Warning: Permanently added '[localhost]:24950' (ECDSA) to the list of known hosts. 2024/12/25 05:39:40 fuzzer started 2024/12/25 05:39:41 dialing manager at localhost:34561 syzkaller login: [ 68.499972] cgroup: Unknown subsys name 'net' [ 68.588593] cgroup: Unknown subsys name 'cpuset' [ 68.618494] cgroup: Unknown subsys name 'rlimit' 2024/12/25 05:39:58 syscalls: 204 2024/12/25 05:39:58 code coverage: enabled 2024/12/25 05:39:58 comparison tracing: enabled 2024/12/25 05:39:58 extra coverage: enabled 2024/12/25 05:39:58 setuid sandbox: enabled 2024/12/25 05:39:58 namespace sandbox: enabled 2024/12/25 05:39:58 Android sandbox: enabled 2024/12/25 05:39:58 fault injection: enabled 2024/12/25 05:39:58 leak checking: enabled 2024/12/25 05:39:58 net packet injection: enabled 2024/12/25 05:39:58 net device setup: enabled 2024/12/25 05:39:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/25 05:39:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/25 05:39:58 USB emulation: enabled 2024/12/25 05:39:58 hci packet injection: enabled 2024/12/25 05:39:58 wifi device emulation: enabled 2024/12/25 05:39:58 802.15.4 emulation: enabled 2024/12/25 05:39:58 fetching corpus: 0, signal 0/0 (executing program) 2024/12/25 05:40:00 starting 8 fuzzer processes 05:40:00 executing program 0: socketpair(0x23, 0x4, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00') prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffe000/0x1000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom1\x00', 0x800, 0x0) socketpair(0x8, 0x2, 0xfffffffe, &(0x7f0000000200)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000240)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) socketpair(0x1d, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000300)) r3 = syz_open_dev$evdev(&(0x7f0000000340), 0x2, 0x2000) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000380)=""/197) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000480)={'ip6gre0\x00'}) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000004c0)={0x1, 0x200, 0x3, 0x5, 0x2, 0xfffffe01}) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x751002, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000540)={{0x3, 0x100, 0x3, 0x0, 0x2, 0x7}, 0x1f2, [0x800, 0x2, 0x40, 0x5, 0x9, 0xda, 0x7fffffff, 0x3, 0x10001, 0x0, 0x6, 0x2, 0x1f, 0xa9f, 0x8, 0x1000, 0x400, 0xfffffffe, 0x5, 0x4, 0x7, 0x3, 0x5, 0x101, 0x6, 0xd, 0x9, 0x6, 0x0, 0x9, 0x85c, 0x0, 0x80000001, 0x5, 0xfffffff7, 0x9, 0x7f, 0x3, 0xfffffeff, 0x7, 0x1, 0x3, 0x1, 0x4454, 0x1, 0x0, 0xffffffff, 0x6020, 0x2, 0xfff, 0x40, 0x1, 0x2, 0x1, 0x8, 0x1, 0x2a0, 0x40, 0x463, 0x7fff, 0x3, 0x8, 0x3, 0x7, 0x90, 0x9d3, 0x42, 0x8001, 0x0, 0x2, 0x5b, 0xffffff81, 0x7fffffff, 0x6d, 0x10000, 0x9, 0x6, 0xc68, 0x471d, 0x20, 0x0, 0xcc, 0x9, 0xff, 0x200000, 0x1000, 0x1, 0xff, 0x6, 0x8, 0x3, 0xfff, 0x82c5, 0x9, 0x4, 0x3, 0x6, 0x6, 0x9, 0xffffffc1, 0x5, 0x7, 0x808, 0x3f, 0x5, 0x8, 0x7, 0x6, 0x9, 0x22e, 0x101, 0x5, 0x1d9af039, 0x5, 0x1ff, 0xfffffffc, 0x80000000, 0x1f, 0x3, 0xffffffff, 0x800, 0x2, 0x4, 0x0, 0xffffff81, 0xee7, 0x8001, 0xfffffffe, 0x3f, 0x1, 0x2, 0x4cd4, 0x2, 0x1, 0x0, 0x0, 0xfff, 0x7f4, 0x3, 0x101, 0x2a0c, 0x401, 0x2, 0x7, 0x10001, 0xb7, 0x2, 0x8000, 0x2, 0xffffffff, 0x1, 0x7, 0x1, 0x100, 0xfff, 0x3, 0x4e, 0x7, 0x401, 0x1, 0x6, 0x9, 0xfffff801, 0x9, 0x7, 0x0, 0xd120, 0x7ff, 0x11, 0x3, 0x0, 0xfffffff9, 0x6, 0x2, 0x7f, 0x2, 0x2, 0x3, 0x8000, 0x7ff, 0x6, 0x4, 0x3d71, 0x3, 0x0, 0x100, 0x20, 0x1, 0x1, 0x6, 0x0, 0x7, 0xff, 0x1, 0xfffffff7, 0x9, 0x5, 0x8, 0x800, 0x1f, 0x4, 0x0, 0xf671, 0x5, 0x200, 0x0, 0x7, 0xfff, 0x8000, 0xff, 0x3, 0x4, 0x1000, 0x5, 0xfffffffa, 0x80000000, 0x31945a0f, 0x1, 0x7, 0x7fffffff, 0x2, 0x9, 0x2, 0x0, 0x4, 0x6, 0x8, 0x4, 0x5, 0x3, 0x7, 0x0, 0x800, 0x6, 0xc9, 0x5, 0x2e, 0xffff, 0x10001, 0x200, 0x7, 0xe7, 0x0, 0x5, 0x1000, 0x4, 0x1, 0x3, 0x5, 0x4, 0x0, 0x20, 0x407, 0x6, 0x7b, 0x39ab, 0x200, 0x100, 0xc519, 0x5, 0x0, 0x1, 0x7fff, 0x400, 0x0, 0x7fff, 0x2, 0x0, 0x1000, 0xffffffff, 0x6, 0x3, 0x3, 0x7, 0x3f, 0x0, 0x2000000, 0x1, 0x8, 0x3f, 0x4fa4, 0x7, 0x9, 0x5, 0x7fffffff, 0x0, 0x200, 0x101, 0x1000, 0x7, 0x800, 0x7, 0xa3b, 0x9, 0x7, 0x6, 0x2, 0x5, 0x1, 0x4b6c, 0x5, 0x0, 0x7fffffff, 0x80000001, 0x1, 0x8, 0x2, 0xffff477d, 0xbcd5, 0x7120, 0x1, 0x5b40, 0x1, 0x8001, 0x6, 0x8, 0x81, 0x9, 0x804, 0xb9, 0x0, 0x6, 0xfffffbe1, 0x4, 0x5, 0xbe, 0x0, 0x6, 0xfffffff8, 0x1000, 0x7fff, 0x20, 0xeb, 0x6, 0x0, 0x2, 0x1, 0x3c5, 0xfff, 0x9, 0x2, 0x8, 0x15, 0x401, 0x7, 0x7, 0x80000001, 0x7712, 0x7000000, 0x401, 0x7, 0x0, 0x3, 0x8, 0x7f, 0x0, 0x4, 0x8, 0x2, 0x5, 0x5, 0x4, 0x8, 0x5b5, 0x8000, 0x80000001, 0xff, 0xfffffff9, 0x0, 0x101, 0x80, 0x7ff, 0x1, 0x3, 0x2, 0x9, 0xfff, 0xfffffc00, 0xfffffff7, 0x5, 0x7, 0x5, 0x6, 0xf65, 0x7, 0x9, 0x0, 0x80000000, 0x2, 0x9, 0x7ff, 0x8, 0x9, 0x1, 0x9, 0x3, 0xffff, 0x4, 0x5, 0x6, 0x100, 0x8, 0x7fffffff, 0x7, 0x3, 0x101, 0x2, 0x5, 0x6a16, 0x27, 0x80000000, 0x6, 0x54, 0xa9, 0xffffffff, 0x1a6e, 0x5, 0x1000, 0x7ff, 0xffffffff, 0xcc, 0x5, 0x400, 0x41, 0x3a, 0x80000001, 0x3b78, 0x5, 0x7ff, 0x9, 0x80000001, 0x10000, 0x2, 0x64d, 0xfff, 0x7, 0xfffffe01, 0x10001, 0x0, 0x142, 0x40, 0x7fffffff, 0x3, 0x4, 0x41d7, 0x1, 0xb32f, 0x1, 0x6, 0x8, 0x2, 0xffffffff, 0x3, 0x7f, 0xe8, 0x9, 0x7fff, 0x67f4e290, 0x4, 0xff, 0x1, 0x2cda, 0x0, 0xff, 0x46d, 0x400, 0x66f3, 0x0, 0x6, 0x9, 0x587c, 0xc3, 0x2, 0x9eb, 0x9, 0x4, 0xae, 0x8, 0xe492, 0x0, 0x6, 0x7, 0x2, 0x473e5ad4, 0x20, 0xff, 0x6, 0x4, 0x7, 0x9, 0x40, 0x40, 0x1f, 0x10000, 0x1, 0x1f, 0x1bd8, 0x8, 0x1c000, 0x7b, 0x8000, 0x80000000, 0x58, 0x3ff, 0x9, 0x1, 0xa96c, 0x9, 0x0, 0x7, 0x3, 0x1, 0x1, 0x5, 0x60b, 0x3918, 0x6, 0xfff, 0x6e158eec, 0x7fffffff, 0xfffffffd, 0x2, 0x80000001, 0xfff, 0x9, 0x1, 0x9, 0x6, 0x7ff, 0x3, 0x8, 0x8804, 0x2, 0x1, 0x6, 0x3, 0x2, 0x7, 