Warning: Permanently added '[localhost]:55871' (ECDSA) to the list of known hosts.
2025/06/12 09:16:35 fuzzer started
2025/06/12 09:16:35 dialing manager at localhost:45945
syzkaller login: [  105.914423] cgroup: Unknown subsys name 'net'
[  106.134849] cgroup: Unknown subsys name 'cpuset'
[  106.175433] cgroup: Unknown subsys name 'rlimit'
2025/06/12 09:16:57 syscalls: 206
2025/06/12 09:16:57 code coverage: enabled
2025/06/12 09:16:57 comparison tracing: enabled
2025/06/12 09:16:57 extra coverage: enabled
2025/06/12 09:16:57 setuid sandbox: enabled
2025/06/12 09:16:57 namespace sandbox: enabled
2025/06/12 09:16:57 Android sandbox: enabled
2025/06/12 09:16:57 fault injection: enabled
2025/06/12 09:16:57 leak checking: enabled
2025/06/12 09:16:57 net packet injection: enabled
2025/06/12 09:16:57 net device setup: enabled
2025/06/12 09:16:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/12 09:16:57 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/12 09:16:57 USB emulation: enabled
2025/06/12 09:16:57 hci packet injection: enabled
2025/06/12 09:16:57 wifi device emulation: enabled
2025/06/12 09:16:57 802.15.4 emulation: enabled
2025/06/12 09:16:57 fetching corpus: 0, signal 0/0 (executing program)
2025/06/12 09:16:58 starting 8 fuzzer processes
09:16:58 executing program 0:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x3, 0x2, 0x3, 0x1}, {0x400, 0x5, 0x0, 0x3f}, {0x3, 0xfa, 0x3f, 0x1f}, {0x98b, 0x1, 0x3, 0x3}, {0x2, 0x81, 0x20, 0x1e}, {0x1, 0x3, 0x7, 0xffffffe1}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={r1, 0x2, 0x8ba0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom1\x00', 0x802, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x91}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x7f}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2001}, 0x40814)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x4004081)
perf_event_open$cgroup(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x6, 0x1, 0x8, 0x0, 0x4, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x74e, 0x1, @perf_bp={&(0x7f0000000480), 0x5}, 0x2, 0x3, 0x18b3, 0x7, 0x7, 0x1, 0x0, 0x0, 0xfff, 0x0, 0x100}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
r4 = syz_open_procfs(0x0, &(0x7f0000000540)='attr/sockcreate\x00')
r5 = fsmount(r4, 0x0, 0x87)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/binder1\x00', 0x800, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000085)
fsmount(r4, 0x0, 0x80)
openat$cgroup_type(r5, &(0x7f00000006c0), 0x2, 0x0)
clock_gettime(0x7, &(0x7f0000000700))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048001}, 0x814)
ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f00000008c0)={0x269, 0x6, 0x0, [{0x100, 0x1af, 0x1, 0x2, 0x8, 0x6, 0xff}, {0xffff, 0x8001, 0x0, 0x7f, 0xff, 0x3}, {0x2, 0x24, 0x0, 0x6, 0x7f, 0xe6, 0x8}, {0x9, 0xffffffffffff7fff, 0x2, 0x2d, 0x2, 0xce, 0x1f}, {0x8, 0x9, 0x9, 0x19, 0x47, 0x3, 0x4}, {0x3, 0x8ad, 0x4, 0x3, 0x6, 0x3f, 0x11}]})

09:16:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1e}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x24000041)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffff001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}]}, 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x1)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r3, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x818)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_user\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r0)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r7, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x4010)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/attr/current\x00', 0x2, 0x0)
r8 = fsmount(r4, 0x0, 0x80)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'gre0\x00', &(0x7f0000000780)={'erspan0\x00', <r9=>0x0, 0x20, 0x20, 0x7, 0xf5, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x66, 0x0, 0x9, 0x29, 0x0, @private=0xa010100, @loopback, {[@generic={0x7, 0x9, "b2d1928708f732"}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000008c0)={'erspan0\x00', &(0x7f0000000800)={'erspan0\x00', <r10=>0x0, 0x7800, 0x10, 0x8001, 0x5, {{0x23, 0x4, 0x2, 0x1, 0x8c, 0x66, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0x88, 0x0, 0x2, [0x401, 0xfc43, 0x1, 0x100, 0x101, 0x5]}, @rr={0x7, 0x2b, 0x68, [@broadcast, @multicast1, @private=0xa010100, @broadcast, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_prespec={0x44, 0xc, 0x58, 0x3, 0x6, [{@remote, 0x5220}]}, @ssrr={0x89, 0xb, 0x38, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @lsrr={0x83, 0x17, 0x52, [@multicast1, @empty, @broadcast, @empty, @multicast2]}, @noop]}}}}})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x880)
sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x21c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x14c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x132}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff9db}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x448}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf899}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20004844}, 0x4000)

09:16:58 executing program 2:
syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2800000c}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044010}, 0xd0)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5a}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x800)
syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}}, 0x12)
r2 = socket(0x3c, 0x3, 0x5)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8001)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000540), 0x2, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/ptype\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000700)={'batadv0\x00', <r5=>0x0})
r6 = openat$cgroup_ro(r4, &(0x7f0000000740)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000780))
