Warning: Permanently added '[localhost]:22055' (ECDSA) to the list of known hosts. 2023/08/17 09:30:03 fuzzer started 2023/08/17 09:30:04 dialing manager at localhost:43643 syzkaller login: [ 98.764748] cgroup: Unknown subsys name 'net' [ 98.941560] cgroup: Unknown subsys name 'rlimit' [ 110.891270] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2023/08/17 09:30:17 syscalls: 206 2023/08/17 09:30:17 code coverage: enabled 2023/08/17 09:30:17 comparison tracing: enabled 2023/08/17 09:30:17 extra coverage: enabled 2023/08/17 09:30:17 setuid sandbox: enabled 2023/08/17 09:30:17 namespace sandbox: enabled 2023/08/17 09:30:17 Android sandbox: enabled 2023/08/17 09:30:17 fault injection: enabled 2023/08/17 09:30:17 leak checking: enabled 2023/08/17 09:30:17 net packet injection: enabled 2023/08/17 09:30:17 net device setup: enabled 2023/08/17 09:30:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/08/17 09:30:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/08/17 09:30:17 USB emulation: enabled 2023/08/17 09:30:17 hci packet injection: enabled 2023/08/17 09:30:17 wifi device emulation: enabled 2023/08/17 09:30:17 802.15.4 emulation: enabled 2023/08/17 09:30:17 fetching corpus: 0, signal 0/0 (executing program) 2023/08/17 09:30:19 starting 8 fuzzer processes 09:30:19 executing program 0: ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000000)=""/18) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x1, 0x8, 0x2}, {{0x77359400}, 0x5, 0x18c2, 0x6}, {{0x0, 0x2710}, 0x0, 0x6, 0x228e}, {{}, 0x15, 0x40, 0xffff}], 0x60) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f00000000c0)=""/40) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0xa182, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000140)=""/171) inotify_init() r1 = syz_open_dev$mouse(&(0x7f0000000200), 0x6, 0x200000) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000240)=""/4096) inotify_add_watch(r1, &(0x7f0000001240)='./file0\x00', 0x1000044) ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000001280)={0x1, 0x1, 0x6, 0x29}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000012c0)=0x3, 0x4) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000001300)=0x3) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001340)=""/4096) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000002340)=""/51) syz_genetlink_get_family_id$wireguard(&(0x7f0000002380), r0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000023c0)=""/217) syz_open_dev$mouse(&(0x7f00000024c0), 0x4, 0x2000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000002500), 0x10800, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) 09:30:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x4480) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x4) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000100)=""/87) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000180)=""/117) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000240)=0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x4200, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x42000, 0x0) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000480)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000004c0)={'wg0\x00'}) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000500)=""/4096, &(0x7f0000001500)=0x1000) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000001540)=""/65, &(0x7f00000015c0)=0x41) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c880) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000001700)={0x7, 0x200, 0x2, 0x2, 0x8001, 0x1}) 09:30:19 executing program 3: socketpair(0x1e, 0x3, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5bba}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9c3a}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040) r2 = syz_open_dev$mouse(&(0x7f0000000380), 0x3, 0x101000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008020) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffadf4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x44000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004801}, 0x851) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000740), r2) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r5, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r7, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000880}, 0x800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa55}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x38}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0xeda3308e8230d0e7}, 0x24000058) mq_getsetattr(r2, &(0x7f0000000c00)={0x3, 0x0, 0x5, 0x7fff}, &(0x7f0000000c40)) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) [ 112.447943] audit: type=1400 audit(1692264619.159:6): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:30:19 executing program 4: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x101}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0c5}, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0xc, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c054}, 0x800) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x4000000) socketpair(0x26, 0x5, 0x1, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0xe, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x4008004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_NAT_SRC={0x1c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}]}, 0x30}}, 0x20000010) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x43}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x4, 0x42, 0x81, 0x1ff, 0x4, @mcast1, @mcast2, 0x700, 0x7, 0x8, 0xffffffff}}) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0xc, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r6 = syz_open_dev$mouse(&(0x7f0000000d00), 0x40, 0x64340) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r2) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, r7, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20008091) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x58, 