Warning: Permanently added '[localhost]:56746' (ECDSA) to the list of known hosts. 2025/01/23 05:50:56 fuzzer started 2025/01/23 05:50:56 dialing manager at localhost:38529 syzkaller login: [ 69.801347] cgroup: Unknown subsys name 'net' [ 69.916510] cgroup: Unknown subsys name 'cpuset' [ 69.951561] cgroup: Unknown subsys name 'rlimit' [ 77.020607] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 86.536532] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 05:51:13 syscalls: 200 2025/01/23 05:51:13 code coverage: enabled 2025/01/23 05:51:13 comparison tracing: enabled 2025/01/23 05:51:13 extra coverage: enabled 2025/01/23 05:51:13 setuid sandbox: enabled 2025/01/23 05:51:13 namespace sandbox: enabled 2025/01/23 05:51:13 Android sandbox: enabled 2025/01/23 05:51:13 fault injection: enabled 2025/01/23 05:51:13 leak checking: enabled 2025/01/23 05:51:13 net packet injection: enabled 2025/01/23 05:51:13 net device setup: enabled 2025/01/23 05:51:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 05:51:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 05:51:13 USB emulation: enabled 2025/01/23 05:51:13 hci packet injection: enabled 2025/01/23 05:51:13 wifi device emulation: enabled 2025/01/23 05:51:13 802.15.4 emulation: enabled 2025/01/23 05:51:13 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 05:51:14 starting 8 fuzzer processes 05:51:14 executing program 0: shmdt(0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x1, 0x100}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000880) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc015}, 0xc004) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0xf, 0x6, 0xa03, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x4, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x4005) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000840}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x100d0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x2000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc0bd}]}, 0x44}}, 0x8000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='clear_refs\x00') r8 = add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r8) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xe4, 0x3, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x81}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3400}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6ef0}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3e6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6a3c}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80b5}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20a021}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x64, r5, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xce}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) 05:51:14 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0xe00, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x44}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}}, 0x8010) r2 = dup2(r1, 0xffffffffffffffff) ioctl$sock_bt_hci(r2, 0x800448d7, &(0x7f0000000380)="2a590cbc3057c60a210a0c55b49b48e10789928181224d8a91ee23d5549f37efe1ca9b7aaf2ee84d37957afdc8711551801940663582e771251f48fb8f3f62fb4f25929358c17be4d74e32d4f1877475090cb75108e204b531ae54e461542c29dc8525897377e1d4a17345d6549ccb31690a996e1ca13f372c96422e5147544c3be8a1a08c8169f289488bcde57bfca293a714ddc15967f88a69257215156e59b3308f37050e610d273eac") sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c804}, 0x20040004) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000540), 0x400080, 0x0) r4 = dup2(r2, r2) r5 = dup2(r3, r2) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0xffffffffffffa7a4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb8, 0x3, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xbc}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6c4be4c3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8001}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8bc5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc41}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xa947}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x20004001) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20044014) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x755feea0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x8000000) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/key-users\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000980)={0x0, 0x2, 0x7f, 0x2, 0x80}) r8 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/packet\x00') syz_io_uring_setup(0x26d9, &(0x7f0000000a00)={0x0, 0x9b64, 0x26, 0x0, 0x3c9, 0x0, r8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 05:51:15 executing program 2: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004091}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_seqnum', 0x420802, 0x182) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0xc0, 0x1, 0x9, 0x18, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0x4, 0x200}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r0, 0x4, 0x0, 0x9}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x8, 0x7800, 0x2, 0x1ff, {{0x16, 0x4, 0x0, 0x9, 0x58, 0x65, 0x0, 0x6, 0x4, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x2c, 0x8a, 0x3, 0x1, [{@broadcast, 0x20004}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local, 0x81}, {@local, 0x3}, {@local, 0x3ff}]}, @end, @timestamp={0x44, 0xc, 0x8d, 0x0, 0xa, [0x3, 0x7fffffff]}, @generic={0x88, 0xb, "4d3332bae44f906b40"}]}}}}}) fcntl$setpipe(r2, 0x407, 0xc79) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000440)={0x0, 0x8, 0x3}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x422bc0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x440020}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x2, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8e6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x5000}, 