syzkaller login: [ 74.800981] scp (236) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:5256' (ECDSA) to the list of known hosts. 2025/01/27 13:45:15 fuzzer started 2025/01/27 13:45:15 dialing manager at localhost:40883 [ 77.898483] cgroup: Unknown subsys name 'net' [ 77.983777] cgroup: Unknown subsys name 'cpuset' [ 78.016704] cgroup: Unknown subsys name 'rlimit' [ 83.975692] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/27 13:45:33 syscalls: 204 2025/01/27 13:45:33 code coverage: enabled 2025/01/27 13:45:33 comparison tracing: enabled 2025/01/27 13:45:33 extra coverage: enabled 2025/01/27 13:45:33 setuid sandbox: enabled 2025/01/27 13:45:33 namespace sandbox: enabled 2025/01/27 13:45:33 Android sandbox: enabled 2025/01/27 13:45:33 fault injection: enabled 2025/01/27 13:45:33 leak checking: enabled 2025/01/27 13:45:33 net packet injection: enabled 2025/01/27 13:45:33 net device setup: enabled 2025/01/27 13:45:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/27 13:45:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/27 13:45:33 USB emulation: enabled 2025/01/27 13:45:33 hci packet injection: enabled 2025/01/27 13:45:33 wifi device emulation: enabled 2025/01/27 13:45:33 802.15.4 emulation: enabled 2025/01/27 13:45:33 fetching corpus: 0, signal 0/0 (executing program) 2025/01/27 13:45:35 starting 8 fuzzer processes 13:45:35 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x700, 0x20, 0x8, 0x8, {{0xc, 0x4, 0x1, 0x7, 0x30, 0x68, 0x0, 0x8, 0x4, 0x0, @remote, @remote, {[@ssrr={0x89, 0x1b, 0x23, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @empty]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000100)={'ip_vti0\x00', r0, 0x700, 0x8, 0x6, 0x2, {{0x5, 0x4, 0x2, 0x26, 0x14, 0x66, 0x0, 0x1f, 0x4, 0x0, @rand_addr=0x64010101, @multicast1}}}}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0xc180, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x40, 0x1}}, './file0\x00'}) getpeername$packet(r4, &(0x7f0000000200), &(0x7f0000000240)=0x14) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff8, 0x3ff}}, './file1\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000040) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x950}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x8, 0x8000, 0x3, 0x2, {{0xd, 0x4, 0x3, 0xd, 0x34, 0x65, 0x0, 0x9, 0x4, 0x0, @multicast2, @local, {[@rr={0x7, 0x1f, 0xff, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @rand_addr=0x64010102, @broadcast, @empty, @broadcast]}]}}}}}) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x1bc, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x750}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa31}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x25d3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfff, @local, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xaf5}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbdb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40041}, 0x4010) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000880)={r9, 0x1, 0x6, @multicast}, 0x10) connect$packet(r5, &(0x7f00000008c0)={0x11, 0xf8, r0, 0x1, 0x9, 0x6, @random="1228d1d2386e"}, 0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000940)={{0x1, 0x1, 0x18, r8, {0x10000}}, './file1\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000980)={{0x1, 0x1, 0x18, r8, {r3}}, './file1/file0\x00'}) sendto$packet(r11, &(0x7f00000009c0)="5202c5abe5a47379d6ee6f1166ba3b26fc1d9b3d7fdb39c929696918ece6d0bdbbeaf3ba4c64c9e294524ce6c77700a0526f0e8d021fe556fe923aa0e4da42bbb6060f61d0bfa5f15e90c8c7333fe281fc0d99c718f898f340a013d53c9fb84ab2d1172b28ce0546b8b6605f13978d5ba353edcb608331ecfea728a0e6d107eb72957033927a8dd510af2a63a2fda6764f68", 0x92, 0x200000c4, &(0x7f0000000a80)={0x11, 0x1a, r2, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 13:45:35 executing program 1: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=""/150, &(0x7f00000000c0)=0x96) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x100c00) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x28, 0x0, 0x81, 0x5, {{0xe, 0x4, 0x0, 0x2b, 0x38, 0x65, 0x5ca, 0x6, 0x4, 0x0, @multicast2, @broadcast, {[@timestamp={0x44, 0x24, 0xf5, 0x0, 0x1, [0x4, 0x1, 0x8, 0xb9e7, 0x8, 0x1, 0x8, 0x9]}]}}}}}) sendto$packet(r0, &(0x7f0000000180)="b587fe6193d1cbefa0a9a9c8bf35c22f3999a668f183dd4b30d814adbc6bcf0041f5671b9355e66ffda75b62271f4d18dccb4f0fe539b066ff41b17c80805380f5ea09ebcbaa0ac342ac55e01ecda52731459351ba8e6fec9e853083", 0x5c, 0x20000000, &(0x7f00000002c0)={0x11, 0xd, r1, 0x1, 0x8, 0x6, @broadcast}, 0x14) r2 = accept$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) connect$packet(r0, &(0x7f0000000380)={0x11, 0x4, r3, 0x1, 0x9, 0x6, @remote}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r2, &(0x7f00000003c0)="ad649963af3f741047b71e4af71f7c3b8382aa4c52b9318ee54494ccc8d4edc37f95f00b33ad", 0x26, 0x4000000, &(0x7f0000000400)={0x11, 0x4, r3, 0x1, 0x2, 0x6, @remote}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0xffffffff}}, './file0\x00'}) getsockopt$packet_buf(r5, 0x107, 0x2, &(0x7f0000000480)=""/161, &(0x7f0000000540)=0xa1) setsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000580)=0x2, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r4, {0x1000, 0x800}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) getsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000700), &(0x7f0000000740)=0x4) write$sndseq(r6, &(0x7f0000000800)=[{0x6, 0x2, 0xaa, 0x40, @time={0x56cd, 0x2}, {0xff, 0xee}, {0x5, 0x6}, @addr={0x5, 0x3}}, {0x7, 0x8, 0x1, 0x81, @tick=0x9, {0x4, 0x4d}, {0x1d, 0x8}, @result={0xb85, 0x6}}, {0x7d, 0x1f, 0x81, 0xff, @time={0x7, 0x8}, {0x5b, 0x17}, {0x9, 0x5}, @quote={{0xb5, 0x4}, 0x4, &(0x7f0000000780)={0x20, 0x2, 0x80, 0x1, @tick=0x7, {0x8, 0x1}, {0xff, 0x2}, @connect={{0x8, 0x20}, {0x0, 0x40}}}}}, {0x7, 0xf8, 0xc2, 0x2, @time={0x0, 0x9}, {0x8}, {0x3, 0xac}, @result={0x3, 0x711b}}, {0x4, 0x4, 0x1b, 0x5, @time={0x4, 0x9}, {0x1, 0xde}, {0x40, 0x4}, @raw32={[0x3, 0x8, 0x9]}}, {0x4, 0x9, 0x4, 0x54, @tick=0x13, {0x7, 0xbd}, {0x4}, @note={0x4, 0x1f, 0x7, 0x6, 0x5}}, {0x9, 0x2, 0x2, 0x3, @tick=0x4, {0x9, 0x6}, {0x3f, 0x6}, @quote={{0xfb, 0xff}, 0x81, &(0x7f00000007c0)={0x80, 0xae, 0x3, 0x3, @tick=0x9, {0x1, 0x81}, {0x7, 0x1f}, @queue={0x4, {0x3, 0xdde}}}}}, {0x4, 0x7, 0x2, 0x9, @time={0x1ff, 0x4}, {0x40, 0x8}, {0x0, 0x84}, @addr={0x1f, 0x1}}], 0xe0) getpeername$packet(r5, &(0x7f0000000900), &(0x7f0000000940)=0x14) process_vm_writev(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/13, 0xd}, {&(0x7f0000000a40)=""/61, 0x3d}, {&(0x7f0000000a80)=""/58, 0x3a}], 0x4, &(0x7f0000000d40)=[{&(0x7f0000000b00)=""/176, 0xb0}, {&(0x7f0000000bc0)=""/118, 0x76}, {&(0x7f0000000c40)=""/200, 0xc8}], 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff30d9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x694ae53e0d9affaf}, 0x0) 13:45:35 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x2, 0xf8, 0x81, 0x3ff}, {0x3, 0x40, 0xde, 0x81}, {0x3, 0x5, 0x3, 0xd1d}, {0x7, 0x81, 0x6}, {0x6, 0x4, 0xd7}, {0xfb99, 0x3f, 0x4, 0x5}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000100)={{0x0, 0x7}, 0x1, 0x7, 0xffffffff, {0x0, 0x4}, 0x3, 0x1}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000001c0)={{0x6, 0x3}, {0x3, 0x3d}, 0x7, 0x1, 0xfe}) write$sndseq(r2, &(0x7f0000000240)=[{0x6, 0x0, 0x7, 0x0, @tick=0x8000, {0x80, 0x6}, {0x5, 0x40}, @result={0xdc, 0x9aaa}}], 0x1c) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r1, 0x7, 0x7}) openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000002c0), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={r1, 0x0, r3, 0x80000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000340)={{0x6, 0xce}, 'port0\x00', 0xc9, 0x0, 0x7, 0x5, 0x81, 0x1ff, 0x5, 0x0, 0x1, 0xf8}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000400)={{0x1, 0x8c}, 'port1\x00', 0x8, 0x20049, 0x1, 0x4, 0x3, 0x7fffffff, 0x1, 0x0, 0x3, 0x6}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x8, 0xffffff69, {{0x6, 0x4, 0x3, 0x2, 0x18, 0x66, 0x0, 0x8e, 0x4, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x4, 0xa2, 0x3, 0x4}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xe0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x48000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000700)={0x1f, 0x6, 0x8ab, 0x7, 0x3, 0x5}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000780)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000800)={0x1, &(0x7f00000007c0)=[{0x9, 