0x13, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x40040) 09:30:19 executing program 5: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0xf, 0x80b, 0x3) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="d9c81be51c5153b724ff8954eb157d2a", 0x10) getsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x4900, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3, 0x3, 0x401, 0x0, 0x0, {0xe, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x397}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x814) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000280)=0x5, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x2, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xc7bf}]}, 0x44}}, 0x20000840) r2 = syz_open_dev$evdev(&(0x7f0000000400), 0x100000000, 0x8000) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000440)={0x3f, 0x7, 0x2, 0x2, 0x23000000, 0x4}) syz_read_part_table(0x8, 0x3, &(0x7f0000000600)=[{&(0x7f0000000480)="93ca3b2932c62738230091d5a1f8309ccfa1b978a2326936918d00fc79a3b7ccc01b6ee8f1b175090f5ac82f483c13ed1784bf25ed6357a95ef65441dd2912404f691c4657c78da81913828af9f64b47d75a4168fc06bc17689f6620f63b799c17ae0c1c93ac667f8fd2d0abf97e005a6dc570623f9d7f8bc2bc270e66a5c8a4be8c69436d93d6bc616fd8ba92a856d72bbefb56bc0e48c5699eb5a4aee74cead2159adaa489dadf43963cbe934a452cfef898e97d5111f19fdd7d83de50abdd4990", 0xc2, 0xffffffff}, {&(0x7f0000000580)="a3ce36d0fd66fb084356ba00ca19329da089fd511647fca45f050bafacc69f5d377ae307b2c8cf215a58907820", 0x2d, 0xfd57}, {&(0x7f00000005c0)="16d8d5c915f404440791e321", 0xc, 0xfffffffffffffffa}]) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0805}, 0x20000090) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x4c}}, 0x640080c5) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000008c0)=@gcm_256={{0x303}, "b9e7bb052dd7cbe1", "d6ffdc9af3e05900a3dbf808ce4ace813fdd26288704d1214676b43cf4d9754f", "695e6e9d", "990cbc6937e0c955"}, 0x38) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000900)=""/81) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000980), 0x181300, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r0) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80810}, 0x81) 09:30:19 executing program 6: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x9, 0xe7, 0x99, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x7800, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'sit0\x00', r0, 0x2d, 0x12, 0x1, 0x1, 0xd, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8398, 0x8, 0x8, 0x1}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5394, &(0x7f0000000280)) socketpair(0x21, 0x800, 0x8, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40824}, 0x4010) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x1, 0xc1ecde07e8dc50c8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', r5, 0x4, 0x0, 0x7, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x700, 0x1000, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', r1, 0x2f, 0x9, 0x80, 0x80000000, 0x5, @mcast1, @empty, 0x10, 0x700, 0x5, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd0a1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7e3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7a27}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x891) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'sit0\x00', r1, 0x4, 0x5, 0x80, 0x1, 0x48, @dev={0xfe, 0x80, '\x00', 0x28}, @mcast1, 0x7800, 0x700, 0xdeb, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'ip6tnl0\x00', r7, 0x4, 0x5, 0x81, 0x0, 0x40, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x1, 0x5, 0xfff}}) socketpair(0x3, 0x5, 0x7ff, &(0x7f0000000a40)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, r9, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb7b}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x61}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xde}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000c80)={'ip6tnl0\x00', &(0x7f0000000c00)={'syztnl0\x00', r5, 0xb9ed7cb2b6c71f7f, 0x0, 0x3, 0x800, 0x18, @local, @local, 0x7800, 0x8747, 0xaab, 0x800}}) r10 = socket(0x9, 0xa, 0x4) ioctl$BTRFS_IOC_WAIT_SYNC(r10, 0x40089416, &(0x7f0000000cc0)) 09:30:19 executing program 7: sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0xe, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000084}, 0xc000) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf8, 0xa, 0xa, 0x3, 0x0, 0x0, {0xc}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @exthdr={{0xb}, @void}}, @NFTA_SET_USERDATA={0x8, 0xd, 0x1, 0x0, "d7ce0189"}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_DESC={0x8c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x88, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2746}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdd}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2a}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0xf8}, 0x1, 0x0, 0x0, 0x24044044}, 0x8004) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x1, 0x1, 0x304, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8000}, @CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffb}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa969}]}, 0x54}}, 0x24000856) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5b}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x24000010) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048080}, 0x40091) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x103000, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, 0x4, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x40841) r3 = syz_open_dev$mouse(&(0x7f00000009c0), 0x37, 0x10002) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', r4, 0x2f, 0x9, 0x80, 0x81, 0x3c, @local, @private2, 0x40, 0x20, 0x883, 0x5}}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000c00), 