0x8, 0xffffffff, 0x0, 0x2, 0x8000, 0xfffffff9, 0x3ff, 0x0, 0x3, 0x6, 0xffff76aa, 0x8, 0x2, 0x1000, 0xfffffffc, 0x0, 0x0, 0xffffff7f, 0x2, 0x6, 0x800, 0x80000001, 0xdb18, 0x94, 0x401, 0x70000000, 0x7, 0x16, 0x6, 0x401, 0x401, 0x6, 0x10000, 0xfffffffb, 0x8, 0xc0, 0x4, 0x8b, 0xbda4, 0x6, 0x200, 0x9ca, 0x6, 0xfd, 0x7, 0x2, 0x7f, 0x0, 0xff, 0x3, 0x1, 0x98000000, 0x54, 0x3, 0x900000, 0xff, 0x0, 0xfffffff7, 0x788, 0x2, 0x8, 0x8, 0x3f, 0x400, 0x6, 0x7ff, 0x3, 0x6, 0x9, 0x8, 0x1ff, 0x1f, 0x7, 0xf1, 0x7, 0x2, 0x7ff, 0xfffffffb, 0x144, 0x7, 0x4, 0x6, 0x0, 0x3ff, 0x0, 0x7fff, 0x9, 0x7, 0x6, 0x9, 0x200, 0x4, 0x5, 0x2, 0x0, 0x4, 0xfff, 0x9, 0x3, 0xb7b, 0xffffffed, 0xee0, 0x8, 0x7, 0x0, 0x9, 0x80000000, 0x5af, 0x9, 0x1, 0x40000, 0x4, 0x4, 0x5, 0x5, 0x2, 0x1, 0x6, 0x1000, 0x7, 0xfffff7d6, 0x3, 0x3, 0x1ff, 0x8, 0x10001, 0x4, 0x3, 0x1f, 0x80000001, 0x0, 0x3, 0x0, 0x4, 0x9, 0x6, 0x40, 0x0, 0xd167, 0x24, 0x401, 0x4, 0x3ed297a1, 0x0, 0x8, 0x5f, 0x1, 0x8, 0x2, 0x5, 0x8, 0x4, 0x6, 0x4, 0x40, 0x6, 0x5, 0x3f, 0x0, 0x114, 0x1, 0x8000, 0x7, 0x6, 0x6, 0xa80, 0x4, 0x4, 0x800, 0x10001, 0x9, 0xf3, 0x62, 0x80000001, 0x1807, 0xffffffff, 0x0, 0x9, 0xfffffffd, 0x1, 0xdc90, 0x3, 0xff, 0x1e, 0x7, 0x10000, 0x3, 0x2, 0x3800, 0x93af, 0x10000, 0x8001, 0x4, 0xf75, 0x200, 0x7fff, 0x271, 0x6, 0x8, 0x80, 0x20, 0x2, 0x1, 0x9, 0x7ff, 0x3, 0x4, 0x8, 0x2, 0x91, 0x5, 0x8, 0x81, 0x7, 0x80000000, 0xa5, 0x3, 0x8, 0x8, 0x6, 0x0, 0x9, 0x8, 0xffff, 0x7, 0xfb3, 0x1, 0x5, 0x4, 0x100, 0x1, 0x7fffffff, 0x3f, 0x10001, 0x6cba, 0x9, 0xff, 0x2, 0x7, 0x8001, 0x10001, 0x4, 0xffff, 0x2a, 0x5, 0x3, 0xe95, 0x2, 0x8a2, 0x5, 0x3, 0x1ff, 0xfffffffb, 0x1ff, 0xfffffffc, 0x7, 0x87, 0xfffffeff, 0x2, 0x4, 0x7, 0x8, 0x2a6, 0x7, 0x80fe, 0xb64a, 0x3, 0x0, 0x7ce, 0x3f, 0x400, 0x20, 0x1, 0x800, 0x1, 0x0, 0xfffffffd, 0xa7, 0x9, 0xc9f, 0x10000, 0x5, 0x10001, 0x0, 0x8, 0x8000, 0x6, 0x3, 0x100, 0x1, 0x100, 0x802, 0x3, 0x20, 0xdc3f, 0x2, 0x4, 0x4, 0xfe5b, 0xfffffffb, 0x81, 0x1, 0x62, 0xaf, 0x7f, 0x1, 0x7ff, 0xfffff6ae, 0x14a07ee9, 0xa00, 0x1, 0x9, 0xfff, 0x2, 0x1, 0x5, 0x400, 0x6, 0xffffff81, 0x7ff, 0x9, 0x5, 0x7, 0xfffffffd, 0x7f, 0x800, 0x8, 0xffffffff, 0x3, 0x8000, 0x43, 0x705, 0xffffff81, 0x9, 0xff, 0x3, 0x9, 0x9, 0x1f, 0x1f, 0xff, 0x9, 0x3ff, 0x1, 0x800, 0x6, 0x2, 0xfffffff8, 0x6, 0x9, 0x4, 0x1f, 0x7f, 0x9f, 0x18, 0x7f, 0x8001, 0x400, 0x2a6, 0x9, 0x2, 0x2, 0x2, 0x5, 0x1, 0x80, 0x8, 0x830, 0x400, 0x3ff, 0x9, 0xa8000000, 0x5, 0x8, 0x2, 0x80, 0x7ff, 0x4, 0x3, 0x6, 0xfffffffb, 0x5, 0x7f, 0x2, 0x2, 0x101, 0x7fff, 0xfffff449, 0x5, 0x3, 0x80000001, 0xf35, 0x7fffffff, 0x5, 0x8, 0x80, 0x3, 0x1, 0x3f, 0x6, 0x81, 0x6, 0x7, 0x3, 0x8b, 0x6, 0xfff, 0x4, 0xa11, 0x8, 0x5363, 0x3, 0x8, 0x3ff, 0x7, 0x2687, 0x2, 0x6, 0x6, 0xffffffff, 0x3, 0xffffffe0, 0x5, 0x9, 0x800, 0x9, 0x0, 0x7ff, 0x800, 0xa0, 0x1, 0x80, 0x5, 0x7ff, 0x1, 0xfffff800, 0x10000, 0x9, 0x20, 0x1, 0x9, 0x1f, 0x401, 0x8001, 0x4, 0x8, 0x3, 0x0, 0x7fff, 0x5, 0x6, 0x7fff, 0x9, 0x9, 0xcb3, 0x81, 0x4, 0x0, 0x4, 0x7, 0x4, 0x0, 0x3, 0xb5, 0x3, 0x1, 0x3, 0x9, 0x9, 0x6, 0x0, 0xffff0bf7, 0x3ff, 0x4a, 0xe8c, 0x6, 0x7, 0xfffffffa, 0xd149, 0x1ff, 0x5, 0x7, 0x1, 0x0, 0x5, 0x7]}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001580), 0x200202, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f00000015c0)={0x3, 0xa132e83a3c6b71f8, 0x9, 0x3, 0x5, 0x3f}) 05:40:00 executing program 1: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = memfd_secret(0x80000) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff4f}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "03b06d294354f863f878fe9da84067664d439b39"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "d879d0cf5b0f9ce9732f145e3f3e17cea66d91e7db3717e65cef85e54ccdcb29055873821a1d4f717a40"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa0c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x809}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x78}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3e9}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40008}, 0x24000000) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000240)=0x81) r1 = semget$private(0x0, 0x1, 0x80) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/49) semget(0x1, 0x1, 0x400) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, r2, 0x526, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbe9d}]}]}, 0xc8}}, 0x48000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000000}, 0x80) semget$private(0x0, 0x4, 0x40) semget(0x3, 0x1, 0x2) r4 = semget(0x2, 0x1, 0x18) semctl$SEM_INFO(r4, 0x4, 0x13, &(0x7f00000005c0)=""/201) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xa4, 0x0, &(0x7f0000000780)=[@register_looper, @clear_death={0x400c630f, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x2}, @acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @flat=@weak_binder={0x77622a85, 0x80, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000740)={0x0, 0x18, 0x30}}, 0x400}], 0xee, 0x0, &(0x7f0000000840)="440c8c2e0aa3ffa81987661003a92f26b84ca9ee391cac06bdf1c5ec97c327a6497baf76ae386ac5d7f6e4c0fb3988a86e5e53c9fbddd342801b669903c475057705e959fd89b8495606050101952a7b5656467be1dd4ce608811dcd682810954687c255de3b03b81fc2d3f38346832d73f2414a815be95ca04448137d77209cf2b10de1d9523e66d3a201e02ecb08ee5d870b230d8b84c34ead2592c7189902527c0a6673718a9d1f5822cf3ecb262e1ad26aa3be1bfd6a2d8894ed7df79e7beb96e6c4c45dc6ac69c0c4aa6e25e812a26f32fb6b0b983a70f25a710a4f1e9404a03a4a1b1da405098fcf0d7209"}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000d00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x28c, r5, 0x10a, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "2efb8ac1af81fc9f4c8240977470f9d6d4249c5a27606dca46fc9e2b9e12"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "c0eedbd8758d59a237fd4f956d272a2b3ced9019e21e3e6b022ba523"}}, @TIPC_NLA_NODE_ID={0xd1, 