Warning: Permanently added '[localhost]:22436' (ECDSA) to the list of known hosts. 2025/11/14 10:13:42 fuzzer started 2025/11/14 10:13:43 dialing manager at localhost:37161 syzkaller login: [ 50.711523] cgroup: Unknown subsys name 'net' [ 50.806025] cgroup: Unknown subsys name 'cpuset' [ 50.821424] cgroup: Unknown subsys name 'rlimit' 2025/11/14 10:13:54 syscalls: 205 2025/11/14 10:13:54 code coverage: enabled 2025/11/14 10:13:54 comparison tracing: enabled 2025/11/14 10:13:54 extra coverage: enabled 2025/11/14 10:13:54 setuid sandbox: enabled 2025/11/14 10:13:54 namespace sandbox: enabled 2025/11/14 10:13:54 Android sandbox: enabled 2025/11/14 10:13:54 fault injection: enabled 2025/11/14 10:13:54 leak checking: enabled 2025/11/14 10:13:54 net packet injection: enabled 2025/11/14 10:13:54 net device setup: enabled 2025/11/14 10:13:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/14 10:13:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/14 10:13:54 USB emulation: enabled 2025/11/14 10:13:54 hci packet injection: enabled 2025/11/14 10:13:54 wifi device emulation: enabled 2025/11/14 10:13:54 802.15.4 emulation: enabled 2025/11/14 10:13:54 fetching corpus: 0, signal 0/0 (executing program) 2025/11/14 10:13:55 starting 8 fuzzer processes 10:13:55 executing program 0: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb87}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3bd9}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x58}}, 0x400d4) socket$nl_audit(0x10, 0x3, 0x9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)={[{0x2d, 'net'}, {0x2d, 'rdma'}, {0x2b, 'rlimit'}, {0x2b, 'rlimit'}, {0x2b, 'io'}]}, 0x1f) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)={[{0x2b, 'perf_event'}, {0x0, 'cpuacct'}, {0x2b, 'memory'}, {0x2b, 'net_prio'}, {0x2b, 'hugetlb'}]}, 0x30) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x18c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f73}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x153}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4af31058}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3aac34f7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8084) r0 = getpgid(0xffffffffffffffff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000640)=r0, 0x12) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fff}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x48800) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000007c0)=[@sack_perm, @mss={0x2, 0x8001}, @mss, @window={0x3, 0xff, 0x800}, @window={0x3, 0xeae7, 0x1}, @sack_perm, @window={0x3, 0x7}, @timestamp], 0x8) r2 = socket(0x1f, 0x1, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x82022080}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000064) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f00000009c0)={0x274, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb2}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x98, 0x3, "84fb39830191433d3420a65450c23f237ad16a7d814c6dec12cd8dbd1a7a798cea21aeb54936d121f15403412e9000d3e6acc7bb3c028b28c07ad108dc8522cf516596c35e4d661767e4934ffeeb5c66a419e4a9f31fb083feb7a723497edfa55fb42334230c50d995ef2011f53a78f2328e1d7c08bd95a57691969590d48ef9c197159323c4c2546e75a1efa7ee2ebdac764ab2"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "0bd4d76be29bc77b6fbd6c97fb68244f7514ab2160dc6166297bd76531d5706b7602f2"}}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x76}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6d2d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7b6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xde0}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x666}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9827}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x343}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf28}]}]}, 0x274}}, 0x1) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000cc0)=""/227, &(0x7f0000000dc0)=0xe3) r5 = socket(0x9, 0x2, 0x3) syz_genetlink_get_family_id$gtp(&(0x7f0000000e00), r5) 10:13:55 executing program 1: setns(0xffffffffffffffff, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc041) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c810}, 0x6c8c0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/locks\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000805) syz_open_dev$evdev(&(0x7f0000000440), 0x80000000, 0x268040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) r5 = accept(0xffffffffffffffff, &(0x7f00000004c0)=@caif=@dgm, &(0x7f0000000540)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000580)=0x2, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1f0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff22}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @private1, 