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfaa8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x40)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00), 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xd4, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20008080}, 0x4080)

[  129.004471] audit: type=1400 audit(1749719818.766:7): avc:  denied  { execmem } for  pid=276 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:16:58 executing program 3:
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000))
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x10001)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000040))
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x0, 0x0)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000180)=[0x4, 0xc8c])
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'})
ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000200))
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8f0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000380))
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000003c0))
ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000400)={0x9, 0x24e1, 0x9, 0x9, 0x80000000, 0x513})
fsopen(&(0x7f0000000440)='ntfs\x00', 0x1)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x42000, 0x0)
write$snapshot(r1, &(0x7f00000004c0)="bc1ffc9631fae7", 0x7)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x80000)
ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000640))
ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302)

09:16:58 executing program 4:
semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/57)
semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=""/7)
semctl$IPC_INFO(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000080)=""/60)
semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f00000000c0)=""/151)
r0 = semget$private(0x0, 0x0, 0x2)
semctl$SEM_STAT(r0, 0x4, 0x12, &(0x7f0000000180)=""/94)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x8)
semctl$IPC_INFO(r0, 0x2, 0x3, &(0x7f0000000200)=""/181)
r1 = semget$private(0x0, 0x2, 0x100)
semop(r0, &(0x7f00000002c0)=[{0x3, 0x0, 0x1000}, {0x4, 0x35, 0x1800}, {0x3, 0x5, 0x800}, {0x4, 0x7fff, 0x1000}, {0x3, 0x20}, {0x0, 0x2, 0x1000}], 0x6)
r2 = semget$private(0x0, 0x1, 0x218)
semop(r2, &(0x7f0000000300)=[{0x0, 0xffe1, 0x1800}, {0x1, 0x2, 0x1000}, {0x1, 0x8, 0x2800}, {0x1, 0x7, 0x800}, {0x3, 0x2}, {0x1, 0x5, 0x1000}, {0x7, 0x8, 0x1000}], 0x7)
getresuid(&(0x7f0000000340), &(0x7f0000000380)=<r3=>0x0, &(0x7f00000003c0))
getresuid(&(0x7f0000000400), &(0x7f0000000440)=<r4=>0x0, &(0x7f0000000480))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0, <r5=>0x0})
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000540)={{0x3, r3, 0xee01, r4, 0xffffffffffffffff}, 0x4, 0x9, 0x100000000, 0x7015, r5, 0xffffffffffffffff, 0x20})
getegid()
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f00000005c0))
semctl$SETVAL(r1, 0x56a92f67025a5265, 0x10, &(0x7f0000000600)=0x5)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640))

09:16:58 executing program 5:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, r0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x10c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfb4d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd9f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000080)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='memory.swap.events\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4044981)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_vs_stats\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x80)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x11c, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x40, 0x81, 0x7fffffff}]}}}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r3)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, r6, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x97fd02d3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8040)
r7 = fsmount(r3, 0x1, 0x5)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x4]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x3, 0xfffb, 0x40]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xef}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000811}, 0x40000)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000e40)={0x3, &(0x7f0000000e00)=[{0x401, 0x0, 0x0, 0x1}, {0x2, 0x2, 0xfc, 0x73ae}, {0x4, 0x0, 0x6, 0x3}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000ec0))

09:16:58 executing program 6:
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x7937, 0xe1])
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=0x5)
ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000080)=""/4096)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000001080)=""/9)
ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000010c0)=""/189)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000001180), r0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000011c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x44000890)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001300), r0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000001340)=0x6)
r2 = syz_open_dev$evdev(&(0x7f0000001380), 0x3, 0x2141c0)
ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000013c0)=""/43)
openat$cgroup_int(r1, &(0x7f0000001400)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000001440)=""/54)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001480)='fdinfo/3\x00')
ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f00000014c0)={0xb5, "f1be42052748d76717c81f8e208aa90532975eacac69f4f4fc783ed9c243025089da9f482c22b9dd65483a08013feae635bb2eabeb04f34aa22f0eca6b0ab512"})
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000001540))
ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000001580)=[0x1, 0x3455])
perf_event_open$cgroup(&(0x7f0000001600)={0x2, 0x80, 0x5d, 0x1, 0x93, 0x80, 0x0, 0x5, 0x4000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f00000015c0), 0x8}, 0x8002, 0x1ff, 0x5, 0x6, 0x1, 0x8, 0x2699, 0x0, 0x9, 0x0, 0x8000}, r3, 0x4, r3, 0x4)

