Warning: Permanently added '[localhost]:17150' (ECDSA) to the list of known hosts. 2023/08/20 18:44:53 fuzzer started 2023/08/20 18:44:53 dialing manager at localhost:46849 syzkaller login: [ 116.070120] cgroup: Unknown subsys name 'net' [ 116.280863] cgroup: Unknown subsys name 'rlimit' [ 130.030765] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2023/08/20 18:45:13 syscalls: 206 2023/08/20 18:45:13 code coverage: enabled 2023/08/20 18:45:13 comparison tracing: enabled 2023/08/20 18:45:13 extra coverage: enabled 2023/08/20 18:45:13 setuid sandbox: enabled 2023/08/20 18:45:13 namespace sandbox: enabled 2023/08/20 18:45:13 Android sandbox: enabled 2023/08/20 18:45:13 fault injection: enabled 2023/08/20 18:45:13 leak checking: enabled 2023/08/20 18:45:13 net packet injection: enabled 2023/08/20 18:45:13 net device setup: enabled 2023/08/20 18:45:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/08/20 18:45:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/08/20 18:45:13 USB emulation: enabled 2023/08/20 18:45:13 hci packet injection: enabled 2023/08/20 18:45:13 wifi device emulation: enabled 2023/08/20 18:45:13 802.15.4 emulation: enabled 2023/08/20 18:45:13 fetching corpus: 0, signal 0/0 (executing program) 2023/08/20 18:45:15 starting 8 fuzzer processes 18:45:15 executing program 0: sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x600, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x6c}}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3b25}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x240420c4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "494c227e7fa5a7e8d731d39d39deb566"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x3570ac939cb8c457) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004080) sendmsg$IEEE802154_LLSEC_DEL_KEY(r8, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r9, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000c041) 18:45:15 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) io_uring_setup(0x4866, &(0x7f0000000040)={0x0, 0xaad7, 0x20, 0x1, 0x29e, 0x0, r0}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x7}, 0x1a, {0x2, 0x4e22, @local}, 'wg0\x00'}) write$vga_arbiter(r0, &(0x7f0000000140)=@target={'target ', {'PCI:', '17', ':', '18', ':', '7', '.', '12'}}, 0x16) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=@other={'trylock', ' ', 'none'}, 0xd) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0x7, 0x6, 0x7, 0x8, 0x7], 0x4, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x81, {{0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}}}, 0x88) sysfs$1(0x1, &(0x7f00000003c0)='18') setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000400)="cd6a3acb2f7259b3b1c5b567a6f90c3a", 0x10) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x280080, 0x0) ioctl$CDROMCLOSETRAY(r1, 0x5319) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)={0x2f, 0x19, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xa}}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x4, 0x7e, "c27f564f60d5631362ffe113cb3bc83a096ec819264b6e5e412bb790f840e3d2a0a5bd250f14c534708d0ffc4b361ada1a9412764c4de37fe1ad34f783a401acc5556e66ed59f1d79b6a499a6d6c76076e9ed25321d7fac8abf85c0f62b4aca8340f1358f1c830252444ab805f61894c2abc656d7976615f92db4975a59b"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @remote}]}, 0xd8) sysfs$1(0x1, &(0x7f0000000580)='7') rt_sigsuspend(&(0x7f00000005c0)={[0x159]}, 0x8) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000600), 0x4000, 0x0) write$vga_arbiter(r2, &(0x7f0000000640), 0xf) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000680)={0x2c, @local, 0x4e23, 0x2, 'lc\x00', 0x2, 0x7, 0x42}, 0x2c) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x20010, r0, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x11, r0, 0x8000000) ioctl$CDROMREADMODE2(r1, 0x530c, &(0x7f00000006c0)={0x5, 0x8, 0x2, 0x4, 0x5, 0x40}) 18:45:15 executing program 2: setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x6, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x0, {{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x88) socket$inet6(0xa, 0x2, 0x4) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e24, @loopback}, 0x208, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000180)='team_slave_1\x00', 0xfffffffffffffffb, 0xffffffff, 0x95fd}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @broadcast}, 0x60, 0x0, 0x0, 0x0, 0x200, &(0x7f0000000280)='veth0_to_hsr\x00', 0x0, 0x6, 0x5608}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000340)={@remote, @dev={0xac, 0x14, 0x14, 0x10}, @empty}, 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x610000, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x7, {{0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000540)={0x8, {{0x2, 0xd838, @remote}}}, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000600), 0x10001, 0x40420) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000640)={{0xa, 0x4e22, 0x6ae, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, {0xa, 0x4e24, 0x114, @rand_addr=' \x01\x00', 0x6}, 0x4, [0x8001, 0x9, 0x80, 0x5, 0x4, 0x5, 0x1, 0x7f]}, 0x5c) r2 = accept$inet(r1, 0x0, &(0x7f00000006c0)) recvfrom$inet(r2, &(0x7f0000000700)=""/188, 0xbc, 0x40, &(0x7f00000007c0)={0x2, 0x4e24, @local}, 0x10) r3 = syz_open_dev$vcsa(&(0x7f0000000880), 0x9, 0x100080) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x40, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'root'}}]}}) r4 = syz_open_dev$vcsa(&(0x7f0000000940), 0x0, 0x1874c0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000980)={0x1, 0xffffffff, 0x0, 0x7, 0x2, 0x8}) [ 136.143434] audit: type=1400 audit(1692557115.134:6): avc: denied { execmem } for pid=277 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:45:15 executing program 3: r0 = socket(0x5, 0xa, 0x9) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x20040841) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20004140}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4000) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x300, 0x70bd28, 0xfffffffe, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40090}, 