0xffffffff}}}}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe42}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x83f9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xac4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000880)) 10:13:55 executing program 7: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ptrace$getsig(0x4202, r1, 0x685, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r2 = gettid() ptrace$getsig(0x4202, r2, 0x7, &(0x7f0000000180)) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0xfff, 0x9, 0x0, 0xffff8001}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000280)={r0, 0x2, 0xffffffffffffffff, 0x5}) getpid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x9, 0x51, 0x5, 0xfe00000}, {0x7f, 0xfc}, {0x1000, 0x80, 0xe1, 0x7ff}, {0x1ff, 0x3, 0x1, 0x2}, {0xfff8, 0x81, 0x7, 0x100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x9, 0x0, 0x1, 0x9}, {0x5, 0x4, 0x40, 0xffffffff}]}) r5 = socket(0x9, 0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000440)='westwood\x00', 0x9) r6 = socket(0x21, 0x1, 0xd4d8) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000480), &(0x7f00000004c0)=0x14) bind$bt_sco(r5, &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x22040000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x260, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79b}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x17c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x95}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3fff8000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x54}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf39}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b06}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x490f}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x260}}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f00000008c0)={0x7, &(0x7f0000000880)=[{0x1ff, 0x20, 0x7, 0x4}, {0x6, 0x1, 0x7, 0x1}, {0x101, 0x3f, 0x5a, 0x80000001}, {0x9, 0x3, 0x7f, 0xfffffff9}, {0x401, 0x3, 0x3, 0x2}, {0x5, 0x7f, 0x80, 0x5}, {0x6, 0x20, 0xe0}]}) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, &(0x7f0000000900)=""/4096, &(0x7f0000001900)=0x1000) 10:13:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10c2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000140)='highspeed\x00', 0xa) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000200)={0xa94, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0xa28, 0x8, 0x0, 0x1, [{0x1b8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1ac, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}, {0x15c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x150, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x568, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37def3dde7387be4d66dd12bed69690bf51f9727ddb70b73f6c983d152b6918f"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "18f03487da1128fbd8e61ad6645e68bd47939e3b2e3e0307d39e2051e302026f"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "60fdc8bbe3b64dbf85609931be762a9801138006f3034c1abbeeca791a0ad768"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xa77, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1c8}}, @WGPEER_A_ALLOWEDIPS={0x4b4, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x6}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}]}, {0x110, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x88, 0x9, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff66}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1, @local, 0x10000}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @private0, 0xa5a30995}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x81}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xb6, @ipv4={'\x00', '\xff\xff', @empty}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7a8576d7bfb394aabc486141e24732f94492b3584b44e3aac8778adc7c7a1a2c"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0xa94}, 0x1, 0x0, 0x0, 0x4040090}, 0x8004) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000d40)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000dc0)={'ip_vti0\x00', &(0x7f0000000d80)={'ip_vti0\x00', 0x0, 0x7800, 0x8, 0x9, 0x9, {{0x5, 0x4, 0x2, 0x2c, 0x14, 0x64, 0x0, 0xff, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x50, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x50}}, 0x8001) r3 = fork() r4 = getpgid(r3) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000001200)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000f80)={0x240, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "126aac8fa7a19532f09ac2e1fa394deb2659411e75734631682f1187fcf2070b9fb428000b3f1bf77a97a0728a4a40961cd5856219e33924560bd2065998ff9ed6fac2d69f395cdaae30399ce26112954562a03f0a84d166e4d19798af9c01e630b2f876550b46ec35c9ee2cf848ba58e844d4ed161669c9be1f3c040337d1ac1d150d9ed5677838"}, @TIPC_NLA_NODE_ID={0xa, 