Warning: Permanently added '[localhost]:47556' (ECDSA) to the list of known hosts.
2024/10/22 23:52:37 fuzzer started
2024/10/22 23:52:37 dialing manager at localhost:45639
syzkaller login: [   69.257616] cgroup: Unknown subsys name 'net'
[   69.344451] cgroup: Unknown subsys name 'cpuset'
[   69.377692] cgroup: Unknown subsys name 'rlimit'
2024/10/22 23:52:55 syscalls: 208
2024/10/22 23:52:55 code coverage: enabled
2024/10/22 23:52:55 comparison tracing: enabled
2024/10/22 23:52:55 extra coverage: enabled
2024/10/22 23:52:55 setuid sandbox: enabled
2024/10/22 23:52:55 namespace sandbox: enabled
2024/10/22 23:52:55 Android sandbox: enabled
2024/10/22 23:52:55 fault injection: enabled
2024/10/22 23:52:55 leak checking: enabled
2024/10/22 23:52:55 net packet injection: enabled
2024/10/22 23:52:55 net device setup: enabled
2024/10/22 23:52:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/10/22 23:52:55 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/10/22 23:52:55 USB emulation: enabled
2024/10/22 23:52:55 hci packet injection: enabled
2024/10/22 23:52:55 wifi device emulation: enabled
2024/10/22 23:52:55 802.15.4 emulation: enabled
2024/10/22 23:52:55 fetching corpus: 0, signal 0/0 (executing program)
2024/10/22 23:52:57 starting 8 fuzzer processes
23:52:57 executing program 0:
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4)
r1 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/99)
r2 = getpgrp(0x0)
r3 = getpgrp(0xffffffffffffffff)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee00, 0x0, 0xfffc}, 0x73ed, 0x2, 0xffffffffffffffc0, 0x40, r2, r3, 0xffff})
r4 = msgget(0x3, 0x4b8)
statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x80, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0})
r7 = getpid()
msgctl$IPC_SET(r4, 0x1, &(0x7f0000000240)={{0x1, 0x0, 0xee01, 0xffffffffffffffff, r6, 0x85, 0x2}, 0x0, 0x0, 0x5, 0x1000, 0x3806, 0xc4d, 0x1, 0x1000, 0x80, 0x40c, r7, r2})
r8 = syz_io_uring_setup(0x795d, &(0x7f00000002c0)={0x0, 0x5c75, 0x0, 0x3, 0x3d7}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380))
syz_io_uring_setup(0x1c58, &(0x7f00000003c0)={0x0, 0xd1de, 0x10, 0x0, 0x31f, 0x0, r8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480))
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x3000)
shmctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, r5, r6, r5, r6, 0x16, 0x1}, 0x88f8, 0x1f, 0x26b1, 0x81, 0xffffffffffffffff, r7, 0x7fff})
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000540)=""/123)
io_uring_setup(0x4b3f, &(0x7f00000005c0)={0x0, 0x1815, 0x2, 0x1, 0x1b9, 0x0, r8})

23:52:57 executing program 2:
inotify_init()
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x9, @any, 0x8, 0x1}, 0xe)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0xef4b6031d1b4d7d9, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5d}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x880)
renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x3)
r2 = inotify_init()
r3 = inotify_add_watch(r2, &(0x7f0000000300)='./file0\x00', 0x1000010)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000340))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@FILEID_INO32_GEN={0x8, 0x1, {0x0, 0x33}}, &(0x7f0000000400), 0x1000)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40080)
inotify_rm_watch(r2, r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x28800, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r5, 0x8008330e, &(0x7f0000000600))
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x14014)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000c00))

23:52:57 executing program 1:
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004011}, 0x4000884)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x571}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0xe800}, 0x45)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000000)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000004)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x459600c8ef666410, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000640)={'gretap0\x00', <r3=>0x0, 0x8000, 0x8000, 0x8001, 0x4e6d, {{0x44, 0x4, 0x1, 0x2, 0x110, 0x64, 0x0, 0xa6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote, {[@timestamp_addr={0x44, 0x3c, 0xa2, 0x1, 0x1, [{@remote, 0xfe0}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x43a7}, {@broadcast, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x143f}, {@empty, 0x400}, {@empty, 0xf312}]}, @lsrr={0x83, 0xb, 0xc5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @lsrr={0x83, 0x1b, 0xfc, [@empty, @loopback, @multicast1, @private=0xa010100, @loopback, @remote]}, @rr={0x7, 0x1b, 0x1d, [@broadcast, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010101, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0xc5, 0x3, 0x2, [{@local}, {@private=0xa010101, 0x6}, {@private=0xa010102, 0x2}]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xb4, 0x3, 0x7, [{@multicast2, 0x3f}, {@empty, 0x95}, {@private=0xa010102, 0x1}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@local}, {@multicast2, 0x4}]}, @noop, @timestamp_addr={0x44, 0x24, 0x58, 0x1, 0x7, [{@local, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x26}}, {@empty, 0xa9}]}]}}}}})
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbc}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x5c}}, 0x8000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x74}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8c)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008004)
r6 = openat$incfs(r2, &(0x7f0000000b80)='.pending_reads\x00', 0x44000, 0x123)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r1, 0x400, 0x1, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xab}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x4885)
