fa92acece433c38f57c29428f02179989a1c9ad9e02d2ddd7e7c7f0c813fb358490c729af76bdf35a76a76fb72ae6fbc11e082aa8bd5a8c5dcfe784fce670249b0509840099875eab36b333874297c70fb109fc281bfbb61f517e400dabd243a1d0be6a2ceff12c2041db4fa9d63bbcd4e7ce7876de"}, @INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "1c368129143bbe640c3bb0171c84c99b10afe143d3291605089b0892f8ac85474e581325eca7205441cc899c45cd398e84f7b5c6413165e5a47e8075a018f2f69d63f2709d50e8e25accdf01b7200db5714cdf28bc6a5c49aa614765ea4330df66d40c1c2b27dfebc5d68070c487f57975f791e2ed974c54f91446edb5ca507728dae2a3e4c626490c8b1df86f315af64bd363c254e32ac837d353c95b54b0c3584bef611abf820934111631b43f3f84bf2af39490942dc5"}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20810}, 0x55)

[  112.164222] audit: type=1400 audit(1745395906.056:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:11:46 executing program 5:
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000))
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040))
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080))
r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0)
socket$packet(0x11, 0x2, 0x300)
prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0))
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000100))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = accept4$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x80800)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x434, 0x12, 0x200, 0x70bd27, 0x25dfdbfe, {0x10, 0x5, 0x4, 0x3, {0x4e23, 0x4e20, [0x1, 0x6, 0x4e, 0x6], [0x1, 0x8, 0xfbe3, 0x85c], 0x0, [0x2, 0x1]}, 0x0, 0x3b}, [@INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "52cad250628bf00c671af8cf3155230d8657651b6707b0a6ee735235aa23b67eb502bd59fb3f4b39a846c61fc8afc1a0d19c2d65f29ab0c6bd24645d232a03b52f9d0c2492c1210becae0b42ab2c4b0db7c9408d0b1cd32c03f30d41e2fb4267e0140ba38de29aded2ae8a46d7654b78d84e080880662d3b8542ed2517a7691e4cc706237f20243518e1813df4e9e693565c409c180c2014a3b82fce0753331a1cf9d903d78505e466a8152eec704d1666ac0e5130b7a328bf0db6999058d9b9a9219130c84ef0010b9a4aeb0c82"}, @INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "d7cbc297b24fe37b0ad5722a0973e5c965cec4f2649aca033680d8aeb5570a837ac5a289e0ac692cb077d6209d91061789868397e699b5d8ca63ef082b27215e2a6c1c5f13f0"}, @INET_DIAG_REQ_BYTECODE={0x67, 0x1, "3d9628636609b93cd6b39e8f75e4d68e1eebd67c96a5529583f0504f5b9c2a708c282304e7120749481e8a22345d552675ff6dfabd5c85504b17101a01897c5ff274ef4d02823226f36d9c63a49bab1b8285717fc42789dd2e50b079666315464b9ecb"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "d3f6a43e56a5ec7cf193eb31aade47b8be22bc590c3a44fd0fdab02697db36bac861617c33fbe9d1cf151617b52bf0b87f9eb98cfc2d67e19697d91fea95faf28fb275d1eb5367aacb32ae6122b704415d72ec40cc5362a45dd769bc197e144d2143db242975b7a4481ed4056eea47ff1fe5aa1abbe799f1c5fc5118f5483c"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "a91be27c6ecd0913798b5e220d0569"}, @INET_DIAG_REQ_BYTECODE={0x3c, 0x1, "ec08effb705dabd8b1172ffdc9d3e879640318b1313ae6cbeea29120f1b4646e33470761ab379938e19b028367b692ed9f4c7e0e5b93c166"}, @INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "4750cf85ad69ed6a43e6426f259702b7578f5654b228209a46a247875a1a611d40df6dbf10613223f56f79292703e6e27904beb186fe70f3e33119ce420bd58a881625ad52b6caf5c400cee8a51af10d3d9ce6cdfac3df29c80a435dbe9bdcfddc73a2f8b193fe9f42c5761fd77406b6ea9f183f4c261a3de0b5c91d3b0a9f2eb1eeb2ce8657cfe6c39a67d5275fa9bee5f9ef75dc2d21cd7cf04b2f584391b07e4cf55a0b5251f0144ed11a68d14e45ff172d09bb1e084963cc41483bc8523d73ac371bfa148426a80d1987e424a103fa8f0fb8cb86aec04127e3878a59063cb8b2df33c70a15cb05e9016f7a3fd548"}, @INET_DIAG_REQ_BYTECODE={0x95, 0x1, "4257a0c5e959722221f8bdaa7726cf16f5f4489a3181064656ce11a57b3ca20d7ddd02eea45afd88d499dfbaf6600eefffd439d5182b5ee8394df4bc751211a6e4227345cb155397900f067decd1b9d0468e7e056677236881d5f782d38233a201e106de025765040d66fd8b9e680020b74dc62cafde08da1d616f5c38ca828ec24e4fbc2bd9341ec0a481017550f21ba5"}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040)
bind$bt_l2cap(r2, &(0x7f00000006c0)={0x1f, 0xff55, @any, 0x8, 0x1}, 0xe)
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000700)=""/54)
r3 = io_uring_setup(0x2db4, &(0x7f0000000740)={0x0, 0x9175, 0x4, 0x3, 0x297})
io_uring_setup(0x6f7d, &(0x7f00000007c0)={0x0, 0xe4ca, 0x10, 0x2, 0x322, 0x0, r3})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000940))
r4 = syz_io_uring_setup(0x7482, &(0x7f0000000980)={0x0, 0x419, 0x20, 0x1, 0x157, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000a00), &(0x7f0000000a40))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)

08:11:46 executing program 4:
read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000)
r0 = syz_open_dev$usbmon(&(0x7f0000001080), 0xffff, 0x200)
mount$9p_fd(0x0, &(0x7f0000001000)='./file0\x00', &(0x7f0000001040), 0x400, &(0x7f00000010c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x4}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fsmagic={'fsmagic', 0x3d, 0xec5}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfshat}, {@dont_appraise}, {@measure}, {@appraise}, {@uid_eq={'uid', 0x3d, 0xee00}}]}})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x10}, 0x1}, 0x6)
read$ptp(0xffffffffffffffff, &(0x7f0000001200)=""/215, 0xd7)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001300)='cpuacct.usage_sys\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001380), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x54, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x810}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f00000014c0)={'\x00', 0xfffffff7, 0x3, 0x2})
