@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x49}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8011}, 0x40080) 06:27:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x200, 0x0, 0xffffffff}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_cig_params={{0x2062, 0xf}, {0x0, "eb10cf", "9b3432"}}}, 0x13) 06:27:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x4c2, 0x10001, 0xfffffffd, 0xfdc0}, 0x10) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e832aaf9e7e07d7af72b95c3d913a2032234d603556fc6ae8047915ba45be3f2"], 0x6) 06:27:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="011220"], 0xb) 06:27:38 executing program 0 (fault-call:2 fault-nth:39): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0162fa855d200f00eb10cf9b34320000000000"], 0x13) 06:27:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r2}) 06:27:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)=0x8) 06:27:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="011220"], 0xb) socket$inet6_udp(0xa, 0x2, 0x0) 06:27:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xb) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x94, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x418800, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000140)={@none, 0x7f, 0x1, 0x80000000}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000180)={0x80000000, [0x4a, 0xfff]}, 0x10) 06:27:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xffff5ef5, [0x6, 0x8], 0x1000}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x2) [ 2700.639937] Bluetooth: hci4 command 0x0401 tx timeout 06:27:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01fc4a13a1eb01009b34320b01000000000000"], 0x13) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x204080, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000140)) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', r4, 0x0, 0x2, 0x6, 0x8001, 0x55, @local, @local, 0x80, 0x20, 0x1, 0x40}}) 06:27:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="213260d48a9b536154466a0b05b589d7890404b5dafc3b568405ed4e7108e7eb7cfb9fb588e9a44a918a957384af48cfce9a4479a858cf74d2e99ec29e9dadbac19c2012f256c7d8127a46d997bcb2965e1985e9b8c54036159ce7393ebf7abb6f09bd"], 0xb) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "a898231a76dbd6034c6ca998b6b2f5a8fcc86a3c88b3cdf6aa5b1878cc9545a84faebf1b1d44f2d27aa41936869ea7d708da659b2b3001d85e80a8d341bca02be8fee60eb4f9be23cb6eace5a693d01fd8f73f8738ea02e7e18491e6de56a983fc1412e24484ad7c62ca22140fdabe9ae8a6936d380e0c887f0d8b36b8c1d0810f349af9a4143f9f91ac87f5ba79a460c98dcb1769e054fc90f8a4c7cdc50b7b55a55ae27bf2c7922e9de71edfa7a7ad360de532b5dc965b76ba13f874e950e5e1e54a2b4ad88528a9d6fb384b1b33ab220fe89e5215cee49931c3d130b96e044a92040ddd1820570ee5cd9431b91489af840f9551cfd2d3d0f72c7d156174d2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5}}, 0x128) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x2, 0x2}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r7}}, 0x128) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x20) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x6, [0x9], 0x2}, 0x10) 06:27:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0162202a00eb10cf9b34320000000000001d03400104820002fe650685cdee0300400718ff07001009000b3400ff"], 0x2e) 06:27:38 executing program 4: ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01c228536196252c81"], 0x6) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000080)) 06:27:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x5}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @create_conn_cancel={{0x408, 0xfffffd1d}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) 06:27:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="011220"], 0xb) 06:27:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff}, 0x6) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0xb) 06:27:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x200, "cd9e83", 0x1, 0x8}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0xffffffffffffffc4) 06:27:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:38 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0162200f00eb10cf9b34320000000000800000"], 0x13) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000040)={r2, 0x2}) 06:27:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4002800) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000040)={r0, 0xcd}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000040)={0x1a, 0x1}) write$bt_hci(r0, &(0x7f0000000280)=ANY=[], 0xb) 06:27:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], 0xb) 06:27:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r9, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r10}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0xf4, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004050}, 0x6ef9c1e42b3d87de) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x54, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x240}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7b}]}, 0x54}, 0x1, 0x0, 0x0, 0xba98df59307ffe7a}, 0x8000) socketpair(0x1f, 0x9, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r11, 0x0, 0x2, &(0x7f00000000c0)={0x401, [0x101, 0x100], 0x8000}, 0x10) write$bt_hci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x6) 06:27:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0114351e29d975ea0000f32e8907f33ea87e58000000000000000000000000fc3f26b61f43f1d8d7dfca733327c3e273678e77e975b6d1ddfbf891ac3c98ee65a2af38312360ef6f58277643ba20c10de11740eb3d06c910cefcd3946bdcc9cd7cc7097f415dac40"], 0xb) 06:27:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000400"/19], 0x13) 06:27:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c6fb7e63120"], 0xb) 06:27:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000000)="06943cb582c06820f3899889e2647cccd889cd82a2d04da6227bc79c77b6f0d21c9450126a25b5b8ebf146b2b17346888c77027a4825f4038f6147342173734a2f3e627dfa0b09afd2b7fd23beb5dd63610e02f82ab0c1fb6eafbf8a9cf06f9b9e33a31fe18e5725aff030d1b9d4e409d2dc2949a77f4163d336a5d08207d1efc711a7c5d2be98f0d8377ddd006eb15c248980eb6b79af696c235e96c67534eeb531624b43134b8769f970acf965b4d65f9b2703f69ed6373d1f018e0da2368c82ecdf094fee720a23bbbb3a2cd0e34dafca7449252cd176") write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0xb) 06:27:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f00000000c0)="d6ec801e4bf53d77db3c9b717775b8af39aa5c5441f34b82a63aae1f62a7aa5c0404290c723b14921dd77f5d48ece5adfce2a73738fda5e7f9902f41f503b2c4bd0de53aecb21b741ca54b8e8d6d2d8d270bb9974fd11860c2f1219f1ec5aca88e2f93fc29b0a14906a14a30395699b52b2d68a60972934c50c5da876dfcd70843fb05b532e8c6d91983ac58c8cab475952901a82eaa") write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="67e13256fb149a8c24c122e6"], 0x6) 06:27:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe8, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0xa0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8055) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x2, 0x28, "9d1493", 0xfb, 0x1}) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) 06:27:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0xadc6, [0x70d, 0x5], 0x8}, 0x10) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0162200f00eb10cf9b3432000010000000000128af72c814a2b401419da2d7b06b770000fc4a6f75f1edb2103381c46cd1373fd95d46583b5e81723d5775443534f341daca8cce080f21dc9e0900"/89], 0x13) 06:27:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="e56f840ea0f9c0011220"], 0xb) 06:27:39 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = socket$inet6(0xa, 0x3, 0xfff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x3f, 0x9, 0x1, 0x5c, @private2, @dev={0xfe, 0x80, '\x00', 0xb}, 0x1, 0x20, 0x8, 0x1}}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:39 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x128) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x1}}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="01918d44bacd587ee8be6d9df0737b1f9d3598c9ac6aff7f3b7d5d815cb1db0c3d2e675bee509a80673e7e07be14839de6c4b49c32af9d5521ff6f5b4f4de16e9ceb"], 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000400)={0x1, 0x10, 0xfa00, {&(0x7f0000000280), r3}}, 0x18) 06:27:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:39 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4a8000, 0x0) sendmsg$can_raw(r1, &(0x7f0000000300)={&(0x7f0000000180), 0x10, &(0x7f0000000200)={&(0x7f0000000280)=@canfd={{0x4}, 0x1d, 0x3, 0x0, 0x0, "7b37e9f21e2872b6e0b704397356abdc7f30e0f5a862c6ee97908b8f61528c2cb260aff92202e3cfb0df48f84cb4bee76ec5a03f563d8afbf59ee9e8f382c8ea"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0xc020) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf250b00000008002c00c22d000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x2004808c}, 0x2000c804) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000340), 0x4) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_cig_params={{0x2062, 0xf}, {0x0, "eb10cf", "9b3432"}}}, 0x13) 06:27:39 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x9}, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0162200f00eb10cf9b34320000000000000000"], 0x13) socketpair(0x1d, 0x1, 0xff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4) 06:27:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0xb, 0xa, 0x800, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="011220"], 0xb) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f00000001c0), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x4, 0x0, 0x1, 0x1}, 0x14, 0x3, 0x0, 0x0, "1c3c475ba68133bb71e931df60f6b45431dab07cafb363ff14d5002a1d38e326f444b6b26679a18f8f5dd11b1621cce1b3cf443d1e58387e8e795047202514da"}, 0x48}, 0x1, 0x0, 0x0, 0x4020}, 0x48090) [ 2701.359915] Bluetooth: hci1 command 0x2012 tx timeout [ 2701.599825] Bluetooth: hci2 command 0x0401 tx timeout 06:27:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 06:27:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8ed09cf7919e"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb3fc}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1a18}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x2f52f81816c5252e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0xb) 06:27:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1e, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0111009f09d2136792e55ff5607c261d299622b246b17e94d03bc8423420456f00000000000000000000000000000000007fc4369ef5b13e95"], 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000380)={@private0}, &(0x7f00000003c0)=0x14) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040026bd7000fcdbdf250f000000050038000000000008000300", @ANYRES32=0x0, @ANYBLOB="bd5feb7c64a67fa31e1e932942e7ba5685084680f06789f145442716c30b1e742d7ef8cd714adc267100"/53], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r9}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r7, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x10) 06:27:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000280)=ANY=[], 0xb) 06:27:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="4d8192f20bf7bfc142c21728225aa7756b0c2a34faeaa97ac8273e455cb4d59841f9cbc8cc15cde26d7b574f2aea452b71b0f29db735f0ab6a8d58cc7f7063c12aa14112f0aee982d77f889694c415db4395dac6e089fd4f20f35e53b212c2b9732f799c66012fedf0cf0e561ce037b246ded51b0e356fa0073564320e328c352b3b59ab00a48de6f00100b93e794fd10fe1a6504ef252c8cd11a6edb91d2423e62a20fe5ffdd1faa6229638b806a8b248c972f277c6f0c9224f240f142c18675d97ac8008848feb7b2a78374dde51aab2e135998c385d4bbdec497f7c3ffac5d4209aa1de93"], 0x13) 06:27:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0102209139077c2070bda04b6583caddfad19e5eb2f5c5907ec144bfa9989a5fbdbf5c816efb9e0a339d5d494dec54efac86d6075f81679bd00b75971dc38a46e7f394841396f9"], 0xb) 06:27:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_set_cig_params={{0x2062, 0xf}, {0x0, "eb10cf", "9b3432"}}}, 0x13) 06:27:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4ee600, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0xb) 06:27:40 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x0, 0x3, 0x3, 0x0, 0x30a3}, 0x1000, 0x2, 'id0\x00', 'timer0\x00', 0x0, 0x5, 0x1, 0x401, 0x75}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0162200f00eb10cf9b34320000000000000000df9a931bc30fbfe03e77ca5d658c662d4ee53927bea28f2958e845acdd83a525f5c48ddfffc2faa85c407c473f651a2abd8573cd35d0584bc4a8083efb8ac35f30e5c5ca32c0dc5156c85ca56ab3165875646e33bb55800373c09f034d339383455d3ee8253f4fff97aca6022ef04b6b1e5498cf7642cb4a46400eff6024fcbf8c1f47a9c64ce3b5951304dbeffc1ad2e9369006e0721cb46069389c51b4df928598463f0786b47f6c8ef87362aee11fbf"], 0x13) 06:27:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="f7136f1d08"], 0xb) socketpair(0xfdd2d4ad290f06ba, 0x800, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @xdp={0x2c, 0x7, 0x0, 0x3d}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0xffff, 0x9}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 06:27:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0xfffffffffffffffc, 0x20000014) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x2, 0x1, "e0548b", 0x1, 0x3}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000380)={{0xffffffffffffffff, 0x3, 0x1f, 0x3, 0x9}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r4, 0x200, 0x70bd2c, 0x25dfdbf8, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8b}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0xb) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x28140, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x11) 06:27:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0162200f00eb10cf9b34320000000000000000c4822edd13f3305229efc5d26fac23c66bb11bdbc2cea4a8e093ebe93802769af441302d25346e71a2359c5f748d4aa33ff00c330fc0a61b612bed1c87f6b067f7b06e5542f2eb4509636c232f757d6da826ce67146f5a5dc87e2f07b9b14c7d955b4b813f4427bb1437f19a1a7430853a7011169a76c110f31354a4b0350576c505903e2cc3982012dd5ffbb249247f13dfe78fa6730f969660fae586c01734e123000000000000000000000000000000009ff4fce59eada668e953f9bdc9f8b5e43dd39780e9598c3435c9a4719792f4e9690e645f6e632ae6eaeb4669f0b86c00000000", @ANYRESOCT=r0, @ANYRESHEX, @ANYRES16], 0x13) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0xc) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/38, &(0x7f0000000040)=0x26) 06:27:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000001380)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x40, 0x0, 0x6}) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="011220"], 0xb) 06:27:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x1d, 0x6, 0xfff, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x3, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000100)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc9, 0x8e6d, 0xc81, 0x1, 0x101, 0x8000, 0x5ec1}}}, 0x12) socketpair(0xf, 0x800, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000080)="625e7032ba25046033afb493693abb74cc1cd9857c77facb6867af9c4a06197756cfeebda221579d1828bf71fca38693ae1de5b9b9aaa65d036afc66f13e1116cce1a29b") 06:27:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80d4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000080)={r2, 0x5}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000200)={0x1, @write_auth_payload_to={{0xc7c, 0x4}, {0xc8, 0x8}}}, 0x8) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="011220"], 0xb) 06:27:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="015104150affffffffff03001e5d5cc19e221582ff03030600"], 0x19) 06:27:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) 06:27:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) socketpair(0x8, 0x4, 0x7fffffff, &(0x7f00000005c0)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3], 0x13) 06:27:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 2702.719761] Bluetooth: hci4 command 0x0401 tx timeout 06:27:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES64=r1], 0xb) 06:27:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) write$bt_hci(r0, &(0x7f00000001c0)={0x1, @pin_code_reply={{0x40d, 0x17}, {@any, 0x3f, "68d818a61cac4c1724278b52cf587f17"}}}, 0x1b) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@broadcast, @in6=@local}}, {{@in6=@private1}, 0x0, @in6=@private0}}, &(0x7f0000000180)=0xe8) 06:27:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048040}, 0x1) 06:27:41 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x2, 0x0, 0x8001, 0x2, 0x3}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000000)={0x400, [0xffffffff, 0xc14], 0x9}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x0) ioctl$sock_bt_hci(r4, 0x400448e1, &(0x7f0000000180)="868d9293e3336de3a60e566a06b5372f6cdf266d1dd471f489c57ebaef485d663c4f723358efcb8684dc58") ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f00000000c0)="ce033b0d43cbd3f0ea3ab6164de61d8dfd7ffdf3a3fbe386f7fa40f94df3ae42dcd6f5a52968b0afcde2e1fd48b51685d6dca61653de4f74d2b9558997caf70495483e0dd8b47208942a8d3ed0eb6750246ed0e5e61d16d7366122f7bcb9765b44629bb28d681460fe7f299f739a7fde47e7687df0a8ded0280fd56c8fb08c18f0f72337ae49") 06:27:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0xfffffffffffffdd8) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0162200f00eb10cf9b3432a529bbeccdc8e83a765800000000000000009a0e21eea150df8aba51a32a2998a501e44c5513872d4bcc520d69"], 0x13) 06:27:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x13) 06:27:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, @nfc={0x27, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000040)='caif0\x00', 0x1000, 0xffff, 0x1f}) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000100)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@any, 0xff}}}, 0xb) 06:27:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000080)="6521d0cf324994a12c3549897390b8f6d8bc85f4c3f93168fa7c347dcac48956a9419fcc4f52f1620b50b03a53a457c64258fd2a2751e1a2f1ca85fa1bc3e6e396700f55613c490948741405508479e5ca37ac490cbb57e61c0fa95fa401b47fbe2beb9aac72944e1c5e6f2b3458ec7be5ce89068891d603") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[], 0xb) 06:27:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair(0xa, 0x3, 0x69e7, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x7, 0x2}, 0x6) 06:27:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe83}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffc}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r4, &(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRES64], 0x13) 06:27:41 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) socket$netlink(0x10, 0x3, 0xe) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="e68301"], 0xb) 06:27:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_remove_cig={{0x2065, 0x1}, {0x85}}}, 0x5) 06:27:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x1, 0x1, 0x8, 0x0, 0x4dd2}, 0x1f, 0x7fff}) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="011220"], 0xb) 06:27:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0xfffffffffffffe4b) 06:27:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_cig_params={{0x2062, 0xf}, {0x0, "eb2e04", "9b3432"}}}, 0x13) 06:27:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) r2 = socket$inet(0x2, 0x4, 0x4) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@remote, @in=@remote}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) 06:27:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='!'], 0xb) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xfc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xebe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x837e}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b595282}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x347a0f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d56}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39de3f31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x159afce0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58e9cfaa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a30}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15b9299d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x520bc061}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c2a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5309}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40eb6afc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c7a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x476e4a50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a3e5e61}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008085}, 0x404c851) 06:27:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)={r0, 0x6}) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="011220"], 0xb) 06:27:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_cig_params={{0x2062, 0xf}, {0x0, "eb10cf", "9b3432"}}}, 0x13) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7a3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x2}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x60d4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0xa5}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x4d2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xfffffff8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d0}, 0x51) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x2, 0x4) 06:27:41 executing program 0: sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f00000000c0), 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xa8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa8}}, 0x8004) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@rand_addr, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6a}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000044) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000780), 0x109000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000640)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'veth1_virt_wifi\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'bridge_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x110, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x20040010) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) [ 2703.439921] Bluetooth: hci1 command 0x2012 tx timeout 06:27:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x48000000, 0x4) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0xb) 06:27:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)="bcfef8a8c0c568e15bb872061d0d9d31d149a72ef140c174bf185a59aa93af91281666ab14eb7d6300aab9414c300bc13e27378c3830c7df97cb2675fee23a0d52e0b74a33f016c15fe765d5e4bfd3d000fbddb6f626359778721c51d049276cd20e131157abcb143478b0b57c7e20b89862c305e5cbd1d7513ed79dbcca0ebd9d2248fdbc0c9ce08ca96612c9b1888375df89a5a3252540938504c7669a1dfc13c3098c7e0a189480644766d5891557199ec1d0dd5b6e04d881e31629d9798ffc74b68dd295a0b174085014e141912dd16ebcd370f786") bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="011220"], 0xb) 06:27:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0xb) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 06:27:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) socketpair(0x1a, 0x6, 0x3, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) 06:27:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x48010) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011184020000"], 0x6) 06:27:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0162200f00eb10cf9b343200000000008f1400e7eb687247ed652c5c6832c5706f9e6067ee7814bd2fc5ede240a0ac8b0265fcbd9480071aba18b0f5fac2a172b6adae1a287978a613cb209234010cb62c9643fa7d35c1e6b16c7646944371a7b8"], 0x13) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000040), 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x6) 06:27:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="011220dc118d3ba0da636e6134ed5931f13432e849f21ced9a77bbd86cdbb39fec3b5a4e40"], 0xb) 06:27:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, 0x0, 0xb) 06:27:41 executing program 4: sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f00000000c0), 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xa8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa8}}, 0x8004) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@rand_addr, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6a}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000044) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000780), 0x109000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000640)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'veth1_virt_wifi\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000940)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'bridge_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x110, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x20040010) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x13) [ 2703.679660] Bluetooth: hci2 command 0x0401 tx timeout 06:27:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, 0x0, 0xb) 06:27:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0162200f00eb10cf9b343200000000008f1400e7eb687247ed652c5c6832c5706f9e6067ee7814bd2fc5ede240a0ac8b0265fcbd9480071aba18b0f5fac2a172b6adae1a287978a613cb209234010cb62c9643fa7d35c1e6b16c7646944371a7b8"], 0x13) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000040), 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x6) 06:27:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], 0xb) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0x81, 0x4, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x74f, 0x40, 0x0, 0x1}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x20000880) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:27:41 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x0, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={0x0}}, 0x200400c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000480)={0xb, 0x10, 0xfa00, {&(0x7f0000000240), r5, 0x4}}, 0x18) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}}, 0x8080) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0162200f00eb10cf9b34320000000000000000b3e0bbdd56c1f78a39e0c6d9d8e6ac24d41897864dfc13922d2cbbefe737889b71fe7ee543bbea93aff01deb13c09a000524bb4afb8820f9d221d5803635608b7065eb8cb69be307af478481229c8b01314f79c27844d3b48f6f2339b7e81a3aa7794c86064b8eb28d05b089f68e51a65b23ff9007ef8189ebcea38f9093b8c49997380cf6bf363d09c17d954c6097bf27208d10465a1fdb5327286bea9cd1940c3040a166ac06"], 0x13) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) 06:27:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, 0x0, 0xb) 06:27:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair(0xa, 0x3, 0x69e7, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x7, 0x2}, 0x6) 06:27:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)={0x1, 0x0, @b}, 0x48, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf251600000005000200fe00000040000180080003000200000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000004c000180140002007665746830000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="1400020073797a6b616c6c6572310000000000000800030000000000080003000500000008000100", @ANYRES32=r7, @ANYBLOB="05080444aef519a04136660f00000000000500030000000000"], 0xb8}}, 0x4004000) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="011220"], 0xb) 06:27:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0xb) 06:27:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xb) 06:27:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) socketpair(0x1a, 0x6, 0x3, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) 06:27:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) socketpair(0x1a, 0x6, 0x3, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) 06:27:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0xb) 06:27:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x0, 0x8, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x700, 0x40, 0x3, 0x1000}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@mcast1, 0x0}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x8, 0x10, 0xaea, 0x7fffffff, {{0x6, 0x4, 0x0, 0xe, 0x18, 0x65, 0x0, 0x81, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x16c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8080}, 0xc080) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x4) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xb) 06:27:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xb) 06:27:42 executing program 1: ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2f, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0xb) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:27:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80d4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000080)={r2, 0x5}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="f7136f1d08"], 0xb) socketpair(0xfdd2d4ad290f06ba, 0x800, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @xdp={0x2c, 0x7, 0x0, 0x3d}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0xffff, 0x9}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 06:27:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/165, 0xa5}, 0x10020) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0xb) 06:27:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b85534bd1138cb649ebd0414309a030969edb462f597de734eb67f7d81a71d6bc5746962061919e751db5cfc2ffec2820dd10168663a354d6c85330b93b19"], 0xb) 06:27:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) 06:27:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe8, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0xa0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8055) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x2, 0x28, "9d1493", 0xfb, 0x1}) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) 06:27:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="213260d48a9b536154466a0b05b589d7890404b5dafc3b568405ed4e7108e7eb7cfb9fb588e9a44a918a957384af48cfce9a4479a858cf74d2e99ec29e9dadbac19c2012f256c7d8127a46d997bcb2965e1985e9b8c54036159ce7393ebf7abb6f09bd"], 0xb) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5}}, 0x128) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0), 0x2, 0x2}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "a898231a76dbd6034c6ca998b6b2f5a8fcc86a3c88b3cdf6aa5b1878cc9545a84faebf1b1d44f2d27aa41936869ea7d708da659b2b3001d85e80a8d341bca02be8fee60eb4f9be23cb6eace5a693d01fd8f73f8738ea02e7e18491e6de56a983fc1412e24484ad7c62ca22140fdabe9ae8a6936d380e0c887f0d8b36b8c1d0810f349af9a4143f9f91ac87f5ba79a460c98dcb1769e054fc90f8a4c7cdc50b7b55a55ae27bf2c7922e9de71edfa7a7ad360de532b5dc965b76ba13f874e950e5e1e54a2b4ad88528a9d6fb384b1b33ab220fe89e5215cee49931c3d130b96e044a92040ddd1820570ee5cd9431b91489af840f9551cfd2d3d0f72c7d156174d2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r7}}, 0x128) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x20) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x6, [0x9], 0x2}, 0x10) 06:27:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c"], 0xb) 06:27:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 06:27:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) write$bt_hci(r0, &(0x7f0000000080)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc8, 0x401}}}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 06:27:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0xb) 06:27:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff6c551a441420341f20218c5c80d77dcd499ded4ebad457102a885410c9814b"], 0xb) [ 2704.799615] Bluetooth: hci4 command 0x0401 tx timeout 06:27:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="011220"], 0xb) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)=0x38) 06:27:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)=@isdn, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/96, 0x60}, {&(0x7f0000000340)=""/100, 0x64}, {&(0x7f0000000680)=""/203, 0xcb}], 0x3, &(0x7f00000003c0)=""/25, 0x19}, 0x2002) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x7ff, 0x20, {{0xa, 0x4, 0x1, 0x6, 0x28, 0x67, 0x0, 0x3f, 0x2f, 0x0, @multicast1, @multicast1, {[@noop, @generic={0x82, 0x4, '$C'}, @timestamp={0x44, 0x8, 0xbf, 0x0, 0x5, [0x0]}, @ssrr={0x89, 0x7, 0x7e, [@local]}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5389ef4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4880}, 0x4090) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r6}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xb14}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x8}, @ETHTOOL_A_COALESCE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x5}, @ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8040}, 0x14835) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000480)={'sit0\x00', r6, 0x2f, 0x8, 0x80, 0x6, 0x40, @dev={0xfe, 0x80, '\x00', 0x18}, @local, 0x40, 0x7, 0x9, 0x7}}) 06:27:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0xb) socketpair(0x15, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) 06:27:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c"], 0xb) 06:27:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00'}) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0xb) 06:27:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x800, 0x20, 0xf0, 0x300, 0x1, 0x400, 0x18, 0x0, {0xb19, 0x1}, {}, {0xd6c, 0x10001, 0x1}, {0x1, 0x1, 0x1}, 0x2, 0x40, 0x5, 0x3, 0x0, 0x81, 0x1f, 0x6, 0x20, 0x400, 0x1, 0x518, 0x2, 0x200, 0x0, 0x7d8b12df9d0935db}) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0xb) 06:27:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="07ae102ef5d8efad9e4a671935bbdf717e301529aaa309c3fa5f6a511fddf494255e99fbacc692962b5694a06eae37777a4d88d2bde923552c97e3cd53cb7956d6c219721bfc8b44c64ecc5ebbb91f"], 0xb) 06:27:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x800, 0x20, 0xf0, 0x300, 0x1, 0x400, 0x18, 0x0, {0xb19, 0x1}, {}, {0xd6c, 0x10001, 0x1}, {0x1, 0x1, 0x1}, 0x2, 0x40, 0x5, 0x3, 0x0, 0x81, 0x1f, 0x6, 0x20, 0x400, 0x1, 0x518, 0x2, 0x200, 0x0, 0x7d8b12df9d0935db}) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x3, "a0293c", 0x81, 0x80}) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="012e7a00ff7c8879fd09cc7fb379ee58d41bcc540f1c039e716c682f03b4000000000000121abe9bf19cbbfed7672c174631b66e9a575208005eeca3002bea763866219090323ef0f8811bf7f62ff695b5bfa2c3b2236b091798fded5a3770ec2b6fd1ebcbec375313d9c6d065869d17c02e7ff743f2cfbc2e644b6c626325fbeb26ba1b73485b41b8d5e3d2dd69ba28b2e7aca87645cc6a2e7cb41b1f0f74233c92451d50ca84731650ad40a5e3098f3a6422515b9d387485640d5c6ded908c4f611d0332503c12"], 0xb) 06:27:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0xb) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) 06:27:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0x2, 0x2}, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000080}, 0x4004011) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r9, 0x80045400, &(0x7f0000000240)) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r8, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 06:27:43 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x3, "a0293c", 0x81, 0x80}) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="012e7a00ff7c8879fd09cc7fb379ee58d41bcc540f1c039e716c682f03b4000000000000121abe9bf19cbbfed7672c174631b66e9a575208005eeca3002bea763866219090323ef0f8811bf7f62ff695b5bfa2c3b2236b091798fded5a3770ec2b6fd1ebcbec375313d9c6d065869d17c02e7ff743f2cfbc2e644b6c626325fbeb26ba1b73485b41b8d5e3d2dd69ba28b2e7aca87645cc6a2e7cb41b1f0f74233c92451d50ca84731650ad40a5e3098f3a6422515b9d387485640d5c6ded908c4f611d0332503c12"], 0xb) 06:27:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x800, 0x20, 0xf0, 0x300, 0x1, 0x400, 0x18, 0x0, {0xb19, 0x1}, {}, {0xd6c, 0x10001, 0x1}, {0x1, 0x1, 0x1}, 0x2, 0x40, 0x5, 0x3, 0x0, 0x81, 0x1f, 0x6, 0x20, 0x400, 0x1, 0x518, 0x2, 0x200, 0x0, 0x7d8b12df9d0935db}) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xb) 06:27:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x3, "a0293c", 0x81, 0x80}) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="012e7a00ff7c8879fd09cc7fb379ee58d41bcc540f1c039e716c682f03b4000000000000121abe9bf19cbbfed7672c174631b66e9a575208005eeca3002bea763866219090323ef0f8811bf7f62ff695b5bfa2c3b2236b091798fded5a3770ec2b6fd1ebcbec375313d9c6d065869d17c02e7ff743f2cfbc2e644b6c626325fbeb26ba1b73485b41b8d5e3d2dd69ba28b2e7aca87645cc6a2e7cb41b1f0f74233c92451d50ca84731650ad40a5e3098f3a6422515b9d387485640d5c6ded908c4f611d0332503c12"], 0xb) 06:27:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xb) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:43 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r3) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)="48761218615dc22e573fffb9747e") 06:27:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x800, 0x20, 0xf0, 0x300, 0x1, 0x400, 0x18, 0x0, {0xb19, 0x1}, {}, {0xd6c, 0x10001, 0x1}, {0x1, 0x1, 0x1}, 0x2, 0x40, 0x5, 0x3, 0x0, 0x81, 0x1f, 0x6, 0x20, 0x400, 0x1, 0x518, 0x2, 0x200, 0x0, 0x7d8b12df9d0935db}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x3, "a0293c", 0x81, 0x80}) 06:27:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:43 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:43 executing program 0: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000323272dd95bcf320b14a049396172ce497063f50a3616d5adaa14372d63a41cd3788e34c63562772176487ff7eea19481c1f93bf17bd", @ANYRES16=0x0, @ANYBLOB="100028bd7000b459f12bdd5ffddbdf250b00000005002a000000000008003100000000000800"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5d8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004010}, 0x400f000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7b9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) socket$inet6(0xa, 0xa, 0xa) [ 2705.519964] Bluetooth: hci1 command 0x2062 tx timeout 06:27:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) 06:27:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x800, 0x20, 0xf0, 0x300, 0x1, 0x400, 0x18, 0x0, {0xb19, 0x1}, {}, {0xd6c, 0x10001, 0x1}, {0x1, 0x1, 0x1}, 0x2, 0x40, 0x5, 0x3, 0x0, 0x81, 0x1f, 0x6, 0x20, 0x400, 0x1, 0x518, 0x2, 0x200, 0x0, 0x7d8b12df9d0935db}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='a'], 0xb) 06:27:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x800, 0x20, 0xf0, 0x300, 0x1, 0x400, 0x18, 0x0, {0xb19, 0x1}, {}, {0xd6c, 0x10001, 0x1}, {0x1, 0x1, 0x1}, 0x2, 0x40, 0x5, 0x3, 0x0, 0x81, 0x1f, 0x6, 0x20, 0x400, 0x1, 0x518, 0x2, 0x200, 0x0, 0x7d8b12df9d0935db}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:27:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0"], 0xb) 06:27:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], 0xb) 06:27:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) keyctl$dh_compute(0x17, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={'sha1-ssse3\x00'}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000080)=""/145, &(0x7f0000000140)=0x91) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:43 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) [ 2705.759532] Bluetooth: hci2 command 0x0401 tx timeout 06:27:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:27:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:43 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:43 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:43 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:44 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:44 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:44 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:44 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000214010029bd7000ffdbdf250900020073797a32000000000900020073797a3000000000050054000000000008004400", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x40}, 0x1, 0x0, 0x0, 0x20004081}, 0x800) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x80101) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r5}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x144, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008050}, 0x4004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101900, 0x0) 06:27:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:44 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='I'], 0xb) 06:27:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:44 executing program 0: ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:44 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xdfff, 0x2}, 0x6) 06:27:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='I'], 0xb) 06:27:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 06:27:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='I'], 0xb) 06:27:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 06:27:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x894) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000001380)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) 06:27:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:44 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 06:27:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 06:27:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:44 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:44 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xec93775ded366865}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) 06:27:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:44 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:44 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:44 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="011220"], 0xb) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x2, 0x4) 06:27:44 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000400)={@private0, 0x0}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x118, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x48001}, 0x40010) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_set_adv_set_rand_addr={{0x2035, 0x7}, {0xbf, @none}}}, 0xb) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40011) 06:27:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:44 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000040)={0x0, 0x58a}) 06:27:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x3f, 0xa5, "114194", "29925d", 0x9, 0x20, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x81, 0x3c, 0x5, 0xf9, 0x0, 0x0, 0xf4}}}, 0x1d) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="011220"], 0xb) 06:27:44 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x800, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x128) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, r3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r6}, 0xfffffffffffffde7}}, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x58}}, 0x4) 06:27:44 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:44 executing program 3: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x85de798c}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40011) 06:27:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x0) 06:27:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) [ 2706.879687] Bluetooth: hci4 command 0x0401 tx timeout 06:27:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 06:27:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) socket$inet6(0xa, 0x80000, 0x3) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000040)=[0x200], &(0x7f0000000080)=[0x0], &(0x7f0000000140)=[0x2, 0x6391, 0x9], &(0x7f0000000180)=[0x6, 0x9c0, 0x7]}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40011) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000200)={0x0, 0xffffffffffffffff}) 06:27:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x0) 06:27:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00000000303200000025592ebc00"], 0x13) 06:27:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 06:27:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x0) 06:27:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, 0x0, 0x13) 06:27:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f0000000900)={'gre0\x00', 0x0, 0x7, 0x7, 0x5, 0x7797, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x65, 0x0, 0x3f, 0x4, 0x0, @multicast2, @broadcast}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000c00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x124, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004801}, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x2, 0x70bd2d, 0x7f, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x20000000) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x30}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x20048003) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 06:27:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x23, 0x5, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x13) 06:27:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x2, 0x4, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, 0x0, 0x13) 06:27:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 06:27:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 06:27:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, 0x0, 0x13) 06:27:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x13) 06:27:45 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x40011) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, r3, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x20004000) 06:27:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) 06:27:45 executing program 0: socket$netlink(0x10, 0x3, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}}, {0xa, 0x0, 0x5, @remote}}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES16=r3, @ANYRESDEC, @ANYRESOCT], 0x3) 06:27:45 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1402, 0x2, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x8040) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="a77c1737d0980157011220"], 0xb) 06:27:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x13) 06:27:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{@fixed}]}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x100, 0x4) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0162200f00eb291bc015320000000400000000"], 0x13) 06:27:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$sock_bt_hci(r1, 0x800448da, &(0x7f0000000040)="fd8f087ba6369c52f393502b44871683fad52d4f02d085e4763ad0ba067eb9ea3c41f7366647fc07c51985fd59ec248f540976adf37439d14422762af5e5dc5082af3d5948997daf4e98067b859e8700fef5f79e44ad64382b7b22296a297b7cb91cbe9b017c107ca55c85aa29f1c5888477e41b682b66e8d0112abe58e9a6e1ecefdecbf94f9728639756d86a75afe691d8277ffee9f2341490a63d438b2eedb26eb994d083bdf021423caffa8a664b17c1d00d3e8fbff520a795d53599104dbab4271f9a233faa6fc6d6318ffbd054726d53a8") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) 06:27:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40011) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r6}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r9}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r12, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r13}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="000325bd7000fddbdf251700000014000180080003000100000008000300010000003c0001800800030000000000140002006970366772653000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="140002007866726d3000000000000000000000000c00018008000100", @ANYRES32=r6, @ANYBLOB="5800018014000200726f736530000000000000000000000008000300000000000800030002000000140002006970366772657461703000000000000008000300010000001400020076657468305f746f5f7465616d00000030000180080003000300000008000100", @ANYRES32=r9, @ANYBLOB="140002006261746164765f736c6176655f30000008000100", @ANYRES32=r10, @ANYBLOB="3c0001800800030000000000080003000000000014000200677265300000000000000000000000001400020073797a6b616c6c6572300000000000002400018008000300010000000800030000000000080003000300000008000100", @ANYRES32=r13, @ANYBLOB="280001800800030002000000140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="4c000180140002007465616d5f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000500001800842fe211f000000140002006261746164765f736c6176655f3100001400020076657468315f766972745f776966690014000200697036677265746170300000000000000800030002000000"], 0x21c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 06:27:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'syztnl0\x00', r3, 0x8000, 0x10, 0x9, 0x3f, {{0x1c, 0x4, 0x0, 0x7, 0x70, 0x64, 0x0, 0x0, 0x2b172ab81f2d9d3, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x7, 0xd, [@dev={0xac, 0x14, 0x14, 0x40}]}, @end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0xfd, [@empty, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x36}, @dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp_addr={0x44, 0x2c, 0xa1, 0x1, 0x8, [{@remote, 0x10000}, {@remote, 0x1}, {@local, 0x6}, {@multicast2, 0x5}, {@remote, 0xb0e}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="a11220"], 0xb) 06:27:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x13) 06:27:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000180)="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") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000000)=0xa8c, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1005}, 0x6) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x2) write$bt_hci(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="04842a8fbccea94e7d9c88c212cb829053e57b603ddcbf2c8dcb28d3d7f6b58089c0031649cd98f2d8c4895487328d6e97f5f89e42616bf9d5f47e6ee2e4ab044812089f1e169b7a83fc1950f7c68bf8070bd45d75a663dbbfbbfcf8665b57c858df4413bedc282677fc4b94be033333d82b5107a90f5fb881734d348572b6f9628b95b680176859dd"], 0xb) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000280)={0x4, 0x0, "26a400", 0x0, 0x20}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x9, 0x6, 0x38, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, 0x80, 0x700, 0x7ff, 0x401}}) 06:27:45 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x4, 0x7, 0x6}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x8) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x1}, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="3c808215b8c2d6ceb5996e506a283b78c01135855a61c93db9cdb1c9860789f8831dece40e718658eace2c9a66cec3fe240353c535919b96ab1289ac8f3eac27a21529b0c939695dfcd31e91cfa3cf734a07b931b6ab0092062fcc848c7af561ebdc"], 0xb) 06:27:45 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @le_set_cig_params={{0x2062, 0xf}, {0x0, "eb10cf", "9b3432"}}}, 0x13) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0xfffffff8, 0x4) socketpair(0xb, 0x5, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/15, 0xf}], 0x1}, 0x20000140) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x8, 0x7], 0x2}, 0x10) 06:27:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x13) 06:27:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0112022cb3b4e4c46e8bb820"], 0xb) 06:27:45 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) 06:27:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0c1e0dc261d61866fb7fc3fbae2c7ff"], 0xb) 06:27:45 executing program 2 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:45 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4002) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x80, 0x7, 0x8, 0x9, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x64, 0x0, 0xff, 0x4, 0x0, @loopback, @local, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000280)={0x50c, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x270, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-}^\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6c2}, @ETHTOOL_A_BITSET_MASK={0x8e, 0x5, "967d924cc558c04003f9212c0e15f5e84a7f72e154bae4cdc8f65ee9a7bf6018631440b475a8bf1f74f5e4a24218e2a67ccb3433adddb7b6172dd922e6bd487edf873d78edaf4d375445b5c5c6fccbaf92f1b746ca92aa62f36cf1c4c892b90ede5603ab8ace0c42bd65c0d3344370e73e6d17605bf88dbed55ad313e74c5dd590f6128576c461b0eacb"}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffc01}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1c4a5a8a}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_VALUE={0x1d, 0x4, "e4631179c9324a9a6ae192878920d6d9c9c9aded44b3464e64"}, @ETHTOOL_A_BITSET_MASK={0x81, 0x5, "0d89dc8ddb4c651de4dcc5dac6c2f720a0f759cbcf02a495ae200aa4e02581390f90a7ea521b0180cfa80660efe93fc84216012b9e2a65b602aa8b6c2bbf82fea9b44d770f2a5cf56a5cee6fbddf211118e51dd17ba7439195c05d32724e20f602acad21f61b39ba518b35cd9827267176856f0efd35813909957321ca"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xcc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '^\xfb$\\\',&}}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, ':{!