0x84, 0x9}]}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x801) 13:45:35 executing program 3: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'bond0', 0x32, 0x37}, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffffffffffc}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x7f, 0x7, &(0x7f0000000700)=[{&(0x7f0000000140)="596c7026e55f12fa5b9da76ce95f84586f631cbff24075052986ca3b329a03a6e860bc007751ab85a171b0e84fd293710b5228f1925cdd88274b9290b4ec24cc76220faa3c033e503cf891c9c5797c23c108105e5e3c10bdf2dc186bcbe522ba5bfd55322d4517ea18f0e86c0e2485a29b4af28c0bc3f928fdc25ce9185e20aec02238d8c1988c303026b5cb525f9e455d4be6900be54ed8c8241b366c307136a705b537c135b378974d4b3205f4f65c66606e095b5162f5eb5d9d32edd6b382000a9fe2e263e5b88316d6189951a3bd980db0692a86a644ea3aae3d3871b2405a7746ebd1c8efb073c2830ab91a7551a1b7f0c3f3cf9d", 0xf7, 0x200}, {&(0x7f0000000240)="bc02acdc8feb4b15969220c720354f22372e34a9e9e2658f184c761a942ee161a7b39b5324d137c7a72541653fbd84180b857f9976680277f1b4287666b54f94c7ae95584800585017b1e76da72d9474170d282f1f274d26cde1de740a04564265fe800a762ac4477b7ed665e2463b1b42fc", 0x72, 0xfffffffffffff000}, {&(0x7f00000002c0)="5b32210166f57171719db16c58b88e153022ba6b3fec67bd977b9b331c519bec2f4f7b3b6f90c6f64e2933aac764e555795a6b62539abb16379d4ad5fd1207533c51069afab214d8a2fda7b19e9a76d372b92578ed6a4526a0eea0ea284cab62022bce829b19b7e6150ec1094af1753bbaf9516f3bad269ecb8b620c77f1068a27058bae05d265c69f4a2af333dd61f44f37f4d63a20563788f7c83788e27e2ab143894ed2817b730d8325c6fe11ea49aaa1292cb1c36ee98c4379a606758a5fbc840016fa7bafdc97bc2443190724070b24e9f1e2cc1e0b76e53cb4a1d2ed90484a", 0xe2, 0xd28d}, {&(0x7f00000003c0)="754dc8d38f5cc6a581bd724beb30edcd46ba0800e5ec237cfffc3afaf15e9c0e1af64fb4eea42d548fe703cd4f26d9b7ea48430154ef318e4f97a4c0d6ccd72bae1b6066ab723d4380ee25335ee62687dfcfb03b9b15c760a8cde85b4e8862c5e67e1678c2f4a2e5ed3f209c9b25a574fa848f319268e69b254207bf2c1ed010de18fdc1a0712bcd81a9c3cc63e78a2e6628e16c2b2ff974f0e5e7d37e03f959c3230c7e1d61f10e74dbc118013f1650d00f4fca03baf5e0d903399a6db04b4e5efb17", 0xc3, 0x4}, {&(0x7f00000004c0)="a6f9b3c71000ac4f23ba5ce184a4f8af3fb27bf3ec688a80437931d5a1cdeb3fa2ab35a205e02a594bf54197a6f38fa8aef7c2fad346c29a0ec6976c5c1d15311ef0f4c13af53a8fe1f6b4f1047940d5e24382b2d7130fabfac685fdf7a8fb9873a2fc684f5036915d0403826bdbe9e72f04269f3d8b9f57f07096c9073fb77eb6cb0efc9ab90a222565bcedd73cc48b644ff8a662a45d45b1f676b757c4225113c256ebf170c5c9da4899c35a97575eb0bd4e077e5d0310b4b2ecfea8d303e3da825a603b22acca474c3ddce1bb9378f8ed000daeee13bba13cd88e83932f071c851d54010b6117605e85", 0xeb, 0xa90c}, {&(0x7f00000005c0)="c7a48209f07ca75f2600a3273a57d998f9c0fe4349d79b3b136900b4bbbd120275e70a1d0bcb1d31ca967acb14876bde6f14a74805e0db7333b2deedd629d5e3411ea983ea17d1c74ac630a6bff982b5c5ec4b514fe63fde99883fa116babf4ce083398320e0a2c7e8296125bd28b84d9d6e677ec69bf87357d72f30c6408256753d9c81eef46537faf55e1441db40107830a03a9585aa8f74c40ee9edb7c01006d3f5b5c2829259fa36d6507fe673a85f", 0xb1, 0x1}, {&(0x7f0000000680)="c15c4b0520f2f90b66147dc8edc617e97e5b2cffe327bf68a6461109a11d8df76aa7a4b04f328cea3d0d30f2bf7a2062aab8ac57d426948dbdc4f63d51a0ee2b6118626b0d8019e88a778f2252289d49e343e818e565", 0x56, 0x40}], 0x0, &(0x7f00000007c0)={[{@auto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x20}}, {@norecovery}, {@dax}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, 'bond0'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'bond0'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000880)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r3 = fsmount(r1, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000980)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) socket$packet(0x11, 0x2, 0x300) mq_getsetattr(r2, &(0x7f00000009c0)={0x7fffffff, 0x84, 0x8, 0xffffffff00000000}, 0x0) recvfrom$packet(r0, &(0x7f0000000a00)=""/4096, 0x1000, 0x40000020, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000001a00)="ff486e6f43309cc419814b58a200d1ae5f539f21b25ec096b7a8d2a95c44762173b3adeaeb960c6372ede097b7e4ed0f08a4fd36", 0x34, 0x20000000, &(0x7f0000001a40)={0x11, 0xf5, 0x0, 0x1, 0x6}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r2, {0xa268}}, './file0\x00'}) r7 = fsmount(r6, 0x1, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000001ac0)={0x7, 0x7f, 0x1, 'queue1\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x58, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x68014}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r7}, '.\x00'}) getsockopt$packet_buf(r6, 0x107, 0x2, &(0x7f0000001d00)=""/46, &(0x7f0000001d40)=0x2e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000001d80)={0x3ff, 0xfffffffb, 0x0, 'queue1\x00', 0x7ff}) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000001e40), 0x2, 0x0) 13:45:35 executing program 4: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) connect$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x16, r1, 0x1, 0xfb, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r2 = accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) connect$packet(r2, &(0x7f0000000140)={0x11, 0xc, r1, 0x1, 0x4, 0x6, @link_local}, 0x14) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000180)=0x7, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r1, 0x8, 0x8000, 0x0, 0x6e, {{0x21, 0x4, 0x0, 0x2f, 0x84, 0x65, 0x0, 0x1, 0x29, 0x0, @remote, @loopback, {[@end, @noop, @timestamp_prespec={0x44, 0x4, 0xca, 0x3, 0x4}, @lsrr={0x83, 0xb, 0x64, [@dev={0xac, 0x14, 0x14, 0x37}, @multicast1]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x34, 0x19, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x7fff}, {@rand_addr=0x64010101, 0x5}, {@rand_addr=0x64010102, 0x1}, {@rand_addr=0x64010101}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x2}]}, @timestamp={0x44, 0x24, 0x5a, 0x0, 0x8, [0x28, 0xcc37, 0x400, 0xffff8000, 0x973, 0x25, 0xffffffff, 0x46]}, @noop]}}}}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x2}}, './file0\x00'}) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000300)=@req={0xfffffff9, 0x8, 0x9, 0x40e}, 0x10) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000340)="d5e89a1a92b1df5300b64fc7dc6c5de8deb6e2ab90a525db66f4faec1a2a0e4e151e9d61d1c9d4905bdb2b683459441b8efb30efb354ada25f5d798352ca85d011d12e20d8b2df3eb8e57947d4c6db1469fa98f366b4e5e7a6e51cedbf60ede2a05fff7346fda29a67bb82a73dde7b43fa4cbbee6ec0899b95462c632b2c4f6e822aaf5e307eee7632bb70ad445c999808958bd769846db8d3e8b3c8cc31ac3aa161b3a6dbc85090b0fdf3d403be58cc95765443a05c5de82b", 0xb9) sendto$packet(r4, &(0x7f0000000400)="24166e1c296d528c7419e2b2dba0fc63f2c49da7e5d227068cbd1fd46ad3278a0770991988619f3e826222728daa382f934e2d93c6ccd5c0c0", 0x39, 0x800, &(0x7f0000000440)={0x11, 0x15, r1, 0x1, 0x6, 0x6, @random="9c5a18036a3c"}, 0x14) accept4$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14, 0x80000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'tunl0\x00', r1, 0x20, 0x40, 0xfffffff7, 0x8, {{0x18, 0x4, 0x2, 0x4, 0x60, 0x64, 0x0, 0xff, 0x4, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4c, 0x15, 0x1, 0xa, [{@remote, 0x52ee317b}, {@local, 0xffff1006}, {@loopback, 0x9}, {@remote, 0x3}, {@empty, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x67}, {@remote, 0x5}, {@loopback, 0x100}, {@remote, 0x4}]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r4) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r7, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40810) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000000c40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000900)={0x2f0, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ID={0x29, 0x3, "873f9251ac7cb916b9ea51c0dc802fc4669f915e2ba516ed40a70f67ad48fd294e6e9e3dda"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "43f069924462e6a3bb8a4c0984e52a76e9b978a91c"}}, @TIPC_NLA_NODE_ID={0x98, 0x3, "e2cf721d4c6f60962a0e9725e5fccfe7d7e72d2dc9f10b72bc3bacdd6a0f6f045513a75ca16ccd998a356e4284c685f201ad8cd949b65285ea8a6d17ba30030ef0ee06122bcd7c708d94bbd6a404b8dfbfb3570a539b21ec79a60a3d9a519d0ce2a07e3a3fdac8995af9814341e03501f00175857a3f275bb82a7f280efa80c98b4531759a89d416abf13de113a671cd957d90b4"}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xac76}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x48e6d7d2}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "6687425b9933f129e9b39c6b7d1fb396cd3b744ecafa2f8cc751"}}, @TIPC_NLA_NODE_ID={0x2b, 