Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:52398' (ECDSA) to the list of known hosts.
2025/04/27 19:38:50 fuzzer started
2025/04/27 19:38:51 dialing manager at localhost:46629
syzkaller login: [  101.037086] cgroup: Unknown subsys name 'net'
[  101.234638] cgroup: Unknown subsys name 'cpuset'
[  101.305139] cgroup: Unknown subsys name 'rlimit'
2025/04/27 19:39:08 syscalls: 204
2025/04/27 19:39:08 code coverage: enabled
2025/04/27 19:39:08 comparison tracing: enabled
2025/04/27 19:39:08 extra coverage: enabled
2025/04/27 19:39:08 setuid sandbox: enabled
2025/04/27 19:39:08 namespace sandbox: enabled
2025/04/27 19:39:08 Android sandbox: enabled
2025/04/27 19:39:08 fault injection: enabled
2025/04/27 19:39:08 leak checking: enabled
2025/04/27 19:39:08 net packet injection: enabled
2025/04/27 19:39:08 net device setup: enabled
2025/04/27 19:39:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/27 19:39:08 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/27 19:39:08 USB emulation: enabled
2025/04/27 19:39:08 hci packet injection: enabled
2025/04/27 19:39:08 wifi device emulation: enabled
2025/04/27 19:39:08 802.15.4 emulation: enabled
2025/04/27 19:39:08 fetching corpus: 0, signal 0/0 (executing program)
2025/04/27 19:39:10 starting 8 fuzzer processes
19:39:10 executing program 0:
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', <r0=>0x0, 0x7800, 0x1, 0x6, 0x0, {{0x23, 0x4, 0x3, 0x28, 0x8c, 0x68, 0x0, 0x40, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@generic={0x86, 0x6, "7f4133c7"}, @timestamp={0x44, 0xc, 0xde, 0x0, 0x8, [0x8b3, 0x81]}, @end, @cipso={0x86, 0x64, 0x0, [{0x2, 0x12, "1d73f234c9a60d538b7e0759865e0d87"}, {0x6, 0x6, "2124a5c2"}, {0x1, 0x4, "e07d"}, {0x5, 0x8, "85e6baf05a7b"}, {0x2, 0x10, "768f07260198e9ec2dc5e2563254"}, {0x7, 0x4, "f42c"}, {0x5, 0xf, "2bae4fd99521079742a403851c"}, {0x0, 0xe, "78983616eb806963c7ca5050"}, {0x7, 0x9, "e49c9377855410"}]}, @end]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x20, 0x1f, 0xfffffffe, 0x8, @private1, @private0, 0x8000, 0x1, 0x101}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
r2 = memfd_secret(0x80000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000280)={r3, 0x3, 0xffffffffffffffff, 0x6})
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x7, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x4000080)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2d4, 0x13, 0x15, 0x70bd2d, 0x25dfdbfc, {0x3c, 0x3, 0x3, 0x6, {0x4e22, 0x4e23, [0x100, 0x20, 0x10001, 0xfffffff7], [0x8001, 0x8, 0x5, 0x3], r1, [0x6]}, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "05c44fb914fc070dd857c754acebe7297607801c6e4da0558dd71be05de6b3bf85a00217b19415ebeac09d3a5ca7375e22825c04f0ed3cfc13432c22d623ace95809d8079e7206c5eed94e14485543a29aac30fda310fadde0976295bbdd9588da3ad1635f511e6990487abf6ed796603488fdbc207f42467bb606e6456f119304afb993d20bf2c9674a8cad3a1c795545750ab346309ee669d8224ec209d34e2e78cb84724ab0a5c162bb2f94131eade53572281238e6c167c833bd4c95fb59"}, @INET_DIAG_REQ_BYTECODE={0x14, 0x1, "6774027352e6226081a3876ca5a164ae"}, @INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "eb66b25d7d7f82f537bf2307c623c709d93965b03966cc8b7b8c2f376ecf5b70c5bff9128a03d944824d1967f7e34d2c7f86003bd272daf8e9a754544fc13c933ffa0accb8a336f7eaa6dad28ef26f6708ce0e146c7d4bfe5d0ac56865f71da9786830dbd0598d6e63f2c640a8c69b0e2046d3bd72a15370d5361f935c23f6a69354639fe984a101c0005a214e7aff007941ce43c6e7b17e485b07c37ea75014575084eda8bd023bcfbecfeea2ea33c9ad01"}, @INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "b4b436fa03c4a3eac06a9a985eb5fbeeaba139b606cbccf7a83f1c3bbd2b2910b60a4add867fa44271fc68b06aa7e278326634d2b25050bc889649e1e8afb03bb770857d3809a01ad4f99d9d28dda54ec7a0c1d78c142bdf6195d3d62b2f805157f7a00895668e80c0204ab610442e0362b70c3d7bd19f338e0879f725bba75aa4d04ef4cff1d7e7cbccdc18585966c948094d4b21482b0456b5ea1b23ff8a1d85d1656658f3c822b05370e6bbe1e492b5fd417ed856527adac0a2e4cdfd251b6539c7c4f141ce9cb94a07d882c15b676ddd44f7eb2378a3917b7edaa76aa00f4e6055e8f8695a5de72c0053e4c9ff62135e46"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000780)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000800)={r5, 0x1, r4, 0x3ff, 0x80000})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000840)=0x7, 0x4)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000880)=0x9, &(0x7f00000008c0)=0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000900))
socket$packet(0x11, 0x3, 0x300)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000b00)=0xe, 0x4)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x21a7ceb6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x64}}, 0x4000)

19:39:10 executing program 1:
io_uring_enter(0xffffffffffffffff, 0x72e2, 0xa963, 0x1, &(0x7f0000000000)={[0x3]}, 0x8)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000240)=0x14, 0x4)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0xfff9, 0x2, 0x8, 0x81}, {0x5, 0x71, 0x0, 0xffff0000}, {0x100, 0x0, 0x80, 0x4c}, {0x0, 0xff, 0x3f, 0x3}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000300)={0x0, 0x2, r0, 0x1, 0x80000})
r2 = memfd_secret(0x80000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={<r3=>0x0})
syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, <r4=>0x0})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000600)=0xa3c, 0x4)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000640)={{r4, 0x7ff, 0x6, 0x2, 0x6, 0x80000001, 0xb3, 0xff, 0x1000, 0x0, 0x4, 0xc0c, 0x40, 0x83, 0x99}})
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r5 = accept4$bt_l2cap(r2, &(0x7f0000001640)={0x1f, 0x0, @fixed}, &(0x7f0000001680)=0xe, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000016c0)=0xb53, 0x4)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x204000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8800)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001840)={0x7, &(0x7f0000001800)=[{0x800, 0x3, 0x9, 0x1000000}, {0x7, 0x5, 0xff, 0x2}, {0x1f, 0x4, 0x0, 0x1}, {0x7, 0x0, 0x5, 0x7}, {0xff, 0x9, 0xff, 0x6}, {0x0, 0x1, 0xc6, 0x9}, {0x1ff, 0x3, 0x9, 0x7fffffff}]})
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001880)={r3, 0x3, r7, 0x4db, 0x80000})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000001940)=r2, 0x1)

19:39:10 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, r0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xdc}}, 0x8001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004880}, 0x40000)
r2 = memfd_secret(0x80000)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c01}, 0x48880)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8ed}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r4 = socket(0x9d506b4cfc70cd8e, 0x1, 0x74)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008881)
semctl$SEM_STAT(0xffffffffffffffff, 0x3, 0x12, &(0x7f00000007c0)=""/174)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv0\x00', <r5=>0x0})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xd0, r0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x64}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4048888}, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xd8, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}]}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004000}, 0x4089d)
getsockopt$netlink(r6, 0x10e, 0x2, &(0x7f0000000c40)=""/26, &(0x7f0000000c80)=0x1a)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000d00)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x1084)

19:39:10 executing program 3:
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x184, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x124, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000000)
connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x9, @any, 0x8, 0x1}, 0xe)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000003c0), 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r1=>0x0})
r2 = memfd_secret(0x0)
connect$bt_l2cap(r2, &(0x7f0000000440)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f, 0x1}, 0xe)
r3 = socket(0x1a, 0x6, 0xdcd)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x3c}}, 0x50)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000580)=0x4, 0x2)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0xa0c, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000041)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x17, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800)
getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000840), &(0x7f0000000880)=0x4)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r2)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x200040d1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, 0x0, 0xba48898d80cf8901, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

[  120.077157] audit: type=1400 audit(1745782750.354:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
19:39:10 executing program 4:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r0=>0x0})
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x200400d1)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff55b3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x20000010)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_pressure(r2, &(0x7f0000000480)='cpu.pressure\x00', 0x2, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40001)
r3 = memfd_secret(0x80000)
sendmsg$SOCK_DESTROY(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x15, 0x400, 0x70bd26, 0x25dfdbfb, {0xf, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x16, 0x1, "8c5581328aa66cd3516ce9a73be717d80d4c"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x400c8c4)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8854}, 0x24060006)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4008000)
ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f00000008c0))
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r3)
getpeername$packet(r3, &(0x7f0000000980)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000009c0)=0x14)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8040080}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x40d0)
r6 = socket(0xb, 0x3, 0x10001)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x649}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10880)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c4}, 0x8000)

19:39:10 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x4}, 0x4)
r1 = socket(0xa, 0x4, 0xa47)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x401, 0x4)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x4, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12858404}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x1, 0x8, 0x301, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000000300)=""/2)