\'-&.\'-]+\x98(^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xde, 0x5, "133a50e08157a754d4ca242c749f87444f01d00b6f26606493fe112e74470efecfe912e366df36b73a8376a98bac9086ee2bfc3b5f1590c0eafb96cd060b1a94d968c1b17dafa3e28041ec3ef8e9b29671adb47dc247f9769ffdc59090a046f5ecbea4afc370e42dc643977741087e66a8da2a8462414428fa386d59f78c0eab3d10b84e7c8db2ab144dffe86920d10c348fe115d3953b6d4a17f90daaffc901282b431307705b8cc7d21689c5566fc2a7ae1106a7c1ab64ea5169d7851b62e8063bcc2fa723a82cc23ae2b92ff956b895ffecc3cfcc1ad5dcae"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x50c}, 0x1, 0x0, 0x0, 0x20000081}, 0x8001) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x13) 06:27:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0112022cb3b4e4c46e8bb820"], 0xb) [ 2707.587128] FAULT_INJECTION: forcing a failure. [ 2707.587128] name failslab, interval 1, probability 0, space 0, times 0 [ 2707.600276] Bluetooth: hci1 command 0x2062 tx timeout [ 2707.607266] FAULT_INJECTION: forcing a failure. [ 2707.607266] name failslab, interval 1, probability 0, space 0, times 0 [ 2707.611896] CPU: 0 PID: 4317 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 2707.626535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:27:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0112022cb3b4e4c46e8bb820"], 0xb) [ 2707.637012] Call Trace: [ 2707.639643] dump_stack+0x1b2/0x281 [ 2707.643477] should_fail.cold+0x10a/0x149 [ 2707.647713] should_failslab+0xd6/0x130 [ 2707.651699] kmem_cache_alloc_node+0x54/0x410 [ 2707.656201] __alloc_skb+0x5c/0x510 [ 2707.659844] create_monitor_ctrl_open+0x130/0x630 [ 2707.664695] ? hci_sock_setsockopt+0x5b0/0x5b0 [ 2707.669291] ? security_capable+0x88/0xb0 [ 2707.673441] hci_sock_bind+0x45f/0x1170 [ 2707.677582] ? hci_sock_ioctl+0x690/0x690 [ 2707.681740] ? security_socket_bind+0x83/0xb0 06:27:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) [ 2707.686318] SyS_bind+0x174/0x1f0 [ 2707.689764] ? SyS_socketpair+0x480/0x480 [ 2707.693911] ? wait_for_completion_io+0x10/0x10 [ 2707.698585] ? fput+0xb/0x140 [ 2707.701810] ? SyS_write+0x14d/0x210 [ 2707.705624] ? SyS_read+0x210/0x210 [ 2707.709435] ? __do_page_fault+0x159/0xad0 [ 2707.713681] ? do_syscall_64+0x4c/0x640 [ 2707.718356] ? SyS_socketpair+0x480/0x480 [ 2707.722514] do_syscall_64+0x1d5/0x640 [ 2707.726408] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2707.731597] RIP: 0033:0x4665f9 [ 2707.734782] RSP: 002b:00007fa1fdb09188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2707.742495] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2707.749776] RDX: 000000000000001e RSI: 0000000020000240 RDI: 0000000000000004 [ 2707.757041] RBP: 00007fa1fdb091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2707.764443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2707.773028] R13: 00007ffd665a506f R14: 00007fa1fdb09300 R15: 0000000000022000 [ 2707.788494] CPU: 1 PID: 4318 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2707.796389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2707.805842] Call Trace: [ 2707.808471] dump_stack+0x1b2/0x281 [ 2707.812109] should_fail.cold+0x10a/0x149 [ 2707.816262] should_failslab+0xd6/0x130 [ 2707.820240] __kmalloc+0x2c1/0x400 [ 2707.824563] ? hci_sock_sendmsg+0x83c/0x1c80 [ 2707.828980] hci_sock_sendmsg+0x83c/0x1c80 [ 2707.833221] ? __might_fault+0x177/0x1b0 [ 2707.837431] ? aa_file_perm+0x2dd/0xab0 [ 2707.841417] ? hci_send_to_channel+0x200/0x200 [ 2707.846016] ? lock_acquire+0x170/0x3f0 [ 2707.850231] ? security_socket_sendmsg+0x83/0xb0 [ 2707.855172] ? hci_send_to_channel+0x200/0x200 [ 2707.860172] sock_sendmsg+0xb5/0x100 [ 2707.865204] sock_write_iter+0x22c/0x370 [ 2707.869456] ? sock_sendmsg+0x100/0x100 [ 2707.873934] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2707.879419] ? iov_iter_init+0xa6/0x1c0 [ 2707.883400] __vfs_write+0x44c/0x630 [ 2707.887120] ? kernel_read+0x110/0x110 [ 2707.891025] ? rw_verify_area+0xe1/0x2a0 [ 2707.895090] vfs_write+0x17f/0x4d0 [ 2707.898637] SyS_write+0xf2/0x210 [ 2707.902097] ? SyS_read+0x210/0x210 [ 2707.905725] ? __do_page_fault+0x159/0xad0 [ 2707.910090] ? do_syscall_64+0x4c/0x640 [ 2707.914061] ? SyS_read+0x210/0x210 [ 2707.917694] do_syscall_64+0x1d5/0x640 [ 2707.921587] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2707.926861] RIP: 0033:0x4665f9 [ 2707.930219] RSP: 002b:00007f566c139188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:27:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, 0x0, 0xb) 06:27:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, 0x0, 0xb) 06:27:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, 0x0, 0xb) 06:27:45 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) 06:27:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10080}, 0x8001) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4801) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xb) [ 2707.937923] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2707.944608] FAULT_INJECTION: forcing a failure. [ 2707.944608] name failslab, interval 1, probability 0, space 0, times 0 [ 2707.945184] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2707.945199] RBP: 00007f566c1391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2707.945203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2707.945213] R13: 00007ffcc137bdef R14: 00007f566c139300 R15: 0000000000022000 [ 2707.989464] Bluetooth: hci2 command 0x0401 tx timeout [ 2708.005258] CPU: 0 PID: 4342 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 2708.013089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2708.022579] Call Trace: [ 2708.025170] dump_stack+0x1b2/0x281 [ 2708.028805] should_fail.cold+0x10a/0x149 [ 2708.032948] should_failslab+0xd6/0x130 [ 2708.036932] kmem_cache_alloc_node_trace+0x58/0x400 [ 2708.041935] __kmalloc_node_track_caller+0x38/0x70 [ 2708.046846] __alloc_skb+0x96/0x510 [ 2708.050467] create_monitor_ctrl_open+0x130/0x630 [ 2708.055290] ? hci_sock_setsockopt+0x5b0/0x5b0 [ 2708.059870] ? security_capable+0x88/0xb0 [ 2708.064010] hci_sock_bind+0x45f/0x1170 [ 2708.067968] ? hci_sock_ioctl+0x690/0x690 [ 2708.072112] ? security_socket_bind+0x83/0xb0 [ 2708.076592] SyS_bind+0x174/0x1f0 [ 2708.080038] ? SyS_socketpair+0x480/0x480 [ 2708.084190] ? wait_for_completion_io+0x10/0x10 [ 2708.088841] ? fput+0xb/0x140 [ 2708.091926] ? SyS_write+0x14d/0x210 [ 2708.095619] ? SyS_read+0x210/0x210 [ 2708.099252] ? __do_page_fault+0x159/0xad0 [ 2708.103503] ? do_syscall_64+0x4c/0x640 [ 2708.107495] ? SyS_socketpair+0x480/0x480 [ 2708.111651] do_syscall_64+0x1d5/0x640 [ 2708.115548] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2708.120721] RIP: 0033:0x4665f9 [ 2708.123895] RSP: 002b:00007fa1fdb09188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2708.131686] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 06:27:46 executing program 2 (fault-call:2 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x13) 06:27:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xb) 06:27:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 06:27:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001780), 0x40000, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000280)=0x5, 0x4) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f00000002c0)={0x12a6, 0x0, 0x10001}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012bbd7000fc909127c87972d2447ad6652254dbdf25040000000800030007000000080003"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000300)={@mcast2}, &(0x7f0000000340)=0x14) 06:27:46 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) [ 2708.138952] RDX: 000000000000001e RSI: 0000000020000240 RDI: 0000000000000004 [ 2708.146228] RBP: 00007fa1fdb091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2708.153475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2708.160734] R13: 00007ffd665a506f R14: 00007fa1fdb09300 R15: 0000000000022000 06:27:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f0000000030"], 0x13) 06:27:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 06:27:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000b706006f2b93e5ed810000"], 0x14}}, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x408500, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r4, 0x101}, 0x14}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008884}, 0x840) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r8, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 06:27:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xb) 06:27:46 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x4, 0x1}, 0x6) 06:27:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x13) [ 2708.271422] FAULT_INJECTION: forcing a failure. [ 2708.271422] name failslab, interval 1, probability 0, space 0, times 0 [ 2708.317992] CPU: 0 PID: 4361 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2708.325918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2708.335272] Call Trace: [ 2708.337862] dump_stack+0x1b2/0x281 [ 2708.341499] should_fail.cold+0x10a/0x149 [ 2708.345656] should_failslab+0xd6/0x130 [ 2708.349682] kmem_cache_alloc_node+0x54/0x410 [ 2708.354182] __alloc_skb+0x5c/0x510 [ 2708.357811] hci_sock_sendmsg+0x10d6/0x1c80 [ 2708.362141] ? hci_send_to_channel+0x200/0x200 [ 2708.366758] ? lock_acquire+0x170/0x3f0 [ 2708.370733] ? security_socket_sendmsg+0x83/0xb0 [ 2708.375489] ? hci_send_to_channel+0x200/0x200 [ 2708.380072] sock_sendmsg+0xb5/0x100 [ 2708.383795] sock_write_iter+0x22c/0x370 [ 2708.387858] ? sock_sendmsg+0x100/0x100 [ 2708.391839] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2708.396768] ? iov_iter_init+0xa6/0x1c0 [ 2708.400748] __vfs_write+0x44c/0x630 [ 2708.404459] ? kernel_read+0x110/0x110 [ 2708.408369] ? rw_verify_area+0xe1/0x2a0 [ 2708.412428] vfs_write+0x17f/0x4d0 [ 2708.416074] SyS_write+0xf2/0x210 [ 2708.419687] ? SyS_read+0x210/0x210 [ 2708.423301] ? __do_page_fault+0x159/0xad0 [ 2708.427513] ? do_syscall_64+0x4c/0x640 [ 2708.431511] ? SyS_read+0x210/0x210 [ 2708.435129] do_syscall_64+0x1d5/0x640 [ 2708.439004] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2708.444183] RIP: 0033:0x4665f9 [ 2708.447353] RSP: 002b:00007f566c139188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2708.456316] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 06:27:46 executing program 2 (fault-call:2 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1402, 0x300, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x20008000) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000000) 06:27:46 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r2, 0x1}}, 0x18) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@local}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x2}, 0x6) 06:27:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x13) 06:27:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 06:27:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) [ 2708.464562] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2708.472780] RBP: 00007f566c1391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2708.480419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2708.487810] R13: 00007ffcc137bdef R14: 00007f566c139300 R15: 0000000000022000 06:27:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x13) 06:27:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:46 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 06:27:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="69705f7674d6dee1bd3a146930000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000045000014000000000000907800000000ac1414bb"]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) [ 2708.568821] FAULT_INJECTION: forcing a failure. [ 2708.568821] name failslab, interval 1, probability 0, space 0, times 0 06:27:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff7f00"], 0x13) [ 2708.635481] CPU: 1 PID: 4386 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2708.643340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2708.652803] Call Trace: [ 2708.655438] dump_stack+0x1b2/0x281 [ 2708.659078] should_fail.cold+0x10a/0x149 [ 2708.663241] should_failslab+0xd6/0x130 [ 2708.667223] kmem_cache_alloc_node_trace+0x58/0x400 [ 2708.672270] __kmalloc_node_track_caller+0x38/0x70 [ 2708.677260] __alloc_skb+0x96/0x510 [ 2708.680978] hci_sock_sendmsg+0x10d6/0x1c80 [ 2708.685303] ? hci_send_to_channel+0x200/0x200 [ 2708.689883] ? lock_acquire+0x170/0x3f0 [ 2708.693839] ? security_socket_sendmsg+0x83/0xb0 [ 2708.698860] ? hci_send_to_channel+0x200/0x200 [ 2708.703423] sock_sendmsg+0xb5/0x100 [ 2708.707159] sock_write_iter+0x22c/0x370 [ 2708.711223] ? sock_sendmsg+0x100/0x100 [ 2708.715197] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2708.720239] ? iov_iter_init+0xa6/0x1c0 [ 2708.724227] __vfs_write+0x44c/0x630 [ 2708.727988] ? kernel_read+0x110/0x110 [ 2708.731870] ? rw_verify_area+0xe1/0x2a0 [ 2708.735915] vfs_write+0x17f/0x4d0 [ 2708.739439] SyS_write+0xf2/0x210 [ 2708.742961] ? SyS_read+0x210/0x210 [ 2708.746585] ? __do_page_fault+0x159/0xad0 [ 2708.750819] ? do_syscall_64+0x4c/0x640 [ 2708.754869] ? SyS_read+0x210/0x210 [ 2708.758564] do_syscall_64+0x1d5/0x640 [ 2708.762724] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2708.768217] RIP: 0033:0x4665f9 [ 2708.772625] RSP: 002b:00007f566c139188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:27:46 executing program 2 (fault-call:2 fault-nth:3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="037ae51616e4b7bb97a338111873a6a0"], 0xb) 06:27:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ff"], 0x13) 06:27:46 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 06:27:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x40000) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={0x0, 0xffffffff}) 06:27:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 2708.780311] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2708.787829] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2708.795103] RBP: 00007f566c1391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2708.802410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2708.810553] R13: 00007ffcc137bdef R14: 00007f566c139300 R15: 0000000000022000 06:27:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:46 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 06:27:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x8, 0x1000, "ebb4f220779b8ef3c87426fcd78dc9544042b0457237a9b35ea60b133b6f6bf37e0b14435036a37f7d9f78b79592494c0f5fb3d550ea0d8b797903d06829e195c864c90c4a25b21b1bb59186df66fe22119af179b7ffb1038b1662f93aaf3057d43d607c18f942711ac9fa2332dc08dc96a7065e9bc2c106cd646d1d4cbc5005fd57b5d7cb1930822d249340938e0a3f1240166f815f5acad10347a526726d03c7c685e3369ce225e8e4a5f1bb32dbf12c198b4684419663bb2b23d0db1eeb4f37819ba6a8db5fa3fdc0d18bd1848cfb3aa3bda0aefd4d484fb454d2aee7a20f555097433ef09c7483fadb73e638f4239f18845c0dc7cd602c18239ad29d68de", 0x3, 0x3, 0x7, 0x3, 0x9d, 0x40, 0x8, 0x1}}}, 0xfffffffffffffe35) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ff"], 0x13) 06:27:47 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x20800, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000180)=""/72) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0x1d, 0x1}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2, 0x4, 0xfd, 0x40, 0x8, @mcast2, @empty, 0x0, 0x1, 0x80, 0x9182}}) [ 2708.889818] FAULT_INJECTION: forcing a failure. [ 2708.889818] name failslab, interval 1, probability 0, space 0, times 0 06:27:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) [ 2708.946110] CPU: 0 PID: 4419 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2708.953975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2708.963332] Call Trace: [ 2708.965940] dump_stack+0x1b2/0x281 [ 2708.969621] should_fail.cold+0x10a/0x149 [ 2708.973788] should_failslab+0xd6/0x130 [ 2708.977772] kmem_cache_alloc_node+0x263/0x410 [ 2708.982375] __alloc_skb+0x5c/0x510 [ 2708.986019] mgmt_cmd_status+0x43/0x460 [ 2708.990115] hci_sock_sendmsg+0x10a4/0x1c80 [ 2708.994442] ? hci_send_to_channel+0x200/0x200 [ 2708.999020] ? lock_acquire+0x170/0x3f0 [ 2709.002977] ? security_socket_sendmsg+0x83/0xb0 [ 2709.007726] ? hci_send_to_channel+0x200/0x200 [ 2709.012304] sock_sendmsg+0xb5/0x100 [ 2709.016011] sock_write_iter+0x22c/0x370 [ 2709.020199] ? sock_sendmsg+0x100/0x100 [ 2709.024183] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2709.029117] ? iov_iter_init+0xa6/0x1c0 [ 2709.033097] __vfs_write+0x44c/0x630 [ 2709.036803] ? kernel_read+0x110/0x110 [ 2709.040818] ? rw_verify_area+0xe1/0x2a0 [ 2709.044875] vfs_write+0x17f/0x4d0 [ 2709.048402] SyS_write+0xf2/0x210 [ 2709.051855] ? SyS_read+0x210/0x210 [ 2709.055461] ? __do_page_fault+0x159/0xad0 [ 2709.059741] ? do_syscall_64+0x4c/0x640 [ 2709.063700] ? SyS_read+0x210/0x210 [ 2709.067331] do_syscall_64+0x1d5/0x640 [ 2709.071203] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2709.076391] RIP: 0033:0x4665f9 [ 2709.080436] RSP: 002b:00007f566c139188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2709.089179] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 06:27:47 executing program 2 (fault-call:2 fault-nth:4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 06:27:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ff"], 0x13) 06:27:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x1, 0x1, "05ebd4", 0xdf, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) 06:27:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xfffd, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0xc, 0x4) socketpair(0x1f, 0x4, 0x200, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) [ 2709.096434] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2709.103699] RBP: 00007f566c1391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2709.110951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2709.118198] R13: 00007ffcc137bdef R14: 00007f566c139300 R15: 0000000000022000 [ 2709.135172] Bluetooth: hci4 command 0x0401 tx timeout 06:27:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 06:27:47 executing program 5: socket$netlink(0x10, 0x3, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000080)={0xccccccccccccdc4, &(0x7f0000000000)=[{@fixed}, {@none}, {@none}, {@none}, {@fixed}]}) 06:27:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff"], 0x13) 06:27:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) [ 2709.231787] FAULT_INJECTION: forcing a failure. [ 2709.231787] name failslab, interval 1, probability 0, space 0, times 0 [ 2709.269689] CPU: 1 PID: 4448 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2709.277530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2709.286889] Call Trace: [ 2709.289483] dump_stack+0x1b2/0x281 [ 2709.293117] should_fail.cold+0x10a/0x149 [ 2709.297278] should_failslab+0xd6/0x130 [ 2709.301260] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2709.306365] __kmalloc_node_track_caller+0x38/0x70 [ 2709.311294] __alloc_skb+0x96/0x510 [ 2709.314924] mgmt_cmd_status+0x43/0x460 [ 2709.318899] hci_sock_sendmsg+0x10a4/0x1c80 [ 2709.323219] ? hci_send_to_channel+0x200/0x200 [ 2709.327787] ? lock_acquire+0x170/0x3f0 [ 2709.331757] ? security_socket_sendmsg+0x83/0xb0 [ 2709.336509] ? hci_send_to_channel+0x200/0x200 [ 2709.341070] sock_sendmsg+0xb5/0x100 [ 2709.344786] sock_write_iter+0x22c/0x370 [ 2709.348824] ? sock_sendmsg+0x100/0x100 [ 2709.352792] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2709.357708] ? iov_iter_init+0xa6/0x1c0 [ 2709.361688] __vfs_write+0x44c/0x630 [ 2709.365396] ? kernel_read+0x110/0x110 [ 2709.369275] ? rw_verify_area+0xe1/0x2a0 [ 2709.373338] vfs_write+0x17f/0x4d0 [ 2709.376870] SyS_write+0xf2/0x210 [ 2709.380308] ? SyS_read+0x210/0x210 [ 2709.383922] ? __do_page_fault+0x159/0xad0 [ 2709.388147] ? do_syscall_64+0x4c/0x640 [ 2709.392203] ? SyS_read+0x210/0x210 [ 2709.395811] do_syscall_64+0x1d5/0x640 [ 2709.399684] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2709.404955] RIP: 0033:0x4665f9 [ 2709.408148] RSP: 002b:00007f566c139188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2709.415858] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2709.423193] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 06:27:47 executing program 2 (fault-call:2 fault-nth:5): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="013dc630b4aee490dd9c22af1e2507f4d93b0402d900"], 0x6) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$inet(0x2, 0x5, 0xffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:27:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 06:27:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffff"], 0x13) [ 2709.430715] RBP: 00007f566c1391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2709.438451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2709.445792] R13: 00007ffcc137bdef R14: 00007f566c139300 R15: 0000000000022000 [ 2709.507722] FAULT_INJECTION: forcing a failure. [ 2709.507722] name failslab, interval 1, probability 0, space 0, times 0 [ 2709.521945] CPU: 1 PID: 4471 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2709.531704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2709.541331] Call Trace: [ 2709.544045] dump_stack+0x1b2/0x281 [ 2709.548047] should_fail.cold+0x10a/0x149 [ 2709.552236] should_failslab+0xd6/0x130 [ 2709.557983] kmem_cache_alloc_node+0x54/0x410 [ 2709.562571] __alloc_skb+0x5c/0x510 [ 2709.566508] create_monitor_ctrl_event+0x3a/0x3a0 [ 2709.571366] mgmt_cmd_status+0x28d/0x460 [ 2709.575426] hci_sock_sendmsg+0x10a4/0x1c80 [ 2709.579855] ? hci_send_to_channel+0x200/0x200 [ 2709.584689] ? lock_acquire+0x170/0x3f0 [ 2709.588824] ? security_socket_sendmsg+0x83/0xb0 [ 2709.593963] ? hci_send_to_channel+0x200/0x200 [ 2709.598847] sock_sendmsg+0xb5/0x100 [ 2709.602568] sock_write_iter+0x22c/0x370 [ 2709.606941] ? sock_sendmsg+0x100/0x100 [ 2709.611050] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2709.616271] ? iov_iter_init+0xa6/0x1c0 [ 2709.620546] __vfs_write+0x44c/0x630 [ 2709.624526] ? kernel_read+0x110/0x110 [ 2709.628739] ? rw_verify_area+0xe1/0x2a0 [ 2709.632793] vfs_write+0x17f/0x4d0 [ 2709.636348] SyS_write+0xf2/0x210 [ 2709.640522] ? SyS_read+0x210/0x210 [ 2709.644325] ? __do_page_fault+0x159/0xad0 [ 2709.649033] ? do_syscall_64+0x4c/0x640 [ 2709.653203] ? SyS_read+0x210/0x210 [ 2709.656916] do_syscall_64+0x1d5/0x640 [ 2709.660967] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2709.666335] RIP: 0033:0x4665f9 [ 2709.669506] RSP: 002b:00007f566c139188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2709.678192] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2709.686413] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2709.693789] RBP: 00007f566c1391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2709.702244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2709.709961] R13: 00007ffcc137bdef R14: 00007f566c139300 R15: 0000000000022000 [ 2709.735026] Bluetooth: hci1 command 0x2062 tx timeout 06:27:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x1}}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair(0xf, 0x1, 0x20000000, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff}}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x4363, [0x401, 0x8d9], 0x54}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x8, 0x1000, "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", 0x3, 0x3, 0x7, 0x3, 0x9d, 0x40, 0x8, 0x1}}}, 0xfffffffffffffe35) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 06:27:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000000)={0x0, 0x4}) 06:27:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ff"], 0x13) 06:27:48 executing program 2 (fault-call:2 fault-nth:6): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) [ 2709.999206] Bluetooth: hci2 command 0x0401 tx timeout 06:27:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ff"], 0x13) 06:27:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="013dc630b4aee490dd9c22af1e2507f4d93b0402d900"], 0x6) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$inet(0x2, 0x5, 0xffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:27:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 06:27:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair(0x22, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x27, 0x5, 0x0, &(0x7f0000000080)) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffb, 0x1}, 0x6) [ 2710.042968] FAULT_INJECTION: forcing a failure. [ 2710.042968] name failslab, interval 1, probability 0, space 0, times 0 06:27:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x400}, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x16c41, 0x0) socketpair(0x27, 0x5, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, @hci={0x1f, 0x3, 0x4}, @nfc={0x27, 0x1, 0x0, 0x7}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0xab6, 0x20}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x9, [0x401, 0x1], 0x3}, 0x10) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0x3, 0x4, "d443cc", 0x1, 0x8}) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000001c0)={0x1b6, 0x80, 0x300, 0x280, 0xd444, 0x4, 0x2, 0x1, {0x7fff, 0x4}, {0x2, 0xfffffff8, 0x1}, {0x5, 0x800}, {0x4, 0x7, 0x1}, 0x3, 0x40, 0xfffff9d0, 0x4, 0x0, 0x5, 0x7, 0x8, 0xc9ac643, 0x1ff, 0x5, 0x6, 0x0, 0x2, 0x3, 0x7}) 06:27:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1402, 0x300, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x20008000) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000000) 06:27:48 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x4, 0x1}, 0x6) [ 2710.116299] CPU: 1 PID: 4483 Comm: syz-executor.2 Not tainted 4.14.231-syzkaller #0 [ 2710.124137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2710.133504] Call Trace: [ 2710.136103] dump_stack+0x1b2/0x281 [ 2710.139739] should_fail.cold+0x10a/0x149 [ 2710.143895] should_failslab+0xd6/0x130 [ 2710.147875] kmem_cache_alloc_node_trace+0x58/0x400 [ 2710.152901] __kmalloc_node_track_caller+0x38/0x70 [ 2710.157837] __alloc_skb+0x96/0x510 [ 2710.161467] create_monitor_ctrl_event+0x3a/0x3a0 06:27:48 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x4, 0x1}, 0x6) 06:27:48 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x4, 0x7, 0x6}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x8) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) [ 2710.166315] mgmt_cmd_status+0x28d/0x460 [ 2710.170384] hci_sock_sendmsg+0x10a4/0x1c80 [ 2710.174751] ? hci_send_to_channel+0x200/0x200 [ 2710.179336] ? lock_acquire+0x170/0x3f0 [ 2710.183310] ? security_socket_sendmsg+0x83/0xb0 [ 2710.188065] ? hci_send_to_channel+0x200/0x200 [ 2710.192650] sock_sendmsg+0xb5/0x100 [ 2710.196364] sock_write_iter+0x22c/0x370 [ 2710.200428] ? sock_sendmsg+0x100/0x100 [ 2710.204407] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2710.209339] ? iov_iter_init+0xa6/0x1c0 [ 2710.213338] __vfs_write+0x44c/0x630 [ 2710.217037] ? kernel_read+0x110/0x110 [ 2710.220926] ? rw_verify_area+0xe1/0x2a0 [ 2710.225077] vfs_write+0x17f/0x4d0 [ 2710.228601] SyS_write+0xf2/0x210 [ 2710.232037] ? SyS_read+0x210/0x210 [ 2710.235643] ? __do_page_fault+0x159/0xad0 [ 2710.240133] ? do_syscall_64+0x4c/0x640 [ 2710.244094] ? SyS_read+0x210/0x210 [ 2710.247718] do_syscall_64+0x1d5/0x640 [ 2710.251604] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2710.256782] RIP: 0033:0x4665f9 06:27:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ff"], 0x13) 06:27:48 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000180)={{0x3, 0x0, 0x80, 0x3, 0xfffffff9}, 0x4, 0x7ff, 0x6}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000200)={0x2, 0x3, 0x5}, 0x10) syz_open_dev$dri(&(0x7f0000000280), 0x200000000000000, 0xa0200) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="f0f9e7a4df41baa2b57215a9600ddcb09dc0f2341e0dc593cd7d4afb02b7f91f3dc092cc4846a08f88213540e80ec1f232b631b65053bdc880ca602972113201bba27117d904cd2967dc024c2d3d951e52eb214a4fcca31ffcfdc2c48e3c112158cd65a6de83d6601b0c4687a94d034800b39a79df064836261b7742985e6889799c1e6a2a94b651d173013cac1f33f74b5b0a59f982108c576a9d7622aae096da79787e82f611b6", 0xa8}, 0x1, 0x0, 0x0, 0x400c041}, 0x40000) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) [ 2710.259971] RSP: 002b:00007f566c139188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2710.268037] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2710.275289] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2710.283075] RBP: 00007f566c1391d0 R08: 0000000000000000 R09: 0000000000000000 [ 2710.291114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2710.299008] R13: 00007ffcc137bdef R14: 00007f566c139300 R15: 0000000000022000 06:27:48 executing program 2 (fault-call:2 fault-nth:7): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x111000, 0x0) add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000080)='x', 0x1, 0xfffffffffffffffc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 06:27:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 06:27:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:27:48 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ff"], 0x13) 06:27:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x2}, 0x6) inotify_init() 06:27:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 06:27:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x0, 0x0, "4badf9", "c99eca", 0x20, 0x81, 0xde, @none, 0x1, 0x7e, 0x7f, 0x1, 0x1, 0xfb, 0x1c}}}, 0x1d) [ 2710.408397] FAULT_INJECTION: forcing a failure. [ 2710.408397] name failslab, interval 1, probability 0, space 0, times 0 [ 2710.433201] CPU: 1 PID: 4531 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 2710.441407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2710.451064] Call Trace: 06:27:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfff7, 0x3}, 0xffffffffffffffbe) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 06:27:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) [ 2710.453859] dump_stack+0x1b2/0x281 [ 2710.459187] should_fail.cold+0x10a/0x149 [ 2710.463548] should_failslab+0xd6/0x130 [ 2710.467672] kmem_cache_alloc_node+0x263/0x410 [ 2710.472548] __alloc_skb+0x5c/0x510 [ 2710.476194] alloc_skb_with_frags+0x85/0x500 [ 2710.480634] sock_alloc_send_pskb+0x577/0x6d0 [ 2710.485413] ? sock_kzfree_s+0x50/0x50 [ 2710.489436] ? mark_held_locks+0xa6/0xf0 [ 2710.494560] ? __local_bh_enable_ip+0xc1/0x170 [ 2710.499674] hci_sock_sendmsg+0xc5d/0x1c80 [ 2710.503921] ? __might_fault+0x177/0x1b0 06:27:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) [ 2710.508097] ? aa_file_perm+0x2dd/0xab0 [ 2710.512378] ? hci_send_to_channel+0x200/0x200 [ 2710.517063] ? lock_acquire+0x170/0x3f0 [ 2710.521752] ? security_socket_sendmsg+0x83/0xb0 [ 2710.526709] ? hci_send_to_channel+0x200/0x200 [ 2710.531507] sock_sendmsg+0xb5/0x100 [ 2710.535421] sock_write_iter+0x22c/0x370 [ 2710.539622] ? sock_sendmsg+0x100/0x100 [ 2710.543620] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2710.548908] ? iov_iter_init+0xa6/0x1c0 [ 2710.553516] __vfs_write+0x44c/0x630 [ 2710.557656] ? kernel_read+0x110/0x110 [ 2710.561732] ? rw_verify_area+0xe1/0x2a0 [ 2710.565949] vfs_write+0x17f/0x4d0 [ 2710.569591] SyS_write+0xf2/0x210 [ 2710.573233] ? SyS_read+0x210/0x210 [ 2710.577270] ? __do_page_fault+0x159/0xad0 [ 2710.581908] ? do_syscall_64+0x4c/0x640 [ 2710.586016] ? SyS_read+0x210/0x210 [ 2710.589688] do_syscall_64+0x1d5/0x640 [ 2710.593680] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2710.598959] RIP: 0033:0x4665f9 06:27:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x7ff, 0x1, 0x3}, 0xe29, 0xdc3, 0x6}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 06:27:48 executing program 2: setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1}}], 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 06:27:48 executing program 1 (fault-call:2 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:48 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x4c081, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x38, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000080)={@any, 0x60, 0x1, 0x75ac}) bind$bt_hci(r1, &(0x7f0000000240), 0x1e) 06:27:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ff"], 0x13) [ 2710.602430] RSP: 002b:00007f3e6cec9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2710.610731] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2710.618205] RDX: 000000000000000b RSI: 0000000020000000 RDI: 0000000000000004 [ 2710.626184] RBP: 00007f3e6cec91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2710.633822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2710.641732] R13: 00007ffde0af5f0f R14: 00007f3e6cec9300 R15: 0000000000022000 06:27:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) [ 2710.697064] FAULT_INJECTION: forcing a failure. [ 2710.697064] name failslab, interval 1, probability 0, space 0, times 0 [ 2710.723815] CPU: 1 PID: 4568 Comm: syz-executor.1 Not tainted 4.14.231-syzkaller #0 [ 2710.732348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2710.742121] Call Trace: 06:27:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0xc0000036, &(0x7f00000000c0)="24365617df9222cf104bb06e19f143f1ec9a5e0c979ed7e38f8aaf0bbb5f984c730dfbb4c93af21616c14cdb5821d96d4462829d774322e55bd522f0a56f06721185abdcebac1a6621efdeccc75fa0142f0f7e8dabcf28c81eb103aadd113c3d6fdc4e972256ae7b664c5be27e9f3fd5def8cecfaf7970e919d8c4fcf514c6de67658c95cd4cfab9a49f477053de63e895e324ab43951b8ff33b02f23a18eb5e95d050ebe4874c1096fdfdb419e4941bdde427c0a2a297ae606276d001187bfef1a429cf7002f04b70bd") r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 06:27:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6) [ 2710.744724] dump_stack+0x1b2/0x281 [ 2710.748458] should_fail.cold+0x10a/0x149 [ 2710.752754] should_failslab+0xd6/0x130 [ 2710.757099] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2710.762220] __kmalloc_node_track_caller+0x38/0x70 [ 2710.767505] __alloc_skb+0x96/0x510 [ 2710.771220] alloc_skb_with_frags+0x85/0x500 [ 2710.775747] sock_alloc_send_pskb+0x577/0x6d0 [ 2710.780499] ? sock_kzfree_s+0x50/0x50 [ 2710.784487] ? mark_held_locks+0xa6/0xf0 [ 2710.788963] ? __local_bh_enable_ip+0xc1/0x170 06:27:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) socketpair(0x2b, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c005cee", @ANYRES16=0x0, @ANYBLOB="000128bd7000fddbdf25110000000500370000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="86796bd105f34e7408cd5ec40100"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0bf0", @ANYRES16=r6, @ANYBLOB="100425bd7000fcdbdf2506000000050037000100000005003300020000000800320004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000140), 0x4) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000000c0)={0x6, [0x80, 0x4]}, 0x10) [ 2710.793770] hci_sock_sendmsg+0xc5d/0x1c80 [ 2710.798104] ? __might_fault+0x177/0x1b0 [ 2710.802263] ? aa_file_perm+0x2dd/0xab0 [ 2710.806249] ? hci_send_to_channel+0x200/0x200 [ 2710.810863] ? lock_acquire+0x170/0x3f0 [ 2710.814995] ? security_socket_sendmsg+0x83/0xb0 [ 2710.819778] ? hci_send_to_channel+0x200/0x200 [ 2710.824573] sock_sendmsg+0xb5/0x100 [ 2710.828485] sock_write_iter+0x22c/0x370 [ 2710.832759] ? sock_sendmsg+0x100/0x100 [ 2710.836764] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2710.841709] ? iov_iter_init+0xa6/0x1c0 06:27:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) 06:27:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x106, 0x2}}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001480), 0x400, 0x0) bind$bt_hci(r1, &(0x7f00000014c0)={0x1f, 0x4, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 2710.845909] __vfs_write+0x44c/0x630 [ 2710.849652] ? kernel_read+0x110/0x110 [ 2710.853594] ? rw_verify_area+0xe1/0x2a0 [ 2710.857936] vfs_write+0x17f/0x4d0 [ 2710.861512] SyS_write+0xf2/0x210 [ 2710.864977] ? SyS_read+0x210/0x210 [ 2710.868734] ? __do_page_fault+0x159/0xad0 [ 2710.873105] ? do_syscall_64+0x4c/0x640 [ 2710.877304] ? SyS_read+0x210/0x210 [ 2710.881126] do_syscall_64+0x1d5/0x640 [ 2710.885117] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2710.890312] RIP: 0033:0x4665f9 06:27:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:27:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1}, 0xffffff0c) socket$inet_udp(0x2, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:49 executing program 1 (fault-call:2 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:49 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x6) 06:27:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ff"], 0x13) 06:27:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0xc0000036, &(0x7f00000000c0)="24365617df9222cf104bb06e19f143f1ec9a5e0c979ed7e38f8aaf0bbb5f984c730dfbb4c93af21616c14cdb5821d96d4462829d774322e55bd522f0a56f06721185abdcebac1a6621efdeccc75fa0142f0f7e8dabcf28c81eb103aadd113c3d6fdc4e972256ae7b664c5be27e9f3fd5def8cecfaf7970e919d8c4fcf514c6de67658c95cd4cfab9a49f477053de63e895e324ab43951b8ff33b02f23a18eb5e95d050ebe4874c1096fdfdb419e4941bdde427c0a2a297ae606276d001187bfef1a429cf7002f04b70bd") r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) [ 2710.893535] RSP: 002b:00007f3e6cec9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2710.901476] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2710.909313] RDX: 000000000000000b RSI: 0000000020000000 RDI: 0000000000000004 [ 2710.917024] RBP: 00007f3e6cec91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2710.924301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2710.931674] R13: 00007ffde0af5f0f R14: 00007f3e6cec9300 R15: 0000000000022000 06:27:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @io_capability_reply={{0x42b, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1f, 0xff, 0x6}}}, 0xd) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000080)=0xfffffc01, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x1, 0x8, "11e75e", 0x6, 0x4a}) 06:27:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000040)={{0x3, 0x1, 0x7ff, 0x1, 0x3}, 0xe29, 0xdc3, 0x6}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="03defd35bf7e3177010f3d1b57aab48ffbcb77d3a9f81a7953546d34a3420c043b735e61ecab68795b3711e288a5e1ac4114991dd18460058a564d75cf5fae2440b2ca02ea9d94efb97d0eef76577f408bdcd71f7c49bddb0ddb5ed0652cad26f375d713f0f2d8dbbedd3f68ff522907d776eecefd15388d8f9f4d7790dc946c80a31e06906bdd98e88b88c9686f336236ba8ae7c6f09b"], 0xb) 06:27:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01e5d959e4e1"], 0x6) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa31}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8850}, 0x30008000) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000000c0)=""/194, &(0x7f0000000000)=0xc2) 06:27:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="84b4ffddd4ec03"], 0xb) 06:27:49 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x44300, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000500), &(0x7f0000000540)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6e) 06:27:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0xc0000036, &(0x7f00000000c0)="24365617df9222cf104bb06e19f143f1ec9a5e0c979ed7e38f8aaf0bbb5f984c730dfbb4c93af21616c14cdb5821d96d4462829d774322e55bd522f0a56f06721185abdcebac1a6621efdeccc75fa0142f0f7e8dabcf28c81eb103aadd113c3d6fdc4e972256ae7b664c5be27e9f3fd5def8cecfaf7970e919d8c4fcf514c6de67658c95cd4cfab9a49f477053de63e895e324ab43951b8ff33b02f23a18eb5e95d050ebe4874c1096fdfdb419e4941bdde427c0a2a297ae606276d001187bfef1a429cf7002f04b70bd") r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 06:27:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="011104020000c214a726ccb5705454cdcfc522922a2ac067d40db0413d024198a98b68d7182011290fc0cdb286ea60877636d5c7a73c21433981ee867df26dd6b6a65ce69713d6"], 0x6) 06:27:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000100)={0x9, &(0x7f0000000040)=[{@none}, {@none}, {@fixed}, {}, {}, {@fixed}, {}, {@fixed}, {}]}) 06:27:49 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x206103, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000040)=0x7fff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x2d0, 0x4, {{0x6, 0x4, 0x0, 0x2b, 0x18, 0x64, 0x0, 0x2, 0x4, 0x0, @private, @multicast1, {[@ra={0x94, 0x4}]}}}}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r5, 0xd393b1f355461855, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}]}, 0x34}}, 0x24004004) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x24048040) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) 06:27:49 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:27:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3, 0x2}, 0x6) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000100)={0x0, 0x20f, "af3280", 0x5, 0x6}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) 06:27:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 2711.166273] FAULT_INJECTION: forcing a failure. [ 2711.166273] name failslab, interval 1, probability 0, space 0, times 0 [ 2711.179599] CPU: 1 PID: 4653 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 