0x3, "e6bad97f66fb"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "a3884355e15ee46ad03ad4562d9de00ab30edc6b"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "034fbe9ee5e5583d71b8da3fc1599a3489a1eb84caf41442edcc4a0ab3e64d590916a1cf"}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe872}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x54}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x40}, 0x44800) capset(&(0x7f0000001240)={0x19980330, r4}, &(0x7f0000001280)={0x4e473403, 0x7fff, 0x4, 0x7fff, 0x80, 0x8}) r5 = syz_open_procfs$userns(r4, &(0x7f00000012c0)) setns(r5, 0x0) r6 = socket(0x22, 0x6, 0x7ff) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f00000014c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x134, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57b1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000040}, 0x15) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x3c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4e}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x54) syz_genetlink_get_family_id$devlink(&(0x7f0000001600), r6) perf_event_open(&(0x7f0000001680)={0x2, 0x80, 0x3, 0x4, 0x6, 0x4, 0x0, 0x81, 0x8010, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000001640), 0xa}, 0x1, 0xffff, 0xff, 0x5, 0x2, 0x9, 0x1000, 0x0, 0x8000, 0x0, 0x200}, r3, 0x0, 0xffffffffffffffff, 0xa) 10:13:55 executing program 5: pselect6(0x40, &(0x7f0000000000)={0x8000, 0xa7, 0x1ff, 0x7, 0xb8fa, 0x6, 0x9, 0x10001}, &(0x7f0000000040)={0x8000, 0x1, 0x7f, 0xb8, 0x8, 0x3, 0x439fb125, 0x10000}, &(0x7f0000000080)={0x100000001, 0x2, 0x1, 0xffff, 0xf1a3, 0x100000000, 0x6, 0x7}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) pselect6(0x40, &(0x7f0000000180)={0x10000, 0x101, 0x97, 0x0, 0x4, 0x4, 0x5, 0x8}, &(0x7f00000001c0)={0xba1, 0x1000, 0x8001, 0x4, 0xffffffff, 0x8, 0x7fffffff, 0x7}, &(0x7f0000000200)={0x4, 0x7, 0x10000, 0xffffffff, 0x101, 0x7, 0x631, 0x40}, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x85]}, 0x8}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300)={0x5, 0x80, 0x4, 0x9, 0x0, 0xfffffffffffffff8, 0x4, 0x80000001}, &(0x7f0000000340)={0x1000, 0x4, 0x614e, 0x4, 0x1, 0xa8, 0x3f, 0x61d}, &(0x7f0000000380)={0x8, 0x4, 0xf1, 0xdd40, 0x0, 0x0, 0xfd, 0x7f}, &(0x7f0000000400)={r0, r1+10000000}, &(0x7f0000000480)={&(0x7f0000000440)={[0x28d5]}, 0x8}) nanosleep(&(0x7f00000004c0), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x4000010, 0xffffffffffffffff, 0x0) clock_getres(0x3, &(0x7f0000000500)) clock_getres(0x7, &(0x7f0000000540)) clock_gettime(0x1, &(0x7f0000000580)) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000600)='nv\x00', 0x3) clock_gettime(0x0, &(0x7f0000000640)) select(0x40, &(0x7f0000000680)={0x0, 0x800, 0x8, 0x3, 0x6, 0xfffffffffffffffd, 0x4, 0x5d04}, &(0x7f00000006c0)={0x40, 0x0, 0x8001, 0x8, 0x7, 0xffff, 0x5, 0x651}, &(0x7f0000000700)={0x8, 0x20, 0x8, 0x363, 0x5, 0x7, 0x7ff, 0xdd}, &(0x7f0000000740)={0x0, 0x2710}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa4, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3ff, @local, 0x2}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff0b}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xaf21}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff3a3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) futex(&(0x7f0000000940), 0x1, 0x2, &(0x7f00000009c0)={r4, r5+60000000}, &(0x7f0000000a00)=0x1, 0x1) clock_getres(0x0, &(0x7f0000000a40)) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000a80)={0x8001, 0x0, 0x81, 0x3, 0x4, 0x611, 0x80000000, 0x7}, &(0x7f0000000ac0)={0x81, 0x1000, 0x9, 0x5, 0x0, 0x8, 0x6, 0x10000}, &(0x7f0000000b00)={0x80000001, 0x20, 0x6, 0x100000001, 0x6, 0x9a, 0x2000000000000000, 0x10001}, &(0x7f0000000b80)={r6, r7+10000000}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0x6]}, 0x8}) 10:13:55 executing program 3: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0xb2e, 0x6, 0x200, 0x4, 0x7, 0x5}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0xb127, 0xffff, 0x40, 0x3b, 0x7fff, 0x5}) r0 = getpgid(0xffffffffffffffff) capset(&(0x7f0000000100)={0x19980330, r0}, &(0x7f0000000140)={0x101, 0x7f9d, 0x67, 0x211e779e, 0x8, 0x1}) capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000001c0)={0x6, 0xff, 0x400, 0xffff, 0x0, 0x3}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "932f2497b764e1e1", "5ee4f118b4a53d2d6e4bc11343513fc647c7b3ee874bee9785bbbbff605646d4", "ec5fdbf8", "e7d8c69d2e05461c"}, 0x38) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/pid_for_children\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000280)) wait4(r0, 0x0, 0x1, &(0x7f00000002c0)) iopl(0x7) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa4088d83142a17be}, 0x4040095) r3 = getpid() capset(&(0x7f0000000480)={0x20080522, r3}, &(0x7f00000004c0)={0xffffffff, 0x24, 0x1, 0x1, 0x72, 