Warning: Permanently added '[localhost]:15093' (ECDSA) to the list of known hosts. 2024/11/22 09:28:57 fuzzer started 2024/11/22 09:28:57 dialing manager at localhost:34299 syzkaller login: [ 98.642036] cgroup: Unknown subsys name 'net' [ 98.733495] cgroup: Unknown subsys name 'cpuset' [ 98.756128] cgroup: Unknown subsys name 'rlimit' 2024/11/22 09:29:18 syscalls: 202 2024/11/22 09:29:18 code coverage: enabled 2024/11/22 09:29:18 comparison tracing: enabled 2024/11/22 09:29:18 extra coverage: enabled 2024/11/22 09:29:18 setuid sandbox: enabled 2024/11/22 09:29:18 namespace sandbox: enabled 2024/11/22 09:29:18 Android sandbox: enabled 2024/11/22 09:29:18 fault injection: enabled 2024/11/22 09:29:18 leak checking: enabled 2024/11/22 09:29:18 net packet injection: enabled 2024/11/22 09:29:18 net device setup: enabled 2024/11/22 09:29:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/22 09:29:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/22 09:29:18 USB emulation: enabled 2024/11/22 09:29:18 hci packet injection: enabled 2024/11/22 09:29:18 wifi device emulation: enabled 2024/11/22 09:29:18 802.15.4 emulation: enabled 2024/11/22 09:29:18 fetching corpus: 0, signal 0/0 (executing program) 2024/11/22 09:29:20 starting 8 fuzzer processes 09:29:20 executing program 0: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x13, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008801) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x16c, 0xb, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xe3b}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x200}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffd}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x788c}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_IFACE={0x14, 0x17, 'bond0\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'virt_wifi0\x00'}, @IPSET_ATTR_ETHER={0xa, 0x11, @local}, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xb}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404c0c4}, 0x880) socketpair(0x28, 0x800, 0x2, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x0, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48805}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa0, 0x2, 0x9, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x4, 0x2, 0x0, 0x1f, 0x4}, 0x7) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0xd, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, 0x5, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x5) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000d40)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}}, 0x24000090) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x4c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xf, 0x1a, 'virt_wifi0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1000}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x769fc4db}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f00000013c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001000)={0x374, 0x1, 0x3, 0x201, 0x0, 0x0, {0x5}, [@NFQA_EXP={0x70, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x34}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x10001}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_EXP={0x2d4, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASTER={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT={0x124, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}}}]}, @CTA_EXPECT_NAT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x37}}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_NAT={0xfc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x20000000}, 0x40844) 09:29:20 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x6, 0x64fb33c3, 0x10, @mcast2, @mcast2, 0x7, 0x7, 0xffffffb1, 0x1}}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1f4e7789ebb1"}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x4000) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8864a020}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r3, 0x8b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7e6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x80) socketpair(0x27, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6e}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x21}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000801}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4c6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000400}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x84800400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x972}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0xb, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2f85}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) ioctl$NS_GET_PARENT(r7, 0xb702, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, 0x0, 0x0, 0x1, 0x0, {0x1}}, 0xffffff01) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, r5, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x80}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x72d529795f08f28b}, 0x20000000) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4840) 09:29:20 executing program 2: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x800, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040815) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, r3, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x5c}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39d}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfc9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20044091) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x4, 0x5, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x0, 0x7, 0x3e, 0xfffffffe}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, 0x0, 0x4, 0x70bd26, 0x2, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbf2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2111}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7a}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4004) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x73}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20048040}, 0xc0000) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x59}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44094}, 0x4000085) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40188}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, 0xd, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c011}, 0x8000) pipe(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, 0x0, 0x7, 0x3, 0x0, 0x0, {0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFACCT_FLAGS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x718}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x4041) 09:29:20 executing program 3: