Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:24641' (ECDSA) to the list of known hosts. 2025/06/17 09:19:36 fuzzer started 2025/06/17 09:19:36 dialing manager at localhost:32817 syzkaller login: [ 95.575887] cgroup: Unknown subsys name 'net' [ 95.723928] cgroup: Unknown subsys name 'cpuset' [ 95.806379] cgroup: Unknown subsys name 'rlimit' 2025/06/17 09:19:51 syscalls: 202 2025/06/17 09:19:51 code coverage: enabled 2025/06/17 09:19:51 comparison tracing: enabled 2025/06/17 09:19:51 extra coverage: enabled 2025/06/17 09:19:51 setuid sandbox: enabled 2025/06/17 09:19:51 namespace sandbox: enabled 2025/06/17 09:19:51 Android sandbox: enabled 2025/06/17 09:19:51 fault injection: enabled 2025/06/17 09:19:51 leak checking: enabled 2025/06/17 09:19:51 net packet injection: enabled 2025/06/17 09:19:51 net device setup: enabled 2025/06/17 09:19:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/17 09:19:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/17 09:19:51 USB emulation: enabled 2025/06/17 09:19:51 hci packet injection: enabled 2025/06/17 09:19:51 wifi device emulation: enabled 2025/06/17 09:19:51 802.15.4 emulation: enabled 2025/06/17 09:19:51 fetching corpus: 0, signal 0/0 (executing program) 2025/06/17 09:19:53 starting 8 fuzzer processes 09:19:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x44014) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x985}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000084}, 0x40080) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x4800) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000540)=0x1, 0x4) recvmsg(r1, &(0x7f0000000940)={&(0x7f0000000580)=@x25, 0x80, &(0x7f0000000880)=[{&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000680)=""/155, 0x9b}, {&(0x7f0000000740)=""/227, 0xe3}, {&(0x7f0000000840)=""/21, 0x15}], 0x4, &(0x7f00000008c0)=""/101, 0x65}, 0x1) r3 = accept(r1, &(0x7f0000000980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000a00)=0x80) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000801}, 0x20000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r2, 0x306, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8050) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20060200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x50, 0x0, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9991}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000001}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000080}, 0x4004000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x24000805) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000f00)=""/108) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000f80)=0xf0d3, &(0x7f0000000fc0)=0x2) clock_gettime(0x0, &(0x7f0000003700)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003680)=[{{&(0x7f0000001000)=@abs, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000001080)=""/116, 0x74}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/32, 0x20}, {&(0x7f0000002140)=""/252, 0xfc}, {&(0x7f0000002240)=""/22, 0x16}, {&(0x7f0000002280)=""/185, 0xb9}, {&(0x7f0000002340)=""/118, 0x76}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x8, &(0x7f0000003440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000003500), 0x6e, &(0x7f0000003640)=[{&(0x7f0000003580)=""/164, 0xa4}], 0x1}}], 0x2, 0x140, &(0x7f0000003740)={r4, r5+10000000}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000003880)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x54, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x64}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x2000) 09:19:53 executing program 1: semctl$GETZCNT(0x0, 0x1, 0xf, &(0x7f0000000000)=""/87) r0 = semget(0x1, 0x2, 0xc0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000080)=[{0x2, 0x9}, {0x17cc14d752d8f9be, 0x4}, {0x3, 0x8001, 0x2000}, {0x2, 0x1f}, {0x4, 0xfffd, 0x1800}], 0x5, &(0x7f0000000100)={r1, r2+60000000}) clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000c00)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000240), 0x6e, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/116, 0x74}], 0x5, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/178, 0xb2}, {&(0x7f0000000940)=""/172, 0xac}, {&(0x7f0000000a00)}], 0x4, &(0x7f0000000a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8}}], 0x2, 0x40010000, &(0x7f0000000c40)={r3, r4+60000000}) recvmmsg$unix(r5, &(0x7f0000001c80)=[{{&(0x7f0000000c80)=@abs, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000d00)=""/36, 0x24}, {&(0x7f0000000d40)=""/7, 0x7}, {&(0x7f0000000d80)=""/252, 0xfc}, {&(0x7f0000000e80)=""/151, 0x97}, {&(0x7f0000000f40)=""/125, 0x7d}, {&(0x7f0000000fc0)=""/224, 0xe0}, {&(0x7f00000010c0)=""/92, 0x5c}], 0x7, &(0x7f00000011c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f00000012c0)=@abs, 0x6e, &(0x7f0000001500)=[{&(0x7f0000001340)=""/130, 0x82}, {&(0x7f0000001400)=""/226, 0xe2}], 0x2, &(0x7f0000001540)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000001600), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001680)=""/224, 0xe0}, {&(0x7f0000001780)=""/204, 0xcc}, {&(0x7f0000001880)=""/27, 0x1b}, {&(0x7f00000018c0)=""/25, 0x19}, {&(0x7f0000001900)=""/173, 0xad}], 0x5}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001ac0)=""/193, 0xc1}, {&(0x7f0000001bc0)=""/1, 0x1}], 0x2, &(0x7f0000001c40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x4, 0x2040, &(0x7f0000001d80)={0x0, 0x989680}) semtimedop(r0, &(0x7f0000001dc0)=[{0x0, 0x401, 0x800}, {0x1, 0x5, 0x1800}, {0x3, 0x7, 0x1000}, {0x4, 0x81, 0x1000}, {0x3, 0xb58, 0x2000}], 0x5, &(0x7f0000001e00)={0x0, 0x989680}) recvmmsg(r5, &(0x7f0000003d00)=[{{&(0x7f0000001e40)=@nl, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001ec0)=""/240, 0xf0}, {&(0x7f0000001fc0)=""/193, 0xc1}, {&(0x7f00000020c0)=""/173, 0xad}, {&(0x7f0000002180)=""/68, 0x44}, {&(0x7f0000002200)=""/78, 0x4e}, {&(0x7f0000002280)=""/107, 0x6b}, {&(0x7f0000002300)=""/176, 0xb0}, {&(0x7f00000023c0)=""/235, 0xeb}], 0x8, &(0x7f0000002540)=""/129, 0x81}, 0xffffffff}, {{&(0x7f0000002600)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002680)=""/151, 0x97}, {&(0x7f0000002740)=""/181, 0xb5}, {&(0x7f0000002800)=""/52, 0x34}, {&(0x7f0000002840)=""/213, 0xd5}], 0x4, &(0x7f0000002980)=""/230, 0xe6}, 0x2}, {{&(0x7f0000002a80)=@generic, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002b00)=""/50, 0x32}], 0x1, &(0x7f0000002b80)=""/189, 0xbd}, 0xffff}, {{&(0x7f0000002c40)=@vsock, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002cc0)=""/53, 0x35}], 0x1, &(0x7f0000002d40)=""/43, 0x2b}, 0x6bb2}, {{&(0x7f0000002d80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002e00)=""/167, 0xa7}, {&(0x7f0000002ec0)=""/230, 