Warning: Permanently added '[localhost]:29128' (ECDSA) to the list of known hosts.
2025/05/31 23:48:20 fuzzer started
2025/05/31 23:48:20 dialing manager at localhost:34361
syzkaller login: [   99.381123] cgroup: Unknown subsys name 'net'
[   99.537076] cgroup: Unknown subsys name 'cpuset'
[   99.581018] cgroup: Unknown subsys name 'rlimit'
2025/05/31 23:48:36 syscalls: 201
2025/05/31 23:48:36 code coverage: enabled
2025/05/31 23:48:36 comparison tracing: enabled
2025/05/31 23:48:36 extra coverage: enabled
2025/05/31 23:48:36 setuid sandbox: enabled
2025/05/31 23:48:36 namespace sandbox: enabled
2025/05/31 23:48:36 Android sandbox: enabled
2025/05/31 23:48:36 fault injection: enabled
2025/05/31 23:48:36 leak checking: enabled
2025/05/31 23:48:36 net packet injection: enabled
2025/05/31 23:48:36 net device setup: enabled
2025/05/31 23:48:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/31 23:48:36 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/31 23:48:36 USB emulation: enabled
2025/05/31 23:48:36 hci packet injection: enabled
2025/05/31 23:48:36 wifi device emulation: enabled
2025/05/31 23:48:36 802.15.4 emulation: enabled
2025/05/31 23:48:36 fetching corpus: 0, signal 0/0 (executing program)
2025/05/31 23:48:38 starting 8 fuzzer processes
23:48:38 executing program 0:
shmctl$SHM_UNLOCK(0x0, 0xc)
shmctl$SHM_LOCK(0xffffffffffffffff, 0xb)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/141)
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=""/4096)
r0 = shmget(0x2, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil)
shmctl$IPC_STAT(r0, 0x2, &(0x7f00000010c0)=""/4096)
r1 = shmget(0x2, 0x4000, 0x1000, &(0x7f0000ff9000/0x4000)=nil)
shmctl$IPC_INFO(r1, 0x3, &(0x7f00000020c0)=""/4096)
shmctl$SHM_INFO(r0, 0xe, &(0x7f00000030c0)=""/218)
r2 = shmget(0x2, 0x1000, 0x400, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
r3 = getpid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000031c0)={{0x0, 0xee01, 0xee00, 0xee00, 0x0, 0x6}, 0x7fffffff, 0x3, 0xa591, 0x2, 0x0, r3, 0x8})
shmctl$SHM_INFO(r2, 0xe, &(0x7f0000003240)=""/197)
r4 = shmget(0x0, 0x12000, 0x200, &(0x7f0000fee000/0x12000)=nil)
shmctl$SHM_LOCK(r4, 0xb)
r5 = shmget(0x2, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_INFO(r5, 0x3, &(0x7f0000003340)=""/118)
r6 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ff0000/0x2000)=nil)
shmctl$IPC_STAT(r6, 0x2, &(0x7f00000033c0)=""/4)

23:48:38 executing program 1:
r0 = shmget(0x2, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
r1 = shmget(0x3, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil)
shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/4096)
shmctl$IPC_INFO(r1, 0x3, &(0x7f0000001000)=""/64)
r2 = shmget(0x2, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
r3 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil)
shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x5000)
syz_genetlink_get_family_id$batadv(&(0x7f0000001040), 0xffffffffffffffff)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000001080)=""/183)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001140)=""/17)
wait4(0x0, &(0x7f0000001180), 0x20000000, &(0x7f00000011c0))
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x8080)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8920, &(0x7f00000013c0)={'vlan1\x00', @ifru_ivalue})
epoll_create(0xdcdd)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x80, 0x1, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x2}}, @NFQA_VLAN={0x54, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1000}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfffe}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x200}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x1)
syz_io_uring_setup(0x29f9, &(0x7f0000001540)={0x0, 0x75c7, 0x4, 0x3, 0xad}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000015c0), &(0x7f0000001600)=<r5=>0x0)
syz_io_uring_submit(0x0, r5, &(0x7f00000016c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000001640)={0x2000, 0x80, 0x22}, &(0x7f0000001680)='./file0\x00', 0x18, 0x0, 0x23456}, 0x6)

23:48:38 executing program 2:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r0=>0x0})
r1 = socket(0x9, 0x3, 0xffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x394, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x36}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x81f}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x33a, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @broadcast, {0x7, 0xe12}, @device_b}, @a_msdu=[{@device_a, @device_b, 0xa1, "4501a77bda2e96a2bec0a320c375c352e7899957d68f1a7d006f84a39cfce882fbb230cb74b478a937d3a1fae68027d93738b09e82d81a2eccd7daf0bca3b781758e3b693b599b9dcf542b6e375c077212b7f7b9d08ff1f94d37c4431157e44ff4ec722387e9272ece676c57448c11ea5133aec592dc2acfeed3847e0e2ed5f049af675bbeebceff2619434dcf2ca3c86a3db72c2ff989ee9fd49b4fcf1bba9f06"}, {@broadcast, @device_b, 0x9c, "8e9deaa5d1764b07885474dd11fdf82ccf4d3e3b6418d26eddee77139b4b8674b2c6e1b3ba33c865a2c7aebd6952e78235defe513df6e032a740a0013bfc24a1b242a74a0f95f7811628fc8ff0f628601e8bedab3051077ace5fa6fe064894646630e5409d42d854815d4e81e29bdedec1a3ee3bc6c8525c6c493c46fcd0f24e821e8f611bbb4a8e75f2cb50c3813a0bd0b523d63aad5d9aacc6bb20"}, {@device_a, @device_a, 0x8d, "2780ddd5daa4e77d4ef268a13eed51ee2855fc7feab3cce2b85af424265534d97dc37d509fdee7ef1a05446e0e9d6f5d2a66d3b5774a2420a90ec067a7c455acb642549004a98d43fb1196605c5ea9f157049c1c19b6b8643df9e91826221058c729b3c067869096ca7f5ab37f6a78c03eabe7b64c8a20e4b81f4ca0fcd748c5c449ba6b26cde0d3142cbec71f"}, {@device_a, @device_a, 0xee, "bf0681d0ecac644bfe6b2b7b73983d6436d00daf95ef17d3fb72a51b4daeec173a216f0b15868f538e89c890aeb0276ab01690336a235108e008828f57f7dcdc1833499bb8032a119a74e394bb49dbfbc0cfb4e151ebf39c9167717d7474949021a0dac67593a3ed5c34bfadd618e767d28c70f6b75dd6e515e7e677d1d4cba88bbef1062017461f94f40f1c181ce791e715a09fad289034a0e38e7bfde44f577e3202f43cdacf7115b775398252e807623975b05eca4bfae1467005299d70da821a2e81c04d44c571a0d2ca98b7458f2658c78a5113c0d750b0e1d2f7b202521561780379de75e6bf6ccdd70754"}, {@device_b, @device_a, 0x13, "530d901631ce0a52fa668fb37294b21c3fe935"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x394}, 0x1, 0x0, 0x0, 0x8}, 0x2004c000)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x6}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x28}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x31}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44980)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x88, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x20004048)