2711.187523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2711.196882] Call Trace: [ 2711.199520] dump_stack+0x1b2/0x281 [ 2711.203157] should_fail.cold+0x10a/0x149 [ 2711.207323] should_failslab+0xd6/0x130 [ 2711.211315] kmem_cache_alloc_node+0x263/0x410 06:27:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@can={{0x3, 0x1, 0x1, 0x1}, 0x4, 0x5, 0x0, 0x0, "bb4c49455b56deed"}, 0x10}}, 0x4000) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000001340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf25020000000c000300030000000000000008000500ac141435060006000300000008000900000000000800020000000000080009000400000008000100", @ANYRES32=0x0, @ANYBLOB="0880a100", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x854) [ 2711.215921] __alloc_skb+0x5c/0x510 [ 2711.219555] alloc_skb_with_frags+0x85/0x500 [ 2711.223973] sock_alloc_send_pskb+0x577/0x6d0 [ 2711.228495] ? sock_kzfree_s+0x50/0x50 [ 2711.232520] ? mark_held_locks+0xa6/0xf0 [ 2711.236584] ? __local_bh_enable_ip+0xc1/0x170 [ 2711.241171] hci_sock_sendmsg+0xc5d/0x1c80 [ 2711.245435] ? __might_fault+0x177/0x1b0 [ 2711.249500] ? aa_file_perm+0x2dd/0xab0 [ 2711.253472] ? hci_send_to_channel+0x200/0x200 [ 2711.258055] ? lock_acquire+0x170/0x3f0 [ 2711.262036] ? security_socket_sendmsg+0x83/0xb0 06:27:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x1407, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48045}, 0x4044000) 06:27:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x0, 0x3}, 0x6) [ 2711.266789] ? hci_send_to_channel+0x200/0x200 [ 2711.271397] sock_sendmsg+0xb5/0x100 [ 2711.275197] sock_write_iter+0x22c/0x370 [ 2711.279259] ? sock_sendmsg+0x100/0x100 [ 2711.283255] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2711.288187] ? iov_iter_init+0xa6/0x1c0 [ 2711.292201] __vfs_write+0x44c/0x630 [ 2711.295918] ? kernel_read+0x110/0x110 [ 2711.299817] ? rw_verify_area+0xe1/0x2a0 [ 2711.303880] vfs_write+0x17f/0x4d0 [ 2711.307424] SyS_write+0xf2/0x210 [ 2711.310876] ? SyS_read+0x210/0x210 06:27:49 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000240), 0x1e) [ 2711.314588] ? __do_page_fault+0x159/0xad0 [ 2711.318820] ? do_syscall_64+0x4c/0x640 [ 2711.322793] ? SyS_read+0x210/0x210 [ 2711.326425] do_syscall_64+0x1d5/0x640 [ 2711.330354] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2711.335539] RIP: 0033:0x4665f9 [ 2711.338748] RSP: 002b:00007fdb17d91188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2711.346482] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2711.353747] RDX: 0000000000000013 RSI: 0000000020000000 RDI: 0000000000000004 06:27:49 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)=0x28) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf1ed}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe0, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x4000081) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="011000"], 0x6) [ 2711.361015] RBP: 00007fdb17d911d0 R08: 0000000000000000 R09: 0000000000000000 [ 2711.368285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2711.375564] R13: 00007ffeff4794cf R14: 00007fdb17d91300 R15: 0000000000022000 [ 2711.385512] Bluetooth: hci4 command 0x0401 tx timeout 06:27:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0xc0000036, &(0x7f00000000c0)="24365617df9222cf104bb06e19f143f1ec9a5e0c979ed7e38f8aaf0bbb5f984c730dfbb4c93af21616c14cdb5821d96d4462829d774322e55bd522f0a56f06721185abdcebac1a6621efdeccc75fa0142f0f7e8dabcf28c81eb103aadd113c3d6fdc4e972256ae7b664c5be27e9f3fd5def8cecfaf7970e919d8c4fcf514c6de67658c95cd4cfab9a49f477053de63e895e324ab43951b8ff33b02f23a18eb5e95d050ebe4874c1096fdfdb419e4941bdde427c0a2a297ae606276d001187bfef1a429cf7002f04b70bd") r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 06:27:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) socketpair(0x1f, 0x6, 0x0, &(0x7f00000035c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000003600)={0x2, [0x4, 0x5], 0x6}, 0x10) 06:27:49 executing program 4 (fault-call:2 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:27:49 executing program 5: mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000003, 0x40010, 0xffffffffffffffff, 0xc9000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:27:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3}, 0x6) [ 2711.484672] FAULT_INJECTION: forcing a failure. [ 2711.484672] name failslab, interval 1, probability 0, space 0, times 0 [ 2711.501761] CPU: 0 PID: 4713 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 2711.509589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2711.518942] Call Trace: [ 2711.521537] dump_stack+0x1b2/0x281 [ 2711.525176] should_fail.cold+0x10a/0x149 [ 2711.529330] should_failslab+0xd6/0x130 [ 2711.533310] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2711.538419] __kmalloc_node_track_caller+0x38/0x70 [ 2711.543348] __alloc_skb+0x96/0x510 [ 2711.546979] alloc_skb_with_frags+0x85/0x500 [ 2711.551397] sock_alloc_send_pskb+0x577/0x6d0 [ 2711.556074] ? sock_kzfree_s+0x50/0x50 [ 2711.559971] ? mark_held_locks+0xa6/0xf0 [ 2711.564074] ? __local_bh_enable_ip+0xc1/0x170 [ 2711.568808] hci_sock_sendmsg+0xc5d/0x1c80 [ 2711.573053] ? __might_fault+0x177/0x1b0 [ 2711.577117] ? aa_file_perm+0x2dd/0xab0 06:27:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0xc0000036, &(0x7f00000000c0)="24365617df9222cf104bb06e19f143f1ec9a5e0c979ed7e38f8aaf0bbb5f984c730dfbb4c93af21616c14cdb5821d96d4462829d774322e55bd522f0a56f06721185abdcebac1a6621efdeccc75fa0142f0f7e8dabcf28c81eb103aadd113c3d6fdc4e972256ae7b664c5be27e9f3fd5def8cecfaf7970e919d8c4fcf514c6de67658c95cd4cfab9a49f477053de63e895e324ab43951b8ff33b02f23a18eb5e95d050ebe4874c1096fdfdb419e4941bdde427c0a2a297ae606276d001187bfef1a429cf7002f04b70bd") r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) 06:27:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0xc0000036, &(0x7f00000000c0)="24365617df9222cf104bb06e19f143f1ec9a5e0c979ed7e38f8aaf0bbb5f984c730dfbb4c93af21616c14cdb5821d96d4462829d774322e55bd522f0a56f06721185abdcebac1a6621efdeccc75fa0142f0f7e8dabcf28c81eb103aadd113c3d6fdc4e972256ae7b664c5be27e9f3fd5def8cecfaf7970e919d8c4fcf514c6de67658c95cd4cfab9a49f477053de63e895e324ab43951b8ff33b02f23a18eb5e95d050ebe4874c1096fdfdb419e4941bdde427c0a2a297ae606276d001187bfef1a429cf7002f04b70bd") syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 06:27:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0xc0000036, &(0x7f00000000c0)="24365617df9222cf104bb06e19f143f1ec9a5e0c979ed7e38f8aaf0bbb5f984c730dfbb4c93af21616c14cdb5821d96d4462829d774322e55bd522f0a56f06721185abdcebac1a6621efdeccc75fa0142f0f7e8dabcf28c81eb103aadd113c3d6fdc4e972256ae7b664c5be27e9f3fd5def8cecfaf7970e919d8c4fcf514c6de67658c95cd4cfab9a49f477053de63e895e324ab43951b8ff33b02f23a18eb5e95d050ebe4874c1096fdfdb419e4941bdde427c0a2a297ae606276d001187bfef1a429cf7002f04b70bd") 06:27:49 executing program 0: ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) [ 2711.583302] ? hci_send_to_channel+0x200/0x200 [ 2711.588296] ? lock_acquire+0x170/0x3f0 [ 2711.592728] ? security_socket_sendmsg+0x83/0xb0 [ 2711.598123] ? hci_send_to_channel+0x200/0x200 [ 2711.602972] sock_sendmsg+0xb5/0x100 [ 2711.607022] sock_write_iter+0x22c/0x370 [ 2711.612271] ? sock_sendmsg+0x100/0x100 [ 2711.617220] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2711.622371] ? iov_iter_init+0xa6/0x1c0 [ 2711.626591] __vfs_write+0x44c/0x630 [ 2711.630942] ? kernel_read+0x110/0x110 06:27:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) 06:27:49 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8ea}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20008810) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={'vmac(twofish-asm)\x00'}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000018}, 0x20040010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) [ 2711.634992] ? rw_verify_area+0xe1/0x2a0 [ 2711.639153] vfs_write+0x17f/0x4d0 [ 2711.643023] SyS_write+0xf2/0x210 [ 2711.646584] ? SyS_read+0x210/0x210 [ 2711.650238] ? __do_page_fault+0x159/0xad0 [ 2711.654766] ? do_syscall_64+0x4c/0x640 [ 2711.658851] ? SyS_read+0x210/0x210 [ 2711.663020] do_syscall_64+0x1d5/0x640 [ 2711.667176] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2711.672851] RIP: 0033:0x4665f9 06:27:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0xb) 06:27:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:27:49 executing program 0: getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@private0, @in6=@empty}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000052e006b45c191e01007706e90fe35401a3370d134b9bc92a7db270f9905bac3eecb4237829cd863e90c8d6dd6af241a3597f6bd9eeab4d7bf480578e19dcfd44ff502463be5209403ebf644cbb128d58d9017f00705b6536b33bacc680b4d9debdc6a23e2e70debdd2c9032256a5d675c39c28307f76915e06bf8afc4b80e3fb1f5c93c0ed3e6e32203374076efa8d5b8d3dbc7af818cfa46f65b7b8094e80f13719e6c9e6627c74a8389fc6ab7ab16d68c0d775881dbb0b9fb5066a02da1922f3945e13f538cfd5fc6d7f6e73b75b00f8d31400000000c3c4e9a3dfd0a52c0cd92bd071a1377c767010bd8c5d7c624b9604a359", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x0, @l2={0x1f, 0x5, @none, 0xd579, 0x1}, @llc={0x1a, 0x312, 0x0, 0x4, 0xfe, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, @sco={0x1f, @none}, 0x3, 0x0, 0x0, 0x0, 0x8e7, &(0x7f0000000180)='veth0_to_bond\x00', 0x1, 0x401, 0xf0df}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 06:27:49 executing program 4 (fault-call:2 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:27:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff}, 0xffffffffffffffe3) 06:27:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r1, 0x726, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000}, 0x20000000) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01110402e838"], 0x6) [ 2711.679077] RSP: 002b:00007fdb17d91188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2711.686962] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2711.694837] RDX: 0000000000000013 RSI: 0000000020000000 RDI: 0000000000000004 [ 2711.702239] RBP: 00007fdb17d911d0 R08: 0000000000000000 R09: 0000000000000000 [ 2711.709717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2711.716989] R13: 00007ffeff4794cf R14: 00007fdb17d91300 R15: 0000000000022000 [ 2711.759522] Bluetooth: hci1 command 0x2062 tx timeout 06:27:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000040)=0xfffffffb, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000006866c50001"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48000) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fbdbdf250500000005003500ff00000005002e0000000000050033000000000008002c005200000008000600", @ANYRES32=0x0, @ANYBLOB="08003200ab0f00002c34f00e721a736c37bb54060028000100000005002f000100006f6f72b5000000000005002e0000000000"], 0x64}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8040) r3 = socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x0, 0xa, 0x6, &(0x7f0000000100)={0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r5}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)={0x814, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x174, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x23, 0x4, "f43cdac52fc2ca379f91a5c62ce7d91628d8bc86d4069a7a0621febb7c9b4c"}, @ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "83655f50781883e95873df4c9997f95b0237153bf517b67aec7cf9f6934e6c555b2f03da296fca9f11619964a5fb2a0faf14803d1958460321eccbffba9c2cb6a6f7fa8b70c7a8494ae9d344c6c7b79463aa8a7c2876fc11790f9e838cbc495c139136ac44fcf59457849df395c857456bdee55651ac0a6bb5662c4538492ad8959999753e17efc2f772206de7df7b97cd427689e44ba97d03"}, @ETHTOOL_A_BITSET_MASK={0xaa, 0x5, "1601098d21d786d9d4177dd936b35574ca2b221368d1650a2fa4c0ef1e8797e5a492d3947cb6ccbdce6d78daff1a31ba5fa4b67d33747d044d488090d1f3488ebe1b36eb660eac056cf2ba23ed69b87ec568d6eb4db6149e81b589e9b524b5758e0e9c0d39bf1bd41ca91e53f18ac27cefb3502360d4b8c583f81032e69b1245ec4991595513ae28dc893f3da60d379e0d9b60889fe62df14e08751aefacbf89f585eb4ff011"}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x328, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc5, 0x5, "a892509e158aa94cf9a3d8226680232b2c4cf0cc32e253fa59e9d0c26f1a496b60c2e19c759bc1ca28a21be46a9f7cde6a0df80e5fcefc872d2be299dff16197aa85547b493d951699aee298dc31c8f85d2d421dae4b043214537a5425e5faa90c99082774c3782a426d52467225fa3885d1684c2910e22476d99b4635a95cbc1ef0524d4004f95d356de0b6cb13786c1406666d773e695b912ec574daf4619d13c09e7c2667437cb7351cfaf078c04bd111ce8e5dca2b4ad5b7bd28663ea2f4a5"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\\[+]}]#%!-\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x86b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'SMC_PNETID\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '4*),\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x17, 0x5, "47528a56e4889b262a9539af6a58a8b332f09d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x37, 0x4, "84933d8de08a663fca8cd335cb27a27225303440b16111dd14498ce1969c32ff98ce37c320b62ee32e106211d4c1a821c2a22c"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'SMC_PNETID\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(.^%'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x34}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\'^^7{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd115}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "99eed5a6d61524d3596b60103c04c250080e10696d8c8efc80ed42f4b52acfc5b545025e994190eeb43a670b231089938a7fb058d89230017120e624847d604a19af5514ff5b06d375254756b30f8afac5f177087a58"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1bc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x32, 0x4, "4ec9daab802491ba7d497e400615b7d0198ae9fcac70b20dfcfe61108776e31cde9b908227185a769c0731fc569f"}, @ETHTOOL_A_BITSET_VALUE={0xcb, 0x4, "f39ab8a342a85ceafc644379dbee411135c48bb69967a657eedc381f373d5b6a781efc60dd938036d74b4b7c9d66c9916e91aec98aeddae540cfbada3f12f2927eedd78cb44a750083061a93dc3f1894f885092e25151fdd43b1bb65b74861abf0322f779463dbb4949ec68ccb5683f68aadb38dd772d0c8b70a4016dc215a3913a3045dbfab2b9c10398e78ab81359aa1cd3f5e92ca573e420c6662e7449a2cd105b0a5e31d961b86215e5533a172fb042f69b3fee3d07d3506d5fbd0fd5a8cbccc37b7420ea6"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@%!@\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-\'-[-@\''}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '/!$$+\xaf\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'SMC_PNETID\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\\/.%*/\x9c&@\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xdc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd5, 0x5, "6b7870e568f8bd2f5447d87ab4a672795ece199bc07f00e9e1596bc1d4726626ea1b346a8b6427085f67c5bbae5c77a78376bbefc6c4527baa3a0ec8b679594005b5b037da883e64957064c6b2f146d06f500c5a14333a693c32d032bbd5e08a53043530b90e74c264f09bc11315b30edcb97dc04aef7025c24ae5f28c79654820a324c37d4e4ad731f1e442aa438bc38b440b3be0d84c62d27cc410a5e9e00778f9566037ca26827fcffd48dc0ac47f899acafcd63ce3333a081e4e61cda697a769582971212b19bb2ecb4f5dda053c8a"}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x814}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) 06:27:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x100, 0x4) 06:27:49 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x511000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x5, 0x7, 0x0, 0x0, 0xc}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000200)) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, @isdn, @vsock={0x28, 0x0, 0x0, @host}, 0x7fff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='vxcan1\x00', 0x7f, 0xa7, 0xfffb}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x1, @dev}, {0xa, 0x0, 0x7f, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x2, 0x4}}, 0x20) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x0, 0x101, "7dcfc5", 0x9a, 0xf8}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) 06:27:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x403}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:50 executing program 4: setns(0xffffffffffffffff, 0x8000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0xf6, 0x5, 0x5, 0x24, @remote, @local, 0x7, 0x700, 0x100, 0x7898fbff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x44) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x13) 06:27:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x2) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="011104020000de0e45238087e22ad48d79bd37944f9c8b7f3b12f81626c6aebd59259b418f0b8b00000000000000006c5f0208c7618f3e54b3806642b9c0977b3f1026283df8d349d566920b5358774439b6b70d17edeb5e58182b1b9b4fe5a52130c121fb603d8d2bb72b5f678826d74612bb30a8d6aad2179b8df12e7f686192ed2e8d5d"], 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x6ac442b0, 0x4) 06:27:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:50 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000440)={0x5, &(0x7f00000003c0)=[{@none}, {}, {}, {@none}, {}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) 06:27:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0xd15, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x3}, 0x6) 06:27:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000000)={@any, 0xff}) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="def4e47e8b9850fc815d67590f1ebe2edcdc8ef6b7f218f2df0c88585b8db716d2dc43280213b755f55b3294cb6fcc3b9f896db949c6fc4f532b81cff07fdd4e77f30828df505f29eee2f1ebb44c1d413ba286156a473349d74b8c2a27735c3ee88d0063e9074b34111f412f85c59cf600"/124], 0xb) 06:27:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2040}, 0x840) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x200, [0x5, 0x400], 0x1ff}, 0x10) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) write$bt_hci(r2, &(0x7f0000000080)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x400}}}, 0xe) 06:27:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:27:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) [ 2712.079007] Bluetooth: hci2 command 0x0401 tx timeout 06:27:50 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:50 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, r2}}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d7, &(0x7f0000000080)="8d5936d7e58719e146c534384cf1ff78656ab59ca1d2482c83939f0782513dc2505d16c09c796ef90c520677a484d8b4593c5679fb46925f411931f9dd957f05ab5bdf8d4ed906083904c716d29db49ab13be17c22931f4cd202af5a23e529e34d1715875e412573a614772b644c526c6357dfb5d4e79416d8dc36a4bdc16747e9ead9d3f112d190f0693b6060fcab4da74f9b50d03053dcd2b3381d04387a6cfdfb2600083a7ab4889b065d6d46ae104288b7f2f90eb7327904f481a712f7c3ed701d480d8e1e5433fcc26e3004a9c44903abad294290301439f4a823d79b5aacfe889f74cbfaed7a44de010e79d969e0947df7") bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="011a01500c03b943ff"], 0x13) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000280), 0x4) 06:27:50 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x4, 0x3]}, 0x10) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:50 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x2}, 0x6) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) 06:27:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x6) 06:27:50 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:50 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000080)="0fe10120a7075a7ec3bb3f92d46d073343142638a709e436865eabf85848c752f0a5d40450447d28be2c352e184fd89d5cb7d834527742db71f1098030ea0de48e7b588072deed693b7796afe16c8cfc696bf8a28ee63c6e767586ccc666b623ea86180402a12f6765cd16d894bf9accdf4c247eb6ad1394b02a5171689a30", 0x7f}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffef, 0x2}, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 06:27:50 executing program 4: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="200029bd7000fddbdf25030000000900010073797a320000000005000400010000001400020062617461647630000000000000008f8050aa725469407468315f746f5f68737200000000050004000200000005000400020000001401020077673100"/110], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000001c0)={0x9, [0x8001, 0xfffffffe], 0x8}, 0x10) 06:27:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xfffd}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) 06:27:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x12) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x7, [0x1, 0x7fff], 0x1}, 0x10) 06:27:50 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) 06:27:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0xda3f, 0xbae, 0x2, 0xff}, 0x10) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01fffff7debeec07402dc450c67f759bc9a92532cef7ecb4da3757c44a2c457007e52f1652b54c892367f7ab17eff55baac26ccca4b9841c29079a16019be12d32acc5176dad0a54b374552142003bb64ba7b14a928816e19dfa0aca"], 0x13) 06:27:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x1, 0x2c, "99df68", 0x8, 0x4}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000000c0)={0x8001, [0xf2, 0xde], 0x1000}, 0x10) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x3}, 0x6) write$fb(0xffffffffffffffff, &(0x7f0000000000)="5040428d57c1cbb19ac8d6e4cb6f4f71e2c47cbebf54ea76a545fce8595f3f692e2a121a905e15b1d92a0013b4fed5ea9435f7b4024b8f628043aa9821e91b93a5c6142308de4a384b38bac28a88e24516385044ada2121e8ae904d048127a88e9463e9094e618226a01a3413ba0", 0x6e) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000911"], 0xa) 06:27:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x305400, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000080)={0x36}) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x8300, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x9}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x43}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x81}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc840}, 0x8000) 06:27:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) 06:27:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) setns(r1, 0x10000000) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:27:50 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x81, [0xffffffff, 0x2], 0x81}, 0x10) 06:27:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x2, "c646f5", 0x2, 0x2}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x1, 0x8, "13b891", 0x3, 0x4}) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ce0a0402008306f835507b56d8e5ce4058c068aa9b"], 0x6) 06:27:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netpci0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2e}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 06:27:50 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="ce7b3ab150364926ca7a724298b2aa0fe9ee32c08f2c755d59a99dbf470886c2a5e23301e0cb7723b275945803f84d1c55c5056bd75dc4e2c83a742638a0be53d31190b56b6b2b73cfa2a4d26e7c5100eab75e47399443ea99779973e3d52afc09bdca7f23b82a0a1428956a2723515f2ad54a8c20874c5f30fee83aaf7d8707776c350b1a360b626f732003cd9ed4b4853a9c082af155e420f2b78a1cfc7c3c942262f91bb2b63e79ebc14e213c6583175fbb759b57889c811e31c057bfa0f59a94e1f0411e4187cb13472ad22addfd78a64baab94d46405f1fc1505001a8bc693135688ac451", 0xe7}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES32], 0x13) socketpair(0x18, 0x4, 0x0, &(0x7f0000000000)) 06:27:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000280)="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") bind$bt_hci(r0, &(0x7f0000000000), 0x6) 06:27:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c841}, 0x20040094) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a04d2533683f50b05445b286964484306942ab5e6f76db191a9552af9d173fb2da9bf5e988f1fb755761afd94ead009dbb3e7f5bd50269f7ec2cb8301273976670865c4ca13ecabb43aa6f4b79fa0096351b22958e4eeea251ea"], 0x13) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}}, {0xa, 0x4e20, 0x0, @private1}}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r6}}, 0x128) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r6, r3}}, 0x18) 06:27:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:51 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x2, 0x3, 0x40, 0x2, 0x7}, 0x1, 0x68aa}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0x1e) 06:27:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xdf81f5bd1b5e1aac}, 0x8800) 06:27:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffe, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x86000, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x3f, 0x81}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) 06:27:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="ac8a103d9230ec0232716d3b1e66172a8a696aa869e5cf3eb955359663ccccf6a307c5fcabce97fc28ca65b0ce1d3717882802bc9aaf24c6b8bbd755c5a9053b83bc798d40069d"], 0xb) 06:27:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 06:27:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x2, [0x9, 0x1ff], 0x9}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @reject_sync_conn_req={{0x42a, 0x7}, {@any, 0x2}}}, 0xb) 06:27:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) inotify_init() bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:27:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x6) 06:27:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f00000000c0)="c95cea81ca4aeccf8442996063665ae15ba0f0f7f402335ec8af27ac0cf3de60fca915d6ccfc9293399aaa7786cc6a52e2d0ba9647c0c8a9ac51584e2d2a7d8e9f79751e03a62aeb2a187d3d0970ec000e6edaf423ee2865de4355172efac999b7aab4a47306d27e1617a9fbfa6cea607d7fabc1810fda6805f9bb6ec28babbb6f6a3930547480bff300a142b65cb75ff9297577955c34995a7a2e0905ebbef0c14e5052984c803f6b3905c4aa9401e923dc617ce7967d6a8ce09eab0db8d160e8c3e080a81b64789e40f365716c3e42d4f4943548f9b8bb56ea4e6fb937") write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) [ 2713.439010] Bluetooth: hci4 command 0x0401 tx timeout 06:27:51 executing program 0: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x140, 0x300, 0x556, 0x4b0, 0x4, 0x2c, 0x20, 0x0, {0x20, 0x5, 0x1}, {0xa8, 0x7fff, 0x1}, {0x80000001, 0x6}, {0x800, 0x7}, 0x2, 0x10, 0x8, 0x8000, 0x0, 0xfffffff8, 0x0, 0x6e1, 0x4, 0xcf, 0x21ff, 0x9, 0x2f, 0x100, 0x2, 0xa}) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000100)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2a0000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x190, 0x960, 0x60, 0x600, 0x3, 0xffffff36, 0x8, 0x0, {0x10001, 0xd12}, {0x40, 0x10000}, {0xcebd, 0x7, 0x1}, {0x9, 0xfffffffc, 0x1}, 0x1, 0x1, 0x1, 0x3, 0x1, 0x8, 0x0, 0x0, 0x94, 0xfffffff7, 0x20, 0x3000000, 0x27, 0x4, 0x0, 0xa}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3, 0x2}, 0x6) 06:27:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x6) 06:27:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0xb) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) 06:27:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:51 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000040)=0x6, 0x4) 06:27:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:27:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f00000000c0)="9f1a11f1d9cdf74d8b064ca82ca83aee939d360f7daa965fd98fbb251896cad542def990152da6c52719c5138d34081e8945ebc464f65051d3a100f77934ab5fc135d2a97abd3cb34136dec639aa1948c4fca7acb0edd4132e3c64f6ca0e56b61d3934ae") write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0xffffffff, @rand_addr=' \x01\x00'}}}, 0x48) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES16=r0], 0x6) 06:27:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) read$fb(0xffffffffffffffff, &(0x7f0000000040)=""/249, 0xf9) 06:27:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000004c0)={0x1f, 0x3, 0x3}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000480)={0xa6a, [0x8000, 0x9f2], 0x8000}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000ffe600000000000000001c79db0e0fded6c1b97437dee895c2148ab623999b93d4d9afa3bec3106ae17114e8f77a37309a2da77a6c7be42d9e0bd0df47e8d78ea360e00d5b6d58520eb73c7a0dd84b5a3220a7be4bacbcfaf0260dcdaf38f41bb9"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}}, 0x800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xbc8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x20040094) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'bridge_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x1c}}, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7eb514d440464a471727a47cc003", @ANYBLOB, @ANYBLOB="be0387b3900011d5ad", @ANYRESDEC=r0], 0xb) 06:27:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x13) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38f200000714000827bd7000fbdbdf25080001000000000900020073790100000000000800010000000000223aa4eaca4a"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 06:27:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000000)="59bc85ef0841a508c3fa5ca078e500c7f2c863206edd04134098131c0605323fd8e1624ca8c8126ce399e4113768953b1f1d73b0a16e3c89e3327fe4726eebb66bc60b2523c91cd3e0e688b711a860d9254bf269ebe9fc6d83bb7a5c2e1ee94652") 06:27:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000000c0)={0x6, [0x9, 0x40], 0x1}, 0x10) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2701e81aa3e9311cb3800738d38a750d92a1762af82016abbae1a43a806d57c112fc166d77ce1aab210e0866e1e5adf9c4cb1c7aed8cdf1d4087536c4b7f1924abda3f23c6bb789fe34511298d32be9b4ef82c9a1c0d38189fc73f66fc291470c4b0819e529b84aa93e30000000000000000"], 0xb) 06:27:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000200)=0x9a, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000100)=0x3, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0111edd1098cbd04020000"], 0x6) 06:27:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3cd104a359935ccf3710dfd421ed495103ede2fc951b43ef5105e7a80a597d4a7a12c924075618086ceccd99ad29fd4542eec6de06a2ff9742d0212bfb164f1d453a98a42196536193dcfe2a0eaa6e501b7f993ddfff8f18697888e6fcec61de286a98a86a115ff5baa640dc556c15f782e9549d908103184de375c2dde1d715e4430c", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf250900000008000b000400000008003c0003010000060028000000000008003400080000000600280002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004050}, 0x4040804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r5}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, 0x0, 0x504, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x804) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01a1ff1dde272fa961a1434bd85acf1bb2bc08aa653e557b6846490f21575a0e6f9d7e7a97f0b9940e02472ab75756d2e6def707fe1b1c818ab6ceeced0f5d790a4aa73e69121090f542a854f23b205d94d40f"], 0x13) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x401, [0x0, 0x800], 0xf6b9}, 0x10) 06:27:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x1, [0x6, 0xffff8000], 0x250}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x10, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:51 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x704ceb9f8359a51, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffff800}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x800) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x101}, 0x14}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="a81afdf45d3a57b4d282a922069e369b6721f16038c9d2a9aee7f73a1bd2a02a5f29e2432b5fc08db86b30d9b83e947d813f67b7e1fab6e7255db7032c83e0b1702a6d0fb6dea151d05faf4bdf9d5dc521585eec22169b8bdaba408d71eec47843dc2699e03ce1556baba71bd0654088dd79de517d2bf1653e2af8fa79f40f91c962daad371513a48f33ca65fe7920058bf1bcce31edff141255f6a1dfb7d880"], 0x13) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0x24}}, 0x50) 06:27:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) [ 2713.846695] Bluetooth: hci1 command 0x2062 tx timeout [ 2714.158868] Bluetooth: hci2 command 0x0401 tx timeout 06:27:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 06:27:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x200c0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000040)={0x0, 0xfffffffffffff41c}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffc, 0x4}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x300, 0xfff, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xba}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x8b55}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x81}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x100}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x3f}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x1ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40811) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000200)={0x2, 0x7, "000010", 0x1, 0x1}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000080)={r1, 0x1}) 06:27:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="9a429de0290d8cd2f3145af7b0e0d111d0ed81a1b7add3f90993f4719e4d768268b2d3e89cc0f9216b20cb5eea5f59bd123cf013df82b90fafbe60da4f"], 0x13) 06:27:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) [ 2714.558851] Bluetooth: hci3 command 0x0000 tx timeout 06:27:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) 06:27:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)=@caif=@dbg, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/160, 0xa0}, {&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000380)=""/38, 0x26}], 0x4}, 0x40) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x0) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ab05000000000000000000000000000000640ce2e755d71f80088d6305ac553ee019aa7a3a63acd98c65421d139921e91c07ca0a2df1a9f702407e19baa4c23fe5d10a2962dab9a3d3c37c82a054b14531dc1bb8a538b6c56a7b92776c458d4fa9f1f42de01f81e989d662fb4030a0293c10e18973ae763c9576cd274b75ab36a3d4b989816e6298d26f4d4a6eb003e568c52c1492e3239b5f456e6023"], 0x11) 06:27:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:27:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f00000000c0)="1310b57a945496acb55c50a6ce9d26c147a51c5e4b1103f680fd1837710e7e9eb02113528525cdf91cdedb3ac46002b82c8f565dae12f6baa0f35d141d2cf538db8abbac9c2509b90d606900230e37465bcbb8a7917e220ff1b338dcdc43e8b95421ac1a324c95058ccc103e4d4f097cfc6fac0640df09a5e180475b2dbe32f8b5cf3e2eaf418f4e8810be0421105f1a30bc3471cc5fc476d0") bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:27:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:27:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 06:27:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) socketpair(0xb, 0x3, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in, @in=@multicast1}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:27:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) socket$netlink(0x10, 0x3, 0x14) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) r4 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xdffb}, 0x6) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0xc, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xcfbb}]}, 0x34}, 0x1, 0x0, 0x0, 0x40015}, 0x80) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000000c0)="b341e09a89f80c85c10b5e7461f0adc2f19b125bc50116d9b4d243c6e4dd63e422a0d51d53cf120898477679d627f899b65583fb7be2d84f43292c2528d3f887aa879ba54ea3c0ad4827169dfa68a3eb11e27c7ca4a9a1b94bf6b2c6ff6f67384255319ac4b425018e478ca122b202057c4f098bba5f7eb59909e170dd863c2230cd3be4c17caab228802bebf512e2f1696ecc7e8bfe1754bb54fe64ca5ba1ead748c88cb76dae33366ad8d84bf0eb26a2aa3c57fc42027769946591514b55a902ea33fa05f388") r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f00000001c0)=0x20) 06:27:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:27:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\v'], 0xb) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, @llc={0x1a, 0x334, 0x8, 0x5, 0x2, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, @llc={0x1a, 0x320, 0x1, 0x2, 0x8, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, @ethernet={0x6}, 0x6, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)='batadv0\x00', 0x7, 0x8, 0xfc}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200180, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000080)=""/244) 06:27:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x18, 0x800, 0x8, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @xdp={0x2c, 0x8, r4, 0x2e}, @ethernet={0x6}, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x8c7dafcb5514e600}, 0x9, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='gretap0\x00', 0x7, 0xd44, 0x6}) 06:27:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x13) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x34080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000080)=""/134) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xf1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000200)={0xffffffffffffffff, 0xff, "b8fa03", 0x1, 0x3}) ioctl$sock_bt_hci(r2, 0x400448c9, &(0x7f0000000140)="769c0c1db5048a71afc10c5a0eb49e1a6996989e1936d19613ec64bd7cfaa80e56e4") r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000180)={@local}, &(0x7f00000001c0)=0x14) 06:27:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:27:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1a72976b03"], 0xb) 06:27:53 executing program 1: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x8c5f, 0x1, 0x5b}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7141f784}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dce4448}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x274658bb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b1f6ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4008040) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000200)={0xffffffffffffffff, 0xfffe, "e91537", 0xfd, 0x85}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000001c0)={0x100, [0x36, 0x1], 0x8}, 0x10) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='#'], 0xb) 06:27:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x1d, 0x4) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000040)="d0cbd5c9e0e0fba202c4fb965372a06466") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) 06:27:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @switch_role={{0x80b, 0x7}, {@any, 0x6}}}, 0xb) 06:27:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000000c0)={0x6, [0x9, 0x40], 0x1}, 0x10) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2701e81aa3e9311cb3800738d38a750d92a1762af82016abbae1a43a806d57c112fc166d77ce1aab210e0866e1e5adf9c4cb1c7aed8cdf1d4087536c4b7f1924abda3f23c6bb789fe34511298d32be9b4ef82c9a1c0d38189fc73f66fc291470c4b0819e529b84aa93e30000000000000000"], 0xb) 06:27:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000340)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x70}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000898}, 0x8001) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, @isdn={0x22, 0x0, 0xff, 0x1, 0x7}, @nfc={0x27, 0x0, 0x0, 0x7}, @in={0x2, 0x4e24, @local}, 0x3, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)='geneve0\x00', 0xffff, 0x88, 0x66e4}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x1ff}}}, 0x6) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xdb4a464806181846) 06:27:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x13) 06:27:53 executing program 1: socketpair(0x2b, 0xa, 0x80000001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0xe0, 0x57, 0x5, 0x8, @empty, @mcast2, 0x7800, 0x1, 0x1ff, 0x7}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000040)={{0x2, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xfffffffffffffffa}) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="70a8952d374355007c7fed060000000000000089d826b429c32e062763f5ca055f4874bb22f59c280272fd9c9a01c5969e91de3d376ebf5314bb8e5470ce596f5cc8a953cf4c0ca860bf58abf742650b9ebb7d2a2c69c56a"], 0xb) 06:27:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xfff7, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000001c0)={0x2, 0xbd27, "926ca8", 0x5, 0x2}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000009e4f9ad9b018c960337502982fe1d8ac506b2b96bfbcefeb49ddaebf3ce277fed43e77fd16af9bc87d3bd84126e4c9f0ee7a3b", @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4008000) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008}, 0x4000000) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xdf81f5bd1b5e1aac}, 0x8800) 06:27:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x80, 0x700, 0xa6c, 0x8, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@rr={0x7, 0xf, 0x7, [@empty, @multicast2, @remote]}]}}}}}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x150}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000804) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000000)) 06:27:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x2, "c646f5", 0x2, 0x2}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x1, 0x8, "13b891", 0x3, 0x4}) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ce0a0402008306f835507b56d8e5ce4058c068aa9b"], 0x6) 06:27:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r2}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x46010600}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0xc010) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x0, @nfc={0x27, 0x0, 0x0, 0x6}, @hci={0x1f, 0x0, 0x7}, @llc={0x1a, 0x339, 0x1, 0x5f, 0x2, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x3, 0x0, 0x0, 0x0, 0x7fff, &(0x7f00000001c0)='veth0\x00', 0x4, 0x1, 0xfcee}) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:27:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:53 executing program 5: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/167, 0xa7}, {&(0x7f0000000180)=""/114, 0x72}], 0x2, &(0x7f0000000240)=""/56, 0x38}, 0x10122) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000014c0), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0x8000) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f00000002c0)={@none, 0x2}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x3, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000340)=""/4096, 0x28, 0x1000}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001440)={r3, 0x10, &(0x7f0000001400)={&(0x7f0000001380)=""/118, 0x76}}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001600)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000081) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 06:27:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_read_iso_tx_sync={{0x2061, 0x2}, {0xc9}}}, 0x6) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xcaf}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x5b81}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x5}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x61f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4090) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0xffff0021, 0x4) 06:27:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x2, [0x7, 0x5], 0x20}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:53 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x6, 0x2}, 0x6) 06:27:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x4, 0x1, 0x3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 06:27:53 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @rc={0x1f, @none, 0xff}, @sco={0x1f, @none}, @sco={0x1f, @none}, 0x3, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)='tunl0\x00', 0x5, 0x1, 0x100}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x4, 0x0, [0xffff, 0x712e, 0x0, 0x8, 0x1f4a80, 0x8, 0x7fffffff, 0x200040, 0x148, 0x4, 0x6, 0x2, 0x1, 0xfffffffc, 0x2309, 0x2]}], r3, 0x1, 0x1, 0x48}}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x4400, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r6, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES64, @ANYRESDEC=r0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES64, @ANYRES64=r5, @ANYRESOCT=r1], 0xb) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0x2, 0x4}, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@local}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) [ 2715.928762] Bluetooth: hci1 command 0x2062 tx timeout [ 2716.238722] Bluetooth: hci2 command 0x0000 tx timeout 06:27:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}, {0xc8}}}, 0x6) 06:27:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x84000) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/230) 06:27:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="476493c22b8502662a156ec9a2b23e79db671998f844c6c9374b9866cb533cc90aa55f23ca8b310690eddedd78bb8d8626dac3939ab43ee03b4e03b7889b593fa7bea9b174f4b97e56c759f8fdba745405785508bdaa13eff6d60a0c771cfe42ab6d947fe3520f7d66e4e048cfc3c5083a3d9f0c3ed48b3186de89660c43106830cb8701a8f711a4907f194bddd4bc75bf4883d5d024a20f9bbce0c2314ed052a72332ebf86893d43015bee69fab4e45d5c830e44e4b6a9705e7bca0678304ae8c8139a72b1c6b48ec7127a9bed753eb5f3887d511f327abfc13b9578fba59b2c0fb7615a966b747d333b4f832ed54934a9da0533ae6882149cddf71ea730a88a13f2505e020343c266f3fb34baaa0aca3f3bd1a2d165a857d0b"], 0x13) 06:27:54 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x1, 0x70bd2d}, 0x14}}, 0x4000) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044005) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x4, 0x3]}, 0x10) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) [ 2716.640388] Bluetooth: hci3 command 0x0000 tx timeout 06:27:54 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffe, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x13) 06:27:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="83939e2b0041f3096caad1ffc9d40f135a340c75d1baaeeea9e21e2066346498dd59c8c0555ab711731e7c1474c87031cc22dcac06bca480edbeadfd116b62df1b117b6ac7ebefe860a0a60c32fe41bf5317effd"], 0x6) 06:27:54 executing program 0: ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1}, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r9, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r10}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000100)={0x484, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xb4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe, 0x5, "ec537561086f2c689422"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x569}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3240}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x4}]}, @ETHTOOL_A_BITSET_VALUE={0x64, 0x4, "9a85480444dddf52d0df3142d86615d52661b52b0af94b9eaa38bbcff8751282941c03b47c7b5aa82b1765b7b26da50d29e6941a0211c1e2ca22b2377a5bdb8cfb02dcc203b20708fc44f42fda569b5b21edf1b414ab9096f8ac222feefecc8c"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x70, 0x5, "635f24bda18323664e7fac2f69f041ce2c0a79e1fa32cdec316d8d90696a3c3a36bc9030a85d1d93b0724f6014103741e26595cbfaa7e8362506926f394b2f194bd1dd92972c3def6eebf3d2b045569e1177d493ac55760779df222122a2f359357e442598b36ac270b3d962"}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$.#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '/(!