Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:54867' (ECDSA) to the list of known hosts. 2025/01/08 06:13:37 fuzzer started 2025/01/08 06:13:38 dialing manager at localhost:42449 syzkaller login: [ 62.800990] cgroup: Unknown subsys name 'net' [ 62.878049] cgroup: Unknown subsys name 'cpuset' [ 62.914327] cgroup: Unknown subsys name 'rlimit' [ 68.645330] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/08 06:13:56 syscalls: 204 2025/01/08 06:13:56 code coverage: enabled 2025/01/08 06:13:56 comparison tracing: enabled 2025/01/08 06:13:56 extra coverage: enabled 2025/01/08 06:13:56 setuid sandbox: enabled 2025/01/08 06:13:56 namespace sandbox: enabled 2025/01/08 06:13:56 Android sandbox: enabled 2025/01/08 06:13:56 fault injection: enabled 2025/01/08 06:13:56 leak checking: enabled 2025/01/08 06:13:56 net packet injection: enabled 2025/01/08 06:13:56 net device setup: enabled 2025/01/08 06:13:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/08 06:13:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/08 06:13:56 USB emulation: enabled 2025/01/08 06:13:56 hci packet injection: enabled 2025/01/08 06:13:56 wifi device emulation: enabled 2025/01/08 06:13:56 802.15.4 emulation: enabled 2025/01/08 06:13:56 fetching corpus: 0, signal 0/0 (executing program) 2025/01/08 06:13:58 starting 8 fuzzer processes 06:13:58 executing program 0: r0 = syz_io_uring_complete(0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000001c0)={0x8, 0xb4c2, 0x7}) syz_io_uring_setup(0x43da, &(0x7f0000000240)={0x0, 0x19bc, 0x4, 0x1, 0x109, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) r2 = syz_io_uring_complete(r1) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder-control\x00', 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000007c0)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/212, 0xd4}, {&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000680)=""/89, 0x59}], 0x4, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x10000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000800)={{0x1, 0x80}, 'port1\x00', 0x0, 0x1000, 0x3d4, 0x8, 0xfffffffb, 0x20, 0x9, 0x0, 0x7, 0x1f}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000980)={'ip_vti0\x00', r7, 0x10, 0x40, 0x299, 0xa20, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast2, @multicast1}}}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r8, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r10 = socket(0x1f, 0x1, 0xfffffffc) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000001180)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f0000000c00)={0x520, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x13c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1b, 0x3, "72bb1f21b4edcb0d14db765601f06f8581c1f2a465a24c"}, @TIPC_NLA_NODE_ID={0x77, 0x3, "86038050303e34638f70df6076983e781ff37cf0b90657add6ffbfe586ee74e5e17d160991ddaede53c9e7d0534df86a2bd2f679470e4ff55093a38af701c1fa1f778143e4e6e609acb7960c42b30ff89b2de4258026257f4b8e6bb3d5aa7aec59ae31a23e52b9a8b897b44e67f72246f06045"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "b48b7df9b23fd029deb693346cf90b41cf917694dfa778fb4654859c369130"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "860fa33d8f758f43dfaa7ed6714be287c4dcc396821ba10d"}}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdfa8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_NODE={0x238, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "0ce9fba97c4551b801eae30fc87ba80475309789f164fae6a1ff"}}, @TIPC_NLA_NODE_ID={0xc5, 0x3, "34251ba1d472bb49c6b195e3dfb25a5752b310e39a6cb3268cc53e73a5b65e0df9dc1be9a698e44076b70d21dc598fb8f6a6269221c19e8fc028deb89f2144680b42a3c0a5e139b87c108eb1bdf4fd347de41918d9c8566e62fec676e8ff0990bc983994b4d26f37f8729f177fa8004a173c587d0dba12c6fda4da7cd9701b3643e33eeb8fa6dcc60452ceaeaf6e1ded3cf0b1e773d46234597b62efdc871b4438c349a89ccbcc5a3d320f7ac848a0e327b52438414bb6875a7363eb341110a945"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "4c6a7a9cfe003f878f73a1dfeb29065f9c55736e4e85c9b010c90c38"}}, @TIPC_NLA_NODE_ID={0x25, 0x3, "8101444a9ac522f38c872b24a581e8bb365dc0e6d4d66caade98405a4b7a448932"}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "69ff88ba7b68005cbed797efabf68537d8910abfecfeb4f879131d1fa2b7bc2b7e593c5f409cd72b067419ff9f80193cbbcf7b1656abdec46dd3fce2c42f2d07f72f3e9f947889a6ee4545f261f740bfb3ab8e6da7fee75e451bfc85369bc1530034c1a078d2114d4d1c79ef3e0d7ed57747a44f7699d6a1e16af169b3fae1c1b9b037722ea1a3c8e951ca517c5686f8d6ac4fef31cea5d21e6cf51b77b4ad3549bc47fcb0eee33f3febe5ffa19f3a0ade4f59aa31"}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff585}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6199}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff81}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab7}]}]}]}, 0x520}, 0x1, 0x0, 0x0, 0x4000000}, 