0x3, "35820a5197260efb288d8ac6853cd74e13f6ee2daa5fb1ed710e49bbfe9c0c0a3838177863514e7d6e3e94367684a7186a1cebf0d2089c26db31794f4b48480d02f4ff9d31974211e536bf0ad7962b9827c26c29be23481a7ae0025e2fbe83629df6dbc32005c8fb2b9e473fd8d0d70c48b5ebdf32749230bacbadb6aaad132fd7cf6f39be57d3ffa3a5278b5c27b0d687ae03796e4c97046b6e95c7a402a5ec50b60e9baad53e8554aa6e787a5437bb87faee09bcf67b2e1a03475b79fda56f6a5a2e47a20261731b9a948341"}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x20008810}, 0x20000040) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xd4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x714}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000) 05:40:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x3, 0x141480) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@x25, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000140)=""/190, 0xbe}], 0x3}, 0x0, 0x21, 0x1}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10009}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}}, 0x40004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000500)=0x6) r4 = syz_io_uring_complete(0x0) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000540)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x48000) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x4005) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) select(0x40, &(0x7f00000007c0)={0x80, 0x101, 0x1, 0x2, 0x80000001, 0x95, 0x2f7f}, &(0x7f0000000800)={0x1b3aa89e, 0x1, 0x6, 0x7fff, 0x1, 0xffffffff80000000, 0x9, 0x7}, &(0x7f0000000840)={0x3f, 0x62, 0x1, 0xffffffffffffff01, 0xfffffffffffffe00, 0x1, 0x5, 0x8}, &(0x7f00000008c0)={r6, r7/1000+60000}) r8 = memfd_secret(0x0) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff2f2a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20008815) ioctl$SIOCGSTAMP(r8, 0x8906, &(0x7f0000000a40)) clock_nanosleep(0x3, 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)) 05:40:00 executing program 3: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00') clock_getres(0x1, &(0x7f0000000040)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x800, 0x0) clock_gettime(0x2, &(0x7f00000000c0)) clock_gettime(0x3, &(0x7f0000000100)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000001c0)=r2) r3 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000300)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000380)={'ip6_vti0\x00'}) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0xa0, 0x2) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000400)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x22a000, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000480)={"9500e1607c0c52dc981f131d0eff71ad", 0x0, r2, {0x81, 0xff}, {0x40, 0x6}, 0xa000000000, [0x8000, 0xff, 0x954, 0x346fcf67, 0x6, 0x7, 0xf7, 0xffffffffffffffe1, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x101, 0x6, 0xfffffffffffffffa]}) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000580)={0x57, 0x8c5, 0x2, {0x81, 0x80}, {0x6, 0x1}, @ramp={0x6, 0x2, {0x1000, 0x9, 0x1f, 0x1}}}) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) [ 86.809987] audit: type=1400 audit(1735105200.497:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:40:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x48a081) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/91) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000000c0)=""/4096) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000010c0)=""/185) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000001180)=""/98) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000001200)={0x0, 0x1d, 0x0, 0x400, "b5e92c766fcbada6b09af42084b95a5d8aab3f45c025e68cc77aa4726436da60"}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000014c0)={&(0x7f00000012c0)={0x1dc, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x25}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdd0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x23, 0x3, "810e95fff64215ab4c25f212fff02be7d72a9212ee6daae6f06f8214562f5b"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "34fbc9e7684d41882ee62e403180a2e2a2ec8c842e700a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "3051fa4bb9f73b24806b69bf6770769e018a9ba3cfa7afda58d4ff7933cf104b668cb95e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x73, 0x3, "ef2ec19e0c0065cc2d885fc68b677328d7b61551089f3d90b982bab643860b11fbbd7bd84558f9474f9a910e4afdd510fc950e12b5f3213cbe9b6f08f2a3c2d4eff88e219bc502d13e8b2c53fdd799dbe08d6c0d4f92c24bf3db4d21daeb32781b7573409788b01b3109a8d21ee947"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x42f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000001540)=""/159) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000001600)=""/149) r2 = syz_open_dev$evdev(&(0x7f00000016c0), 0x2, 0x680000) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000001700)=""/154) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000017c0)=[0x6b, 0x9]) syz_open_dev$sg(&(0x7f0000001800), 0x100000001, 0x105100) r3 = syz_open_dev$evdev(&(0x7f0000001840), 0x6, 0x88000) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000001880)=""/4096) io_uring_setup(0x2850, &(0x7f0000002880)={0x0, 0x3ba8, 0x0, 0x1, 0x2b}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000003980)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/71, 0x47, 0x1, &(0x7f0000002980)=""/4096, 0x1000}, &(0x7f00000039c0)=0x40) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000003a00)=0x4) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000003a40)=""/181) 05:40:00 executing program 5: ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r0 = socket(0x25, 0x6, 