\\,$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{^\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xe4\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '${-\\\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x317}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '%:@*.}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x154, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xae, 0x5, "6dd0d45abca673079f4e8aad324b494d09769d8a80f1069eb243cc0f74adb7964cfc99d9f21a0176d17c044e43e8b934789341b894ea3d070837ad21b0f1a219637a7f9c8f638f57ed40c2416ea25b11ac6f42549fc3fbd106c2c29ca6d54f3114cbb987152be2131f565bc49d36eb2eabd82790a0d22067ee270a66495623b2b445fb2a6e0643073db61152d7bc3f7f2ef761c402a4bff4a769d6e76d8ac5d9f241ffa43558b1fa6546"}, @ETHTOOL_A_BITSET_MASK={0x91, 0x5, "af07fc4cbbd6e7f33a7011e09601b1dca7e5affc2f4b9927f36f205020eca412d5b244b6900b2b2831cff0880991c77fa0c0f4b767b504a8d5b3b42abbdd515fe3bf1ecf2050a6a151f22b6882b90b5e13484b0428cadc19a80fa1b9dc33dd247247f74ebad29529c30ad570c4e7ca2038f9c6a48b3b23002f4449aa865945097f3ac09af9e3d267fc92a2bcfd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x484}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6'], 0xb) 06:27:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000100", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xab4c61e2d90a64ce}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x8080) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r5}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x880) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000240), 0x1e) 06:27:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xbffe, 0x2}, 0x6) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80}, 0x40010060) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0111e444bb1a"], 0x6) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000000}, 0x40800) 06:27:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001480), 0x111142, 0x0) socket$can_raw(0x1d, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="01ffff2c4559ea517887c1321407c0f5d500425e6522de016a4df287a7d774a341c10f9f0bb888ce11cc510c349199af1aa7837f4e37f0864a90079c9a98c492a358596258e59daf220e42ec0b82067d97d601ec78c8b929c6a2c3bc3814a13963a43c214f49656c832e2ed0ffffecebb422d85728b1e6c8dd78311edcdf95179cc8fcadaf6652c177b4c99e"], 0x13) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x9, [0xffffffe0, 0x5], 0x7dee}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) 06:27:54 executing program 3: setns(0xffffffffffffffff, 0x8000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0xf6, 0x5, 0x5, 0x24, @remote, @local, 0x7, 0x700, 0x100, 0x7898fbff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x44) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x13) 06:27:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x1, [0x9ef11a33, 0x3], 0x5}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x1, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x3}}, {{0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x3}, {0x1, 0x0, 0x1, 0x1}}], 0x38) 06:27:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x13) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x4, 0x76, "000002", 0x10, 0x59}) 06:27:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:54 executing program 3: setns(0xffffffffffffffff, 0x8000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0xf6, 0x5, 0x5, 0x24, @remote, @local, 0x7, 0x700, 0x100, 0x7898fbff}}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x44) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x13) 06:27:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x4, 0xfffffd9e) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffdc8) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x0, 0x3}, 0x6) 06:27:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) 06:27:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="038a739f09da52110e8d0ffa6f66370872168a03b1b7b9c1eb613f390c8b6f698c3e57863d14c2ea760ee9fc"], 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000), r1, 0x0, 0x0, 0x1}}, 0x20) 06:27:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @accept_phy_link={{0x436, 0x32}, {0xc9, 0x1, 0x3f, "14f602d8389720faea96ea94fc6f9c4647ded71f7409b46381591b7f2a9b4e86aa1029200f71973e86247b4c1ac3de"}}}, 0x36) 06:27:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0xc0000036, &(0x7f00000000c0)="24365617df9222cf104bb06e19f143f1ec9a5e0c979ed7e38f8aaf0bbb5f984c730dfbb4c93af21616c14cdb5821d96d4462829d774322e55bd522f0a56f06721185abdcebac1a6621efdeccc75fa0142f0f7e8dabcf28c81eb103aadd113c3d6fdc4e972256ae7b664c5be27e9f3fd5def8cecfaf7970e919d8c4fcf514c6de67658c95cd4cfab9a49f477053de63e895e324ab43951b8ff33b02f23a18eb5e95d050ebe4874c1096fdfdb419e4941bdde427c0a2a297ae606276d001187bfef1a429cf7002f04b70bd") r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) 06:27:55 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x20008845) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:55 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:27:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0xd9, "b06724", 0x2, 0x6}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) [ 2717.071548] FAULT_INJECTION: forcing a failure. [ 2717.071548] name failslab, interval 1, probability 0, space 0, times 0 [ 2717.083406] CPU: 1 PID: 5312 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2717.091220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2717.100871] Call Trace: [ 2717.103447] dump_stack+0x1b2/0x281 [ 2717.107145] should_fail.cold+0x10a/0x149 [ 2717.111276] should_failslab+0xd6/0x130 [ 2717.115232] __kmalloc+0x2c1/0x400 [ 2717.118751] ? hci_sock_sendmsg+0x83c/0x1c80 [ 2717.123155] hci_sock_sendmsg+0x83c/0x1c80 [ 2717.127568] ? __might_fault+0x177/0x1b0 [ 2717.131625] ? aa_file_perm+0x2dd/0xab0 [ 2717.135584] ? hci_send_to_channel+0x200/0x200 [ 2717.140343] ? lock_acquire+0x170/0x3f0 [ 2717.144584] ? security_socket_sendmsg+0x83/0xb0 [ 2717.149504] ? hci_send_to_channel+0x200/0x200 [ 2717.154151] sock_sendmsg+0xb5/0x100 [ 2717.157952] sock_write_iter+0x22c/0x370 [ 2717.161993] ? sock_sendmsg+0x100/0x100 [ 2717.166473] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2717.171398] ? iov_iter_init+0xa6/0x1c0 [ 2717.175353] __vfs_write+0x44c/0x630 [ 2717.179046] ? kernel_read+0x110/0x110 [ 2717.183020] ? rw_verify_area+0xe1/0x2a0 [ 2717.187081] vfs_write+0x17f/0x4d0 [ 2717.190618] SyS_write+0xf2/0x210 [ 2717.194050] ? SyS_read+0x210/0x210 [ 2717.197656] ? __do_page_fault+0x159/0xad0 [ 2717.202130] ? do_syscall_64+0x4c/0x640 [ 2717.206096] ? SyS_read+0x210/0x210 [ 2717.209743] do_syscall_64+0x1d5/0x640 [ 2717.213730] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2717.218903] RIP: 0033:0x4665f9 [ 2717.222090] RSP: 002b:00007ff6db2af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2717.229783] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2717.237039] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2717.244303] RBP: 00007ff6db2af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2717.251558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2717.258813] R13: 00007ffdefc953df R14: 00007ff6db2af300 R15: 0000000000022000 06:27:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44814}, 0x54) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x8268f1183a647d79, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x36a}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x40080) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x54) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:27:55 executing program 3 (fault-call:2 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:27:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$fb(r1, &(0x7f00000000c0), 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0)=[{{0x3, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x8) 06:27:55 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000240)={0x11, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x8, 0x1000, "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", 0x73, 0x9, 0x0, 0x67, 0x20, 0x92}, r0}}, 0x120) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0xfffffffffffffeea) 06:27:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x7, 0x7f, 0xff, 0xfffffc01}, 0x10) 06:27:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f0000000080)={r6, 0x1}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000040)={@loopback, r4}, 0x14) [ 2717.731116] FAULT_INJECTION: forcing a failure. [ 2717.731116] name failslab, interval 1, probability 0, space 0, times 0 [ 2717.747339] CPU: 1 PID: 5322 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2717.755189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2717.764835] Call Trace: [ 2717.767850] dump_stack+0x1b2/0x281 [ 2717.771528] should_fail.cold+0x10a/0x149 [ 2717.776083] should_failslab+0xd6/0x130 [ 2717.780077] kmem_cache_alloc_node+0x54/0x410 [ 2717.784887] __alloc_skb+0x5c/0x510 [ 2717.788620] hci_sock_sendmsg+0x10d6/0x1c80 [ 2717.793043] ? hci_send_to_channel+0x200/0x200 [ 2717.797813] ? lock_acquire+0x170/0x3f0 [ 2717.801795] ? security_socket_sendmsg+0x83/0xb0 [ 2717.807103] ? hci_send_to_channel+0x200/0x200 [ 2717.811690] sock_sendmsg+0xb5/0x100 [ 2717.815407] sock_write_iter+0x22c/0x370 [ 2717.819470] ? sock_sendmsg+0x100/0x100 [ 2717.823460] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2717.828393] ? iov_iter_init+0xa6/0x1c0 [ 2717.832368] __vfs_write+0x44c/0x630 [ 2717.836085] ? kernel_read+0x110/0x110 [ 2717.839985] ? rw_verify_area+0xe1/0x2a0 [ 2717.844045] vfs_write+0x17f/0x4d0 [ 2717.847599] SyS_write+0xf2/0x210 [ 2717.851053] ? SyS_read+0x210/0x210 [ 2717.854711] ? __do_page_fault+0x159/0xad0 [ 2717.859035] ? do_syscall_64+0x4c/0x640 [ 2717.863014] ? SyS_read+0x210/0x210 [ 2717.866675] do_syscall_64+0x1d5/0x640 [ 2717.870569] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2717.875755] RIP: 0033:0x4665f9 06:27:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000480)) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="52d99deb73f14172996d"], 0xb) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x101400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f00000004c0)={0xffffffffffffffff, 0xcc, "64b3ad", 0x3a, 0x80}) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="b1727aa1", @ANYRES16=r4, @ANYBLOB="100026bd7000fcdbdf250a00000008002c0007000000050029000100000008003c007f0800000a000900aaaaaaaaaabb00000500330000000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000818) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r6}}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="65727370616e30000000000081000000", @ANYRES32=0x0, @ANYBLOB="000700107fffffff000000054f2600bc00660000400490780a010102ffffffff442cd321ac141438000000b6ffffffff000000027f000001018000000a01010000000001ac1e0101000000040044148f10000000020000000700010000fffffffd8913f70a010101e0000001ac1414aaac1e0001831b83ac1e01010a010101640101016401010164010100ac1414aa862f0000000307125b694491ba40b789675b8de09426a7b400051dd9fd00121e15a6a91b9ac3bbcdc739db01fc781e86060000000100000000"]}) 06:27:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01010000", @ANYRES16=r1, @ANYBLOB="10002cbd7000fcdbdf250d000000050035000200000005003800000000000a0009000180c20000020000050029000000000005003000000000000500370000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x84) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:27:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'erspan0\x00', r3, 0x1, 0x0, 0x0, 0x59, {{0x24, 0x4, 0x1, 0x6, 0x90, 0x67, 0x0, 0x4, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}, {[@cipso={0x86, 0x4b, 0x2, [{0x5, 0xe, "75a1a9851388d9544eed0373"}, {0x5, 0x4, "8ba3"}, {0x0, 0xf, "57f07519e37eeddae5ceb1589a"}, {0x5, 0x5, "5614dd"}, {0x0, 0xa, "0686b5c3c9a0f409"}, {0x1, 0x8, "826c89e87e06"}, {0x0, 0x8, "6cb5119411fe"}, {0x0, 0x2}, {0x6, 0x3, 'a'}]}, @cipso={0x86, 0x2f, 0x3, [{0x6, 0x3, '6'}, {0x7, 0xc, "16d5130e3b1f694ed949"}, {0x1, 0x7, "5c90e7d027"}, {0x1, 0x5, "17eba5"}, {0x2, 0xe, "7e02942b584ddb7470e9626d"}]}]}}}}}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8041}, 0x800) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fcdbdf250e00000008003100f9ffffff23000600", @ANYRES32=0x0, @ANYBLOB="33a4855d376d240a072b40afb155ca40fc359561bc74f0438dace68c588b15aedc3a87b14d3e5d2dc8433aec9f8fd0f97aaa1dfaf9158009a3eb0b0197a96f3bb1b6069b106c5e49cfcb90483abefe135abd2c215470dc14d9f859b7825b75fad762aa709e1b7b67c755bb42000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040084}, 0x4) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="895f1c4fe1737b1bd536635374c47da4eb65773d67ed5de8e302c4a9f2c3712d1f740000001628bdbb4714b5d5b598bcb65dbf9bbf246853d94f7284a4546f0a88424c64e4840a5654010a804b4d57b6ea93d21d03cea26889823cbd654964cfb30d163180efa9f2125e8b305fcb74300439032e8cfa837270fc2a57e0cdd5da49107c89fe8bdbe763df1792237282dcb2903c58c85b5f5b7fc4126338e985d8e04c90c08fdda1b84417590a806377432bb3000a379efafb5a8a83ff1d4353dc4d8b6e"], 0x13) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffff90}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0xc01) [ 2717.878939] RSP: 002b:00007ff6db2af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2717.886648] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2717.893932] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2717.901213] RBP: 00007ff6db2af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2717.908523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2717.915933] R13: 00007ffdefc953df R14: 00007ff6db2af300 R15: 0000000000022000 06:27:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000001580)={0x7ff, [0x8000, 0x6], 0xffff}, 0x10) 06:27:56 executing program 3 (fault-call:2 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:27:56 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x2404c800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {}]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xfffd, 0x3}, 0x6) 06:27:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r2}, 0x10, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x24000041}, 0xcf92c1ef1ddac45) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48001}, 0x41) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) socketpair(0x2b, 0x4, 0x3ff, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000080)={r0, 0x1f}) [ 2718.002332] Bluetooth: hci1 command 0x2062 tx timeout 06:27:56 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$fb(0xffffffffffffffff, &(0x7f00000000c0)="8fb9b1a0f6e2aacd21d92bf037d66423939029f6a396e1a3c06475a35ee45c2c6942bb4033b29917b4e2221393930868d898ce8429954d967ca69ec2614ebd117fbcbac6fc0821ca48f95e32aa1f5b20541b4a565377598122d134aba14205bd422eeaa79f226283e1cb296dc683a0163b07ddd482b7d052a4b58ac18555827fdae81756478daca1ef44307e9687bf24d50876ddfe393ca9f65b331b3db07f46158576915f056b6068e63dcd5a5d5caf41baac8962a3fc543ff2c94c040d", 0xbe) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000180)) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}, {0xc9}}}, 0x6) [ 2718.033432] FAULT_INJECTION: forcing a failure. [ 2718.033432] name failslab, interval 1, probability 0, space 0, times 0 [ 2718.057656] CPU: 1 PID: 5383 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2718.065489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2718.074955] Call Trace: [ 2718.077560] dump_stack+0x1b2/0x281 06:27:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0x7, [0x3, 0x1c9e], 0x6}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f00000001c0)=0x1000, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}]}, 0x70}}, 0x10) 06:27:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x2, 0x101, "209d12", 0xa4, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) [ 2718.081204] should_fail.cold+0x10a/0x149 [ 2718.085382] should_failslab+0xd6/0x130 [ 2718.089372] kmem_cache_alloc_node_trace+0x58/0x400 [ 2718.094397] __kmalloc_node_track_caller+0x38/0x70 [ 2718.099336] __alloc_skb+0x96/0x510 [ 2718.102966] hci_sock_sendmsg+0x10d6/0x1c80 [ 2718.107293] ? hci_send_to_channel+0x200/0x200 [ 2718.111909] ? lock_acquire+0x170/0x3f0 [ 2718.115892] ? security_socket_sendmsg+0x83/0xb0 [ 2718.120658] ? hci_send_to_channel+0x200/0x200 [ 2718.125240] sock_sendmsg+0xb5/0x100 [ 2718.128953] sock_write_iter+0x22c/0x370 [ 2718.133013] ? sock_sendmsg+0x100/0x100 [ 2718.137019] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2718.142072] ? iov_iter_init+0xa6/0x1c0 [ 2718.146574] __vfs_write+0x44c/0x630 [ 2718.150292] ? kernel_read+0x110/0x110 [ 2718.154327] ? rw_verify_area+0xe1/0x2a0 [ 2718.158391] vfs_write+0x17f/0x4d0 [ 2718.161926] SyS_write+0xf2/0x210 [ 2718.165383] ? SyS_read+0x210/0x210 [ 2718.169012] ? __do_page_fault+0x159/0xad0 [ 2718.173334] ? do_syscall_64+0x4c/0x640 [ 2718.177324] ? SyS_read+0x210/0x210 [ 2718.180954] do_syscall_64+0x1d5/0x640 [ 2718.184829] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2718.190010] RIP: 0033:0x4665f9 [ 2718.193203] RSP: 002b:00007ff6db2af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2718.200926] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2718.208192] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2718.215453] RBP: 00007ff6db2af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2718.222708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:27:56 executing program 3 (fault-call:2 fault-nth:3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) [ 2718.229962] R13: 00007ffdefc953df R14: 00007ff6db2af300 R15: 0000000000022000 06:27:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x1, 0x4], 0xeb}, 0x10) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:27:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$fb(0xffffffffffffffff, &(0x7f00000000c0)="2d5bf4fa4e3fccf9ce93096694db52e2b8b9520c3f201b592c3fb4fc62a72805bb39f7580b1949165f35dc289a4fc91436efcdb35b52dfc162bfe19d1d6e0f36c5b8878ef45b7555858abd30594db8e9ce773097fe5717ecc86b7ac398e82ff56077f7c54b93d8aececadc0597b77bda2f9a3a152648510cc6190b1dc34f9979", 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x0, [0x10001, 0x3], 0x53d3}, 0x10) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested}, 0xfffffffffffffe7a) 06:27:56 executing program 5: ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) r1 = socket$netlink(0x10, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 06:27:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000100)=""/108, 0x6c}, {&(0x7f0000000180)=""/117, 0x75}, {&(0x7f0000000280)=""/180, 0xb4}, {&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f00000003c0)=""/248, 0xf8}, {&(0x7f00000004c0)=""/179, 0xb3}], 0x6, &(0x7f0000000600)=""/142, 0x8e}, 0xa020) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfd65}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESOCT], 0xb) bind$bt_hci(r1, &(0x7f0000000940)={0x1f, 0x1}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'vxcan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffc1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000010}, 0x4008080) [ 2718.315116] FAULT_INJECTION: forcing a failure. [ 2718.315116] name failslab, interval 1, probability 0, space 0, times 0 [ 2718.326752] CPU: 1 PID: 5416 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2718.334537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2718.343881] Call Trace: [ 2718.346465] dump_stack+0x1b2/0x281 [ 2718.350100] should_fail.cold+0x10a/0x149 [ 2718.354232] should_failslab+0xd6/0x130 [ 2718.358190] kmem_cache_alloc+0x40/0x3c0 [ 2718.362235] skb_clone+0x126/0x9a0 [ 2718.365788] hci_send_to_channel+0x135/0x200 [ 2718.370180] hci_sock_sendmsg+0x13ac/0x1c80 [ 2718.374499] ? hci_send_to_channel+0x200/0x200 [ 2718.379066] ? lock_acquire+0x170/0x3f0 [ 2718.383024] ? security_socket_sendmsg+0x83/0xb0 [ 2718.387760] ? hci_send_to_channel+0x200/0x200 [ 2718.392323] sock_sendmsg+0xb5/0x100 [ 2718.396027] sock_write_iter+0x22c/0x370 [ 2718.400067] ? sock_sendmsg+0x100/0x100 [ 2718.404121] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2718.409231] ? iov_iter_init+0xa6/0x1c0 [ 2718.414382] __vfs_write+0x44c/0x630 [ 2718.419410] ? kernel_read+0x110/0x110 [ 2718.423469] ? rw_verify_area+0xe1/0x2a0 [ 2718.427605] vfs_write+0x17f/0x4d0 [ 2718.431478] SyS_write+0xf2/0x210 [ 2718.435957] ? SyS_read+0x210/0x210 [ 2718.439653] ? __do_page_fault+0x159/0xad0 [ 2718.444149] ? do_syscall_64+0x4c/0x640 [ 2718.448202] ? SyS_read+0x210/0x210 [ 2718.451994] do_syscall_64+0x1d5/0x640 [ 2718.456380] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2718.461743] RIP: 0033:0x4665f9 [ 2718.466952] RSP: 002b:00007ff6db2af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2718.475280] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2718.482920] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2718.490261] RBP: 00007ff6db2af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2718.497859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2718.505570] R13: 00007ffdefc953df R14: 00007ff6db2af300 R15: 0000000000022000 06:27:56 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240), 0x1e) 06:27:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000040)="c73335f3f78707337eabef643f36d95fbc1c39ec72a8653e565d04d380440f94b72f493dff950e6b9aaf1806ca5a199172f5b10885988fb23d529cd6fa3ebfb347c4141e46cdeb565dd090299c16ec0d0e38c055ca1409018086e7804ad243d11841d1a4a65033c59be1aa60e710f0c007d77a73192ee5de624bfeacfb05be8fccd61563c20c74006faa71761fa955573d7dffad9b618a9a2caf9d0b74e3da10150a1ace74cdd08c897f294ccc0941ad78dae04a0026fb41de3fdc004ef5be9bbf6e4bd0c7cc34a3f314f0d5e14ccddcb9008eeb446d48258bea7b1c97206f4745465d25a53f826340f6") write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) prctl$PR_GET_TSC(0x19, &(0x7f0000000140)) [ 2718.513894] Bluetooth: hci2 command 0x0000 tx timeout 06:27:56 executing program 3 (fault-call:2 fault-nth:4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:27:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000040)={@local, r4}, 0x14) 06:27:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$bt_cmtp(0x1f, 0x3, 0x5) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x7f, 0x1f, 0x9, 0x0, @empty, @remote, 0x40, 0xa0, 0x58, 0x7f}}) [ 2718.596702] FAULT_INJECTION: forcing a failure. [ 2718.596702] name failslab, interval 1, probability 0, space 0, times 0 [ 2718.629336] CPU: 0 PID: 5430 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2718.637934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2718.648809] Call Trace: [ 2718.651398] dump_stack+0x1b2/0x281 [ 2718.655235] should_fail.cold+0x10a/0x149 [ 2718.659846] should_failslab+0xd6/0x130 [ 2718.664349] kmem_cache_alloc_node+0x263/0x410 [ 2718.670057] __alloc_skb+0x5c/0x510 [ 2718.673766] mgmt_cmd_status+0x43/0x460 [ 2718.677978] hci_sock_sendmsg+0x10a4/0x1c80 [ 2718.682420] ? hci_send_to_channel+0x200/0x200 [ 2718.687005] ? lock_acquire+0x170/0x3f0 [ 2718.691155] ? security_socket_sendmsg+0x83/0xb0 [ 2718.698409] ? hci_send_to_channel+0x200/0x200 [ 2718.706309] sock_sendmsg+0xb5/0x100 [ 2718.710015] sock_write_iter+0x22c/0x370 [ 2718.714241] ? sock_sendmsg+0x100/0x100 [ 2718.718381] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2718.723556] ? iov_iter_init+0xa6/0x1c0 [ 2718.727828] __vfs_write+0x44c/0x630 [ 2718.732184] ? kernel_read+0x110/0x110 [ 2718.736086] ? rw_verify_area+0xe1/0x2a0 [ 2718.740171] vfs_write+0x17f/0x4d0 [ 2718.743743] SyS_write+0xf2/0x210 [ 2718.747205] ? SyS_read+0x210/0x210 [ 2718.750985] ? __do_page_fault+0x159/0xad0 [ 2718.755814] ? do_syscall_64+0x4c/0x640 [ 2718.760237] ? SyS_read+0x210/0x210 [ 2718.764125] do_syscall_64+0x1d5/0x640 [ 2718.768100] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2718.774054] RIP: 0033:0x4665f9 [ 2718.777917] RSP: 002b:00007ff6db2af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2718.785963] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2718.794576] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2718.802557] RBP: 00007ff6db2af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2718.810048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2718.818537] R13: 00007ffdefc953df R14: 00007ff6db2af300 R15: 0000000000022000 [ 2718.958469] Bluetooth: hci4 command 0x0401 tx timeout 06:27:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80800) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000100)) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x600000, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 06:27:57 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000400)={@mcast1, r0}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/82, 0x52}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f00000001c0)=""/104, 0xfffffffffffffe17}], 0x3, &(0x7f00000002c0)=""/134, 0x86}, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) write$bt_hci(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0113200ec9000600ff0f09000000040000003dc135b762b958dba926b71794c2a60981adb814fd8808c337e02a57549c5e5d28d0b1f828fafdb2d9fa550d9df1f3c546647fbcd2caf7150b8ae1b47e0400"/91], 0x12) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x2}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d1}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) 06:27:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="030013"], 0x13) 06:27:57 executing program 3 (fault-call:2 fault-nth:5): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:27:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0111f304020000"], 0x6) 06:27:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0xb) 06:27:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x6}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x224, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x78, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71052f03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe265}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22d5af13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8fc6899}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56807342}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac62}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79c3}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8ed6c38}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x415e81ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47b9}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70d3a6d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5807e446}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe723}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8fe1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x663e629f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ed01378}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e4b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3f5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x567f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a42b25}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe947}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x683afbd4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfce7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3acb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6014}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f1b0c0f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde1a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xdc, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5615}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdd72}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fbbdfca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcffe}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7860}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7907f005}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51227878}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1228}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x81b8621}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x458295a6}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a59}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdafa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22036337}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xecd5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1111}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fb29cca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f08}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d2b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x372c2ea0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a4c8db8}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x80}, 0x20000804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) [ 2719.043435] FAULT_INJECTION: forcing a failure. [ 2719.043435] name failslab, interval 1, probability 0, space 0, times 0 06:27:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$bt_hci(r0, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYBLOB="0359ad5a2c50cc59ed1a579df8d2d04ff034a30fdf400c8f849d561b30ef2e76d0ddd479d69aff69ff7829b81e5ad7549b920633902e996603ff65c6291b41bdb931936db63b5ca3e577ea306a20cbccf0827485afb3f6c0fb78e6448ba6653d334df43f7e2c6c8c99074eadaeb30c15cb2d16e1e387f765dd0d3069c52c3a803744b1b7877b0a4ccf3b6e4a7fb1ba0362b25b944e646519f58f771f34c580bcd24ff1cb2b90ae257d02e6edf1b090b848e8613237275a7c1cfa56d007496b755549e331b5e1ac0d22", @ANYRESOCT, @ANYRESHEX=r1], 0x13) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000080)=""/170) 06:27:57 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x8, 0x3}, 0x6) 06:27:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c7454454efb5c52d8720fd419542086e2f3846e860a0799ebc9068b7f72728b5a3e456a92977cd8c4769e26f2b693bb5d85818f39e867b4b4c2dc985fd6e89da32019d7b540c0f237bbcb7f3bc7e086f692bf80e37d6538b"], 0xb) [ 2719.112544] CPU: 0 PID: 5453 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2719.121109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2719.130464] Call Trace: [ 2719.133061] dump_stack+0x1b2/0x281 [ 2719.136696] should_fail.cold+0x10a/0x149 [ 2719.140851] should_failslab+0xd6/0x130 [ 2719.144829] kmem_cache_alloc_node+0x54/0x410 [ 2719.149333] __alloc_skb+0x5c/0x510 [ 2719.152967] create_monitor_ctrl_event+0x3a/0x3a0 [ 2719.157814] mgmt_cmd_status+0x28d/0x460 06:27:57 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x2, 0xa, 0xffffffff, &(0x7f0000000540)={0xffffffffffffffff}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000580), &(0x7f00000005c0)=0x4) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:57 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fcdbd21cbcef661c69aa030073797a308000b401"], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x81) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x128) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000800)={0x5, 0x10, 0xfa00, {&(0x7f0000001100), r2}}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) socketpair(0x1a, 0x6, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="010a0418aaaaaa8aaa1008"], 0xb) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000008c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000cc0), r2, 0x1}}, 0x18) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000840)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000b80)={0x8, 0x120, 0xfa00, {0x4, {0x6, 0x80, "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", 0xc, 0x80, 0x7, 0x9, 0x40, 0xe0, 0x1, 0x1}, r7}}, 0x128) recvmsg$can_raw(r6, &(0x7f00000007c0)={&(0x7f00000000c0)=@phonet, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/98, 0x62}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000500)=""/93, 0x5d}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/190, 0xbe}], 0xa, &(0x7f0000000740)=""/84, 0x54}, 0x20) [ 2719.161880] hci_sock_sendmsg+0x10a4/0x1c80 [ 2719.166205] ? hci_send_to_channel+0x200/0x200 [ 2719.170816] ? lock_acquire+0x170/0x3f0 [ 2719.174794] ? security_socket_sendmsg+0x83/0xb0 [ 2719.179548] ? hci_send_to_channel+0x200/0x200 [ 2719.184133] sock_sendmsg+0xb5/0x100 [ 2719.187844] sock_write_iter+0x22c/0x370 [ 2719.191903] ? sock_sendmsg+0x100/0x100 [ 2719.195899] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2719.200828] ? iov_iter_init+0xa6/0x1c0 [ 2719.204806] __vfs_write+0x44c/0x630 [ 2719.208523] ? kernel_read+0x110/0x110 [ 2719.212423] ? rw_verify_area+0xe1/0x2a0 [ 2719.216473] vfs_write+0x17f/0x4d0 [ 2719.220003] SyS_write+0xf2/0x210 [ 2719.223484] ? SyS_read+0x210/0x210 [ 2719.227103] ? __do_page_fault+0x159/0xad0 [ 2719.231417] ? do_syscall_64+0x4c/0x640 [ 2719.235398] ? SyS_read+0x210/0x210 [ 2719.239023] do_syscall_64+0x1d5/0x640 [ 2719.242916] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2719.248100] RIP: 0033:0x4665f9 [ 2719.251295] RSP: 002b:00007ff6db2af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:27:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000280)="a2d951744b3df1d9db811fb871f1eb300640ed7158d46c04bb5f6cdc5e64709e4365956ede794cb37e3ed7781f6a746ff1b65e88745718eb0d7f9e2cc563492c68d1459208afc9e5f8becd4014ca56e3f7484e598bff1bf2229b74dcca069c01e1c0215a2505d1a1a88bc48aef0c9c5d65d07fd47dde183e290524f72a276247841dede96b3683259986139fc1509ad8f6e278abb0df4f77c5092e9bbe67e7411e65488aab0879e9ce16e1f61e7ea6363dadbbf5c15756d5c9fe7c56dced9bd0b6f44d1b40cfbcfd3d9c0e747ae8bc37fd") sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00d9adbd7000fedbdf251000000005002a0000000008e626b975d6d62b1cbba708003c0007000000dc3e480c0752b89b08000600", @ANYRES32=0x0, @ANYBLOB="05002e000000000008003400008000000500350040000000050029000000000008003c003bef0000"], 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x4000004) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3a9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000000)={'gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x8000, 0x10, 0x3, 0x3f, {{0x19, 0x4, 0x0, 0x24, 0x64, 0x68, 0x0, 0xc0, 0x29, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4c, 0x21, 0x1, 0x2, [{@empty, 0x6}, {@local, 0x7154793c}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x8000}, {@rand_addr=0x64010102, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@multicast1, 0x3}, {@private=0xa010102, 0x86}, {@local, 0x7f}, {@multicast2, 0x81}]}]}}}}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r6}}, 0x128) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x2a, r6, 0x0, 0x0, 0x1}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES16=r7, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESHEX=r1], 0xfffffe9f) [ 2719.258999] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2719.266257] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2719.273523] RBP: 00007ff6db2af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2719.280782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2719.288045] R13: 00007ffdefc953df R14: 00007ff6db2af300 R15: 0000000000022000 06:27:57 executing program 3 (fault-call:2 fault-nth:6): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:27:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={'cbcmac(fcrypt)\x00'}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x1f, 0x1f, 0x4, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x7f07, 0x8, 0xd9a}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r1, 0x814, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x44000) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) 06:27:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x3) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x584, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x2, 0x4) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) 06:27:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000100)={0x1, @auth_requested={{0x411, 0xfffffffffffffd92}, {0xc9}}}, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x4, 0x4}, 0x6) 06:27:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x5, @private1, 0x3}, {0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, r3, 0x40}}, 0x48) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 06:27:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x3}, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@remote, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000094}, 0x20000000) [ 2719.393722] FAULT_INJECTION: forcing a failure. [ 2719.393722] name failslab, interval 1, probability 0, space 0, times 0 [ 2719.405891] CPU: 0 PID: 5511 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0 [ 2719.413701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2719.423050] Call Trace: [ 2719.425643] dump_stack+0x1b2/0x281 [ 2719.429274] should_fail.cold+0x10a/0x149 [ 2719.433430] should_failslab+0xd6/0x130 [ 2719.437408] kmem_cache_alloc_node_trace+0x58/0x400 [ 2719.442429] __kmalloc_node_track_caller+0x38/0x70 [ 2719.447367] __alloc_skb+0x96/0x510 [ 2719.450997] create_monitor_ctrl_event+0x3a/0x3a0 [ 2719.455843] mgmt_cmd_status+0x28d/0x460 [ 2719.459904] hci_sock_sendmsg+0x10a4/0x1c80 [ 2719.464227] ? hci_send_to_channel+0x200/0x200 [ 2719.468807] ? lock_acquire+0x170/0x3f0 [ 2719.472775] ? security_socket_sendmsg+0x83/0xb0 [ 2719.477519] ? hci_send_to_channel+0x200/0x200 [ 2719.482144] sock_sendmsg+0xb5/0x100 [ 2719.485845] sock_write_iter+0x22c/0x370 [ 2719.489925] ? sock_sendmsg+0x100/0x100 06:27:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xfffffeff, [0x131, 0x4], 0x5}, 0x10) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) [ 2719.493884] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2719.498803] ? iov_iter_init+0xa6/0x1c0 [ 2719.502767] __vfs_write+0x44c/0x630 [ 2719.506467] ? kernel_read+0x110/0x110 [ 2719.510365] ? rw_verify_area+0xe1/0x2a0 [ 2719.514434] vfs_write+0x17f/0x4d0 [ 2719.518237] SyS_write+0xf2/0x210 [ 2719.521696] ? SyS_read+0x210/0x210 [ 2719.525333] ? __do_page_fault+0x159/0xad0 [ 2719.529573] ? do_syscall_64+0x4c/0x640 [ 2719.533576] ? SyS_read+0x210/0x210 [ 2719.537212] do_syscall_64+0x1d5/0x640 06:27:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6347197ab5bbc842b4ddbcbe154d643591d0392c6c4e704e63ea2426dc6c24bc4f168e755b35069b0960af0137736cf880c4ad90a930625d7fa45ab4b182bfbfba6c865a2298dd1bd87f38f342949e4401e37cbf2959a432f22f8290e376f92e23fd9c"], 0x13) socketpair(0x1f, 0x2, 0x7, &(0x7f0000000780)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000007c0)={0xffffffffffffffff, 0xff}) 06:27:57 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x0, 0x3}, 0x6) [ 2719.541111] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2719.546303] RIP: 0033:0x4665f9 [ 2719.549490] RSP: 002b:00007ff6db2af188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2719.557231] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2719.564503] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2719.571777] RBP: 00007ff6db2af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2719.579055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2719.586711] R13: 00007ffdefc953df R14: 00007ff6db2af300 R15: 0000000000022000 06:27:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x40800) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="010b0402000a"], 0x6) 06:27:57 executing program 3 (fault-call:2 fault-nth:7): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:27:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x8}}, 0x18) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xac}}, 0x20040001) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x400) inotify_rm_watch(0xffffffffffffffff, r1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB="d9c3586023bf7af98c2dcc5db8cfb33ef0c4bffc004b03f16fdac92b0bd523427851124cb97c9195b8cf536315110576aa22813b2db67d39cebe1cc464ceefa983e372bd441998995d853a969a6e564078bb0f2589f112cd3dd1376006c66a60b08d81aa75f5fc62765f566281b5881af6567651eac379125d3e222102bb3af742c3ce51e84ed225288bcbcf71a181091ab4feb9c791609e4e5c2e96e22a031571379b2b0bd4c40b5e42b2d2", @ANYRES16=r0, @ANYRES16=r0], 0x13) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000280)="752bdfb346efc14a3ce211c60394313f62b217ca71d5778a05a98e928a961107b0f6bbfa61cd31562f84ef1a750bb0446c69154967a0c6e83689ca2573283cb2f9d76254b4d59efa85ed33cef1985912f8f2b20708033cc83d0702507eaf2223d662d1c23a931048cb29933f8df378970a4d6754e26a2a68be98e2dd9e9be64c8d78e4784516f295f3a5e593ea6ba0dbea4bae106eda73f11b0b4e083f5ed3c0e5b05d8ed24bc7ac9642028bc88b361d88aedd44bf1d41c94f134316111aba304b6a6d1613c70ffc10f3eba54a8c6266e205e411193874d57cf08c320cd2f7248773be71a40ef371d1e7e96f992c561d5f") 06:27:57 executing program 3: write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1f, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}, @in6={0xa, 0x4e23, 0x100, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}}}, 0x118) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}]}, 0x34}}, 0x800) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000280)={@any, 0x7}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000680)={@none, 0x7, 0x6, 0x6}) 06:27:57 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="08002abd7000fddbdf250b000000050039000000000005002e0000000000050030000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x34}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0x1e) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x1, 0x7fff, "1968ca", 0x7, 0x2}) 06:27:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:57 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:27:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[], 0xb) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000540)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000005c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r6}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x20, "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", 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r7}}, 0x128) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x61, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, r8}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r7, 0x0, 0x1, 0x4}}, 0x20) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x3, 0x4}, 0x6) 06:27:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044890}, 0x2000c000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff) socketpair(0x26, 0x1, 0x56, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4090ec08}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44090}, 0x51) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe0, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x124271d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12072248}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x534bd137}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10e8e2a7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b8e52f1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd40008d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a8784c0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cd01536}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dcc5d47}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x317608eb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3672c41a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x50}, 0x0) 06:27:57 executing program 3: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:27:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000000c0)={0x0, 0x8}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) socketpair(0x21, 0x4, 0xfff, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x65) 06:27:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="011104020000741812559038b74c58c1354e92b49d1facc88cfbc06f145da1c842f391a8a50b0269f88c160277245d75c48a73e1db4f2a8a8bde60bc3d025d103c0de8df05eca59a24889f6613a117c10d4e12b5f019c0327fb1468a9f57f8613c859f57714559b7284654dd04b703e11c1465cea3270af25afa6a47c2adc4f66694754fa2f4d32cc16e6c5fae2667f8044340fcf491bc15e0b6ebeff11c2ba5db8cf808e3ce69fd13d26dcb4da5b9a1e43753c30d48021b933c187af2b84e307a8e96c22ec3492251ca6b7dc671253f8c91248a4dfa4fb70068ac36"], 0x6) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000740), 0xc000, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r2, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @ib={0x1b, 0x6, 0xaa4, {"c2173c6fae130d93cbab5d636f7026e8"}, 0x5, 0x7, 0x9}}}, 0x118) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000800)={0x4, &(0x7f0000000780)=[{}, {@fixed}, {@none}, {}]}) 06:27:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000100)={0x1, @auth_requested={{0x411, 0xfffffffffffffd92}, {0xc9}}}, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x4, 0x4}, 0x6) 06:27:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$bt_cmtp(0x1f, 0x3, 0x5) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x411, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) 06:27:57 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x2, 0xa, 0xffffffff, &(0x7f0000000540)={0xffffffffffffffff}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000580), &(0x7f00000005c0)=0x4) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @change_conn_ptype={{0x40f, 0x4}, {0xc9}}}, 0x8) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES64=r1], 0x13) [ 2720.088630] Bluetooth: hci1 command 0x2062 tx timeout 06:27:58 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={&(0x7f0000000040)=@can={{0x3, 0x1, 0x1}, 0x6, 0x5, 0x0, 0x0, "2789c02890fc1918"}, 0x10}}, 0x20044810) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) semop(0x0, &(0x7f0000001140)=[{0x0, 0xfffc}, {}], 0x2) semop(0x0, &(0x7f0000000140)=[{0x0, 0x9, 0x1800}], 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0x1e) 06:27:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000003c40)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003c00)={&(0x7f0000003b80)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfc}]}, 0x4c}}, 0x4) 06:27:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf250100000008002b000800000008000b00f56d0000060028000200000008000300", @ANYRES32=0x0, @ANYBLOB="05002e000100000008000b000500000008000b00090000000500380001000000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x400c040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4f5573453308a845}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8800) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44800) 06:27:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x2}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d1}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) 06:27:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x14) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_scan_enable={{}, {0x3, 0x20, 0x2, 0x8}}}, 0xfffffc8d) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$sock_bt_hci(r2, 0x400448dc, &(0x7f0000000140)="69e50c6e6b09a7f3bf9dbbba950ddd005d5a64d63294d6f46cbb29955c2ecb76f543f09eb2635130e7407d1aac5db1f4ff44269683d98c6ff79f5cccdb8eed48e725e4610514612d197214cba35f878decc7bcc72922e16882ea67d7ea240e1564b01479fb207d341c5c5b4ff016b8125e0a1253df") 