0x3, "cd26f293886fe545ae1162f299e0f745757557b86af1ace9e9fee092386d220798f465bbf1154f"}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x56496d992871e46a}, 0x10) sendto$packet(r2, &(0x7f0000000c80)="19f1938032a9ea2f93d28f1b35218c3af9630749da18918b4a637135ae0af6a02f21274620c16f448578b5b36f67c218e803d26f998628e5f2a34bd7d6f8ea8c4a7530f6463600a02ba68956dd236c0c9054f05f78028be6f7aba4", 0x5b, 0x14008846, &(0x7f0000000d00)={0x11, 0x1, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 97.396938] audit: type=1400 audit(1737985535.355:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:45:35 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffc}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2, 0x7}}, './file0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5622}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {r2}}, './file0\x00'}) r6 = fsmount(r5, 0x0, 0x70) io_setup(0x4, &(0x7f0000000380)=0x0) r8 = mq_open(&(0x7f00000003c0)='\\/]{\x00', 0x40, 0x102, &(0x7f0000000400)={0xfff, 0x6, 0x7, 0x25}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) r10 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x9, 0x6, &(0x7f0000000a00)=[{&(0x7f00000005c0)="c0ce4bfd66c807c2d7ed6d68261e1f013346d0876f96acb701958fcc85990446d7fa23118e2638f1291f4da84f7fb70bd9f91b341c4f0838ce1feaa0297c1310e8e6ca958180e307c1460301800ccc03ffb9588d8b5b4f73c2d5192619c93bd15f84a9e6a9c7df326ee0872c25ea22e560e0cb889c8b84ef05cc50bd0d3bfbd66d0dc7aa40042044334735cf14906e166c1f849b5ac20596c8386c214e9451", 0x9f, 0x2}, {&(0x7f0000000680)="ab8916bf96c2ad884e76928abdcb73117fe1a3580b031b829b341f4adffef2c3f2d744568b99e3f77efd1f0e3367968761630b103e5a2b767673209f560b5fef04555baf01de17b2c3d1c1bd3c17d43f98169b1cd0fb72da1e2b4f876b4f56b028065bf249ef78c00bce8c5ecc914c1937a52cbc5a04389d0b752f1882733615d7fd7fa0b3", 0x85, 0x5}, {&(0x7f0000000740)="5069a1f0d177c17246101445e69bb4b717ba475e483fbc77d0ecf83d535440fa212a68f50ce8253ee909e80b2ee8c82d47ab4e960739d74f388be8a8b4237a0461311dc2c36d903fc3c60d24854346abf36cac628a33581630a3027c0bfb80fe2c38a33a59e0074f02fdc4997e6f37258d51f15e3373b267af0851cf323738a27091beb383f06c423262df7c0a46c9b6d8cc0de3ad5906273490e8edcdb1093e3d31817621827faa0541c5caa084c6f2c07e630a161fc39cc0c4d9f19cf98e2ebca92960e6fbdfb7447341c7849f87ee77852e80b636015134c278beef30a07f0afe1d22dede97528d", 0xe9, 0x1000}, {&(0x7f0000000840)="34c8cde170fb2e8342cc4007702d5761b0739976b33154a40f67149bd33278b8ee7209b7f69e82a9167c6eed776be93cd7e821e9aa52864ebd08dd13228bf887f36fb8e3d592a60f28080c612f99b4b741fa4d08cf671bbd25edee8c1d9d16f05856b3ec8ddde71345c42f5f3d62e00fbbb49a595343b7591f168cf4e14b93aeb886411a260b518309919d7d288fb218ac40d2f549cb8ec8d28ca192bce1891a589ee5f1d0f46e584c01616b27943e755891d2b22656e442cce3c33bbfd1e87e35a1ba55cab57919d233e10da34b8e1a40", 0xd1, 0x3}, {&(0x7f0000000940)="592bd40b3c86623a2ed4e9fcbb7579", 0xf, 0x8}, {&(0x7f0000000980)="baeb96ad615a8e0d54504514f20e7b7f7efdc10ffa223422ec715085c0468b7a65de58952bd8f2af555afab93f61a6c739b750b4c8f425b5106b56d339d65910494cf786", 0x44, 0x1}], 0x1880c00, &(0x7f0000000ac0)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@grpjquota}, {@abort}, {@nomblk_io_submit}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_hash}, {@euid_eq}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@audit}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) io_submit(r7, 0x3, &(0x7f0000000dc0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x7fff, r8, &(0x7f0000000440)="6d1b9f769c2f819de656332e988a36fd45e32c72cb1cce82f852234e0f416f9cda2483db85e4d24a15d51ef35282835e90a865afb62be7a906c9d2b14afb748fbe6090af867fc625831a0e1d521d00f7f78a5c947162b0d1dbb52cb94817ac779debb617f27c4c1411752f8292cdcc2eb5", 0x71, 0x0, 0x0, 0x2, r9}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x6, 0x8, r10, &(0x7f0000000bc0)="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", 0xfc, 0x1f, 0x0, 0x1}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x8, 0x1, r3, &(0x7f0000000d00)="71edb975868d59e68a696b5ca943f9ff1f3e429b98a8fe5f277cfbfcbd4911603f7d635f13cdbaae0e6bfc9008995318a8ff40ac32820af72abd9f723c186e81b019fe4bcbc08fcc9ac212f9a9a8cdf550bccf50cecba8", 0x57, 0x6, 0x0, 0x2}]) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000e00), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r11, 0xc0189373, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r12 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) write$tcp_mem(r12, &(0x7f0000000ec0)={0xfac, 0x20, 0x9, 0x20, 0x9}, 0x48) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000084}, 0x24000080) 13:45:35 executing program 6: io_pgetevents(0x0, 0x7, 0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={[0xffffffff]}, 0x8}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x70bd26, 0x8a9e, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4006}, 0x80) timer_gettime(0x0, &(0x7f0000000240)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6d225c99}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x80) pselect6(0x40, &(0x7f00000003c0)={0xc21, 0xcb, 0x6, 0xa9e, 0x6, 0x4, 0x8, 0xa1}, &(0x7f0000000400)={0x7f, 0x4, 0x7, 0x48, 0xfffffffffffffbff, 0xffff, 0x0, 0x80000000}, &(0x7f0000000440)={0xa4, 0x7fffffff, 0x800, 0xfffffffffffffff7, 0x1, 0x4, 0x2, 0x7}, &(0x7f0000000480)={0x0, 0x989680}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x92d]}, 0x8}) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x18}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:shadow_t:s0\x00'}]}, 0x48}}, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) mq_timedsend(r1, &(0x7f0000000700)="4757efea1f5bc2", 0x7, 0x1, &(0x7f0000000740)) clock_getres(0x4, &(0x7f0000000780)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0/file0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x31855b93}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20080085}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000900)={{0x1, 0x1, 0x18, r3, {0x6ec1}}, './file0/file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000940)={{0x3f, 0xe}, {0x40, 0x6}, 0x81, 0x0, 0x4f}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xbc, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4b56f1fc}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5006}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x95a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x58000}, 0x11) r6 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000001e80)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000001f00)={{0x1, 0x1, 0x18, r4, {r3}}, './file0/file0\x00'}) io_submit(0x0, 0x8, &(0x7f00000021c0)=[&(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x7, 0x7, r2, &(0x7f0000000b80)="9735b9793cddce6ec89829223267178a050e49835dd6989185c0cf44424c619722cf0209b12f4390658f1859198f82ea2d", 0x31, 0x9, 0x0, 0x3}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000c00)="442d68fefc65a2be1c162e3f35f98cb248a484f241a5b04330bfa046365237d0ee6798e88f9f60d288e308fe6d594ec5d867ba4fe3c452936882fcda1ba077c43e22b30a93525c3cec0c41ba59664632c5", 0x51, 0x4, 0x0, 0x1, r6}, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000cc0)="d2ebc14ab80b38b59b1c7a9296d23408ee889223e21a3105cef590d0345e9335b028013ba5bc3167f2f9a9bd787dbb2414993329aa63a84238e9916efc15725f6c384699736b9edf92eab1e7e42d6b26372ef45a41cf5864c51af77731f9f3d3c77831a8e300dd36fab05e8adc9db4efa83612dce04ee986efaa6b753b7a33b349e9b947eaa7d6a3e8c6ab7dfb615813a45f9bf8320977b770e18f9e7127f2166a21ed98ec5f463e67cd6c2f5b992016dba434ba64c606b7e593e6647a602ffed58fd09b69c3ea7e16a8c049f1d1fcdba64715ceee1222ca26f81be255de35396d5201d6bc48967890fd428731db4a88f23fac165f44b6e2ddec12bca7953ef8c526dcf5a05f5bd3fa6a11049b7904b39387ac3fbea7b8e0e558cb6c56c7be7a483054e026f539b71ab0f1776a96c893629b9f112b866817ccb790fe3b96355ff91a5179f0544a10202359d453258b26f8515caf228bd5a47e06da08ece922dbfa2a7b60dcdd0bb4f913116265d54a3b0576bba639afec966792e61703197a825e71cf3cfe12b60111f5b8b4f89950cc44cea9888c2cf4373a0a95ae86ad919ca309efb3514b98faa19e1be5b53a87269eb7a52129611ca621c046abc99e75eed547dddd439b6b708cf63116c9faac674fd2cfd08c17dec5f4876f9e95b1fe236c007d998b216367f78ef61848f89d514f9b9237d048fade1c15ef842ce21f7b489385e3689615a44a76d5a25b0868c6dbce254a4fef24343bb5b9f5c8ed0d6c359061c8e0366bf70399635fbeb304ab878aebae476d28fff03f7790b4b9e2bc11a53cae10799a6a98bef285c6cd19dc99050b3d68cb992606f70655ef3a4c5d11ba9b15ba5b4071c1f89970db20f211648c4e5e7a0de2d9a989e345c0f80bfb6307b160626a17df8f114f5e95be3e8f1c919a7a9fa755eeeaa363b5ca6bf8bd048b681df42a0b8622ebf279dbf1d3c9ca98643082aaaf5e1499154cdfa80e4f