r3 = socket(0x27, 0x4, 0x5e6)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r4, 0x428, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x884}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044800}, 0x4000)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="d24c2a15b00b"}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000004)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000580)=0x1, 0x4)
r5 = socket(0x5, 0x3, 0xff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000001}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x80)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000700)={'batadv0\x00', <r7=>0x0})
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x40}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x401}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x801)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6018}]}, 0x5c}}, 0x24000094)

19:39:10 executing program 6:
r0 = syz_usb_connect$cdc_ecm(0x5, 0x82, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x2, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0xe8, {{0x7, 0x24, 0x6, 0x0, 0x0, "de87"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0xf6f, 0x8}, [@obex={0x5, 0x24, 0x15, 0x7fff}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @country_functional={0x6, 0x24, 0x7, 0xb1, 0xfbff}, @mdlm={0x15, 0x24, 0x12, 0x91c0}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0x7f, 0x7f}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1f, 0x5, 0x39}}, {{0x9, 0x5, 0x3, 0x2, 0x240, 0x2, 0x4, 0x80}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x3, 0x39, 0x5, 0x20, 0xff}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41b}}, {0x59, &(0x7f0000000180)=@string={0x59, 0x3, "ef68f9823c2f9ddc11a203f618441e504405c8b4dcf69f4b07ed9fb23da8d2927e26760335cf59adcb88d785a77a825ca79f6b0c0f39db8be5e77c38de89f3dc24d5143612883b8099cc8a6a351eea9f2b9d68cd3b399c"}}, {0x4e, &(0x7f0000000200)=@string={0x4e, 0x3, "728a43ddd348ed25d6d564595978eff964453d9f878f10e038e3503124dabe6cf442195654f6011ce6c48dd9f0790d22ecaa0e8014b7724f98d1c17dcc19144744e4ad9b24c76e4892cbf34c"}}, {0xd5, &(0x7f0000000280)=@string={0xd5, 0x3, "4ef96bb7d2e0abc86a24130c8b517ab66620038e1c472c83d4c74b5fdd7c99a1d96af02feed4b202d750dd648a76806205e6f59b4135525c413b200fd7f83f91b6739e7c54714a9b7e14b3999f44a1dbe1b86dcc8b7ea4b56b10cac98853a49d8276e2b25c32b7190d558af51d5fa8cf66868bf1d4e878d93955b94b26619da3811a64ad6081868f0d64a53b73787b232b0f0a791e724ee9bae045609b77959c07a9d53f133b3033bc1a32fd7a23b5a190e70d53fe7a1cd6c2947d98142702c568fa748ae78a231cf3fb307d085a78f3a74796"}}, {0xbb, &(0x7f0000000380)=@string={0xbb, 0x3, "60bb212a0361b4b6946b476c7db9c5de68693abfbb61ecf02cdff84bfa572c7c5db2a8f493b8a17c4300cc62d7395cc3a30f834d55a8a0f505ef4e043e70553f6a63f9f56aac97ab84c2d8ca5c719084964d2a8e00a8b922398bcc1bd5592c3027e5d3603abcdf1e054ac8bb6800cf373ef23462f637d5b7c6722aef45b7a20e9489eea6dd00a2f2abcef42259d9e2c3b109ac34565f938e9b4fd1a1d0f921edd6efe6f6ee922f0fc497585155211884dd9945d7a2dffd7997"}}, {0x67, &(0x7f0000000440)=@string={0x67, 0x3, "194365b1f811e3e6aa75311ff9edeb401190256756e8ce4f062da84a983d38957760d0992cd401713cf9c0e02c121cb25613750e9b6b38c765aa98fb799a00ebc0f376a0c7b9548e01f27603ef358a287ddaadeba009a73b3f3daa718f1c80b3cc4d19e802"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x180a}}]})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x0, 0x6, 0x43, {0x43, 0x22, "fd69fb3c4e0ce533a577de141ea939909c87d3b4d7a1d9c4db16cecc795855126f3da49b23946331baa0838d25f2fdf1a5b2ec748100c4cca06f8f2ab0929b2a8b"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x20, 0x30, 0x18, "32a79679f858b60912af5c106a855cb78afd688ab1ef016d"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x6}})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000880)={0x14, &(0x7f00000007c0)={0x20, 0x9, 0x48, {0x48, 0xc, "178bf5a79857184b975584c28b2d9eec846b90f57da1f031df3c72ec88a38bfdf470f0ae85b65b8e4934aa41a2804cd200fb948b8f692f59c2ccd56ae7c5fca8d91c867acd57"}}, &(0x7f0000000840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x1c, &(0x7f00000008c0)={0x20, 0x17, 0xa9, "37bbf34b3b803dd747e67fb0a257b1e788684ce67d2b00c726f2e8200910d19f56fb96fcbd2c8790922733abbb9f7319022d587b7155b442b32dc9c3924bb5f009f4b1c78a35698d35450b4794889157c1be4c2ff8058813c1432a069bdbbaa150b09a9946a516fe43c5980246c9867336aaadd80c2321578a13fe35696d2531ea6f2c9d00268f033bccea79b982fa0af204b58c69326a123af9c5a6551aa1b323df12148e2c4b8df9"}, &(0x7f0000000980)={0x0, 0xa, 0x1}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x9d}})
r1 = semget(0x1, 0x0, 0x600)
semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f0000000a40)=""/167)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000b00)={0x0, 0x3})
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000001b00)=[0xf000, 0x32, 0x2453])
semget(0x1, 0x0, 0x13)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001b80)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000001c40)={&(0x7f0000001b40), 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x51)