06:27:58 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) [ 2720.558413] Bluetooth: hci2 command 0x0401 tx timeout 06:27:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x803, 0x9, {"6e1a561c3e6fbb56467fc04b4f4a1d2f"}, 0x3, 0x7fffffff, 0x9}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x8}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000480)={0xffffffffffffffff}, 0x18e, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x4}, {0xa, 0x4e23, 0xfffffffa, @private0={0xfc, 0x0, '\x00', 0x1}}, r1}}, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote, 0x2}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)=ANY=[@ANYBLOB="18010000", @ANYRES16=r5, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000700)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000780)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), r7, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r4, 0x20, 0x0, 0x0, 0x0, @ib={0x1b, 0xa881, 0x1, {"204231ad1a8f50254a06043d30e54a98"}, 0xffffffffffffffff, 0x4, 0x8}, @in={0x2, 0x4e23, @multicast1}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000ac0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000b40)={0xb, 0x10, 0xfa00, {&(0x7f0000000a00), r8, 0x68}}, 0x18) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) 06:27:58 executing program 1: ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x4}, 0x6) 06:27:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8841}, 0x400c000) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000008000000"], 0x6) 06:27:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x20, [0x1]}, 0x10) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01ffff67d4b247555001ee7c9f459a4698857564f7e489f57a4122676d590f55088c507f6d439e9561a949c980faf5bbd980873951a90a2fa164089c26c60190e2724f3c5709c303fdcb9774a7161c7a5fe1eb"], 0x13) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x0, 0x10001], 0x4dd1}, 0x10) 06:27:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$bt_cmtp(0x1f, 0x3, 0x5) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x411, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) 06:27:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="d811491b00007064dac4003d6fa67ed203b36d12f9606ec20f69af38f9"], 0x6) 06:27:59 executing program 1: ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xfffe}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x4c6c, [0x7fff, 0x7fff], 0xff}, 0x10) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xb) 06:27:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x13) r2 = socket$inet(0x2, 0x80000, 0x20) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@initdev, @in=@empty}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x6, 0x2, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, 0x1, 0x700, 0x5, 0x7ff}}) 06:27:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8841}, 0x400c000) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000008000000"], 0x6) 06:27:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) 06:27:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x18000}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) write$fb(0xffffffffffffffff, &(0x7f0000000280)="638bb20debc716d0555b5a6c1ecfa5", 0xf) write$bt_hci(r0, &(0x7f00000002c0)={0x1, @role_discovery={{0x809, 0x2}, {0xc9}}}, 0x6) 06:27:59 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000800}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYBLOB='\aD'], 0x6) 06:27:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6be85786d34663e9}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf251200000008000b000400000005002d000000000008003b007f00000005002d0000000000050038000100000008002c00620b0000050033000100000005002d000000000008003a000004000008000600", @ANYRES32=r1, @ANYBLOB="4802fa767079a1f0bf0fb72327044da4e6eda76aef9c050000002d71d040f73aec338642d25cf2bcdacee4d7b5ba68d892d990e560bce9b14fd753a092ec8582c69bf0d128f308207f0b1e18cda171dadaf3414ab6ed92e44c236cb6257e57d6e51c2236d8d24ef514cdb67e9b1d566ac5fe1b1126bf0c9700"/132], 0x64}}, 0x88d0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="230ab32ef310c1aabfe0533522785cd8e9d7e12843e69c2a5dedd2a354b3760092bd9b3d33b7fc2e8222c8cf75570f04f16a8d65d7f3bcca23bbc057a010d2ee9cc7057f4b1402406063ed62c3ccc0152787b1db0400"], 0xb) 06:27:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x2}, 0x6) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) socket$can_raw(0x1d, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) socketpair(0x20, 0x2, 0x101, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000000)="b9026cc2bff8") r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000100)={0x0, 0x2b7}) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000040)=0xe50, 0x4) 06:27:59 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x2404c800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {}]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xfffd, 0x3}, 0x6) 06:27:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x103040, 0x0) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x203, 0x2}, 0x6) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x880, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000100)) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="982aac4b22068097c458c803bc31b18d5d41f9d22dbcb2f9fb93891a3acefebc98064f87d63e3fd208782c9a5e24f0e92f58f9d0456c14fb18bee2d80ae82b5438f140e2a74b3e8bc1c91cadb4c8a2852855d292faa1375b39603f3ac409d2c2dd23c04b700f29fdae37f64538886090bdad6bd5ff735e43d96656b6b14f36a76272774153af6e4cc7bc43cc859a5ca91b4487a8dba4c57a24d5ce62"], 0x13) 06:27:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) 06:27:59 executing program 3: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000001280)=0x1, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xe29, 0x4, "d1d921cd238afa52fd561ff0682e06065458298e28c7feef78812e244dbdddf48e1e451f14698b927348e99be8e786340f5e710af9f9f396a5ec7060c28ba4c7aa5800396f8adddf1d81ca1a27f9cf1668fec3449e1b53f9f88179a0543c8561ec9e7d875c537077c00109aece0eb6deab6d697210f64e203832c19b095401210db8527edcb17bec3935e770a4268df5a22de14171967e7f7bc2b71f2b572069190b1f1de83962bcd28fb67647ef158329aa0dc50030fe24e461fb116475b03ea568fc95c9ce7359594ee780dad227e018ed68af0bdce0142366dcfc934d525f72dc92e975573f0dd96667481b67cbdc5055bad0d54f4807d660ece08436f5bd3ec9351fb66b23334d1bea08f1e80a9308519c02443d75c0356b582ad49f027f5d3f41e5cc0b52eff20e0e9079ac274d9376af1920a483ed0fdbaeb04e0163c296808a238f045156a22f44860f8801bf782d66bc0153563e3a4bc4c13682003aa7f8a8aad01fb8636208d84fa973a549603d3cd19813318674c88deb8360013ecc910c7fd1730d672da74f9d25d02cf1b8fcc2135d829ab0c2d58de88c1a1b208b908d4f6a52be4737bd3ba5e7e041e7a8f13f98100e9ddd095dde48368df999b43763c87897133801c779771aa676b6053f9a0f6a4b5302e23cc2c5a74dfe2625fbe2f08c00375f97f87442e959e9596d46daf4a46367745052ce155b6bebb28330457ccf831caee15c796bb97d10b394df2451c913fc076c98a73729766b1a0bf4ba99b002514c98db4949eabab57779302045328f466441af721f25778498f34cc74988141870d8ba04e35fddcd8f587d087ce14cfc359f44b3fae15e4fd39999fb8a46fca55495593b2df03c895492d186d171cf0f30e4912d250d87683468a65c503b24a6a5ce5d6476d30995109d3d9b0578c509b3549d071229c997d749b936319e3a62b7328cefb5e15c30831e4fd52c6bbe4bb7c9b05e8fe16c412d8625789cec80865edf130bac57ec6ba5071eaa74bfc7b74b6ac26382cb1cc7836e58bd76c1e5388c37caac66ec3543a053063c53870a80b2214f179f9a09c303648d64c22d061f3a0306c9150470ee155c91f546adcda80110dd6edde169bbb51b9074ee1f3c6c5656541982095057840874a4c676901675b274d7dd963d1a28530c1a959d719d1fcba8f88d86f154d4eead1d9c98d01befd1c59a891a559b0b598e9dbfe7048049518a4da5e3ebf15725369c40c8bcbcdbbfed8410ccf2bce693d4b752ddc4be013ff321a7d134d4fcab17bf7cf4be12b6817c0eb27836cb2b9127612a09ca1cabe29824179a2b890f04b0753884f4799c03f74e2637e196d87bc7f9a64c2322aebfa1ff070387b6a26bc2f711af1d06fa266cfe8f0c582b3736139d7ce7cd2fe4f2b95f8852f80d8080306c1bf95c96fb62c4b339810855cf31e156a7a64652b7705df4fe80dbf16bf4a42574d1cbe42997e24fffa2fe0aa24cc0596eddc005a9c88a5488845720c1f5b5a0de3a733e4f921819c1d008777d7feb6430c6aef0ae6d27b7c0368097876f2d00bef805e5ed7299be53f872a3d705332aec20b57ffc4b4b3054062a082feb7ddf66d2e40cece2f8c1761b4e06fd4cdfd04c42190854b609366fcb82693617b31ae9e2242900b1b112461e55cdc848726148900d2fea70865f6d9045c624a89aa442760600bbf096930676eafe23a9003abb342a490ef63f243e62c13529a902986b755b54073fecc60c8e6bbc1e48c712333656c3d5588be3d298a168c875d1181641f0808382facb8952eacf5639b7610a555b14c988527a9495b28b731e060dc165f2fd1b67ceecd66bc10977916d4012f5582ac33ca28ea6ec0ea311c1f6341935940c706c2b0c20a44bdb8e1ab22c62c47300761a3f7f06f613a8ca84bb3fec3b476111fd85c651cafa83fc14d3f02ec5183fe9f33bafc3c3e7870069fb79d7bac8b690d9b92811bec2e023c0606cffa23f3a6240fc7bcac673d30e71f0a546dd598fbbc98de6cdace5abbc423149b75a7f44f4a8a93f9937722abb76650ff918abfc01b00b0f79c32b501fb245598b47f65051453d3b76f16742245945400378f00509fb7a50f1301fa7c9fd6155752f345d93fa6194974163676736084307f2480c4451663d5b0964cdfaf0d7fb22e05e9c631ba71166b4dcfad407aeefe6ffcff817c0d678b1762c8a073a18ad5ae587a0bdbc67d5f05d2163743a897ff02ffc5250303b319bff1746d9245e721be76479fe2accb35f18b2cb5cbf86cd26be5a6e623bcd79000e4be3daacda63e5328dfed16ff283472cbb6578a03a48c2faaa41d6cb433a52c2cd8ad3c0c3695698c0717e1a2e42ad69de84d5d9613fa672e18fcd7a5abd4bd23df052fad6216cf5ce08fde2804e1d4d436d1aea43ef41bd406cb68d67fc370bdb4a2feea0522fae98a8474ce05f16a4cb5b3c9d92ac2c7053e3324a06b357c5f7658e032992831d8044bb1232ea1b739a55be7d174a379958340e450ca8b2ed0e2bb0d99750d41422337dcab1d4cea0cf887694941a7228e0198cfaafad8850b2ffa4d4416a231148deee57e515db73ab553409d38322b5398ee0aa8373645b1940ac3c4dbcb546f3d2abdc130dca3c68e0bcab3d74b40c68e8fcf9f655064ae709051321902382d224f6b5b5610fb29abf02e1ba9cc8d730a866a05bc8ee083633f6e5e14d3e1a246d7e795aea266166df4bcaf4dc9feba431dda9264ee7f8446c9e8806c303197358aa0df961b45f7b08740e39c25cb456e00682a9d11817d04082eedb71b55afc2a60f13d2ac01f92dbb42a68780cf86428820174f21ed984ef1c9c09914e6cabb5242fc5d17acb9806d77fa97070ddac3c0e49f9ff96011e5797f0c6cfa5b6dd4cddb784a5e02517c9a215e991697f1023e388da2b97faf1ee3bbcee20616978315fca35259fef93d658e91445e3131651d969a7d745fa1a7552955e48b35712cd89413e1bb5c7c38076b57f54aefe52372312196e172e0a62d193a75f5412a9cb04a40b5d09e244bb10b402078ff27aeae5cd2d67d73b3da2f91a8e14815078ed65ce764c26106cab6d7f65d27c3b6d759ebaabf5e93ea73f03a93c10c30465a35ba95d866699c4a02b24562c815e88d6937786fa6fff4356b44f711ff5e9b3274ff805f0fed47d49e1bd369d6c5f9cd3f6a32c90ec8ea9669b7793be11cc69e342b044215bfc5d5ac87ddbb00430fc78307fed11a4b8bbeb01aea016653ee5aa1e8e97174cda6e3941dae0088ce62394da44b4bcb1bb7046b84368183f0128586fc4e8f0d063552d8ccd681b90b54dab7c667d8deb975521da827c98626358d2630b53c24ae04fd9f269e096e20c8c201295e9f108c3f3735a0e065368d031d002d5e6e80fe6b780f765ad1987352c35c6b35193aebce1e88f521f2619d8d06841cbe208da839072abcc9eb1c9bbdf5898e941daa8405019e7ba3c1a18700d1951b1c77632511e63eb401ef01d2bec619c52ff64d04ea2cab34cb579ae54827f8b49d996ad09be45376eeb3af7259219c8abc1f4f93508732fc20a75b791cd1a4d508d53f1526df430905333aab5fd478d69ff2b1a9f69fce2cf40dfc97889a6852ae0a17120c030fa3a71fccabb1eeb2cc860b02f1d1bf1281c4c956289108386186f75db4397247020bc7410a429aa5ae4b606ca545272ca955fb7883c6b71db4137f758849d2ca184f2ed750ea0671b5d0beac46937e7cab939854cc05969d8973bc9161f8c9589439f6fd379f41558dd017ee200d5f23ce5860f8300678bfffbd9f18341933ad2a497023a3029aad1e8a22802f5f9e3070a155208dc886899d604f7a26bc1c7ce670feb196ba7312b6b20dea43cb3f0f792a07203c6f7f006a7b008461509b27eb654456c293e674cb8b0b1d1eaabb860c5826d8b6f13f8e73ef7e80465e076f3949587b025066bd4f94677929892719e6ca117370f5859f1eaef66c5df40952138fcc23d514e1d1d0c254fa1b47675806c5a66e67de36ee432b85e85ac66fcae5fbab9f5fe5d0727b2a85c0385a9329b04decd417a886c5b9e06120328ae1befa54564e884b49bf1c853dcb0146f9eda419a572b5ab9bff5b37457c533a379c1aac2c66c6f5433ae8c54ec85876644d9f15cdf71fbd163d941ced1e1382e61c0a50117c4d0abe3f17d89c488d8636dbc4f3cf96693028db625abed0852cfec4de8a0f85e94fd9bfe82c70cba95de1cd5d5bb77bb4a3baa06125330c55cbdaa55a4ac27a82ffcbda3573a5ec428fe99049ddd6e1d3d917f322fc18b35625c5784fe774c286ac7abe129199f28547fc8302faeadf7bd3e581d9c6f78c8b1fc7eb2bc5dbf432471f5acf04ec0b468aaf4e2d7b1ab16c0d0d966f7a2d2595ff9ade36ba6518c7997ab19a626b2938d2095bfb9d4724ac219ab57b50699ae717ad9c3ef3889823ec215d55aca21b26c2490ea30840fdc712a3ac6d16ac4fc70456ad94b3e64134a46e5875663a474e024cb950e3f24507df3db4c1d0130301cabd66495666d849ba62b479048982533aaf8f7205c89532f4287252975e248260504f2ae3cb20806fa1eeac10f6f563f3999a5866eedb8b7fed5333a4cde2b462b685f74458ef1b05f9487079036309b4ffa90dcb42f280fbbfcb97c48bd9f5863d03e9ca0179e47e86368d557c3802e4564629a507f29b0d36082e520bb0aea1b4e2f401ac7199fee69c33e7b14b57ca1f310522f60853a14779c5cf995d5be1b28ab361d1ed454281d9216a874bd0517597366d931c09f717eea118e2b177403132954408497502eeda49e2c983241e2184665067098db98b400c4c09000f20146c9e7f2c2612a8e4847eb210b7872e5c5d633b225e2f6b92b1740b4e850dadcd32a4fc73523ad841a8df47905b5da4f47db4362a7e80c0701ca4da34bc0d44f9a9d3d84440d08ca334f780525f6b8c5e0468c06680dc1c5f0d15f19d5a2fab8fb43674cda5d0debac628727d165918b0459bc54b78ac21339d655d8716e5ffc0f9f91f378ffd4f3ac7a4241d19603c61f207b9506aba1d49f8913c26016501a924c0392ae14264cd1e349f1da51e906f123eab8d61255"}]}]}, 0xec4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:27:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x420, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x50, 0x31, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r5, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0x820) 06:27:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="06"], 0xb) 06:27:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0x7, [0x3, 0x1c9e], 0x6}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f00000001c0)=0x1000, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:27:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB="1a6f911e7d8d3c68823fd494be53ddc6edbc0ee331e6eb0374995cb01fe1185d197d37ed41bc7336f933d89781b309a9e87c4f0c0509ddf54a9aee0ad52fcc184c5fb71c0242f099238b4d28f233c7", @ANYBLOB="47131d8571fb9f4bbef9ecc4aa262d09b87ea0cad7e05b78cf00eefd06", @ANYBLOB="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", @ANYRES16=r0, @ANYRES16=r0, @ANYRES16, @ANYRES64], 0x6) 06:27:59 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000001280)=0x1, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xe29, 0x4, "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"}]}]}, 0xec4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:27:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) connect$bt_sco(r1, &(0x7f00000015c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f00000000c0)=""/148, 0x94}, {&(0x7f0000000180)=""/117, 0x75}, {&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000280)=""/148, 0x94}, {&(0x7f0000000340)=""/132, 0x84}, {&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x8, &(0x7f0000001500)=""/98, 0x62}, 0x40010141) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011104020030"], 0x6) 06:27:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, @can, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x4, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)='ipvlan1\x00', 0x1, 0xf07, 0x7fff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfbf}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01ce627c719d88daa71b18640935febf"], 0x13) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair(0x9, 0x4, 0x72, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) 06:27:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:27:59 executing program 5: sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x8001) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) 06:27:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x6, [0x9, 0x1], 0x5}, 0x10) 06:27:59 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000001280)=0x1, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xe29, 0x4, "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"}]}]}, 0xec4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:27:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"cb4b3c"}}}, 0x7) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01ffffa09535ebbe286400a10080e446d91e2cf815f73b40e4090310a5987dd960679bff32764bd50aca8ca036192f0dc55f1c4c880893f9803ac8399457fccf604cab3aeb796d26b1136f8f06ad48e6c26462a2ed73c1a9e8d54f0df8e5b7"], 0x13) 06:27:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @switch_role={{0x80b, 0x7}, {@none, 0x1a}}}, 0xb) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @set_csb={{0x441, 0xb}, {0x7b, 0x8, 0x1, 0x4, 0x8001, 0x1, 0x15}}}, 0xf) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x6, "0fdb3d", 0x40, 0x58}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc8}}}, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x9, 0x0, 0x30, @local, @remote, 0x41, 0x8000, 0x4000, 0x8}}) 06:28:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4c46}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000c9) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC=r2, @ANYRES64=r3], 0x6) 06:28:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1}, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="26dfdad329e3e04d35bca1d2b2ca1249b3fe3fe3f4d450d88e6ab997822d2d8c4ee01e223e16b7", 0x27}, 0x1, 0x0, 0x0, 0x800}, 0x4091) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 06:28:00 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000001280)=0x1, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xe29, 0x4, "d1d921cd238afa52fd561ff0682e06065458298e28c7feef78812e244dbdddf48e1e451f14698b927348e99be8e786340f5e710af9f9f396a5ec7060c28ba4c7aa5800396f8adddf1d81ca1a27f9cf1668fec3449e1b53f9f88179a0543c8561ec9e7d875c537077c00109aece0eb6deab6d697210f64e203832c19b095401210db8527edcb17bec3935e770a4268df5a22de14171967e7f7bc2b71f2b572069190b1f1de83962bcd28fb67647ef158329aa0dc50030fe24e461fb116475b03ea568fc95c9ce7359594ee780dad227e018ed68af0bdce0142366dcfc934d525f72dc92e975573f0dd96667481b67cbdc5055bad0d54f4807d660ece08436f5bd3ec9351fb66b23334d1bea08f1e80a9308519c02443d75c0356b582ad49f027f5d3f41e5cc0b52eff20e0e9079ac274d9376af1920a483ed0fdbaeb04e0163c296808a238f045156a22f44860f8801bf782d66bc0153563e3a4bc4c13682003aa7f8a8aad01fb8636208d84fa973a549603d3cd19813318674c88deb8360013ecc910c7fd1730d672da74f9d25d02cf1b8fcc2135d829ab0c2d58de88c1a1b208b908d4f6a52be4737bd3ba5e7e041e7a8f13f98100e9ddd095dde48368df999b43763c87897133801c779771aa676b6053f9a0f6a4b5302e23cc2c5a74dfe2625fbe2f08c00375f97f87442e959e9596d46daf4a46367745052ce155b6bebb28330457ccf831caee15c796bb97d10b394df2451c913fc076c98a73729766b1a0bf4ba99b002514c98db4949eabab57779302045328f466441af721f25778498f34cc74988141870d8ba04e35fddcd8f587d087ce14cfc359f44b3fae15e4fd39999fb8a46fca55495593b2df03c895492d186d171cf0f30e4912d250d87683468a65c503b24a6a5ce5d6476d30995109d3d9b0578c509b3549d071229c997d749b936319e3a62b7328cefb5e15c30831e4fd52c6bbe4bb7c9b05e8fe16c412d8625789cec80865edf130bac57ec6ba5071eaa74bfc7b74b6ac26382cb1cc7836e58bd76c1e5388c37caac66ec3543a053063c53870a80b2214f179f9a09c303648d64c22d061f3a0306c9150470ee155c91f546adcda80110dd6edde169bbb51b9074ee1f3c6c5656541982095057840874a4c676901675b274d7dd963d1a28530c1a959d719d1fcba8f88d86f154d4eead1d9c98d01befd1c59a891a559b0b598e9dbfe7048049518a4da5e3ebf15725369c40c8bcbcdbbfed8410ccf2bce693d4b752ddc4be013ff321a7d134d4fcab17bf7cf4be12b6817c0eb27836cb2b9127612a09ca1cabe29824179a2b890f04b0753884f4799c03f74e2637e196d87bc7f9a64c2322aebfa1ff070387b6a26bc2f711af1d06fa266cfe8f0c582b3736139d7ce7cd2fe4f2b95f8852f80d8080306c1bf95c96fb62c4b339810855cf31e156a7a64652b7705df4fe80dbf16bf4a42574d1cbe42997e24fffa2fe0aa24cc0596eddc005a9c88a5488845720c1f5b5a0de3a733e4f921819c1d008777d7feb6430c6aef0ae6d27b7c0368097876f2d00bef805e5ed7299be53f872a3d705332aec20b57ffc4b4b3054062a082feb7ddf66d2e40cece2f8c1761b4e06fd4cdfd04c42190854b609366fcb82693617b31ae9e2242900b1b112461e55cdc848726148900d2fea70865f6d9045c624a89aa442760600bbf096930676eafe23a9003abb342a490ef63f243e62c13529a902986b755b54073fecc60c8e6bbc1e48c712333656c3d5588be3d298a168c875d1181641f0808382facb8952eacf5639b7610a555b14c988527a9495b28b731e060dc165f2fd1b67ceecd66bc10977916d4012f5582ac33ca28ea6ec0ea311c1f6341935940c706c2b0c20a44bdb8e1ab22c62c47300761a3f7f06f613a8ca84bb3fec3b476111fd85c651cafa83fc14d3f02ec5183fe9f33bafc3c3e7870069fb79d7bac8b690d9b92811bec2e023c0606cffa23f3a6240fc7bcac673d30e71f0a546dd598fbbc98de6cdace5abbc423149b75a7f44f4a8a93f9937722abb76650ff918abfc01b00b0f79c32b501fb245598b47f65051453d3b76f16742245945400378f00509fb7a50f1301fa7c9fd6155752f345d93fa6194974163676736084307f2480c4451663d5b0964cdfaf0d7fb22e05e9c631ba71166b4dcfad407aeefe6ffcff817c0d678b1762c8a073a18ad5ae587a0bdbc67d5f05d2163743a897ff02ffc5250303b319bff1746d9245e721be76479fe2accb35f18b2cb5cbf86cd26be5a6e623bcd79000e4be3daacda63e5328dfed16ff283472cbb6578a03a48c2faaa41d6cb433a52c2cd8ad3c0c3695698c0717e1a2e42ad69de84d5d9613fa672e18fcd7a5abd4bd23df052fad6216cf5ce08fde2804e1d4d436d1aea43ef41bd406cb68d67fc370bdb4a2feea0522fae98a8474ce05f16a4cb5b3c9d92ac2c7053e3324a06b357c5f7658e032992831d8044bb1232ea1b739a55be7d174a379958340e450ca8b2ed0e2bb0d99750d41422337dcab1d4cea0cf887694941a7228e0198cfaafad8850b2ffa4d4416a231148deee57e515db73ab553409d38322b5398ee0aa8373645b1940ac3c4dbcb546f3d2abdc130dca3c68e0bcab3d74b40c68e8fcf9f655064ae709051321902382d224f6b5b5610fb29abf02e1ba9cc8d730a866a05bc8ee083633f6e5e14d3e1a246d7e795aea266166df4bcaf4dc9feba431dda9264ee7f8446c9e8806c303197358aa0df961b45f7b08740e39c25cb456e00682a9d11817d04082eedb71b55afc2a60f13d2ac01f92dbb42a68780cf86428820174f21ed984ef1c9c09914e6cabb5242fc5d17acb9806d77fa97070ddac3c0e49f9ff96011e5797f0c6cfa5b6dd4cddb784a5e02517c9a215e991697f1023e388da2b97faf1ee3bbcee20616978315fca35259fef93d658e91445e3131651d969a7d745fa1a7552955e48b35712cd89413e1bb5c7c38076b57f54aefe52372312196e172e0a62d193a75f5412a9cb04a40b5d09e244bb10b402078ff27aeae5cd2d67d73b3da2f91a8e14815078ed65ce764c26106cab6d7f65d27c3b6d759ebaabf5e93ea73f03a93c10c30465a35ba95d866699c4a02b24562c815e88d6937786fa6fff4356b44f711ff5e9b3274ff805f0fed47d49e1bd369d6c5f9cd3f6a32c90ec8ea9669b7793be11cc69e342b044215bfc5d5ac87ddbb00430fc78307fed11a4b8bbeb01aea016653ee5aa1e8e97174cda6e3941dae0088ce62394da44b4bcb1bb7046b84368183f0128586fc4e8f0d063552d8ccd681b90b54dab7c667d8deb975521da827c98626358d2630b53c24ae04fd9f269e096e20c8c201295e9f108c3f3735a0e065368d031d002d5e6e80fe6b780f765ad1987352c35c6b35193aebce1e88f521f2619d8d06841cbe208da839072abcc9eb1c9bbdf5898e941daa8405019e7ba3c1a18700d1951b1c77632511e63eb401ef01d2bec619c52ff64d04ea2cab34cb579ae54827f8b49d996ad09be45376eeb3af7259219c8abc1f4f93508732fc20a75b791cd1a4d508d53f1526df430905333aab5fd478d69ff2b1a9f69fce2cf40dfc97889a6852ae0a17120c030fa3a71fccabb1eeb2cc860b02f1d1bf1281c4c956289108386186f75db4397247020bc7410a429aa5ae4b606ca545272ca955fb7883c6b71db4137f758849d2ca184f2ed750ea0671b5d0beac46937e7cab939854cc05969d8973bc9161f8c9589439f6fd379f41558dd017ee200d5f23ce5860f8300678bfffbd9f18341933ad2a497023a3029aad1e8a22802f5f9e3070a155208dc886899d604f7a26bc1c7ce670feb196ba7312b6b20dea43cb3f0f792a07203c6f7f006a7b008461509b27eb654456c293e674cb8b0b1d1eaabb860c5826d8b6f13f8e73ef7e80465e076f3949587b025066bd4f94677929892719e6ca117370f5859f1eaef66c5df40952138fcc23d514e1d1d0c254fa1b47675806c5a66e67de36ee432b85e85ac66fcae5fbab9f5fe5d0727b2a85c0385a9329b04decd417a886c5b9e06120328ae1befa54564e884b49bf1c853dcb0146f9eda419a572b5ab9bff5b37457c533a379c1aac2c66c6f5433ae8c54ec85876644d9f15cdf71fbd163d941ced1e1382e61c0a50117c4d0abe3f17d89c488d8636dbc4f3cf96693028db625abed0852cfec4de8a0f85e94fd9bfe82c70cba95de1cd5d5bb77bb4a3baa06125330c55cbdaa55a4ac27a82ffcbda3573a5ec428fe99049ddd6e1d3d917f322fc18b35625c5784fe774c286ac7abe129199f28547fc8302faeadf7bd3e581d9c6f78c8b1fc7eb2bc5dbf432471f5acf04ec0b468aaf4e2d7b1ab16c0d0d966f7a2d2595ff9ade36ba6518c7997ab19a626b2938d2095bfb9d4724ac219ab57b50699ae717ad9c3ef3889823ec215d55aca21b26c2490ea30840fdc712a3ac6d16ac4fc70456ad94b3e64134a46e5875663a474e024cb950e3f24507df3db4c1d0130301cabd66495666d849ba62b479048982533aaf8f7205c89532f4287252975e248260504f2ae3cb20806fa1eeac10f6f563f3999a5866eedb8b7fed5333a4cde2b462b685f74458ef1b05f9487079036309b4ffa90dcb42f280fbbfcb97c48bd9f5863d03e9ca0179e47e86368d557c3802e4564629a507f29b0d36082e520bb0aea1b4e2f401ac7199fee69c33e7b14b57ca1f310522f60853a14779c5cf995d5be1b28ab361d1ed454281d9216a874bd0517597366d931c09f717eea118e2b177403132954408497502eeda49e2c983241e2184665067098db98b400c4c09000f20146c9e7f2c2612a8e4847eb210b7872e5c5d633b225e2f6b92b1740b4e850dadcd32a4fc73523ad841a8df47905b5da4f47db4362a7e80c0701ca4da34bc0d44f9a9d3d84440d08ca334f780525f6b8c5e0468c06680dc1c5f0d15f19d5a2fab8fb43674cda5d0debac628727d165918b0459bc54b78ac21339d655d8716e5ffc0f9f91f378ffd4f3ac7a4241d19603c61f207b9506aba1d49f8913c26016501a924c0392ae14264cd1e349f1da51e906f123eab8d61255"}]}]}, 0xec4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"/264, @ANYRES32=0x0, @ANYBLOB="050038000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0xd1}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240), 0x6) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x6, 0x4, 0x9, 0x9, 0x5c28], &(0x7f00000000c0), &(0x7f0000000040)=[0x81, 0x6, 0x2, 0x4, 0x0, 0x100, 0x4]}) 06:28:00 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_add_to_resolv_list={{0x2027, 0x27}, {0x4, @any, "00000004969e8ef4585da44000", "ea474e8c1c32a0e6aab4a827cc70af73"}}}, 0x2b) 06:28:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000340)={0x3, 0x4, "9ca1b9", 0x0, 0x2}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x1}}, 0x18) 06:28:00 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000001280)=0x1, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xe29, 0x4, "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"}]}]}, 0xec4}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9a89a62d515e5752d46b1cb64e8e9fc85bc4bbd7054afbb61a1fb977f4e66707a8b395bfaa7a8cf0833cd81101753edc8bde122b32bc5098de803ec17b36162c1b4bd9f37ff7925a332014325102162fa3f2e2dffa37680d4409c15b08a67cb90c31c53db73bd075557fd73ff4d51ff2f1ba1f328266a820772a9ffa6f3818d8f2808b7a74399db17df6736a91a7fe", @ANYRESDEC=r0], 0x6) 06:28:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x6) 06:28:00 executing program 1: ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{}, {@fixed}, {@fixed}, {}, {@none}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0xb) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x6, [0xb6, 0x1ff]}, 0x10) 06:28:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000140)=""/183, 0xb7}, {&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/202, 0xca}], 0x7, &(0x7f0000000740)=""/97, 0x61}, 0x71cd00f2e536f0ab) write$bt_hci(r0, &(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYRESOCT=0x0], 0x6) 06:28:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x13) 06:28:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) 06:28:00 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000001280)=0x1, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 06:28:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f00000000c0)="f432651315d2ffc0bca39ee3d33f3be32d274d780e4ccb00a0292190a3ac808e04cb56a8fab741648f854738c63cc63849d237b347a7cdba24003488ce345e2d99db695a8f04826d56a9de4b122738589d9a26b15fe031dc802af83f1106d0d88c69a0c0e4d5a4aa3641528a80b6592cd9022d42fb9b9b357dbdad3bfe967c3543d3313b72082edbfc9ef7f4eea0f5270a7fd4397bf9e53e900d8e266c15cc08d75a00766e6c0287720d710dae68244a2ea6a4ed441d1176dbb3f0e623e6362cca153732d076") [ 2722.158815] Bluetooth: hci1 command 0x2062 tx timeout 06:28:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:28:00 executing program 1: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x6c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:00 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") socket$netlink(0x10, 0x3, 0xa) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000001280)=0x1, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x4}, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 1: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) socketpair(0x4, 0xa, 0x8000, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/197, 0xc5}, {&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f0000000340)=""/174, 0xae}], 0x3, &(0x7f0000000440)=""/6, 0x6}, 0x44) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) 06:28:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x8}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/61) 06:28:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01ffffc63fd4f19e72c70646d4f06cb4c490af141adcdb3ff7308799beb5565cf995a6a0768d06203f720ee43da44f824717375b3b0a259e64bfb00b485d1baa7bf375de38c3550474daa7ec94da08282c4157849ab04079e4ee252335c7e97427444d4d3afb7c7887fde4acc844c1e7da1a6c033b6af55746fd4807b6bde39cdf7274c6ceaabc799312501f49d08bc076162e1536db2597daefa71173f72f00811a8e335e58f9378c99c16a44c08547ed0a2f7e4aed921b8ee906d8093ba349281bcbfdd8502a8ece5e73b57ff35771e89435157e8c46dcc656e545575e9428fec3e9479281862f917998d70efead2f454a4dd2bf1d81a6835ed6"], 0x13) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x1}}, 0x14) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 06:28:00 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") socket$netlink(0x10, 0x3, 0xa) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000001280)=0x1, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x4001, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x2, r2, 0x0, 0x0, 0x1}}, 0x20) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r0, 0x9}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) bind$bt_sco(r3, &(0x7f0000000240)={0x1f, @none}, 0x8) 06:28:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x7, [0xdd7, 0x4], 0x101}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0xb) 06:28:00 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") socket$netlink(0x10, 0x3, 0xa) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000001280)=0x1, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x13) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x1, 0x431, 0x0, 0x6}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2cf7bdb1913c5676a0b01d93ce9080f063fa3e82fc89"], 0x6) 06:28:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x5) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x2, 0x4) 06:28:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:28:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000001c0)) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000)={0xffffffff, [0x4, 0x1], 0xec67}, 0x10) 06:28:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfffffe5b) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4}, 0x6) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000180)={0x27, 0x5, &(0x7f0000000080)=[0x5, 0x1000, 0x9e, 0x1, 0x5], &(0x7f00000000c0)=[0x401, 0x8, 0x401, 0x5589], &(0x7f0000000100)=[0x3f, 0x800, 0xfffc, 0x200], &(0x7f0000000140)=[0x7]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f00000004c0)={0x5ecc3b18, [0x8], 0x3}, 0x10) 06:28:00 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000001280)=0x1, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @accept_phy_link={{0x436, 0x77}, {0xc8, 0x5f, 0x2, "e618e1cd1f06a1f809210fca6b06a3dbb50feea520d4ccbbb19bef8bb8ad9a2de61570c91bb33581e3c94c95cac1394e5898df0da32c2066b4940b81da4d0c401724fb1f25d18d6bf326f0ee262ea6cc6775c1be12dd1f6dd432d000956c16a77a7c42d36899fbf22be9db67b970ab09bce8b665"}}}, 0x7b) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x6) socketpair(0x4, 0x80000, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0xa9d, [0x5, 0x7ff], 0x6}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) 06:28:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x1}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7}, @tipc=@name={0x1e, 0x2, 0x0, {{0x42}, 0x1}}, 0xa8, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000000)='gretap0\x00', 0x6, 0x2, 0xfc0}) 06:28:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f00000000c0)="8f6ccccf37e54035c5a9e18cd46cf5cda4ef66e72eb9a1d047affddf4bee8f70ccaf68fec7009eb457a03c312c6ba15dd610acd934d01963d02bc497ba16d0d3e31bbfffc18ad3dc3fad6cbf0f5397149d961b50134c452afaee48eb2b203f7517f73e6cb2daf3aef0810e95305c153f682974390966bec9148dc71dec") bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:28:00 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000001280)=0x1, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000200), &(0x7f0000001280)=0x4) 06:28:00 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000001280)=0x1, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 3: setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="13008635e8000000010000000100"/24], 0xb) 06:28:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x1000}, 0xc) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040150}, 0x4000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffc}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8040) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0x0, 0xfff2, {{0x9, 0x4, 0x1, 0x6, 0x24, 0x64, 0x0, 0x4, 0x2f, 0x0, @remote, @empty, {[@timestamp={0x44, 0x10, 0x2e, 0x0, 0x0, [0x0, 0x5, 0xfffffffb]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x8f, 0x89, 0x8, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x7800, 0x3, 0xc52}}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x5, 0x1, {{0x28, 0x4, 0x2, 0x11, 0xa0, 0x66, 0x0, 0x4e, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@lsrr={0x83, 0x2b, 0xbe, [@multicast2, @empty, @multicast2, @multicast1, @multicast1, @broadcast, @broadcast, @rand_addr=0x64010101, @private=0xa010100, @local]}, @ssrr={0x89, 0x17, 0xb8, [@private=0xa010101, @multicast2, @multicast2, @local, @private=0xa010102]}, @timestamp={0x44, 0x24, 0xf1, 0x0, 0x3, [0xffffffff, 0xffff1463, 0x3, 0x9, 0x6, 0x80000000, 0x8, 0x0]}, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x75, [@dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102]}, @noop, @timestamp_prespec={0x44, 0x14, 0xd2, 0x3, 0x1, [{@rand_addr=0x64010102, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}]}]}}}}}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r11}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000a80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1c4, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4004010}, 0x8040) 06:28:00 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000001280)=0x1, 0x4) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0x6) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0111040280002de673aa57da79d65839c05178f635f06930ddd7c743d5dec98c48f222764d348e776a5bf138fb5550569b457d0a59fc356206b9bf8195f96879cca4a316a43de85e68d567deb998b1756bc219ede9bea70c0000000000007a7db1a796bdc6f506013df1e49c51616cefec7305997c25678b54d1a0fc04e54d7ab6bd641e0d7086c51d3651bd02d33d381b11451e0f19818085f4cf067a86e17bbf100d1d29f5a8c3f6a8ddb666a5dda6cb88ef772b0eca77ea5f40448871b67fb389608c4bfce1b609dc3e1b01522732e19ee90831e6b360d33d9d589ffffe71baf6fb7e8e0f71d19986125bb6343ebbd4"], 0x6) 06:28:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="f8ffff"], 0x13) 06:28:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1, 0x2}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x0, [0xffffffff, 0xffff], 0x2}, 0x10) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={0x0, 0xdca}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) [ 2722.648198] Bluetooth: hci2 command 0x0000 tx timeout 06:28:00 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="c000"], 0x13) 06:28:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRESOCT], 0x6) 06:28:00 executing program 1: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20000001) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01110402800089eedf173fa5dc5e178df1f01e70596f5b4b2feb59f812067eeb695872b1b252462eb8ac67c5092ed189a071a70090209078fe86e9e585dc7b06478b291b0b1016c1fa474aa2fd7b9f2e4cccbc97d2b9f9b1a8af7c81a189aa71110410b896a6eb7a75260cc4e5ca9a292b8062aa040000000045de2a6212c83bfc472ad1e2f0b49d958c0a0a47c3b8095f19a63fc7bffa3d58c0d6f4cc45d7718d0ec94ff016e0666ab41c8cace6e647c72b8cbd010400000c7ba097"], 0x6) 06:28:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:28:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x2b, 0x2, 0xe4b3, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) bind$can_raw(r2, &(0x7f00000000c0), 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xfeff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:28:00 executing program 4: socketpair(0x3, 0x1, 0x758, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="41a09d04db275a7944e38e51d378e4972d85e163479610c8fba01a1c8023532747f198a90c965efaa30073741a3f063d8ec6dd45ff909d7ecae9735ace45017484c59480ffa6b4140462873aad"], 0x13) 06:28:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) write$bt_hci(r0, &(0x7f0000000000)={0x1, @sniff_mode={{0x803, 0xa}, {0xc8, 0x1000, 0x8000, 0x8, 0x1}}}, 0xe) 06:28:00 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) socketpair(0x0, 0x6, 0x2, &(0x7f00000028c0)={0xffffffffffffffff}) bind$bt_hci(r1, 0xffffffffffffffff, 0xfffffffffffffff5) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) socketpair(0x23, 0x80000, 0x20, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x30}}, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004c8c1}, 0x8000) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:00 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x1, 0x3ff, 0x7f, 0x0, 0xe}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf250300000008003100d40a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x24008840}, 0x8000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240), 0x1e) 06:28:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:28:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x13) 06:28:01 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01ffff39bac85e7e8fc7fd048a4004d8174ace9aca4dff524b5cd979bc3aa8e73ac6ba87d8925ffebed87c9b63966314207dcb68be2f5e3d3bba47c6903978e922e5bbd1ead22f850f91631492c2694a1c7a8e03757f00bc36fbcf27c7ed3f1ef859f911a36af9690d68dcf8bdf71f3d28644a8e4a1d0010587d585d94e69ac79ec7b2682db27847f38f13e8809a6dff9a1814f6ff3bb60c1603dba4ca31906a5c6ff4ce687d4dc79d0d14164ec8bc740b9c13a05e233aaf7e63746604de76a9ed1822088bc97fe183ee2f4a2d30ad6129efef3497f4c4f56784f9e090dec74066f9dd8b786334602a8a3d06177de1fc"], 0x13) 06:28:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r5}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000680)=0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000890) sendmsg$can_raw(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x3dc, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x11c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_VALUE={0xc8, 0x4, "f968f68bd4df1b827e0e22578aad82c8c5c5cef3fba82ccd048421734a2af83e88fbe15cca7392c918b975d5093ea5d3733f896a4913d715232d0d241fd0c6db4266a069dc4af8366cdfa460a554c0ddbc5480d0c32938bc70fe51042729b931d97bf4136a482ad699101a47741bd9a5e5695180f082e2d0f7eaf1201a88527907d8acfde745b17ba0849ec56fb0dc3338ea05fe715c75694a3a9287836da166aeef2cf81132288a2db187b488c44b001cf233e6b5c6a54899b8940177d5771b2307b4d5"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1700000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xbfB\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '%@(%(}&&)}.\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '$-&!]*$[\\\\%&-#,\x01^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ',:(+\\%,^-#--*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5cf6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x65d06bb9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x99f}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x1d^\xe9\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#\'+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8c}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_MASK={0xbb, 0x5, "0d76329e32cd64e57099aea8446893532c74dbe39739f794042644a3a7679e6da62d1d06a36e3f80cee31f554aabc93789ec11448a3073a023dbddd01c28af9435f3a3cd1fbbed891af46c6e5cf315ec43e44d6fc9a7230849a81a471350185e2c742456668a2974d08fa6b6537244508454288514ae421569fcce29aa2382f44d8ea05833585dd2da63bbfaadb0c71b5a1a351369899d198ba592f1083af70f59592618bf216ce23639c61715256925769b203ac24e62"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3f}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x20040040}, 0x40) 06:28:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x4024800) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:28:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x6, 0x5, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000280)="0521ed95cae45ccaacf6b2ee0055696d6ca001feb6e1e27c43663c50bf825f9f78f04fa1df9fa73c82f67cf3b2bc4e1eca984eaf5d9a704e11f9935ab6a11fcc407839b5d1f5ec808c94349019b22fa8ef801dff021e3fe64b506aaeba97c536166fbc09417b0afed166a5e9bf2889b660f08ac962cf0bba42338e662f39c41917f7fafea1e12739428b2ae16caa7d74c7f1b03675eae263afd4b847fbd622f2668d44244ec3c27bb2ee2debbe1c2b682efdadb419097c13d56546f2b215a300c75d8c1d93a2b29fc53c8270e451c1a7d5f52e6289739836773ea49f") 06:28:01 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_remote_features={{0x41b, 0x2}, {0xc9}}}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:28:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x1}, 0x6) 06:28:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) r3 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000000714000828bd7000fcdbdf2508000100010000000900020073797a310000000008004400", @ANYRES32=r3, @ANYBLOB="2e9616729cbb69808718780b1cd685586f091c26f1553cfed24cfe43fdc913cbc09aa432d53398ffece2fcef6399b3d40a0acf8677e0dc0ef92ad021a39fada239c5b46a6e4bcb12c1ac3f6bc24f057192571bd024f725bec73c079744bdfef471a3b19fc496899660812911020bb8542fe00a5be680015190409d39e104ad18a18743e58d79b2491bd376695f134d180081b0389d01f6d93ea8647486038886bec03ad27558c64a6963983b4e"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000980)=""/4096) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x810) 06:28:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x20}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfb}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}]}, 0x4c}}, 0x801) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000040)={0x5, 0x2}) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="a3421a70860000000000000000a79058153141e314d26c08f5443fffefbde624ebeb37680d8f5485c60b494b0efe89641a0100000000008100ccae8c7174897c82dc5f"], 0xb) 06:28:01 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:01 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) recvmsg$can_raw(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/173, 0xad}], 0x6, &(0x7f00000005c0)=""/45, 0x2d}, 0x2000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'}) 06:28:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) 06:28:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x0, 0x1}, 0x6) 06:28:01 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x5, 0x20, "f1852a", 0x96, 0x40}) 06:28:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'gre0\x00', 0x0, 0x8, 0x1, 0xfffffffd, 0x9, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x68, 0x0, 0x1f, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, {[@ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x24, 0xa1, 0x3, 0xc, [{@local}, {@multicast2, 0x10000}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xfffff46b}]}, @end, @generic={0x89, 0x7, "4a9cfaa0ba"}]}}}}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r5}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:28:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="985aa549024f5c2f6a7a46ba2d69247d3219c32081b48710475fb25ebdf5f6f4bb0a2b9b31c90771eac56888b2ca3aba5ab5ab8601d74319434aded53d4d85ebcfe937abad2087bb7e76e2e80c5dc61e65472cded503d324146406ee586fdd2cd831ded6f9dae96f5fc2610acd88f3d02b6ea0361609804e3168bdef6918b0ec86e8b8b0ccf9fc44edacfbb56e00e2cdcbf23291d6ad3deb1bc840b89ac26fba3368a7805bf17e48cf98b4a1efa6c855f2853ea777a234bf13503328017e8e2df95cd1ec6996260c8b06deecaff3a969ca38a33902926aaa76dec9f2d8ff0000"], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 06:28:01 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x23) 06:28:01 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair(0xb, 0x5, 0x9a1, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/194, 0xc2}], 0x1, &(0x7f0000000200)=""/39, 0x27}, 0x10001) write$bt_hci(r4, &(0x7f0000000280)={0x1, @le_set_adv_data={{0x2008, 0x20}, {0x7, "30b2443960bf293af998efc3fa6f023334e8e09658d4b620562db5f9b35a84"}}}, 0x24) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0xb0000, 0x0) write$bt_hci(r3, &(0x7f0000000000)=ANY=[], 0x6) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000340)={0xe2, 0x1, 0xfffffff8, 0x3}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000300)={r6, 0xffff}) 06:28:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f00000000c0)="7ca2a9fe1c8b6dc76951eecb1a36f543df5180015077bf1e6a0830e4c7fab949680dfd9dc5da1512bf805ae9251e583be2b8a005540ad6c7eca7fff130f1bfaaa1fd93806167ff3b20236c6ce694ea7c628e0728d1fbac271989eb23a0afd15f55ec78787a3fe41400"/116) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000300)=0x1, 0x4) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10020002}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000140)) 06:28:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01ffff80862593aad5ac298a34a3bb331e192fc163202adefc053e90985dc984dff8709002def6603e74473c9a97e09e2b8fad16d4ad4e4698ebb2200c1ae07c7059ae9dd78cac311254139140e2b1494d315a8c1cde53c0d302d631eea6201e09e4a47893a86ff312953fecd944392b421b47a636fd3623f3d5f03ff68813b37f6b86ffc337188de07720cbdcd557123650054e67629b560e0ed76cc0e396bc594b"], 0x13) 06:28:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x6, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, r1}) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 06:28:01 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) [ 2724.078210] Bluetooth: hci3 command 0x0401 tx timeout 06:28:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03d4e55f189e530fc58fcc106278744417eb9d6819cb46ba48b4a958b432ba5e728a6e108cadd1f2a974e02d34507418228a2d575082b762449f602bcf4f00a38f86015a0f769739128d6d39", @ANYRESOCT=r1], 0xb) 06:28:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x91c0}, {0xa, 0x4e24, 0x6, @mcast1, 0x2}, r1, 0x80000001}}, 0x48) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x0, [0xffff, 0x8f2], 0x2a41}, 0x10) 06:28:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x20, @dev}, {0xa, 0x0, 0x0, @remote, 0x800000}}}, 0x48) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x13) 06:28:02 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:02 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="01110402b7eca88b32c4e05d0000"], 0x6) 06:28:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:02 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:02 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x4}, 0x6) 06:28:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000020}, 0x800) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xb) socketpair(0x5, 0x80000, 0x800, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x60200, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) 06:28:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r1, &(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYBLOB="bafa1aab973bfc3b8dbb03c9892f81ef234fade6b84a012a5e43f8fc4dee10960700000000000000721ee3d90ad657173262729811afaa2a46504b2b6f711c47d99d9d21aecf37f83199695e6e351a320332dd5c7c32cd1bc8be0e5bc809ab446dbca14bc917d68b82ce235634b4f08548a2ef74965b68b85be60b34c61ed2eb30288c341b0cb6c7aba5c193ea4f067f177d4dd45b9c044e40b337c89c1df11a3585274e1965a072cd016c4480c943a42a0d0dce7f7718831bc5fcbca0adf72d9263942489c4f3adff8f07bd1992dcbdbfedb0b9d515fb45e5b4b91b0bdfcb9b7b6b84c6", @ANYRESHEX=r2, @ANYRESHEX, @ANYRES64, @ANYRESOCT, @ANYRES16], 0x13) 06:28:02 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) [ 2724.238464] Bluetooth: hci1 command 0x0401 tx timeout 06:28:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x2, 0x1ff, "74c66a", 0xea, 0x8}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:28:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl0\x00', r7, 0x2f, 0x1, 0x2c, 0x7f, 0x22, @private1, @mcast1, 0x40, 0x40, 0x6a, 0xa95}}) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r9}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="acf3ff00", @ANYRES16=r2, @ANYBLOB="100028bd7000fedbdf2519000000800001801400020076657468315f746f5f7465616d000000140002006272696467655f736c6176655f30000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200000000000000000000000000000000001400020076657468305f766972745f7769666900180001801400020076657468315f746f5f62726964676500"], 0xac}, 0x1, 0x0, 0x0, 0x20040840}, 0x24000010) getsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000000)={{0x1, 0x2, 0xd5e4}, 0x3000000000000000, 0x7}) 06:28:02 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) socketpair(0x22, 0x80000, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x3, 0x2}, 0x6) 06:28:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0xfffffcd8) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/148) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r4}, 0x14) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:02 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 06:28:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r2, 0x2bf5538d4c0907bf}}, 0x18) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="9dc26b3d91657b60bea40e50dce268fba520a8adf73f4fd1d563715ca911d4176d593e436fc007a306b6c17885842d0524f949f5db89d3ecc1b3041db64fd9e315bc1762137d63ed7ec521"], 0xb) 06:28:02 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:02 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa32}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x577}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040c2}, 0x400d800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0x1, 0x8, 0x0, 0x4}}}, 0xa) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:02 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) [ 2724.718088] Bluetooth: hci2 command 0x0000 tx timeout 06:28:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@loopback}, &(0x7f00000000c0)=0x14) 06:28:03 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x148, r0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x100, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '.+\\^*!-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xaf\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/,)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x94\'\x84\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '}-^\\{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*/[}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/,\'\\\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!\'(.^-\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x9c\\)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x46ac}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x4054) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000b40), 0x42, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) bind$bt_hci(r1, &(0x7f0000000240), 0x1e) 06:28:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$bt_cmtp(0x1f, 0x3, 0x5) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1a93c7957732b56038120a1175571e6967a05b8c5191d9c22a0c67804eb49d9f797025aa2c1317c422da6d8069c7552230f47434eb96381c39c6e5"], 0x13) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000080)="51a517263c4a4a1d349226fe2ffe27c0c3d0a22a7340c88b48852821e6d88d12", 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x20000) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 06:28:03 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 06:28:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x0, 0x1}, 0xfffffdb8) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {"5013fb29764de24532dfba2991fa968a"}, 0x9, 0xcfb0, 0x1}}}, 0xa0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) 06:28:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x15c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65bae47d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14d9d2e9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x29, 0x6, 0x27}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e3e5772}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3041e70a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54173236}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5323a083}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f657a69}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x771e6f1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x98}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78d002a9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7193a5dc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa337808}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x52e7f046}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25c6d07f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55174ea8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38185381}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76c6b378}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8000}, 0xff9aa08b3a3da3a2) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x6, @mcast1, 0x9}}}, 0x30) 06:28:03 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:28:03 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) [ 2725.278002] Bluetooth: hci5 command 0x0401 tx timeout 06:28:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x13) 06:28:03 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000180)={0xffff, 0x9, &(0x7f0000000080)=[0x0, 0x801, 0x400, 0x0, 0x81, 0x4, 0x5, 0x1, 0x4], &(0x7f0000000100)=[0x1000], &(0x7f0000000100), &(0x7f0000000140)}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000280)={0x300, 0x360, 0x556, 0x527d854b63e90441, 0x1, 0x400, 0x8, 0x1, {0x3, 0x8, 0x1}, {0x4, 0xfffffeff, 0x1}, {0x4, 0x9}, {0x8, 0xffffff43}, 0x3, 0x10, 0x9, 0x1, 0x1, 0x81, 0x400, 0x40, 0xefe3, 0xf8f9, 0x101, 0x4, 0x1, 0x2, 0x1, 0x4}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x4, 0x3, 0x1, 0x6}, 0x10) 06:28:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:03 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRES64, @ANYRES64=0x0, @ANYRESHEX, @ANYRES16=r2, @ANYRES16, @ANYRES32=0x0, @ANYRESDEC=r4, @ANYRESHEX, @ANYRESOCT=r2], 0x6) 06:28:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01f304020000"], 0x6) 06:28:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:03 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x7adb15acd8d12dc6, &(0x7f0000000000)="4986e9b15855275ce462b3b2036fec4c19fa60457395ff8582aa8d746f4bd8ad2d14") bind$bt_hci(r0, &(0x7f0000000240), 0x1e) 06:28:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0xb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) 06:28:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f00000000c0)="46e4254f51d085a1d086a821d519367e7630964d33329e474fb9760706ee98b822de9af78ba682af53f67fc07636d67222efdb4ab4e6d2a40395021f55c3524b39d06a13b4f99d0836c0470758362e4d5a25b65f5f13e699b7d0d32a7c2c660f3f9a900ce9e0b5b78bfcbef8fddd60fb687ac97cee7b781931eb2f9f8fb97aaae84b9b759be4bbc9998a643b5c094778c56da13ce16efc9865ccd47db7183f0cc61ca87e3d181b546c474fe04966e83ab8fd05a458aa1285e42d01530e68f77cb7d33957ac55b7cc4b1db3ea662100bc6d01cd71") setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000001c0), 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="831104020000cef54c2898a150b0c55f9e6310a13d9f6b7e44a257d58eb408d1b864bc901f05eb4eea3cd3d7a0fe77d05898565cb519e99f29f627bc5e72e13889792101000000e003b9e0146efcdf5978171c367b0570437c412e0b533512e38189e64166f82aec3551b79552aa678aa896dd28bfe08222e535f76662714f87a30c55fbef461c567c219cffeed314303fd38a64dc1b0befce6b6c9c20c892297c6f72851f46efbc7cc218e7c655860652cdbbde5d898dd81fd859ec0fd19433272c02a944992edb72f8c384007f2cafa65f5de972738a4bc221e8467e3fb9563aa2edbfcd82"], 0x6) 06:28:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:03 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:28:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:03 executing program 1: sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@canfd={{0x4, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "2b571c5378dc36b1e74202644725d2662fe6feed8c4fefb79167af58e829e367fbb26a02395277bf93aa790c2b9b83f420b428fc1dd628f86c410de1e61068d0"}, 0x48}, 0x1, 0x0, 0x0, 0x4004c}, 0x80) [ 2726.129908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2726.136610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2726.145038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2726.152284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2726.158922] Bluetooth: hci3 command 0x0401 tx timeout [ 2726.165261] device bridge_slave_1 left promiscuous mode [ 2726.170860] bridge0: port 2(bridge_slave_1) entered disabled state [ 2726.177790] device bridge_slave_0 left promiscuous mode [ 2726.183497] bridge0: port 1(bridge_slave_0) entered disabled state [ 2726.192418] device veth1_macvtap left promiscuous mode [ 2726.197710] device veth0_macvtap left promiscuous mode [ 2726.203178] device veth1_vlan left promiscuous mode [ 2726.208293] device veth0_vlan left promiscuous mode [ 2726.272657] device hsr_slave_1 left promiscuous mode [ 2726.283211] device hsr_slave_0 left promiscuous mode [ 2726.294584] team0 (unregistering): Port device team_slave_1 removed [ 2726.304599] team0 (unregistering): Port device team_slave_0 removed [ 2726.313571] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2726.320697] Bluetooth: hci1 command 0x2062 tx timeout [ 2726.328842] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2726.351947] bond0 (unregistering): Released all slaves [ 2727.357949] Bluetooth: hci5 command 0x0401 tx timeout [ 2728.016992] IPVS: ftp: loaded support on port[0] = 21 [ 2728.126455] chnl_net:caif_netlink_parms(): no params data found [ 2728.179036] bridge0: port 1(bridge_slave_0) entered blocking state [ 2728.185421] bridge0: port 1(bridge_slave_0) entered disabled state [ 2728.193618] device bridge_slave_0 entered promiscuous mode [ 2728.201188] bridge0: port 2(bridge_slave_1) entered blocking state [ 2728.207667] bridge0: port 2(bridge_slave_1) entered disabled state [ 2728.215278] device bridge_slave_1 entered promiscuous mode [ 2728.234422] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2728.243215] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2728.265005] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2728.272161] team0: Port device team_slave_0 added [ 2728.277522] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2728.285503] team0: Port device team_slave_1 added [ 2728.303090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2728.309382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2728.335862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2728.349375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2728.355823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2728.382376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2728.393301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2728.400936] Bluetooth: hci1 command 0x2062 tx timeout [ 2728.402739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2728.430221] device hsr_slave_0 entered promiscuous mode [ 2728.435883] device hsr_slave_1 entered promiscuous mode [ 2728.442099] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2728.449373] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2728.520140] bridge0: port 2(bridge_slave_1) entered blocking state [ 2728.526487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2728.533134] bridge0: port 1(bridge_slave_0) entered blocking state [ 2728.539533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2728.568982] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2728.575099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2728.584613] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2728.593968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2728.613585] bridge0: port 1(bridge_slave_0) entered disabled state [ 2728.620883] bridge0: port 2(bridge_slave_1) entered disabled state [ 2728.630729] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2728.636814] 8021q: adding VLAN 0 to HW filter on device team0 [ 2728.647322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2728.655652] bridge0: port 1(bridge_slave_0) entered blocking state [ 2728.662082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2728.679762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2728.687475] bridge0: port 2(bridge_slave_1) entered blocking state [ 2728.693868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2728.702439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2728.710758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2728.719173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2728.728742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2728.740707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2728.751191] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2728.757184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2728.770773] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 2728.778424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2728.785098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2728.795453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2728.850803] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 2728.862567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2728.894259] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 2728.902625] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 2728.912034] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 2728.922059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2728.930468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2728.937397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2728.947284] device veth0_vlan entered promiscuous mode [ 2728.957594] device veth1_vlan entered promiscuous mode [ 2728.964059] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 2728.973247] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 2728.985749] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 2728.995143] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2729.002500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2729.010217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2729.020179] device veth0_macvtap entered promiscuous mode [ 2729.026270] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 2729.034862] device veth1_macvtap entered promiscuous mode [ 2729.043574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 2729.053475] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 2729.062670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2729.072638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2729.082055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2729.092026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2729.101224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2729.111035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2729.120182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2729.130231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2729.139401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2729.150861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2729.161254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2729.168859] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2729.175796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2729.184330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2729.193295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2729.203817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2729.214013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2729.223954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2729.233202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2729.243077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2729.252228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2729.262566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2729.271718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2729.281622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2729.291664] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 2729.298715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2729.305703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2729.314845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 06:28:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="019b0dae6e09e7fdf2658bec8338ba1104020000"], 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) write$fb(r1, &(0x7f0000000980)="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", 0x1000) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000000c0)={{0x2, 0x3, 0x7fff, 0x1, 0x40}, 0x4, 0x8, 'id0\x00', 'timer0\x00', 0x0, 0x3, 0x4, 0xee3, 0x5}) 06:28:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x0, 0x3}, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 06:28:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x1, 0x1001, "0d20b3", 0x1, 0x30}) 06:28:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040004}, 0xc4) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="6decc335000500a637b369a56fed0c3274a88fa9da8630ad6f33b122f6e253b90ee7d0bda0e6152cf3ed9cecf73f8dbccb778078933c4ddec998a816fec213f33d9e31e4f5499f7e529650", @ANYRESOCT, @ANYBLOB="080029bd7000fcdbdf25170000001800018014000200776730000000000000000000000000001c0001800800030002000000080003000200000008000100", @ANYRES32=r3, @ANYBLOB="c2e0071d87c39f6a5f23d4aef3e5a15813e20ffe4d94e1aac2210963e20b4e3d25baedc72fa23a705941dbfc18ec51e39d4ed9dcf5f48df5eafae128fb9f4511e48a06b14ea743b646aec9414e7c083cccd6e5064e1816d88abd8525c08b3dce151abbc0000000000000000000000000001e3519183bc2f8312bbc9cd9cc964ecda91221061c1ab6e82ecf27faf67c71e22e5c4b95446239c618d9a58a22697be663726a6a05000000f5cdc5a7da71094c30b9a683124eed35188dbf8de44a7f36d4698911fd0211c4cb0baff55308ca16fa7f5cd753cd"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40004) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000000)=ANY=[], 0x6) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r8}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) 06:28:07 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000180)={0x1a, 0x6, &(0x7f0000000080)=[0x1f, 0x0, 0x401, 0x7, 0xff, 0x3f], &(0x7f00000000c0)=[0x7, 0xc4, 0x6a, 0x1, 0x2], &(0x7f0000000100)=[0x8000, 0x1, 0xff80, 0x6], &(0x7f0000000140)=[0x3ff, 0x9, 0x8, 0x7, 0x1000]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1b31}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 06:28:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000980)={@local, 0x0}, &(0x7f00000009c0)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x98, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x90}, 0x4004) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="012804020001"], 0x6) 06:28:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc0c49365}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040804}, 0x104) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}}, 0x404c0d1) 06:28:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:07 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r5}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x14, 0x58, 0xfa, 0x9, 0xc, @rand_addr=' \x01\x00', @mcast2, 0x7800, 0x8, 0x2, 0x9}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r9}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000900)={@private2, 0x0}, &(0x7f0000000940)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000980)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r11}, 0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x2c, 0x0, 0x402, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4085) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x10) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r12, &(0x7f0000000380)=ANY=[@ANYBLOB="0123cf0200003a7f4975de16a8eb5b7539a0e81241a01d04baa3fb983db3a662a88659c7c1dad41f2dd487fcd7fe8c73139636f97795519f2b8c2c9cb0b2ad88f7643887c5b7969356bf20ea40176726f1b9e68ac7a3ea59570badb5eaafe37b7c18ba34e6054af9c50a3e45318d8d3c17d21f1344c728e922848dad8ae7aab8af85ef3edb2eef3e33fb543c62769ac6c877a6f39385e74c29b5c9c6e494158a947f"], 0x6) 06:28:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) inotify_init() 06:28:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0xb) 06:28:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040041}, 0x8000) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) [ 2730.078231] Bluetooth: hci2 command 0x0409 tx timeout 06:28:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x13) 06:28:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 06:28:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x8000800) 06:28:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6(0xa, 0x6, 0x9) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0165a80036004615d91232cf125005cb079d9d66f4efc2e50130ab026fac3bd7022a5085f26cb80cd98aa1816500b391eda384903a29c21c5a4e6913b39d7601cdd33feb4716c5"], 0x6) 06:28:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x2, 0x4) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) geteuid() write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000400), 0x610440, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000480)={0x10, 0x30, 0xfa00, {&(0x7f0000000440), 0x4, {0xa, 0x4e24, 0x6, @mcast2, 0x1}}}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6eeb010018000000000000002400000024000000050000000a000000000000090500000009000000000000080100000000000000000000020200000000302e0000"], &(0x7f0000000380)=""/52, 0x41, 0x34}, 0x20) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) recvmsg$can_raw(r2, &(0x7f0000000200)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/228, 0xe4}], 0x1, &(0x7f0000000280)=""/99, 0x63}, 0x0) 06:28:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 06:28:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240000c5}, 0x4000004) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001fff662f999e6eba01176b712125a2bf510a741465fd3c4752a9233180c66849f66165d3cfeb94979caca4b5cb9dd0528ca1540229844bb78e83f6be358b3a279a9a1230bc48e41842f960952b00d41870e008f63527bd0034c9519650ce0c51692909a53bfcfb7cd9e17fb9a4c4ec6a8f30563cf55d19631face705121bd8d0cafa46b56e6e9ed19ce2e7c670bd087632b9347f30ee35febc29fcee14fa2ce3a59f7974901157be8f2cdd5380a87e2f3886a46a94ceaf8348e45c0623071c326efbe3a94ffeaf42e0fb564179565950b0"], 0x13) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0xc004000}, 0x810) [ 2730.478281] Bluetooth: hci1 command 0x2062 tx timeout 06:28:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x0, 0x0, 0x1, 0x1}, 0x3c, 0x1, 0x0, 0x0, "bb0218fda0047e91f04f24bc93851318229a5851bf6f983074fc5ac0dc2727bbdef3458aaad4bc4fc258f50cc96e620d5a13a0c900e2330c3fa92a74ed550375"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000180)=@nfc_llcp, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000001280)=""/85, 0x55}, {&(0x7f0000001300)=""/6, 0x6}, {&(0x7f0000001340)=""/90, 0x5a}, {&(0x7f00000013c0)=""/105, 0x69}, {&(0x7f0000001440)=""/137, 0x89}, {&(0x7f0000001500)=""/200, 0xc8}, {&(0x7f0000001600)=""/92, 0x5c}, {&(0x7f0000001680)=""/48, 0x30}], 0xa}, 0x40000040) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_yield() bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x7, 0x4000) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f00000002c0)={0x0, 0xfffffffffffff8a4}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) socketpair(0xf, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x91}, 0x20044041) 06:28:08 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={0x0, @llc={0x1a, 0x10e, 0x7, 0x1, 0x4a, 0x0, @link_local}, @xdp={0x2c, 0x0, 0x0, 0x25}, @nfc={0x27, 0x1, 0x1, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)='veth0\x00', 0x8, 0x4, 0x1f}) bind$can_raw(r0, &(0x7f00000003c0)={0x1d, r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x1, 0xfffc, "871ddd", 0xf9, 0xb8}) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="011104020000a6a6e513e2df74e1967333aed7bec664c443b392c3094162b8b1cc62d5689660a761bab9b26dee10423d0000000000000b777804deaffa2ba6f28fa4b9f7d301000000000000001dece64253949eef0b3a"], 0x6) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x80}}, 0x4) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000140)=""/227) 06:28:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xf7ff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000280)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "3c7106bad84a0562df9aab9e866800b4", "aade3dfe30242b12c06fc5743524fb23", "840842d262e3ea42bf9c29099e9be82c", "1714f38a5fa778287800fe1edb70d3b9"}}}, 0x4a) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 06:28:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000040)) 06:28:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000200)="9e87db9b6e922890d6d6688cf5f75e43fbb7be18d2f43f1b0132e5d1293841e6c28dd16eeeb669bfc2a3cec164b58bfe77fdeb0d7d7841c8ba14862c86c4e50ab0179b5b43a73334f3a4ff3c4c4633be7dc1ec1f80aba3490ff51827e673ee50cf2cd3fbf1f1e65b709e66820888b1a7fd6a4650698420b955b2bb9fa41e3faf98e0b77976afbb856cc082861f45dfe8668baa0c55f397e000d870b4527f034ddfbcbf3254a99fdc8c558ed194112838fb98b6070676ec0b0a9079b99f8f9e6c9a3c4be168d144b205bca66f3972466dd6b3dfb30fdfeeb34cca78") ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0xbd, 0x1, 0x9}, 0x9, 0xfffffffffffffff9}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x590}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4048081) 06:28:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x0, 0x1}, 0x26) 06:28:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @xdp={0x2c, 0x0, 0x0, 0x3d}, @phonet={0x23, 0x7f, 0x5, 0x3f}, @ipx={0x4, 0x2, 0xfff, "97065a8727f1", 0xc0}, 0x1f, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000100)='ip6gre0\x00', 0xbad6, 0x0, 0x97}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x180, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa1ff22f690ba9d3a}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0xb) 06:28:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_oob_data_reply={{0x430, 0x26}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "654e56e599bbca2b8aba0230bd3a56f8", "f08e49c70e6e32955d3f78301632db6b"}}}, 0x2a) 06:28:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 06:28:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'gre0\x00', r3, 0x10, 0x7, 0x5, 0x1, {{0x11, 0x4, 0x1, 0x8, 0x44, 0x66, 0x0, 0x7, 0x2b, 0x0, @rand_addr=0x64010101, @broadcast, {[@generic={0x86, 0xe, "ca27d904738a59a2436c18c3"}, @lsrr={0x83, 0xb, 0x51, [@remote, @multicast2]}, @lsrr={0x83, 0x17, 0xaa, [@broadcast, @dev={0xac, 0x14, 0x14, 0x42}, @remote, @rand_addr=0x64010101, @broadcast]}]}}}}}) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="038edc323c0c2e63f0a3ed616312e686e5a9e12d445f4c5898f8973de62806e9376b5469fe0d6591b51f269924b055225559fcaed0dd32f05f314e81702cb068960695c1f1f960e6f4a4047979510b0495f9a635942fe643370079b26ec436722b25e8dff74464116242"], 0xb) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0x1, 0x0, 0x80000000, 0x0, 0x800}, 0x100000000, 0x3, 0x61}) 06:28:09 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 06:28:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}}, 0x14) 06:28:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x7f, 0x4) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @isdn={0x22, 0x5, 0x2, 0x50, 0x5}, @hci={0x1f, 0x4, 0x7}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0x7, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='veth0_to_hsr\x00', 0xfffffffffffffffe, 0x3ab0, 0x1e4}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xb) 06:28:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {}]}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x5, [0x7fffffff, 0x9], 0x1}, 0x10) 06:28:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x2, 0x70bd2b, 0xfffffff7, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff8001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc4}, 0x1) 06:28:09 executing program 4: syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x18182, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x1, 0x2, "cc2308", 0x5, 0x7}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040), 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) 06:28:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:28:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x6) 06:28:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) socketpair(0x22, 0x0, 0x10000, &(0x7f0000000040)={0xffffffffffffffff}) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x13) 06:28:09 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x501180) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x5, 0x1, 0x2}}) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="eb677bd526a130e1d6f3d62c7f78b961b6d1a9a95c6f13de46857d5318a2"], 0x6) 06:28:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000040), 0x6) 06:28:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040), 0xc, 0x0}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xb) 06:28:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0119042affffffffffff000808003e8eb63f07294776a4ea635857be3397d4493c00"/46], 0xe) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x2}}, 0x20) 06:28:10 executing program 3: write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x10}, 0x18) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8800f64b", @ANYRES16=r1, @ANYBLOB="010327bd7000fcdbdf25040000000900010073797a300000000005000400020000000900010073797a30000000000900030073797a32000000000900030073797a310000000014000200697036746e6c30000000000000000000140002006970366772653000000000000000000005000400010000000900010073797a3000000000"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4000081) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0x10000, [0x3, 0x7], 0x1}, 0x10) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) socketpair(0x22, 0xa, 0x1, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000440)={0xffff, 0x1, 0x7f, 0x8001}, 0x10) socketpair(0xe, 0x5, 0x9, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r4, &(0x7f0000000200)={0x1, @set_csb={{0x441, 0xb}, {0xe7, 0xff, 0x9, 0x8000, 0x1ff, 0x0, 0x6}}}, 0xf) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000100)={{0x1, 0x1, 0x3, 0x2}, 0x7, 0x8}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3fffc0}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfd}]}, 0x54}, 0x1, 0x0, 0x0, 0x8098}, 0x4000040) 06:28:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x3}, 0x6) 06:28:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000400)={0x2, [0x5, 0xcb], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0101b4ff0900"], 0x6) 06:28:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000008c0), 0x44000, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000900)={@any, 0x6}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r1, 0x9}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x5, 0x5}) 06:28:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$fb(0xffffffffffffffff, &(0x7f0000000040)="a2a60a5073c41851b7560bda3f1511550bf7ede01d91939e5cfb88188a58b87ff643c6f989551ea373872d72ae910d2fa59dde283eff800f052f5854997c4704dc4e7d0691e66938c68a4a1d34a9d40eda01bd36272c52b70de7f072b30b9976119f65499b182690c330fffb1c99090d84bb75763e0a197329668e6c26508f4fdd457e77cb791c69f6a79928c14da0e7a9f476fa96af3b9f87c6328f5954fe61d753609970ae22da1e81df5c8cf7dd103bd29504fc972cb0cdd7b661fb7ca816ead5e2d9ef2b5b7a1779efce3230885381b1310a8e7c5822a6542207f6b705795949f0426cf0de946bb31d6c", 0xec) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x105280, 0x0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000180)={0x3b, 0x1}) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="d58baf346efded98ac17bb37032b6bb33f73bc96d6832e96bc0d06b4108f6dbdc3423d336ac8bfa60cb75dd0bdef3cab4cc22bd9a19ab5e7657c2a06adf7db70140e820b9622f93600ed931c52c2eebb602f24f3f0"], 0x13) 06:28:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000040)={r2, 0x3c8a}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="f4e412"], 0x13) 06:28:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="01000100", @ANYRES16=0x0, @ANYBLOB="000000e200000000"], 0x14}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x35aa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) 06:28:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0xb) 06:28:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x30}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x1407, 0x0, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x15) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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", @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x24008001}, 0x4008000) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000340)={@mcast1, 0x0}, &(0x7f0000000380)=0x14) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r11}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x567f8a00ef5b80ae) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) 06:28:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f00000000c0)="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") [ 2732.158289] Bluetooth: hci2 command 0x041b tx timeout 06:28:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r1, 0xfff, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, @in={0x2, 0x4e24, @local}}}, 0xfffffffffffffc51) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="10000000", @ANYRES16=r3, @ANYRESOCT=r3], 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9b54}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000326bd7000fedbdf250d00000008000600", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="def69a93f35218227206494e92dba8d9330b00a46785a8e93618a0e178d3b139081a14b1e6e229ebb6dd3faa1c9890c7d8fe8662b1d9e398558535b8093efd25bee86ecbf1e4bcd75d0f3cd325b6125415ad429b596d9f7df78ba2172d77f2ba101a49b5f2343745535e68a87fb8e30ef2bb731fd35b64dadcdc59f486159e405bd55cd055dff0"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x45) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="035de938433c6973292c9d24c70f1ffc7a1cfbcba660c47ea84c83df05af3ca113072f53a3cef52c9f46d9fe3ea2cdee2ff5c5e4ccd6dedea51bbd24915a06ee921e717f038b8f7f4174752e180fc948c9b8dedd590c9ca0a975b699512134f1bc859a7907ea5d0f81c673928979c84e209d6ebb43341e067c2b16ffd32f56443de88e7a801a43a97000cbbccd9aa5cd6e77078ca99a4cc2b136ba6392182f2cb85065c0ea86c77ecb6e4b37222f55974a95fcd4"], 0xb) 06:28:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:10 executing program 2: socketpair(0xa, 0x4, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000014) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:28:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) 06:28:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRESOCT], 0x5) 06:28:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x4c, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x44010) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240), 0x1e) 06:28:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01c100002202"], 0x6) 06:28:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) write$bt_hci(r0, 0x0, 0x6) 06:28:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x8000, [0x1, 0x101], 0x3}, 0x10) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:10 executing program 1: sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1402, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x22, 0x6, 0x10001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x9, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:28:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) write$bt_hci(r0, 0x0, 0x6) 06:28:10 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:28:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034c1eda0bfc73b625d9f91598e2bb1b208ce90b35baac0870dc24ff967615d5583a965c0f9f61c6"], 0xb) 06:28:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000180)={r1, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in6=@initdev}}, {{@in6=@remote}}}, &(0x7f0000000140)=0xe8) 06:28:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) write$bt_hci(r0, 0x0, 0x6) 06:28:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0111040200008828c1abb218c65ad6f298c23fc7a49035950a647512e930a87174afddcad0ade59bc6dc0577c48f29c732dc0fedcb25071c8053d7b5a6ffb817ec3d49b3ffe2abcdb63b0786edc8825bbd02e83b0808b833e07e26e8377a"], 0x6) 06:28:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048890}, 0x24004011) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x141001, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x44000420) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) [ 2732.557623] Bluetooth: hci1 command 0x2062 tx timeout 06:28:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb61e}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x625}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc28}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40800) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0314f34f399f8c20514bd44c9506339b17b80af4ccacedbd1dbc8c38067f7931daf0ff42a213f1d1b6bc8b0231ffd5d31241e75a74e8c0b5b16acd2f488578c7aecd081d"], 0xb) 06:28:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x86541, 0x0) bind$bt_hci(r1, &(0x7f0000001800)={0x1f, 0x2, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESOCT], 0x13) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), 0x4) 06:28:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x88, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001}, 0x4044000) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @switch_role={{0x80b, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xb) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) r2 = socket$inet6(0xa, 0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 06:28:10 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES32], 0x6) 06:28:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x13) 06:28:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000000)="09bde7b27df2e863940058783f00f1f6c357ae58b94e093ee659dbc2fdc30910c9a074de3f26e470b76ec488893ccaad7286a806ee05dba14f7547edb22ac3d7e6bff897b808f712d4dca5693f3706736138a43c7e672b41d8506c67d39a0b5f38fdf849f3ec57e802db9114d11227e800c5a115a4825a58f282c99c5a697c7b031c7de55c685de7fbe96094a4eff49a5727a5a4e4f66016127c33566bac990a713448003cefda5b82d77b890c0f3b8428f4fe14754b5ac3c556630bec2605899f60321458d770ef0161d7046a18836e8699c87dae09a07b50e44cd2eb7272f15bf2922ffb65c2ec3a1d2116034e13") bind$bt_hci(r0, &(0x7f0000000240), 0x1e) 06:28:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="58e434502efc26576d22accbba9fcb70557bd903c453098673312771baad7a24738dff78514bb573fdf5ef1b4a88a5036a2a8abec716eefacb0a7eb84ae322cdf950485eab5a57a4c42ae0bc4b2c7ce7d95fc52d"], 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 06:28:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf251000000008003a00018000000a000900bbbbbbbbbb0000080031000200000005002a000000000005002d000000000005002d000100000008002b0005000000050038000000000008003900000000000af091fd746194c9ad533c831bd856ead1a942feedca580de06e7c5f2509c9e0d88822518aff39bcd18533ba3017eb06894e1c1080ae73ae6259ed83932324fa768862e5a1bc2fcfc5d763c1c687f500"], 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x20000010) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) 06:28:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES32=r2], 0x6) 06:28:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0xfffffffffffffe10) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xb8, [0x9, 0xfff], 0x8001}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x4}, 0x6) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0xa843}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="b0114f26f9d24d53ec54f630055004f27dfe2c8675690c338b01e93e544d91dd77b34c11bae8c4f2425533c8c24aaa23cb48294a92e688ed62ea3d19e9f1ee01654ea495f76914b0641eebd07ee37d87166150b565ebe2"], 0x13) 06:28:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x400, [0x6], 0x6}, 0x10) 06:28:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_auth_payload_to={{0xc7b, 0x2}, {0xc8}}}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000088c76fd2c20aaca08c780e17928fbd8aecc7d38418453e6d93ad0a10a6387b071a564c09b5cbb5d6ce9553e34358d3f8e3a1dd0439e9677a31bf6c3fc37dd0c5f60b9dbb00f628d42cffa75c249ce2a5489f18376747f4dc99bd3b5081b6f98ce67c0fefb608fa185712a00a386b", @ANYRES16=r1, @ANYBLOB="000228bd7000fcdbdf2508000000606f95a18e4bea67dfd0e3e36a42854dc29205588c98de634a990671351bb9f2654763ff21610382ab0d01905e7d88423fe17bff2f4546f834547c7b90e824fbb14c756062f74c0f80b4855186d976e371af3349c6ab15a05c2b530185782f79af691d7e02f153ab0e25a2cabf4c01379889cbbd58d715aa9d60e0d0a55944315ac3c4bb233f8a35163fc3d33f9c68d58e0ae30e66aab36c540965e72c6dfe"], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000025) bind$bt_hci(r0, &(0x7f0000000240), 0x1e) 06:28:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="e3110412eeff"], 0x6) 06:28:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x1, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0xb) 06:28:11 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x19) 06:28:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x30}}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) 06:28:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:28:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0xb) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @hci={0x1f, 0x3, 0xb22a7880387d9f10}, @llc={0x1a, 0x104, 0x2, 0x3, 0xff, 0x9b, @broadcast}, @hci={0x1f, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x3d, &(0x7f0000000200)='gretap0\x00', 0x53eb, 0x5, 0x6}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x13f, 0x1}}, 0x20) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x3f, ':wA'}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x8001) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000280)={{0x2, 0x2, 0x7ff, 0x1, 0x9}, 0x80000000, 0x218740000, 0xff}) 06:28:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) 06:28:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x121001, 0x0) recvmsg$can_raw(r1, &(0x7f0000000640)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/39, 0x27}, {&(0x7f0000000300)=""/128, 0x80}, {&(0x7f0000000380)=""/9, 0x9}, {&(0x7f00000003c0)=""/125, 0x7d}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000480)=""/123, 0x7b}], 0x7, &(0x7f0000000580)=""/156, 0x9c}, 0x102) socketpair(0x1a, 0x80000, 0xe2d2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000040)={0x0, &(0x7f0000000680)}) 06:28:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x30}}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) 06:28:11 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16], 0x6) 06:28:11 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r0, 0x2}}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="448181a88a6b970686c79211c75115bfee8e41ace939702119c0f953c8c06631d269871d37ebe4a9484b61faae300e06f4e96225a872dd04ee74d11f92e1378026d1f94b0032f37b010000000000000084e444c938ef79560b0c09905d242cf203ec66788b1cbf00"/119], 0x13) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x10001) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000100)=""/160) 06:28:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x5c}}, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:28:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xb) 06:28:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:28:11 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16], 0x6) 06:28:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES32=r2], 0x6) 06:28:11 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x800) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="011f19258d2d779051fdf330b08679b61800419100"], 0x6) 06:28:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280), 0x2, {0xa, 0x4e22, 0xfff, @empty, 0x59fd}}}, 0x38) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe0, r1, 0xe00, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000095}, 0x4) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r8, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8) 06:28:11 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16], 0x6) 06:28:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, 0x8f7c4c35b4055b1c}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0xfffffffffffffe10) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xb8, [0x9, 0xfff], 0x8001}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x4}, 0x6) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0xa843}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="b0114f26f9d24d53ec54f630055004f27dfe2c8675690c338b01e93e544d91dd77b34c11bae8c4f2425533c8c24aaa23cb48294a92e688ed62ea3d19e9f1ee01654ea495f76914b0641eebd07ee37d87166150b565ebe2"], 0x13) 06:28:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair(0x69, 0x80000, 0x43, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0108b90a453a"], 0x6) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002bbd7000fbdbdf250f0000000500370000000000080039002940070008003100200000000500380001000000050037006f7ead4a08002c00ffffff7f05002a00000000000500370001000000"], 0x54}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000) 06:28:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x38903, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x5) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r6}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r3, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8041}, 