clock_gettime(0x1, &(0x7f0000001540))
r3 = syz_open_dev$vcsn(&(0x7f00000015c0), 0x4, 0x8040)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r3)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x841c000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x40, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9892}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x1)
r4 = syz_open_dev$vcsn(&(0x7f0000001700), 0xfff, 0xb41)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001780), r1)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x40040c0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10080420}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x20000014)
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000001980))
get_mempolicy(&(0x7f00000019c0), &(0x7f0000001a00), 0x4, &(0x7f0000ffc000/0x3000)=nil, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

08:11:46 executing program 6:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x90800)
sendmsg$AUDIT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x3e9, 0x200, 0x70bd2a, 0x25dfdbfb, {0x49, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xe3ef, 0x7fff, 0x400, 0x0, 0x401}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x894)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffff000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x84)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:setrans_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000a00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000580)={0x43c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20000000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7, 0x0, 0x5, 0xffff}, {0x0, 0x87, 0x81, 0x82c}, {0x3, 0x1f, 0x9, 0x7}, {0x9f25, 0x3f, 0x9, 0x1000}, {0x54f, 0x40, 0x1, 0x354}, {0x9, 0x7f, 0x20, 0x7fffffff}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20020880}, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}}, 0x4000080)
syz_io_uring_setup(0x274c, &(0x7f0000000cc0)={0x0, 0xda46, 0x2, 0x3, 0x13, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000d40), &(0x7f0000000d80))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r5, 0xb7ffe1336dba6ab1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x810)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000f00)={'team0\x00', <r7=>0x0})
getsockname$packet(r0, &(0x7f0000000f40)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000f80)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001000)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f00000015c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f00000010c0)={0x4a0, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x104, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe50}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x101, 0x75, 0x3, 0x7022}, {0xc1f, 0x0, 0x7e, 0x9}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff800}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf8d3}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r4}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfff, 0x8, 0x0, 0x8}, {0x200, 0x4a, 0x3, 0x4}]}}}]}}, {{0x8, 0x1, r9}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x1f, 0x8, 0x1}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x4004004}, 0x8040)

08:11:46 executing program 7:
r0 = timerfd_create(0x1, 0x1000)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, 0xffffffffffffffff, 0x0, r0, 0x2, 0x0, 0x0, {0x0, r1}}, 0x1)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xb2c00, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{0x7fff}, {0xffffffffffffffff, 0x2}, 0x8})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r4, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c804}, 0x80)
r5 = syz_io_uring_complete(0x0)
sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20040011)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf46}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x894}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x22}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x801)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x8, 0x81, 0x2, 0x1f, 0x0, 0x3, 0x28408, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40, 0x1, @perf_config_ext={0x100000000}, 0x40, 0x7, 0x57, 0x1, 0x7ff, 0x0, 0x8d66, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xf, r5, 0xa)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2)
io_setup(0x6, &(0x7f0000000540)=<r7=>0x0)
io_cancel(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x3, r2, &(0x7f0000000580)="3c96e7cc04eccf02f47abcd57525fc", 0xf, 0x67e6, 0x0, 0x1, r5}, &(0x7f0000000600))
r8 = syz_open_dev$vcsn(&(0x7f0000000640), 0x7, 0x4000)
sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r4, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x200088c0)
r9 = socket(0x1e, 0x1, 0x1)
sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4000)