0x80200, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000084}, 0x8000) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x889}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x18, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8850}, 0x1) 09:30:19 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x8000, 0x9ff01ea077ab6a19) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x20, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8, 0x9}}) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x7, 0x400040) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r2, 0x4, 0x7, 0x5, 0x0, 0x20, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x8, 0x1, 0xffffffff, 0x8}}) r4 = syz_open_dev$mouse(&(0x7f0000000240), 0x4, 0x101000) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x4000) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xde73}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000007c0)={0xfffffff7, 0x6, 0x40, 0x2, 0x3ff}, 0x14) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r6, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000940)={0x20, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "29c8a82de4b2e4"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001b40)={{0x0, 0xfffffffffffffff7, 0x4, 0x4, 0x0, 0x8, 0x6, 0x20, 0xc0, 0x9, 0xfffffff7, 0x3f, 0x9135, 0xfff, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000002b40)={0x80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "e37ae2161eb2e8"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000007eb40)={0x47, [{r7, r8}, {r9, r10}], 0xdc, "fa77d1f947a91e"}) [ 113.763994] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.769912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.771247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.780655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.788443] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 113.789909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.829216] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.830964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.832688] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.835692] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.838363] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 113.840238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.858508] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.860898] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.862329] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.865526] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.867698] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 113.869119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.052623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.055391] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.058637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.070490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.073500] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 114.076575] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.852258] Bluetooth: hci0: command 0x0409 tx timeout [ 115.916328] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 115.918092] Bluetooth: hci2: command 0x0409 tx timeout [ 115.918627] Bluetooth: hci1: command 0x0409 tx timeout [ 116.043076] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 116.044399] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 116.107176] Bluetooth: hci6: command 0x0409 tx timeout [ 116.235418] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 117.899079] Bluetooth: hci0: command 0x041b tx timeout [ 117.964439] Bluetooth: hci1: command 0x041b tx timeout [ 117.964603] Bluetooth: hci2: command 0x041b tx timeout [ 118.156251] Bluetooth: hci6: command 0x041b tx timeout [ 119.947067] Bluetooth: hci0: command 0x040f tx timeout [ 120.011124] Bluetooth: hci1: command 0x040f tx timeout [ 120.011148] Bluetooth: hci2: command 0x040f tx timeout [ 120.204354] Bluetooth: hci6: command 0x040f tx timeout [ 120.295145] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 120.301519] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 120.304128] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 120.335652] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 120.354959] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 120.364551] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.996646] Bluetooth: hci0: command 0x0419 tx timeout [ 122.059101] Bluetooth: hci2: command 0x0419 tx timeout [ 122.060737] Bluetooth: hci1: command 0x0419 tx timeout [ 122.187570] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 122.251088] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 122.251237] Bluetooth: hci6: command 0x0419 tx timeout [ 122.254039] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 122.443451] Bluetooth: hci7: command 0x0409 tx timeout [ 124.491115] Bluetooth: hci7: command 0x041b tx timeout [ 125.760044] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.767426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.768957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.777717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.790111] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.791378] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.540127] Bluetooth: hci7: command 0x040f tx timeout [ 127.820566] Bluetooth: hci3: command 0x0409 tx timeout [ 128.011321] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 128.013424] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 128.587054] Bluetooth: hci7: command 0x0419 tx timeout [ 129.867056] Bluetooth: hci3: command 0x041b tx timeout [ 