0x401}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000500)={0x0, 0x6f, 0x6f}, &(0x7f0000000540)={'enc=', 'pkcs1', ' hash=', {'poly1305-arm\x00'}}, &(0x7f00000005c0)="cb9b1fe479fb27449fd556e28e42306585afe9db735f39383eae191e770b7c8972faa374136f85f89e9816b44ea9aad0a53a2bdb8b747b9d03ad19cb8733984250316df1c36bcc15eddd813166a10beaf82cf31416560ff79e3540f79c3e118da5ccb6b08fa92d12100c9e7ef7b4bf", &(0x7f0000000640)="45e8d2d5e8438737aa31636f079cf148499b0b49a2a767791781fe8fa8dc185cec25ba33dbcd011ed800fb1d439df078819441de36caf26857454dbae94ec290099fc06f106ab7b9dc922d3ff1a4dc4c9e806594d46d844ff70dc5763165fe76903817d9ed16473646cde8ffa2fb3d") r4 = fork() r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r2) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) capset(&(0x7f0000000800)={0x399f1316, r4}, &(0x7f0000000840)={0x8435, 0x2, 0x52, 0xffffff01, 0x6, 0x9}) 10:13:55 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x70401, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x1010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x44aa, &(0x7f00000000c0)={0x0, 0xb8f5, 0x8, 0x0, 0x317}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000001c0)={0x1, 0x67, "c0828d3382d861e6faa67f25fd9f480c1908e0f53184ad97fdb08236a69e17f48a749c4a35f488a3637f223db01157f3f89e0a4d30f305d196a874566630108bcd6dbe700a27deededcbe981c0f9395b965523e75fe9f647f3f1f06efe142d9f7c4efa6ab6ae68"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000e, 0x1010, r1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x810, r1, 0x8000000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x301c}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xdbc}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x40c0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x8880) r3 = socket(0x11, 0x3, 0x1fa) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000500)) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000540), 0x24000, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000580)) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc0000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x815) 10:13:55 executing program 4: r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs$userns(r0, &(0x7f0000000000)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x3, 0x5, 0x0, 0x1}, {0x40, 0x7, 0x20, 0x5}, {0x4, 0x8, 0xf7, 0x8}, {0x401, 0x8, 0x2, 0x400cf7ef}, {0x8, 0x3f, 0x7f, 0x8}, {0xff, 0x66, 0x5, 0x1}, {0xcef, 0x5f, 0x1, 0xfff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000140)={r3, 0x2, r1}) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000280)={r5, 0x6, r2, 0x0, 0x80000}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x9, &(0x7f00000002c0)=[{0x9, 0x4, 0x40, 0xb6}, {0x7c, 0x3, 0x0, 0x1f}, {0x5, 0x20, 0x0, 0x7c}, {0x20, 0x81, 0x0, 0x7ff9}, {0x7, 0x0, 0x1, 0x2}, {0x4, 0x1, 0x0, 0x3}, {0x20, 0x0, 0x5}, {0x7, 0x80, 0x7}, {0x9, 0x9, 0x4, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000380)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r4) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x13c, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9e55}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc69}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x80001) r9 = getpid() ptrace$setopts(0x4206, r9, 0x4, 0x49) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000b00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x274, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0xdc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfcb9}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-@^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcd1}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':!-,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x144, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x25, 0x5, "dcc9d3ba0d9e1007debd641888a6ae15c1048630ce95a9031775a2c9ddd6878237"}, @ETHTOOL_A_BITSET_MASK={0xb4, 0x5, "b14d9bc260a3d6443504c154d86f154a1045be7a65ed41bf4fba7d7073a2a5d497a41e26fe8aaf90cc5572b4d343ad8aff90296a67ee281e7b8e299eb840d778d7621564e74054c4ac3a41a9efc9b4affd36a30c7062d2682ae3d8d32344eda1f3bba883332e6d510ff4e822f8f1d1658764f81a267ab34dce5b81d04650132cf019e83818dcacc781a8d07faafa4288b37deacbe616c4cc3a99d92afc9711a0e1049873dbd0df5dfca275ab1abb7174"}, @ETHTOOL_A_BITSET_MASK={0x63, 0x5, "317a528398443bcd71b54662dfa60a4d71a95d7cb03bf9f50fdf7c2f28c8017dd5f6b8b79de9ee2edcf88928b9ebbdb198b56b0d18c02fc553437cb8ff284cd94e79e2f91ce3e2ce1af3c5ed1c9d9517adfd6fbf8b24c9d049e0b7abd94795"}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) [ 62.157803] audit: type=1400 audit(1763115235.720:7): avc: denied { execmem } for pid=274 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 