[  113.775208] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  113.779068] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  113.783168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  113.789179] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  113.795443] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  113.843165] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  113.861570] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  113.873301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  113.880178] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  113.883217] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  113.891758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  113.894551] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  113.906217] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  113.906648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  113.908544] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  113.917238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  113.923647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  113.929508] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  113.934034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  113.957638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  113.963170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  113.970147] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  113.972624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  113.987630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  113.992697] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  113.995663] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  114.015751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  114.018585] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  114.025474] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  114.040357] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  114.042697] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  114.045209] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  114.058679] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  114.063590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  114.066329] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  114.085498] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  114.094080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  114.097095] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  114.111753] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  114.114072] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  115.859930] Bluetooth: hci0: command tx timeout
[  116.049066] Bluetooth: hci3: command tx timeout
[  116.049093] Bluetooth: hci1: command tx timeout
[  116.113402] Bluetooth: hci2: command tx timeout
[  116.177016] Bluetooth: hci7: command tx timeout
[  116.177687] Bluetooth: hci4: command tx timeout
[  116.242092] Bluetooth: hci5: command tx timeout
[  116.242120] Bluetooth: hci6: command tx timeout
[  117.905101] Bluetooth: hci0: command tx timeout
[  118.097109] Bluetooth: hci1: command tx timeout
[  118.097562] Bluetooth: hci3: command tx timeout
[  118.163070] Bluetooth: hci2: command tx timeout
[  118.225300] Bluetooth: hci4: command tx timeout
[  118.225439] Bluetooth: hci7: command tx timeout
[  118.288971] Bluetooth: hci5: command tx timeout
[  118.289426] Bluetooth: hci6: command tx timeout
[  119.953088] Bluetooth: hci0: command tx timeout
[  120.145364] Bluetooth: hci3: command tx timeout
[  120.145425] Bluetooth: hci1: command tx timeout
[  120.210894] Bluetooth: hci2: command tx timeout
[  120.273000] Bluetooth: hci7: command tx timeout
[  120.273162] Bluetooth: hci4: command tx timeout
[  120.336961] Bluetooth: hci6: command tx timeout
[  120.337179] Bluetooth: hci5: command tx timeout
[  122.002080] Bluetooth: hci0: command tx timeout
[  122.193082] Bluetooth: hci1: command tx timeout
[  122.193943] Bluetooth: hci3: command tx timeout
[  122.257075] Bluetooth: hci2: command tx timeout
[  122.321101] Bluetooth: hci4: command tx timeout
[  122.321650] Bluetooth: hci7: command tx timeout
[  122.385931] Bluetooth: hci6: command tx timeout
[  122.386453] Bluetooth: hci5: command tx timeout
[  176.035333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  176.036840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  176.038201] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  176.042228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  176.044038] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  176.158711] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.176719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.178687] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.182085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.186373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.188011] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.194371] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.196046] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.199619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.203580] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.300280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  176.306478] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  176.310891] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.313503] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  176.322343] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  176.327565] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.334353] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  176.334693] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  176.336896] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.357492] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  176.367473] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  176.373043] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  176.375160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  