131.507391] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.517212] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.549614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.553854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.555794] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.576331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.601086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.601763] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.607796] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 131.609057] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 131.620455] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.621850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.916314] Bluetooth: hci3: command 0x040f tx timeout [ 133.708476] Bluetooth: hci4: command 0x0409 tx timeout [ 133.709156] Bluetooth: hci5: command 0x0409 tx timeout [ 133.964221] Bluetooth: hci3: command 0x0419 tx timeout [ 135.757045] Bluetooth: hci4: command 0x041b tx timeout [ 135.757567] Bluetooth: hci5: command 0x041b tx timeout [ 137.803300] Bluetooth: hci4: command 0x040f tx timeout [ 137.803852] Bluetooth: hci5: command 0x040f tx timeout [ 139.852390] Bluetooth: hci4: command 0x0419 tx timeout [ 139.852894] Bluetooth: hci5: command 0x0419 tx timeout [ 173.567857] syz-executor.1 (277) used greatest stack depth: 24176 bytes left [ 176.743340] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.747479] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.750582] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.772055] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.786900] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 176.799686] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.973926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.976846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.978526] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.005723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.019056] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 177.020470] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.160490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.194434] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.204592] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.267205] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.316833] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 177.328635] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.892423] Bluetooth: hci0: command 0x0409 tx timeout [ 178.956823] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 179.211121] Bluetooth: hci1: command 0x0409 tx timeout [ 179.468104] Bluetooth: hci6: command 0x0409 tx timeout [ 180.939263] Bluetooth: hci0: command 0x041b tx timeout [ 181.259057] Bluetooth: hci1: command 0x041b tx timeout [ 181.518023] Bluetooth: hci6: command 0x041b tx timeout [ 181.567915] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.581395] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.583415] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.634548] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.680411] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 181.684073] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.252952] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 182.255723] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 182.257303] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 182.267064] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 182.301842] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 182.323202] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 182.988044] Bluetooth: hci0: command 0x040f tx timeout [ 183.307128] Bluetooth: hci1: command 0x040f tx timeout [ 183.564437] Bluetooth: hci6: command 0x040f tx timeout [ 183.819246] Bluetooth: hci2: command 0x0409 tx timeout [ 184.396091] Bluetooth: hci7: command 0x0409 tx timeout [ 185.036102] Bluetooth: hci0: command 0x0419 tx timeout [ 185.355347] Bluetooth: hci1: command 0x0419 tx timeout [ 185.612152] Bluetooth: hci6: command 0x0419 tx timeout [ 185.867342] Bluetooth: hci2: command 0x041b tx timeout [ 186.445343] Bluetooth: hci7: command 0x041b tx timeout [ 187.453705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.465502] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.468159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.491405] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.500852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 187.512853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.916043] Bluetooth: hci2: command 0x040f tx timeout [ 188.491195] Bluetooth: hci7: command 0x040f tx timeout [ 189.644145] Bluetooth: hci3: command 0x0409 tx timeout [ 189.965317] Bluetooth: hci2: command 0x0419 tx timeout [ 190.540126] Bluetooth: hci7: command 0x0419 tx timeout [ 191.693008] Bluetooth: hci3: command 0x041b tx timeout [ 193.739535] Bluetooth: hci3: command 0x040f tx timeout [ 195.596066] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 195.789023] Bluetooth: hci3: command 0x0419 tx timeout [ 195.851192] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 200.843114] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 201.164596] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 206.158063] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 206.475074] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 209.416605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.441060] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.467288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.487478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.514549] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.523523] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.660137] Bluetooth: hci4: command 0x0409 tx timeout [ 211.851061] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 213.709011] Bluetooth: hci4: command 0x041b tx timeout [ 