0x1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x20000884) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/module/usbcore', 0x400000, 0x199) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x90, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004}, 0x24008840) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, r5, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xea}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}}, 0x4000088) socketpair(0x6, 0x800, 0x1, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f00), r2) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x4c, r8, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x50, 0x0, 0x6b671ccb5afb3a9e, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9eb}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 05:51:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000400)={0x2, 0x800, @status={[0x8, 0x2d, 0x200, 0x6, 0x4f10, 0x9]}, [0x0, 0x2, 0xffff, 0x101, 0x2a4, 0xfff, 0x101, 0x7, 0x2e, 0x3, 0x8, 0xe5, 0x0, 0x200, 0x3, 0x8, 0x2, 0x7, 0xe2b8, 0x100000001, 0x100000000, 0x7, 0xdc, 0x7fff, 0x8, 0x2, 0x400, 0x0, 0x400, 0x63, 0xfa5, 0xfffffffffffffffe, 0x8, 0x7fffffff, 0x9, 0x8, 0x62b666fd, 0x3, 0x6, 0x730f, 0x8, 0x9, 0x8, 0x0, 0x3000000, 0x2, 0x7f, 0x8000000, 0x0, 0x107, 0x9, 0x4c, 0x101, 0x9, 0x40, 0xffff, 0x7, 0x9, 0x6, 0x3c3, 0x6, 0x8, 0x2, 0x129]}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000810}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x9, 0x3, &(0x7f0000000f40)="4298e0f8df5a68d777e5cdf4d7715df7ef4b04a8ad63d6ce71e91e8c67e2ed3478701cd49d18ac8eef55055ff6baccdfec44893cef3324b51ab6f77d6119ed3a30ac65b53c50ff06d618af9ca96c6e51cbc12b2d79d475c7005f0c50b9ef251e9183706a294321ef545257419378c368024379891dfec1dcbee6bbdeb74b0445213c9e224e39cabdd90394025b99cb29fd35d111ba7e3d99db6afbae25204d3e4de99b29d7d20cd8adf0ade93dd86ee74c18adab7313d280a9", 0x24f, 0x0, 0x1, {0x2}}, 0x5) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/msr', 0x535000, 0x22) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c011}, 0x8000) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001180)={r1, 0x3f, 0x4, 0x1}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000001580)={r3, 0x80000001, 0x9, 0x1}) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000019c0)={r3, 0x7, 0x1ff, 0x1}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000001dc0)={r5, 0xe96a, 0x800, 0x1}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000021c0)=0x1) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002240), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x20, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x50, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}]}, 0x50}}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000024c0), r2) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x38, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdcb}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x40804) [ 88.144942] audit: type=1400 audit(1737611475.023:7): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:51:15 executing program 4: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x2000)=nil, 0x3000) shmdt(r0) r1 = syz_io_uring_setup(0x6cf8, &(0x7f0000000100)={0x0, 0x4a74, 0x0, 0x3, 0x2ef}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x7) r4 = io_uring_setup(0x5133, &(0x7f0000000240)={0x0, 0xd9b3, 0x10, 0x2, 0x3d8, 0x0, r1}) r5 = io_uring_setup(0x14f2, &(0x7f00000002c0)={0x0, 0x56cd, 0x20, 0x3, 0x35e, 0x0, r4}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {r6}}, './file0\x00'}) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000380)=""/4096) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001380)='/sys/power/disk', 0x80, 0x102) ioctl$SNAPSHOT_FREE(r9, 0x3305) syz_genetlink_get_family_id$batadv(&(0x7f00000013c0), r9) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001400)={'wlan0\x00'}) socketpair(0x1f, 0x2, 0x106, &(0x7f0000001440)) shmdt(r0) fcntl$setpipe(r8, 0x407, 0x5) ioctl$PERF_EVENT_IOC_ID(r9, 0x80082407, &(0x7f0000001480)) syz_io_uring_setup(0x35e5, &(0x7f00000014c0)={0x0, 0x91a0, 0x28, 0x3, 0x63, 0x0, r5}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001540), &(0x7f0000001580)=0x0) syz_io_uring_submit(r2, r10, &(0x7f00000015c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xcd) 05:51:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x21, 0x800, 0x5, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfcc1}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) socketpair(0x26, 0x5, 0x40, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r5, &(0x7f0000000240)={0x67446698, 0x0, 0x1, 0x0, 0x4, "d779da0be981ebcb1be8838ec98cfe1e9f4a9b1ebd254e341e8c9c28111881d0caf193d819249766c2c653bd519875137ec7d741fbd7bda965a3edff7c0b2bc298f452a3835dd612d583062457dcf4c46770bf757b8f771397b4d6aff1e937f094d1927a9277b7ffa53fe4a76778875a885ea9ff5176d550201d58cff47a814dca7052d470d1393523150f0a2871dda04182ccaf31d3c70eb3d04ca6ef904f8023a549da61ceedc3937988d0c3138eb4a60ecb70453db1c9c3430d0832ab"}, 0xce) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000340)) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {r4}}, './file0\x00'}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/tty/drivers\x00', 0x0, 0x0) pidfd_send_signal(r7, 0x4, &(0x7f0000000400)={0x1e, 0x6773, 0x5}, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc3}, &(0x7f0000000500)={0x0, "3f401c63156d08199efecc19ae0f82ba51af2824f300162241cc50a548ce2356d8866e0a32a4417f7e58e8f500c0a01151978fe6b5e2bf5700f8b53d6ec36030", 0x4b8f8525}, 0x48, 0xfffffffffffffffe) r9 = add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc4}, &(0x7f00000008c0)={0x0, "ab5c9e9303720ad41b013fe5527acf29d33ff44141719c138dee11cedab1112f641fe6ef139b7b8c5bf2c5910c271e6a7e76021f0e865172cfe8eb883030857b", 0x32}, 