socketpair(0x2a, 0x4, 0x800, &(0x7f0000000dc0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r5, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

23:52:57 executing program 4:
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x2)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000000)={0x0, 0x0, "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", "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"})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x34, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9231}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}}, 0x40090)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x4c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
syz_extract_tcp_res$synack(&(0x7f0000001240), 0x1, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000001280), 0x20, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000001380)={&(0x7f00000012c0), 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="11c182a5f5bc"}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x4)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
socketpair(0x1, 0x80000, 0x4, &(0x7f00000014c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc)
get_mempolicy(&(0x7f0000001600), &(0x7f0000001640), 0x8, &(0x7f0000ffd000/0x3000)=nil, 0x7)
syz_io_uring_setup(0x51ae, &(0x7f0000001680)={0x0, 0x2f62, 0x20, 0x1, 0x1de, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001700), &(0x7f0000001740))
openat$incfs(r1, &(0x7f0000001780)='.pending_reads\x00', 0x90000, 0x5a)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x38, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x38}}, 0x4000000)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000018c0), 0xa80, 0x0)
r4 = syz_open_dev$vcsu(&(0x7f0000001900), 0x6, 0x240000)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x54, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe28}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x84}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000081}, 0x8000)

23:52:57 executing program 3:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r0=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40002}, 0x4004)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000001)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x40080, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x85)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r4, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000801)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc}, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x180}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x3a71a5b7d0a7ab6e)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000980)={&(0x7f00000008c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5f30ce00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x89a0}, 0x4000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xdcd}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2056}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000d00)={0x0, 0x5, 0x8000, 0x79, 0x6, 0x0, 0x5}, 0xc)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r3, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4050)

[   86.835915] audit: type=1400 audit(1729641177.217:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:52:57 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x91d, 0x9})
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000080))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000140)={r1, 0x2, 0x8})
r3 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffb000/0x3000)=nil)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x10b0)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x4040, 0x40, 0x2}, 0x18)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000200)={@id={0x2, 0x0, @c}})
mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xad)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000002c0)={r1, 0x8, 0x8})
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000300))
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1, 0x3})
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000400)=""/118)
shmctl$SHM_UNLOCK(r3, 0xc)
r5 = getuid()
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000480)={{0x3, r5, 0xee00, 0xee01, 0xee01, 0x20, 0x4}, 0x7ff, 0x20, 0x0, 0x4, r2, 0xffffffffffffffff, 0x626})
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x4010, 0xffffffffffffffff, 0x5)

23:52:57 executing program 6:
r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/7)
r1 = shmget(0x3, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000000080))
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4000001)
r4 = getegid()
r5 = getuid()
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, <r6=>0x0})
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x2, 0xee00, r4, r5, 0xee01, 0x50}, 0x0, 0x0, 0x6, 0x1, 0x9, 0x10001, 0x2, 0x8001, 0x100, 0x40, r6})
r7 = msgget(0x0, 0x540)
msgrcv(r7, &(0x7f0000000300)={0x0, ""/54}, 0x3e, 0x3, 0x800)
syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000380)='./file0\x00', 0xfffffffffffffeef, 0x2, &(0x7f0000000580)=[{&(0x7f00000003c0)="984e8426b290652637345b144292fdae9293d410dab483b8deb59da67abbe0b30a5dbf3a49952d7bbbbd8b4a0dec8392b92cc56a6e287d4053cb137123174107771fe15e0e4bbd114a5c01990a65802e61709b545ac97a89bf03adcfb84ecdecbb827f73b04dfb34870d0093982774c939386f2cb58117a4a9d752c73da43187ea624a2588a897578cb057aaea3c9c9f542fe88915", 0x95, 0xfffffffffffffffe}, {&(0x7f0000000480)="9cbfa16a47ba6bb549c48200b0e471d6cec3bed17ceb7b1f04ccbd6e4f96dae95d3f9d0e6770980a07dc171462882dd68a00c13b1da9c5e8aa28b934cc8140911822a404b8a10e0af61060f4ca74c2bbf3dc9e24b9df1f3055e1f44c43904d51c1da9aae7fdc3f173dc8d0816bb2cbe34ddd19868aecc0544ffb7deecf8c352add9dc3b73b48b11a16d31063a90ed333151e7d42111ce2aa4ea397b221563f8385c19d07a07d9711bac4e60d217f7c9121000f6ef903a659c2fe046fc270527f84e6f88fd196199714abc7678ba5b8af19ee77082b51fe17c003d97af87ca1d5199fea427c77744da24dbad38f9ac834c4dc5ad2c3c083", 0xf7, 0xbab3}], 0x20000, &(0x7f00000005c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7fffffff}}, {@abort}, {@nomblk_io_submit}, {@nouid32}], [{@smackfsdef={'smackfsdef', 0x3d, '^'}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@permit_directio}, {@audit}, {@measure}, {@obj_user={'obj_user', 0x3d, '/dev/snapshot\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x0, 0x33, 0x37, 0x31, 0x66, 0x38, 0x32], 0x2d, [0x36, 0x33, 0x66, 0x34], 0x2d, [0x34, 0x61, 0x33, 0x31], 0x2d, [0x66, 0x35, 0x35, 0x64], 0x2d, [0x66, 0x62, 0x63, 0x62, 0x66, 0x31, 0x39, 0x35]}}}]})
shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x4000)
r8 = getuid()
r9 = getpid()
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000c00)={{0x3, r8, r4, r5, 0xee01}, 0x400, 0x543c, 0x7, 0x6f582df6, r9, r6, 0x1})
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000)

23:52:57 executing program 7:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000240)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x7, "8d28b3501efc4f"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001240)={r2, r4, "43f7761cb381f33ec22b36235eb1f606eb36ead841a8df8f887231fa0e6ba1db6240d512fecc44a04f333cde7516cc48567457f2f3b3bc8a900e5b8bff57f4e947dc25fff0072d03d9bc7b2e888016b2607e652b17d571e03ca9845d06fcb29cf365597fa57f00c179e6669c4fed959024ccd525ca544567257dab64bbbad2304e80fb24016fd10d137e72953ee4947da5404437f2f6e50593d90fd1498763a1e73c7a1781121a1ef380566c81cb15b79751040d502212e12f3fdc8ab755929375a9d8271616756391a8b77891a33228e0176a95ec74196f26d0f7d8a4c4e30d5802294214ec66da95e3aeac791f83c37665b714a1e7e34ffa2315acf551f50d", "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"})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002280)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002240), 0x0, r0}, 0x68)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000002300))
r5 = syz_open_dev$vcsu(&(0x7f0000002340), 0x7, 0x200a40)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000002380)={0x0, 0x2, r6, 0x8})
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000023c0)={0x6, 0x3, 0x0, 0x4, 0x2d, 0x0, 0x2}, 0xc)
r7 = perf_event_open(&(0x7f0000002400)={0x3, 0x80, 0x7, 0xf9, 0x1, 0x6, 0x0, 0x3ff, 0xa20, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x4}, 0x100, 0x7fffffff, 0x8, 0x4, 0x101, 0x80, 0x15, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x3, r5, 0x3)
ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000002480)={{r3, 0xfdb, 0xfffffffffffffc01, 0x4, 0x4, 0x40000000, 0x2, 0x8000, 0x3f, 0x3, 0x1, 0x100000001, 0x1cbc000000, 0xfffffffffffffff8, 0x5}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000003540)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400d5)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003580), 0x400000, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f00000035c0)={{<r9=>0x0, 0x4, 0x1, 0x1, 0x9, 0xfffffffffffffff8, 0xa6, 0xfffffd34, 0x6, 0xffff, 0x0, 0x4, 0x7, 0x53, 0x1ff}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000003680)={{r9, 0xfb, 0x100, 0x0, 0x0, 0x1, 0x565, 0x5, 0x3, 0x6, 0x80, 0x101, 0x42, 0x2, 0x9}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000046c0), r5)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r10, &(0x7f0000004780)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004740)={&(0x7f0000004700)={0x1c, r11, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800)
sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f00000048c0)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004880)={&(0x7f0000004800)={0x58, r11, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004006}, 0x81)

[   88.271790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.274540] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.276117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.277711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.287402] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.288180] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.290206] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   88.291257] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.292637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.293427] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.294876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.296432] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.299113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.305573] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   88.320608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.325376] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.330833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.332199] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   88.337641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.340609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   88.344125] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   88.345566] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.348882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   88.360398] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   88.363931] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   88.365807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   88.370978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.372097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.375473] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.382933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.388995] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.390127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.392271] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   