176.376179] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  176.388064] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  176.389241] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  176.390031] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  176.409428] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  176.417753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  176.447698] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.476885] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  176.519319] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  176.523737] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  176.577217] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  176.624034] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  178.065160] Bluetooth: hci0: command tx timeout
[  178.256987] Bluetooth: hci1: command tx timeout
[  178.257808] Bluetooth: hci2: command tx timeout
[  178.448942] Bluetooth: hci5: command tx timeout
[  178.513172] Bluetooth: hci4: command tx timeout
[  178.577148] Bluetooth: hci7: command tx timeout
[  178.642011] Bluetooth: hci3: command tx timeout
[  178.704969] Bluetooth: hci6: command tx timeout
[  180.113133] Bluetooth: hci0: command tx timeout
[  180.306091] Bluetooth: hci2: command tx timeout
[  180.306572] Bluetooth: hci1: command tx timeout
[  180.497918] Bluetooth: hci5: command tx timeout
[  180.561964] Bluetooth: hci4: command tx timeout
[  180.625975] Bluetooth: hci7: command tx timeout
[  180.688979] Bluetooth: hci3: command tx timeout
[  180.753916] Bluetooth: hci6: command tx timeout
[  182.162012] Bluetooth: hci0: command tx timeout
[  182.353435] Bluetooth: hci2: command tx timeout
[  182.354469] Bluetooth: hci1: command tx timeout
[  182.545020] Bluetooth: hci5: command tx timeout
[  182.611931] Bluetooth: hci4: command tx timeout
[  182.674347] Bluetooth: hci7: command tx timeout
[  182.737981] Bluetooth: hci3: command tx timeout
[  182.802984] Bluetooth: hci6: command tx timeout
[  184.209169] Bluetooth: hci0: command tx timeout
[  184.400958] Bluetooth: hci2: command tx timeout
[  184.400983] Bluetooth: hci1: command tx timeout
[  184.592936] Bluetooth: hci5: command tx timeout
[  184.656977] Bluetooth: hci4: command tx timeout
[  184.721096] Bluetooth: hci7: command tx timeout
[  184.785032] Bluetooth: hci3: command tx timeout
[  184.849164] Bluetooth: hci6: command tx timeout
[  238.308410] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  238.312363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  238.316331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  238.324455] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  238.330398] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  238.447075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  238.452126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  238.454633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  238.456835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  238.461989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  238.465144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.472142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  238.483705] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  238.511724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  238.524102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  238.719493] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  238.737482] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  238.740705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  238.742615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  238.746453] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  238.757540] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  238.762602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  238.771396] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  238.781293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  238.783321] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  238.868826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  238.895381] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  238.927046] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  238.939628] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  238.954748] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  238.961203] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  238.979259] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  239.021244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  239.026569] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  239.036369] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  239.039409] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  239.041445] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  239.043365] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  239.096518] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  239.135753] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  240.401779] Bluetooth: hci0: command tx timeout
[  240.529970] Bluetooth: hci2: command tx timeout
[  240.593080] Bluetooth: hci1: command tx timeout
[  240.914501] Bluetooth: hci3: command tx timeout
[  240.978950] Bluetooth: hci4: command tx timeout
[  241.105899] Bluetooth: hci7: command tx timeout
[  241.107147] Bluetooth: hci6: command tx timeout
[  241.233474] Bluetooth: hci5: command tx timeout