0x1a74d22006423898) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffff76b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'syztnl0\x00', r2, 0x2f, 0x2, 0x1, 0x0, 0x70, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, 0x20, 0x700, 0x7ff, 0x3ff}}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xf4, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0xe6bfc1f49b9290b8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc8, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14059a0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2257eacc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a9cc9ea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6539e724}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x169ceb7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a3cefd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x648366b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x167e03c3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e91455a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7999f800}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x527d3ef9}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x801) pipe2(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x59c6dc1a3d10fa1e}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x44) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}}, 0x20004080) r9 = accept4$inet6(r5, &(0x7f0000000b80)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000bc0)=0x1c, 0x0) recvfrom$inet6(r9, &(0x7f0000000c00)=""/14, 0xe, 0x2020, &(0x7f0000000c40)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000c80)={'filter\x00', 0x4}, 0x68) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x400}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffb}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x440}]}, 0x54}, 0x1, 0x0, 0x0, 0xf3d6ecb09da09332}, 0x4000000) 18:45:15 executing program 4: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000850}, 0x4c090) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x629}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4ab8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x11) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5ef0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = syz_open_dev$vcsa(&(0x7f0000000440), 0x3f, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1b}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}]}, 0x64}, 0x1, 0x0, 0x0, 0xc40}, 0x10000000) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000600)={0x2, 0xffffffff, 0x9}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x14000854}, 0xc0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x616}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x44000) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000900)={0x6, 0x1bea, 0x1a783312}, 0xc) ioctl$CDROM_MEDIA_CHANGED(r3, 0x5325, 0x5) ioctl$CDROMCLOSETRAY(r4, 0x5319) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f0000000940)={0x7, 0x8, 0x81, 0x3f, 0x7, 0x1c}) r7 = socket(0x1f, 0x3, 0xffe00000) getsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f00000013c0)={@dev, @dev}, &(0x7f0000001400)=0x8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x44, r6, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 18:45:15 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x777289c8f0b7158d}, 0x42) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x49a}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4880}, 0xc000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000780)={'filter\x00', 0x4}, 0x68) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x20044050) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r3) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4ea3f5e564d4aa79}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044000}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000c00)=r3, 0x1) ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000c40)={0x4, 0x16, 0x1f, 0x3, 0x6, 0x1f}) 18:45:15 executing program 6: recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/166, 0xa6, 0x2000, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) socketpair(0x2c, 0x2, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@initdev, @rand_addr, 0x0}, &(0x7f0000000240)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@loopback, 0x6e, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000300)={0x0, @generic={0x29, "b068151e20d1d2580fad12925352"}, @l2tp={0x2, 0x0, @broadcast, 0x2}, @xdp={0x2c, 0x2, r2, 0x38}, 0x3, 0x0, 0x0, 0x0, 0xffff, &(0x7f00000002c0)='ip_vti0\x00', 0x8, 0x401, 0x6}) recvfrom$inet6(r1, &(0x7f0000000380)=""/196, 0xc4, 0x3, &(0x7f0000000480)={0xa, 0x4e21, 0x485, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x47f, 0x0, 0x3, 0x101, 0x7bf98c7a, 0x8000], 0x1, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000600)={@local, 0x21, r4}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000640)={@remote, 0x1d, r4}) socket$inet6(0xa, 0x1, 0x80) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) io_uring_setup(0x538c, &(0x7f0000000780)={0x0, 0xbd7c, 0x1, 0x1, 0xca}) getsockopt$inet_mreqsrc(r1, 0x0, 0xd, &(0x7f0000000800)={@multicast2, @multicast2, @empty}, &(0x7f0000000840)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00'}) r5 = accept4$inet(r0, &(0x7f00000008c0)={0x2, 0x0, @remote}, &(0x7f0000000900)=0x10, 0x80000) getsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000940)={@empty, @loopback, @empty}, &(0x7f0000000980)=0xc) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4006841}, 0x4000) 18:45:15 executing program 7: ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0x9) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000000040)={0x1, 0x20, 0x2, 0x20, 0xf9, 0xf4}) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f0000000b00)=0x1c) getpeername(r2, &(0x7f0000000b40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000bc0)=0x80) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000c00)={0x7, 0x6, 0x2f1}, 0xc) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xed9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000d40)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000d80)={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x3ff, 