88.393731] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.406815] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   88.408648] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   88.410520] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   88.411818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   88.413839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   88.415590] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   88.416571] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   88.418618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.418638] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   88.438035] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   88.445979] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   88.450267] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   88.451517] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   88.452670] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   90.354683] Bluetooth: hci1: command tx timeout
[   90.357686] Bluetooth: hci2: command tx timeout
[   90.418327] Bluetooth: hci5: command tx timeout
[   90.420061] Bluetooth: hci0: command tx timeout
[   90.482418] Bluetooth: hci3: command tx timeout
[   90.483837] Bluetooth: hci4: command tx timeout
[   90.546436] Bluetooth: hci7: command tx timeout
[   90.548454] Bluetooth: hci6: command tx timeout
[   92.403518] Bluetooth: hci2: command tx timeout
[   92.404029] Bluetooth: hci1: command tx timeout
[   92.466372] Bluetooth: hci0: command tx timeout
[   92.466854] Bluetooth: hci5: command tx timeout
[   92.530401] Bluetooth: hci3: command tx timeout
[   92.530882] Bluetooth: hci4: command tx timeout
[   92.594322] Bluetooth: hci7: command tx timeout
[   92.594797] Bluetooth: hci6: command tx timeout
[   94.451489] Bluetooth: hci1: command tx timeout
[   94.452023] Bluetooth: hci2: command tx timeout
[   94.514925] Bluetooth: hci5: command tx timeout
[   94.515653] Bluetooth: hci0: command tx timeout
[   94.578337] Bluetooth: hci4: command tx timeout
[   94.578822] Bluetooth: hci3: command tx timeout
[   94.642426] Bluetooth: hci6: command tx timeout
[   94.642916] Bluetooth: hci7: command tx timeout
[   96.498686] Bluetooth: hci2: command tx timeout
[   96.500599] Bluetooth: hci1: command tx timeout
[   96.562329] Bluetooth: hci0: command tx timeout
[   96.563864] Bluetooth: hci5: command tx timeout
[   96.626400] Bluetooth: hci4: command tx timeout
[   96.627820] Bluetooth: hci3: command tx timeout
[   96.691333] Bluetooth: hci7: command tx timeout
[   96.692661] Bluetooth: hci6: command tx timeout
[  150.955551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  150.957493] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  150.959930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  150.962524] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  150.964978] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  150.966073] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  151.040853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  151.043834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  151.046436] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  151.049247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  151.053436] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  151.054581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  151.105051] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  151.110806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  151.114727] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  151.134686] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  151.148148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  151.155590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  151.157460] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  151.159015] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  151.165637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  151.201894] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  151.203059] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  151.223618] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  151.224652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  151.228451] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  151.230157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  151.245748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  151.252807] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  151.254921] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  151.258524] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  151.259665] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  151.261394] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  151.271583] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  151.276631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  151.283176] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  151.287375] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  151.290186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  151.291840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  151.294914] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  151.296171] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  151.299694] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  151.302919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  151.305116] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  151.310645] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  151.342446] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  151.363968] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  151.385460] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  153.011821] Bluetooth: hci0: command tx timeout