syz_usb_connect$cdc_ecm(0x1, 0xa4, &(0x7f0000001c80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x1, 0x1, 0xff, 0xf0, 0x4, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x52, {{0xb, 0x24, 0x6, 0x0, 0x0, "15f5d14f3a35"}, {0x5, 0x24, 0x0, 0xf3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0xfffc, 0x4}, [@mdlm_detail={0x34, 0x24, 0x13, 0x20, "0cbdecd097b0c16e7225cf9f6cd867d1cbd7dd127d3d379fa0a2478dce21f7cae78243e3677281387fd9f943350928d0"}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x7, 0xf9, 0x8, 0x0, 0x4}, @obex={0x5, 0x24, 0x15, 0x8001}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xfff8, 0xfb, 0x1, 0x7f, 0x2e}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7b, 0x2, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0xff, 0x77}}}}}]}}]}}, &(0x7f0000001e40)={0xa, &(0x7f0000001d40)={0xa, 0x6, 0x310, 0x6, 0x40, 0x8, 0xff, 0xfe}, 0x3c, &(0x7f0000001d80)={0x5, 0xf, 0x3c, 0x2, [@generic={0x2d, 0x10, 0xb, "9fba831b0239a96281b8e5468589ce74976eb425d4ae0a9430580a408a7a35beb9ac4f43050c6b2f4f58"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x4, 0x3}]}, 0x2, [{0x4, &(0x7f0000001dc0)=@lang_id={0x4, 0x3, 0x455}}, {0x2a, &(0x7f0000001e00)=@string={0x2a, 0x3, "c194427dde274cebbc564d5731e78cffe783385c62c0b96cca63652ebab84c37455273024209e9b1"}}]})
r4 = syz_open_dev$usbmon(&(0x7f0000001e80), 0x0, 0x200000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001ec0)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}], 0x5, "081dcb31009de6"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000002ec0)={0x0, r5, "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", "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"})
shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil)
semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000003ec0)=""/208)
r6 = semget$private(0x0, 0x0, 0x14)
semctl$GETNCNT(r6, 0x2, 0xe, &(0x7f0000003fc0)=""/62)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004080)={&(0x7f0000004040)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x57b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000011)

19:39:11 executing program 7:
r0 = memfd_secret(0x0)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffff)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0xa, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_bond\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7fff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb346}]}, 0x84}, 0x1, 0x0, 0x0, 0x4884}, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f00000001c0)=""/51, 0x33})
r1 = syz_open_dev$usbmon(&(0x7f0000000240), 0x0, 0x8000)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000300)={&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/30, 0x1e})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r3 = memfd_secret(0x80000)
ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000540)={&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000004c0)=""/75, 0x4b})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000580)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000600)={r4, 0x0, r1, 0x1})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x20008880)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r2, 0x94, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1729}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000008c0))
ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000940)={{<r5=>0x0, 0x0, 0x1, 0x80, 0x100000000, 0xa599, 0xffff, 0x7ff, 0x100, 0x6, 0x7, 0x5, 0x2, 0x7f, 0x5}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001940)={0x0, ""/256, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005f440)={0x0, [{}, {r5}, {}, {}, {0x0, r6}], 0x0, "2e56d11a059901"})

[  121.488483] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  121.491645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  121.493181] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  121.494200] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  121.499739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  121.501230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  121.503764] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  121.507827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  121.511986] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  121.518570] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  121.528374] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  121.532982] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  121.538856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  121.548513] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  121.553071] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  121.657559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  121.666781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  121.667206] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  121.672748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  121.674730] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  121.686751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  121.688844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  121.702389] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  121.711555] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  121.716263] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  