0xa5, 0x8, 0x500, 0x100, 0x0, r4}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffc01}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000f00)={0x1, 'erspan0\x00'}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000f80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x3c}}, 0x4004100) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001240)={0x0, @xdp={0x2c, 0x8, r4, 0x1c}, @vsock={0x28, 0x0, 0xffffffff}, @phonet={0x23, 0x4, 0xb0, 0x7f}, 0x7, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)='veth1\x00', 0x80000000, 0x5}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001300)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, @rc={0x1f, @none}, @can={0x1d, r6}, 0x3f, 0x0, 0x0, 0x0, 0x2, &(0x7f00000012c0)='ip6gre0\x00', 0x100, 0xfffffffffffffff7, 0x4}) r7 = accept4$inet(r1, &(0x7f0000001380)={0x2, 0x0, @local}, &(0x7f00000013c0)=0x10, 0x800) getsockopt$inet_mreq(r7, 0x0, 0x20, &(0x7f0000001400)={@dev, @initdev}, &(0x7f0000001440)=0x8) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000001480)={'ip6tnl0\x00', r6, 0x4, 0x4, 0x6, 0x5, 0x40, @private0, @private1, 0x7800, 0x1, 0x800, 0x7}}) [ 137.641249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.645812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.648214] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.649944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.652134] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.653524] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.658450] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.664318] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.667207] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 137.667418] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.674010] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.674056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.871392] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.873509] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.875653] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.885011] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.913119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 137.916597] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 137.918312] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 137.923148] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 137.926317] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.967163] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 137.969555] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 137.978024] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 139.718624] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 139.721858] Bluetooth: hci1: command 0x0409 tx timeout [ 139.782738] Bluetooth: hci0: command 0x0409 tx timeout [ 139.783373] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 139.783969] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 139.847878] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 139.974759] Bluetooth: hci5: command 0x0409 tx timeout [ 140.103194] Bluetooth: hci6: command 0x0409 tx timeout [ 141.767343] Bluetooth: hci1: command 0x041b tx timeout [ 141.831030] Bluetooth: hci0: command 0x041b tx timeout [ 142.022612] Bluetooth: hci5: command 0x041b tx timeout [ 142.150875] Bluetooth: hci6: command 0x041b tx timeout [ 143.180324] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.183832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.208189] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.220537] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.222000] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 143.224188] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 143.229948] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 143.230665] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 143.237287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.241372] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 143.280725] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 143.285847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 143.815289] Bluetooth: hci1: command 0x040f tx timeout [ 143.878820] Bluetooth: hci0: command 0x040f tx timeout [ 144.070967] Bluetooth: hci5: command 0x040f tx timeout [ 144.198702] Bluetooth: hci6: command 0x040f tx timeout [ 145.094778] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 145.096424] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 145.351677] Bluetooth: hci4: command 0x0409 tx timeout [ 145.415922] Bluetooth: hci7: command 0x0409 tx timeout [ 145.863613] Bluetooth: hci1: command 0x0419 tx timeout [ 145.927758] Bluetooth: hci0: command 0x0419 tx timeout [ 146.118757] Bluetooth: hci5: command 0x0419 tx timeout [ 146.247613] Bluetooth: hci6: command 0x0419 tx timeout [ 147.398771] Bluetooth: hci4: command 0x041b tx timeout [ 147.462610] Bluetooth: hci7: command 0x041b tx timeout [ 149.447644] Bluetooth: hci4: command 0x040f tx timeout [ 149.510811] Bluetooth: hci7: command 0x040f tx timeout [ 150.151086] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 150.216647] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 151.494616] Bluetooth: hci4: command 0x0419 tx timeout [ 151.558821] Bluetooth: hci7: command 0x0419 tx timeout [ 153.058007] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.062542] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.068814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.080009] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.084324] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.089421] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.202305] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.203547] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.206109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.227283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.230211] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.231193] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.142991] Bluetooth: hci2: command 0x0409 tx timeout [ 155.273726] Bluetooth: hci3: command 0x0409 tx timeout [ 157.191076] Bluetooth: hci2: command 0x041b tx