[  153.139425] Bluetooth: hci1: command tx timeout
[  153.202292] Bluetooth: hci3: command tx timeout
[  153.331322] Bluetooth: hci2: command tx timeout
[  153.458417] Bluetooth: hci6: command tx timeout
[  153.460275] Bluetooth: hci4: command tx timeout
[  153.586382] Bluetooth: hci7: command tx timeout
[  154.035365] Bluetooth: hci5: command tx timeout
[  155.059360] Bluetooth: hci0: command tx timeout
[  155.186311] Bluetooth: hci1: command tx timeout
[  155.252298] Bluetooth: hci3: command tx timeout
[  155.379284] Bluetooth: hci2: command tx timeout
[  155.507322] Bluetooth: hci6: command tx timeout
[  155.507900] Bluetooth: hci4: command tx timeout
[  155.635318] Bluetooth: hci7: command tx timeout
[  156.083315] Bluetooth: hci5: command tx timeout
[  157.107340] Bluetooth: hci0: command tx timeout
[  157.235458] Bluetooth: hci1: command tx timeout
[  157.298367] Bluetooth: hci3: command tx timeout
[  157.426318] Bluetooth: hci2: command tx timeout
[  157.555416] Bluetooth: hci4: command tx timeout
[  157.555967] Bluetooth: hci6: command tx timeout
[  157.683413] Bluetooth: hci7: command tx timeout
[  158.132254] Bluetooth: hci5: command tx timeout
[  159.155341] Bluetooth: hci0: command tx timeout
[  159.283298] Bluetooth: hci1: command tx timeout
[  159.347267] Bluetooth: hci3: command tx timeout
[  159.474562] Bluetooth: hci2: command tx timeout
[  159.603393] Bluetooth: hci6: command tx timeout
[  159.603934] Bluetooth: hci4: command tx timeout
[  159.730308] Bluetooth: hci7: command tx timeout
[  160.178407] Bluetooth: hci5: command tx timeout
[  213.392814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  213.394726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  213.401687] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  213.408360] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  213.409814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  213.410674] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  213.412121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  213.413608] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  213.414912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  213.416818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  213.418724] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  213.422597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  213.506075] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  213.511455] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  213.512909] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  213.524991] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  213.527432] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  213.529597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  213.568093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  213.580915] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.582386] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  213.587402] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  213.592622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.606327] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.635723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  213.652787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.654746] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  213.656033] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  213.658785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  213.660111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  213.663483] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  213.671449] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  213.673448] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  213.707224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  213.721590] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  213.723064] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  213.724660] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  213.727590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  213.728496] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  213.747575] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  213.747650] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  213.752453] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  213.756897] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  213.776307] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  213.793447] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  213.795124] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  213.795523] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  213.826474] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  215.474886] Bluetooth: hci0: command tx timeout
[  215.475987] Bluetooth: hci1: command tx timeout
[  215.604409] Bluetooth: hci2: command tx timeout
[  215.730547] Bluetooth: hci3: command tx timeout
[  215.731712] Bluetooth: hci4: command tx timeout
[  215.794391] Bluetooth: hci5: command tx timeout
[  215.922385] Bluetooth: hci7: command tx timeout
[  215.923348] Bluetooth: hci6: command tx timeout
[  217.522833] Bluetooth: hci0: command tx timeout
[  217.524355] Bluetooth: hci1: command tx timeout
[  217.650573] Bluetooth: hci2: command tx timeout
[  217.779245] Bluetooth: hci4: command tx timeout
[  217.779797] Bluetooth: hci3: command tx timeout
[  217.844253] Bluetooth: hci5: command tx timeout
[  217.970458] Bluetooth: hci6: command tx timeout