r2 = socket(0x29, 0x80000, 0x1a)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001800)={&(0x7f00000007c0)={0x1008, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0xf28, 0x8, 0x0, 0x1, [{0x4f8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x4b0, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}]}, {0x580, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x1b8, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x348, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x4}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}, 0x66}}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0368e7d298cb716b56717e0d2438df0e137930363ab577de6ba75d0341052355"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x342d46776e1d2530}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fa30c4a754741ab35a715f8434f8bc34341e7cdc88f4f63d7ef2503744ac3a00"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe377}]}, {0x2b0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x58, @private2, 0xfffffffe}}, @WGPEER_A_ALLOWEDIPS={0x250, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x20}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b188cffa46cb1926f819863839195616e14015370ac9492b8e74be7991d1226a"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fd94ad12b901951e947c99cb528175da15c56d2fc52c89e2d58f35d31ebd8852"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xdb}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @private1, 0x3}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ed04e2e444e3a83ea2a2d11b5d22d4ff885eeab5da4efc0e64faaefe212686fc"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a8a3a872c3e1e35d7a9f90225c7ec1416966e8fe5fe2dff9884f3d32a679ae9c"}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9e51cc91e5a46fd23087dec02f7b822dfc4cddd8258dfe90cb27e2d30ec627eb"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1, @empty, 0xc07}}]}]}, @WGDEVICE_A_PEERS={0x98, 0x8, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xb8, @dev={0xfe, 0x80, '\x00', 0x18}, 0x4}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @mcast1, 0xff}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b701f2aebde8182c534eed5383bf51e02e338446eb429257b5f74ebee3ce1e35"}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x1008}}, 0x80)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000001940)={&(0x7f0000001880), 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x34, 0x3, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, 0xc, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000)
getsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000001a80), &(0x7f0000001ac0)=0x4)
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8220000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b40)={0xf0, 0x1, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x200}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x200}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x21}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x41}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x41}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0xf0}}, 0x20040048)
socketpair(0x25, 0x3, 0x9, &(0x7f0000001cc0)={<r3=>0xffffffffffffffff})
setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000001d00)=0x48000, 0x4)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001d40), 0x440000, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x8, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44008001)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6a}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x80)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001fc0), r2)
sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x91)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000020c0), 0x4)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x44, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7e0}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)

23:48:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x82, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffe0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x101}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0xc000)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x28}}, 0x4000000)
socketpair(0x2c, 0x3, 0xabe7, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc024000}, 0x24000084)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r4)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008841}, 0x40000)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1040000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x2, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x885f}]}, 0x24}}, 0x40)
connect$802154_dgram(r4, &(0x7f0000000740)={0x24, @short={0x2, 0xffff}}, 0x14)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000005}, 0x24000000)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r2)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}}, 0x4000800)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000a40))
