Warning: Permanently added '[localhost]:23937' (ECDSA) to the list of known hosts. 2024/11/27 11:52:44 fuzzer started syzkaller login: [ 108.645902] e2scrub_all (165) used greatest stack depth: 24400 bytes left 2024/11/27 11:52:45 dialing manager at localhost:46695 [ 109.479951] cgroup: Unknown subsys name 'net' [ 109.620949] cgroup: Unknown subsys name 'cpuset' [ 109.668825] cgroup: Unknown subsys name 'rlimit' 2024/11/27 11:53:03 syscalls: 202 2024/11/27 11:53:03 code coverage: enabled 2024/11/27 11:53:03 comparison tracing: enabled 2024/11/27 11:53:03 extra coverage: enabled 2024/11/27 11:53:03 setuid sandbox: enabled 2024/11/27 11:53:03 namespace sandbox: enabled 2024/11/27 11:53:03 Android sandbox: enabled 2024/11/27 11:53:03 fault injection: enabled 2024/11/27 11:53:03 leak checking: enabled 2024/11/27 11:53:03 net packet injection: enabled 2024/11/27 11:53:03 net device setup: enabled 2024/11/27 11:53:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/27 11:53:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/27 11:53:03 USB emulation: enabled 2024/11/27 11:53:03 hci packet injection: enabled 2024/11/27 11:53:03 wifi device emulation: enabled 2024/11/27 11:53:03 802.15.4 emulation: enabled 2024/11/27 11:53:03 fetching corpus: 0, signal 0/0 (executing program) 2024/11/27 11:53:04 starting 8 fuzzer processes 11:53:04 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/112, 0x70}, {&(0x7f0000000080)=""/158, 0x9e}], 0x2, &(0x7f0000000180)=""/194, 0xc2}, 0x6}], 0x1, 0x2020, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000340)=0x9, 0x4) r0 = socket$inet6(0xa, 0x80000, 0x2) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={0x0, @tipc=@name={0x1e, 0x2, 0x0, {{0x1d4c48fb4982579b, 0x2}, 0x2}}, @nfc={0x27, 0x1, 0x2, 0x6}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x4, 0x3}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000440)=""/115) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r2, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3d}, @void, @val={0xc, 0x99, {0x7, 0x18}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x770c, 0x3a}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff, 0xf}}]}, 0x48}}, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000680)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) r4 = accept4(r0, &(0x7f0000000840)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000008c0)=0x80, 0x80800) getpeername$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000940)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000009c0)={0x0, @xdp={0x2c, 0x1, 0x0, 0x14}, @xdp={0x2c, 0xc91fc4fd7b741f0c, 0x0, 0x32}, @rc={0x1f, @none, 0xc0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x562a, 0xffffffffffff8000, 0x9}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000a40)={0x430, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x680a}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x278}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb57e}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x208, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x8, 0x6, 0xff}, {0x9, 0x4, 0x8}, {0x400, 0x7f, 0x5, 0x4}, {0xff, 0x6, 0x8, 0x849}, {0x0, 0x20, 0x1, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x430}, 0x1, 0x0, 0x0, 0x80c1}, 0x2080) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000001200)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000f40)={0x254, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xeb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc53}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3d8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x800, @private2, 0x4}}}}]}]}, 0x254}}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000001240)={'batadv_slave_1\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001280)=@rc={0x1f, @none}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001300)=""/21, 0x15}, {&(0x7f0000001340)=""/35, 0x23}], 0x2, &(0x7f00000013c0)=""/122, 0x7a}, 0xffffffb9}, {{&(0x7f0000001440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002700)=[{&(0x7f00000014c0)=""/170, 0xaa}, {&(0x7f0000001580)=""/40, 0x28}, {&(0x7f00000015c0)=""/34, 0x22}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/8, 0x8}, {&(0x7f0000002640)=""/154, 0x9a}], 0x6, &(0x7f0000002780)=""/190, 0xbe}, 0x10001}, {{&(0x7f0000002840)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002b40)=[{&(0x7f00000028c0)=""/174, 0xae}, {&(0x7f0000002980)=""/54, 0x36}, {&(0x7f00000029c0)=""/182, 0xb6}, {&(0x7f0000002a80)=""/169, 0xa9}], 0x4, &(0x7f0000002b80)=""/153, 0x99}}, {{&(0x7f0000002c40)=@hci, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002cc0)=""/242, 0xf2}, {&(0x7f0000002dc0)=""/55, 0x37}, {&(0x7f0000002e00)=""/205, 0xcd}], 0x3, &(0x7f0000002f40)=""/20, 0x14}, 0x9}, {{&(0x7f0000002f80)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000003000)=""/10, 0xa}], 0x1, &(0x7f0000003080)=""/158, 0x9e}, 0x5}], 0x5, 0x40000000, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000032c0), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x24, r10, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x48040) 11:53:04 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x100010, r0, 0x10000000) r1 = socket$netlink(0x10, 0x3, 0x7) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x240, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfa58}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6563}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8cde}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4090}, 