9fcf5f8822079717567f4b23487e8e1e25e824bd2c2d225b1bf76c6c90fdadf551091aba7763bbc68b9f056b00eec5a28207f9afa203d9d449872d68403b0e07733d347e96168761ac88444b1d4cf8fb1f7c4deaa96e4efa3731da4f028a073d56ac6a8e0e396e3bddfbfeabc7c5c9b3b34b5f50da030092ef1e7bb83df4ec71fd8861a7f6dde5b9fc33c6a96bff41d5fcbdbb9cf2c65c7857aa7b9a1a05c5de0276fbac9cc49f939018fba2cff3ede0e5bef95abc733c26c98c65f038999a3a41b96d7453b4c5fc8a9a004ddc888b6d960319dce7cb82e39720108af5ca1e37aa6e0a8bceeab775124377b7da5691f00e603b8ba8cacf8a8dfdf4de63fdcdcdf346f8400d8e5ea97125fb7b2229e314c55a7699370f9dffa93c974f3cc301ec8ff42423d0e22e3451d3ab6406e1c9f2c4fa92a6e66b9bf5d1204e8b18918b68ac71bb4afa3bfd7b73656de2a2c761acbf185e5ddfb2bca822f2340eea933bcd42fc5a918514dfdaf16947a449aef25610267cf7a6ecfe62c24d99935dc6e836b430e4ea723d6bf820e637c4b1da463b0d8fbf31f0f0bc01ceecb7f38b8b7a896881a02432076ba7ef2c4cd7a383cca1ad28c14a9bc1f9da484a0ec490dd5f23714686da90286a3fbf2ceb24a33c4421c52d67b4e27bb4b53c022bb506bf459c13d3b1295682351aa28aa6d6580ea6b83db6ac73576711be6c189967f227b4a3aaaa75f6e6e93b9082276ecffe550e325a41a5734ef0670832556bbb732d24471b76bbd8034eee2d10f89b2c0e7a531d7d2a6ec4ca25d118d7b58976cffe9fce7e2d1786d1f2f2bde1c39a2a7deb5b560110a23df5aa9a111488b14c8bb116017c1fa0806577c913286d157d8c78b160b667ba86bea770fad25dd5d8a1f7a443602ae0f45a61b38902c7b89a8222696a3eade087ee4b12b57f4d4e77ffc0e2b979410e56477852688a1237d54084869906b66c4a938001a3d8c97c4e62aac1224d18b6d0840afcd6d546f6d5895991136ed09761de91ba5a5e3be529188fae42aa26d55e92c734b0e902ab96b44894415ace6fa3f0b3fa8dc41e25c1db1eeca92e39624938f6fba2d668ba695bdf089961a40432692310051de817a668999050ebc7b6f82813edf1a332a24744fe9aba4a3553a2a38631864e218390f62cb2fd8c88b53daf829be35c4f6d64cc61efad2eb9b8c050a07d80bbd5a1fd274bb94e9cf950afcb53530c370f04d3756fc5db5bf3b8d79002767350c0bc52408d644155db8b8a69eddbc1ce7ec1dcba6bea693ef2d1c760f55784aa5053d02b0d8b15dcf9f8dac3ebc6851aed30f13f616da1d2d79fed090420745bbe2121687b52c9966147f15e725bf20c206ec5fd5401d148c90f5cbc826cbf246fda539b7190454453bb099e4989db4196ff97035fcbbcd26a57c54f4ec9039ca0f637222ed2fdc3fbf3a1aa5b5ae9b911f5c844a7bf9ad1f083fe0a31d044ece42d4b46ba0279e0e87f955ad462cf32080dbbe3adbb557e537c9874dcc929f3cee8a907899bad8dfb5eaa24d9a0d410f4f7db9e9ce4efb438fb0ca5c04007fcf5b65f8c80049a58a4af9fa98c3000a729a4a053367d138f416d9fa0335c8561a3cb77009ab6e15217ccbc257e2f876bececcacc94abe26bc49f55b03a05b37758f491da593969965678a2ba52b33848457ad1bc86638c257e37ed855dfdda0ecb39bba25562eac073580465d31849e2703bad991adb083051e80699cf6c2d50e2f90fbda29862fc29be69be6f0c6e86dc095d7505dccef324dba954b1fe0929900dfe58e61944fde0c19f3da1b75316d37536bba8c8d8b32f458622acff33b33560577305ca0cb287c007080708a68be2bab7a4d7ce714a77495d26142fc10b1832254a91ef657b53b10e5fa98db22c9f659cf29ccbf57cfc9f4f5d1f6765f236b5d3f98b46132916813403a1621770b75f113f9519663e5dd619c2b9924de8bfcf0d39e48768db463a96b28d2500b804eb0f759b550116a5b96f4257057ea8ef7ce3f77f92376a21024ed84b1e6202e4bcc0f3c90768224f17c94237d36f0eea43a21c75d50086762e0341d96a34ea129faf2a6831bedd794ae807db4668099fc37c3bfe5b31e3bcdc51f374913aab11beb47ba80bd754cdf01e5f15f4b7bfdaad356b001ab8c8ecff9e941b3618f659814d60c587eb1c9dcecaa45e16121237f5deb10e715f3afb21a4f87e9f0b5421fb5eac75d712d6c2e47d8a75c62c1666365629351d12c50580e8a6b0f070570baf3585164dc1d0d319005d28ad295322d787cbc4998ff06f9e4aabb8092077e8fefa7bb9261703ac158b65d3e64ffb9e02a5cc410ff94fbef230ee2589c456f57ab2baf43905bb57deaf737cb719cea0aef2991049e2fd7550de49e22c16729fcb1b80db6e466f662ea80e18531b57b9434941f763600cd2eec05673377a98b38a96d999886542f315ce369e5ecbd8b589a049e04984d5a93570673662b254f66a8f11e6e1c7f583128c8cf9280893a0a3990eb511a22ecd70aa71134e3dfc3aab69bccf8c4036ffda84fc91f544e42f1524a3c2b0485e75a1339ebca8f9834ee48ff88d16a2b02202ba7365acefee4d31b90045d7d33b942ca2ed97e34c091fc3ab5b05031136a0aed599a5b919006509081b9e5a4ba2927356a1147cc3fdc8599330939d4dbf35f5c1f7aaecbc56d73f72ff45c6d99fc4b41e926d797132b655a77d9ab35971981b19451de695dc881bc444a95ab5596d663e59002ee3b8343da08e6406c6df9cc4aefdb0481e4c2873c5a6c6ee975df09a3149712fc3d2b6cb82de5a5ea2bde3ebb17ae8c0203968c0c47a610263ab7d8ac85c5b9e17d0c3c5ff3b9ee25f2a8f1977c86db50aa2d1da610ea31d4ce8f7d2ead7aa5b2aec4f609762151d33f14597b2e244825c273fddc7df91d012b664021c5d66c6e05683df3f8dd5808dc1a95ea80ee525b19846cb208d54befa5f8c73f52f04a05801ad02ad610c1c2ca12cb28bb8e24ea327b6552fab75beccfd363f43f0d0beaf7382b269cda38977e8705d17b5b8268ffaf3a60aa1a2f2d749e0daee4096b640de5235ebe8d7589c9b84423f93599a8fd7680c7fdc9aad785ef181c2c9368e3ea08cbea0db926b2b89726dc367062a810690bc086428f4f6367ee66f6706d1bf064a22ee7eccddf244727c00042fc02b62d55c97c4ed54ad60af14d9d704ac1716b41b7ab9b467bebb8a2dfd4413746db87eb55e0f8581dfd47a6d635af48327aa6dec5a3c7dea8db2179fe1032ac6b3e33099a18fc6752a06e006ed251abf1b10b2d6b76168f71206cc3338babc319e95df232820d6595637f619c5df71977aa802d6dc066e1bb47d7118ffef580d33f8a546106273ae4bf911d7239f061f4bddd22012fe38b5f5cbd8ba3bd4e614a3df88a7552c7dece8ec8aa4fbd35db1a9dddf829f98b845a3f94b9b4d53ec86a58e100b3631bfaa9331c72630d677a5a3af9b136784e0abe4190dc61b68834f8ea3aa95da3f35dd0dbdfcc90fd7e3ca274a5f23ec9b0175b32c2c40dd1a53c3289746bd223344a67db7f9910f6e7ea1f2e1b87cd9327846c5467cc95af6be9a899f31795f24146ac02b21c887fd73f62da1f51e43c3154b617b99286a14a213cf501e3393212b15477e4d48e95233ee986aaeb377fced69320df19281d5e63af983d077511863cca29090958f9458d302615ade5fc7023683e5506de232947c394b8264e58024ba03ac4f5cf0aa4b82fa83583ca8257fa6a09090c4b9682263478abb9affa4ce4b6c5acdf418a19bc66a26bfc7342aad0bad914a33b2e0f80f49f0a9ff0ff357b2a4306d40cb52f344875290bd6d434deb4cbfe353df12251acd5a05cbbfdd43aca91a5850b7eb2633c3115614627dc8acc67e1b137ec7fe73c41bf16ac48f8ed9be94061a8074d094a27acd32a5f98ce14101f9382468090e795aee375974e0f1a5b7c73e929085fc3a165ed254f1903ff33298e42f8e27f4fdbd5dfd836cb70c81df62089071e5621a1a720cb160ff1d5abafb4e4d19125f506ec7467865509acae221cb698682fe50ad9f4b30057f21872cbe8edaa209c68c8017b9eee448e20bfe52b4c8d6b6bc27a738dca0626ab26d1a4c305f1b70fe662a1cfacb6f9ba9ad81977dead3273d73f96172fb679be151398d06aed4d3395c4a4ae7e80b840342a4ab1012247872b84cc685057e0e0b3016496d30235f273c2d98a01fe0f199e45d9607f3e53171f89f7a17c9f793387881d493259dffc9134bb8ab40e069b199502216e7dc78a751a39d90027cd432d20930546e6dfa7623b286036365a41f120828290f9b0eacbe156e55bc3a20c40ab27de2a616e0139fe4ab38128acf9efdf0fca7bc13584f3f5de14a9984e16a38ad204023e3340ef960d79440f6067cd4534b0abcccba054109eaa079f0ac16e046ab7bc227200c9e8226fe70446f404ca9f4458b4d993667819f5b7c042faa5da427bcc86be9850c45dacbfdcb78b130bb6335839209096915de94f6b8d8ceb79f131853d00d20c14470b28a5e343d71e2cf1d9b07a8d59bb629a9afea4107e893128d43a7a0b2be3ab0ab052a3912b7807239187ba659aa956941c69f87922975225070154979fcb3397abc9842ff934675ed35c0636af0d213edd6eeec1742e383d5f7e0ecc298faa2ad83592f7862404afca662b182c8b36ff346b150f0dff65c073b35b6db07c4e02d32ffe6c9de630334cecd49a325f5f80eb5db36951c18047a6eba871c6a30c7a5d9285d9fff", 0x1000, 0x6, 0x0, 0x1}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x6, 0x0, r3, &(0x7f0000001d00)="cda8853e0c47235a22fc557af001846373e48d24d3b34297f4c57f22c73310b089c0adb72eaecd039f7f528c2cfce9d36c2b09b04f96f25a77305b56fa4753a2b1d96a7c9fd5ce5ecd6090a1b70a7fbb6a", 0x51, 0x10000, 0x0, 0x0, r5}, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x5, 0x654, r1, &(0x7f0000001dc0)="c78f35b062493413c1f20c239753bd725d2534e257799439214c24c208fabfb43bbafbf85af12fbbeef496f96f53a40e5e80a82b92655f8eabad7a200689eeb060548fd3384a354e76fe4fec6da6ae7b82dcaa24c5385e4bb2f728d2cd975ceedea139ef1f8cd0e63f2feb57e762d8c008c0c922ad5b30a92f93350eb06a9b890ecaf5e1", 0x84, 0x200800, 0x0, 0x3, r7}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x8, 0x2, r8, &(0x7f0000001f40)="47a65e34e95d552ca4bfe16ce0f45f01e6274bcc645f75fbf659db35b6f50eec1bbda22bf12df80f454e7e700d33c2151d87210d62903934645e92e321635b86ee893100d326d946dd31b81401e30fb0931695eb76083ee82b6bde9676dde569e63a62dac2cd7b373d9a2111dfbf0986d264a41cdf01e5c5f5c66033831aa11b2e5bca73aa70c66e6435e7a262b4fc984266c5cba4c0a02ce93538882f02cb7827db36cfb36a1426cb44a9fad262b544235226bd70f32b3a97bf32324ff90211a63222cce0adad33d0c25d795d2afbb7fb65fffb", 0xd4, 0xff, 0x0, 0x2}, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffffffffffff, &(0x7f00000020c0)="0469366f4f026a8bbeb1f28348af39f0cffa3617d51f2c6e2beb", 0x1a, 0x7fffffff, 0x0, 0x3}, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f0000002140)="ac8f85759285c7bb13d2ff1be6b2fe8cf9a03449e6f57361b38768", 0x1b, 0x100000000, 0x0, 0x3, r2}]) 13:45:35 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000040)={{0x6, 