socketpair(0xa, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4008041) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4090) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x13, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x9001}, 0x40010) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x101}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c081}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x60c, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8a0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, 0x2, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x68}, 0x1, 0x0, 0x0, 0x4841}, 0x800) socketpair(0x25, 0x800, 0x80000000, &(0x7f0000000980)={0xffffffffffffffff}) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xac, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x11}}}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_KEK={0x41, 0xf2, "8487b3637e64b2f7f45190ae12ff9e9b83b4c2ad7f2ad59613b45a54a7172c9c9ac1648b239fc4e936e62a028d37acc2a375a37a6620242f40314f269a"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x0, 0x1, 0x6, 0x0, {0xf77, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x10000, 0x6}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x2, {0x7fff, 0x4, 0x1000, 0x6c07}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x801) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r5) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r7, 0x8, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x8010) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x111, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x5, 0xc000]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 09:29:20 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"8049e377cee630f547030445dfa73b26", 0x0, r0, {0x9af, 0x7f}, {0xe84, 0x2}, 0x0, [0x21b, 0x734, 0x6, 0x34e, 0x2, 0x0, 0x5, 0x3e, 0x3, 0xfffffffffffffffa, 0x8, 0x1f00000000000000, 0x9, 0x1, 0x300000000000000, 0x7]}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2489}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) socketpair(0x10, 0x4, 0x4, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4014099}, 0x4000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000380)={"426f9559c28fb64f4d18dbda6fe7e687", r1, r1, {0x401, 0xd68de8a}, {0x4, 0x1a14}, 0x4, [0x7, 0x151, 0xce, 0x5, 0x2, 0x6, 0x2, 0x8, 0x7fff, 0x3, 0x6, 0x100000000, 0x0, 0xfc, 0x22ea, 0x2]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000480)={"e902e466a07dac127d904aa6824468f0", 0x0, r4, {0x4, 0x80000001}, {0x8, 0x40}, 0x9, [0x80000000, 0x7, 0x10000, 0x3, 0x4, 0x101, 0xf73d, 0x8, 0x7b, 0x1, 0xce, 0x0, 0x4, 0x41b, 0x1f, 0x3]}) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x13c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x3, 0x7, 0x0, {0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x400, 0xdda, 0x7f}}, @NL80211_ATTR_IE={0xbe, 0x2a, [@measure_req={0x26, 0x9a, {0xdf, 0x9, 0x20, "a587ff3fb018f9427a844274665b497eb98d8e8082cc73c90ae9ab20dbd7bb8eb53d541e387585cd4fe3a08122fb7aed2f783cabd4729de49a9914c88646a237c4e66d67ed51dd3c0f88a5d388fd5a0b08ed047c974675511304dae165b61c88d0679e63430a4eb0e04144290196985ed7f65a4c3d248cc1ef1fa25ac8926b24cd094ab036d3c159d60a8866e8d797e0b8b9f8aa4ddfc9"}}, @link_id={0x65, 0x12, {@random="921ca8b22c95", @device_b, @broadcast}}, @chsw_timing={0x68, 0x4, {0x8001, 0x411}}, @supported_rates={0x1, 0x2, [{0x58, 0x1}, {0x6}]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="60509e2c8b4d"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x100000, {0x3694, 0xfff7, 0x3, 0x1}}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x0, {0x6, 0xefa, 0x8752, 0x9a92}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r3) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x160, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x160}}, 0x4c0d6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20020000}, 0xd3c8db0df7a201cf) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000b40)=r6) socketpair(0x15, 0x0, 0x6, &(0x7f0000000b80)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x15, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000d00)={"e3339100da7ffe712a622d1a25c5ddb0", r5, r6, {0x0, 0xbd}, {0x5, 0x2}, 0x9, [0x800, 0x7, 0x9, 0x40, 0x5, 0x3, 0xf4, 0x31e41901, 0x38ac, 0x101, 0xffffffffffffff80, 0x1, 0x0, 0xfffffffffffffffd, 0x265, 0xbdb0]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e00)='ns/net\x00') r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000e80)={0x8, &(0x7f0000000e40)=[{0xb5a, 0x9, 0xad, 0x8001}, {0x100, 0x1, 0xca, 0x9}, {0x489, 0x3, 0x4, 0x400}, {0x5, 0x3f, 0x0, 0x5}, {0x7fff, 0x0, 0x40, 0x4}, {0x5c66, 0x9, 0x3, 0xfffffff8}, {0x5, 0xcf, 0x3f, 0x40}, {0x8, 0x0, 0x40, 0xfffffffa}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000ec0)) sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8399}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40) [ 120.448905] audit: type=1400 audit(1732267760.570:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:29:20 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040880) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x84) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8c}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r3) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000006c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000700)={'a', ' *:* ', 'w\x00'}, 0x8) socketpair(0x26, 0x4, 0xa61a, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r2, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10080}, 0x4000) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x35}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x81}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x201}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4008080) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00'}) 09:29:20 executing program 6: r0 = gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) r4 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="ec18836fd2f071edfc4fdbfc6cd2d749a53167b6e2be1ba54bbd27fb6a464705a9206cb7fda21df7f00a682477b7aea45a0d48dcb8feaf1f9c310ebb277bb1b83e79e98bc653a1c5d60dae928971a41febd0ebb5841b6c9ec841c99f2672c03668e09a058ce8af950871412841fd866f0330f69ed9a0a76422ee5a60c37336b77cf4", 0x82, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x2, 0x9, 0x0, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3f}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4048860) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f0000000500)) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x9c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x5d}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "04b2f130915517df5f761323dfdc64de"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "f2beb2ff744168a6cb5372ebf9a5ec9b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "59b5c507c7cc4b734e2debc7aa4368c3"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b6364f3098cde911d4e5a861e220f24a"}, @NL80211_ATTR_MAC={0xa}]}, 