0x20048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x148, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x818f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5ad}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x582}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9cec}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x539}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x51176c5e}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r4, 0x84b, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000007c0)=@req={0x28, &(0x7f0000000780)={'veth0_to_bond\x00', @ifru_data=&(0x7f0000000740)="ba27ca3c754077bf5ef76bcfb227e0433648c8ad90f0cb5fb9960da95bd41d69"}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x24}]}, 0x34}, 0x1, 0x0, 0x0, 0x44855}, 0x8000800) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xad}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x67}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x200008c0}, 0x40004) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r8, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048045}, 0x4000004) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c40)={{{@in6=@private0, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000d40)=0xe8) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x9c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4080) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001400)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001040)={0x344, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x46, 0x5e, 0x63, 0x2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r9}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}]}, 0x344}}, 0x40) 11:53:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c844) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0xc009, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@fscache}, {@debug={'debug', 0x3d, 0x2}}, {@cache_none}, {@msize={'msize', 0x3d, 0x200000000}}, {@cache_fscache}, {@fscache}, {@aname}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, 'blkio.bfq.sectors_recursive\x00'}}], [{@obj_user={'obj_user', 0x3d, '-'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@dont_measure}, {@hash}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, ':-,&,{),)$$\t{'}}, {@fowner_gt={'fowner>', 0xee00}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000480)={0x67446698, 0x1, 0x2, 0x2, 0x2, "07d26a188efbd38dec89f02bbc85e2f4987aecf6246208de3c24bff9cc1ea39c99b14bbc8f56087fb60f7d1158426ae200f4e44d21664ef8d9b2689fac42e1bb7de8fa4a48cbefc88a04659749e02545f115a07886bc5f6a4e5dfdac7cc2c695111cbb3f3d43afd9d3202b043bf2eb15af5d40ee0b062fb92b54e505bfcaf3120c51e15fab0520ef54725244c517a3a2689b63ccdd1c89a5fb3d6b76623ae1b589c4604d01de01861690e9ee410f6703123758b121c50d00f979fbe688d489672bf624f589309ecc5070d8c9b5694c2a85a43f31bc74dabad1ffc0054f5c137b8722f27321c747fc5614e4bfa012c0b2a28795"}, 0x103) openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000005c0), 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000600)='syz0\x00', 0x1ff) r5 = getpid() r6 = fork() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8001) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000880)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x60}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b40)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001080)={&(0x7f00000009c0), 0xc, &(0x7f0000001040)={&(0x7f0000000e00)={0x214, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4080}, 0x2400c080) [ 128.369767] audit: type=1400 audit(1732708384.863:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:53:04 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0x0}}, './file0\x00'}) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x80000) recvmmsg(r3, &(0x7f0000001540)=[{{&(0x7f0000000080)=@sco={0x1f, @none}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/238, 0xee}, {&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000000280)=""/168, 0xa8}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f00000003c0)=""/204, 0xcc}], 0x5, &(0x7f0000000540)=""/4096, 0x1000}, 0xffffffe1}], 0x1, 0x10002, &(0x7f0000001580)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000002640)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000002700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x3c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002740)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r7, 0x8925, &(0x7f0000002780)={'gretap0\x00', @ifru_mtu}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008094}, 0x40) pipe2$9p(&(0x7f0000002900), 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002980)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000002b00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002ac0)={&(0x7f00000029c0)={0xc4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4061000}, 0x40844) r10 = socket$inet6(0xa, 0x4, 0x5) recvmmsg(r10, &(0x7f0000003d80)=[{{&(0x7f0000002b40)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/33, 0x21}, {&(0x7f0000003c00)=""/92, 0x5c}, {&(0x7f0000003c80)=""/64, 0x40}], 0x4, &(0x7f0000003d00)=""/70, 0x46}, 0x7fffffff}], 0x1, 0x40003003, &(0x7f0000003dc0)) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000003e00)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x20010, r5, 