[  217.971011] Bluetooth: hci7: command tx timeout
[  219.570343] Bluetooth: hci1: command tx timeout
[  219.571871] Bluetooth: hci0: command tx timeout
[  219.698302] Bluetooth: hci2: command tx timeout
[  219.826373] Bluetooth: hci3: command tx timeout
[  219.826906] Bluetooth: hci4: command tx timeout
[  219.890380] Bluetooth: hci5: command tx timeout
[  220.018346] Bluetooth: hci7: command tx timeout
[  220.020306] Bluetooth: hci6: command tx timeout
[  221.618326] Bluetooth: hci1: command tx timeout
[  221.618833] Bluetooth: hci0: command tx timeout
[  221.746328] Bluetooth: hci2: command tx timeout
[  221.874432] Bluetooth: hci3: command tx timeout
[  221.874964] Bluetooth: hci4: command tx timeout
[  221.938310] Bluetooth: hci5: command tx timeout
[  222.066355] Bluetooth: hci7: command tx timeout
[  222.066860] Bluetooth: hci6: command tx timeout
[  275.649723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  275.651561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  275.652625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  275.655775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  275.661511] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  275.662679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  275.724802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  275.726104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  275.727487] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  275.731097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  275.732746] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  275.733804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  275.776552] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  275.778616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  275.782607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  275.794413] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  275.799711] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  275.801653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  275.908932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  275.911360] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  275.921382] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  275.925409] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  275.926802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  275.928115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  276.003784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  276.014382] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  276.015786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  276.037743] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  276.047090] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  276.053619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  276.055530] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  276.062648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  276.082526] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  276.094995] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  276.103662] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  276.109398] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  276.116776] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  276.124442] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  276.127815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  276.131533] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  276.141139] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  276.142019] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  276.143259] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  276.164591] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  276.168889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  276.212641] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  276.217377] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  276.224585] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  277.747306] Bluetooth: hci0: command tx timeout
[  277.810262] Bluetooth: hci1: command tx timeout
[  277.875354] Bluetooth: hci2: command tx timeout
[  278.005338] Bluetooth: hci3: command tx timeout
[  278.194477] Bluetooth: hci4: command tx timeout
[  278.194516] Bluetooth: hci5: command tx timeout
[  278.258338] Bluetooth: hci6: command tx timeout
[  278.322307] Bluetooth: hci7: command tx timeout
[  279.797327] Bluetooth: hci0: command tx timeout
[  279.858465] Bluetooth: hci1: command tx timeout
[  279.922269] Bluetooth: hci2: command tx timeout
[  280.050620] Bluetooth: hci3: command tx timeout
[  280.242301] Bluetooth: hci5: command tx timeout
[  280.243270] Bluetooth: hci4: command tx timeout
[  280.306343] Bluetooth: hci6: command tx timeout
[  280.370355] Bluetooth: hci7: command tx timeout
[  281.842281] Bluetooth: hci0: command tx timeout
[  281.907127] Bluetooth: hci1: command tx timeout
[  281.971236] Bluetooth: hci2: command tx timeout
[  282.098324] Bluetooth: hci3: command tx timeout
[  282.290293] Bluetooth: hci4: command tx timeout
[  282.290329] Bluetooth: hci5: command tx timeout
[  282.354883] Bluetooth: hci6: command tx timeout
[  282.418357] Bluetooth: hci7: command tx timeout
[  283.890504] Bluetooth: hci0: command tx timeout
[  283.954349] Bluetooth: hci1: command tx timeout
[  284.020241] Bluetooth: hci2: command tx timeout
[  284.146260] Bluetooth: hci3: command tx timeout
[  284.338272] Bluetooth: hci5: command tx timeout
[  284.338752] Bluetooth: hci4: command tx timeout
[  284.403427] Bluetooth: hci6: command tx timeout
[  284.467246] Bluetooth: hci7: command tx timeout