215.036298] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.071480] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.096457] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.115899] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.151946] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.153524] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.755090] Bluetooth: hci4: command 0x040f tx timeout [ 217.229089] Bluetooth: hci5: command 0x0409 tx timeout [ 217.807026] Bluetooth: hci4: command 0x0419 tx timeout [ 219.276063] Bluetooth: hci5: command 0x041b tx timeout [ 221.324225] Bluetooth: hci5: command 0x040f tx timeout [ 223.372220] Bluetooth: hci5: command 0x0419 tx timeout [ 239.509883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.524492] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.527423] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.538867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.600477] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 239.612387] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.766850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.773617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.804438] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.875674] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.878432] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 239.883531] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.495944] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 241.803243] Bluetooth: hci1: command 0x0409 tx timeout [ 241.996468] Bluetooth: hci6: command 0x0409 tx timeout [ 243.527475] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.532897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.540887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.576451] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.614480] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 243.615842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.851329] Bluetooth: hci1: command 0x041b tx timeout [ 244.045294] Bluetooth: hci6: command 0x041b tx timeout [ 245.707097] Bluetooth: hci0: command 0x0409 tx timeout [ 245.900078] Bluetooth: hci1: command 0x040f tx timeout [ 246.091062] Bluetooth: hci6: command 0x040f tx timeout [ 246.219498] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 246.476190] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 247.755133] Bluetooth: hci0: command 0x041b tx timeout [ 247.947357] Bluetooth: hci1: command 0x0419 tx timeout [ 248.139240] Bluetooth: hci6: command 0x0419 tx timeout [ 249.803199] Bluetooth: hci0: command 0x040f tx timeout [ 249.992957] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 250.011442] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 250.024954] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 250.086202] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 250.099495] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 250.113673] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 251.531395] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 251.851058] Bluetooth: hci0: command 0x0419 tx timeout [ 251.916076] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 252.171552] Bluetooth: hci7: command 0x0409 tx timeout [ 254.219062] Bluetooth: hci7: command 0x041b tx timeout [ 254.858051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.893331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.898401] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.934492] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.963494] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 254.991526] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.267063] Bluetooth: hci7: command 0x040f tx timeout [ 257.163119] Bluetooth: hci2: command 0x0409 tx timeout [ 257.163931] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 258.316036] Bluetooth: hci7: command 0x0419 tx timeout [ 259.211086] Bluetooth: hci2: command 0x041b tx timeout [ 260.347209] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.364446] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.414826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.438658] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.452792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 260.463567] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.260454] Bluetooth: hci2: command 0x040f tx timeout [ 262.604352] Bluetooth: hci3: command 0x0409 tx timeout [ 263.307282] Bluetooth: hci2: command 0x0419 tx timeout [ 264.652216] Bluetooth: hci3: command 0x041b tx timeout [ 266.700057] Bluetooth: hci3: command 0x040f tx timeout [ 268.749009] Bluetooth: hci3: command 0x0419 tx timeout [ 271.736604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.740612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.743783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.750037] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.752345] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.753873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.931603] Bluetooth: hci4: command 0x0409 tx timeout [ 275.980100] Bluetooth: hci4: command 0x041b tx timeout [ 278.028057] Bluetooth: hci4: command 0x040f tx timeout [ 278.988400] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 280.076358] Bluetooth: hci4: command 0x0419 tx timeout [ 282.173544] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.177355] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.178860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.182330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.224492] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.268377] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.365101] Bluetooth: hci5: command 0x0409 tx timeout [ 286.412574] Bluetooth: hci5: command 0x041b tx timeout [ 288.461062] Bluetooth: hci5: command 0x040f tx timeout [ 290.508644] Bluetooth: hci5: command 0x0419 tx timeout [ 303.501270] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 