0x48, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r8, &(0x7f0000000800)=[{&(0x7f0000000580)="9672edf370d0716e132f023bd10ebbea6b5661afdacd3ccc2aaa10591948dfd30e9bc81b01291cb6b953b1e8f9be8ceac64e3dba5b70ee282895957e556222f8e110f3b04b6ca0924d14be11644c0464ac49def38dfe34ac49d5bc77930106f9f492dfc5024f1b9420ab1f23621c5f968a83db2e8f715fc9072ab7c51f76d387b361e7c561406bb127efefe36a1b61785764be2075f3b04b5a5e584c1d535dddda9774bf511bcad20f9db33cdb4e4d555a774dde891f34048db0ed516c63d20feae48d1252f2aec46e5beee089a7234d5a442705a0f5277723784126ba153c4fc0e7c8990d3b4a56896fbf06776bffb6", 0xf0}, {&(0x7f0000000680)="cf49b2651bd084cf8ee724ed6fd5be6837048e9d1d422becda039428e9bb8805c60d9568d830da82c08d6a84cf68332da3aab28ae631cd9710d62474a26b03ee6b9e5fff2f8c3d5a", 0x48}, {&(0x7f0000000700)="b35152370db336eae701c0dd6b45703f9a128db2a26d43c2239f378df96679dcd45fec0af2de4404d485cd672d8c6c0e8353c464e5b336d48850b836ba2a4bd3f9ffd80c508b5f62386d7cd7775db4afc553aa59abc226302e2e45a077bfa77eaa151e662f2e66b3a47a0f9d6c617ec942a27b82f79a9bace1c55183f896dcd2cca97c7e98ef601ad9bf3312dbefd6dae260e02eecff5a4fb1d233ed68c0e59bfde8a29fdede26169aa8307a3099516d630d265f3ba1d6a2a2dacd66fab646125d5a6a63cef50f8acfc9303d8ce82ce5f0061ee54022", 0xd6}], 0x3, r9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000940)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x4, 0x3f, 0xa0, 0x3, 0x40, @dev={0xfe, 0x80, '\x00', 0x38}, @mcast2, 0x20, 0x8000, 0x3, 0x5}}) keyctl$unlink(0x9, r8, r9) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x88, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x982}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe699}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3d}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004801}, 0x40080) syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r7) 05:51:15 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pata_oldpiix', 0x400002, 0xd2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3, 0x3ff, 0x1, 0x5, 0x8, 0xea8e}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = epoll_create1(0x80000) r2 = dup2(r0, r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff8001, 0x44}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x1c041}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r3) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x720, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x4000000) r5 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x6, 0x40, 0x52, 0x0, 0x0, 0x10000, 0xa, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000007c0), 0xc}, 0x10400, 0x80000001, 0x1f, 0x2, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x5, 0x5, 0x6, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000700), 0xd}, 0x8, 0x900, 0x1, 0x7, 0x7e6, 0xfffffffc, 0x9, 0x0, 0x3, 0x0, 0x400}, 0xffffffffffffffff, 0x5, r5, 0x8) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r4, 0x382, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) socketpair(0x1e, 0x3, 0x9, &(0x7f0000000980)={0xffffffffffffffff}) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4804) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000ac0)="de33a2b993a2476d8761c953e506aa940817e169729f6feedd5fa3d4328b926655cc02a41349505cd2cd0c09f19db3800d9c9010172c094969dec40d34308484b2d2a27f90a22e6479a697d72984699a314baa3b26c24977c47d279c7b43db5dcab19593e2c3a8bd88754d63d220c75641af9949f3d9dd4243128cd243d9aabd7978e375e842861b5d1be9914f7a10208ae90938ca7bfa3e245ab5637a12914d1ddda1f5db74b9795f2384af0f571227a721954d347402df367156869605a9138dfd3d9a") ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r1, {r6}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x7) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd2db}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x200200d1}, 0x4004000) r9 = gettid() perf_event_open(&(0x7f0000000d80)={0x2, 0x80, 0x20, 0x1, 0x9, 0x9, 0x0, 0x7, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000d40), 0x4}, 0x8000, 0x3, 0x4, 0x2, 0x8, 0x10001, 0x81, 0x0, 0x200, 0x0, 0x1ff}, r9, 0x10, r8, 0x1) 05:51:15 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/thermal', 0x280, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x158961c989d4a1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004c90) r1 = dup2(r0, r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8012}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x80) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, 0x0, 0x600, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x90f0}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x11}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x11}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x20) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44881}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x3, 0x7, 0x42, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x700, 0x700, 0x69ec8ab7, 0x2}}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000007c0)={0x3, 0x80, 0x2, 0xcf, 0x6, 0xeb, 0x0, 0x3, 0x820, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x67cd, 0x1, @perf_bp={&(0x7f0000000780), 0xb}, 0xc000, 0x10000, 0x5, 0x1bc9d32d3ecfa6b6, 0x6, 0x3, 0x3ff, 0x0, 0x3, 0x0, 0x8538}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000004}, 0x40000) socketpair(0x22, 0x3, 0x1f, &(0x7f0000000940)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x90, 0x3, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x2235}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4a}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xd29}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000094}, 0x40801) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000b00)) r4 = syz_open_procfs(0x0, &(0x7f0000000b40)='attr/sockcreate\x00') sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x40804) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000c80)={r3, 0x0, 0x101, 0x10}) pidfd_getfd(r5, r1, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xc4, 0x1, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x67d}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}]}, @NFQA_PAYLOAD={0x71, 0xa, "3f0d4ce085cf16050c34fad01c488ad9a4736749f8697cd331a5e19f940b14ffe7e7044dbfd817351d79dd6c87c8e8933ea5a4935bdf5bf271cdfe504e02e4f6621cf75a7d5e87069a3dbced4899c42175349d456b3f515c0ec867b479ab0d10f76ec6c65adb60db1d333b319e"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80000001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x801}, 