121.723354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  121.724174] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  121.727044] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  121.736476] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  121.742366] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  121.789720] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  121.798595] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  121.808406] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  121.815676] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  121.819221] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  122.069656] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  122.101061] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  122.115367] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  122.149383] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  122.165617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  123.561255] Bluetooth: hci1: command tx timeout
[  123.625232] Bluetooth: hci0: command tx timeout
[  123.625256] Bluetooth: hci2: command tx timeout
[  123.752981] Bluetooth: hci3: command tx timeout
[  123.817004] Bluetooth: hci4: command tx timeout
[  123.817614] Bluetooth: hci5: command tx timeout
[  123.881000] Bluetooth: hci6: command tx timeout
[  124.265297] Bluetooth: hci7: command tx timeout
[  125.610201] Bluetooth: hci1: command tx timeout
[  125.672989] Bluetooth: hci0: command tx timeout
[  125.673433] Bluetooth: hci2: command tx timeout
[  125.803083] Bluetooth: hci3: command tx timeout
[  125.865201] Bluetooth: hci5: command tx timeout
[  125.868339] Bluetooth: hci4: command tx timeout
[  125.929077] Bluetooth: hci6: command tx timeout
[  126.313064] Bluetooth: hci7: command tx timeout
[  127.656996] Bluetooth: hci1: command tx timeout
[  127.721062] Bluetooth: hci2: command tx timeout
[  127.721160] Bluetooth: hci0: command tx timeout
[  127.850922] Bluetooth: hci3: command tx timeout
[  127.913252] Bluetooth: hci4: command tx timeout
[  127.913272] Bluetooth: hci5: command tx timeout
[  127.976947] Bluetooth: hci6: command tx timeout
[  128.363233] Bluetooth: hci7: command tx timeout
[  129.707265] Bluetooth: hci1: command tx timeout
[  129.769036] Bluetooth: hci0: command tx timeout
[  129.769973] Bluetooth: hci2: command tx timeout
[  129.898214] Bluetooth: hci3: command tx timeout
[  129.961083] Bluetooth: hci4: command tx timeout
[  129.962179] Bluetooth: hci5: command tx timeout
[  130.026255] Bluetooth: hci6: command tx timeout
[  130.409979] Bluetooth: hci7: command tx timeout
[  181.623644] syz-executor.2 (286) used greatest stack depth: 24680 bytes left
[  184.261974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  184.271190] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  184.274674] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  184.289076] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  184.295042] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  184.383604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  184.388405] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  184.390663] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  184.396085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  184.399304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  184.457542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  184.466647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  184.470079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  184.481195] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  184.492305] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  184.493781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  184.495135] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  184.496318] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  184.497486] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  184.501186] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  184.502313] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  184.508727] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  184.512804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  184.518545] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  184.520658] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  184.523562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  184.529096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  184.531685] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  184.538103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  184.542414] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  184.544337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  184.547308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  184.550574] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  184.557405] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  184.567816] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  184.570192] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  184.576183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  184.586071] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  184.588402] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  184.589822] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  186.346047] Bluetooth: hci0: command tx timeout