09:16:58 executing program 7:
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00')
openat$cgroup_freezer_state(r2, &(0x7f0000000100), 0x2, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0)
openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x6, 0x7, 0xf7, 0x6d, 0x0, 0x5, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x101}, 0x0, 0x2, 0x3, 0x4, 0x1, 0x1, 0x2, 0x0, 0x40, 0x0, 0x81}, r0, 0xe, r2, 0x4)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x400, 0x3, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x22000000)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x8, 0x20, 0xad, 0x0, 0x40, 0x80002, 0xb, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x400, 0xe55}, 0x41000, 0x1, 0x48, 0xd, 0x5, 0x0, 0x3f, 0x0, 0x20, 0x0, 0x3f}, 0x0, 0xe, r3, 0x9)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x344d}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x24040000)
r6 = syz_open_dev$loop(&(0x7f0000000580), 0x8001, 0x80000)
ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r1)
r7 = openat$cgroup_freezer_state(r2, &(0x7f00000005c0), 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r7)
r8 = syz_open_dev$loop(&(0x7f0000000600), 0x5, 0x2000)
ioctl$BLKRRPART(r8, 0x125f, 0x0)

[  130.376819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  130.379904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  130.382630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  130.387200] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  130.390100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  130.440570] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.444585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.450193] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.471286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.483445] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  130.505456] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.507432] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.512955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.519235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.524423] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  130.565425] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  130.567942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  130.572177] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  130.590332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  130.600513] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  130.602956] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  130.616926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  130.618122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  130.621230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  130.622281] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  130.623141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  130.627042] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  130.643247] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  130.644451] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  130.648166] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  130.651486] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  130.660724] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  130.664028] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  130.671052] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  130.673293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  130.676123] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  130.712136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  130.716948] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  130.744556] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  130.748134] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  132.460589] Bluetooth: hci0: command tx timeout
[  132.525170] Bluetooth: hci1: command tx timeout
[  132.588214] Bluetooth: hci2: command tx timeout
[  132.716032] Bluetooth: hci3: command tx timeout
[  132.780959] Bluetooth: hci6: command tx timeout
[  132.782568] Bluetooth: hci4: command tx timeout
[  132.783985] Bluetooth: hci5: command tx timeout
[  132.844248] Bluetooth: hci7: command tx timeout
[  134.508734] Bluetooth: hci0: command tx timeout
[  134.571913] Bluetooth: hci1: command tx timeout
[  134.635911] Bluetooth: hci2: command tx timeout
[  134.763877] Bluetooth: hci3: command tx timeout
[  134.827904] Bluetooth: hci4: command tx timeout
[  134.828420] Bluetooth: hci5: command tx timeout
[  134.829857] Bluetooth: hci6: command tx timeout
[  134.892250] Bluetooth: hci7: command tx timeout
[  136.556146] Bluetooth: hci0: command tx timeout
[  136.621266] Bluetooth: hci1: command tx timeout
[  136.683861] Bluetooth: hci2: command tx timeout
[  136.811937] Bluetooth: hci3: command tx timeout
[  136.875894] Bluetooth: hci6: command tx timeout
[  136.876407] Bluetooth: hci5: command tx timeout
[  136.877915] Bluetooth: hci4: command tx timeout
[  136.940940] Bluetooth: hci7: command tx timeout
[  138.604027] Bluetooth: hci0: command tx timeout
[  138.669131] Bluetooth: hci1: command tx timeout
[  138.733920] Bluetooth: hci2: command tx timeout
[  138.859848] Bluetooth: hci3: command tx timeout
[  138.923871] Bluetooth: hci5: command tx timeout
[  138.924262] Bluetooth: hci4: command tx timeout
[  138.924442] Bluetooth: hci6: command tx timeout
[  138.989077] Bluetooth: hci7: command tx timeout