0x0) getresuid(&(0x7f0000003e40), &(0x7f0000003e80), &(0x7f0000003ec0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000003f00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r11, r6}}, './file0\x00'}) getpeername$netlink(0xffffffffffffffff, &(0x7f0000003f80), &(0x7f0000003fc0)=0xc) 11:53:04 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x15) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r0, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r3 = syz_io_uring_setup(0x6983, &(0x7f0000000200)={0x0, 0x5a8e, 0x1, 0x0, 0xfd}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x41002, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@smackfshat={'smackfshat', 0x3d, ')\xb8(:'}}, {@euid_lt={'euid<', r5}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}}) r6 = syz_open_dev$evdev(&(0x7f00000003c0), 0x3, 0x200) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000400)=[r4, r4, r6], 0x3) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000440)={0xf1, 0x17, 0x0, 0x8, "9045634584032fd2b277b96a7c8e7581814fe388273d9eb233640aad8408c0c4"}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x42002, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000004c0)) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000500)={0xc1, 0x13, 0x925e, 0x0, "9bec0dd57ebea2e5f3bf9e8056bf5125d7170d74953fa1adf70e847787f6470c"}) r7 = fork() r8 = getpid() r9 = openat$cgroup(r4, &(0x7f0000000780)='syz0\x00', 0x200002, 0x0) clone3(&(0x7f00000007c0)={0x44000400, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0x1a}, &(0x7f0000000600)=""/84, 0x54, &(0x7f0000000680)=""/181, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, r7, r8], 0x7, {r9}}, 0x58) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000840)={0x56, 0x2, 0x1, {0x7ff, 0x5}, {0x9, 0x7f}, @const={0x6, {0x8001, 0x0, 0x2a, 0x9}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x20008844) pipe2$9p(&(0x7f0000000980), 0x84000) 11:53:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xd2b00, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/node', 0x1002, 0x24) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x8, 0x3, 0x7f, 0x4}, {0x5, 0x2, 0x9, 0x36c}, {0x34, 0x4, 0x2, 0x8}, {0xf801, 0x2, 0x7, 0xfff}, {0xfe01, 0x20, 0x5, 0x9}, {0x9, 0x20, 0x4, 0x8}]}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/workqueue', 0x101000, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee01) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000300)=r4) clone3(&(0x7f0000000600)={0x6000, &(0x7f00000003c0)=0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440), {0x15}, &(0x7f0000000480)=""/33, 0x21, &(0x7f00000004c0)=""/233, &(0x7f00000005c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x8008, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@posixacl}, {@cachetag={'cachetag', 0x3d, 'pids.events\x00'}}, {@access_any}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@access_any}, {@noextend}], [{@pcr={'pcr', 0x3d, 0x1e}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/module/configfs', 0x400001, 0x7b) write$P9_RRENAME(r7, &(0x7f0000000780)={0x7, 0x15, 0x2}, 0x7) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r8, &(0x7f0000000800), 0x2, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000840)={0x0, 0xa, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x66c4c11b8e80766a}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x301100, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x335) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000008c0)) 11:53:04 executing program 3: r0 = msgget$private(0x0, 0x2) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/133) r1 = msgget(0x1, 0x72) msgctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/4096) msgrcv(r1, &(0x7f00000010c0)={0x0, ""/172}, 0xb4, 0x1, 0x3c00) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000001180)=""/254) r2 = msgget$private(0x0, 0x20) msgctl$IPC_RMID(r0, 0x0) msgsnd(r0, &(0x7f0000001280)={0x2, "663b9d0bf79eb9679c6dfec15d4db0520b150e3e4d3617055c1428172bab4c47081320751a01fc75c0d14927719ee1fa6e738b927a5b63842f2b991bcb2aacb359e7d255a4c7a68cde619eaaf8b8e8b367b468f63ced59ba92f649397d85465deaa5e4f732754f803558c988745a2090397c933dd14b1dd0295da381db02146e87c3a999296d155a7a905675814fd7851e9f5f7741851e4052bb01dca6a2110a2667d64bccb07e55275a0e8ec9863009"}, 0xb8, 0x0) msgsnd(r1, &(0x7f0000001340)={0x0, "ce9e30762fd269e9ca1a4fee0e86954e5cd4279662e8c05d84a13741097e31"}, 0x27, 0x800) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000001380)) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01) getresgid(&(0x7f00000013c0), &(0x7f0000001400), &(0x7f0000001440)=0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000001480)={{0x2, 0xee00, 0xffffffffffffffff, 0xee01, r3, 0xa0, 0x9}, 0x0, 0x0, 0x7, 0x53c, 0x1112, 0x1000, 0xfffffffffffffffc, 0x4, 0x1, 0xff, 0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000001500)=""/73) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0xb4, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x6c, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x4004) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001a80)={&(0x7f0000001900)={0x15c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ffc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa0c1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31796639}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x79b5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e02174f}]}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) 