[  242.449134] Bluetooth: hci0: command tx timeout
[  242.578925] Bluetooth: hci2: command tx timeout
[  242.641232] Bluetooth: hci1: command tx timeout
[  242.961228] Bluetooth: hci3: command tx timeout
[  243.025369] Bluetooth: hci4: command tx timeout
[  243.153958] Bluetooth: hci7: command tx timeout
[  243.154450] Bluetooth: hci6: command tx timeout
[  243.280971] Bluetooth: hci5: command tx timeout
[  244.496960] Bluetooth: hci0: command tx timeout
[  244.625875] Bluetooth: hci2: command tx timeout
[  244.690581] Bluetooth: hci1: command tx timeout
[  245.008981] Bluetooth: hci3: command tx timeout
[  245.072940] Bluetooth: hci4: command tx timeout
[  245.201296] Bluetooth: hci7: command tx timeout
[  245.202053] Bluetooth: hci6: command tx timeout
[  245.329682] Bluetooth: hci5: command tx timeout
[  246.544978] Bluetooth: hci0: command tx timeout
[  246.673695] Bluetooth: hci2: command tx timeout
[  246.737951] Bluetooth: hci1: command tx timeout
[  247.057254] Bluetooth: hci3: command tx timeout
[  247.121160] Bluetooth: hci4: command tx timeout
[  247.249145] Bluetooth: hci6: command tx timeout
[  247.249668] Bluetooth: hci7: command tx timeout
[  247.377237] Bluetooth: hci5: command tx timeout
[  298.666740] syz-executor.6 (5365) used greatest stack depth: 24968 bytes left
[  300.966681] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  300.974363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  300.977319] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  300.986686] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  300.998964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  301.042051] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  301.044718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  301.052283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  301.062446] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  301.066830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  301.178322] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  301.179751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  301.182504] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  301.185194] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  301.187170] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  301.226177] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  301.229479] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  301.232318] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  301.240232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  301.243320] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  301.326394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  301.330207] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  301.338519] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  301.355814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  301.376323] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  301.384533] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  301.387191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  301.394241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  301.475368] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  301.510268] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  301.513680] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  301.516646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  301.518584] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  301.522033] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  301.525949] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  301.528046] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  301.536814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  301.551445] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  301.556568] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  301.561658] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  303.058991] Bluetooth: hci0: command tx timeout
[  303.120941] Bluetooth: hci1: command tx timeout
[  303.249223] Bluetooth: hci2: command tx timeout
[  303.314134] Bluetooth: hci3: command tx timeout
[  303.570012] Bluetooth: hci5: command tx timeout
[  303.762404] Bluetooth: hci4: command tx timeout
[  303.763577] Bluetooth: hci6: command tx timeout
[  304.082068] Bluetooth: hci7: command tx timeout
[  305.104956] Bluetooth: hci0: command tx timeout
[  305.168926] Bluetooth: hci1: command tx timeout
[  305.298188] Bluetooth: hci2: command tx timeout
[  305.360914] Bluetooth: hci3: command tx timeout
[  305.618924] Bluetooth: hci5: command tx timeout
[  305.809995] Bluetooth: hci4: command tx timeout
[  305.810500] Bluetooth: hci6: command tx timeout
[  306.129913] Bluetooth: hci7: command tx timeout
[  307.155412] Bluetooth: hci0: command tx timeout
[  307.217340] Bluetooth: hci1: command tx timeout
[  307.345371] Bluetooth: hci2: command tx timeout
[  307.409116] Bluetooth: hci3: command tx timeout
[  307.666709] Bluetooth: hci5: command tx timeout
[  307.857206] Bluetooth: hci4: command tx timeout
[  307.857909] Bluetooth: hci6: command tx timeout
[  308.178138] Bluetooth: hci7: command tx timeout
[  309.201941] Bluetooth: hci0: command tx timeout
[  309.265893] Bluetooth: hci1: command tx timeout
[  309.394119] Bluetooth: hci2: command tx timeout
[  309.458568] Bluetooth: hci3: command tx timeout
[  309.713284] Bluetooth: hci5: command tx timeout
[  309.906169] Bluetooth: hci6: command tx timeout
[  309.906651] Bluetooth: hci4: command tx timeout