63.330816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.335603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.337548] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.342582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.346763] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.397051] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.399898] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.402155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.408612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.411257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.420822] ================================================================== [ 63.421900] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 63.422888] Read of size 2 at addr ffff88800d8e23f8 by task kworker/u11:2/292 [ 63.424223] [ 63.424954] CPU: 1 UID: 0 PID: 292 Comm: kworker/u11:2 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 63.424983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 63.424997] Workqueue: hci1 hci_cmd_work [ 63.425026] Call Trace: [ 63.425033] [ 63.425041] dump_stack_lvl+0xca/0x120 [ 63.425069] print_report+0xcb/0x610 [ 63.425096] ? __virt_addr_valid+0x100/0x5d0 [ 63.425121] ? hci_cmd_work+0x66d/0x6d0 [ 63.425146] ? hci_cmd_work+0x66d/0x6d0 [ 63.425173] kasan_report+0xca/0x100 [ 63.425199] ? hci_cmd_work+0x66d/0x6d0 [ 63.425228] hci_cmd_work+0x66d/0x6d0 [ 63.425256] process_one_work+0x8e1/0x19c0 [ 63.425291] ? __pfx_process_one_work+0x10/0x10 [ 63.425320] ? move_linked_works+0x172/0x270 [ 63.425344] ? assign_work+0x196/0x240 [ 63.425373] worker_thread+0x67e/0xe90 [ 63.425402] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 63.425428] ? __pfx_worker_thread+0x10/0x10 [ 63.425458] kthread+0x3c8/0x740 [ 63.425484] ? __pfx_kthread+0x10/0x10 [ 63.425510] ? ret_from_fork+0x79/0x7a0 [ 63.425530] ? lock_release+0xc8/0x290 [ 63.425562] ? __pfx_kthread+0x10/0x10 [ 63.425589] ret_from_fork+0x67a/0x7a0 [ 63.425609] ? __pfx_ret_from_fork+0x10/0x10 [ 63.425631] ? __switch_to+0x759/0x1060 [ 63.425659] ? __pfx_kthread+0x10/0x10 [ 63.425685] ret_from_fork_asm+0x1a/0x30 [ 63.425720] [ 63.425726] [ 63.449604] Allocated by task 283: [ 63.450132] kasan_save_stack+0x24/0x50 [ 63.450731] kasan_save_track+0x14/0x30 [ 63.451325] __kasan_slab_alloc+0x59/0x70 [ 63.451941] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 63.452731] __alloc_skb+0x2ab/0x370 [ 63.453310] hci_cmd_sync_alloc+0x34/0x300 [ 63.453946] __hci_cmd_sync_sk+0xf7/0x5c0 [ 63.454571] __hci_cmd_sync_status_sk+0x4d/0x1a0 [ 63.455284] hci_cmd_sync_status+0x4c/0x70 [ 63.455921] hci_dev_cmd+0x4d5/0x980 [ 63.456506] hci_sock_ioctl+0x493/0x810 [ 63.457103] sock_do_ioctl+0xd1/0x240 [ 63.457676] sock_ioctl+0x40d/0x630 [ 63.458227] __x64_sys_ioctl+0x18f/0x210 [ 63.458832] do_syscall_64+0xbf/0x430 [ 63.459405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.460158] [ 63.460433] Freed by task 295: [ 63.460916] kasan_save_stack+0x24/0x50 [ 63.461517] kasan_save_track+0x14/0x30 [ 63.462110] kasan_save_free_info+0x3a/0x60 [ 63.462759] __kasan_slab_free+0x43/0x70 [ 63.463374] kmem_cache_free+0x26f/0x500 [ 63.463983] kfree_skbmem+0x18a/0x1f0 [ 63.464571] sk_skb_reason_drop+0x10e/0x1b0 [ 63.465206] vhci_read+0x3d5/0x5d0 [ 63.465747] vfs_read+0x1eb/0xc70 [ 63.466265] ksys_read+0x121/0x240 [ 63.466800] do_syscall_64+0xbf/0x430 [ 63.467372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.468125] [ 63.468402] The buggy address belongs to the object at ffff88800d8e23c0 [ 63.468402] which belongs to the cache skbuff_head_cache of size 232 [ 63.470270] The buggy address is located 56 bytes inside of [ 63.470270] freed 232-byte region [ffff88800d8e23c0, ffff88800d8e24a8) [ 63.472005] [ 63.472266] The buggy address belongs to the physical page: [ 63.473103] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xd8e2 [ 63.474230] flags: 0x100000000000000(node=0|zone=1) [ 63.474966] page_type: f5(slab) [ 63.475466] raw: 0100000000000000 ffff8880096c78c0 dead000000000122 0000000000000000 [ 63.476610] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 63.477711] page dumped because: kasan: bad access detected [ 63.478520] [ 63.478783] Memory state around the buggy address: [ 63.479486] ffff88800d8e2280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.480542] ffff88800d8e2300: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 63.481590] >ffff88800d8e2380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 63.482627] ^ [ 63.483667] ffff88800d8e2400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 63.484740] ffff88800d8e2480: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 63.485785] ================================================================== [ 63.486961] Disabling lock debugging due to kernel taint [ 