0x80}, 'port0\x00', 0x8, 0x4, 0x7, 0x5, 0x8, 0x7, 0x2, 0x0, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x80, 0x9, 0x1, 'queue1\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000001c0)={0x74, 0x4, 0x7, 0x9, 0x7fffffff, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000240)={0xa195, 0x6, 0x1, 'queue0\x00', 0x7}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x71) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000003c0)={0x221, @time={0xffffffff, 0x974}, 0x9, {0x0, 0x80}, 0x6, 0x2, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000400)={{0x5, 0x4}, 'port0\x00', 0x0, 0x1000, 0x2, 0x1a, 0x1f, 0x8, 0x59f, 0x0, 0x5, 0x3f}) r2 = memfd_secret(0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f00000004c0)) getpeername$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) bind$packet(r1, &(0x7f0000000600)={0x11, 0x8, r3, 0x1, 0xe0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x689e, 0x1}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000680)={0x310, 0x0, 0xce, 0xfbe, 0x440, 0x10000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r2) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x16c, r6, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffff2a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe0000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffe14}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5192}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x904}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @private0, 0x9}}}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9d11}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x4000841) accept$packet(r1, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000009c0)=0x14) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a80)={0x2d8, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xd0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2216}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff1c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xaa2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x986ea69}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1e3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff9e}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x483d}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff08b0}]}, @TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6c5}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x1f, 0x7, @loopback, 0x56}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @loopback, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd14}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd4cc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x10}, 0x4000880) [ 98.670695] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.672939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.675011] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.679482] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.682164] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.684650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.724029] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.731588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.733539] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.739199] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.746544] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.750085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.803095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.806812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.808043] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.814076] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.817990] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.820790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.978159] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.996720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.005884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.009073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.010118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.014102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.015709] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 99.018525] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.023498] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.033240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.044079] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 99.051172] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.057706] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.062919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.068786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.091612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 99.105154] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 99.108765] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.124202] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 99.127813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 99.131561] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 99.135243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 99.136765] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 99.137968] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 99.162733] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 99.182428] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 99.200727] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 99.221068] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 99.230706] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 99.236120] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 100.758886] Bluetooth: hci0: command tx timeout [ 100.821507] Bluetooth: hci1: command tx timeout [ 100.885418] Bluetooth: hci2: command tx timeout [ 101.077441] Bluetooth: hci4: command tx timeout [ 101.142412] Bluetooth: hci3: command tx timeout [ 101.205466] Bluetooth: hci6: command tx timeout [ 101.205488] Bluetooth: hci5: command tx timeout [ 101.334526] Bluetooth: hci7: command tx timeout [ 102.805523] Bluetooth: hci0: command tx timeout [ 102.871370] Bluetooth: hci1: command tx timeout [ 102.933441] Bluetooth: hci2: command tx timeout [ 103.125440] Bluetooth: hci4: command tx timeout [ 103.189558] Bluetooth: hci3: command tx timeout [ 103.253700] Bluetooth: hci5: command tx timeout [ 103.253751] Bluetooth: hci6: command tx timeout [ 103.381554] Bluetooth: hci7: command tx timeout [ 104.853483] Bluetooth: hci0: command tx timeout [ 104.917890] Bluetooth: hci1: command tx timeout [ 104.983443] Bluetooth: hci2: command tx timeout [ 105.173871] Bluetooth: hci4: command tx timeout [ 105.237433] Bluetooth: hci3: command tx timeout [ 105.302437] Bluetooth: hci6: command tx timeout [ 105.302510] Bluetooth: hci5: command tx timeout [ 105.430077] Bluetooth: hci7: command tx timeout [ 106.904417] Bluetooth: hci0: command tx timeout [ 106.967261] Bluetooth: hci1: command tx timeout [ 107.029414] Bluetooth: hci2: command tx timeout [ 107.222475] Bluetooth: hci4: command tx timeout [ 107.285468] Bluetooth: hci3: command tx timeout [ 107.349591] Bluetooth: hci6: command tx timeout [ 107.349619] Bluetooth: hci5: command tx timeout [ 107.481016] Bluetooth: hci7: command tx timeout [ 158.786822] syz-executor.7 (282) used greatest stack depth: 24016 bytes left [ 161.322092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.327069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.329724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.337716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.339896] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.343529] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 