11:53:04 executing program 7: clone3(&(0x7f0000000540)={0xa0000000, &(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, {0x11}, &(0x7f0000000340)=""/189, 0xbd, &(0x7f0000000400)=""/251, &(0x7f0000000500)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6}, 0x58) r2 = clone3(&(0x7f0000001740)={0x10080, &(0x7f00000005c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0, {0x22}, &(0x7f0000000680)=""/4096, 0x1000, &(0x7f0000001680)=""/78, &(0x7f0000001700)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001800)='./cgroup.net/syz1\x00', 0x200002, 0x0) clone3(&(0x7f0000001840)={0x1000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x14}, &(0x7f00000000c0)=""/197, 0xc5, &(0x7f00000001c0)=""/130, &(0x7f00000017c0)=[0xffffffffffffffff, r1, r2, 0xffffffffffffffff, 0x0], 0x5, {r5}}, 0x58) openat$cgroup_procs(r5, &(0x7f00000018c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x1, 0x1, 0x7, 0x0, 0x10001, 0x1000, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0x7}, 0x40c80, 0x1, 0x8001, 0x1, 0x4, 0xff, 0x7, 0x0, 0x4, 0x0, 0x8000}, r5, 0xd, 0xffffffffffffffff, 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000019c0)=0x14) r7 = openat$cgroup(r5, &(0x7f0000001a00)='syz0\x00', 0x200002, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x81, 0x83, &(0x7f0000001a40)=""/131) clone3(&(0x7f0000001c80)={0x10c202100, &(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)=0x0, {0x32}, &(0x7f0000001bc0), 0x0, &(0x7f0000001c00)=""/36, &(0x7f0000001c40)=[r3, r6, r6], 0x3, {r5}}, 0x58) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001d00)='/sys/module/acpi_x86', 0x0, 0x1) openat$cgroup_procs(r9, &(0x7f0000001d40)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000001d80)={{0x1, 0x1, 0x18, r9, {0x0, 0xee00}}, './file0\x00'}) r11 = fork() ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001e00)={'wlan1\x00', 0x0}) clone3(&(0x7f0000002040)={0x11000, &(0x7f0000001e40), &(0x7f0000001e80)=0x0, &(0x7f0000001ec0), {0x21}, &(0x7f0000001f00)=""/50, 0x32, &(0x7f0000001f40)=""/161, &(0x7f0000002000)=[0xffffffffffffffff, r4, r0, r8, 0x0, r3, 0x0, r1], 0x8, {r7}}, 0x58) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000002180)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x6c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5e}, @void, @val={0xc, 0x99, {0x3, 0x60}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}, @NL80211_ATTR_PID={0x8, 0x52, r11}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x2d}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_PID={0x8, 0x52, r13}]}, 0x6c}}, 0x805) openat$cgroup_netprio_ifpriomap(r10, &(0x7f00000021c0), 0x2, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r9, &(0x7f0000002300)={&(0x7f0000002200), 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x68, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) mkdirat$cgroup(r10, &(0x7f0000002340)='syz0\x00', 0x1ff) [ 129.790392] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.797593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.803210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.804824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.807112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.810838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.811346] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.814732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.816384] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.817989] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.818573] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.822802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 129.824487] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 129.827499] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.827565] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.831278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.843522] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.846379] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.849276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 129.850570] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.851738] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.857334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.860535] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.868778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.871149] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 129.872341] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.887923] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.896351] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.897728] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.898804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.902863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.906840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 129.912698] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.920163] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.922181] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 129.923800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.944199] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 129.951944] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 129.954086] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 