0x4014884) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r11, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xbc, 0x0, 0x509, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "165fb89f39f8e4c6f5aa4af84ffa35f831381d3788ae9e707a866944a715"}}, @TIPC_NLA_NODE_ID={0x5b, 0x3, "bedb94595aa95a86d0a1962cba7a4abff45746584c350bf00508d5b270a11c690a5b4f99e3a185bb352d775c300d8dc2712dd294445b26c3349a2a42f1978fd796da825b8f5eec8ec1773d344cbc442a61dcafbe483185"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000004}, 0xc095) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000001340)) socket(0x2b, 0x5, 0xffff) 06:13:58 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', r0, 0x700, 0x10, 0x80, 0x401, {{0x12, 0x4, 0x1, 0x4, 0x48, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @empty, {[@lsrr={0x83, 0x1b, 0xc, [@rand_addr=0x64010102, @empty, @broadcast, @remote, @loopback, @rand_addr=0x64010101]}, @ssrr={0x89, 0x7, 0x6c, [@private=0xa010101]}, @generic={0x44, 0x12, "9633de87d607b68fb4a01fbebbd905ca"}]}}}}}) socket$inet_udp(0x2, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)=""/41, 0x29}, {&(0x7f00000001c0)=""/13, 0xd}], 0x2, &(0x7f0000000240)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x110}, 0x2042) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20044080) recvmsg$unix(r3, &(0x7f0000001640)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001600)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x40000020) getsockopt$inet_udp_int(r7, 0x11, 0xa, &(0x7f0000001680), &(0x7f00000016c0)=0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001700)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2004, @fd_index=0x7, 0x8a7e, 0x0, 0x0, 0x18}, 0x2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r8, 0xc0bc5310, &(0x7f0000001840)) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x30, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff57}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffc0}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44011) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x16c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xefa3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff8f9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7b}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40000}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x850}, 0x20004840) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getgroups(0x2, &(0x7f0000001c80)=[0xee00, r5]) chown(&(0x7f0000001c40)='./file0\x00', r4, r9) syz_extract_tcp_res$synack(&(0x7f0000001cc0), 0x1, 0x0) r10 = syz_io_uring_complete(0x0) getsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0xa, &(0x7f0000001d00)=0x9, &(0x7f0000001d40)=0x4) 06:13:58 executing program 2: r0 = socket(0x2c, 0x800, 0xa33) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa6f7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x5c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4840}, 0x4000000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xbe121adec9f780d3}, 0x1) recvmsg$unix(r0, &(0x7f00000023c0)={&(0x7f0000001f40), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001fc0)=""/113, 0x71}, {&(0x7f0000002040)=""/198, 0xc6}, {&(0x7f0000002140)=""/81, 0x51}, {&(0x7f00000021c0)=""/215, 0xd7}], 0x4, &(0x7f0000002300)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x10000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x24, 0x0, 0x30f, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002540), r5) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, r6, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000002680)={'ip_vti0\x00', &(0x7f0000002640)={'syztnl2\x00', r1, 0x40, 0x20, 0x1, 0x10000, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x64, 0x0, 0x3, 0x2f, 0x0, @empty, @local, {[@generic={0x44, 0x4, "8c12"}]}}}}}) syz_io_uring_setup(0x4310, &(0x7f00000026c0)={0x0, 0xfa56, 0x8, 0x2, 0x4a, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000002740)=0x0, &(0x7f0000002780)) syz_io_uring_submit(r7, 0x0, &(0x7f0000002900)=@IORING_OP_STATX={0x15, 0x4, 0x0, r4, &(0x7f00000027c0), &(0x7f00000028c0)='./file0\x00', 0x40, 0x6000}, 0x5) r8 = syz_io_uring_complete(r7) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x4800004}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x34, r6, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x76c8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x39e}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4004005) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000002a40), 0x701000, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x54, r6, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000015}, 0x4000020) r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000002bc0), 0x1, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r10, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c40)={0x94, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x240008c1}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000002e40)={&(0x7f0000002d80), 