[  337.994818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  338.008504] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  338.015377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  338.027081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  338.029125] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  338.030450] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  338.118894] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  338.120999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  338.122097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  338.125671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  338.127208] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  338.128424] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  338.133456] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  338.135199] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  338.136586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  338.151622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  338.171486] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  338.177383] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  338.205805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  338.218090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  338.239835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  338.244708] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  338.245560] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  338.247461] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  338.256424] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  338.257131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  338.258667] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  338.260986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  338.262478] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  338.263574] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  338.375394] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  338.377700] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  338.381390] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  338.382584] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  338.383632] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  338.385660] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  338.389771] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  338.396955] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  338.398078] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  338.403077] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  338.405574] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  338.406853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  338.455658] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  338.476209] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  338.507009] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  338.554733] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  338.556961] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  338.557979] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  340.086388] Bluetooth: hci0: command tx timeout
[  340.147233] Bluetooth: hci2: command tx timeout
[  340.212327] Bluetooth: hci1: command tx timeout
[  340.339502] Bluetooth: hci4: command tx timeout
[  340.341122] Bluetooth: hci3: command tx timeout
[  340.533204] Bluetooth: hci7: command tx timeout
[  340.659289] Bluetooth: hci6: command tx timeout
[  340.787260] Bluetooth: hci5: command tx timeout
[  342.131328] Bluetooth: hci0: command tx timeout
[  342.195353] Bluetooth: hci2: command tx timeout
[  342.260128] Bluetooth: hci1: command tx timeout
[  342.386261] Bluetooth: hci4: command tx timeout
[  342.386805] Bluetooth: hci3: command tx timeout
[  342.580203] Bluetooth: hci7: command tx timeout
[  342.707212] Bluetooth: hci6: command tx timeout
[  342.836247] Bluetooth: hci5: command tx timeout
[  344.179221] Bluetooth: hci0: command tx timeout
[  344.242393] Bluetooth: hci2: command tx timeout
[  344.306249] Bluetooth: hci1: command tx timeout
[  344.434442] Bluetooth: hci4: command tx timeout
[  344.434992] Bluetooth: hci3: command tx timeout
[  344.626233] Bluetooth: hci7: command tx timeout
[  344.755376] Bluetooth: hci6: command tx timeout
[  344.882236] Bluetooth: hci5: command tx timeout
[  346.227232] Bluetooth: hci0: command tx timeout
[  346.293335] Bluetooth: hci2: command tx timeout
[  346.354558] Bluetooth: hci1: command tx timeout
[  346.483237] Bluetooth: hci3: command tx timeout
[  346.483780] Bluetooth: hci4: command tx timeout
[  346.675238] Bluetooth: hci7: command tx timeout
[  346.803970] Bluetooth: hci6: command tx timeout
[  346.930333] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
23:58:06  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffffffff81841c90 RCX=0000000000000001 RDX=1ffff11005bafeaa
RSI=ffff88802dd7f920 RDI=ffffffff81841c90 RBP=ffff88802dd7f550 RSP=ffff88802dd7f4c8
R8 =0000000000000001 R9 =ffff88802dd7f538 R10=000000000003c001 R11=0000000000024b4f
R12=ffff88802dd7f5c0 R13=0000000000000000 R14=ffff88800df69b80 R15=0000000000092cc0
RIP=ffffffff8121e95f RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5df30b6b70 CR3=0000000033e5a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffffffff813e8f70 RCX=0000000000000001 RDX=ffff888027d07c48
RSI=ffff888027d07c10 RDI=ffff888027d075e8 RBP=ffff888027d07670 RSP=ffff888027d075d8
R8 =0000000000000001 R9 =ffff888027d07618 R10=000000000003c001 R11=000000000002b826
R12=ffff888027d076a0 R13=0000000000000000 R14=ffff888016079b80 R15=0000000000000cc0
RIP=ffffffff810d198d RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563618b1a080 CR3=00000000137f4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000
XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000