[  193.215692] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.218704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  193.222632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.231644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.239807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.342992] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  193.351213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  193.354987] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  193.361283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  193.365413] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  193.368632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  193.373573] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  193.376054] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  193.377707] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  193.383788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  193.395405] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  193.396391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  193.415330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  193.417527] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  193.421533] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  193.425797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  193.427902] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  193.429317] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  193.439712] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  193.443513] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  193.502519] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  193.505467] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  193.532289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  193.582937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  193.626342] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  193.631424] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  193.641070] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  193.642600] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  193.648592] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  193.651650] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  193.659549] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  193.663191] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  193.667764] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  193.702630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  193.721694] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  195.307865] Bluetooth: hci0: command tx timeout
[  195.436882] Bluetooth: hci3: command tx timeout
[  195.500038] Bluetooth: hci1: command tx timeout
[  195.501043] Bluetooth: hci5: command tx timeout
[  195.569805] Bluetooth: hci2: command tx timeout
[  195.691909] Bluetooth: hci4: command tx timeout
[  195.756229] Bluetooth: hci6: command tx timeout
[  195.824011] Bluetooth: hci7: command tx timeout
[  197.357309] Bluetooth: hci0: command tx timeout
[  197.485056] Bluetooth: hci3: command tx timeout
[  197.549817] Bluetooth: hci5: command tx timeout
[  197.550285] Bluetooth: hci1: command tx timeout
[  197.612031] Bluetooth: hci2: command tx timeout
[  197.741888] Bluetooth: hci4: command tx timeout
[  197.804139] Bluetooth: hci6: command tx timeout
[  197.868116] Bluetooth: hci7: command tx timeout
[  199.404169] Bluetooth: hci0: command tx timeout
[  199.531897] Bluetooth: hci3: command tx timeout
[  199.595950] Bluetooth: hci1: command tx timeout
[  199.596431] Bluetooth: hci5: command tx timeout
[  199.661364] Bluetooth: hci2: command tx timeout
[  199.788582] Bluetooth: hci4: command tx timeout
[  199.854813] Bluetooth: hci6: command tx timeout
[  199.915869] Bluetooth: hci7: command tx timeout
[  201.452020] Bluetooth: hci0: command tx timeout
[  201.581985] Bluetooth: hci3: command tx timeout
[  201.643940] Bluetooth: hci1: command tx timeout
[  201.645316] Bluetooth: hci5: command tx timeout
[  201.707834] Bluetooth: hci2: command tx timeout
[  201.836322] Bluetooth: hci4: command tx timeout
[  201.901785] Bluetooth: hci6: command tx timeout
[  201.963843] Bluetooth: hci7: command tx timeout
[  255.703145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  255.708355] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  255.719157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  255.728657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  255.736069] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  255.993094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  255.997315] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  256.003154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  256.009949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  256.016112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  256.033211] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  256.044342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  256.049334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  256.067545] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  256.079083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  256.223124] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  256.233431] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  256.238701] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  256.251725] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  256.253857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  256.264804] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  256.273780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  256.289127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  256.302183] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  256.302279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  256.312657] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  256.315894] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  256.319497] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  256.320342] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  256.323348] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  256.329164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  256.333886] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  256.336980] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  256.348206] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  256.352642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  256.356108] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  256.363417] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  256.367148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  256.422295] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  256.454117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  257.771919] Bluetooth: hci0: command tx timeout