0xe6}, {&(0x7f0000002fc0)=""/48, 0x30}, {&(0x7f0000003000)=""/24, 0x18}, {&(0x7f0000003040)=""/215, 0xd7}, {&(0x7f0000003140)=""/120, 0x78}, {&(0x7f00000031c0)=""/212, 0xd4}], 0x7, &(0x7f0000003340)=""/35, 0x23}, 0xffffe7ce}, {{&(0x7f0000003380)=@nfc_llcp, 0x80, &(0x7f0000003600)=[{&(0x7f0000003400)=""/162, 0xa2}, {&(0x7f00000034c0)=""/219, 0xdb}, {&(0x7f00000035c0)=""/43, 0x2b}], 0x3, &(0x7f0000003640)=""/94, 0x5e}, 0xf21}, {{&(0x7f00000036c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003740)=""/192, 0xc0}, {&(0x7f0000003800)=""/29, 0x1d}, {&(0x7f0000003840)=""/37, 0x25}, {&(0x7f0000003880)=""/153, 0x99}, {&(0x7f0000003940)=""/213, 0xd5}], 0x5, &(0x7f0000003ac0)=""/92, 0x5c}, 0x400}, {{&(0x7f0000003b40)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003bc0)=""/90, 0x5a}], 0x1, &(0x7f0000003c80)=""/89, 0x59}, 0x6}], 0x8, 0x101a0, &(0x7f0000003f00)={0x77359400}) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000004140)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004100)={&(0x7f0000003f80)={0x16c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x80000001, 0x0, 0x0, 0x3f, 0x1000, 0x20]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_TUPLE_ORIG={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}, @CTA_TUPLE_ORIG={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc34a7384c21c4eb8) semtimedop(r0, &(0x7f0000004180)=[{0x4, 0x7fff, 0x800}, {0x6}, {0x2, 0x40, 0x800}, {0x2, 0x81, 0x800}, {0x3, 0x6, 0x1000}], 0x5, &(0x7f00000041c0)={0x77359400}) semtimedop(r0, &(0x7f0000004200)=[{0x0, 0xe629, 0x1800}, {0x2, 0x0, 0x800}, {0x0, 0x1, 0x800}, {0x4, 0xfff, 0x3800}, {0x0, 0x9}, {0x0, 0x2, 0x1000}], 0x6, &(0x7f0000004240)) clock_gettime(0x1, &(0x7f0000004280)) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f00000043c0)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004380)={&(0x7f0000004300)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000004440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r10, &(0x7f0000004540)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0xc2800060}, 0xc, &(0x7f0000004500)={&(0x7f0000004480)={0x54, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5935dc40}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004000}, 0x810) recvmmsg$unix(r6, &(0x7f0000007700)=[{{&(0x7f0000004580)=@abs, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004600)=""/138, 0x8a}], 0x1, &(0x7f0000004700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000004780)=@abs, 0x6e, &(0x7f0000004a00)=[{&(0x7f0000004800)=""/71, 0x47}, {&(0x7f0000004880)=""/73, 0x49}, {&(0x7f0000004900)=""/31, 0x1f}, {&(0x7f0000004940)=""/83, 0x53}, {&(0x7f00000049c0)=""/63, 0x3f}], 0x5, &(0x7f0000004a80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004ac0), 0x6e, &(0x7f0000006140)=[{&(0x7f0000004b40)=""/199, 0xc7}, {&(0x7f0000004c40)=""/231, 0xe7}, {&(0x7f0000004d40)=""/27, 0x1b}, {&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000005d80)=""/175, 0xaf}, {&(0x7f0000005e40)=""/193, 0xc1}, {&(0x7f0000005f40)=""/218, 0xda}, {&(0x7f0000006040)=""/94, 0x5e}, {&(0x7f00000060c0)=""/96, 0x60}], 0x9, &(0x7f0000006200)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000006340)=@abs, 0x6e, &(0x7f0000007640)=[{&(0x7f00000063c0)=""/204, 0xcc}, {&(0x7f00000064c0)=""/12, 0xc}, {&(0x7f0000006500)=""/223, 0xdf}, {&(0x7f0000006600)=""/4096, 0x1000}, {&(0x7f0000007600)=""/15, 0xf}], 0x5, &(0x7f00000076c0)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}}], 0x4, 0x2000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r12, 0x4, &(0x7f0000007800)='batadv0\x00', &(0x7f0000007840)='./file0\x00', 0xffffffffffffffff) 09:19:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/165, 0xa5}, {&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/178, 0xb2}], 0x6, &(0x7f0000001380)=""/37, 0x25}, 0x200}, {{&(0x7f00000013c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001440)=""/105, 0x69}, {&(0x7f00000014c0)=""/233, 0xe9}, {&(0x7f00000015c0)=""/205, 0xcd}, {&(0x7f00000016c0)=""/194, 0xc2}, {&(0x7f00000017c0)=""/89, 0x59}, {&(0x7f0000001840)=""/111, 0x6f}], 0x6, &(0x7f0000001940)=""/28, 0x1c}, 0x81}], 0x2, 0x40010060, &(0x7f0000001a00)={0x0, 0x3938700}) sysinfo(&(0x7f0000001a40)=""/127) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007e80)=[{{&(0x7f00000068c0), 0x6e, &(0x7f0000007080)=[{&(0x7f0000006940)=""/238, 0xee}, {&(0x7f0000006a40)=""/146, 0x92}, {&(0x7f0000006b00)=""/117, 0x75}, {&(0x7f0000006b80)=""/128, 0x80}, {&(0x7f0000006c00)=""/228, 0xe4}, {&(0x7f0000006d00)=""/166, 0xa6}, {&(0x7f0000006dc0)=""/236, 0xec}, {&(0x7f0000006ec0)=""/215, 0xd7}, {&(0x7f0000006fc0)=""/154, 0x9a}], 0x9, &(0x7f0000007140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000071c0)=@abs, 0x6e, &(0x7f00000076c0)=[{&(0x7f0000007240)=""/171, 0xab}, {&(0x7f0000007300)=""/226, 0xe2}, {&(0x7f0000007400)=""/167, 0xa7}, {&(0x7f00000074c0)=""/181, 0xb5}, {&(0x7f0000007580)=""/49, 0x31}, {&(0x7f00000075c0)=""/250, 0xfa}], 0x6, &(0x7f0000007740)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000007840)=@abs, 0x6e, &(0x7f0000007cc0)=[{&(0x7f00000078c0)=""/240, 0xf0}, {&(0x7f00000079c0)=""/222, 0xde}, {&(0x7f0000007ac0)=""/103, 0x67}, {&(0x7f0000007b40)=""/210, 0xd2}, {&(0x7f0000007c40)=""/76, 0x4c}], 0x5, &(0x7f0000007d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}], 0x3, 0x40000120, &(0x7f0000007f40)={0x0, 0x3938700}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000008080)={&(0x7f0000007f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000008040)={&(0x7f0000007fc0)={0x44, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xcfa}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5f1}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x40) r6 = msgget$private(0x0, 0x40) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000008100), r5) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000081c0)={&(0x7f00000080c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000008180)={&(0x7f0000008140)={0x24, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x928}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) clock_gettime(0x0, &(0x7f00000082c0)={0x0, 0x0}) select(0x40, &(0x7f0000008200)={0x1, 0x4, 0x6, 0x8000000000000000, 0x400, 0x401, 0x4, 0x8000}, &(0x7f0000008240)={0x100000000, 0x7, 0x9, 0x9, 0xbc8d, 0x101, 0xffff, 0x401}, &(0x7f0000008280)={0x100000000, 0x38, 0x627b, 0x80, 0x5, 0x9, 0x4, 0x1672}, &(0x7f0000008300)={r8, r9/1000+10000}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000008440)={&(0x7f0000008340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000008400)={&(0x7f0000008380)={0x4c, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffeff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) pselect6(0x40, &(0x7f0000008480)={0x0, 