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, r5, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x28048000)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r2)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffc}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044001}, 0xe14cc45efc958b8b)

[  116.621824] audit: type=1400 audit(1748735318.354:7): avc:  denied  { execmem } for  pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:48:38 executing program 4:
write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x20, 0x1}}, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5897}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20008099)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x440c4)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x7b, 0x2}, 0x7)
write$P9_RWSTAT(r0, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7)
pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x100000)
write$P9_RLOCK(r1, &(0x7f0000000340)={0x8, 0x35, 0x2, 0x2}, 0x8)
write$P9_RREMOVE(r0, &(0x7f0000000380)={0x7, 0x7b, 0x1000}, 0x7)
write$P9_RCREATE(r0, &(0x7f00000003c0)={0x18, 0x73, 0x1, {{0x8, 0x1, 0x4}, 0x18b}}, 0x18)
write$P9_RWSTAT(r1, &(0x7f0000000400)={0x7, 0x7f, 0x1}, 0x7)
write$P9_RSTATu(r1, &(0x7f0000000440)={0x5d, 0x7d, 0x1, {{0x0, 0x3d, 0x2, 0x5, {0x4, 0x4, 0x2}, 0x0, 0x9, 0x5, 0x0, 0x5, 'syz0\x00', 0x0, '', 0x0, '', 0x5, 'syz0\x00'}, 0xb, '/dev/hwrng\x00', 0x0, 0xee01}}, 0x5d)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0)
write$P9_RAUTH(r2, &(0x7f0000000500)={0x14, 0x67, 0x2, {0x10, 0x3, 0x4}}, 0x14)
write$P9_RAUTH(r2, &(0x7f0000000540)={0x14, 0x67, 0x2, {0x8, 0x4}}, 0x14)
r3 = mq_open(&(0x7f0000000580)='syz0\x00', 0x800, 0x20, &(0x7f00000005c0)={0x7fff, 0x3, 0x5, 0x1})
mq_notify(r3, &(0x7f0000000700)={0x0, 0x19, 0x4, @thr={&(0x7f0000000600)="592d2e54df136507bbb856a807334c04ae49933bf402c51808392321e00a43c37641e0", &(0x7f0000000640)="0e63f8588be3eb731ac33ccf90e2b144c2045b439f506fd03981ce7f92e5b5b859b7cb4b29c77233d4c9d1a65b98b9f3b2864d3bac601d291bcdba65a5da8cf01fe7aa5c92e8ca39d3b12c31b479b5e6a60547b31e1c294219fc54146debc6cc0605dad56313c3de45bfbd13fbf31cbaa7862e8a0dab57a4057fcb0ce4de19b85ff06282640605357da7b284"}})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x70f}]}, 0x58}, 0x1, 0x0, 0x0, 0x213c03d16ac7ca99}, 0x4000000)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, 0x1, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x3a4}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x32}]}, 0x58}}, 0x400a048)

23:48:38 executing program 5:
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x1, 0x9, 0x201, 0x0, 0x0, {0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x101}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4800)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r0=>0x0})
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x44a}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc4d}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x40)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', <r2=>r0, 0x29, 0x6, 0x20, 0x6, 0x60, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10, 0x7800, 0x8, 0x7}})
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000811}, 0x4)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80260000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004810)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r1, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3d9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40190}, 0x4000040)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r3)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x401}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}]}, 0x58}}, 0x8010)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000dc0), 0x4)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, 0x0, 0x104, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x48}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008010}, 0x40)

23:48:38 executing program 6:
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/4096)
r0 = shmget(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000001000)=""/136)
r1 = shmget(0x1, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil)
shmctl$SHM_UNLOCK(r1, 0xc)
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000010c0)=""/76)
r2 = shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
r3 = shmget(0x1, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil)
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000001140)=""/10)
r4 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r4, 0xb)
r5 = syz_io_uring_setup(0x599d, &(0x7f0000001180)={0x0, 0x2745, 0x10, 0x3, 0x308}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001200), &(0x7f0000001240))
shmctl$SHM_LOCK(0xffffffffffffffff, 0xb)
r6 = shmget(0x3, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil)
shmctl$IPC_INFO(r6, 0x3, &(0x7f0000001280)=""/4096)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x34, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8015}, 0x81)
io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000002380), 0x1)
shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x0)

23:48:38 executing program 7:
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x1, 0x0, 0x3}, 0xed}}, 0x18)
write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7)
r0 = getpid()
wait4(r0, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x311002, 0x0)
write$P9_RWSTAT(r1, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7)
write$P9_RAUTH(r1, &(0x7f0000000140)={0x14, 0x67, 0x1, {0x80, 0x3, 0x6}}, 0x14)
r2 = getuid()
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000180)={0x6c, 0x7d, 0x1, {{0x0, 0x50, 0x9, 0x9, {0x0, 0x3, 0x7}, 0x1000000, 0x9, 0x3f, 0x3, 0x7, '.#]-]}]', 0xb, '/dev/hwrng\x00', 0x0, '', 0xb, '/dev/hwrng\x00'}, 0x7, '-%\')\x96+@', r2, 0x0, 0xee01}}, 0x6c)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r3=>0x0, 0x29, 0x4, 0x9, 0x1, 0x39, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x8, 0x5, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r3, 0x29, 0xe2, 0x90, 0xd87, 0x4a, @remote, @loopback, 0x10, 0x1, 0x0, 0x800}})