63.502728] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.530160] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.531586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.531650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.533273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.535269] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.535272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.536425] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.538967] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.541648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.542924] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.544867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.546646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.546650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.552224] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.553734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.553838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.555721] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.556657] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.560931] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.562979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.564777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.566495] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 63.567012] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 63.568949] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 63.572160] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.574036] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 63.583953] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 63.596093] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 63.601908] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.366554] Bluetooth: hci0: command tx timeout [ 65.558538] Bluetooth: hci1: command tx timeout [ 65.621515] Bluetooth: hci6: command tx timeout [ 65.621962] Bluetooth: hci5: command tx timeout [ 65.622366] Bluetooth: hci2: command tx timeout [ 65.622808] Bluetooth: hci3: command tx timeout [ 65.623214] Bluetooth: hci4: command tx timeout [ 65.623683] Bluetooth: hci7: command tx timeout [ 67.413499] Bluetooth: hci0: command tx timeout [ 67.606832] Bluetooth: hci1: command tx timeout [ 67.669542] Bluetooth: hci4: command tx timeout [ 67.669987] Bluetooth: hci3: command tx timeout [ 67.670080] Bluetooth: hci7: command tx timeout [ 67.670378] Bluetooth: hci2: command tx timeout [ 67.671300] Bluetooth: hci5: command tx timeout [ 67.671312] Bluetooth: hci6: command tx timeout [ 69.462488] Bluetooth: hci0: command tx timeout [ 69.654499] Bluetooth: hci1: command tx timeout [ 69.719478] Bluetooth: hci6: command tx timeout [ 69.719915] Bluetooth: hci5: command tx timeout [ 69.720299] Bluetooth: hci7: command tx timeout [ 69.721069] Bluetooth: hci3: command tx timeout [ 69.721094] Bluetooth: hci4: command tx timeout [ 69.721925] Bluetooth: hci2: command tx timeout [ 71.510621] Bluetooth: hci0: command tx timeout [ 71.702686] Bluetooth: hci1: command tx timeout [ 71.765563] Bluetooth: hci7: command tx timeout [ 71.766317] Bluetooth: hci3: command tx timeout [ 71.767188] Bluetooth: hci4: command tx timeout [ 71.768350] Bluetooth: hci5: command tx timeout [ 71.769146] Bluetooth: hci2: command tx timeout [ 71.769198] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 10:13:57 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff81ab34c2 RDX=000000000000ab35 RSI=000000000000ab34 RDI=ffffffff86eecf2c RBP=ffff8880095575c0 RSP=ffff8880095574f8 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003ca6e R11=0000000000023c92 R12=ffff8880095575c8 R13=ffff8880095575b0 R14=ffff8880095575a9 R15=ffff888009557568 RIP=ffffffff8135f62b RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7dc1bc1900 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff863717a0 CR3=000000000c8ff000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=6c6175747269762f736563697665642f XMM02=ffffffffffffffff00000000000000ff XMM03=696e656420737365636341002f737973 XMM04=00000003ffffffff000055568dccb990 XMM05=000055568dccb9d0000055568dccb9b0 XMM06=000055568dccb930ffffffff00000002 XMM07=00000000000000000000000000000000 XMM08=7269762f736563697665642f7379732f XMM09=00000000000000000000000000000000 XMM10=00000020000000000000002000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8293dc70 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff888015c87620 R8 =00000000ffffffff R9 =ffffed1002b90eb5 R10=0000000000000000 R11=617254206c6c6143 R12=000000000000001b R13=ffffffff889747d0 R14=ffffffff88974780 R15=ffffffff88974a40 RIP=ffffffff8293dcc5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcc943666f4 CR3=000000001f283000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fe9732d47c000007fe9732d47c8 XMM02=00007fe9732d47e000007fe9732d47c0 XMM03=00007fe9732d47c800007fe9732d47c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000