129.956003] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 129.959231] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 129.960515] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 129.964889] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 129.966091] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.982630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 130.036772] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 130.049888] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 130.052837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.882542] Bluetooth: hci2: command tx timeout [ 131.883249] Bluetooth: hci0: command tx timeout [ 131.945607] Bluetooth: hci3: command tx timeout [ 131.946772] Bluetooth: hci1: command tx timeout [ 131.947333] Bluetooth: hci5: command tx timeout [ 132.010577] Bluetooth: hci4: command tx timeout [ 132.073575] Bluetooth: hci7: command tx timeout [ 132.137554] Bluetooth: hci6: command tx timeout [ 133.929602] Bluetooth: hci2: command tx timeout [ 133.930105] Bluetooth: hci0: command tx timeout [ 133.994499] Bluetooth: hci5: command tx timeout [ 133.994989] Bluetooth: hci1: command tx timeout [ 133.995020] Bluetooth: hci3: command tx timeout [ 134.058589] Bluetooth: hci4: command tx timeout [ 134.123480] Bluetooth: hci7: command tx timeout [ 134.185563] Bluetooth: hci6: command tx timeout [ 135.979537] Bluetooth: hci2: command tx timeout [ 135.979772] Bluetooth: hci0: command tx timeout [ 136.042596] Bluetooth: hci3: command tx timeout [ 136.042630] Bluetooth: hci5: command tx timeout [ 136.043221] Bluetooth: hci1: command tx timeout [ 136.106513] Bluetooth: hci4: command tx timeout [ 136.169508] Bluetooth: hci7: command tx timeout [ 136.234544] Bluetooth: hci6: command tx timeout [ 138.025760] Bluetooth: hci2: command tx timeout [ 138.026290] Bluetooth: hci0: command tx timeout [ 138.089515] Bluetooth: hci1: command tx timeout [ 138.090518] Bluetooth: hci5: command tx timeout [ 138.090992] Bluetooth: hci3: command tx timeout [ 138.153614] Bluetooth: hci4: command tx timeout [ 138.218508] Bluetooth: hci7: command tx timeout [ 138.281547] Bluetooth: hci6: command tx timeout [ 192.130890] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.132784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.134864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.140653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.142378] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 192.144674] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.180373] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.191882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.194029] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.196615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.198233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.200695] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.205804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.209000] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.210556] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 192.212053] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.213088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 192.214691] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 192.386824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.394384] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.399577] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.404017] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.405879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.410031] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.413751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.416763] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.417837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 192.421010] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.429803] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 192.436990] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.451292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.455950] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.464046] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.473848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.484614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.520666] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.526235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.536883] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 192.538953] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 192.544275] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.545213] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.547808] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 192.549234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.554340] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 192.578589] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 192.598018] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 192.613215] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 192.631725] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 194.153528] Bluetooth: hci0: command tx timeout [ 194.281563] Bluetooth: hci1: command tx timeout [ 194.281594] Bluetooth: hci2: command tx timeout [ 194.537656] Bluetooth: hci4: command tx timeout [ 194.537697] Bluetooth: hci3: command tx timeout [ 194.601576] Bluetooth: hci5: command tx timeout [ 194.665549] Bluetooth: hci6: command tx timeout [ 194.729926] Bluetooth: hci7: command tx timeout [ 196.201580] Bluetooth: hci0: command tx timeout [ 196.331473] Bluetooth: hci2: command tx timeout [ 196.332014] Bluetooth: hci1: command tx timeout [ 196.585574] Bluetooth: hci3: command tx timeout [ 196.586078] Bluetooth: hci4: command tx timeout [ 196.651560] Bluetooth: hci5: command tx timeout [ 196.713500] Bluetooth: hci6: command tx timeout [ 196.778505] Bluetooth: hci7: command tx timeout [ 198.249564] Bluetooth: hci0: command tx timeout [ 198.379485] Bluetooth: hci1: command tx timeout [ 198.379512] Bluetooth: hci2: command tx timeout [ 198.633564] Bluetooth: hci3: command tx timeout [ 198.633904] Bluetooth: hci4: command tx timeout [ 198.697572] Bluetooth: hci5: command tx timeout [ 198.762278] Bluetooth: hci6: command tx timeout [ 198.826440] Bluetooth: hci7: command tx timeout [ 200.297608] Bluetooth: hci0: command tx timeout [ 200.425723] Bluetooth: hci1: command tx timeout [ 200.428466] Bluetooth: hci2: command tx timeout [ 200.493637] modprobe (3993) used greatest stack depth: 24216 bytes left [ 200.683063] Bluetooth: hci3: command tx timeout [ 200.683144] Bluetooth: hci4: command tx timeout [ 200.745569] Bluetooth: hci5: command tx timeout [ 200.809520] Bluetooth: hci6: command tx timeout [ 200.873484] Bluetooth: hci7: command tx timeout [ 254.434354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.436602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.437624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.439896] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.441318] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 254.464730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.484771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.486273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.489279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.494055] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.495776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 254.497213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.582008] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.584887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.590313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.607604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.610677] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 254.614089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.669274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.672860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.675774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.678353] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.680065] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 254.681326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.785251] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.787305] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 254.789189] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.790712] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.797090] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.798851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.803125] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.804681] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 254.805811] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.813653] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.816984] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 254.821895] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 254.825728] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.828995] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.832572] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.839561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.843123] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 254.847520] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.857316] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.860717] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.863321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 254.879910] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.882858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 254.885021] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.489543] Bluetooth: hci0: command tx timeout [ 256.553516] Bluetooth: hci1: command tx timeout [ 256.681531] Bluetooth: hci2: command tx timeout [ 256.809476] Bluetooth: hci3: command tx timeout [ 256.874174] Bluetooth: hci7: command tx timeout [ 256.937545] Bluetooth: hci5: command tx timeout [ 256.938183] Bluetooth: hci6: command tx timeout [ 257.001486] Bluetooth: hci4: command tx timeout [ 258.538442] Bluetooth: hci0: command tx timeout [ 258.601471] Bluetooth: hci1: command tx timeout [ 258.729511] Bluetooth: hci2: command tx timeout [ 258.857476] Bluetooth: hci3: command tx timeout [ 258.922118] Bluetooth: hci7: command tx timeout [ 258.985560] Bluetooth: hci6: command tx timeout [ 258.986044] Bluetooth: hci5: command tx timeout [ 259.049551] Bluetooth: hci4: command tx timeout [ 260.585514] Bluetooth: hci0: command tx timeout [ 260.649478] Bluetooth: hci1: command tx timeout [ 260.777481] Bluetooth: hci2: command tx timeout [ 260.905487] Bluetooth: hci3: command tx timeout [ 260.982425] Bluetooth: hci7: command tx timeout [ 261.034775] Bluetooth: hci6: command tx timeout [ 261.035324] Bluetooth: hci5: command tx timeout [ 261.097532] Bluetooth: hci4: command tx timeout [ 262.633514] Bluetooth: hci0: command tx timeout [ 262.697560] Bluetooth: hci1: command tx timeout [ 262.827517] Bluetooth: hci2: command tx timeout [ 262.953480] Bluetooth: hci3: command tx timeout [ 263.017626] Bluetooth: hci7: command tx timeout [ 263.081611] Bluetooth: hci5: command tx timeout [ 263.082113] Bluetooth: hci6: command tx timeout [ 263.145480] Bluetooth: hci4: command tx timeout [ 316.740076] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.746796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.768760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.771748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.773856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.775312] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.776493] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.777757] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 316.779161] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.780953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.784600] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 316.785758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.919324] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.921573] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.922729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.927955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.932586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.933969] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.940819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.942748] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 316.944348] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.944546] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.946929] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 316.949682] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.991578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.002790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.005145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.022762] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.022880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.025783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.030906] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.032833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.038871] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 317.040021] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.063011] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 317.066741] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.068893] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.079109] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 317.086151] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.088649] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 317.103617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.109749] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.111542] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 317.116355] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 317.140813] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 317.147604] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 317.153230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 317.154348] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 318.825540] Bluetooth: hci1: command tx timeout [ 318.826348] Bluetooth: hci0: command tx timeout [ 319.019547] Bluetooth: hci3: command tx timeout [ 319.020856] Bluetooth: hci2: command tx timeout [ 319.145606] Bluetooth: hci5: command tx timeout [ 319.146341] Bluetooth: hci4: command tx timeout [ 319.209497] Bluetooth: hci7: command tx timeout [ 319.210146] Bluetooth: hci6: command tx timeout [ 320.874497] Bluetooth: hci1: command tx timeout [ 320.875954] Bluetooth: hci0: command tx timeout [ 321.066609] Bluetooth: hci2: command tx timeout [ 321.067169] Bluetooth: hci3: command tx timeout [ 321.194908] Bluetooth: hci4: command tx timeout [ 321.195466] Bluetooth: hci5: command tx timeout [ 321.258749] Bluetooth: hci7: command tx timeout [ 321.259273] Bluetooth: hci6: command tx timeout [ 322.921565] Bluetooth: hci1: command tx timeout [ 322.922100] Bluetooth: hci0: command tx timeout [ 323.114587] Bluetooth: hci2: command tx timeout [ 323.115131] Bluetooth: hci3: command tx timeout [ 323.241512] Bluetooth: hci5: command tx timeout [ 323.242031] Bluetooth: hci4: command tx timeout [ 323.305629] Bluetooth: hci6: command tx timeout [ 323.306121] Bluetooth: hci7: command tx timeout [ 324.970702] Bluetooth: hci0: command tx timeout [ 324.971245] Bluetooth: hci1: command tx timeout [ 325.161630] Bluetooth: hci3: command tx timeout [ 325.162144] Bluetooth: hci2: command tx timeout [ 325.289648] Bluetooth: hci4: command tx timeout [ 325.290158] Bluetooth: hci5: command tx timeout [ 325.355583] Bluetooth: hci7: command tx timeout [ 325.356073] Bluetooth: hci6: command tx timeout [ 378.886213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.888551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.896659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.911796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.914906] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 