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5)
pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80000)
write$P9_RCREATE(r6, &(0x7f0000000400)={0x18, 0x73, 0x2, {{0x10, 0x4, 0x7}, 0x5}}, 0x18)
wait4(r0, 0x0, 0x2, &(0x7f0000000440))
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x13, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x40}}, 0x4000)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
write$P9_RVERSION(r7, &(0x7f0000000640)={0x13, 0x65, 0xffff, 0xffffffff, 0x6, '9P2000'}, 0x13)

[  118.288787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  118.293823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  118.298244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  118.300655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  118.300979] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  118.303289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  118.304756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  118.307737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  118.309626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  118.310271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  118.315790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  118.321283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  118.328743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  118.334381] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  118.349977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  118.350935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  118.366526] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  118.376043] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  118.383560] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  118.394505] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  118.395526] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  118.406711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  118.409948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  118.439594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  118.445636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  118.485599] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  118.496393] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  118.503722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  118.513047] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  118.517972] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  118.526081] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  118.535821] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  118.544543] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  118.546364] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  118.550961] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  118.562834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  118.565029] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  118.578940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  118.620754] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  118.635677] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  120.357960] Bluetooth: hci2: command tx timeout
[  120.423411] Bluetooth: hci1: command tx timeout
[  120.425552] Bluetooth: hci0: command tx timeout
[  120.485354] Bluetooth: hci4: command tx timeout
[  120.486266] Bluetooth: hci3: command tx timeout
[  120.614346] Bluetooth: hci7: command tx timeout
[  120.677460] Bluetooth: hci5: command tx timeout
[  120.741723] Bluetooth: hci6: command tx timeout
[  122.406024] Bluetooth: hci2: command tx timeout
[  122.470763] Bluetooth: hci0: command tx timeout
[  122.471882] Bluetooth: hci1: command tx timeout
[  122.533781] Bluetooth: hci3: command tx timeout
[  122.534940] Bluetooth: hci4: command tx timeout
[  122.662214] Bluetooth: hci7: command tx timeout
[  122.726497] Bluetooth: hci5: command tx timeout
[  122.789519] Bluetooth: hci6: command tx timeout
[  124.454453] Bluetooth: hci2: command tx timeout
[  124.517280] Bluetooth: hci0: command tx timeout
[  124.517969] Bluetooth: hci1: command tx timeout
[  124.581546] Bluetooth: hci3: command tx timeout
[  124.582276] Bluetooth: hci4: command tx timeout
[  124.709298] Bluetooth: hci7: command tx timeout
[  124.773416] Bluetooth: hci5: command tx timeout
[  124.837291] Bluetooth: hci6: command tx timeout
[  126.502607] Bluetooth: hci2: command tx timeout
[  126.565231] Bluetooth: hci1: command tx timeout
[  126.565721] Bluetooth: hci0: command tx timeout
[  126.630258] Bluetooth: hci3: command tx timeout
[  126.630732] Bluetooth: hci4: command tx timeout
[  126.757225] Bluetooth: hci7: command tx timeout
[  126.822318] Bluetooth: hci5: command tx timeout
[  126.885656] Bluetooth: hci6: command tx timeout
[  180.528650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  180.530049] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  180.534059] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  180.538922] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  180.542674] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  180.590947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  180.600940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  180.603436] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  180.614292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  180.621608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  180.626560] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  180.640612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  180.650690] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  180.652048] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  