0x9f8e, 0x2, 0x2, 0x8, 0x3ff, 0x7, 0x8}, &(0x7f00000084c0)={0x1, 0x40, 0x9, 0x3ff, 0x20, 0x6ee, 0x0, 0x8}, &(0x7f0000008500)={0xffffffffffffffff, 0x7fff, 0x3800, 0x937, 0x3, 0x1, 0x5, 0x3}, &(0x7f0000008540), &(0x7f00000085c0)={&(0x7f0000008580)={[0x12a]}, 0x8}) recvmmsg$unix(r4, &(0x7f0000009fc0)=[{{&(0x7f0000008600), 0x6e, &(0x7f0000009a80)=[{&(0x7f0000008680)=""/80, 0x50}, {&(0x7f0000008700)=""/112, 0x70}, {&(0x7f0000008780)=""/244, 0xf4}, {&(0x7f0000008880)=""/4096, 0x1000}, {&(0x7f0000009880)=""/51, 0x33}, {&(0x7f00000098c0)=""/38, 0x26}, {&(0x7f0000009900)=""/77, 0x4d}, {&(0x7f0000009980)=""/237, 0xed}], 0x8, &(0x7f0000009b00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000009b40)=@abs, 0x6e, &(0x7f0000009e00)=[{&(0x7f0000009bc0)=""/95, 0x5f}, {&(0x7f0000009c40)=""/171, 0xab}, {&(0x7f0000009d00)=""/233, 0xe9}], 0x3, &(0x7f0000009e40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x158}}], 0x2, 0x0, &(0x7f000000a040)) msgrcv(0xffffffffffffffff, &(0x7f000000a080)={0x0, ""/204}, 0xd4, 0x3, 0x2800) msgrcv(r6, &(0x7f000000a180)={0x0, ""/125}, 0x85, 0x2, 0x7000) r12 = syz_genetlink_get_family_id$batadv(&(0x7f000000a280), r10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f000000a340)={&(0x7f000000a240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f000000a300)={&(0x7f000000a2c0)={0x14, r12, 0x4, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44001) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f000000a440)={&(0x7f000000a380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f000000a400)={&(0x7f000000a3c0)={0x1c, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044891}, 0x10) prctl$PR_GET_TIMERSLACK(0x1e) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f000000a480), &(0x7f000000a4c0)=0x30) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f000000c080)={&(0x7f000000a500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f000000c040)={&(0x7f000000bfc0)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0881}, 0x10) 09:19:53 executing program 3: pipe2$9p(&(0x7f0000000000), 0x800) setregid(0xee01, 0xee01) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x3, 0xee01, r0, 0xee01, 0xee00, 0x4, 0x7}, 0x0, 0x0, 0x8, 0x8, 0xffff, 0x5, 0x8, 0x7, 0xff, 0x3, 0x0, r4}) eventfd2(0xfc5, 0x80000) setregid(r2, r1) r5 = msgget$private(0x0, 0x1a1) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000200)=""/194) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000300), 0x10) r7 = accept(r6, &(0x7f0000000340)=@nl=@proc, &(0x7f00000003c0)=0x80) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000400)=0x6, &(0x7f0000000440)=0x4) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000480)=0x5, 0x4) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x400000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000500)=r8, 0x1) getsockopt$bt_hci(r7, 0x0, 0x2, &(0x7f0000000540)=""/217, &(0x7f0000000640)=0xd9) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc041}, 0x40) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f0000000780)={r3, 0x5, 0x80000}) [ 112.029757] audit: type=1400 audit(1750151993.566:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:19:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x8, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x10040810}, 0x40) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x7, 0x5, 0x0, 0x0, {0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xd18e}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8090}, 0x40094) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000280)=0x5, 0x4) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0xff, 0x2) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000300)=0xe5, 0x1) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000400)=""/71, 0x47}, {&(0x7f0000000480)=""/115, 0x73}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/14, 0xe}, {&(0x7f0000000580)=""/184, 0xb8}, {&(0x7f0000000640)=""/3, 0x3}], 0x7, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000800)=""/210, 0xd2}, {&(0x7f0000000900)=""/123, 0x7b}], 0x2}}, {{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000a40)=""/81, 0x51}, {&(0x7f0000000ac0)=""/70, 0x46}, {&(0x7f0000000b40)=""/230, 0xe6}, {&(0x7f0000000c40)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/168, 0xa8}, {&(0x7f0000000d80)=""/116, 0x74}, {&(0x7f0000000e00)=""/91, 0x5b}, {&(0x7f0000000e80)=""/198, 0xc6}], 0x8, &(0x7f0000001000)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000001040)=@abs, 0x6e, &(0x7f0000001240)=[{&(0x7f00000010c0)=""/9, 0x9}, {&(0x7f0000001100)=""/69, 0x45}, {&(0x7f0000001180)=""/150, 0x96}], 0x3, &(0x7f0000001280)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000012c0), 0x6e, &(0x7f0000001440)=[{&(0x7f0000001340)=""/236, 0xec}], 0x1, &(0x7f0000001480)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001540), 0x6e, &(0x7f00000016c0)=[{&(0x7f00000015c0)=""/222, 0xde}], 0x1, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001880)=""/72, 0x48}], 0x1, &(0x7f0000001940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000001a00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/46, 0x2e}, {&(0x7f0000001ac0)=""/11, 0xb}, {&(0x7f0000001b00)=""/19, 0x13}, {&(0x7f0000001b40)=""/66, 0x42}, {&(0x7f0000001bc0)=""/100, 0x64}, {&(0x7f0000001c40)=""/179, 0xb3}, {&(0x7f0000001d00)=""/235, 0xeb}], 0x7, &(0x7f0000001e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}], 0x8, 0x12001, &(0x7f00000021c0)) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x70, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x61d}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x573}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}}, 0x4004800) recvmmsg(r4, &(0x7f0000003b80)=[{{&(0x7f0000002340)=@can, 0x80, &(0x7f00000024c0)=[{&(0x7f00000023c0)=""/89, 0x59}, {&(0x7f0000002440)=""/83, 0x53}], 0x2, &(0x7f0000002500)=""/38, 0x26}, 0x9}, {{&(0x7f0000002540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/198, 0xc6}], 0x2}, 0xdf3a}, {{&(0x7f0000003700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003780), 0x0, &(0x7f00000037c0)=""/37, 0x25}, 0xfff}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003800)=""/222, 0xde}, {&(0x7f0000003900)=""/155, 0x9b}, {&(0x7f00000039c0)=""/166, 0xa6}, {&(0x7f0000003a80)=""/57, 0x39}], 0x4, &(0x7f0000003b00)=""/115, 0x73}, 0xffffff03}], 0x4, 0x42, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000003c80)=0x1, &(0x7f0000003cc0)=0x4) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000003d00), &(0x7f0000003d40)=0x30) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000003e40)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003e00)={&(0x7f0000003dc0)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004844}, 