161.345094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.347385] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.348691] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.358686] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.364501] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.366893] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.422976] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.439895] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.441582] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.445697] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.447124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.451703] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.454483] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.456283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.458109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.461017] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.464105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.468529] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.472122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.473941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.476924] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.504527] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.508765] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 161.518261] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.522673] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.536212] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 161.538207] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 161.539598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.543762] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.551294] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 161.555473] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 161.557556] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 161.559638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.565880] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 161.570539] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 161.572062] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 161.573014] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.578447] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 161.590576] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 161.600638] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 161.604475] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 161.609640] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 163.413567] Bluetooth: hci2: command tx timeout [ 163.477472] Bluetooth: hci1: command tx timeout [ 163.605510] Bluetooth: hci3: command tx timeout [ 163.606910] Bluetooth: hci4: command tx timeout [ 163.606943] Bluetooth: hci0: command tx timeout [ 163.669412] Bluetooth: hci5: command tx timeout [ 163.669491] Bluetooth: hci7: command tx timeout [ 163.670025] Bluetooth: hci6: command tx timeout [ 165.461544] Bluetooth: hci2: command tx timeout [ 165.526469] Bluetooth: hci1: command tx timeout [ 165.653521] Bluetooth: hci4: command tx timeout [ 165.653560] Bluetooth: hci0: command tx timeout [ 165.654017] Bluetooth: hci3: command tx timeout [ 165.718476] Bluetooth: hci6: command tx timeout [ 165.718504] Bluetooth: hci7: command tx timeout [ 165.718899] Bluetooth: hci5: command tx timeout [ 167.510390] Bluetooth: hci2: command tx timeout [ 167.573435] Bluetooth: hci1: command tx timeout [ 167.701459] Bluetooth: hci0: command tx timeout [ 167.704645] Bluetooth: hci3: command tx timeout [ 167.705076] Bluetooth: hci4: command tx timeout [ 167.766475] Bluetooth: hci5: command tx timeout [ 167.767053] Bluetooth: hci7: command tx timeout [ 167.767928] Bluetooth: hci6: command tx timeout [ 169.557436] Bluetooth: hci2: command tx timeout [ 169.621389] Bluetooth: hci1: command tx timeout [ 169.749457] Bluetooth: hci4: command tx timeout [ 169.749912] Bluetooth: hci3: command tx timeout [ 169.750389] Bluetooth: hci0: command tx timeout [ 169.813485] Bluetooth: hci7: command tx timeout [ 169.813943] Bluetooth: hci5: command tx timeout [ 169.814448] Bluetooth: hci6: command tx timeout [ 223.290633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.295861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.299118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.307192] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.310224] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.314959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.396104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.398758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.405276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.416494] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.425755] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 223.431799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.612717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.614549] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.619886] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.626953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.626977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.635743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.643819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.644474] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.653732] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.661884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.661960] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.671597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.730532] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.745882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.757007] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.770071] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.801877] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.827818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.844055] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.850607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.860916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.864452] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.871238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.880740] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.886876] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.888952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.895020] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.897714] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.902535] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.907027] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 224.026549] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 224.040939] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 224.084810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 224.148943] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 224.169946] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 224.184908] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 225.365430] Bluetooth: hci0: command tx timeout [ 225.495376] Bluetooth: hci1: command tx timeout [ 225.750428] Bluetooth: hci3: command tx timeout [ 225.813376] Bluetooth: hci2: command tx timeout [ 226.005514] Bluetooth: hci4: command tx timeout [ 226.005572] Bluetooth: hci6: command tx timeout [ 226.069938] Bluetooth: hci5: command tx timeout [ 226.262413] Bluetooth: hci7: command tx timeout [ 227.415413] Bluetooth: hci0: command tx timeout [ 227.541522] Bluetooth: hci1: command tx timeout [ 227.797501] Bluetooth: hci3: command tx timeout [ 227.863359] Bluetooth: hci2: command tx timeout [ 228.053494] Bluetooth: hci4: command tx timeout [ 228.053519] Bluetooth: hci6: command tx timeout [ 228.118508] Bluetooth: hci5: command tx timeout [ 228.310397] Bluetooth: hci7: command tx timeout [ 229.463366] Bluetooth: hci0: command tx timeout [ 229.590365] Bluetooth: hci1: command tx timeout [ 229.845680] Bluetooth: hci3: command tx timeout [ 229.910359] Bluetooth: hci2: command tx timeout [ 230.101426] Bluetooth: hci6: command tx timeout [ 230.102426] Bluetooth: hci4: command tx timeout [ 230.166411] Bluetooth: hci5: command tx timeout [ 230.358392] Bluetooth: hci7: command tx timeout [ 231.509413] Bluetooth: hci0: command tx timeout [ 231.639335] Bluetooth: hci1: command tx timeout [ 231.893375] Bluetooth: hci3: command tx timeout [ 231.957394] Bluetooth: hci2: command tx timeout [ 232.149426] Bluetooth: hci4: command tx timeout [ 232.149454] Bluetooth: hci6: command tx timeout [ 232.214368] Bluetooth: hci5: command tx timeout [ 232.405499] Bluetooth: hci7: command tx timeout [ 