0x9c}, 0x1, 0x0, 0x0, 0x90}, 0x94) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000006c0)) r7 = syz_open_dev$sg(&(0x7f0000000700), 0xfff, 0x80400) fcntl$getownex(r7, 0x10, &(0x7f0000000740)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x8, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40011}, 0x4800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x4, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20044010) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, 0x3, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x60}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x91}, 0x2000c000) r9 = add_key$user(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x0}, &(0x7f0000000b40)="915108eed9e5d3778634d7e62a3a59a5f1a52bfecf854e13b16b25d5f84b52014ce2a7e29d0dd8be74c1c859e1f5fa3a6d273f851a2a23a5ebc04ccb247876c3f909e0ed91e3e9ea608b5859e3ba23f4f8f15ba0aacb89cf3718e781ee3af0d64ecfe10814995e2a7647aabc107aba9aad4f3c6f3029a70bce27b4d54674689cc2082afd6c979a528d20103eedabc884851f5271fe0858c626ffac34811a03ba5f953312a16257e8235a753258cc4cefc4c0a53c06eb2520a29b7958f22cfa6f10037dae465d4bc57ba1aca6dc51394421ec19c6e19174fcba48cf9f0c36", 0xde, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000c40)={r4, 0x0, r9}, &(0x7f0000000c80)=""/19, 0x13, &(0x7f0000000d00)={&(0x7f0000000cc0)={'blake2s-128-generic\x00'}}) 09:29:20 executing program 7: socketpair(0x2c, 0x3, 0x80, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x100, 0x2b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0x44015) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c011}, 0x24000804) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe4, 0x1, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}]}, 0xe4}, 0x1, 0x0, 0x0, 0x90}, 0x0) r4 = io_uring_setup(0x5a43, &(0x7f00000005c0)={0x0, 0x6e16, 0x0, 0x3, 0x2ba}) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x7, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8041) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, r5, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7a}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8821}, 0x44881) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x100010, r4, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000980)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) select(0x40, &(0x7f00000009c0)={0x5, 0x7, 0x8001, 0x4, 0x80000001, 0x5, 0x3, 0x20}, &(0x7f0000000a00)={0x5, 0x7, 0x3, 0x80000001, 0xe4, 0x1, 0xb91}, &(0x7f0000000a40)={0xe48, 0x0, 0x3, 0x6aa4eb36, 0xf761, 0xffffffffffffffa4, 0x80000000, 0xff}, &(0x7f0000000ac0)={r6, r7/1000+10000}) socketpair(0x2, 0x6, 0x7, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000b40)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r9, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x55}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x22}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x7c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008810}, 0xc050) [ 121.901018] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.905429] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.906750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.908676] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.911425] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.912475] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.914860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.916456] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.919436] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.919516] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.925465] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 121.931923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.933544] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 121.934793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.943089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.945882] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 121.947408] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.948440] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.966971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.972489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.975203] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.980072] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.985015] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.987405] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 121.990555] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.992091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 121.993549] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.994825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 121.995911] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 121.998104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.001487] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.002871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.018938] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 122.020689] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.023323] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 122.028414] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.043824] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 122.051277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.055540] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 122.057476] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 122.063437] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 122.064657] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 122.068440] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 122.069669] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 122.071904] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 122.073328] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 122.074744] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 122.075787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.987991] Bluetooth: hci2: command tx timeout [ 123.988906] Bluetooth: hci1: command tx timeout [ 123.989627] Bluetooth: hci0: command tx timeout [ 124.051315] Bluetooth: hci4: command tx timeout [ 124.052288] Bluetooth: hci5: command tx timeout [ 124.052351] Bluetooth: hci3: command tx timeout [ 124.115397] Bluetooth: hci7: command tx timeout [ 124.115662] Bluetooth: hci6: command tx timeout [ 126.036246] Bluetooth: hci1: command tx timeout [ 126.036782] Bluetooth: hci2: command tx timeout [ 126.037589] Bluetooth: hci0: command tx timeout [ 126.099285] Bluetooth: hci4: command tx timeout [ 126.099848] Bluetooth: hci3: command tx timeout [ 126.101180] Bluetooth: hci5: command tx timeout [ 126.163721] Bluetooth: hci6: command tx timeout [ 126.163951] Bluetooth: hci7: command tx timeout [ 128.085251] Bluetooth: hci2: command tx timeout [ 128.085298] Bluetooth: hci0: command tx timeout [ 128.085812] Bluetooth: hci1: command tx timeout [ 128.147282] Bluetooth: hci3: command tx timeout [ 128.147840] Bluetooth: hci5: command tx timeout [ 128.148404] Bluetooth: hci4: command tx timeout [ 128.211280] Bluetooth: hci7: command tx timeout [ 128.211829] Bluetooth: hci6: command tx timeout [ 130.131345] Bluetooth: hci0: command tx timeout [ 130.131901] Bluetooth: hci1: command tx timeout [ 130.132552] Bluetooth: hci2: command tx timeout [ 130.195376] Bluetooth: hci4: command tx timeout [ 130.195435] Bluetooth: hci5: command tx timeout [ 130.195897] Bluetooth: hci3: command tx timeout [ 130.259300] Bluetooth: hci6: command tx timeout [ 130.259837] Bluetooth: hci7: command tx timeout [ 184.035011] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.041891] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.044448] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.051461] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.054979] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 184.057381] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.292549] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.304331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.306756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.312659] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.319037] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 184.321078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.355080] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.361682] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.374683] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.380476] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.389394] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 184.407927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.482227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.493913] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 184.501604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.509668] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.510518] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 184.515988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.526805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.528864] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 184.547916] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 184.549990] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 184.552517] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 184.553962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.555535] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.566814] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 184.569072] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.577303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.608370] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 184.621011] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 184.631403] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.637345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.639503] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.651427] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.667211] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 184.674359] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.703264] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 184.716768] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 184.725984] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 184.746589] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 184.748666] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 184.749956] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 186.131228] Bluetooth: hci0: command tx timeout [ 186.387380] Bluetooth: hci1: command tx timeout [ 186.451403] Bluetooth: hci2: command tx timeout [ 186.707313] Bluetooth: hci3: command tx timeout [ 186.772205] Bluetooth: hci6: command tx timeout [ 186.772307] Bluetooth: hci4: command tx timeout [ 186.835356] Bluetooth: hci5: command tx timeout [ 186.836479] Bluetooth: hci7: command tx timeout [ 188.179242] Bluetooth: hci0: command tx timeout [ 188.435217] Bluetooth: hci1: command tx timeout [ 188.499269] Bluetooth: hci2: command tx timeout [ 188.755245] Bluetooth: hci3: command tx timeout [ 188.819874] Bluetooth: hci4: command tx timeout [ 188.819953] Bluetooth: hci6: command tx timeout [ 188.883256] Bluetooth: hci7: command tx timeout [ 188.883802] Bluetooth: hci5: command tx timeout [ 190.228027] Bluetooth: hci0: command tx timeout [ 190.483286] Bluetooth: hci1: command tx timeout [ 190.547276] Bluetooth: hci2: command tx timeout [ 190.803445] Bluetooth: hci3: command tx timeout [ 190.867351] Bluetooth: hci4: command tx timeout [ 190.868585] Bluetooth: hci6: command tx timeout [ 190.932271] Bluetooth: hci5: command tx timeout [ 190.932320] Bluetooth: hci7: command tx timeout [ 192.275345] Bluetooth: hci0: command tx timeout [ 192.531336] Bluetooth: hci1: command tx timeout [ 192.597177] Bluetooth: hci2: command tx timeout [ 192.851278] Bluetooth: hci3: command tx timeout [ 192.915464] Bluetooth: hci6: command tx timeout [ 192.915646] Bluetooth: hci4: command tx timeout [ 192.979252] Bluetooth: hci5: command tx timeout [ 192.980287] Bluetooth: hci7: command tx timeout [ 246.372658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.377849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.381628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.386880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.392584] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 246.394792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.751794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.755535] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.763540] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.768542] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.773813] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 246.776384] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.845328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.854773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.858562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.864565] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.868712] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 246.876772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.890813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.896502] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.900768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.916033] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.919020] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.921027] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.925755] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.931407] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 