0xc040) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000003fc0)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003ec0)={0xb0, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@fib={{0x8}, @void}]}, {0x78, 0x1, 0x0, 0x1, [@socket={{0xb}, @void}, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}]}}, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}, @quota={{0xa}, @void}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000041}, 0x8011) r9 = socket(0x21, 0x2, 0x3) sendmsg$BATADV_CMD_GET_VLAN(r9, &(0x7f0000004500)={&(0x7f0000004440), 0xc, &(0x7f00000044c0)={&(0x7f0000004480)={0x34, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffc00}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000004540)=0xd78, 0x2) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0xa, &(0x7f0000004580)=0x10001, &(0x7f00000045c0)=0x4) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f00000046c0)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x732f535e102d9bc6}, 0xc, &(0x7f0000004680)={&(0x7f0000004640)={0x1c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41001}, 0x48040) 09:19:53 executing program 4: socketpair(0x2, 0x1, 0xfffffffd, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x2) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000180)=0x6, 0x1) r2 = accept(r0, 0x0, &(0x7f00000001c0)) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000200)=0x5, &(0x7f0000000240)=0x1) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockname(r3, &(0x7f0000000340)=@qipcrtr, &(0x7f00000003c0)=0x80) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000400)=0xff, 0x4) r4 = socket(0x8, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000027c0), &(0x7f0000002800)=0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000002840)={0x2, 'veth1_to_hsr\x00', {0x5}, 0x7ff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24060000}, 0x20004001) recvmmsg(r1, &(0x7f0000006f00)=[{{&(0x7f0000002980)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/52, 0x34}, {&(0x7f0000003a40)=""/238, 0xee}, {&(0x7f0000003b40)=""/55, 0x37}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/188, 0xbc}], 0x6}, 0xe60}, {{&(0x7f0000004cc0)=@rc, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004d40)=""/49, 0x31}], 0x1, &(0x7f0000004dc0)=""/110, 0x6e}, 0x1}, {{&(0x7f0000004e40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000005140)=[{&(0x7f0000004ec0)=""/167, 0xa7}, {&(0x7f0000004f80)=""/210, 0xd2}, {&(0x7f0000005080)=""/186, 0xba}], 0x3}, 0x9}, {{0x0, 0x0, &(0x7f0000005880)=[{&(0x7f0000005180)=""/229, 0xe5}, {&(0x7f0000005280)=""/158, 0x9e}, {&(0x7f0000005340)=""/205, 0xcd}, {&(0x7f0000005440)=""/184, 0xb8}, {&(0x7f0000005500)=""/174, 0xae}, {&(0x7f00000055c0)=""/39, 0x27}, {&(0x7f0000005600)=""/166, 0xa6}, {&(0x7f00000056c0)=""/210, 0xd2}, {&(0x7f00000057c0)=""/146, 0x92}], 0x9}, 0x80000001}, {{&(0x7f0000005940)=@x25={0x9, @remote}, 0x80, &(0x7f0000006e40)=[{&(0x7f00000059c0)=""/242, 0xf2}, {&(0x7f0000005ac0)=""/51, 0x33}, {&(0x7f0000005b00)=""/108, 0x6c}, {&(0x7f0000005b80)=""/98, 0x62}, {&(0x7f0000005c00)=""/63, 0x3f}, {&(0x7f0000005c40)=""/121, 0x79}, {&(0x7f0000005cc0)=""/96, 0x60}, {&(0x7f0000005d40)=""/111, 0x6f}, {&(0x7f0000005dc0)=""/76, 0x4c}, {&(0x7f0000005e40)=""/4096, 0x1000}], 0xa}, 0xd30e}], 0x5, 0x1, 0x0) recvmsg(r5, &(0x7f0000007200)={&(0x7f0000007040)=@tipc=@id, 0x80, &(0x7f0000007180)=[{&(0x7f00000070c0)=""/130, 0x82}], 0x1, &(0x7f00000071c0)=""/43, 0x2b}, 0x40000000) clock_gettime(0x0, &(0x7f000000c800)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f000000c6c0)=[{{&(0x7f0000007240), 0x6e, &(0x7f0000007640)=[{&(0x7f00000072c0)=""/219, 0xdb}, {&(0x7f00000073c0)}, {&(0x7f0000007400)=""/64, 0x40}, {&(0x7f0000007440)=""/250, 0xfa}, {&(0x7f0000007540)=""/166, 0xa6}, {&(0x7f0000007600)=""/28, 0x1c}], 0x6, &(0x7f00000076c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000007740)=@abs, 0x6e, &(0x7f0000007bc0)=[{&(0x7f00000077c0)}, {&(0x7f0000007800)=""/214, 0xd6}, {&(0x7f0000007900)=""/83, 0x53}, {&(0x7f0000007980)=""/132, 0x84}, {&(0x7f0000007a40)=""/206, 0xce}, {&(0x7f0000007b40)=""/112, 0x70}], 0x6}}, {{0x0, 0x0, &(0x7f0000009c40)=[{&(0x7f0000007c40)=""/4096, 0x1000}, {&(0x7f0000008c40)=""/4096, 0x1000}], 0x2, &(0x7f0000009c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f000000c0c0)=[{&(0x7f0000009d00)=""/169, 0xa9}, {&(0x7f0000009dc0)=""/156, 0x9c}, {&(0x7f0000009e80)=""/12, 0xc}, {&(0x7f0000009ec0)=""/4096, 0x1000}, {&(0x7f000000aec0)=""/74, 0x4a}, {&(0x7f000000af40)=""/73, 0x49}, {&(0x7f000000afc0)=""/4096, 0x1000}, {&(0x7f000000bfc0)=""/9, 0x9}, {&(0x7f000000c000)}, {&(0x7f000000c040)=""/76, 0x4c}], 0xa, &(0x7f000000c180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f000000c200)=@abs, 0x6e, &(0x7f000000c580)=[{&(0x7f000000c280)=""/208, 0xd0}, {&(0x7f000000c380)=""/47, 0x2f}, {&(0x7f000000c3c0)=""/17, 0x11}, {&(0x7f000000c400)=""/123, 0x7b}, {&(0x7f000000c480)=""/213, 0xd5}], 0x5, &(0x7f000000c600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}], 0x5, 0x10100, &(0x7f000000c840)={r6, r7+10000000}) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f000000c880), &(0x7f000000c8c0)=0x4) getsockname(r9, &(0x7f000000d000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f000000d080)=0x80) setsockopt$bt_BT_FLUSHABLE(r11, 0x112, 0x8, &(0x7f000000d0c0)=0x8, 0x4) 09:19:53 executing program 6: ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0x1000}) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x8040) r0 = fork() ptrace$setsig(0x4203, r0, 0x7, &(0x7f0000000180)={0x2a, 0xffffffc0, 0x20}) waitid(0x0, r0, &(0x7f0000000200), 0x1, 0x0) sched_rr_get_interval(r0, &(0x7f0000000280)) wait4(r0, &(0x7f00000002c0), 0x2, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000000500)=""/35, 0x23}, {&(0x7f0000000540)=""/139, 0x8b}], 0x3, &(0x7f0000000640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000700)=""/169, 0xa9}, {&(0x7f00000007c0)=""/31, 0x1f}, {&(0x7f0000000800)=""/8, 0x8}, {&(0x7f0000000840)=""/11, 0xb}, {&(0x7f0000000880)=""/174, 0xae}], 0x5}}, {{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/226, 0xe2}, {&(0x7f0000000b40)=""/118, 0x76}], 0x2, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c40)=""/179, 0xb3}], 0x1, &(0x7f0000000d40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x4, 0x60, &(0x7f0000000f00)={r1, r2+60000000}) sched_setscheduler(r6, 0x2, &(0x7f0000000f40)=0x1) ptrace$peekuser(0x3, r6, 0x9) rt_sigtimedwait(&(0x7f0000000f80)={[0x2]}, &(0x7f0000000fc0), &(0x7f0000001040), 0x8) ptrace$getsig(0x4202, r3, 0x80000000, &(0x7f0000001080)) syz_open_dev$hiddev(&(0x7f0000001100), 0x1, 