0xfffffff9) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xdc, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xab8}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdfe8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x2004c0d1) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20040) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000300)=0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x164, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x18}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x15eec7cd}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1e2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xde7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7646}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd33}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000005c0)={'bridge0\x00'}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb8, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "25ed7bc4664b368d3a40aa0ef66bb788f9f1e286c26e8eba0bbc"}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000780)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000940)={'nr0\x00'}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000980)=0x10000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000009c0), 0x80000, 0x0) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80002200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40016) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000b40)) 05:40:00 executing program 6: move_pages(0x0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f0000000040)=[0x623d, 0x10000, 0x3, 0x6, 0x0, 0x1, 0x1, 0x5, 0x3], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x2}) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x8, 0x2000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x400080, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000240)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000200)=""/27, 0x1b}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/145, 0x91, 0x0, &(0x7f0000000340)=""/188, 0xbc}, &(0x7f0000000440)=0x40) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000580)=""/151) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000640)=0xd2c, 0x0, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x681a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe41b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd747d40c}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xcc, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff38bd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb42}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "86d04785516a933ad3faecda9cc26c06cd8980e25bb9e5bace3d"}}]}]}, 0xcc}}, 0x20004050) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r1) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x248, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc55}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffd1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe5c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff402}]}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8001, @empty, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe19}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe3c6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff270d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) r4 = syz_open_dev$evdev(&(0x7f0000000d40), 0x2db, 0x240000) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000d80)=""/173) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000e40)=0xd8) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x4000010, r5, 0x8bdd3000) 05:40:00 executing program 7: getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x4, 0x1, 0x20, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40, 0x20, 0x6, 0x6}}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0x7}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000240)={0x2, 0xffffffff, 0x1, 0x2, 0x101, 0x5}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000280)=""/163) r2 = memfd_secret(0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000340)=""/125) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd_index=0x6, 0x6, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0xfffffff9) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000440)={0x2, 0x100, 0x3, 0xb4, 0x1, 0x20}) r4 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe4d}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_VLANID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000005c0)={0x3, 0xfffffffe, 0xffffffff, 0x8, 0x6cc, 0x4}) ioctl$TUNSETGROUP(r2, 0x400454ce, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3}, 0x200) io_uring_setup(0x54f1, &(0x7f0000000640)={0x0, 0xaab0, 0x4, 0x2, 0xf1, 0x0, r4}) [ 88.358715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.361848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.365283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.372862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.378811] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.381822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.416619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.419951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.422182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.430757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.434098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.437835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.487216] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.491566] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.508733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.512915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