246.942392] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.965024] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.971507] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 246.976231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.981555] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 246.987491] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 246.989698] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 247.011459] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 247.013702] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.014662] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.018626] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 247.021026] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 247.061147] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 247.064960] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 247.069442] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 247.071956] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 247.077438] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 247.081868] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 247.084454] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 247.167331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 247.190495] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 247.209588] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.468266] Bluetooth: hci0: command tx timeout [ 248.851188] Bluetooth: hci1: command tx timeout [ 248.979269] Bluetooth: hci2: command tx timeout [ 249.044260] Bluetooth: hci6: command tx timeout [ 249.108796] Bluetooth: hci4: command tx timeout [ 249.172423] Bluetooth: hci7: command tx timeout [ 249.236317] Bluetooth: hci3: command tx timeout [ 249.364531] Bluetooth: hci5: command tx timeout [ 250.516248] Bluetooth: hci0: command tx timeout [ 250.902158] Bluetooth: hci1: command tx timeout [ 251.028183] Bluetooth: hci2: command tx timeout [ 251.092319] Bluetooth: hci6: command tx timeout [ 251.156785] Bluetooth: hci4: command tx timeout [ 251.220261] Bluetooth: hci7: command tx timeout [ 251.285253] Bluetooth: hci3: command tx timeout [ 251.413155] Bluetooth: hci5: command tx timeout [ 252.563825] Bluetooth: hci0: command tx timeout [ 252.949202] Bluetooth: hci1: command tx timeout [ 253.075376] Bluetooth: hci2: command tx timeout [ 253.139279] Bluetooth: hci6: command tx timeout [ 253.203315] Bluetooth: hci4: command tx timeout [ 253.267350] Bluetooth: hci7: command tx timeout [ 253.331512] Bluetooth: hci3: command tx timeout [ 253.461216] Bluetooth: hci5: command tx timeout [ 254.611302] Bluetooth: hci0: command tx timeout [ 254.995193] Bluetooth: hci1: command tx timeout [ 255.124346] Bluetooth: hci2: command tx timeout [ 255.188172] Bluetooth: hci6: command tx timeout [ 255.252230] Bluetooth: hci4: command tx timeout [ 255.316372] Bluetooth: hci7: command tx timeout [ 255.379374] Bluetooth: hci3: command tx timeout [ 255.509144] Bluetooth: hci5: command tx timeout [ 308.836946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.840379] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.844550] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.854040] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.859984] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 308.862712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.904926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.914736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.918822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.926529] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.932527] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 308.934673] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.983890] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.994729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 309.001429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 309.016575] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 309.032556] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 309.035542] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 309.124317] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.156592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.158979] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.197004] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.199622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.204387] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 309.207704] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.209249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.209728] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.223703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.229634] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 309.249584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.382051] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 309.393664] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 309.403838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 309.473858] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 309.500529] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 309.506276] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 309.660469] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 309.743294] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 309.745832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 309.757331] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 309.761892] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 309.763771] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 309.807302] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.845895] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.914555] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.970662] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.997313] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 310.006716] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.931213] Bluetooth: hci0: command tx timeout [ 310.995209] Bluetooth: hci1: command tx timeout [ 311.123259] Bluetooth: hci2: command tx timeout [ 311.380315] Bluetooth: hci4: command tx timeout [ 311.381576] Bluetooth: hci3: command tx timeout [ 311.828338] Bluetooth: hci7: command tx timeout [ 311.891194] Bluetooth: hci6: command tx timeout [ 312.213142] Bluetooth: hci5: command tx timeout [ 312.979603] Bluetooth: hci0: command tx timeout [ 313.044172] Bluetooth: hci1: command tx timeout [ 313.171190] Bluetooth: hci2: command tx timeout [ 