0x440c0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000001140)=0x20, 0x1) waitid(0x0, r0, &(0x7f0000001180), 0x8, &(0x7f0000001200)) wait4(r6, &(0x7f00000012c0), 0x1, &(0x7f0000001300)) msgrcv(0xffffffffffffffff, &(0x7f00000013c0)={0x0, ""/43}, 0x33, 0x0, 0x3000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001740)={0x0, 0x0, r5, 0x9071, 0x80000}) 09:19:53 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f00000002c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000300)=0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) clock_gettime(0x0, &(0x7f0000005980)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005700)=[{{&(0x7f00000004c0), 0x6e, &(0x7f0000001740)=[{&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/113, 0x71}, {&(0x7f0000001680)=""/137, 0x89}], 0x4, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f00000017c0)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001840)=""/16, 0x10}, {&(0x7f0000001880)=""/59, 0x3b}, {&(0x7f00000018c0)=""/39, 0x27}, {&(0x7f0000001900)=""/49, 0x31}, {&(0x7f0000001940)=""/110, 0x6e}, {&(0x7f00000019c0)=""/50, 0x32}, {&(0x7f0000001a00)=""/18, 0x12}], 0x7, &(0x7f0000001ac0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001b00)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000001b80)=""/143, 0x8f}, {&(0x7f0000001c40)=""/253, 0xfd}, {&(0x7f0000001d40)=""/29, 0x1d}, {&(0x7f0000001d80)=""/26, 0x1a}, {&(0x7f0000001dc0)=""/138, 0x8a}, {&(0x7f0000001e80)=""/224, 0xe0}, {&(0x7f0000001f80)=""/3, 0x3}, {&(0x7f0000001fc0)=""/146, 0x92}, {&(0x7f0000002080)=""/55, 0x37}], 0x9}}, {{&(0x7f0000002180), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000002200)=""/68, 0x44}, {&(0x7f0000002280)=""/36, 0x24}], 0x2, &(0x7f0000002300)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002340), 0x6e, &(0x7f00000036c0)=[{&(0x7f00000023c0)=""/93, 0x5d}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/125, 0x7d}, {&(0x7f00000034c0)=""/212, 0xd4}, {&(0x7f00000035c0)=""/113, 0x71}, {&(0x7f0000003640)=""/68, 0x44}], 0x6}}, {{&(0x7f0000003740)=@abs, 0x6e, &(0x7f0000004840)=[{&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/106, 0x6a}], 0x2, &(0x7f0000004880)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000004900), 0x6e, &(0x7f0000004c40)=[{&(0x7f0000004980)=""/145, 0x91}, {&(0x7f0000004a40)=""/40, 0x28}, {&(0x7f0000004a80)=""/192, 0xc0}, {&(0x7f0000004b40)=""/38, 0x26}, {&(0x7f0000004b80)=""/187, 0xbb}], 0x5, &(0x7f0000004cc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004d80)=""/213, 0xd5}, {&(0x7f0000004e80)=""/99, 0x63}], 0x2, &(0x7f0000004f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000005040), 0x6e, &(0x7f0000005440)=[{&(0x7f00000050c0)=""/114, 0x72}, {&(0x7f0000005140)=""/149, 0x95}, {&(0x7f0000005200)=""/225, 0xe1}, {&(0x7f0000005300)=""/8, 0x8}, {&(0x7f0000005340)=""/252, 0xfc}], 0x5}}, {{&(0x7f00000054c0), 0x6e, &(0x7f0000005600)=[{&(0x7f0000005540)=""/156, 0x9c}], 0x1, &(0x7f0000005640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}], 0xa, 0x0, &(0x7f00000059c0)={r5, r6+60000000}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000005ac0)={&(0x7f0000005a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005a80)={&(0x7f0000005a40)={0x1c, r0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmmsg$unix(r7, &(0x7f0000008800)=[{{0x0, 0x0, &(0x7f0000005ec0)=[{&(0x7f0000005b00)=""/122, 0x7a}, {&(0x7f0000005b80)=""/197, 0xc5}, {&(0x7f0000005c80)=""/96, 0x60}, {&(0x7f0000005d00)=""/91, 0x5b}, {&(0x7f0000005d80)=""/71, 0x47}, {&(0x7f0000005e00)=""/192, 0xc0}], 0x6, &(0x7f0000005f40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000006000)=@abs, 0x6e, &(0x7f00000080c0)=[{&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/46, 0x2e}, {&(0x7f00000070c0)=""/4096, 0x1000}], 0x3, &(0x7f0000008100)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x118}}, {{0x0, 0x0, &(0x7f0000008440)=[{&(0x7f0000008240)=""/211, 0xd3}, {&(0x7f0000008340)=""/126, 0x7e}, {&(0x7f00000083c0)=""/80, 0x50}], 0x3, &(0x7f0000008480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000084c0)=@abs, 0x6e, &(0x7f0000008740)=[{&(0x7f0000008540)=""/182, 0xb6}, {&(0x7f0000008600)=""/80, 0x50}, {&(0x7f0000008680)=""/136, 0x88}], 0x3, &(0x7f0000008780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x101, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r13, &(0x7f0000008a80)={&(0x7f0000008900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000008a40)={&(0x7f0000008940)={0xe0, 0x2, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4002000}, 0x4040) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000008bc0), r12) sendmsg$BATADV_CMD_SET_VLAN(r14, &(0x7f0000008cc0)={&(0x7f0000008b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000008c80)={&(0x7f0000008c00)={0x44, r15, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa55}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000001}, 0x40014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000008d00)={'batadv_slave_0\x00'}) r16 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000008d80)={0x4, &(0x7f0000008d40)=[{0x2, 0x8, 0x3, 0x8001}, {0x4, 0x2, 0x2, 0x400}, {0xb7, 0x40, 0x9}, {0x3, 0x1, 0x7f, 0x59ea4380}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r16, 0x40182103, &(0x7f0000008dc0)={0x0, 0x3, r10, 0x2}) sched_rr_get_interval(r11, &(0x7f0000008e00)) [ 113.403354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.408463] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.410943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.420356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.427165] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.585699] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.587456] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.589134] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.592310] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.602646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.610380] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.614319] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.615694] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.619405] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.627641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.629848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.632538] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.638235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.645468] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.648460] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.697430] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.702089] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.705306] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.706752] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.708789] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.709816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.710846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.712663] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.717864] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.718039] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.722410] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.727205] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.728622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.734558] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.738607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.775906] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.782459] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.787384] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.804632] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.807504] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.556848] Bluetooth: hci0: command tx timeout [ 115.683514] Bluetooth: hci1: command tx timeout [ 115.747310] Bluetooth: hci2: command tx timeout [ 115.811317] Bluetooth: hci4: command tx timeout [ 115.812934] Bluetooth: hci3: command tx timeout [ 115.814077] Bluetooth: hci6: command tx timeout [ 115.814638] Bluetooth: hci5: command tx timeout [ 115.876492] Bluetooth: hci7: command tx timeout [ 117.603846] Bluetooth: hci0: command tx timeout [ 117.732154] Bluetooth: hci1: command tx timeout [ 117.796211] Bluetooth: hci2: command tx timeout [ 117.860311] Bluetooth: hci3: command tx timeout [ 117.860849] Bluetooth: hci5: command tx timeout [ 117.861383] Bluetooth: hci6: command tx timeout [ 117.861842] Bluetooth: hci4: command tx timeout [ 117.924483] Bluetooth: hci7: command tx timeout [ 119.651451] Bluetooth: hci0: command tx timeout [ 119.780271] Bluetooth: hci1: command tx timeout [ 119.844214] Bluetooth: hci2: command tx timeout [ 119.909033] Bluetooth: hci4: command tx timeout [ 119.910674] Bluetooth: hci6: command tx timeout [ 119.912072] Bluetooth: hci5: command tx timeout [ 119.913564] Bluetooth: hci3: command tx timeout [ 119.972082] Bluetooth: hci7: command tx timeout [ 121.701042] Bluetooth: hci0: command tx timeout [ 121.828425] Bluetooth: hci1: command tx timeout [ 121.891091] Bluetooth: hci2: command tx timeout [ 121.955188] Bluetooth: hci5: command tx timeout [ 121.957288] Bluetooth: hci4: command tx timeout [ 121.959164] Bluetooth: hci3: command tx timeout [ 121.961061] Bluetooth: hci6: command tx timeout [ 122.019427] Bluetooth: hci7: command tx timeout [ 173.881279] syz-executor.0 (281) used greatest stack depth: 24640 bytes left [ 176.605815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.613054] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.617425] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.619918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.622236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.627885] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.631639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.634659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.639949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.642606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.649966] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.655591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.670261] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.671161] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.677357] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.677385] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.690220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.697321] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.698350] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.702189] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.704340] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.718715] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.720156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.721933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.722960] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.727631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.729944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.736310] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.743292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.745259] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.805641] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.810343] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.813244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.819316] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.825262] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.865831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.873531] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.876138] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.881382] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.885284] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.723269] Bluetooth: hci1: command tx timeout [ 178.725407] Bluetooth: hci0: command tx timeout [ 178.727331] Bluetooth: hci2: command tx timeout [ 178.787106] Bluetooth: hci5: command tx timeout [ 178.788863] Bluetooth: hci3: command tx timeout [ 178.851441] Bluetooth: hci6: command tx timeout [ 178.853593] Bluetooth: hci4: command tx timeout [ 178.915171] Bluetooth: hci7: command tx timeout [ 180.771207] Bluetooth: hci0: command tx timeout [ 180.771732] Bluetooth: hci2: command tx timeout [ 180.772257] Bluetooth: hci1: command tx timeout [ 180.836372] Bluetooth: hci5: command tx timeout [ 180.836929] Bluetooth: hci3: command tx timeout [ 180.899664] Bluetooth: hci4: command tx timeout [ 180.900634] Bluetooth: hci6: command tx timeout [ 180.964245] Bluetooth: hci7: command tx timeout [ 182.820068] Bluetooth: hci1: command tx timeout [ 182.820695] Bluetooth: hci2: command tx timeout [ 182.821229] Bluetooth: hci0: command tx timeout [ 182.883231] Bluetooth: hci3: command tx timeout [ 182.883804] Bluetooth: hci5: command tx timeout [ 182.947125] Bluetooth: hci6: command tx timeout [ 182.947684] Bluetooth: hci4: command tx timeout [ 183.011108] Bluetooth: hci7: command tx timeout [ 184.867148] Bluetooth: hci1: command tx timeout [ 184.867701] Bluetooth: hci0: command tx timeout [ 184.868228] Bluetooth: hci2: command tx timeout [ 184.931105] Bluetooth: hci3: command tx timeout [ 184.931701] Bluetooth: hci5: command tx timeout [ 184.995122] Bluetooth: hci4: command