0x4000) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffe, 0x3}, 0x6) 06:28:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x86541, 0x0) bind$bt_hci(r1, &(0x7f0000001800)={0x1f, 0x2, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESOCT], 0x13) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000040), 0x4) 06:28:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01f7ff"], 0x13) 06:28:11 executing program 1: ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="10"], 0xb) 06:28:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000180)={r1, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in6=@initdev}}, {{@in6=@remote}}}, &(0x7f0000000140)=0xe8) 06:28:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRESOCT], 0x5) 06:28:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000)=0xffff, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) ioctl$sock_bt_hci(r0, 0x11bc852af74c36c8, &(0x7f0000000040)="a2c4a6ff33a02f75ee06c1f520533e952feb1789440cf661d700c8249e4b9cd1089768fa5f4f80338576456860d202a5041073c5ae63e1e17d37009219e0e7580964b59203f20fbc42200c93292fdc370aa41572403e4102344552911f41a4bd4a2c92d85a8787657bf976f08be86a242a3fb8172cb3a518a307b1a7bbe4a22508a90d22b950507c5d45b24ef6b229e125d5a34951fe1083cad193c5b5835af1a6409cf991b769f0718a") write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r1, 0x1}}, 0x18) 06:28:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:11 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r5}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x14, 0x58, 0xfa, 0x9, 0xc, @rand_addr=' \x01\x00', @mcast2, 0x7800, 0x8, 0x2, 0x9}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r9}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000900)={@private2, 0x0}, &(0x7f0000000940)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000980)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r11}, 0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x2c, 0x0, 0x402, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4085) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x10) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r12, &(0x7f0000000380)=ANY=[@ANYBLOB="0123cf0200003a7f4975de16a8eb5b7539a0e81241a01d04baa3fb983db3a662a88659c7c1dad41f2dd487fcd7fe8c73139636f97795519f2b8c2c9cb0b2ad88f7643887c5b7969356bf20ea40176726f1b9e68ac7a3ea59570badb5eaafe37b7c18ba34e6054af9c50a3e45318d8d3c17d21f1344c728e922848dad8ae7aab8af85ef3edb2eef3e33fb543c62769ac6c877a6f39385e74c29b5c9c6e494158a947f"], 0x6) 06:28:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x3, 0x2, 0x4, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x3, 0xf96, "3ea26e", 0x8, 0xfe}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x420000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000140)=ANY=[], 0x6) 06:28:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc0c49365}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040804}, 0x104) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}}, 0x404c0d1) 06:28:11 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r5}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x14, 0x58, 0xfa, 0x9, 0xc, @rand_addr=' \x01\x00', @mcast2, 0x7800, 0x8, 0x2, 0x9}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r9}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000900)={@private2, 0x0}, &(0x7f0000000940)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000980)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r11}, 0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x2c, 0x0, 0x402, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4085) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x10) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r12, &(0x7f0000000380)=ANY=[@ANYBLOB="0123cf0200003a7f4975de16a8eb5b7539a0e81241a01d04baa3fb983db3a662a88659c7c1dad41f2dd487fcd7fe8c73139636f97795519f2b8c2c9cb0b2ad88f7643887c5b7969356bf20ea40176726f1b9e68ac7a3ea59570badb5eaafe37b7c18ba34e6054af9c50a3e45318d8d3c17d21f1344c728e922848dad8ae7aab8af85ef3edb2eef3e33fb543c62769ac6c877a6f39385e74c29b5c9c6e494158a947f"], 0x6) 06:28:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0xb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) 06:28:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, @sco={0x1f, @none}, @isdn={0x22, 0x40, 0x7, 0x5d, 0x8}, @ethernet={0x6}, 0x0, 0x0, 0x0, 0x0, 0xcaf, &(0x7f0000000040)='veth1_to_bond\x00', 0xffff, 0x4, 0x7}) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) 06:28:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r2, 0x2bf5538d4c0907bf}}, 0x18) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="9dc26b3d91657b60bea40e50dce268fba520a8adf73f4fd1d563715ca911d4176d593e436fc007a306b6c17885842d0524f949f5db89d3ecc1b3041db64fd9e315bc1762137d63ed7ec521"], 0xb) 06:28:11 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r5}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x14, 0x58, 0xfa, 0x9, 0xc, @rand_addr=' \x01\x00', @mcast2, 0x7800, 0x8, 0x2, 0x9}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r9}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000900)={@private2, 0x0}, &(0x7f0000000940)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000980)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r11}, 0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x2c, 0x0, 0x402, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4085) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x10) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r12, &(0x7f0000000380)=ANY=[@ANYBLOB="0123cf0200003a7f4975de16a8eb5b7539a0e81241a01d04baa3fb983db3a662a88659c7c1dad41f2dd487fcd7fe8c73139636f97795519f2b8c2c9cb0b2ad88f7643887c5b7969356bf20ea40176726f1b9e68ac7a3ea59570badb5eaafe37b7c18ba34e6054af9c50a3e45318d8d3c17d21f1344c728e922848dad8ae7aab8af85ef3edb2eef3e33fb543c62769ac6c877a6f39385e74c29b5c9c6e494158a947f"], 0x6) 06:28:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000011f0000"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0xb3d35405137a5fc7, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040004}, 0x20040010) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) 06:28:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:11 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000180)={{0x1, 0x3, 0x8a, 0x3, 0x732010a8}, 0x5, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0xffff, 0x9, 0x10001}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="4db0882994010cde0ee794cf0796e1267025f8b41ab5b93c0f4991b62806b45172162846e1c3c5008d3e7080780c193634980ca1de1819c5ae26bed263e3c863aab43d74d2d64c62ed6e5a5e5fcf7482c6da5cd29014f8e404be6a1beddf4df99a5040b6c6a6bc8e96c51b04bf101ad8044f06b34fd9349be4ba16308e6c53dcc87366463ff6d924c42081de11738231e07ed67371cff9496d67d7d4af272e220df3a4e50066d08794f3") r1 = socket$netlink(0x10, 0x3, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8885}, 0x804) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x9, "2fb600", 0x9, 0xbd}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="35ffff"], 0x13) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x24102) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) 06:28:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:11 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) socketpair(0x0, 0x6, 0x2, &(0x7f00000028c0)={0xffffffffffffffff}) bind$bt_hci(r1, 0xffffffffffffffff, 0xfffffffffffffff5) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x200100, 0x0) socketpair(0x23, 0x80000, 0x20, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x30}}, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004c8c1}, 0x8000) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x13) socketpair(0x28, 0x80804, 0xfffff000, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000180)="66b56006bd0a9d7cb4c8dc063457def5f6f1703b17b323f6bfab773cd51078d288a19468ba7c6b3b0c2026bc15a34b0b742bf5de8fd3a86f7c1d585dc9affd0977033da49378e60142345f3dcf8b27df7868fac23ac5818cb160f104555c1082d71481ca6856a6935f002dcf370cd86393029b4f107feefbe6dec497312af7445c883dfc4c41be") 06:28:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000011f0000"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r4}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0xb3d35405137a5fc7, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040004}, 0x20040010) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000040)=0x20) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r3}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private1}}, &(0x7f0000000240)=0xe8) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd4, r0, 0x210, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4884) 06:28:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x401, [0x7, 0x2]}, 0x10) 06:28:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x5) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x2, 0x4) 06:28:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 3: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000000)={0x8, &(0x7f00000000c0)=[{}, {@fixed}, {@fixed}, {}, {@none}, {}, {}, {@fixed}]}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x7, 0x8, 0x998, 0xeb, {{0x6, 0x4, 0x1, 0x29, 0x18, 0x68, 0x0, 0x3c, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x33}, {[@noop]}}}}}) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1407, 0x400, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x850) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) 06:28:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffff"], 0x13) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:28:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7ac350b89af22ed50b71a1c95cb26d193e26d19fb5bf09007f819e634e7c7b8daa80c81a4fbacd1c52e321620f877d696ae19d48d061fe6eb4b39d7d6872c226418555214b956fa907a003923c1850b26fb4a6d42d8161fcbcf69e7d8aec2d01ddb51122e94700"/117, @ANYBLOB="b6d1970ab83c1ea298cc422e1db3647ec73d5377d7e3cba17669c9fd7e6d5915c8ae2260ba722e8340455c38246cac4263dc17921ae2cbad25d39837560a468f25316b28fc90637514420e00", @ANYRES16=r0, @ANYBLOB="3dfc7f049a33af988b8bd60cb93482c64e"], 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 06:28:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) [ 2734.237639] Bluetooth: hci2 command 0x040f tx timeout 06:28:12 executing program 2: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x6c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1}, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="26dfdad329e3e04d35bca1d2b2ca1249b3fe3fe3f4d450d88e6ab997822d2d8c4ee01e223e16b7", 0x27}, 0x1, 0x0, 0x0, 0x800}, 0x4091) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 06:28:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"cb4b3c"}}}, 0x7) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01ffffa09535ebbe286400a10080e446d91e2cf815f73b40e4090310a5987dd960679bff32764bd50aca8ca036192f0dc55f1c4c880893f9803ac8399457fccf604cab3aeb796d26b1136f8f06ad48e6c26462a2ed73c1a9e8d54f0df8e5b7"], 0x13) 06:28:12 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"cb4b3c"}}}, 0x7) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x1}, 0x1e) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01ffffa09535ebbe286400a10080e446d91e2cf815f73b40e4090310a5987dd960679bff32764bd50aca8ca036192f0dc55f1c4c880893f9803ac8399457fccf604cab3aeb796d26b1136f8f06ad48e6c26462a2ed73c1a9e8d54f0df8e5b7"], 0x13) 06:28:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000002c0)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x5, 0x6, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000000980)="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") r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000004240)=0x3, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:28:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:28:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0x12, 0xffffffffffffffff, 0x38000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x6) 06:28:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) [ 2734.639434] Bluetooth: hci1 command 0x2062 tx timeout 06:28:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:28:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c800}, 0x44000) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x845}, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x6) 06:28:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16], 0x6) 06:28:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1402, 0x10, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000300)={0x2, [0x6, 0x3], 0xd539}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd8, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc0}, 0x800) 06:28:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16], 0x6) 06:28:13 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004080}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f00000003c0)=""/218, &(0x7f00000004c0)=0xda) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x2}}, 0x18) socketpair(0x25, 0x3, 0x5, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000680)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, @xdp={0x2c, 0x7, r7, 0x5}, @nfc={0x27, 0x0, 0x2, 0x5}, 0x43, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)='veth0_to_hsr\x00', 0xfc, 0xfa49}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000540)={@empty, r7}, 0x14) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], &(0x7f0000000700)=0x28) 06:28:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16], 0x6) 06:28:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 06:28:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="c796a54344b45923b6af28e5f7fc341c263764e5f83bd333e80d7b0887f09e9dd63c1584ae591c4a857418692a93b8e2a2c9badd1f987d6e4f36dd832d92513b32ba8b5de71b39a03292c38fa791092118370b5ad6", @ANYRESOCT, @ANYRESDEC=r0], 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x4ba, 0x4) 06:28:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r4, 0x5ee1751a, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x4, @empty, 0x20}, @in={0x2, 0x4e20, @broadcast}}}, 0x118) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES16=r3], 0x6) 06:28:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0x7, [0x3, 0x1c9e], 0x6}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f00000001c0)=0x1000, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @auth_requested={{0x411, 0x2}}}, 0x6) 06:28:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000800), 0x82082, 0x0) recvmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)=""/1, 0x1}, {&(0x7f0000000140)=""/227, 0xe3}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000240)=""/201, 0xc9}], 0x4, &(0x7f0000000380)=""/142, 0x8e}, 0x100) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) 06:28:13 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) [ 2735.814775] FAULT_INJECTION: forcing a failure. [ 2735.814775] name failslab, interval 1, probability 0, space 0, times 0 [ 2735.844658] CPU: 1 PID: 7431 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 2735.852926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2735.862292] Call Trace: 06:28:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x400, 0x70bd25, 0x2, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20000001) 06:28:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) [ 2735.864926] dump_stack+0x1b2/0x281 [ 2735.868563] should_fail.cold+0x10a/0x149 [ 2735.872750] should_failslab+0xd6/0x130 [ 2735.876727] __kmalloc+0x2c1/0x400 [ 2735.880262] ? hci_sock_sendmsg+0x83c/0x1c80 [ 2735.884686] hci_sock_sendmsg+0x83c/0x1c80 [ 2735.889025] ? __might_fault+0x177/0x1b0 [ 2735.893106] ? aa_file_perm+0x2dd/0xab0 [ 2735.897079] ? hci_send_to_channel+0x200/0x200 [ 2735.901759] ? lock_acquire+0x170/0x3f0 [ 2735.905773] ? security_socket_sendmsg+0x83/0xb0 [ 2735.910538] ? hci_send_to_channel+0x200/0x200 06:28:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) [ 2735.915122] sock_sendmsg+0xb5/0x100 [ 2735.918835] sock_write_iter+0x22c/0x370 [ 2735.922981] ? sock_sendmsg+0x100/0x100 [ 2735.926961] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2735.931889] ? iov_iter_init+0xa6/0x1c0 [ 2735.935866] __vfs_write+0x44c/0x630 [ 2735.939582] ? kernel_read+0x110/0x110 [ 2735.943479] ? rw_verify_area+0xe1/0x2a0 [ 2735.947541] vfs_write+0x17f/0x4d0 [ 2735.951082] SyS_write+0xf2/0x210 [ 2735.954534] ? SyS_read+0x210/0x210 [ 2735.958161] ? __do_page_fault+0x159/0xad0 06:28:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) [ 2735.962395] ? do_syscall_64+0x4c/0x640 [ 2735.966714] ? SyS_read+0x210/0x210 [ 2735.970447] do_syscall_64+0x1d5/0x640 [ 2735.974343] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2735.979962] RIP: 0033:0x4665f9 [ 2735.983148] RSP: 002b:00007f6e97e04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2735.990854] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2735.998156] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2736.005426] RBP: 00007f6e97e041d0 R08: 0000000000000000 R09: 0000000000000000 06:28:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:28:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:14 executing program 0 (fault-call:2 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) [ 2736.012697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2736.019970] R13: 00007ffeb77989ff R14: 00007f6e97e04300 R15: 0000000000022000 06:28:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:14 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x6) [ 2736.103671] FAULT_INJECTION: forcing a failure. [ 2736.103671] name failslab, interval 1, probability 0, space 0, times 0 [ 2736.130096] CPU: 1 PID: 7462 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 2736.137926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2736.147282] Call Trace: [ 2736.149874] dump_stack+0x1b2/0x281 [ 2736.153510] should_fail.cold+0x10a/0x149 [ 2736.157683] should_failslab+0xd6/0x130 [ 2736.161693] kmem_cache_alloc_node+0x54/0x410 [ 2736.166194] __alloc_skb+0x5c/0x510 [ 2736.169812] hci_sock_sendmsg+0x10d6/0x1c80 [ 2736.174133] ? hci_send_to_channel+0x200/0x200 [ 2736.178820] ? lock_acquire+0x170/0x3f0 [ 2736.182785] ? security_socket_sendmsg+0x83/0xb0 [ 2736.187543] ? hci_send_to_channel+0x200/0x200 [ 2736.192118] sock_sendmsg+0xb5/0x100 [ 2736.195825] sock_write_iter+0x22c/0x370 [ 2736.199869] ? sock_sendmsg+0x100/0x100 [ 2736.203849] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2736.208768] ? iov_iter_init+0xa6/0x1c0 [ 2736.212752] __vfs_write+0x44c/0x630 [ 2736.216478] ? kernel_read+0x110/0x110 [ 2736.220376] ? rw_verify_area+0xe1/0x2a0 [ 2736.224440] vfs_write+0x17f/0x4d0 [ 2736.227988] SyS_write+0xf2/0x210 [ 2736.231435] ? SyS_read+0x210/0x210 [ 2736.235051] ? __do_page_fault+0x159/0xad0 [ 2736.239284] ? do_syscall_64+0x4c/0x640 [ 2736.243255] ? SyS_read+0x210/0x210 [ 2736.246872] do_syscall_64+0x1d5/0x640 06:28:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)=0x10) write$bt_hci(r0, 0x0, 0x6) 06:28:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) [ 2736.250757] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2736.255940] RIP: 0033:0x4665f9 [ 2736.259221] RSP: 002b:00007f6e97e04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2736.266917] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2736.274174] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2736.281435] RBP: 00007f6e97e041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2736.288739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2736.296112] R13: 00007ffeb77989ff R14: 00007f6e97e04300 R15: 0000000000022000 06:28:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:14 executing program 0 (fault-call:2 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) [ 2736.317336] Bluetooth: hci2 command 0x0419 tx timeout 06:28:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0x2, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRESHEX=r2, @ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x200408c1}, 0x800) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x509, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd9d}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) 06:28:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x804482, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0000002b854364c3000000235af3e907000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffb}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x24004800) 06:28:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) [ 2736.389043] FAULT_INJECTION: forcing a failure. [ 2736.389043] name failslab, interval 1, probability 0, space 0, times 0 06:28:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0xb) [ 2736.444039] CPU: 0 PID: 7482 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 2736.451957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2736.462538] Call Trace: [ 2736.465136] dump_stack+0x1b2/0x281 [ 2736.468861] should_fail.cold+0x10a/0x149 [ 2736.473193] should_failslab+0xd6/0x130 [ 2736.477194] kmem_cache_alloc_node_trace+0x58/0x400 [ 2736.482654] __kmalloc_node_track_caller+0x38/0x70 [ 2736.487629] __alloc_skb+0x96/0x510 06:28:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0xb) 06:28:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="6d62f9a348af"}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48090}, 0x20008004) write$bt_hci(r0, 0x0, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0xa5, 0x5, 0x1, 0x6, "8432dfdef12c26ac3d296071f76b2be598ba076ff0a95ed57fbd642d0bd5e5"}}}, 0x27) write$bt_hci(r2, &(0x7f0000000000)={0x1, @le_accept_cis={{0x2066, 0x2}, {0xc8}}}, 0x6) [ 2736.492132] hci_sock_sendmsg+0x10d6/0x1c80 [ 2736.497001] ? hci_send_to_channel+0x200/0x200 [ 2736.501951] ? lock_acquire+0x170/0x3f0 [ 2736.505938] ? security_socket_sendmsg+0x83/0xb0 [ 2736.510707] ? hci_send_to_channel+0x200/0x200 [ 2736.515292] sock_sendmsg+0xb5/0x100 [ 2736.519013] sock_write_iter+0x22c/0x370 [ 2736.523168] ? sock_sendmsg+0x100/0x100 [ 2736.527361] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2736.532310] ? iov_iter_init+0xa6/0x1c0 [ 2736.536312] __vfs_write+0x44c/0x630 [ 2736.540038] ? kernel_read+0x110/0x110 06:28:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_team\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x404, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x9) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4) write$bt_hci(r0, 0x0, 0x6) socket$netlink(0x10, 0x3, 0xe) 06:28:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0xb) [ 2736.543953] ? rw_verify_area+0xe1/0x2a0 [ 2736.548220] vfs_write+0x17f/0x4d0 [ 2736.551787] SyS_write+0xf2/0x210 [ 2736.555272] ? SyS_read+0x210/0x210 [ 2736.558919] ? __do_page_fault+0x159/0xad0 [ 2736.563160] ? do_syscall_64+0x4c/0x640 [ 2736.567154] ? SyS_read+0x210/0x210 [ 2736.570809] do_syscall_64+0x1d5/0x640 [ 2736.574709] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2736.579933] RIP: 0033:0x4665f9 [ 2736.583295] RSP: 002b:00007f6e97e04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:28:14 executing program 0 (fault-call:2 fault-nth:3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) [ 2736.591008] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2736.598371] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2736.607269] RBP: 00007f6e97e041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2736.614629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2736.621900] R13: 00007ffeb77989ff R14: 00007f6e97e04300 R15: 0000000000022000 [ 2736.676963] FAULT_INJECTION: forcing a failure. [ 2736.676963] name failslab, interval 1, probability 0, space 0, times 0 [ 2736.690180] CPU: 1 PID: 7517 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 2736.698756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2736.708720] Call Trace: [ 2736.711589] dump_stack+0x1b2/0x281 [ 2736.716551] should_fail.cold+0x10a/0x149 [ 2736.720793] should_failslab+0xd6/0x130 [ 2736.729887] kmem_cache_alloc_node+0x263/0x410 [ 2736.735460] __alloc_skb+0x5c/0x510 [ 2736.740362] mgmt_cmd_complete+0x4c/0x490 [ 2736.744935] read_controller_info+0x1c9/0x250 [ 2736.749518] ? read_local_oob_data_complete+0x530/0x530 [ 2736.754873] ? _raw_read_unlock+0x29/0x40 [ 2736.759129] ? set_device_id+0x460/0x460 [ 2736.763342] hci_sock_sendmsg+0x1723/0x1c80 [ 2736.768307] ? hci_send_to_channel+0x200/0x200 [ 2736.773647] ? lock_acquire+0x170/0x3f0 [ 2736.777731] ? security_socket_sendmsg+0x83/0xb0 [ 2736.784204] ? hci_send_to_channel+0x200/0x200 [ 2736.788929] sock_sendmsg+0xb5/0x100 [ 2736.792746] sock_write_iter+0x22c/0x370 [ 2736.796929] ? sock_sendmsg+0x100/0x100 [ 2736.800987] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2736.805898] ? iov_iter_init+0xa6/0x1c0 [ 2736.810120] __vfs_write+0x44c/0x630 [ 2736.813826] ? kernel_read+0x110/0x110 [ 2736.817706] ? rw_verify_area+0xe1/0x2a0 [ 2736.821768] vfs_write+0x17f/0x4d0 [ 2736.825297] SyS_write+0xf2/0x210 [ 2736.828938] ? SyS_read+0x210/0x210 [ 2736.832997] ? __do_page_fault+0x159/0xad0 [ 2736.837359] ? do_syscall_64+0x4c/0x640 [ 2736.841353] ? SyS_read+0x210/0x210 [ 2736.845040] do_syscall_64+0x1d5/0x640 [ 2736.848934] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2736.854118] RIP: 0033:0x4665f9 [ 2736.857299] RSP: 002b:00007f6e97e04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2736.864993] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 06:28:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000040), 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x8, "2ee0de", 0x3}) 06:28:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xfff, 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000180)=""/130, &(0x7f0000000000)=0x82) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f00000000c0)="f0beb9f41a01838a6a7fd1c1ea911e71a444da53cfb0523d3a71627bd5fe05c00e7d2e4f456f9494d42a683b39901218a169fd9de9dfd710898c1f7703843994574b0df09998dd54e6333d095e36f6827b67bc92c0484868abe185097b5eaa45b0f76fdc0dd696cb2851e254dcdad2817c6f3784c429a02b63e614e405bf83a79ece75cc7e03a57eb2d5e28a0e26d1524f22aad0eaafa872d984b5415b675729fb091501ec57fc49361332b3369e7b2de5bedd3a6647f6") 06:28:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xb) 06:28:15 executing program 0 (fault-call:2 fault-nth:4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) [ 2736.872254] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2736.879512] RBP: 00007f6e97e041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2736.886786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2736.894576] R13: 00007ffeb77989ff R14: 00007f6e97e04300 R15: 0000000000022000 [ 2736.903849] Bluetooth: hci1 command 0x2062 tx timeout 06:28:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xb) 06:28:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xaf40) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:28:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) socketpair(0x11, 0x5, 0x9, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) syz_open_dev$dri(&(0x7f0000000000), 0x7ff, 0x2040) ioctl$sock_bt_hci(r0, 0x27, &(0x7f00000000c0)="a586727619c623e572843d1d1e731ccfe12b7c14851f3618935d17bdab067e45e954adba40eee1524477bcb4e23ad3e7c991f64854b69d5774009df09f30531825dafbe61ab3fc8ed7f659c7f09d7cb118d9e97906166ccdfbc0298894f6ed5140b412") setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000140)=0x3, 0x4) [ 2737.004739] FAULT_INJECTION: forcing a failure. [ 2737.004739] name failslab, interval 1, probability 0, space 0, times 0 [ 2737.053574] CPU: 0 PID: 7532 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 2737.062457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2737.071814] Call Trace: [ 2737.074416] dump_stack+0x1b2/0x281 [ 2737.078200] should_fail.cold+0x10a/0x149 [ 2737.082358] should_failslab+0xd6/0x130 [ 2737.086350] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2737.091450] __kmalloc_node_track_caller+0x38/0x70 [ 2737.096379] __alloc_skb+0x96/0x510 [ 2737.100051] mgmt_cmd_complete+0x4c/0x490 [ 2737.104191] read_controller_info+0x1c9/0x250 [ 2737.108775] ? read_local_oob_data_complete+0x530/0x530 [ 2737.114144] ? _raw_read_unlock+0x29/0x40 [ 2737.118270] ? set_device_id+0x460/0x460 [ 2737.122310] hci_sock_sendmsg+0x1723/0x1c80 [ 2737.126663] ? hci_send_to_channel+0x200/0x200 [ 2737.131228] ? lock_acquire+0x170/0x3f0 [ 2737.135183] ? security_socket_sendmsg+0x83/0xb0 [ 2737.140064] ? hci_send_to_channel+0x200/0x200 [ 2737.144718] sock_sendmsg+0xb5/0x100 [ 2737.148428] sock_write_iter+0x22c/0x370 [ 2737.152494] ? sock_sendmsg+0x100/0x100 [ 2737.156469] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2737.161378] ? iov_iter_init+0xa6/0x1c0 [ 2737.165343] __vfs_write+0x44c/0x630 [ 2737.169044] ? kernel_read+0x110/0x110 [ 2737.172919] ? rw_verify_area+0xe1/0x2a0 [ 2737.176979] vfs_write+0x17f/0x4d0 [ 2737.180625] SyS_write+0xf2/0x210 [ 2737.184066] ? SyS_read+0x210/0x210 [ 2737.187680] ? __do_page_fault+0x159/0xad0 [ 2737.191917] ? do_syscall_64+0x4c/0x640 [ 2737.195882] ? SyS_read+0x210/0x210 [ 2737.199531] do_syscall_64+0x1d5/0x640 [ 2737.203442] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2737.208611] RIP: 0033:0x4665f9 [ 2737.211794] RSP: 002b:00007f6e97e04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2737.219486] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2737.226747] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2737.234021] RBP: 00007f6e97e041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2737.241301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:28:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xb) 06:28:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$bt_hci(r0, 0x0, 0x6) [ 2737.248585] R13: 00007ffeb77989ff R14: 00007f6e97e04300 R15: 0000000000022000 06:28:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:15 executing program 0 (fault-call:2 fault-nth:5): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:28:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000040)) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x11, 0x2, 0x80000001, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x2, 0x8, "c41dd3", 0x3, 0x71}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) write$bt_hci(r0, 0x0, 0x6) [ 2737.345429] FAULT_INJECTION: forcing a failure. [ 2737.345429] name failslab, interval 1, probability 0, space 0, times 0 [ 2737.369465] CPU: 0 PID: 7558 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 2737.377547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2737.388288] Call Trace: [ 2737.390878] dump_stack+0x1b2/0x281 [ 2737.394560] should_fail.cold+0x10a/0x149 [ 2737.398716] should_failslab+0xd6/0x130 [ 2737.402701] kmem_cache_alloc_node+0x54/0x410 [ 2737.407194] __alloc_skb+0x5c/0x510 [ 2737.410803] create_monitor_ctrl_event+0x3a/0x3a0 [ 2737.415625] mgmt_cmd_complete+0x2c8/0x490 [ 2737.419842] read_controller_info+0x1c9/0x250 [ 2737.424318] ? read_local_oob_data_complete+0x530/0x530 [ 2737.429690] ? _raw_read_unlock+0x29/0x40 [ 2737.433854] ? set_device_id+0x460/0x460 [ 2737.437976] hci_sock_sendmsg+0x1723/0x1c80 [ 2737.442277] ? hci_send_to_channel+0x200/0x200 [ 2737.446838] ? lock_acquire+0x170/0x3f0 [ 2737.450797] ? security_socket_sendmsg+0x83/0xb0 [ 2737.455642] ? hci_send_to_channel+0x200/0x200 [ 2737.460226] sock_sendmsg+0xb5/0x100 [ 2737.463955] sock_write_iter+0x22c/0x370 [ 2737.468187] ? sock_sendmsg+0x100/0x100 [ 2737.472364] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2737.477499] ? iov_iter_init+0xa6/0x1c0 [ 2737.481895] __vfs_write+0x44c/0x630 [ 2737.485655] ? kernel_read+0x110/0x110 [ 2737.489538] ? rw_verify_area+0xe1/0x2a0 [ 2737.493867] vfs_write+0x17f/0x4d0 [ 2737.497807] SyS_write+0xf2/0x210 [ 2737.501252] ? SyS_read+0x210/0x210 [ 2737.505078] ? __do_page_fault+0x159/0xad0 [ 2737.509676] ? do_syscall_64+0x4c/0x640 [ 2737.513643] ? SyS_read+0x210/0x210 [ 2737.517521] do_syscall_64+0x1d5/0x640 [ 2737.521705] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2737.526897] RIP: 0033:0x4665f9 [ 2737.530277] RSP: 002b:00007f6e97e04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2737.538168] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 06:28:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:28:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:28:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) [ 2737.545523] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2737.552912] RBP: 00007f6e97e041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2737.560409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2737.569303] R13: 00007ffeb77989ff R14: 00007f6e97e04300 R15: 0000000000022000 06:28:15 executing program 0 (fault-call:2 fault-nth:6): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) 06:28:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc9, {0x5, 0x8, 0x6, 0xffffffff, 0x10ad, 0x16b3b5a1}, {0x9, 0x5, 0x80, 0x7f, 0x80, 0x100}}}}, 0x25) 06:28:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) [ 2737.692502] FAULT_INJECTION: forcing a failure. [ 2737.692502] name failslab, interval 1, probability 0, space 0, times 0 [ 2737.723384] CPU: 0 PID: 7583 Comm: syz-executor.0 Not tainted 4.14.231-syzkaller #0 [ 2737.733263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2737.743240] Call Trace: [ 2737.745879] dump_stack+0x1b2/0x281 [ 2737.749610] should_fail.cold+0x10a/0x149 [ 2737.753892] should_failslab+0xd6/0x130 [ 2737.757964] kmem_cache_alloc_node_trace+0x58/0x400 [ 2737.762997] __kmalloc_node_track_caller+0x38/0x70 [ 2737.768378] __alloc_skb+0x96/0x510 [ 2737.772545] create_monitor_ctrl_event+0x3a/0x3a0 [ 2737.778143] mgmt_cmd_complete+0x2c8/0x490 [ 2737.782394] read_controller_info+0x1c9/0x250 [ 2737.787098] ? read_local_oob_data_complete+0x530/0x530 [ 2737.792579] ? _raw_read_unlock+0x29/0x40 [ 2737.796828] ? set_device_id+0x460/0x460 [ 2737.800987] hci_sock_sendmsg+0x1723/0x1c80 [ 2737.805505] ? hci_send_to_channel+0x200/0x200 [ 2737.810191] ? lock_acquire+0x170/0x3f0 [ 2737.814177] ? security_socket_sendmsg+0x83/0xb0 [ 2737.819078] ? hci_send_to_channel+0x200/0x200 [ 2737.823717] sock_sendmsg+0xb5/0x100 [ 2737.827838] sock_write_iter+0x22c/0x370 [ 2737.831915] ? sock_sendmsg+0x100/0x100 [ 2737.836008] ? proc_tgid_io_accounting+0x7a0/0x7a0 06:28:15 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x100) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002500)=""/157, 0x9d}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f00000001c0)=""/73, 0x49}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/103, 0x67}, {&(0x7f0000002380)=""/56, 0x38}], 0x8, &(0x7f00000000c0)=""/42, 0x2a}, 0x40000002) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000024c0)=0x101, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:28:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x13f, 0x8}}, 0x20) 06:28:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000001c0)=0xfff, 0x4) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x3, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x1}}}, 0x38) write$bt_hci(r3, 0x0, 0x6) [ 2737.841222] ? iov_iter_init+0xa6/0x1c0 [ 2737.845216] __vfs_write+0x44c/0x630 [ 2737.848941] ? kernel_read+0x110/0x110 [ 2737.852842] ? rw_verify_area+0xe1/0x2a0 [ 2737.856911] vfs_write+0x17f/0x4d0 [ 2737.860460] SyS_write+0xf2/0x210 [ 2737.863921] ? SyS_read+0x210/0x210 [ 2737.867552] ? __do_page_fault+0x159/0xad0 [ 2737.871882] ? do_syscall_64+0x4c/0x640 [ 2737.875858] ? SyS_read+0x210/0x210 [ 2737.879488] do_syscall_64+0x1d5/0x640 [ 2737.883384] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2737.888571] RIP: 0033:0x4665f9 [ 2737.891760] RSP: 002b:00007f6e97e04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2737.899490] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2737.906747] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2737.914007] RBP: 00007f6e97e041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2737.921263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2737.928515] R13: 00007ffeb77989ff R14: 00007f6e97e04300 R15: 0000000000022000 06:28:16 executing program 0 (fault-call:2 fault-nth:7): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x8, [0x5, 0x70000000], 0x7}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000000c0)=0x4, 0x4) 06:28:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, 0x0, 0xb) 06:28:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x6) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), 0x4) 06:28:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1cb300) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000180)) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x4, 0x2, 0x73, 0x0, 0x11}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:28:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f00000000c0)={0x80, 0x258, 0x356, 0x400, 0x3264, 0x2, 0x20, 0x1, {0x3f, 0x3ff}, {0x0, 0x80000000}, {0x4, 0x0, 0x1}, {0x83, 0x9}, 0x1, 0x40, 0xffffffff, 0x0, 0x0, 0x4, 0xe929, 0x60d3, 0x5, 0xb3c5, 0x1, 0xe2e, 0x12, 0x200, 0x1, 0xa}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x6) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x42100, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000180)={0x280, 0x320, 0x300, 0x4b0, 0x7fff, 0xb0, 0x20, 0x1, {0x6, 0x8}, {0x7, 0x2}, {0x8, 0x1ff, 0x1}, {0x1, 0xb92, 0x1}, 0x0, 0x3, 0xfbd3, 0x2, 0x0, 0x25, 0x7f, 0x71809d48, 0x678, 0x0, 0x0, 0x6, 0x5, 0x1, 0x1, 0x1}) 06:28:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 06:28:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f0000000200)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0x29, 0x4, 0x0, 0x0, "246af2d2cad7faaf3cb1f01833dc8ddaaa23f1ffcd06cb44ce5287279099c8b150b5a574af96ea1059cb6b9823b105972c83760e21b0210dc6c19d9f1820cf2b"}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x4000800) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:16 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00', 0x0}) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r0, 0x164}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004040}, 0x4000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x7f) write$bt_hci(r2, 0x0, 0x6) 06:28:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 06:28:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x80000, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4700001ef6ffff00", @ANYRES16=0x0, @ANYBLOB="04032dbd7000ffdbdf25010000000c000180060001000200000040000180080003000a010101060005004e2300000500020002000000050002000200000014000400fc000000000000000000000000000001050002004b000000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x80) bind$802154_raw(r1, &(0x7f0000000000), 0x14) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000004c0)={@local, 0x0}, &(0x7f0000000500)=0x14) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000480)={0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r1, @ANYBLOB="000125bd00100000df2502009653788988010880"], 0x150}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYBLOB="5ca20b77784ced23024e0d66c2168e83b3c98cc6f1f96f8a8472ce3ee8d88037e2933e242d05ead46eca7774e22483dcec2bf743641fced6fe7b738750e252f1bc03e4f1f2266ea22da9d6c625a4b2720c6e1ddb8bd4b6c0cf67a95136b9e7fe3d8c46fb0ffe530ea599cbdb7029e07446c68eeec825cb0b1107eb87c41acddd3e9de0df467af62840a6f6c8bd296c927c6519aeef19710c41ae6259d72b7345503f41a95ebdf9b76de1ff26b52edbef838ae4a81e5361e5110cf6135535a2", @ANYBLOB="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", @ANYRESOCT, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT], 0x6) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000200)={0x15, 0x7, &(0x7f0000000100)=[0x2, 0xffff, 0x3ff, 0xea94, 0x4, 0x5, 0x4], &(0x7f0000000140)=[0x3, 0xf000, 0xfff, 0xff], &(0x7f0000000180)=[0x87, 0x4, 0x1], &(0x7f00000001c0)=[0x0, 0x8, 0x80, 0x7, 0x0, 0xec3a, 0x1]}) r6 = inotify_init1(0x80000) ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0x15) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000000)={0x1, 0x5, "d77699", 0x40, 0x1}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r8, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r9}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000580)={0x8, 0x120, 0xfa00, {0x2, {0x0, 0x101, "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", 0x2, 0x1, 0x3, 0x7f, 0x8, 0x81, 0x6}, r9}}, 0x128) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, &(0x7f0000000240)=0x7ff, 0x4) 06:28:16 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:28:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) [ 2738.313901] FAULT_INJECTION: forcing a failure. [ 2738.313901] name failslab, interval 1, probability 0, space 0, times 0 [ 2738.338910] CPU: 0 PID: 7675 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 2738.346729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2738.356084] Call Trace: [ 2738.358680] dump_stack+0x1b2/0x281 06:28:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [], 0x6}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) [ 2738.362321] should_fail.cold+0x10a/0x149 [ 2738.366471] should_failslab+0xd6/0x130 [ 2738.370449] kmem_cache_alloc_node+0x263/0x410 [ 2738.375034] __alloc_skb+0x5c/0x510 [ 2738.378661] alloc_skb_with_frags+0x85/0x500 [ 2738.383074] sock_alloc_send_pskb+0x577/0x6d0 [ 2738.387575] ? sock_kzfree_s+0x50/0x50 [ 2738.391462] ? mark_held_locks+0xa6/0xf0 [ 2738.395520] ? __local_bh_enable_ip+0xc1/0x170 [ 2738.400098] hci_sock_sendmsg+0xc5d/0x1c80 [ 2738.404361] ? __might_fault+0x177/0x1b0 [ 2738.408421] ? aa_file_perm+0x2dd/0xab0 06:28:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [], 0x6}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [], 0x6}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) [ 2738.412391] ? hci_send_to_channel+0x200/0x200 [ 2738.416975] ? lock_acquire+0x170/0x3f0 [ 2738.420945] ? security_socket_sendmsg+0x83/0xb0 [ 2738.425697] ? hci_send_to_channel+0x200/0x200 [ 2738.430273] sock_sendmsg+0xb5/0x100 [ 2738.433981] sock_write_iter+0x22c/0x370 [ 2738.438388] ? sock_sendmsg+0x100/0x100 [ 2738.442367] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2738.447306] ? iov_iter_init+0xa6/0x1c0 [ 2738.451465] __vfs_write+0x44c/0x630 [ 2738.455504] ? kernel_read+0x110/0x110 [ 2738.459497] ? rw_verify_area+0xe1/0x2a0 06:28:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [], 0x6}, 0x10) write$bt_hci(r0, 0x0, 0x6) [ 2738.463559] vfs_write+0x17f/0x4d0 [ 2738.467147] SyS_write+0xf2/0x210 [ 2738.471470] ? SyS_read+0x210/0x210 [ 2738.475103] ? __do_page_fault+0x159/0xad0 [ 2738.479865] ? do_syscall_64+0x4c/0x640 [ 2738.484016] ? SyS_read+0x210/0x210 [ 2738.487660] do_syscall_64+0x1d5/0x640 [ 2738.491671] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2738.496981] RIP: 0033:0x4665f9 [ 2738.500225] RSP: 002b:00007fdb17d91188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:28:16 executing program 3: geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) [ 2738.507934] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2738.515189] RDX: 000000000000000b RSI: 0000000020000000 RDI: 0000000000000004 [ 2738.522848] RBP: 00007fdb17d911d0 R08: 0000000000000000 R09: 0000000000000000 [ 2738.530105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2738.537463] R13: 00007ffeff4794cf R14: 00007fdb17d91300 R15: 0000000000022000 06:28:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0xfffffffffffffd95) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) 06:28:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [], 0x6}, 0x10) write$bt_hci(r0, 0x0, 0x6) 06:28:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x10001, [0x101], 0xc6}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:28:16 executing program 4 (fault-call:2 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) 06:28:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x4, [0x3, 0x2], 0x43}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x4, [0x6, 0x56d], 0x8}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x2}, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 06:28:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [], 0x6}, 0x10) write$bt_hci(r0, 0x0, 0x6) 06:28:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r5}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000180)={@empty, r5}, 0x14) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in6}}, {{@in6=@private0}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000240)="ac2a6c0edeae6369f20bf177490e44b07aa36a230343b4a27265a8bd69ab6892113f335600dc1b417f4f1c58b8d9c50f252b98833ee77888a5608228259e7aa8fdef3d5cd6f495e67fe7e15cb92411324597737310fec546d2ab821145bf27064c7e93e850a7dec48acd94a15cd9c8d4d7c3208ae885b3192f82c197a413e873601becc40983f6f0ddd8dbcfe4dab55958edc5b569302f60f09b27275cf3f365b50742a19d00b301b0e9871b4a017426c37e003e3c1a4bdf008a5c3a3ad8000000000000590198fa5e42ca3fe44b378973d7b2732689f07c054ee2b7e0097e92728865815f0107889faa80598064bd53d10af574") ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, @generic={0x10, "5d139482634e48e4e67b45e13046"}, @llc={0x1a, 0x0, 0xb4, 0x1f, 0x1, 0x20, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, @llc={0x1a, 0x30e, 0x83, 0x9, 0x90, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x5, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)='veth1\x00', 0x1000, 0x80000000000000, 0x8001}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x6, [0x209, 0xfffffe01]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x123, 0x123, 0x6, [@union={0x8, 0x5, 0x0, 0x5, 0x1, 0x3, [{0x9, 0x2, 0x4}, {0x0, 0x0, 0x474d}, {0x3, 0x3, 0x80000001}, {0xc, 0x2}, {0xf, 0x4, 0x20}]}, @struct={0x7, 0x3, 0x0, 0x4, 0x1, 0x4, [{0xc, 0x3, 0x2}, {0x5, 0x5, 0x5}, {0xe, 0x2, 0x5f}]}, @func={0xf, 0x0, 0x0, 0xc, 0x5}, @datasec={0x6, 0x1, 0x0, 0xf, 0x3, [{0x2, 0xa, 0x3}], "135b15"}, @restrict={0x7, 0x0, 0x0, 0xb, 0x3}, @struct={0x9, 0x3, 0x0, 0x4, 0x1, 0x9, [{0x2, 0x5, 0x8000}, {0x7, 0x3, 0x2}, {0xf, 0x3, 0x6}]}, @union={0xf, 0x1, 0x0, 0x5, 0x1, 0x10000, [{0x7, 0x3, 0x2}]}, @struct={0x2, 0x3, 0x0, 0x4, 0x0, 0x1, [{0x5, 0x0, 0x6}, {0x2, 0x3, 0x6}, {0x9, 0x2, 0x3}]}]}, {0x0, [0x0, 0x2e, 0x0, 0x0]}}, &(0x7f00000000c0)=""/121, 0x142, 0x79, 0x2}, 0x20) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x18, 0x1402, 0x8, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x40) [ 2738.643097] FAULT_INJECTION: forcing a failure. [ 2738.643097] name failslab, interval 1, probability 0, space 0, times 0 [ 2738.675050] CPU: 0 PID: 7716 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 2738.682906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:28:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f00000002c0)={0x1f, @none}, 0x8) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x9, 0x1}) [ 2738.692526] Call Trace: [ 2738.695124] dump_stack+0x1b2/0x281 [ 