[  186.472984] Bluetooth: hci1: command tx timeout
[  186.601114] Bluetooth: hci7: command tx timeout
[  186.665013] Bluetooth: hci2: command tx timeout
[  186.665661] Bluetooth: hci5: command tx timeout
[  186.666349] Bluetooth: hci6: command tx timeout
[  186.729011] Bluetooth: hci4: command tx timeout
[  186.729637] Bluetooth: hci3: command tx timeout
[  188.392976] Bluetooth: hci0: command tx timeout
[  188.521922] Bluetooth: hci1: command tx timeout
[  188.648981] Bluetooth: hci7: command tx timeout
[  188.714062] Bluetooth: hci6: command tx timeout
[  188.714556] Bluetooth: hci5: command tx timeout
[  188.714600] Bluetooth: hci2: command tx timeout
[  188.778969] Bluetooth: hci4: command tx timeout
[  188.779477] Bluetooth: hci3: command tx timeout
[  190.442915] Bluetooth: hci0: command tx timeout
[  190.569208] Bluetooth: hci1: command tx timeout
[  190.696992] Bluetooth: hci7: command tx timeout
[  190.761077] Bluetooth: hci6: command tx timeout
[  190.761414] Bluetooth: hci5: command tx timeout
[  190.762009] Bluetooth: hci2: command tx timeout
[  190.825098] Bluetooth: hci4: command tx timeout
[  190.825579] Bluetooth: hci3: command tx timeout
[  192.488946] Bluetooth: hci0: command tx timeout
[  192.617122] Bluetooth: hci1: command tx timeout
[  192.746277] Bluetooth: hci7: command tx timeout
[  192.809267] Bluetooth: hci5: command tx timeout
[  192.810357] Bluetooth: hci2: command tx timeout
[  192.810687] Bluetooth: hci6: command tx timeout
[  192.873191] Bluetooth: hci3: command tx timeout
[  192.873230] Bluetooth: hci4: command tx timeout
[  244.371471] syz-executor.7 (2938) used greatest stack depth: 24328 bytes left
[  246.396838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  246.401636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  246.403693] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  246.404606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  246.412157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  246.414936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  246.418588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  246.428311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  246.430336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  246.436024] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  246.518547] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  246.522052] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  246.526126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  246.530042] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  246.531756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  246.534513] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  246.559170] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  246.564280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  246.566619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  246.575144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  246.630536] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  246.633603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  246.671007] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  246.675167] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  246.681304] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  246.687237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  246.688078] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  246.714471] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  246.724649] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  246.726688] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  246.736669] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  246.738193] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  246.740455] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  246.750130] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  246.752194] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  246.810729] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  246.824373] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  246.852129] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  246.870640] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  246.877353] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  248.488983] Bluetooth: hci0: command tx timeout
[  248.489024] Bluetooth: hci1: command tx timeout
[  248.617026] Bluetooth: hci3: command tx timeout
[  248.618039] Bluetooth: hci2: command tx timeout
[  248.745020] Bluetooth: hci4: command tx timeout
[  248.808977] Bluetooth: hci5: command tx timeout
[  248.810065] Bluetooth: hci6: command tx timeout
[  249.001255] Bluetooth: hci7: command tx timeout
[  250.536956] Bluetooth: hci0: command tx timeout
[  250.537025] Bluetooth: hci1: command tx timeout
[  250.665422] Bluetooth: hci3: command tx timeout
[  250.666229] Bluetooth: hci2: command tx timeout
[  250.793238] Bluetooth: hci4: command tx timeout
[  250.856964] Bluetooth: hci6: command tx timeout
[  250.857003] Bluetooth: hci5: command tx timeout
[  251.049173] Bluetooth: hci7: command tx timeout
[  252.585186] Bluetooth: hci0: command tx timeout