tx timeout [ 184.995663] Bluetooth: hci6: command tx timeout [ 185.059384] Bluetooth: hci7: command tx timeout [ 239.156606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.158684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.160443] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.166772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.168681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.255789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.262170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.265691] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.272357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.275424] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.425782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.433200] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.437014] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.443776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.445633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.447374] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.449769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.451178] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.455281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.469362] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.473178] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.476435] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.480788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.488628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.492081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.657613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.659852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.662324] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.670578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.688436] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.690795] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.692803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.715347] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.721474] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.726522] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.738851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.742619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.753135] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.755428] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.756696] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.251081] Bluetooth: hci0: command tx timeout [ 241.316804] Bluetooth: hci1: command tx timeout [ 241.507157] Bluetooth: hci2: command tx timeout [ 241.571345] Bluetooth: hci4: command tx timeout [ 241.572484] Bluetooth: hci3: command tx timeout [ 241.827163] Bluetooth: hci5: command tx timeout [ 241.827967] Bluetooth: hci7: command tx timeout [ 241.828610] Bluetooth: hci6: command tx timeout [ 243.299151] Bluetooth: hci0: command tx timeout [ 243.365074] Bluetooth: hci1: command tx timeout [ 243.557016] Bluetooth: hci2: command tx timeout [ 243.619105] Bluetooth: hci3: command tx timeout [ 243.619574] Bluetooth: hci4: command tx timeout [ 243.875191] Bluetooth: hci6: command tx timeout [ 243.875448] Bluetooth: hci5: command tx timeout [ 243.875726] Bluetooth: hci7: command tx timeout [ 245.348054] Bluetooth: hci0: command tx timeout [ 245.412456] Bluetooth: hci1: command tx timeout [ 245.605057] Bluetooth: hci2: command tx timeout [ 245.668160] Bluetooth: hci4: command tx timeout [ 245.668661] Bluetooth: hci3: command tx timeout [ 245.924049] Bluetooth: hci5: command tx timeout [ 245.924585] Bluetooth: hci7: command tx timeout [ 245.925333] Bluetooth: hci6: command tx timeout [ 247.397020] Bluetooth: hci0: command tx timeout [ 247.459196] Bluetooth: hci1: command tx timeout [ 247.651447] Bluetooth: hci2: command tx timeout [ 247.715528] Bluetooth: hci3: command tx timeout [ 247.716912] Bluetooth: hci4: command tx timeout [ 247.971132] Bluetooth: hci6: command tx timeout [ 247.972532] Bluetooth: hci7: command tx timeout [ 247.972575] Bluetooth: hci5: command tx timeout [ 302.018010] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.020448] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.023966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.026462] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.028812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.039097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.049688] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.052350] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.054543] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.062226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.173897] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.176855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.191079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.193264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.206856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.211354] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.212896] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.226240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.266609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.278451] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.298516] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.311543] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.314173] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.322781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.332435] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.348848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.368383] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.370691] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.407346] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.420324] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.460836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.508041] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.509262] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.525194] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.525268] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.555366] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.555470] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.562308] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.584412] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.596935] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.099130] Bluetooth: hci0: command tx timeout [ 304.100045] Bluetooth: hci1: command tx timeout [ 