.516683] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.518781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.563327] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.568434] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.577815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.590024] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.612775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.614550] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.617015] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.619566] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.624616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.628462] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.630826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.633746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.641822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.695828] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.698148] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.701492] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.703965] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.705689] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.716216] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.725066] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.726920] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.730188] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.740563] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.745810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.774781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.780257] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.785853] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.792074] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.793867] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.810595] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.443940] Bluetooth: hci0: command tx timeout [ 90.507621] Bluetooth: hci1: command tx timeout [ 90.571452] Bluetooth: hci2: command tx timeout [ 90.764138] Bluetooth: hci5: command tx timeout [ 90.764514] Bluetooth: hci3: command tx timeout [ 90.827462] Bluetooth: hci4: command tx timeout [ 90.892467] Bluetooth: hci6: command tx timeout [ 90.955459] Bluetooth: hci7: command tx timeout [ 92.491512] Bluetooth: hci0: command tx timeout [ 92.555511] Bluetooth: hci1: command tx timeout [ 92.619475] Bluetooth: hci2: command tx timeout [ 92.811601] Bluetooth: hci3: command tx timeout [ 92.811871] Bluetooth: hci5: command tx timeout [ 92.876456] Bluetooth: hci4: command tx timeout [ 92.940507] Bluetooth: hci6: command tx timeout [ 93.004576] Bluetooth: hci7: command tx timeout [ 94.540450] Bluetooth: hci0: command tx timeout [ 94.604436] Bluetooth: hci1: command tx timeout [ 94.668582] Bluetooth: hci2: command tx timeout [ 94.859593] Bluetooth: hci5: command tx timeout [ 94.860414] Bluetooth: hci3: command tx timeout [ 94.924124] Bluetooth: hci4: command tx timeout [ 94.988411] Bluetooth: hci6: command tx timeout [ 95.051580] Bluetooth: hci7: command tx timeout [ 96.587488] Bluetooth: hci0: command tx timeout [ 96.652460] Bluetooth: hci1: command tx timeout [ 96.715485] Bluetooth: hci2: command tx timeout [ 96.907597] Bluetooth: hci3: command tx timeout [ 96.907648] Bluetooth: hci5: command tx timeout [ 96.971518] Bluetooth: hci4: command tx timeout [ 97.036429] Bluetooth: hci6: command tx timeout [ 97.099581] Bluetooth: hci7: command tx timeout [ 151.221232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.223430] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.226164] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.228573] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.234435] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.238652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.242637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.246549] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.248281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.252821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.255256] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.259621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.282747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.298051] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.301685] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.306276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.310204] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.313856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.317963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.320896] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.322684] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.331716] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.339981] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.342609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.391536] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.401732] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.404977] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.434690] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.449493] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.456193] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.457067] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.461690] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.467896] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.473769] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.480768] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.482829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.484888] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.486633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.497022] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.509166] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.510946] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.515645] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.517014] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.520702] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.522293] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.532934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.536939] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.540672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.292445] Bluetooth: hci0: command tx timeout [ 153.356107] Bluetooth: hci1: command tx timeout [ 153.356775] Bluetooth: hci3: command tx timeout [ 153.356879] Bluetooth: hci2: command tx timeout [ 153.547536] Bluetooth: hci7: command tx timeout [ 153.548817] Bluetooth: hci4: command tx timeout [ 153.611483] Bluetooth: hci5: command tx timeout [ 153.675575] Bluetooth: hci6: command tx timeout [ 155.339532] Bluetooth: hci0: command tx timeout [ 155.405367] Bluetooth: hci3: command tx timeout [ 155.405937] Bluetooth: hci1: command tx timeout [ 155.405971] Bluetooth: hci2: command tx timeout [ 155.596521] Bluetooth: hci7: command tx timeout [ 155.596706] Bluetooth: hci4: command tx timeout [ 155.660713] Bluetooth: hci5: command tx timeout [ 155.724584] Bluetooth: hci6: command tx timeout [ 157.388431] Bluetooth: hci0: command tx timeout [ 157.451567] Bluetooth: hci2: command tx timeout [ 157.454369] Bluetooth: hci3: command tx timeout [ 157.454445] Bluetooth: hci1: command tx timeout [ 157.643522] Bluetooth: hci7: command tx timeout [ 157.644406] Bluetooth: hci4: command tx timeout [ 157.708458] Bluetooth: hci5: command tx timeout [ 157.771396] Bluetooth: hci6: command tx timeout [ 159.438371] Bluetooth: hci0: command tx timeout [ 159.499486] Bluetooth: hci3: command tx timeout [ 159.499523] Bluetooth: hci1: command tx timeout [ 159.499914] Bluetooth: hci2: command tx timeout [ 159.692050] Bluetooth: hci4: command tx timeout [ 159.692076] Bluetooth: hci7: command tx timeout [ 159.755626] Bluetooth: hci5: command tx timeout [ 159.821379] Bluetooth: hci6: command tx timeout [ 213.082843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.088700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.091611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.098639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.105854] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.108217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.342211] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.345290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.349488] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.358591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.362735] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.364984] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.398498] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.403014] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.406636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.419034] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.421027] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.423652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.491495] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.496639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.509617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.510986] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.532162] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.537597] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.541062] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.545097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.548067] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.553665] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.555631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.557259] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.558737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.565754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.566014] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.573249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.575135] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.576511] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.584513] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.588196] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.593634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.595764] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.600704] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.603497] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.604738] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.609883] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.611244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.612284] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.628700] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.635073] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.179426] Bluetooth: hci0: command tx timeout [ 215.435719] Bluetooth: hci1: command tx timeout [ 215.501364] Bluetooth: hci2: command tx timeout [ 215.627412] Bluetooth: hci6: command tx timeout [ 215.628175] Bluetooth: hci7: command tx timeout [ 215.693419] Bluetooth: hci4: command tx timeout [ 215.694150] Bluetooth: hci5: command tx timeout [ 215.756351] Bluetooth: hci3: command tx timeout [ 217.228581] Bluetooth: hci0: command tx timeout [ 217.483374] Bluetooth: hci1: command tx timeout [ 217.548460] Bluetooth: hci2: command tx timeout [ 217.677170] Bluetooth: hci7: command tx timeout [ 217.677783] Bluetooth: hci6: command tx timeout [ 217.740430] Bluetooth: hci5: command tx timeout [ 217.740869] Bluetooth: hci4: command tx timeout [ 217.803400] Bluetooth: hci3: command tx timeout [ 219.276382] Bluetooth: hci0: command tx timeout [ 219.533355] Bluetooth: hci1: command tx timeout [ 219.595482] Bluetooth: hci2: command tx timeout [ 219.723525] Bluetooth: hci6: command tx timeout [ 219.723996] Bluetooth: hci7: command tx timeout [ 219.787400] Bluetooth: hci5: command tx timeout [ 219.787845] Bluetooth: hci4: command tx timeout [ 219.851404] Bluetooth: hci3: command tx timeout [ 221.324388] Bluetooth: hci0: command tx timeout [ 221.579375] Bluetooth: hci1: command tx timeout [ 221.644469] Bluetooth: hci2: command tx timeout [ 221.771535] Bluetooth: hci7: command tx timeout [ 221.772003] Bluetooth: hci6: command tx timeout [ 221.835463] Bluetooth: hci4: command tx timeout [ 221.835897] Bluetooth: hci5: command tx timeout [ 221.900608] Bluetooth: hci3: command tx timeout [ 275.997692] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.002859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.006885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.015839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.019173] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.021088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.124792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.129608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.136657] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.142827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.146668] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.152002] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.196662] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.201035] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.203355] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.210850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.218472] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.226866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.333819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.347940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.351652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.356695] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.367007] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.369895] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.385570] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.400439] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.415020] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.420099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.426662] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.429700] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.431600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.439271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.445697] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.474985] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.492048] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.495713] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.497757] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.504237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.507371] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.508819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.508898] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.510883] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.513918] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.525543] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.537747] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.539202] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.572717] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.580462] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.091436] Bluetooth: hci0: command tx timeout [ 278.221394] Bluetooth: hci1: command tx timeout [ 278.283380] Bluetooth: hci2: command tx timeout [ 278.475434] Bluetooth: hci3: command tx timeout [ 278.539497] Bluetooth: hci4: command tx timeout [ 278.667461] Bluetooth: hci5: command tx timeout [ 278.667499] Bluetooth: hci7: command tx timeout [ 278.732414] Bluetooth: hci6: command tx timeout [ 280.140401] Bluetooth: hci0: command tx timeout [ 280.267512] Bluetooth: hci1: command tx timeout [ 280.331536] Bluetooth: hci2: command tx timeout [ 280.523384] Bluetooth: hci3: command tx timeout [ 280.588469] Bluetooth: hci4: command tx timeout [ 280.715366] Bluetooth: hci5: command tx timeout [ 280.716479] Bluetooth: hci7: command tx timeout [ 280.779396] Bluetooth: hci6: command tx timeout [ 282.187479] Bluetooth: hci0: command tx timeout [ 282.315535] Bluetooth: hci1: command tx timeout [ 282.379703] Bluetooth: hci2: command tx timeout [ 282.572417] Bluetooth: hci3: command tx timeout [ 282.636484] Bluetooth: hci4: command tx timeout [ 282.763534] Bluetooth: hci7: command tx timeout [ 282.763598] Bluetooth: hci5: command tx timeout [ 282.827466] Bluetooth: hci6: command tx timeout [ 284.235508] Bluetooth: hci0: command tx timeout [ 284.363423] Bluetooth: hci1: command tx timeout [ 284.427389] Bluetooth: hci2: command tx timeout [ 284.619495] Bluetooth: hci3: command tx timeout [ 284.684325] Bluetooth: hci4: command tx timeout [ 284.811469] Bluetooth: hci7: command tx timeout [ 284.812095] Bluetooth: hci5: command tx timeout [ 284.875384] Bluetooth: hci6: command tx timeout [ 338.139784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.143076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.146172] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.154816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.159104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.164029] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.335128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.338708] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.343747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.352675] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.357946] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.360462] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.396211] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.403057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.407947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.427231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.442957] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.449667] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.502697] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.525811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.530434] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.532501] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.539766] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.544634] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.546109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.547654] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.549902] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.551363] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.560677] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.561322] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.568618] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.568753] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.592901] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.596727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.599080] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.601497] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.606773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.609611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.616947] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.626438] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.635855] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.639161] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.652820] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.660633] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.674808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.675852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.693821] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.714576] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.236425] Bluetooth: hci0: command tx timeout [ 340.428390] Bluetooth: hci1: command tx timeout [ 340.555420] Bluetooth: hci2: command tx timeout [ 340.683352] Bluetooth: hci4: command tx timeout [ 340.748444] Bluetooth: hci3: command tx timeout [ 340.811564] Bluetooth: hci6: command tx timeout [ 340.812898] Bluetooth: hci7: command tx timeout [ 340.813488] Bluetooth: hci5: command tx timeout [ 342.283795] Bluetooth: hci0: command tx timeout [ 342.475360] Bluetooth: hci1: command tx timeout [ 342.603419] Bluetooth: hci2: command tx timeout [ 342.731812] Bluetooth: hci4: command tx timeout [ 342.795963] Bluetooth: hci3: command tx timeout [ 342.859444] Bluetooth: hci6: command tx timeout [ 342.860421] Bluetooth: hci7: command tx timeout [ 342.860453] Bluetooth: hci5: command tx timeout [ 344.332323] Bluetooth: hci0: command tx timeout [ 344.524366] Bluetooth: hci1: command tx timeout [ 344.652406] Bluetooth: hci2: command tx timeout [ 344.781308] Bluetooth: hci4: command tx timeout [ 344.843360] Bluetooth: hci3: command tx timeout [ 344.907479] Bluetooth: hci6: command tx timeout [ 344.907907] Bluetooth: hci5: command tx timeout [ 344.908430] Bluetooth: hci7: command tx timeout [ 346.379357] Bluetooth: hci0: command tx timeout [ 346.572377] Bluetooth: hci1: command tx timeout [ 346.699510] Bluetooth: hci2: command tx timeout [ 346.827402] Bluetooth: hci4: command tx timeout [ 346.891414] Bluetooth: hci3: command tx timeout [ 346.955964] Bluetooth: hci7: command tx timeout [ 346.956309] Bluetooth: hci5: command tx timeout [ 346.956443] Bluetooth: hci6: command tx timeout [ 395.819655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.821188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 VM DIAGNOSIS: 05:45:09 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000cc0 RCX=0000000000000000 RDX=1ffff11002a6c147 RSI=ffffffff85cf7be0 RDI=0000000000000cc0 RBP=ffff888024f87910 RSP=ffff888024f878b0 R8 =0000000000000001 R9 =ffff888015360a40 R10=ffffffff863fcc97 R11=0000000000000000 R12=ffff888008feedc0 R13=0000000000000cc0 R14=0000000000000098 R15=ffffffff8137fe23 RIP=ffffffff81a498f8 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558bca366080 CR3=0000000034966000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88802bf38001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88802bf37b01 RSI=ffff88802bf37b68 RDI=ffff88802bf37b68 RBP=ffff88802bf37850 RSP=ffff88802bf37780 R8 =0000000000000001 R9 =ffff88802bf37838 R10=000000000003aab6 R11=00000000000241d9 R12=ffff88802bf37858 R13=ffff88802bf37840 R14=ffff88802bf37b68 R15=ffff88802bf377f8 RIP=ffffffff813491c0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561380927008 CR3=0000000016132000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000