303.885040] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 307.405088] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 308.236346] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 309.003048] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 310.331143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.340545] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.352560] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.383654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.418888] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 310.421391] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.347456] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.352922] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.354897] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.386688] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.404771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 311.428457] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.523468] Bluetooth: hci0: command 0x0409 tx timeout [ 313.420069] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 313.550086] Bluetooth: hci1: command 0x0409 tx timeout [ 313.995172] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 314.572337] Bluetooth: hci0: command 0x041b tx timeout [ 315.595712] Bluetooth: hci1: command 0x041b tx timeout [ 316.529421] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.533304] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.535285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.538574] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.539927] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 316.541505] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.620009] Bluetooth: hci0: command 0x040f tx timeout [ 316.627801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.635971] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.687432] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.702175] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.723208] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 316.724384] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 317.643355] Bluetooth: hci1: command 0x040f tx timeout [ 318.603266] Bluetooth: hci2: command 0x0409 tx timeout [ 318.667556] Bluetooth: hci0: command 0x0419 tx timeout [ 318.795031] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 318.860089] Bluetooth: hci6: command 0x0409 tx timeout [ 319.692241] Bluetooth: hci1: command 0x0419 tx timeout [ 320.652014] Bluetooth: hci2: command 0x041b tx timeout [ 320.907033] Bluetooth: hci6: command 0x041b tx timeout [ 322.702035] Bluetooth: hci2: command 0x040f tx timeout [ 322.955506] Bluetooth: hci6: command 0x040f tx timeout [ 324.363671] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 324.625552] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 324.754164] Bluetooth: hci2: command 0x0419 tx timeout [ 325.003805] Bluetooth: hci6: command 0x0419 tx timeout [ 327.837659] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.840567] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.851939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.868202] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.870258] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 327.878384] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 327.927749] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 327.930368] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 327.931644] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 327.942495] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 327.947741] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 327.949892] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 329.933064] Bluetooth: hci3: command 0x0409 tx timeout [ 329.995371] Bluetooth: hci7: command 0x0409 tx timeout [ 331.979096] Bluetooth: hci3: command 0x041b tx timeout [ 332.043625] Bluetooth: hci7: command 0x041b tx timeout [ 333.825726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.857828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.867923] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.916943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.929099] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 333.978740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.027048] Bluetooth: hci3: command 0x040f tx timeout [ 334.091052] Bluetooth: hci7: command 0x040f tx timeout [ 336.075601] Bluetooth: hci4: command 0x0409 tx timeout [ 336.076081] Bluetooth: hci3: command 0x0419 tx timeout [ 336.139065] Bluetooth: hci7: command 0x0419 tx timeout [ 338.124092] Bluetooth: hci4: command 0x041b tx timeout [ 340.174013] Bluetooth: hci4: command 0x040f tx timeout [ 342.223009] Bluetooth: hci4: command 0x0419 tx timeout [ 344.453727] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.464748] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.466883] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.476502] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.493081] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.495321] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 346.573114] Bluetooth: hci5: command 0x0409 tx timeout [ 348.620629] Bluetooth: hci5: command 0x041b tx timeout [ 350.667185] Bluetooth: hci5: command 0x040f tx timeout [ 352.716006] Bluetooth: hci5: command 0x0419 tx timeout [ 374.860041] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 375.755258] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 378.351107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.354568] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.357464] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.372827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.376296] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 