378.945992] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.008745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.016644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.021014] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.026085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.034291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 379.041233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.065019] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.066960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.071629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.104081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.107627] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 379.109135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.201088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.203813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.206787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.212584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.217603] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 379.219896] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.274696] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.283250] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.289724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.293772] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.310164] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.318923] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.319770] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.353648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 379.365237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.385099] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 379.391749] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 379.402653] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.415539] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 379.421651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 379.423913] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.430818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 379.440643] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 379.451991] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 379.460671] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 379.518651] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 379.525533] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 379.546003] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.549907] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 379.551079] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 380.969576] Bluetooth: hci0: command tx timeout [ 381.098672] Bluetooth: hci1: command tx timeout [ 381.161473] Bluetooth: hci2: command tx timeout [ 381.289697] Bluetooth: hci3: command tx timeout [ 381.482412] Bluetooth: hci4: command tx timeout [ 381.548578] Bluetooth: hci5: command tx timeout [ 381.609440] Bluetooth: hci7: command tx timeout [ 381.673421] Bluetooth: hci6: command tx timeout [ 383.017574] Bluetooth: hci0: command tx timeout [ 383.146479] Bluetooth: hci1: command tx timeout [ 383.209481] Bluetooth: hci2: command tx timeout [ 383.337428] Bluetooth: hci3: command tx timeout [ 383.529581] Bluetooth: hci4: command tx timeout [ 383.593419] Bluetooth: hci5: command tx timeout [ 383.657565] Bluetooth: hci7: command tx timeout [ 383.721480] Bluetooth: hci6: command tx timeout [ 385.065451] Bluetooth: hci0: command tx timeout [ 385.196399] Bluetooth: hci1: command tx timeout [ 385.257534] Bluetooth: hci2: command tx timeout [ 385.386075] Bluetooth: hci3: command tx timeout [ 385.577658] Bluetooth: hci4: command tx timeout [ 385.643437] Bluetooth: hci5: command tx timeout [ 385.705560] Bluetooth: hci7: command tx timeout [ 385.769436] Bluetooth: hci6: command tx timeout [ 387.113433] Bluetooth: hci0: command tx timeout [ 387.241432] Bluetooth: hci1: command tx timeout [ 387.305445] Bluetooth: hci2: command tx timeout [ 387.433484] Bluetooth: hci3: command tx timeout [ 387.634526] Bluetooth: hci4: command tx timeout [ 387.689691] Bluetooth: hci5: command tx timeout [ 387.755638] Bluetooth: hci7: command tx timeout [ 387.817575] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 11:58:14 Registers: info registers vcpu 0 RAX=ffffed1001e76810 RBX=ffffed1001e76811 RCX=ffffffff81bf6653 RDX=ffffed1001e76811 RSI=0000000000000008 RDI=ffff88800f3b4080 RBP=ffffed1001e76810 RSP=ffff88801ad678c0 R8 =0000000000000000 R9 =ffffed1001e76810 R10=ffff88800f3b4087 R11=0000000000000001 R12=ffff888009fb3500 R13=ffff88800f3b4000 R14=ffff88800f3b4080 R15=ffff8880090d82d8 RIP=ffffffff818bf371 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa8ac04f368 CR3=0000000022964000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff813f2420 RCX=0000000000000001 RDX=1ffff1100d9e1392 RSI=ffffffff811a3dbe RDI=ffff88806cf09b4c RBP=ffff88806cf09b10 RSP=ffff88806cf09a78 R8 =0000000000000001 R9 =ffff88806cf09ab8 R10=000000000003c001 R11=0000000000007db1 R12=ffff88806cf09b40 R13=0000000000000000 R14=ffff888033deb700 R15=ffff8880131274a0 RIP=ffffffff810d1ac9 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe7600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe8fb217288 CR3=0000000025450000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000