313.427230] Bluetooth: hci3: command tx timeout [ 313.427720] Bluetooth: hci4: command tx timeout [ 313.877193] Bluetooth: hci7: command tx timeout [ 313.939239] Bluetooth: hci6: command tx timeout [ 314.260558] Bluetooth: hci5: command tx timeout [ 315.027232] Bluetooth: hci0: command tx timeout [ 315.093116] Bluetooth: hci1: command tx timeout [ 315.220196] Bluetooth: hci2: command tx timeout [ 315.476176] Bluetooth: hci3: command tx timeout [ 315.476682] Bluetooth: hci4: command tx timeout [ 315.924174] Bluetooth: hci7: command tx timeout [ 315.988286] Bluetooth: hci6: command tx timeout [ 316.310184] Bluetooth: hci5: command tx timeout [ 317.075230] Bluetooth: hci0: command tx timeout [ 317.140202] Bluetooth: hci1: command tx timeout [ 317.268396] Bluetooth: hci2: command tx timeout [ 317.523465] Bluetooth: hci4: command tx timeout [ 317.523963] Bluetooth: hci3: command tx timeout [ 317.971226] Bluetooth: hci7: command tx timeout [ 318.037135] Bluetooth: hci6: command tx timeout [ 318.356290] Bluetooth: hci5: command tx timeout [ 367.440111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.440994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.846941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.851213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.853421] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.862647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.868411] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 370.870513] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.921973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.924942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.927494] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.932574] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.935760] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 370.939332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.050714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.057511] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.060758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.073438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.077537] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 371.090417] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.186662] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.194297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.196911] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.202485] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.205339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 371.206718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.253307] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.255197] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.258041] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.272774] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.278507] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.280196] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.287187] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.294536] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 371.306865] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 371.310487] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 371.314651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.323480] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.332723] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 371.339803] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 371.341590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.366566] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 371.377942] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 371.392774] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 371.402707] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.424389] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 371.480508] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 371.529872] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 371.554425] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 371.556509] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 372.948162] Bluetooth: hci0: command tx timeout [ 373.011651] Bluetooth: hci1: command tx timeout [ 373.139387] Bluetooth: hci2: command tx timeout [ 373.267206] Bluetooth: hci3: command tx timeout [ 373.459748] Bluetooth: hci4: command tx timeout [ 373.525203] Bluetooth: hci6: command tx timeout [ 373.587246] Bluetooth: hci5: command tx timeout [ 373.716533] Bluetooth: hci7: command tx timeout [ 374.996436] Bluetooth: hci0: command tx timeout [ 375.062300] Bluetooth: hci1: command tx timeout [ 375.187164] Bluetooth: hci2: command tx timeout [ 375.315207] Bluetooth: hci3: command tx timeout [ 375.508280] Bluetooth: hci4: command tx timeout [ 375.571862] Bluetooth: hci6: command tx timeout [ 375.636179] Bluetooth: hci5: command tx timeout [ 375.765144] Bluetooth: hci7: command tx timeout [ 377.043170] Bluetooth: hci0: command tx timeout [ 377.108383] Bluetooth: hci1: command tx timeout [ 377.236486] Bluetooth: hci2: command tx timeout [ 377.363269] Bluetooth: hci3: command tx timeout [ 377.555472] Bluetooth: hci4: command tx timeout [ 377.619205] Bluetooth: hci6: command tx timeout [ 377.683251] Bluetooth: hci5: command tx timeout [ 377.812201] Bluetooth: hci7: command tx timeout [ 379.092162] Bluetooth: hci0: command tx timeout [ 379.155203] Bluetooth: hci1: command tx timeout [ 379.283357] Bluetooth: hci2: command tx timeout [ 379.412172] Bluetooth: hci3: command tx timeout [ 379.603207] Bluetooth: hci4: command tx timeout [ 379.668820] Bluetooth: hci6: command tx timeout [ 379.731311] Bluetooth: hci5: command tx timeout [ 379.860182] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 09:34:26 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000003 RCX=ffff888030bff6f0 RDX=0000000000000003 RSI=ffffffff85c16140 RDI=ffff88803570c190 RBP=0000000000000002 RSP=ffff888030bff668 R8 =0000000000000001 R9 =ffff88803570c138 R10=ffffffff863f9417 R11=00000000000c3c61 R12=ffff88803570c190 R13=ffffffff85c16140 R14=ffff888030bff6f0 R15=ffff88803570b700 RIP=ffffffff812f221c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fec36d20540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000559f97e37008 CR3=000000000e0ce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff8880253bf848 RCX=ffffffff847ea0c2 RDX=ffff88801598d280 RSI=0000000000000002 RDI=0000000000000000 RBP=ffff8880253bf978 RSP=ffff8880253bf520 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000000 R12=ffff88803497b400 R13=ffff88803497b418 R14=0000000000000002 R15=0000000000000002 RIP=ffffffff81520550 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6fe52ce610 CR3=0000000033bd8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000