180.657402] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  180.658115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  180.660383] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  180.669061] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  180.671619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  180.676081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  180.677967] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  180.681937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  180.687646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  180.705631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  180.743355] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  180.756591] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  180.771418] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  180.777075] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  180.786551] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  180.792188] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  180.794515] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  180.800440] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  180.802768] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  180.842946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  180.849652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  181.058628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  181.076568] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  181.112867] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  181.146491] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  181.179375] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  182.629479] Bluetooth: hci0: command tx timeout
[  182.694385] Bluetooth: hci3: command tx timeout
[  182.695040] Bluetooth: hci1: command tx timeout
[  182.757383] Bluetooth: hci2: command tx timeout
[  182.885287] Bluetooth: hci6: command tx timeout
[  182.885963] Bluetooth: hci4: command tx timeout
[  183.013272] Bluetooth: hci5: command tx timeout
[  183.269218] Bluetooth: hci7: command tx timeout
[  184.677354] Bluetooth: hci0: command tx timeout
[  184.741964] Bluetooth: hci1: command tx timeout
[  184.742604] Bluetooth: hci3: command tx timeout
[  184.805394] Bluetooth: hci2: command tx timeout
[  184.934234] Bluetooth: hci6: command tx timeout
[  184.934706] Bluetooth: hci4: command tx timeout
[  185.061738] Bluetooth: hci5: command tx timeout
[  185.318384] Bluetooth: hci7: command tx timeout
[  186.725257] Bluetooth: hci0: command tx timeout
[  186.789568] Bluetooth: hci1: command tx timeout
[  186.790304] Bluetooth: hci3: command tx timeout
[  186.853292] Bluetooth: hci2: command tx timeout
[  186.981241] Bluetooth: hci6: command tx timeout
[  186.981730] Bluetooth: hci4: command tx timeout
[  187.109392] Bluetooth: hci5: command tx timeout
[  187.365286] Bluetooth: hci7: command tx timeout
[  188.773559] Bluetooth: hci0: command tx timeout
[  188.837247] Bluetooth: hci1: command tx timeout
[  188.837734] Bluetooth: hci3: command tx timeout
[  188.901260] Bluetooth: hci2: command tx timeout
[  189.029544] Bluetooth: hci6: command tx timeout
[  189.030044] Bluetooth: hci4: command tx timeout
[  189.158208] Bluetooth: hci5: command tx timeout
[  189.413467] Bluetooth: hci7: command tx timeout
[  240.847267] syz-executor.7 (2823) used greatest stack depth: 24288 bytes left
[  242.631616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  242.640577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  242.645545] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  242.657613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  242.667757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  242.684425] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  242.696088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  242.704330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  242.714656] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  242.718861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  242.803625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  242.807673] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  242.815929] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  242.833629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  242.841667] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  242.873641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  242.876994] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  242.879310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  242.888669] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  242.893943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  242.932219] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  242.950312] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  242.959718] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  242.961958] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  242.973396] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  242.981791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  242.990593] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  243.014648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  243.028069] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  243.030342] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  243.032545] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  243.035811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  243.048447] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  243.049868] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  243.051325] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  243.061728] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  243.077089] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  243.099691] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  243.105941] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  243.117686] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  244.711610] Bluetooth: hci0: command tx timeout