timeout [ 157.321479] Bluetooth: hci3: command 0x041b tx timeout [ 159.238767] Bluetooth: hci2: command 0x040f tx timeout [ 159.366926] Bluetooth: hci3: command 0x040f tx timeout [ 161.287509] Bluetooth: hci2: command 0x0419 tx timeout [ 161.415032] Bluetooth: hci3: command 0x0419 tx timeout [ 200.068284] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 200.086203] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 200.095424] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 200.125253] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 200.154208] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 200.175956] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.478659] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 201.798891] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 201.990795] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 202.250092] Bluetooth: hci6: command 0x0409 tx timeout [ 204.294688] Bluetooth: hci6: command 0x041b tx timeout [ 204.728916] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.731942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.734838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.739337] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.745809] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 204.749652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.769549] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 204.772034] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 204.772981] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 204.776182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 204.777931] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 204.780854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 206.151646] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 206.343451] Bluetooth: hci6: command 0x040f tx timeout [ 206.407705] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 206.791197] Bluetooth: hci4: command 0x0409 tx timeout [ 206.854841] Bluetooth: hci5: command 0x0409 tx timeout [ 206.856121] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 208.391529] Bluetooth: hci6: command 0x0419 tx timeout [ 208.839060] Bluetooth: hci4: command 0x041b tx timeout [ 208.889087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.891809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.893591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.903181] Bluetooth: hci5: command 0x041b tx timeout [ 208.907385] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.914520] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.916777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.041246] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.048839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.062287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.115285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.138858] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.140063] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.528525] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.531911] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.536151] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.598280] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.606283] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.615920] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.886634] Bluetooth: hci4: command 0x040f tx timeout [ 210.952611] Bluetooth: hci5: command 0x040f tx timeout [ 210.953191] Bluetooth: hci0: command 0x0409 tx timeout [ 211.271683] Bluetooth: hci1: command 0x0409 tx timeout [ 211.719768] Bluetooth: hci7: command 0x0409 tx timeout [ 212.936480] Bluetooth: hci4: command 0x0419 tx timeout [ 213.001429] Bluetooth: hci0: command 0x041b tx timeout [ 213.001452] Bluetooth: hci5: command 0x0419 tx timeout [ 213.319738] Bluetooth: hci1: command 0x041b tx timeout [ 213.766778] Bluetooth: hci7: command 0x041b tx timeout [ 214.962373] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.001891] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.024225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.046613] Bluetooth: hci0: command 0x040f tx timeout [ 215.062846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.079325] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.084852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.366666] Bluetooth: hci1: command 0x040f tx timeout [ 215.817621] Bluetooth: hci7: command 0x040f tx timeout [ 216.903278] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 217.096105] Bluetooth: hci0: command 0x0419 tx timeout [ 217.159690] Bluetooth: hci3: command 0x0409 tx timeout [ 217.415645] Bluetooth: hci1: command 0x0419 tx timeout [ 217.864637] Bluetooth: hci7: command 0x0419 tx timeout [ 219.206911] Bluetooth: hci3: command 0x041b tx timeout [ 221.257607] Bluetooth: hci3: command 0x040f tx timeout [ 221.830630] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 223.303688] Bluetooth: hci3: command 0x0419 tx timeout [ 227.014668] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 231.878653] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 236.808614] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 241.607611] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 246.342825] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 249.065984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.076700] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.083991] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.119089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.131608] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 249.148812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.206865] Bluetooth: hci2: command 0x0409 tx timeout [ 253.257592] Bluetooth: hci2: command 0x041b tx timeout [ 255.302654] Bluetooth: hci2: command 0x040f tx timeout [ 257.350747] Bluetooth: hci2: command 0x0419 tx timeout [ 258.164448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.166530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.463129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.463651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.210183] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 