0x90) [ 89.630579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.631892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.634531] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.646566] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.647437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.651627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.655613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.657956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.660485] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.662652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.663480] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.666555] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.745803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.752607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.759556] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.768461] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.776469] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.778639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.875743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.894634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.903887] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.937408] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.939872] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.945372] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.968554] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.978711] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.989254] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.004561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.020559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.021810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.025154] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.029204] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.032370] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.040765] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.044487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.045787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.053590] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.062268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.068324] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.072414] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.077949] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.084330] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.091922] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.109488] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.123542] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.127174] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.189926] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.192807] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.712244] Bluetooth: hci1: command tx timeout [ 91.712949] Bluetooth: hci0: command tx timeout [ 91.839241] Bluetooth: hci2: command tx timeout [ 92.032151] Bluetooth: hci3: command tx timeout [ 92.097238] Bluetooth: hci6: command tx timeout [ 92.224272] Bluetooth: hci7: command tx timeout [ 92.224332] Bluetooth: hci4: command tx timeout [ 92.224605] Bluetooth: hci5: command tx timeout [ 93.759253] Bluetooth: hci1: command tx timeout [ 93.760988] Bluetooth: hci0: command tx timeout [ 93.888120] Bluetooth: hci2: command tx timeout [ 94.080180] Bluetooth: hci3: command tx timeout [ 94.144101] Bluetooth: hci6: command tx timeout [ 94.273075] Bluetooth: hci4: command tx timeout [ 94.273165] Bluetooth: hci7: command tx timeout [ 94.273247] Bluetooth: hci5: command tx timeout [ 95.808163] Bluetooth: hci0: command tx timeout [ 95.808265] Bluetooth: hci1: command tx timeout [ 95.935464] Bluetooth: hci2: command tx timeout [ 96.128099] Bluetooth: hci3: command tx timeout [ 96.192590] Bluetooth: hci6: command tx timeout [ 96.320346] Bluetooth: hci5: command tx timeout [ 96.320449] Bluetooth: hci7: command tx timeout [ 96.320536] Bluetooth: hci4: command tx timeout [ 97.855226] Bluetooth: hci1: command tx timeout [ 97.855270] Bluetooth: hci0: command tx timeout [ 97.984280] Bluetooth: hci2: command tx timeout [ 98.176419] Bluetooth: hci3: command tx timeout [ 98.239451] Bluetooth: hci6: command tx timeout [ 98.368488] Bluetooth: hci5: command tx timeout [ 98.368954] Bluetooth: hci4: command tx timeout [ 98.369347] Bluetooth: hci7: command tx timeout [ 149.435502] syz-executor.2 (288) used greatest stack depth: 24448 bytes left [ 149.588721] syz-executor.6 (295) used greatest stack depth: 24304 bytes left [ 152.335197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.339315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.341070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.349802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.357290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.360728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.400115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.406434] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.416367] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.426529] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.427948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.434194] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.437509] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.441341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.446786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.460742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.466608] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.469803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.548481] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.558182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