[  310.225932] Bluetooth: hci7: command tx timeout
[  363.311384] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  363.317413] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  363.320443] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  363.329816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  363.335665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  363.440281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  363.443077] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  363.445653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  363.454335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  363.461555] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  363.571197] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  363.581598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  363.586340] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  363.591817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  363.596614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  363.747735] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  363.752783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  363.755079] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.768408] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  363.771873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  363.777006] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  363.781105] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  363.786585] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  363.788659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  363.790944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  363.794629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  363.804090] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.806080] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  363.808586] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  363.813737] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  363.816297] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  363.816704] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  363.822160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.825677] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  363.829315] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  363.843054] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  363.855293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  363.862222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  363.870248] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  363.874000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  365.392976] Bluetooth: hci0: command tx timeout
[  365.521934] Bluetooth: hci1: command tx timeout
[  365.649077] Bluetooth: hci3: command tx timeout
[  365.905250] Bluetooth: hci5: command tx timeout
[  365.906231] Bluetooth: hci6: command tx timeout
[  365.969278] Bluetooth: hci4: command tx timeout
[  365.969309] Bluetooth: hci2: command tx timeout
[  365.970549] Bluetooth: hci7: command tx timeout
[  367.442235] Bluetooth: hci0: command tx timeout
[  367.569932] Bluetooth: hci1: command tx timeout
[  367.696929] Bluetooth: hci3: command tx timeout
[  367.953305] Bluetooth: hci6: command tx timeout
[  367.954303] Bluetooth: hci5: command tx timeout
[  368.019163] Bluetooth: hci7: command tx timeout
[  368.019188] Bluetooth: hci4: command tx timeout
[  368.019593] Bluetooth: hci2: command tx timeout
[  369.488969] Bluetooth: hci0: command tx timeout
[  369.617354] Bluetooth: hci1: command tx timeout
[  369.744981] Bluetooth: hci3: command tx timeout
[  370.001037] Bluetooth: hci6: command tx timeout
[  370.002066] Bluetooth: hci5: command tx timeout
[  370.064995] Bluetooth: hci4: command tx timeout
[  370.065095] Bluetooth: hci7: command tx timeout
[  370.066199] Bluetooth: hci2: command tx timeout
[  371.536921] Bluetooth: hci0: command tx timeout
[  371.666209] Bluetooth: hci1: command tx timeout
[  371.792937] Bluetooth: hci3: command tx timeout
[  372.048925] Bluetooth: hci6: command tx timeout
[  372.050866] Bluetooth: hci5: command tx timeout
[  372.112957] Bluetooth: hci2: command tx timeout
[  372.112999] Bluetooth: hci7: command tx timeout
[  372.113407] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
08:16:55  Registers:
info registers vcpu 0
RAX=ffffffff87a235c8 RBX=ffff888028970000 RCX=0000000000000200 RDX=873d0e13b074236a
RSI=ffff888028970af8 RDI=ffff888028970af8 RBP=0000000000000000 RSP=ffff88806ce088d8
R8 =0000000000000004 R9 =0000000000000000 R10=0000000000000000 R11=000000000000867c
R12=ffff888028970af8 R13=0000000000000000 R14=0000000000000004 R15=ffff888028970a58
RIP=ffffffff81516929 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564d000 00000000 00000000
LDT=0000 fffffe4300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2b6cafd610 CR3=000000002e80e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff87a235c8 RBX=ffff88802d31b780 RCX=0000000000000200 RDX=ffffffffffffffff
RSI=ffff88802d31c1d8 RDI=ffff88802d31c1d8 RBP=0000000000000000 RSP=ffff888034e17408
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000026543
R12=ffff88802d31c1d8 R13=0000000000000001 R14=0000000000000000 R15=ffff88802d31c1d8
RIP=ffffffff81516929 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574d000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2b961d4008 CR3=000000000ef18000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000