378.377705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.674189] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.677887] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.679383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.722473] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.728946] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 378.742473] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.427616] Bluetooth: hci0: command 0x0409 tx timeout [ 380.813093] Bluetooth: hci1: command 0x0409 tx timeout [ 380.939508] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 381.003479] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 382.476487] Bluetooth: hci0: command 0x041b tx timeout [ 382.862005] Bluetooth: hci1: command 0x041b tx timeout [ 384.524666] Bluetooth: hci0: command 0x040f tx timeout [ 384.908072] Bluetooth: hci1: command 0x040f tx timeout [ 386.507069] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 386.571473] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 386.572031] Bluetooth: hci0: command 0x0419 tx timeout [ 386.956064] Bluetooth: hci1: command 0x0419 tx timeout [ 389.997403] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 390.011938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 390.013574] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 390.031755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 390.033638] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 390.034899] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 390.235893] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 390.240507] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 390.263275] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 390.298424] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 390.346382] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 390.355780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 392.075106] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 392.140304] Bluetooth: hci2: command 0x0409 tx timeout [ 392.205050] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 392.459392] Bluetooth: hci7: command 0x0409 tx timeout [ 394.187232] Bluetooth: hci2: command 0x041b tx timeout [ 394.507552] Bluetooth: hci7: command 0x041b tx timeout [ 395.847275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.857477] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 395.863481] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 395.891263] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 395.905298] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 395.918725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.012472] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 396.020442] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 396.041796] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 396.074349] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 396.088772] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 396.106698] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 396.235085] Bluetooth: hci2: command 0x040f tx timeout [ 396.555123] Bluetooth: hci7: command 0x040f tx timeout [ 397.643075] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 398.027243] Bluetooth: hci4: command 0x0409 tx timeout [ 398.283793] Bluetooth: hci6: command 0x0409 tx timeout [ 398.284916] Bluetooth: hci2: command 0x0419 tx timeout [ 398.605029] Bluetooth: hci7: command 0x0419 tx timeout [ 400.075033] Bluetooth: hci4: command 0x041b tx timeout [ 400.331329] Bluetooth: hci6: command 0x041b tx timeout [ 400.875789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 400.882468] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 400.894482] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 400.961393] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 400.980508] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 400.989476] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 402.123103] Bluetooth: hci4: command 0x040f tx timeout [ 402.379686] Bluetooth: hci6: command 0x040f tx timeout [ 403.084177] Bluetooth: hci3: command 0x0409 tx timeout 2023/08/17 09:35:10 executor 6 failed 11 times: executor 6: not serving [ 404.427428] Bluetooth: hci6: command 0x0419 tx timeout VM DIAGNOSIS: 09:35:11 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000004 RCX=ffffffff8456ef57 RDX=ffff888008c50000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff84e50aa0 RSP=ffff888008d1f950 R8 =0000000000000001 R9 =0000000000000064 R10=0000000000000075 R11=0000000000000001 R12=0000000000000075 R13=0000000000000001 R14=000000000000000a R15=000000000000006c RIP=ffffffff814d969c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f87c716c900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f84343bd000 CR3=000000000c382000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2c2c2c2c2c2c2c2c2c2c2c2c2c2c2c2c XMM01=000000ff000000000000000000000000 XMM02=000000ff000000000000000000000000 XMM03=65530073746e6576652e79726f6d656d XMM04=000055e69c29ad40000055e69c2cd0f0 XMM05=0000000000000003000055e69c2a0170 XMM06=697665003130006563697665642e3269 XMM07=00000000000000000000000000000000 XMM08=65784500657250747261745363657845 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000152 RCX=0000000000000000 RDX=1ffff11006150b52 RSI=ffffffff81ab6ea8 RDI=ffff888030a85a90 RBP=0000000000000001 RSP=ffff88800e6375e0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff888030a859f8 R13=ffff888030a859f8 R14=0000000000000000 R15=ffff88802f46c000 RIP=ffffffff81ab6edb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055858141c0a0 CR3=000000000c3f2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000ff00ff0000ffff00000000 XMM02=0000000000ff0000000000ff00000000 XMM03=22b23c8dc6b55671f373b25049e778e6 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=64707466730073254073250070746673 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000