[  252.586577] Bluetooth: hci1: command tx timeout
[  252.713155] Bluetooth: hci2: command tx timeout
[  252.713648] Bluetooth: hci3: command tx timeout
[  252.840941] Bluetooth: hci4: command tx timeout
[  252.905139] Bluetooth: hci6: command tx timeout
[  252.905249] Bluetooth: hci5: command tx timeout
[  253.098496] Bluetooth: hci7: command tx timeout
[  254.634016] Bluetooth: hci1: command tx timeout
[  254.634528] Bluetooth: hci0: command tx timeout
[  254.762926] Bluetooth: hci3: command tx timeout
[  254.763442] Bluetooth: hci2: command tx timeout
[  254.889009] Bluetooth: hci4: command tx timeout
[  254.953124] Bluetooth: hci6: command tx timeout
[  254.953576] Bluetooth: hci5: command tx timeout
[  255.146919] Bluetooth: hci7: command tx timeout
[  308.867428] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  308.871396] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  308.884573] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  308.898730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  308.910576] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  308.947774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  308.953793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  308.957132] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  308.971928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  308.976322] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  309.093383] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  309.102167] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  309.107205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  309.112569] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  309.116132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  309.139558] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  309.143844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  309.146403] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  309.153691] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  309.158414] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  309.177722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  309.190509] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  309.193655] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  309.232164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  309.272338] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  309.273748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  309.286205] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  309.306524] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.306933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  309.333189] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  309.339563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.359149] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  309.366406] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  309.401466] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  309.409774] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  309.447401] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  309.452167] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  309.457303] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  309.464836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  309.468541] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  310.953581] Bluetooth: hci0: command tx timeout
[  311.018907] Bluetooth: hci1: command tx timeout
[  311.209126] Bluetooth: hci3: command tx timeout
[  311.272964] Bluetooth: hci2: command tx timeout
[  311.401250] Bluetooth: hci5: command tx timeout
[  311.465130] Bluetooth: hci4: command tx timeout
[  311.592985] Bluetooth: hci6: command tx timeout
[  311.593966] Bluetooth: hci7: command tx timeout
[  313.000979] Bluetooth: hci0: command tx timeout
[  313.065230] Bluetooth: hci1: command tx timeout
[  313.257160] Bluetooth: hci3: command tx timeout
[  313.321292] Bluetooth: hci2: command tx timeout
[  313.449187] Bluetooth: hci5: command tx timeout
[  313.512925] Bluetooth: hci4: command tx timeout
[  313.642303] Bluetooth: hci6: command tx timeout
[  313.642766] Bluetooth: hci7: command tx timeout
[  315.049994] Bluetooth: hci0: command tx timeout
[  315.113181] Bluetooth: hci1: command tx timeout
[  315.305456] Bluetooth: hci3: command tx timeout
[  315.369127] Bluetooth: hci2: command tx timeout
[  315.497931] Bluetooth: hci5: command tx timeout
[  315.561967] Bluetooth: hci4: command tx timeout
[  315.689960] Bluetooth: hci7: command tx timeout
[  315.690436] Bluetooth: hci6: command tx timeout
[  317.097977] Bluetooth: hci0: command tx timeout
[  317.161929] Bluetooth: hci1: command tx timeout
[  317.354913] Bluetooth: hci3: command tx timeout
[  317.417916] Bluetooth: hci2: command tx timeout
[  317.546291] Bluetooth: hci5: command tx timeout
[  317.609301] Bluetooth: hci4: command tx timeout
[  317.737808] Bluetooth: hci6: command tx timeout
[  317.738585] Bluetooth: hci7: command tx timeout