[  258.092036] Bluetooth: hci1: command tx timeout
[  258.156060] Bluetooth: hci2: command tx timeout
[  258.413847] Bluetooth: hci6: command tx timeout
[  258.414691] Bluetooth: hci5: command tx timeout
[  258.475884] Bluetooth: hci7: command tx timeout
[  258.477108] Bluetooth: hci3: command tx timeout
[  258.540842] Bluetooth: hci4: command tx timeout
[  259.820171] Bluetooth: hci0: command tx timeout
[  260.141107] Bluetooth: hci1: command tx timeout
[  260.206089] Bluetooth: hci2: command tx timeout
[  260.459870] Bluetooth: hci5: command tx timeout
[  260.460376] Bluetooth: hci6: command tx timeout
[  260.524351] Bluetooth: hci3: command tx timeout
[  260.525432] Bluetooth: hci7: command tx timeout
[  260.588841] Bluetooth: hci4: command tx timeout
[  261.868035] Bluetooth: hci0: command tx timeout
[  262.189303] Bluetooth: hci1: command tx timeout
[  262.252036] Bluetooth: hci2: command tx timeout
[  262.509945] Bluetooth: hci6: command tx timeout
[  262.510424] Bluetooth: hci5: command tx timeout
[  262.572249] Bluetooth: hci7: command tx timeout
[  262.572699] Bluetooth: hci3: command tx timeout
[  262.636220] Bluetooth: hci4: command tx timeout
[  263.916175] Bluetooth: hci0: command tx timeout
[  264.236347] Bluetooth: hci1: command tx timeout
[  264.301197] Bluetooth: hci2: command tx timeout
[  264.555905] Bluetooth: hci5: command tx timeout
[  264.557478] Bluetooth: hci6: command tx timeout
[  264.619862] Bluetooth: hci7: command tx timeout
[  264.621265] Bluetooth: hci3: command tx timeout
[  264.683858] Bluetooth: hci4: command tx timeout
[  318.587301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  318.590524] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  318.610268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  318.620137] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  318.635378] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  318.741888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  318.748262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  318.754435] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  318.756408] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  318.761538] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  318.762154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  318.766196] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  318.768533] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  318.785939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  318.789285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  318.790936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  318.792415] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  318.801531] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  318.808155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  318.811908] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  318.925899] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  318.927300] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  318.929638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  318.939192] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  318.941157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  318.944938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  318.946230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  318.947255] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  318.948392] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  318.948648] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  318.956515] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  318.961508] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  318.963131] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  318.966689] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  318.969135] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  318.975612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  318.987231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  318.990805] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  318.992923] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  319.000388] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  320.684129] Bluetooth: hci0: command tx timeout
[  320.876140] Bluetooth: hci3: command tx timeout
[  320.877181] Bluetooth: hci1: command tx timeout
[  320.877243] Bluetooth: hci2: command tx timeout
[  321.067895] Bluetooth: hci7: command tx timeout
[  321.067923] Bluetooth: hci5: command tx timeout
[  321.069176] Bluetooth: hci6: command tx timeout
[  321.069191] Bluetooth: hci4: command tx timeout
[  322.731846] Bluetooth: hci0: command tx timeout
[  322.924068] Bluetooth: hci3: command tx timeout
[  322.924628] Bluetooth: hci1: command tx timeout
[  322.924857] Bluetooth: hci2: command tx timeout
[  323.116930] Bluetooth: hci6: command tx timeout
[  323.117124] Bluetooth: hci4: command tx timeout
[  323.117439] Bluetooth: hci5: command tx timeout
[  323.118125] Bluetooth: hci7: command tx timeout
[  324.780043] Bluetooth: hci0: command tx timeout
[  324.971860] Bluetooth: hci2: command tx timeout
[  324.972401] Bluetooth: hci3: command tx timeout
[  324.973790] Bluetooth: hci1: command tx timeout
[  325.163830] Bluetooth: hci5: command tx timeout
[  325.164429] Bluetooth: hci4: command tx timeout