262.233617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 262.236371] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 262.245962] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 262.292440] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 262.302999] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 264.328499] Bluetooth: hci6: command 0x0409 tx timeout [ 266.377614] Bluetooth: hci6: command 0x041b tx timeout [ 266.557299] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 266.565801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.570523] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.586080] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.624957] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 266.627351] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.814541] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.828203] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 266.831985] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 266.851971] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 266.855301] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 266.857005] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 268.422622] Bluetooth: hci6: command 0x040f tx timeout [ 268.746010] Bluetooth: hci4: command 0x0409 tx timeout [ 268.934647] Bluetooth: hci5: command 0x0409 tx timeout [ 270.470612] Bluetooth: hci6: command 0x0419 tx timeout [ 270.758323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.760254] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.765851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.791181] Bluetooth: hci4: command 0x041b tx timeout [ 270.799848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.816876] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.821132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.982801] Bluetooth: hci5: command 0x041b tx timeout [ 271.205113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.215921] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.221005] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.231279] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.233118] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.238361] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 272.838703] Bluetooth: hci4: command 0x040f tx timeout [ 272.905636] Bluetooth: hci0: command 0x0409 tx timeout [ 273.031633] Bluetooth: hci5: command 0x040f tx timeout [ 273.094639] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 273.286935] Bluetooth: hci7: command 0x0409 tx timeout [ 274.886688] Bluetooth: hci4: command 0x0419 tx timeout [ 274.950683] Bluetooth: hci0: command 0x041b tx timeout [ 275.078640] Bluetooth: hci5: command 0x0419 tx timeout [ 275.335973] Bluetooth: hci7: command 0x041b tx timeout [ 276.401376] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.414842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.416503] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.440448] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.450260] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.451210] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.001695] Bluetooth: hci0: command 0x040f tx timeout [ 277.383676] Bluetooth: hci7: command 0x040f tx timeout [ 277.959656] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 278.535125] Bluetooth: hci3: command 0x0409 tx timeout [ 279.047696] Bluetooth: hci0: command 0x0419 tx timeout [ 279.431782] Bluetooth: hci7: command 0x0419 tx timeout [ 280.582756] Bluetooth: hci3: command 0x041b tx timeout [ 282.633942] Bluetooth: hci3: command 0x040f tx timeout [ 282.758647] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 284.679889] Bluetooth: hci3: command 0x0419 tx timeout [ 285.868247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.876010] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.881375] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.889000] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.895225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.898136] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.942981] Bluetooth: hci1: command 0x0409 tx timeout [ 289.990800] Bluetooth: hci1: command 0x041b tx timeout [ 292.038944] Bluetooth: hci1: command 0x040f tx timeout [ 294.086629] Bluetooth: hci1: command 0x0419 tx timeout 2023/08/20 18:48:07 executor 6 failed 11 times: executor 6: not serving [ 309.385467] syz-executor.5 (6617) used greatest stack depth: 24304 bytes left VM DIAGNOSIS: 18:48:08 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=1ffff1100263feee RCX=4ec4ec4ec4ec4ec5 RDX=0000000000000024 RSI=ffff88800ee3a530 RDI=ffff88806ce3e0e8 RBP=ffff88800ee39b40 RSP=ffff8880131ff5e8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffff88806ce3e0e0 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812e35cc RFL=00000817 [-O--APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa2319768c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4eba92a260 CR3=000000000c530000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=732e747079726362696c2f756e672d78 XMM02=00312e6f732e747079726362696c2f75 XMM03=6e672d78756e696c2d34365f3638782f XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080000001 RBX=ffff888008d1fa78 RCX=ffffffff8113c4da RDX=ffff888008c50000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffffff8615d9de RSP=ffff888008d1f9f0 R8 =0000000000000001 R9 =0000000000000004 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=ffff888008d1fdf0 R14=ffff888008d1fde8 R15=0000000000000001 RIP=ffffffff814d913b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007faab47e7900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562944725218 CR3=000000000c466000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000069767265732e6873 XMM02=ffffffffffffffff0000000000000000 XMM03=00656369767265732e6873732f656369 XMM04=00000000000000020000562944758e30 XMM05=00000000000000000000000000000000 XMM06=697665642e3030323a306963682d3069 XMM07=00000000000000000000000000000000 XMM08=00000000000000510000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000