2738.698857] should_fail.cold+0x10a/0x149 [ 2738.703014] should_failslab+0xd6/0x130 [ 2738.707067] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2738.712670] __kmalloc_node_track_caller+0x38/0x70 [ 2738.718487] __alloc_skb+0x96/0x510 [ 2738.722129] alloc_skb_with_frags+0x85/0x500 [ 2738.726557] sock_alloc_send_pskb+0x577/0x6d0 [ 2738.731073] ? sock_kzfree_s+0x50/0x50 [ 2738.734979] ? mark_held_locks+0xa6/0xf0 [ 2738.739045] ? __local_bh_enable_ip+0xc1/0x170 [ 2738.743642] hci_sock_sendmsg+0xc5d/0x1c80 [ 2738.747888] ? __might_fault+0x177/0x1b0 [ 2738.751954] ? aa_file_perm+0x2dd/0xab0 [ 2738.755935] ? hci_send_to_channel+0x200/0x200 [ 2738.760519] ? lock_acquire+0x170/0x3f0 [ 2738.764513] ? security_socket_sendmsg+0x83/0xb0 [ 2738.769275] ? hci_send_to_channel+0x200/0x200 [ 2738.773859] sock_sendmsg+0xb5/0x100 [ 2738.777577] sock_write_iter+0x22c/0x370 [ 2738.781691] ? sock_sendmsg+0x100/0x100 [ 2738.785678] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2738.790600] ? iov_iter_init+0xa6/0x1c0 [ 2738.794569] __vfs_write+0x44c/0x630 [ 2738.798293] ? kernel_read+0x110/0x110 [ 2738.802205] ? rw_verify_area+0xe1/0x2a0 [ 2738.806250] vfs_write+0x17f/0x4d0 [ 2738.809773] SyS_write+0xf2/0x210 [ 2738.813204] ? SyS_read+0x210/0x210 [ 2738.816813] ? __do_page_fault+0x159/0xad0 [ 2738.821028] ? do_syscall_64+0x4c/0x640 [ 2738.824995] ? SyS_read+0x210/0x210 [ 2738.828600] do_syscall_64+0x1d5/0x640 [ 2738.832477] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2738.837649] RIP: 0033:0x4665f9 06:28:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x0, 0x1], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6) 06:28:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x30}}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4044000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000200)={0xb85, [0x1, 0x6], 0x4}, 0x10) write$bt_hci(r0, 0x0, 0x6) [ 2738.840815] RSP: 002b:00007fdb17d91188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2738.848499] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2738.855745] RDX: 000000000000000b RSI: 0000000020000000 RDI: 0000000000000004 [ 2738.862997] RBP: 00007fdb17d911d0 R08: 0000000000000000 R09: 0000000000000000 [ 2738.870244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2738.877493] R13: 00007ffeff4794cf R14: 00007fdb17d91300 R15: 0000000000022000 06:28:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:17 executing program 4 (fault-call:2 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) 06:28:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) [ 2738.961699] Bluetooth: hci1 command 0x2062 tx timeout 06:28:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f00000000c0)) write$bt_hci(r0, 0x0, 0x6) 06:28:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, @nl=@unspec, @vsock={0x28, 0x0, 0x2710, @hyper}, @isdn={0x22, 0x3, 0x4, 0x9, 0x1}, 0x4, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000080)='batadv0\x00', 0x7, 0x1, 0x2}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800) socketpair(0x4, 0x2, 0x80, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000140)={r4, 0xffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x1c}}, 0x20000000) 06:28:17 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x581800, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmsg$can_raw(r0, &(0x7f0000001180)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/4096, 0x1000}, 0x40000000) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) 06:28:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffe}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:28:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) getuid() r6 = socket$netlink(0x10, 0x3, 0x15) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000980)={@empty, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x45c9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4040055) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5}}, 0x128) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r5}}, 0x18) write$bt_hci(r1, &(0x7f0000000180)=ANY=[], 0x6) r9 = socket$netlink(0x10, 0x3, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000c89b80767a5a434257118e89e3d727b4779a3d7da2c32d197772a9918f81c0c81d9815e069a32132d3ccd3fbc35fbdba743126cf9edcb7545f5307d1d21461349dc23862a170546d70f6495c89e9ffb2efb0f3d64db3d9d820ac16", @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf2503000000050005000300000005000500090000000500020081000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008801}, 0x4000000) 06:28:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x6, "1698ce", 0x6, 0x2}) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x140, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xf8, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x203d4215}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19d2b200}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9eb6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9deb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14848849}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5baff5a4}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe650}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2693a7a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a729af3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb45d053}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8bd3}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11ab5b57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x164804b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44b35f96}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6417b730}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x253725fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f8c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab73e8f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4871f52e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x414b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x244450b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67cfd646}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$bt_hci(r0, &(0x7f0000000080)={0x1, @create_logical_link={{0x438, 0x21}, {0xc9, {0x0, 0x2, 0xd395, 0x1f, 0x7, 0x2}, {0x9, 0x31, 0x7ff, 0xff, 0x7ff, 0x8}}}}, 0x25) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x3, 0x2, 0x10000, 0x0, 0x6}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) 06:28:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)="075d7ce59021c66844e889515379b993853d") 06:28:17 executing program 1: write$fb(0xffffffffffffffff, &(0x7f00000000c0)="1c13041e6d6a824f4445aaed83b20c55449eb42dd03ec81d6302cd3406575fd06168aa3afc0ce2f96e36b7cdc982c43fae60228b15427966194d5610c25aa6b6af36798bbd9ea0c5145b4bf8541c5bb79c0cf75258b3f6f7a63f292f314ea9338fc0874044eadc35c5f40bd94aac1cbdff88b02b791b", 0x76) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x40010) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @logical_link_cancel={{0x43b, 0x2}, {0xc8, 0x4}}}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @qipcrtr={0x2a, 0xffffffff, 0x3}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @can, 0x8, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='macvtap0\x00', 0x4, 0x0, 0x3}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x200088b0}, 0x4000) write$bt_hci(r0, 0x0, 0x6) 06:28:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) 06:28:17 executing program 5 (fault-call:3 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x6) 06:28:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 06:28:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000001340)={0x4, 0x3, "c7f9ac", 0x3, 0x4}) write$bt_hci(r0, 0x0, 0x6) [ 2739.722209] FAULT_INJECTION: forcing a failure. [ 2739.722209] name failslab, interval 1, probability 0, space 0, times 0 [ 2739.750050] CPU: 0 PID: 7808 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 2739.757879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2739.767235] Call Trace: 06:28:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) write$bt_hci(r1, 0x0, 0x6) [ 2739.769846] dump_stack+0x1b2/0x281 [ 2739.773477] should_fail.cold+0x10a/0x149 [ 2739.777633] should_failslab+0xd6/0x130 [ 2739.781609] __kmalloc+0x2c1/0x400 [ 2739.785153] ? hci_sock_sendmsg+0x83c/0x1c80 [ 2739.789559] hci_sock_sendmsg+0x83c/0x1c80 [ 2739.793791] ? __might_fault+0x177/0x1b0 [ 2739.797849] ? aa_file_perm+0x2dd/0xab0 [ 2739.801824] ? hci_send_to_channel+0x200/0x200 [ 2739.806407] ? lock_acquire+0x170/0x3f0 [ 2739.810378] ? security_socket_sendmsg+0x83/0xb0 [ 2739.815130] ? hci_send_to_channel+0x200/0x200 06:28:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x3, 0x5, "a7cd6b", 0x29, 0x15}) [ 2739.819709] sock_sendmsg+0xb5/0x100 [ 2739.823421] sock_write_iter+0x22c/0x370 [ 2739.827483] ? sock_sendmsg+0x100/0x100 [ 2739.831461] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2739.836391] ? iov_iter_init+0xa6/0x1c0 [ 2739.840394] __vfs_write+0x44c/0x630 [ 2739.844110] ? kernel_read+0x110/0x110 [ 2739.848018] ? rw_verify_area+0xe1/0x2a0 [ 2739.852097] vfs_write+0x17f/0x4d0 [ 2739.855641] SyS_write+0xf2/0x210 [ 2739.859096] ? SyS_read+0x210/0x210 [ 2739.862722] ? __do_page_fault+0x159/0xad0 [ 2739.866959] ? do_syscall_64+0x4c/0x640 [ 2739.870924] ? SyS_read+0x210/0x210 [ 2739.874529] do_syscall_64+0x1d5/0x640 [ 2739.878409] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2739.883601] RIP: 0033:0x4665f9 [ 2739.886795] RSP: 002b:00007fa1fdb09188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2739.894500] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2739.901770] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2739.909039] RBP: 00007fa1fdb091d0 R08: 0000000000000000 R09: 0000000000000000 06:28:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_link_policy={{0x80d, 0x4}, {0x0, 0x1ff}}}, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0xffff, "a2a864", 0x8b, 0x9}) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x0, [0x6, 0x1], 0x2}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x7e, 0x4) socket$inet6(0xa, 0x6, 0x3ff) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="03cb2f93146c02e0a28705baa1292170f662cf72b2a31921c14e6a9c3b918c4a37d72f0c4009b1b4135b60e282919a2923e013e8fd2ef21f9c4a8fabed93456017ab9a23c664e78532ed816d8b3e671884e3384d0b225223f34d6afc60dae55b2b34c987192d"], 0xb) 06:28:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x30, r3, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="d4ff2afb8bf2"}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x6044}, 0x8000) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xc000) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f0000000000)="d7eb3357fce84ce4b902a8b6617f3259eb8c88a642fbae17773bc58e46bd106425") r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) 06:28:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) [ 2739.916303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2739.923564] R13: 00007ffd665a506f R14: 00007fa1fdb09300 R15: 0000000000022000 06:28:18 executing program 5 (fault-call:3 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_rssi={{0x1405, 0x2}}}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r5}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r5}, 0x14) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x3, 0x8, "2ec164", 0x5, 0x56}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r3, 0x101}, 0x14}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r6}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x1, 0x8000, "dbe9d1", 0x2, 0x4}) 06:28:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20}, 0x10) write$bt_hci(r0, 0x0, 0x6) [ 2740.040265] FAULT_INJECTION: forcing a failure. [ 2740.040265] name failslab, interval 1, probability 0, space 0, times 0 [ 2740.063533] CPU: 1 PID: 7842 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 2740.072751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2740.082106] Call Trace: [ 2740.084698] dump_stack+0x1b2/0x281 [ 2740.088330] should_fail.cold+0x10a/0x149 [ 2740.092482] should_failslab+0xd6/0x130 [ 2740.096463] kmem_cache_alloc_node+0x54/0x410 [ 2740.100964] __alloc_skb+0x5c/0x510 [ 2740.104592] hci_sock_sendmsg+0x10d6/0x1c80 [ 2740.108922] ? hci_send_to_channel+0x200/0x200 [ 2740.113505] ? lock_acquire+0x170/0x3f0 [ 2740.117481] ? security_socket_sendmsg+0x83/0xb0 [ 2740.122232] ? hci_send_to_channel+0x200/0x200 [ 2740.126810] sock_sendmsg+0xb5/0x100 [ 2740.130526] sock_write_iter+0x22c/0x370 [ 2740.134625] ? sock_sendmsg+0x100/0x100 06:28:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="005e3efc38eda4ad6803255324bf0f037fac33eb040000000087117381a8dfd969000000000000002a7e527190296d04f71e5f500bcea485fe62c81752ecc742c009ac93689bd261cf63b150a39cb8bc8712c28c165aee092254f3d8e6c21ec4c2531e7612cd5925e2d1868d5961a1f074ff6aa8beffea9e4173a602ef4271d22bc0fe08d84313e516746da0e1e1d483573e53ab5e3aa4de84eabddc8c9c4be423aefa"], 0xb) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x50f800, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000480)=0x8, 0x4) 06:28:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d95784b98fd14e2340c2f33e763465082ed64f16f548e71228f09203bbf5ea2a9c0a439433fb43dc6e65cefc17ad72452a58c650a1609863fe44adedff98c139fd9bd078a7efabfe45c334a8"], 0xb) 06:28:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="03d9905190ab0764b3541c0efebcf3a5338fbcb43c0ab1de01797b806fcc3a594a9b09810d52dcb9388b46e3470d5f37162028fb01c9244bf61aea4213fd684b4f"], 0xb) [ 2740.138609] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2740.143543] ? iov_iter_init+0xa6/0x1c0 [ 2740.147518] __vfs_write+0x44c/0x630 [ 2740.151240] ? kernel_read+0x110/0x110 [ 2740.155136] ? rw_verify_area+0xe1/0x2a0 [ 2740.159198] vfs_write+0x17f/0x4d0 [ 2740.162738] SyS_write+0xf2/0x210 [ 2740.166194] ? SyS_read+0x210/0x210 [ 2740.169818] ? __do_page_fault+0x159/0xad0 [ 2740.174043] ? do_syscall_64+0x4c/0x640 [ 2740.177999] ? SyS_read+0x210/0x210 [ 2740.181607] do_syscall_64+0x1d5/0x640 [ 2740.185494] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2740.190678] RIP: 0033:0x4665f9 [ 2740.193849] RSP: 002b:00007fa1fdb09188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2740.201668] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2740.208943] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2740.216203] RBP: 00007fa1fdb091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2740.223460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2740.230718] R13: 00007ffd665a506f R14: 00007fa1fdb09300 R15: 0000000000022000 [ 2740.719532] Bluetooth: hci2 command 0x0405 tx timeout 06:28:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x6) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000000)={@any, 0x4, 0xa124, 0x1000}) 06:28:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40080) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x6) 06:28:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20}, 0x10) write$bt_hci(r0, 0x0, 0x6) 06:28:19 executing program 5 (fault-call:3 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xb) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x30}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 06:28:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20}, 0x10) write$bt_hci(r0, 0x0, 0x6) [ 2740.984789] FAULT_INJECTION: forcing a failure. [ 2740.984789] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.026040] CPU: 0 PID: 7871 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 2741.033871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2741.036856] Bluetooth: hci1 command 0x2012 tx timeout [ 2741.043222] Call Trace: [ 2741.043244] dump_stack+0x1b2/0x281 [ 2741.043260] should_fail.cold+0x10a/0x149 [ 2741.043276] should_failslab+0xd6/0x130 [ 2741.062769] kmem_cache_alloc_node_trace+0x58/0x400 [ 2741.067789] __kmalloc_node_track_caller+0x38/0x70 [ 2741.072722] __alloc_skb+0x96/0x510 06:28:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, @vsock={0x28, 0x0, 0x2711}, @in={0x2, 0x4e20, @multicast2}, @can, 0xfbff, 0x0, 0x0, 0x0, 0x36, &(0x7f0000000080)='veth0_to_bond\x00', 0x9, 0x9, 0x101}) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="67752b1286ddd7037d4492a66b984ec767f2782df39eb59da1a798412a8b1496aecd599449fbe8935a7aac5fc65603646bcb5953f1e8f2b7c0218dd40f48a56f3c4b780c34b85b335c33661f3612791a35e115cce77adc221de426bab9be8e9ea42c3ec3c805907f0fdb5c2f7e84811549ec726cf6f6905d"], 0xb) 06:28:19 executing program 4: prctl$PR_GET_KEEPCAPS(0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000200)={0x0, 0x7fff, "4f4599", 0x7f, 0x8}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008804}, 0xc4) 06:28:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r0, 0x2}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) [ 2741.076355] hci_sock_sendmsg+0x10d6/0x1c80 [ 2741.080681] ? hci_send_to_channel+0x200/0x200 [ 2741.085267] ? lock_acquire+0x170/0x3f0 [ 2741.089242] ? security_socket_sendmsg+0x83/0xb0 [ 2741.094004] ? hci_send_to_channel+0x200/0x200 [ 2741.098587] sock_sendmsg+0xb5/0x100 [ 2741.102297] sock_write_iter+0x22c/0x370 [ 2741.106352] ? sock_sendmsg+0x100/0x100 [ 2741.110333] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2741.115261] ? iov_iter_init+0xa6/0x1c0 [ 2741.119235] __vfs_write+0x44c/0x630 [ 2741.122951] ? kernel_read+0x110/0x110 06:28:19 executing program 1: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000140)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x5, [0x4, 0x5], 0x401}, 0x10) socketpair(0x15, 0x4, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$can_raw(r1, &(0x7f0000000dc0)={&(0x7f0000000700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000780)=""/183, 0xb7}, {&(0x7f0000000840)=""/178, 0xb2}, {&(0x7f0000000900)=""/162, 0xa2}, {&(0x7f00000009c0)=""/248, 0xf8}, {&(0x7f0000000ac0)=""/56, 0x38}, {&(0x7f0000000b00)=""/17, 0x11}, {&(0x7f0000000b40)=""/105, 0x69}, {&(0x7f0000000bc0)=""/136, 0x88}, {&(0x7f0000000c80)=""/70, 0x46}], 0x9}, 0x1) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000e00)={r4, 0x100}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x4, 0x7, "5d9936", 0x2, 0x6}) write$bt_hci(r0, 0x0, 0x6) [ 2741.126854] ? rw_verify_area+0xe1/0x2a0 [ 2741.130917] vfs_write+0x17f/0x4d0 [ 2741.134455] SyS_write+0xf2/0x210 [ 2741.137910] ? SyS_read+0x210/0x210 [ 2741.141532] ? __do_page_fault+0x159/0xad0 [ 2741.145769] ? do_syscall_64+0x4c/0x640 [ 2741.149740] ? SyS_read+0x210/0x210 [ 2741.153366] do_syscall_64+0x1d5/0x640 [ 2741.157255] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2741.162439] RIP: 0033:0x4665f9 [ 2741.165623] RSP: 002b:00007fa1fdb09188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:28:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0x0, 0x0, 0x4, 0x3, 0x7}, 0x5, 0x5}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write$bt_hci(r0, 0x0, 0x6) 06:28:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_link_policy={{0x80d, 0x4}, {0x0, 0x1ff}}}, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0xffff, "a2a864", 0x8b, 0x9}) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x0, [0x6, 0x1], 0x2}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x7e, 0x4) socket$inet6(0xa, 0x6, 0x3ff) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="03cb2f93146c02e0a28705baa1292170f662cf72b2a31921c14e6a9c3b918c4a37d72f0c4009b1b4135b60e282919a2923e013e8fd2ef21f9c4a8fabed93456017ab9a23c664e78532ed816d8b3e671884e3384d0b225223f34d6afc60dae55b2b34c987192d"], 0xb) [ 2741.173354] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2741.180709] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2741.187983] RBP: 00007fa1fdb091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.195254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2741.202526] R13: 00007ffd665a506f R14: 00007fa1fdb09300 R15: 0000000000022000 06:28:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x800, 0x4) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) 06:28:19 executing program 5 (fault-call:3 fault-nth:3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) socketpair(0x22, 0x800, 0x7ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x444055b8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x71f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x48840) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES64=r0, @ANYRESDEC=r2], 0xb) 06:28:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_link_policy={{0x80d, 0x4}, {0x0, 0x1ff}}}, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0xffff, "a2a864", 0x8b, 0x9}) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x0, [0x6, 0x1], 0x2}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x7e, 0x4) socket$inet6(0xa, 0x6, 0x3ff) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="03cb2f93146c02e0a28705baa1292170f662cf72b2a31921c14e6a9c3b918c4a37d72f0c4009b1b4135b60e282919a2923e013e8fd2ef21f9c4a8fabed93456017ab9a23c664e78532ed816d8b3e671884e3384d0b225223f34d6afc60dae55b2b34c987192d"], 0xb) [ 2741.315017] FAULT_INJECTION: forcing a failure. [ 2741.315017] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.338521] CPU: 0 PID: 7920 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 2741.346345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2741.355701] Call Trace: [ 2741.358298] dump_stack+0x1b2/0x281 [ 2741.361933] should_fail.cold+0x10a/0x149 [ 2741.366090] should_failslab+0xd6/0x130 [ 2741.370078] kmem_cache_alloc_node+0x263/0x410 [ 2741.374771] __alloc_skb+0x5c/0x510 [ 2741.378405] mgmt_cmd_status+0x43/0x460 [ 2741.382388] hci_sock_sendmsg+0x167a/0x1c80 [ 2741.386742] ? hci_send_to_channel+0x200/0x200 [ 2741.391329] ? lock_acquire+0x170/0x3f0 [ 2741.395312] ? security_socket_sendmsg+0x83/0xb0 [ 2741.400075] ? hci_send_to_channel+0x200/0x200 [ 2741.404662] sock_sendmsg+0xb5/0x100 [ 2741.408380] sock_write_iter+0x22c/0x370 06:28:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r2, 0x101}, 0x14}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r5}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x24000890) 06:28:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x73d}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3c210b4e}]}, 0x34}}, 0x40004) write$bt_hci(r0, 0x0, 0x6) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x2}, 0x6) 06:28:19 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0143205a000901aaaaaaaaaa1109dba0ec25bc531f950aab9fed4c32cdffd4bf334d862d581301814de77f5a761383a85c91fee7637c7fd45a9c8df5e6f1adfd50ce8dd15d8076b57c2edcee54bb19ff31bcd87112670300000000000000"], 0x5e) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, 0x0, 0x6) socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x81, 0x80, 0x312, 0x1, @mcast1, @loopback, 0x8000, 0x8, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x1f, 0x40, 0x8, 0x38, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x1, 0x10000, 0x3ff}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x124, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40015) [ 2741.412446] ? sock_sendmsg+0x100/0x100 [ 2741.416433] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2741.421474] ? iov_iter_init+0xa6/0x1c0 [ 2741.425442] __vfs_write+0x44c/0x630 [ 2741.429138] ? kernel_read+0x110/0x110 [ 2741.433299] ? rw_verify_area+0xe1/0x2a0 [ 2741.437369] vfs_write+0x17f/0x4d0 [ 2741.440998] SyS_write+0xf2/0x210 [ 2741.444464] ? SyS_read+0x210/0x210 [ 2741.448181] ? __do_page_fault+0x159/0xad0 [ 2741.452671] ? do_syscall_64+0x4c/0x640 [ 2741.456649] ? SyS_read+0x210/0x210 [ 2741.460276] do_syscall_64+0x1d5/0x640 [ 2741.464152] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2741.469350] RIP: 0033:0x4665f9 [ 2741.472550] RSP: 002b:00007fa1fdb09188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2741.480457] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2741.487720] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2741.494979] RBP: 00007fa1fdb091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.503056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:28:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_link_policy={{0x80d, 0x4}, {0x0, 0x1ff}}}, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0xffff, "a2a864", 0x8b, 0x9}) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x0, [0x6, 0x1], 0x2}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x7e, 0x4) socket$inet6(0xa, 0x6, 0x3ff) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="03cb2f93146c02e0a28705baa1292170f662cf72b2a31921c14e6a9c3b918c4a37d72f0c4009b1b4135b60e282919a2923e013e8fd2ef21f9c4a8fabed93456017ab9a23c664e78532ed816d8b3e671884e3384d0b225223f34d6afc60dae55b2b34c987192d"], 0xb) 06:28:19 executing program 5 (fault-call:3 fault-nth:4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) [ 2741.510307] R13: 00007ffd665a506f R14: 00007fa1fdb09300 R15: 0000000000022000 06:28:19 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x13, r0, 0x8000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x10001, 0x1, &(0x7f0000000100)=[0x9], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x9], &(0x7f00000001c0)=[0x9000]}) write$bt_hci(r1, 0x0, 0x6) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000040)) 06:28:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x10, 0x8007, 0x7, 0x8, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x66, 0x0, 0x1f, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x10}, {[@end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f00000001c0)={0x151c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x523600}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '$@}\'#%@+,\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ':-S:[\\&?*@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']{:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'y\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd0, 0x5, "d37d34a42de9fe84d47daeada28b75246fcf30e69625020b847cd43cc9715d3ec6e5a3666ca183bed0671f86097d6a992e65f98c7aed843821a508d1d10fa183cb0e3414f08c906aaec2f26b0e0cd2c5726d2de6bd3767c08c7d5a809222ca0cea166ddf1165881bbc51665f6b22b96197bf31521e616016a01973b2420b29c750efa9087dae5a9c10fd3bce929ab54ee5748d08ff9868762683098b8456f4db6721cf13ddad578eea283b5e389de8f03efbfda17963f908bf530565b4823f103ea465effa04cda417adc9e7"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x18, 0x4, "b329654cbdac8cef5848c07d4f94613ff97b6c62"}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '\'\\,+-!\\-(\x17\xf3.((\'\x821\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbfe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '-)P-%##w:.+$-\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '#\xab[^@)!#o\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa722}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x1b\\\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4b, 0x5, "3dda5a99f9279b7b0e0226b7803f7c8c041097678a12c33a42725e6158f161d1224663762c6a02ef6021146320204738a18927fe86091e7e83de8faf0fb9d5a0f6a7f95708de18"}, @ETHTOOL_A_BITSET_VALUE={0x7d, 0x4, "4cc11474c1718a0fd934871ac055b4bef403c5a1663a68b2fab3e8ea836fefebd19bd99cbd8ec0ff3afe7d588ab284b5fe05396d293267b003f7886e53a817f8f879953f3f65cb21349a729c34a407261334496dd080603f70e30ee9a0a604d2dd230a8a8d871086e7aab263cc261dd4fd839e51825c37245f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x111c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "5797067b3bd0b36727b9d1d6663f982610bc394c1dca5176ac1d2bf38f7c97f8773d69c24a4744cad2d02ef4c3d0eb43023389253a2a7081f62343556545e3f448c60016799b75083603ec42477e324253de0281e6181a07e36e8ef7fabf6555faa1347a06240c44709e3e20c469a3fb2c3587d04372aa69c54ecb31f79ff1f81567c8d3bbc9cd0d7f3d1f2fae286247a9fb60311cf5"}, @ETHTOOL_A_BITSET_MASK={0x6d, 0x5, "b159b0b3844e528d131e054cb68721471bf77fd6d6207dd97a012da9eef69b9db14df1864fffa1f5bad9b0061c6066ef2dcbc31b58bd991a63b196c78635df5c2b9e52e42fe1f6e851bcf87aa3cfd1426207fa8c35f3e4fb6b95fe80cdd3fc6d5c836cc03f7a0aba71"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe284}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x151c}, 0x1, 0x0, 0x0, 0x54}, 0x40040c5) [ 2741.570128] FAULT_INJECTION: forcing a failure. [ 2741.570128] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.623845] CPU: 0 PID: 7947 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0 [ 2741.631716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2741.641945] Call Trace: [ 2741.644545] dump_stack+0x1b2/0x281 [ 2741.648276] should_fail.cold+0x10a/0x149 [ 2741.652434] should_failslab+0xd6/0x130 [ 2741.656417] kmem_cache_alloc_node_trace+0x25a/0x400 [ 2741.661538] __kmalloc_node_track_caller+0x38/0x70 [ 2741.666486] __alloc_skb+0x96/0x510 [ 2741.670234] mgmt_cmd_status+0x43/0x460 [ 2741.674594] read_local_oob_data+0x1f0/0x3e0 [ 2741.679538] ? read_local_ssp_oob_req+0x1b0/0x1b0 [ 2741.684392] ? lock_acquire+0x170/0x3f0 [ 2741.688386] ? lock_downgrade+0x740/0x740 [ 2741.692547] ? set_device_id+0x460/0x460 [ 2741.696619] hci_sock_sendmsg+0x1723/0x1c80 [ 2741.701045] ? hci_send_to_channel+0x200/0x200 [ 2741.705722] ? lock_acquire+0x170/0x3f0 [ 2741.709732] ? security_socket_sendmsg+0x83/0xb0 [ 2741.714495] ? hci_send_to_channel+0x200/0x200 [ 2741.719088] sock_sendmsg+0xb5/0x100 [ 2741.722812] sock_write_iter+0x22c/0x370 [ 2741.726885] ? sock_sendmsg+0x100/0x100 [ 2741.730884] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2741.735829] ? iov_iter_init+0xa6/0x1c0 [ 2741.739869] __vfs_write+0x44c/0x630 [ 2741.743892] ? kernel_read+0x110/0x110 [ 2741.747851] ? rw_verify_area+0xe1/0x2a0 [ 2741.751977] vfs_write+0x17f/0x4d0 [ 2741.755645] SyS_write+0xf2/0x210 [ 2741.759120] ? SyS_read+0x210/0x210 [ 2741.762737] ? __do_page_fault+0x159/0xad0 [ 2741.766954] ? do_syscall_64+0x4c/0x640 [ 2741.770938] ? SyS_read+0x210/0x210 [ 2741.774724] do_syscall_64+0x1d5/0x640 [ 2741.778611] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2741.783792] RIP: 0033:0x4665f9 [ 2741.786987] RSP: 002b:00007fa1fdb09188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2741.794815] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2741.802077] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 2741.809335] RBP: 00007fa1fdb091d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.816595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:28:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x6) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "a898231a76dbd6034c6ca998b6b2f5a8fcc86a3c88b3cdf6aa5b1878cc9545a84faebf1b1d44f2d27aa41936869ea7d708da659b2b3001d85e80a8d341bca02be8fee60eb4f9be23cb6eace5a693d01fd8f73f8738ea02e7e18491e6de56a983fc1412e24484ad7c62ca22140fdabe9ae8a6936d380e0c887f0d8b36b8c1d0810f349af9a4143f9f91ac87f5ba79a460c98dcb1769e054fc90f8a4c7cdc50b7b55a55ae27bf2c7922e9de71edfa7a7ad360de532b5dc965b76ba13f874e950e5e1e54a2b4ad88528a9d6fb384b1b33ab220fe89e5215cee49931c3d130b96e044a92040ddd1820570ee5cd9431b91489af840f9551cfd2d3d0f72c7d156174d2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r3, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, r3, 0x30, 0x1, @in6={0xa, 0x4e21, 0xffffffff, @mcast1, 0xfffffc01}}}, 0xa0) 06:28:19 executing program 4: socketpair(0x1e, 0x800, 0x20, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4508c0cc}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf7800000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9b2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="03c9c877696ff4a639b06342c604b12f416ad2b90075f6da5c2e71a5e151f7536bec099a00080a7c1f50b346e57859b818e72f8fa4c99ab1e462a8bf3f22b224af7d8650d39231305707afd23b2f6a2d580fb8bdd385d32ce7fc879b61b9c82ad31ebc6adb165bb33eb8ed2a265d411363396d69f546e5d657b6acce1e2fac2d9503f130e485798ff0733ab20664cd395dc152fdf612c4fee3883c90d46ea218aae5acb791c3b13bef2672ed09fdf50bcae70377f796e9229c7d71c46bf08fd699e5df99d674b3641522978acd0f5bc8994f"], 0xb) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 06:28:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:28:19 executing program 5 (fault-call:3 fault-nth:5): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x20, [], 0x6}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 06:28:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x10, 0x8007, 0x7, 0x8, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x66, 0x0, 0x1f, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x10}, {[@end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x1d, r7}, 0x10, &(0x7f0000000600)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f00000001c0)={0x151c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x523600}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '$@}\'#%@+,\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ':-S:[\\&?*@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']{:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'y\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd0, 0x5, "d37d34a42de9fe84d47daeada28b75246fcf30e69625020b847cd43cc9715d3ec6e5a3666ca183bed0671f86097d6a992e65f98c7aed843821a508d1d10fa183cb0e3414f08c906aaec2f26b0e0cd2c5726d2de6bd3767c08c7d5a809222ca0cea166ddf1165881bbc51665f6b22b96197bf31521e616016a01973b2420b29c750efa9087dae5a9c10fd3bce929ab54ee5748d08ff9868762683098b8456f4db6721cf13ddad578eea283b5e389de8f03efbfda17963f908bf530565b4823f103ea465effa04cda417adc9e7"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x18, 0x4, "b329654cbdac8cef5848c07d4f94613ff97b6c62"}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '\'\\,+-!\\-(\x17\xf3.((\'\x821\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbfe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '-)P-%##w:.+$-\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '#\xab[^@)!#o\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa722}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x1b\\\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4b, 0x5, "3dda5a99f9279b7b0e0226b7803f7c8c041097678a12c33a42725e6158f161d1224663762c6a02ef6021146320204738a18927fe86091e7e83de8faf0fb9d5a0f6a7f95708de18"}, @ETHTOOL_A_BITSET_VALUE={0x7d, 0x4, "4cc11474c1718a0fd934871ac055b4bef403c5a1663a68b2fab3e8ea836fefebd19bd99cbd8ec0ff3afe7d588ab284b5fe05396d293267b003f7886e53a817f8f879953f3f65cb21349a729c34a407261334496dd080603f70e30ee9a0a604d2dd230a8a8d871086e7aab263cc261dd4fd839e51825c37245f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x111c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "5797067b3bd0b36727b9d1d6663f982610bc394c1dca5176ac1d2bf38f7c97f8773d69c24a4744cad2d02ef4c3d0eb43023389253a2a7081f62343556545e3f448c60016799b75083603ec42477e324253de0281e6181a07e36e8ef7fabf6555faa1347a06240c44709e3e20c469a3fb2c3587d04372aa69c54ecb31f79ff1f81567c8d3bbc9cd0d7f3d1f2fae286247a9fb60311cf5"}, @ETHTOOL_A_BITSET_MASK={0x6d, 0x5, "b159b0b3844e528d131e054cb68721471bf77fd6d6207dd97a012da9eef69b9db14df1864fffa1f5bad9b0061c6066ef2dcbc31b58bd991a63b196c78635df5c2b9e52e42fe1f6e851bcf87aa3cfd1426207fa8c35f3e4fb6b95fe80cdd3fc6d5c836cc03f7a0aba71"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe284}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x151c}, 0x1, 0x0, 0x0, 0x54}, 0x40040c5) [ 2741.823899] R13: 00007ffd665a506f R14: 00007fa1fdb09300 R15: 0000000000022000 06:28:19 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340), r1}}, 0x18) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000180)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$fb(r4, &(0x7f00000000c0)="da757a6493e5de3b9c9cde08e718f0aff7717f2d9b882a3036f52bd2344b67c7de1bb3bfd99dd56b909ca7073fe5a75a5005caf7cbc81a16bba410033b68f4783a4f19ca358e43acbc90a68a379988f560a21b8c677f68bef8e1427d0ffefdf291f15f8323eb3b4fb9dc3429e5be01970c7b4366cc6a52dd7552d7ab60bb2f13b00e331ec679a745b451526f474a0e2f46738b9353766fd46971a0633988b2d10acb46a640d975fae61567542f3b90eeb03e20d80842a997e7d125cdba69", 0xbe) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000000)={0x3, 0x400, "93169f", 0x6, 0x1}) [ 2741.916906] Bluetooth: hci3 command 0x0401 tx timeout [ 2768.094694] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor.4:7990] [ 2768.102525] Modules linked in: [ 2768.105697] irq event stamp: 6384 [ 2768.109132] hardirqs last enabled at (6383): [] restore_regs_and_return_to_kernel+0x0/0x2a [ 2768.119165] hardirqs last disabled at (6384): [] apic_timer_interrupt+0x8e/0xa0 [ 2768.128150] softirqs last enabled at (1160): [] __do_softirq+0x68b/0x9ff [ 2768.136617] softirqs last disabled at (747): [] irq_exit+0x193/0x240 [ 2768.144645] CPU: 0 PID: 7990 Comm: syz-executor.4 Not tainted 4.14.231-syzkaller #0 [ 2768.153114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2768.162444] task: ffff888099eee240 task.stack: ffff888083110000 [ 2768.168480] RIP: 0010:queued_write_lock_slowpath+0xcb/0x1d0 [ 2768.174163] RSP: 0018:ffff888083117d38 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff10 [ 2768.181858] RAX: 0000000000000101 RBX: ffffffff89dd4428 RCX: 0000000000006d7e [ 2768.189198] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff89dd4428 [ 2768.196448] RBP: ffffffff89dd442c R08: ffffffff8b9c66b0 R09: 0000000000040599 [ 2768.203740] R10: ffff888099eeeaf0 R11: ffff888099eee240 R12: 0000000000000003 [ 2768.210988] R13: fffffbfff13ba885 R14: 00000000000000ff R15: ffffffff8863a320 [ 2768.218238] FS: 00007fdb17d91700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 2768.226457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2768.232328] CR2: 0000000000970004 CR3: 00000000aad90000 CR4: 00000000001406f0 [ 2768.239589] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2768.246844] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2768.254111] Call Trace: [ 2768.256682] do_raw_write_lock+0xc2/0x1d0 [ 2768.260825] bt_sock_link+0x1f/0x120 [ 2768.264529] hci_sock_create+0x15c/0x1d0 [ 2768.268583] bt_sock_create+0x13b/0x280 [ 2768.272549] __sock_create+0x303/0x620 [ 2768.276417] SyS_socket+0xd1/0x1b0 [ 2768.279935] ? move_addr_to_kernel+0x60/0x60 [ 2768.284329] ? fput+0xb/0x140 [ 2768.287414] ? do_syscall_64+0x4c/0x640 [ 2768.291374] ? move_addr_to_kernel+0x60/0x60 [ 2768.295758] do_syscall_64+0x1d5/0x640 [ 2768.299627] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2768.305401] RIP: 0033:0x4665f9 [ 2768.308568] RSP: 002b:00007fdb17d91128 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2768.316254] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2768.323501] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 2768.331008] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 2768.338253] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2768.345500] R13: 00007ffeff4794cf R14: 00007fdb17d91300 R15: 0000000000022000 [ 2768.352781] Code: 75 dc 49 89 dd 49 89 dc 41 be ff 00 00 00 49 c1 ed 03 41 83 e4 07 48 b8 00 00 00 00 00 fc ff df 49 01 c5 41 83 c4 03 eb 02 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 9e 00 00 00 8b 03 83 [ 2768.372062] Sending NMI from CPU 0 to CPUs 1: [ 2768.377313] NMI backtrace for cpu 1 skipped: idling at pc 0xffffffff87229f8e [ 2768.378264] Kernel panic - not syncing: softlockup: hung tasks [ 2768.390633] CPU: 0 PID: 7990 Comm: syz-executor.4 Tainted: G L 4.14.231-syzkaller #0 [ 2768.399749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2768.409215] Call Trace: [ 2768.412137] [ 2768.414472] dump_stack+0x1b2/0x281 [ 2768.418262] panic+0x1f9/0x42d [ 2768.421548] ? add_taint.cold+0x16/0x16 [ 2768.425518] ? printk_safe_flush+0xa9/0x110 [ 2768.430024] watchdog_timer_fn.cold+0x16/0x25 [ 2768.434734] __hrtimer_run_queues+0x30b/0xc80 [ 2768.439221] ? watchdog+0x50/0x50 [ 2768.442656] ? retrigger_next_event+0x310/0x310 [ 2768.447400] ? ktime_get_update_offsets_now+0x272/0x3f0 [ 2768.452844] hrtimer_interrupt+0x1e6/0x5e0 [ 2768.457070] smp_apic_timer_interrupt+0x117/0x5e0 [ 2768.461936] apic_timer_interrupt+0x93/0xa0 [ 2768.466250] [ 2768.468558] RIP: 0010:queued_write_lock_slowpath+0xcb/0x1d0 [ 2768.474433] RSP: 0018:ffff888083117d38 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff10 [ 2768.482297] RAX: 0000000000000101 RBX: ffffffff89dd4428 RCX: 0000000000006d7e [ 2768.489570] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff89dd4428 [ 2768.497075] RBP: ffffffff89dd442c R08: ffffffff8b9c66b0 R09: 0000000000040599 [ 2768.504519] R10: ffff888099eeeaf0 R11: ffff888099eee240 R12: 0000000000000003 [ 2768.511786] R13: fffffbfff13ba885 R14: 00000000000000ff R15: ffffffff8863a320 [ 2768.519247] do_raw_write_lock+0xc2/0x1d0 [ 2768.523376] bt_sock_link+0x1f/0x120 [ 2768.527197] hci_sock_create+0x15c/0x1d0 [ 2768.531273] bt_sock_create+0x13b/0x280 [ 2768.535360] __sock_create+0x303/0x620 [ 2768.539254] SyS_socket+0xd1/0x1b0 [ 2768.542772] ? move_addr_to_kernel+0x60/0x60 [ 2768.547192] ? fput+0xb/0x140 [ 2768.550288] ? do_syscall_64+0x4c/0x640 [ 2768.554244] ? move_addr_to_kernel+0x60/0x60 [ 2768.558637] do_syscall_64+0x1d5/0x640 [ 2768.562516] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2768.567687] RIP: 0033:0x4665f9 [ 2768.570867] RSP: 002b:00007fdb17d91128 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2768.578564] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2768.585815] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 2768.593135] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 2768.600438] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2768.607907] R13: 00007ffeff4794cf R14: 00007fdb17d91300 R15: 0000000000022000 [ 2768.616112] Kernel Offset: disabled [ 2768.620219] [ 2768.621852] ================================ [ 2768.626308] WARNING: inconsistent lock state [ 2768.630970] 4.14.231-syzkaller #0 Tainted: G L [ 2768.636668] -------------------------------- [ 2768.641068] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-R} usage. [ 2768.648715] syz-executor.4/7990 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 2768.656136] ((fb_notifier_list).rwsem){+?++}, at: [] blocking_notifier_call_chain+0x63/0x90 [ 2768.666487] {HARDIRQ-ON-W} state was registered at: [ 2768.671498] lock_acquire+0x170/0x3f0 [ 2768.675362] down_write+0x34/0x90 [ 2768.679003] blocking_notifier_chain_register+0x65/0x310 [ 2768.684534] fb_console_init+0x1a/0x1f2 [ 2768.688711] fbmem_init+0xe2/0x103 [ 2768.692426] do_one_initcall+0x88/0x210 [ 2768.696656] kernel_init_freeable+0x553/0x614 [ 2768.701310] kernel_init+0xd/0x164 [ 2768.705726] ret_from_fork+0x24/0x30 [ 2768.709502] irq event stamp: 6384 [ 2768.713302] hardirqs last enabled at (6383): [] restore_regs_and_return_to_kernel+0x0/0x2a [ 2768.723479] hardirqs last disabled at (6384): [] apic_timer_interrupt+0x8e/0xa0 [ 2768.732648] softirqs last enabled at (1160): [] __do_softirq+0x68b/0x9ff [ 2768.741461] softirqs last disabled at (747): [] irq_exit+0x193/0x240 [ 2768.749499] [ 2768.749499] other info that might help us debug this: [ 2768.756150] Possible unsafe locking scenario: [ 2768.756150] [ 2768.762223] CPU0 [ 2768.765046] ---- [ 2768.767731] lock((fb_notifier_list).rwsem); [ 2768.781499] [ 2768.784419] lock((fb_notifier_list).rwsem); [ 2768.789422] [ 2768.789422] *** DEADLOCK *** [ 2768.789422] [ 2768.795653] 2 locks held by syz-executor.4/7990: [ 2768.800900] #0: (bt_proto_lock){++++}, at: [] bt_sock_create+0x80/0x280 [ 2768.809497] #1: (hci_sk_list.lock){++++}, at: [] bt_sock_link+0x1f/0x120 [ 2768.818616] [ 2768.818616] stack backtrace: [ 2768.823205] CPU: 0 PID: 7990 Comm: syz-executor.4 Tainted: G L 4.14.231-syzkaller #0 [ 2768.833475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2768.843758] Call Trace: [ 2768.846358] [ 2768.848498] dump_stack+0x1b2/0x281 [ 2768.852104] print_usage_bug.cold+0x42e/0x570 [ 2768.856851] mark_lock+0xb4d/0x1050 [ 2768.860647] ? do_syscall_64+0x1d5/0x640 [ 2768.864703] ? print_irq_inversion_bug+0xd0/0xd0 [ 2768.869586] __lock_acquire+0xfe3/0x3f20 [ 2768.873822] ? fb_pad_aligned_buffer+0xbf/0x110 [ 2768.878475] ? trace_hardirqs_on+0x10/0x10 [ 2768.882794] ? soft_cursor+0x50f/0xa50 [ 2768.886758] ? bit_cursor+0x81b/0x1580 [ 2768.890834] ? bit_cursor+0xfb8/0x1580 [ 2768.894715] lock_acquire+0x170/0x3f0 [ 2768.898670] ? blocking_notifier_call_chain+0x63/0x90 [ 2768.903841] down_read+0x36/0x80 [ 2768.907185] ? blocking_notifier_call_chain+0x63/0x90 [ 2768.912396] blocking_notifier_call_chain+0x63/0x90 [ 2768.917403] fb_blank+0x94/0x190 [ 2768.920745] ? fb_set_logocmap+0x450/0x450 [ 2768.924966] fbcon_blank+0x7ed/0xd50 [ 2768.928658] ? trace_hardirqs_on+0x10/0x10 [ 2768.932868] ? vprintk_emit+0x170/0x620 [ 2768.936832] ? con2fb_release_oldinfo.constprop.0+0x5a0/0x5a0 [ 2768.943124] ? lock_acquire+0x170/0x3f0 [ 2768.947076] ? __printk_safe_flush+0x27/0x2e0 [ 2768.951644] ? printk_safe_flush+0x96/0x110 [ 2768.955951] ? kmsg_dump+0x30c/0x4b0 [ 2768.959638] ? lock_acquire+0x170/0x3f0 [ 2768.963598] ? lock_downgrade+0x740/0x740 [ 2768.967764] do_unblank_screen+0x1fd/0x4e0 [ 2768.971972] panic+0x290/0x42d [ 2768.975137] ? add_taint.cold+0x16/0x16 [ 2768.979082] ? printk_safe_flush+0xa9/0x110 [ 2768.983384] watchdog_timer_fn.cold+0x16/0x25 [ 2768.987851] __hrtimer_run_queues+0x30b/0xc80 [ 2768.992317] ? watchdog+0x50/0x50 [ 2768.995742] ? retrigger_next_event+0x310/0x310 [ 2769.000393] ? ktime_get_update_offsets_now+0x272/0x3f0 [ 2769.005728] hrtimer_interrupt+0x1e6/0x5e0 [ 2769.009938] smp_apic_timer_interrupt+0x117/0x5e0 [ 2769.014752] apic_timer_interrupt+0x93/0xa0 [ 2769.019055] [ 2769.021264] RIP: 0010:queued_write_lock_slowpath+0xcb/0x1d0 [ 2769.026955] RSP: 0018:ffff888083117d38 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff10 [ 2769.034635] RAX: 0000000000000101 RBX: ffffffff89dd4428 RCX: 0000000000006d7e [ 2769.041963] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff89dd4428 [ 2769.049218] RBP: ffffffff89dd442c R08: ffffffff8b9c66b0 R09: 0000000000040599 [ 2769.056474] R10: ffff888099eeeaf0 R11: ffff888099eee240 R12: 0000000000000003 [ 2769.063728] R13: fffffbfff13ba885 R14: 00000000000000ff R15: ffffffff8863a320 [ 2769.071000] do_raw_write_lock+0xc2/0x1d0 [ 2769.075143] bt_sock_link+0x1f/0x120 [ 2769.078831] hci_sock_create+0x15c/0x1d0 [ 2769.082866] bt_sock_create+0x13b/0x280 [ 2769.086827] __sock_create+0x303/0x620 [ 2769.090689] SyS_socket+0xd1/0x1b0 [ 2769.094214] ? move_addr_to_kernel+0x60/0x60 [ 2769.098602] ? fput+0xb/0x140 [ 2769.101698] ? do_syscall_64+0x4c/0x640 [ 2769.105904] ? move_addr_to_kernel+0x60/0x60 [ 2769.110294] do_syscall_64+0x1d5/0x640 [ 2769.114155] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2769.119329] RIP: 0033:0x4665f9 [ 2769.122582] RSP: 002b:00007fdb17d91128 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2769.130265] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 2769.137511] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 2769.144753] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 2769.151995] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 2769.159257] R13: 00007ffeff4794cf R14: 00007fdb17d91300 R15: 0000000000022000 [ 2769.167927] Rebooting in 86400 seconds..