[  244.773330] Bluetooth: hci1: command tx timeout
[  244.901236] Bluetooth: hci2: command tx timeout
[  244.965567] Bluetooth: hci3: command tx timeout
[  245.093273] Bluetooth: hci4: command tx timeout
[  245.157295] Bluetooth: hci7: command tx timeout
[  245.157404] Bluetooth: hci5: command tx timeout
[  245.221656] Bluetooth: hci6: command tx timeout
[  246.757675] Bluetooth: hci0: command tx timeout
[  246.823452] Bluetooth: hci1: command tx timeout
[  246.949226] Bluetooth: hci2: command tx timeout
[  247.013412] Bluetooth: hci3: command tx timeout
[  247.141363] Bluetooth: hci4: command tx timeout
[  247.205304] Bluetooth: hci5: command tx timeout
[  247.205479] Bluetooth: hci7: command tx timeout
[  247.270509] Bluetooth: hci6: command tx timeout
[  248.808195] Bluetooth: hci0: command tx timeout
[  248.869303] Bluetooth: hci1: command tx timeout
[  248.997370] Bluetooth: hci2: command tx timeout
[  249.061545] Bluetooth: hci3: command tx timeout
[  249.190349] Bluetooth: hci4: command tx timeout
[  249.253364] Bluetooth: hci7: command tx timeout
[  249.254430] Bluetooth: hci5: command tx timeout
[  249.317231] Bluetooth: hci6: command tx timeout
[  250.853858] Bluetooth: hci0: command tx timeout
[  250.917471] Bluetooth: hci1: command tx timeout
[  251.045242] Bluetooth: hci2: command tx timeout
[  251.109268] Bluetooth: hci3: command tx timeout
[  251.237409] Bluetooth: hci4: command tx timeout
[  251.301277] Bluetooth: hci5: command tx timeout
[  251.301486] Bluetooth: hci7: command tx timeout
[  251.367437] Bluetooth: hci6: command tx timeout
[  304.951687] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  304.957333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  304.961374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  304.967402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  304.973709] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  305.422343] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  305.427704] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  305.434829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  305.451865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  305.478623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  305.492436] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  305.504716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  305.510092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  305.515921] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  305.519918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  305.568857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  305.586021] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  305.590333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  305.598362] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  305.602033] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  305.604928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  305.616808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  305.635058] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  305.659669] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  305.675665] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  305.698564] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  305.714805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  305.759708] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  305.781112] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  305.786699] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  305.790002] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  305.794563] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  305.798664] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  305.802310] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  305.804855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  305.814720] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  305.858810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  305.900762] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  305.927528] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  305.955634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  307.045265] Bluetooth: hci0: command tx timeout
[  307.558570] Bluetooth: hci1: command tx timeout
[  307.621695] Bluetooth: hci3: command tx timeout
[  307.621802] Bluetooth: hci2: command tx timeout
[  307.814267] Bluetooth: hci4: command tx timeout
[  307.878262] Bluetooth: hci7: command tx timeout
[  307.942372] Bluetooth: hci6: command tx timeout
[  308.069249] Bluetooth: hci5: command tx timeout
[  309.093227] Bluetooth: hci0: command tx timeout
[  309.605255] Bluetooth: hci1: command tx timeout
[  309.669512] Bluetooth: hci3: command tx timeout
[  309.669736] Bluetooth: hci2: command tx timeout
[  309.861655] Bluetooth: hci4: command tx timeout
[  309.925255] Bluetooth: hci7: command tx timeout
[  309.990586] Bluetooth: hci6: command tx timeout
[  310.117216] Bluetooth: hci5: command tx timeout
[  311.141375] Bluetooth: hci0: command tx timeout
[  311.654295] Bluetooth: hci1: command tx timeout
[  311.717489] Bluetooth: hci2: command tx timeout
[  311.718269] Bluetooth: hci3: command tx timeout
[  311.909562] Bluetooth: hci4: command tx timeout
[  311.974440] Bluetooth: hci7: command tx timeout
[  312.037247] Bluetooth: hci6: command tx timeout
[  312.166607] Bluetooth: hci5: command tx timeout
[  313.189262] Bluetooth: hci0: command tx timeout
[  313.701265] Bluetooth: hci1: command tx timeout