[  325.164816] Bluetooth: hci7: command tx timeout
[  325.165132] Bluetooth: hci6: command tx timeout
[  326.828829] Bluetooth: hci0: command tx timeout
[  327.019877] Bluetooth: hci3: command tx timeout
[  327.020449] Bluetooth: hci1: command tx timeout
[  327.020482] Bluetooth: hci2: command tx timeout
[  327.212059] Bluetooth: hci5: command tx timeout
[  327.213393] Bluetooth: hci7: command tx timeout
[  327.213805] Bluetooth: hci6: command tx timeout
[  327.213923] Bluetooth: hci4: command tx timeout
[  381.177492] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  381.179784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  381.185101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  381.189641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  381.191556] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  381.304092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  381.310101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  381.314022] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  381.320422] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  381.325200] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  381.432957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  381.435037] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  381.438051] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  381.441255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  381.443380] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  381.453934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  381.461928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  381.486695] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  381.503585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  381.516085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  381.523358] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  381.527374] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  381.533586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  381.543930] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  381.555922] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  381.678144] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  381.679409] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  381.687369] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  381.697972] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  381.699769] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  381.704947] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  381.707030] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  381.721612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  381.725471] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  381.732390] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  381.740503] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  381.787275] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  381.798273] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  381.824135] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  381.847215] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  383.211962] Bluetooth: hci0: command tx timeout
[  383.403919] Bluetooth: hci1: command tx timeout
[  383.532315] Bluetooth: hci2: command tx timeout
[  383.595912] Bluetooth: hci3: command tx timeout
[  383.596859] Bluetooth: hci4: command tx timeout
[  383.852161] Bluetooth: hci5: command tx timeout
[  383.916002] Bluetooth: hci7: command tx timeout
[  383.980266] Bluetooth: hci6: command tx timeout
[  385.259926] Bluetooth: hci0: command tx timeout
[  385.452327] Bluetooth: hci1: command tx timeout
[  385.579954] Bluetooth: hci2: command tx timeout
[  385.644914] Bluetooth: hci3: command tx timeout
[  385.645508] Bluetooth: hci4: command tx timeout
[  385.900234] Bluetooth: hci5: command tx timeout
[  385.963937] Bluetooth: hci7: command tx timeout
[  386.028659] Bluetooth: hci6: command tx timeout
[  387.308779] Bluetooth: hci0: command tx timeout
[  387.500112] Bluetooth: hci1: command tx timeout
[  387.628256] Bluetooth: hci2: command tx timeout
[  387.691868] Bluetooth: hci3: command tx timeout
[  387.692443] Bluetooth: hci4: command tx timeout
[  387.948256] Bluetooth: hci5: command tx timeout
[  388.012159] Bluetooth: hci7: command tx timeout
[  388.076051] Bluetooth: hci6: command tx timeout
[  389.356130] Bluetooth: hci0: command tx timeout
[  389.548195] Bluetooth: hci1: command tx timeout
[  389.675917] Bluetooth: hci2: command tx timeout
[  389.739941] Bluetooth: hci4: command tx timeout
[  389.741834] Bluetooth: hci3: command tx timeout
[  389.996129] Bluetooth: hci5: command tx timeout
[  390.061892] Bluetooth: hci7: command tx timeout
[  390.123851] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
09:22:04  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000000 RCX=eb8a3cfc2a4dc88f RDX=0000000060a32d2e
RSI=00000000e1b8ee1a RDI=00000000d9a7945d RBP=ffffffff85c1cbc0 RSP=ffff88806ce08990
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200
RIP=ffffffff8151af5b RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f3e3378a540 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe3b00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000564c9e7d0fa8 CR3=0000000033cc4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000000000ff000000000000000000
XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88802ce3f900 RCX=ffff88802ce3f78c RDX=1ffff110059c7f22
RSI=ffffffff813b01a3 RDI=ffff88802ce3f910 RBP=ffff88802ce3f8d0 RSP=ffff88802ce3f818
R8 =0000000000000001 R9 =ffff88802ce3f878 R10=000000000003b4bd R11=00000000000083e2
R12=ffff88802ce3f900 R13=0000000000000000 R14=ffff8880152f3700 R15=ffff888023dafdc0
RIP=ffffffff81604846 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe3b00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f504f567d40 CR3=0000000033ce2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000