304.293090] Bluetooth: hci2: command tx timeout [ 304.355357] Bluetooth: hci3: command tx timeout [ 304.483144] Bluetooth: hci5: command tx timeout [ 304.547165] Bluetooth: hci4: command tx timeout [ 304.678899] Bluetooth: hci6: command tx timeout [ 304.678943] Bluetooth: hci7: command tx timeout [ 306.147069] Bluetooth: hci0: command tx timeout [ 306.147113] Bluetooth: hci1: command tx timeout [ 306.339221] Bluetooth: hci2: command tx timeout [ 306.403292] Bluetooth: hci3: command tx timeout [ 306.531405] Bluetooth: hci5: command tx timeout [ 306.596706] Bluetooth: hci4: command tx timeout [ 306.723288] Bluetooth: hci7: command tx timeout [ 306.723305] Bluetooth: hci6: command tx timeout [ 308.195510] Bluetooth: hci1: command tx timeout [ 308.195582] Bluetooth: hci0: command tx timeout [ 308.389035] Bluetooth: hci2: command tx timeout [ 308.451078] Bluetooth: hci3: command tx timeout [ 308.579471] Bluetooth: hci5: command tx timeout [ 308.644108] Bluetooth: hci4: command tx timeout [ 308.771201] Bluetooth: hci7: command tx timeout [ 308.771222] Bluetooth: hci6: command tx timeout [ 310.243083] Bluetooth: hci1: command tx timeout [ 310.243204] Bluetooth: hci0: command tx timeout [ 310.435676] Bluetooth: hci2: command tx timeout [ 310.499228] Bluetooth: hci3: command tx timeout [ 310.627451] Bluetooth: hci5: command tx timeout [ 310.691457] Bluetooth: hci4: command tx timeout [ 310.820420] Bluetooth: hci6: command tx timeout [ 310.821675] Bluetooth: hci7: command tx timeout [ 364.663381] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.665282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.667156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.676733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.687173] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.798580] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.800239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.804186] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.810640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.825648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.862928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.876920] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.883915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.920152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.929715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.007644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.015315] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.016956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.040336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.047556] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.140908] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.148486] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.157641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.161283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.163919] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.171312] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.185918] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.210171] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.219565] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.225302] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.409699] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.418886] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.436560] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.442757] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.474537] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.474883] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.491885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.497352] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.515846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.527753] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.757400] Bluetooth: hci0: command tx timeout [ 366.883582] Bluetooth: hci1: command tx timeout [ 366.947389] Bluetooth: hci2: command tx timeout [ 367.140094] Bluetooth: hci3: command tx timeout [ 367.396098] Bluetooth: hci5: command tx timeout [ 367.651099] Bluetooth: hci4: command tx timeout [ 367.779402] Bluetooth: hci6: command tx timeout [ 368.356284] Bluetooth: hci7: command tx timeout [ 368.803228] Bluetooth: hci0: command tx timeout [ 368.932305] Bluetooth: hci1: command tx timeout [ 368.997141] Bluetooth: hci2: command tx timeout [ 369.188303] Bluetooth: hci3: command tx timeout [ 369.445226] Bluetooth: hci5: command tx timeout [ 369.699475] Bluetooth: hci4: command tx timeout [ 369.827146] Bluetooth: hci6: command tx timeout [ 370.405459] Bluetooth: hci7: command tx timeout [ 370.851429] Bluetooth: hci0: command tx timeout [ 370.979276] Bluetooth: hci1: command tx timeout [ 371.043139] Bluetooth: hci2: command tx timeout [ 371.236394] Bluetooth: hci3: command tx timeout [ 371.491515] Bluetooth: hci5: command tx timeout [ 371.747156] Bluetooth: hci4: command tx timeout [ 371.875342] Bluetooth: hci6: command tx timeout [ 372.451167] Bluetooth: hci7: command tx timeout [ 372.901216] Bluetooth: hci0: command tx timeout [ 373.027354] Bluetooth: hci1: command tx timeout [ 373.093119] Bluetooth: hci2: command tx timeout [ 373.285476] Bluetooth: hci3: command tx timeout [ 373.540215] Bluetooth: hci5: command tx timeout [ 373.796063] Bluetooth: hci4: command tx timeout [ 373.923276] Bluetooth: hci6: command tx timeout [ 374.500360] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 09:24:55 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=ffff88803691b700 RCX=00000000ffffffff RDX=0000000000000008 RSI=ffff88803691c1a8 RDI=00000000fffffffe RBP=ffff88803691c158 RSP=ffff88806ce08d30 R8 =0000000000000002 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff88803691c1a8 R13=85a1b56e00cd2011 R14=0000000000000000 R15=0000000000000002 RIP=ffffffff81519280 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb86cf76310 CR3=00000000135a5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88802f3df988 RCX=0000000000000001 RDX=ffff88802f3e0001 RSI=ffff88802f3df960 RDI=ffff88802f3df4a8 RBP=ffff88802f3d8000 RSP=ffff88802f3df420 R8 =0000000000000001 R9 =ffff88802f3df4d8 R10=000000000003b53d R11=0000000000020e3d R12=ffff88802f3df401 R13=ffff88802f3df4e0 R14=ffff88802f3df960 R15=ffff88802f3df498 RIP=ffffffff84b289c6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fad26fea540 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fed03884020 CR3=000000000dd7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000ff0000000000000000000000ff00 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000