285.672161] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.678479] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.683482] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.694164] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.704723] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.707063] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.981512] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.985988] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.987240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.990039] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.991782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.993755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.996242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.998880] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 286.000341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 286.001710] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 286.033109] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 286.041772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.058793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 286.063452] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 286.066941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 286.116916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 286.139999] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 286.152158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.197048] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 286.201228] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 286.204966] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 286.228865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.263762] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 286.265083] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 286.270156] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 286.271691] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.271803] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 286.277892] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.306233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.307929] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 286.316665] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 286.321180] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.324503] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 286.326181] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.329183] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 286.331089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.356016] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 286.358723] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 286.360679] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 286.368818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.377506] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 286.384721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.765606] Bluetooth: hci0: command tx timeout [ 288.085485] Bluetooth: hci1: command tx timeout [ 288.150384] Bluetooth: hci2: command tx timeout [ 288.214966] Bluetooth: hci3: command tx timeout [ 288.469512] Bluetooth: hci6: command tx timeout [ 288.535389] Bluetooth: hci7: command tx timeout [ 288.536102] Bluetooth: hci4: command tx timeout [ 288.600339] Bluetooth: hci5: command tx timeout [ 289.813544] Bluetooth: hci0: command tx timeout [ 290.134372] Bluetooth: hci1: command tx timeout [ 290.198492] Bluetooth: hci2: command tx timeout [ 290.261478] Bluetooth: hci3: command tx timeout [ 290.517480] Bluetooth: hci6: command tx timeout [ 290.581429] Bluetooth: hci4: command tx timeout [ 290.581964] Bluetooth: hci7: command tx timeout [ 290.645442] Bluetooth: hci5: command tx timeout [ 291.861379] Bluetooth: hci0: command tx timeout [ 292.181372] Bluetooth: hci1: command tx timeout [ 292.245412] Bluetooth: hci2: command tx timeout [ 292.309726] Bluetooth: hci3: command tx timeout [ 292.565411] Bluetooth: hci6: command tx timeout [ 292.629388] Bluetooth: hci7: command tx timeout [ 292.629859] Bluetooth: hci4: command tx timeout [ 292.693353] Bluetooth: hci5: command tx timeout [ 293.910413] Bluetooth: hci0: command tx timeout [ 294.229548] Bluetooth: hci1: command tx timeout [ 294.293482] Bluetooth: hci2: command tx timeout [ 294.357686] Bluetooth: hci3: command tx timeout [ 294.613434] Bluetooth: hci6: command tx timeout [ 294.677411] Bluetooth: hci7: command tx timeout [ 294.678010] Bluetooth: hci4: command tx timeout [ 294.741354] Bluetooth: hci5: command tx timeout [ 346.097107] [ 346.097562] ====================================================== [ 346.098686] WARNING: possible circular locking dependency detected [ 346.099843] 6.13.0-next-20250124 #1 Not tainted [ 346.100731] ------------------------------------------------------ [ 346.105546] kworker/u8:1/64 is trying to acquire lock: [ 346.108818] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 346.110719] [ 346.110719] but task is already holding lock: [ 346.111779] ffff88802ddc0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 346.113606] [ 346.113606] which lock already depends on the new lock. [ 346.113606] [ 346.115041] [ 346.115041] the existing dependency chain (in reverse order) is: [ 346.116403] [ 346.116403] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 346.117670] __mutex_lock+0x13d/0xb50 [ 346.118573] wiphy_register+0x1b2e/0x25d0 [ 346.119503] ieee80211_register_hw+0x23a4/0x3d60 [ 346.120521] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 346.121618] init_mac80211_hwsim+0x389/0x870 [ 346.122612] do_one_initcall+0xf9/0x640 [ 346.123550] kernel_init_freeable+0x53d/0x7a0 [ 346.124585] kernel_init+0x1e/0x2d0 [ 346.125407] ret_from_fork+0x48/0x80 [ 346.126241] ret_from_fork_asm+0x1a/0x30 [ 346.127199] [ 346.127199] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 346.128382] __lock_acquire+0x29fd/0x4580 [ 346.129313] lock_acquire+0x19b/0x520 [ 346.130156] __mutex_lock+0x13d/0xb50 [ 346.131031] unregister_netdevice_many_notify+0x1612/0x1c80 [ 346.132216] unregister_netdevice_queue+0x224/0x2e0 [ 346.133284] _cfg80211_unregister_wdev+0x57b/0x700 [ 346.134346] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 346.135411] ieee80211_unregister_hw+0x55/0x3a0 [ 346.136436] hwsim_exit_net+0x3a0/0x730 [ 346.137336] ops_exit_list+0xb3/0x180 [ 346.138196] cleanup_net+0x546/0xad0 [ 346.139055] process_one_work+0x8ee/0x1a10 [ 346.140032] worker_thread+0x674/0xe70 [ 346.140935] kthread+0x3ab/0x720 [ 346.141734] ret_from_fork+0x48/0x80 [ 346.142545] ret_from_fork_asm+0x1a/0x30 [ 346.143490] [ 346.143490] other info that might help us debug this: [ 346.143490] [ 346.144948] Possible unsafe locking scenario: [ 346.144948] [ 346.146044] CPU0 CPU1 [ 346.146914] ---- ---- [ 346.147781] lock(&rdev->wiphy.mtx); [ 346.148563] lock(rtnl_mutex); [ 346.149678] lock(&rdev->wiphy.mtx); [ 346.150880] lock(rtnl_mutex); [ 346.151566] [ 346.151566] *** DEADLOCK *** [ 346.151566] [ 346.152676] 4 locks held by kworker/u8:1/64: [ 346.153519] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 346.155470] #1: ffff88800bbc7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 346.157184] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 346.158344] #3: ffff88802ddc0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 346.159654] [ 346.159654] stack backtrace: [ 346.160244] CPU: 1 UID: 0 PID: 64 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250124 #1 [ 346.160300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 346.160334] Workqueue: netns cleanup_net [ 346.160395] Call Trace: [ 346.160412] [ 346.160431] dump_stack_lvl+0xca/0x120 [ 346.160517] print_circular_bug+0x47b/0x750 [ 346.160586] check_noncircular+0x2e9/0x3c0 [ 346.160651] ? __pfx_check_noncircular+0x10/0x10 [ 346.160715] ? hlock_class+0x4e/0x130 [ 346.160760] ? srso_return_thunk+0x5/0x5f [ 346.160843] ? mark_lock+0xac/0xed0 [ 346.160894] ? lockdep_lock+0xba/0x1b0 [ 346.160951] ? __pfx_lockdep_lock+0x10/0x10 [ 346.161014] __lock_acquire+0x29fd/0x4580 [ 346.161068] ? __pfx___lock_acquire+0x10/0x10 [ 346.161111] ? lock_release+0x20f/0x6f0 [ 346.161155] ? __pfx_lock_release+0x10/0x10 [ 346.161198] ? srso_return_thunk+0x5/0x5f [ 346.161258] lock_acquire+0x19b/0x520 [ 346.161301] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 346.161350] ? __pfx_lock_acquire+0x10/0x10 [ 346.161395] ? __pfx_lock_release+0x10/0x10 [ 346.161438] ? __pfx_try_to_wake_up+0x10/0x10 [ 346.161481] ? srso_return_thunk+0x5/0x5f [ 346.161536] ? lock_is_held_type+0x9e/0x120 [ 346.161592] ? srso_return_thunk+0x5/0x5f [ 346.161651] __mutex_lock+0x13d/0xb50 [ 