[  313.765264] Bluetooth: hci3: command tx timeout
[  313.765330] Bluetooth: hci2: command tx timeout
[  313.958347] Bluetooth: hci4: command tx timeout
[  314.021321] Bluetooth: hci7: command tx timeout
[  314.086217] Bluetooth: hci6: command tx timeout
[  314.213203] Bluetooth: hci5: command tx timeout
[  367.999300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  368.005976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  368.010681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  368.021280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  368.026430] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  368.250417] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  368.257854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  368.261400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  368.274313] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  368.277984] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  368.286692] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  368.288664] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  368.297006] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  368.331541] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  368.336541] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  368.342680] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  368.355679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  368.360929] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  368.368104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  368.374685] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  368.384309] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  368.390527] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  368.407527] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  368.410591] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  368.416729] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  368.811528] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  368.839545] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  368.842495] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  368.847626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  368.849778] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  368.855860] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  368.861616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  368.867609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  368.886624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  368.915730] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  368.942787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  368.975774] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  369.017681] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  369.019579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  369.071813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  370.085343] Bluetooth: hci0: command tx timeout
[  370.406258] Bluetooth: hci1: command tx timeout
[  370.533360] Bluetooth: hci4: command tx timeout
[  370.534320] Bluetooth: hci2: command tx timeout
[  370.534958] Bluetooth: hci3: command tx timeout
[  370.917555] Bluetooth: hci7: command tx timeout
[  371.175000] Bluetooth: hci6: command tx timeout
[  371.237665] Bluetooth: hci5: command tx timeout
[  372.133590] Bluetooth: hci0: command tx timeout
[  372.453379] Bluetooth: hci1: command tx timeout
[  372.582245] Bluetooth: hci4: command tx timeout
[  372.582289] Bluetooth: hci3: command tx timeout
[  372.582720] Bluetooth: hci2: command tx timeout
[  372.966636] Bluetooth: hci7: command tx timeout
[  373.222467] Bluetooth: hci6: command tx timeout
[  373.286606] Bluetooth: hci5: command tx timeout
[  374.182461] Bluetooth: hci0: command tx timeout
[  374.501356] Bluetooth: hci1: command tx timeout
[  374.629503] Bluetooth: hci3: command tx timeout
[  374.630408] Bluetooth: hci4: command tx timeout
[  374.630467] Bluetooth: hci2: command tx timeout
[  375.013327] Bluetooth: hci7: command tx timeout
[  375.270635] Bluetooth: hci6: command tx timeout
[  375.333544] Bluetooth: hci5: command tx timeout
[  376.229449] Bluetooth: hci0: command tx timeout
[  376.549345] Bluetooth: hci1: command tx timeout
[  376.677737] Bluetooth: hci3: command tx timeout
[  376.678418] Bluetooth: hci2: command tx timeout
[  376.678492] Bluetooth: hci4: command tx timeout
[  377.061455] Bluetooth: hci7: command tx timeout
[  377.317404] Bluetooth: hci6: command tx timeout
[  377.381400] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
23:53:39  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff817baf76 RDX=0000000000000000
RSI=0000000000000008 RDI=ffff88806ce31850 RBP=ffff888008c4b780 RSP=ffff888009617c00
R8 =0000000000000000 R9 =fffffbfff0c83f6a R10=ffffffff8641fb57 R11=0000000000000000
R12=0000000000000200 R13=0000000000000001 R14=0000000000000000 R15=ffff88801ae70000
RIP=ffffffff817bb014 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe2500000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055f770d9a080 CR3=000000002423d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00ff000000000000000000000000ff00
XMM02=0000000000ff000000000000ff000000 XMM03=0000000000ff00000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=00000110aad07674 RBX=0000000000000000 RCX=00000000000006e0 RDX=0000000000000110
RSI=ffff88806cf238c0 RDI=0000000000054207 RBP=ffff88806cf238c0 RSP=ffff88806cf08ed8
R8 =0000000000000001 R9 =0000000000000000 R10=00000000000f0d07 R11=0000000000000001
R12=0000000000054207 R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf28080
RIP=ffffffff813276b5 RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe5e00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055f7b2f34080 CR3=000000000e7dd000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000