[  371.066048] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  371.071257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  371.074117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  371.082289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  371.088790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  371.149729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  371.154324] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  371.157391] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  371.163594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  371.167517] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  371.309589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  371.340264] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  371.345457] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  371.372788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  371.374780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  371.383272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  371.402480] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  371.402496] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  371.405466] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  371.430061] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  371.432180] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  371.438147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  371.462186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  371.510433] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  371.521655] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  371.532524] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  371.539940] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  371.560534] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  371.578480] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  371.585640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  371.588582] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  371.590733] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  371.596802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  371.600150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  371.624402] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  371.631367] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  371.640672] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  371.643468] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  371.651357] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  371.677421] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  373.162451] Bluetooth: hci0: command tx timeout
[  373.225624] Bluetooth: hci1: command tx timeout
[  373.482323] Bluetooth: hci2: command tx timeout
[  373.546971] Bluetooth: hci3: command tx timeout
[  373.673430] Bluetooth: hci4: command tx timeout
[  373.674129] Bluetooth: hci5: command tx timeout
[  373.737009] Bluetooth: hci7: command tx timeout
[  374.121971] Bluetooth: hci6: command tx timeout
[  375.209107] Bluetooth: hci0: command tx timeout
[  375.273196] Bluetooth: hci1: command tx timeout
[  375.529605] Bluetooth: hci2: command tx timeout
[  375.594091] Bluetooth: hci3: command tx timeout
[  375.720979] Bluetooth: hci5: command tx timeout
[  375.721130] Bluetooth: hci4: command tx timeout
[  375.785035] Bluetooth: hci7: command tx timeout
[  376.168974] Bluetooth: hci6: command tx timeout
[  377.256949] Bluetooth: hci0: command tx timeout
[  377.321205] Bluetooth: hci1: command tx timeout
[  377.578897] Bluetooth: hci2: command tx timeout
[  377.640953] Bluetooth: hci3: command tx timeout
[  377.769076] Bluetooth: hci5: command tx timeout
[  377.769568] Bluetooth: hci4: command tx timeout
[  377.835551] Bluetooth: hci7: command tx timeout
[  378.217120] Bluetooth: hci6: command tx timeout
[  379.305261] Bluetooth: hci0: command tx timeout
[  379.370123] Bluetooth: hci1: command tx timeout
[  379.625293] Bluetooth: hci2: command tx timeout
[  379.689086] Bluetooth: hci3: command tx timeout
[  379.817149] Bluetooth: hci5: command tx timeout
[  379.818022] Bluetooth: hci4: command tx timeout
[  379.880972] Bluetooth: hci7: command tx timeout
[  380.265210] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
19:44:19  Registers:
info registers vcpu 0
RAX=0000000000000183 RBX=ffff8880131fd340 RCX=0000000000000002 RDX=ffff8880131fdd98
RSI=0000000000000000 RDI=ffffffff85c1bac0 RBP=0000000000000000 RSP=ffff88802568f028
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000000 R11=00000000000c2454
R12=0000000000000028 R13=0000000000000000 R14=0000000000000000 R15=ffff8880131fdd98
RIP=ffffffff815162d9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4ec14e71f0 CR3=0000000026862000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=1ffff1100d9e114f
RSI=ffff88802d39fc98 RDI=ffff88806cf08ac8 RBP=ffff8880096b8a00 RSP=ffff88806cf08a08
R8 =0000000000000001 R9 =ffff88806cf08ab8 R10=000000000003b0c2 R11=0000000000025174
R12=ffff88806cf08ad8 R13=ffff88806cf08ac0 R14=ffff88802d39fc98 R15=ffff88806cf08a78
RIP=ffffffff813517a4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555e119400 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe2c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7c22087269 CR3=00000000165fe000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000000000ff00000000000000000000
XMM02=00ff0000000000000000ff0000000000 XMM03=ff00000000000000ff00000000000000
XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000