.566605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.569478] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.570245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.572858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.574852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.575453] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.580630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.585191] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.589287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.594288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.597512] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.605285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.608366] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.608525] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.613410] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.614584] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.621501] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.640973] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.648390] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.651788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.659227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.660781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.661575] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.679830] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.685532] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.689773] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.697886] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.698817] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.434141] Bluetooth: hci0: command tx timeout [ 154.560164] Bluetooth: hci2: command tx timeout [ 154.560592] Bluetooth: hci1: command tx timeout [ 154.688164] Bluetooth: hci5: command tx timeout [ 154.751112] Bluetooth: hci3: command tx timeout [ 154.751328] Bluetooth: hci4: command tx timeout [ 154.815187] Bluetooth: hci7: command tx timeout [ 154.815625] Bluetooth: hci6: command tx timeout [ 156.479172] Bluetooth: hci0: command tx timeout [ 156.607144] Bluetooth: hci1: command tx timeout [ 156.607242] Bluetooth: hci2: command tx timeout [ 156.735205] Bluetooth: hci5: command tx timeout [ 156.799161] Bluetooth: hci4: command tx timeout [ 156.799263] Bluetooth: hci3: command tx timeout [ 156.863306] Bluetooth: hci6: command tx timeout [ 156.864094] Bluetooth: hci7: command tx timeout [ 158.528152] Bluetooth: hci0: command tx timeout [ 158.655310] Bluetooth: hci2: command tx timeout [ 158.655490] Bluetooth: hci1: command tx timeout [ 158.783220] Bluetooth: hci5: command tx timeout [ 158.847474] Bluetooth: hci4: command tx timeout [ 158.847780] Bluetooth: hci3: command tx timeout [ 158.912297] Bluetooth: hci7: command tx timeout [ 158.914152] Bluetooth: hci6: command tx timeout [ 160.575130] Bluetooth: hci0: command tx timeout [ 160.703236] Bluetooth: hci1: command tx timeout [ 160.703326] Bluetooth: hci2: command tx timeout [ 160.831098] Bluetooth: hci5: command tx timeout [ 160.895167] Bluetooth: hci4: command tx timeout [ 160.895299] Bluetooth: hci3: command tx timeout [ 160.959177] Bluetooth: hci7: command tx timeout [ 160.959289] Bluetooth: hci6: command tx timeout [ 214.155870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.163858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.172790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.178917] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.182484] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.185441] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.290255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.295214] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.297416] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.301667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.305335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.308240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.327168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.338162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.349395] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.360525] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.372724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.374703] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.376428] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.390434] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.419750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.449283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.454641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.455847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.459587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.460340] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.470127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.470480] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.488436] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.503597] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.517398] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.519704] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.522428] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.525400] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.535771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.536676] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.537825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.539961] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.544505] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.547387] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.549557] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.552199] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.559424] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.567412] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.568268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.627233] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.650929] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.652798] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.255168] Bluetooth: hci0: command tx timeout [ 216.383216] Bluetooth: hci1: command tx timeout [ 216.447166] Bluetooth: hci2: command tx timeout [ 216.511162] Bluetooth: hci3: command tx timeout [ 216.703244] Bluetooth: hci5: command tx timeout [ 216.703309] Bluetooth: hci6: command tx timeout [ 216.703773] Bluetooth: hci4: command tx timeout [ 216.768102] Bluetooth: hci7: command tx timeout [ 218.304162] Bluetooth: hci0: command tx timeout [ 218.432203] Bluetooth: hci1: command tx timeout [ 218.497043] Bluetooth: hci2: command tx timeout [ 218.559264] Bluetooth: hci3: command tx timeout [ 218.751139] Bluetooth: hci5: command tx timeout [ 218.751251] Bluetooth: hci6: command tx timeout [ 218.751307] Bluetooth: hci4: command tx timeout [ 218.816222] Bluetooth: hci7: command tx timeout [ 220.352153] Bluetooth: hci0: command tx timeout [ 220.480139] Bluetooth: hci1: command tx timeout [ 220.544276] Bluetooth: hci2: command tx timeout [ 220.608146] Bluetooth: hci3: command tx timeout [ 220.801164] Bluetooth: hci5: command tx timeout [ 220.801324] Bluetooth: hci4: command tx timeout [ 220.801491] Bluetooth: hci6: command tx timeout [ 220.863200] Bluetooth: hci7: command tx timeout [ 222.399149] Bluetooth: hci0: command tx timeout [ 222.527113] Bluetooth: hci1: command tx timeout [ 222.591175] Bluetooth: hci2: command tx timeout [ 222.656266] Bluetooth: hci3: command tx timeout [ 222.847783] Bluetooth: hci6: command tx timeout [ 222.848948] Bluetooth: hci4: command tx timeout [ 222.850065] Bluetooth: hci5: command tx timeout [ 222.912392] Bluetooth: hci7: command tx timeout [ 276.811847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.816727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.818903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.839908] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.845174] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.847366] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.999796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.003252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.005580] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.011825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.014547] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.016769] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.141815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.151728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.159493] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.174399] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.179512] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.181804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.193839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.201753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.203225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.206148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.213161] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.218259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.218396] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.234516] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.247312] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.250854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.254728] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.256166] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.256320] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.257955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.261711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.283895] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.306938] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.310406] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.312427] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.319565] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.321202] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.323272] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.324938] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.342202] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.348235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.351218] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.354653] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.365473] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.368533] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.370649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.911609] Bluetooth: hci0: command tx timeout [ 279.103311] Bluetooth: hci1: command tx timeout [ 279.295271] Bluetooth: hci3: command tx timeout [ 279.295613] Bluetooth: hci2: command tx timeout [ 279.359208] Bluetooth: hci6: command tx timeout [ 279.360447] Bluetooth: hci4: command tx timeout [ 279.423511] Bluetooth: hci7: command tx timeout [ 279.487161] Bluetooth: hci5: command tx timeout [ 280.960124] Bluetooth: hci0: command tx timeout [ 281.152114] Bluetooth: hci1: command tx timeout [ 281.344619] Bluetooth: hci2: command tx timeout [ 281.344773] Bluetooth: hci3: command tx timeout [ 281.407130] Bluetooth: hci4: command tx timeout [ 281.408558] Bluetooth: hci6: command tx timeout [ 281.472935] Bluetooth: hci7: command tx timeout [ 281.535914] Bluetooth: hci5: command tx timeout [ 283.007126] Bluetooth: hci0: command tx timeout [ 283.201054] Bluetooth: hci1: command tx timeout [ 283.393082] Bluetooth: hci3: command tx timeout [ 283.393201] Bluetooth: hci2: command tx timeout [ 283.456246] Bluetooth: hci6: command tx timeout [ 283.456292] Bluetooth: hci4: command tx timeout [ 283.521066] Bluetooth: hci7: command tx timeout [ 283.586076] Bluetooth: hci5: command tx timeout [ 285.056766] Bluetooth: hci0: command tx timeout [ 285.248061] Bluetooth: hci1: command tx timeout [ 285.440084] Bluetooth: hci2: command tx timeout [ 285.440113] Bluetooth: hci3: command tx timeout [ 285.503101] Bluetooth: hci6: command tx timeout [ 285.503196] Bluetooth: hci4: command tx timeout [ 285.567269] Bluetooth: hci7: command tx timeout [ 285.633050] Bluetooth: hci5: command tx timeout [ 338.510859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.513911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.516331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.522268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.525795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.529437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.088729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.098190] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.100755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.105422] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.106146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.113813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.118604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.123481] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.126857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.127269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.129751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.130313] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.236054] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.254325] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.260282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.263102] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.267419] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.270192] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.272084] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.273561] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.274887] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.277600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.283619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.286897] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.289365] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.293428] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.301868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.305548] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.315403] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.317867] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.323158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.332942] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.337615] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.345350] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.353794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.363650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.391178] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.406693] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 339.415245] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.435290] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.440202] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.448898] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.609194] Bluetooth: hci0: command tx timeout [ 341.183161] Bluetooth: hci2: command tx timeout [ 341.183616] Bluetooth: hci1: command tx timeout [ 341.439182] Bluetooth: hci6: command tx timeout [ 341.440690] Bluetooth: hci5: command tx timeout [ 341.441096] Bluetooth: hci4: command tx timeout [ 341.503165] Bluetooth: hci3: command tx timeout [ 341.567592] Bluetooth: hci7: command tx timeout [ 342.655232] Bluetooth: hci0: command tx timeout [ 343.233089] Bluetooth: hci2: command tx timeout [ 343.233232] Bluetooth: hci1: command tx timeout [ 343.487199] Bluetooth: hci4: command tx timeout [ 343.487335] Bluetooth: hci5: command tx timeout [ 343.487461] Bluetooth: hci6: command tx timeout [ 343.551115] Bluetooth: hci3: command tx timeout [ 343.615581] Bluetooth: hci7: command tx timeout [ 344.704999] Bluetooth: hci0: command tx timeout [ 345.279174] Bluetooth: hci1: command tx timeout [ 345.279918] Bluetooth: hci2: command tx timeout [ 345.535196] Bluetooth: hci4: command tx timeout [ 345.535639] Bluetooth: hci6: command tx timeout [ 345.535689] Bluetooth: hci5: command tx timeout [ 345.599072] Bluetooth: hci3: command tx timeout [ 345.663381] Bluetooth: hci7: command tx timeout [ 346.751032] Bluetooth: hci0: command tx timeout [ 347.329015] Bluetooth: hci2: command tx timeout [ 347.330106] Bluetooth: hci1: command tx timeout [ 347.584195] Bluetooth: hci5: command tx timeout [ 347.584485] Bluetooth: hci6: command tx timeout [ 347.584597] Bluetooth: hci4: command tx timeout [ 347.647068] Bluetooth: hci3: command tx timeout [ 347.711112] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 05:56:25 Registers: info registers vcpu 0 RAX=0000000080000000 RBX=dffffc0000000000 RCX=ffffffff821eedfd RDX=0000000000000001 RSI=0000000000000001 RDI=0000000000000004 RBP=0000000000000001 RSP=ffff88802b82f878 R8 =0000000000000000 R9 =fffffbfff0fe19e4 R10=0000000000000001 R11=0000000000000000 R12=ffff88800951ed68 R13=0000000000000008 R14=0000000000000005 R15=0000000000000001 RIP=ffffffff81719c6a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f82888cf540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005590262872b0 CR3=000000002d7b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff818a981b RDX=ffff888030130000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff888015af8000 RSP=ffff8880153a7b80 R8 =0000000000000000 R9 =ffffed1002c4aa6c R10=0000000000000001 R11=0000000000000000 R12=ffff888015af84f8 R13=0000000000000000 R14=0000000000000000 R15=ffff8880153a7d98 RIP=ffffffff8171a340 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdbeb50d540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdbeb781000 CR3=000000001acae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000