346.161703] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 346.161748] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 346.161795] ? srso_return_thunk+0x5/0x5f [ 346.161850] ? synchronize_rcu_expedited+0x38a/0x420 [ 346.161894] ? __pfx___mutex_lock+0x10/0x10 [ 346.161948] ? srso_return_thunk+0x5/0x5f [ 346.162005] ? srso_return_thunk+0x5/0x5f [ 346.162060] ? kasan_quarantine_put+0x84/0x1e0 [ 346.162121] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 346.162156] ? srso_return_thunk+0x5/0x5f [ 346.162216] unregister_netdevice_many_notify+0x1612/0x1c80 [ 346.162262] ? __virt_addr_valid+0x2e8/0x5d0 [ 346.162315] ? __pfx_lock_release+0x10/0x10 [ 346.162360] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 346.162406] ? find_held_lock+0x2c/0x110 [ 346.162464] ? srso_return_thunk+0x5/0x5f [ 346.162521] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 346.162582] ? srso_return_thunk+0x5/0x5f [ 346.162637] ? lock_release+0x20f/0x6f0 [ 346.162681] ? __pfx_lock_release+0x10/0x10 [ 346.162724] ? srso_return_thunk+0x5/0x5f [ 346.162780] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 346.162827] ? srso_return_thunk+0x5/0x5f [ 346.162893] unregister_netdevice_queue+0x224/0x2e0 [ 346.162936] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 346.162980] ? up_write+0x195/0x520 [ 346.163035] _cfg80211_unregister_wdev+0x57b/0x700 [ 346.163087] ? srso_return_thunk+0x5/0x5f [ 346.163146] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 346.163185] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 346.163224] ? srso_return_thunk+0x5/0x5f [ 346.163279] ? srso_return_thunk+0x5/0x5f [ 346.163334] ? synchronize_rcu+0x1ff/0x260 [ 346.163376] ieee80211_unregister_hw+0x55/0x3a0 [ 346.163422] hwsim_exit_net+0x3a0/0x730 [ 346.163464] ? __pfx_hwsim_exit_net+0x10/0x10 [ 346.163505] ? srso_return_thunk+0x5/0x5f [ 346.163560] ? netdev_run_todo+0x788/0x1040 [ 346.163609] ? __pfx_hwsim_exit_net+0x10/0x10 [ 346.163652] ops_exit_list+0xb3/0x180 [ 346.163694] cleanup_net+0x546/0xad0 [ 346.163739] ? __pfx_cleanup_net+0x10/0x10 [ 346.163793] process_one_work+0x8ee/0x1a10 [ 346.163867] ? __pfx_lock_acquire+0x10/0x10 [ 346.163911] ? __pfx_process_one_work+0x10/0x10 [ 346.163970] ? srso_return_thunk+0x5/0x5f [ 346.164025] ? move_linked_works+0x172/0x270 [ 346.164069] ? srso_return_thunk+0x5/0x5f [ 346.164124] ? assign_work+0x196/0x240 [ 346.164182] worker_thread+0x674/0xe70 [ 346.164240] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 346.164292] ? srso_return_thunk+0x5/0x5f [ 346.164347] ? __pfx_worker_thread+0x10/0x10 [ 346.164407] kthread+0x3ab/0x720 [ 346.164459] ? __pfx_kthread+0x10/0x10 [ 346.164511] ? srso_return_thunk+0x5/0x5f [ 346.164566] ? finish_task_switch.isra.0+0x206/0x840 [ 346.164617] ? __pfx_kthread+0x10/0x10 [ 346.164671] ret_from_fork+0x48/0x80 [ 346.164702] ? __pfx_kthread+0x10/0x10 [ 346.164755] ret_from_fork_asm+0x1a/0x30 [ 346.164822] [ 348.003152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.006666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.008834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.018651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.021855] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 348.027958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.064805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 348.068712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 348.070141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.072091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 348.074748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.078699] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.084212] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.088120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 348.091598] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 348.093127] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 348.094835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.096699] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 348.218119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.227477] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.257645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.263546] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.263749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.269768] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.280770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.287316] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.290841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 348.297837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.302396] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.305687] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 348.307216] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 348.308989] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 348.314035] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.315310] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 348.318355] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 348.322487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 348.323070] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.323948] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 348.328192] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.333679] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 348.337021] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.346251] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.358679] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 348.368793] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 348.380119] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 348.430778] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 348.436098] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 348.437929] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 350.037317] Bluetooth: hci0: command tx timeout [ 350.165351] Bluetooth: hci2: command tx timeout [ 350.165819] Bluetooth: hci1: command tx timeout [ 350.358450] Bluetooth: hci3: command tx timeout [ 350.421396] Bluetooth: hci5: command tx timeout [ 350.421825] Bluetooth: hci4: command tx timeout [ 350.422227] Bluetooth: hci6: command tx timeout [ 350.485369] Bluetooth: hci7: command tx timeout [ 352.086431] Bluetooth: hci0: command tx timeout [ 352.213446] Bluetooth: hci2: command tx timeout [ 352.213963] Bluetooth: hci1: command tx timeout [ 352.407322] Bluetooth: hci3: command tx timeout [ 352.469395] Bluetooth: hci6: command tx timeout [ 352.469807] Bluetooth: hci4: command tx timeout [ 352.470188] Bluetooth: hci5: command tx timeout [ 352.533383] Bluetooth: hci7: command tx timeout [ 354.133365] Bluetooth: hci0: command tx timeout [ 354.261463] Bluetooth: hci2: command tx timeout [ 354.262565] Bluetooth: hci1: command tx timeout [ 354.453697] Bluetooth: hci3: command tx timeout [ 354.517875] Bluetooth: hci5: command tx timeout [ 354.519161] Bluetooth: hci4: command tx timeout [ 354.520496] Bluetooth: hci6: command tx timeout [ 354.581598] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:49:44 Registers: info registers vcpu 0 RAX=0000000000058eeb RBX=0000000000000000 RCX=ffffffff84a8e9d7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b1bba RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000001 R9 =ffffed100d9c6c4a R10=ffff88806ce36253 R11=0000000000000001 R12=ffffffff864043d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8f97e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557b0201e9b8 CR3=000000000cc14000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000000000000000000000000000000 XMM05=0000555c1e06ef200000555c1e03ef50 XMM06=0000555c1e0714300000000300000002 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800bbc6d00 R8 =0000000000000001 R9 =ffffed1001778d96 R10=0000000000000000 R11=2f72656b726f776b R12=0000000000000000 R13=ffffffff886970b0 R14=ffffffff88697060 R15=ffffffff88697320 RIP=ffffffff8283f1bd RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7d754333a0 CR3=000000000cc14000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=ffffffffffffffff00000000000000ff XMM03=696e656420737365636341002f737973 XMM04=00000000000000000000000000000000 XMM05=0000555c1e06ef200000555c1e03ef50 XMM06=0000555c1e0714300000000300000002 XMM07=00000002ffffffff0000555c1e06eea0 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000