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x43}, 0x4008000) 06:13:58 executing program 3: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x6a1f, &(0x7f0000000180)={0x0, 0xb75f, 0x0, 0x0, 0x2b2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15, 0x1}, 0x3) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000002c0)=0x4, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000300)={{0xff, 0x6}, 'port1\x00', 0x50, 0x80042, 0x201, 0x5, 0x5, 0x6b1e, 0x3, 0x0, 0x5, 0x2}) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400900, 0x126) r3 = syz_io_uring_setup(0xa5b, &(0x7f0000000400)={0x0, 0x5d95, 0x20, 0x1, 0x61, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) syz_io_uring_setup(0x6681, &(0x7f0000000500)={0x0, 0x8aa6, 0x4, 0x1, 0xe8, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0xdb0e) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000600)={{0x1, 0x1, 0x18, r4, {0xfffffff8, 0x80000001}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x2, &(0x7f00000006c0)={[{}]}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000700), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)=""/204, 0xcc}], 0x1, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x12101) openat$autofs(0xffffffffffffff9c, &(0x7f0000000a40), 0x408100, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x848c}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40040) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x1bc, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e91}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x22}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x28df}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x180000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x60}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x365}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x90}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3591}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x154}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x254e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4c000) getgroups(0x1, &(0x7f0000000e00)=[r5]) recvmsg$unix(r8, &(0x7f0000001fc0)={&(0x7f0000000e40)=@abs, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000001f00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x2000) getgroups(0x6, &(0x7f0000002300)=[r7, r10, r5, r11, 0x0, 0x0]) [ 82.524014] audit: type=1400 audit(1736316838.620:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:13:58 executing program 4: process_vm_readv(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/40, 0x28}, {&(0x7f0000001240)=""/148, 0x94}, {&(0x7f0000001300)=""/10, 0xa}], 0x8, &(0x7f00000027c0)=[{&(0x7f00000013c0)=""/86, 0x56}, {&(0x7f0000001440)=""/84, 0x54}, {&(0x7f00000014c0)=""/111, 0x6f}, {&(0x7f0000001540)=""/20, 0x14}, {&(0x7f0000001580)=""/75, 0x4b}, {&(0x7f0000001600)=""/132, 0x84}, {&(0x7f00000016c0)=""/65, 0x41}, {&(0x7f0000001740)=""/12, 0xc}, {&(0x7f0000001780)=""/30, 0x1e}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0xa, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002880)=""/74, 0x4a}, {&(0x7f0000002900)=""/111, 0x6f}, {&(0x7f0000002980)=""/156, 0x9c}, {&(0x7f0000002a40)=""/86, 0x56}, {&(0x7f0000002ac0)=""/174, 0xae}, {&(0x7f0000002b80)=""/165, 0xa5}, {&(0x7f0000002c40)=""/40, 0x28}, {&(0x7f0000002c80)=""/73, 0x49}, {&(0x7f0000002d00)=""/99, 0x63}], 0x9, &(0x7f0000002e40)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xe8}, 0x40002102) recvmsg$unix(r1, &(0x7f00000033c0)={&(0x7f0000002f80)=@abs, 0x6e, &(0x7f0000003200)=[{&(0x7f0000003000)=""/41, 0x29}, {&(0x7f0000003040)=""/31, 0x1f}, {&(0x7f0000003080)=""/109, 0x6d}, {&(0x7f0000003100)=""/218, 0xda}], 0x4, &(0x7f0000003240)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x170}, 0x1) syz_io_uring_setup(0x2dc2, &(0x7f0000003400)={0x0, 0xe54a, 0x0, 0x3, 0x51, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003480)=0x0, &(0x7f00000034c0)) r11 = epoll_create1(0x80000) syz_io_uring_submit(r10, 0x0, &(0x7f0000003500)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r11, 0x0, r9}, 0x688) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x104, &(0x7f0000003540)=0x2, 0x0, 0x4) process_vm_readv(r0, &(0x7f0000003800)=[{&(0x7f0000003580)=""/96, 0x60}, {&(0x7f0000003600)=""/234, 0xea}, {&(0x7f0000003700)=""/227, 0xe3}], 0x3, &(0x7f0000003f40)=[{&(0x7f0000003840)=""/208, 0xd0}, {&(0x7f0000003940)=""/174, 0xae}, {&(0x7f0000003a00)=""/171, 0xab}, {&(0x7f0000003ac0)}, {&(0x7f0000003b00)=""/237, 0xed}, {&(0x7f0000003c00)=""/135, 0x87}, {&(0x7f0000003cc0)=""/160, 0xa0}, {&(0x7f0000003d80)=""/46, 0x2e}, {&(0x7f0000003dc0)=""/254, 0xfe}, {&(0x7f0000003ec0)=""/125, 0x7d}], 0xa, 0x0) process_vm_readv(r3, &(0x7f0000005000)=[{&(0x7f0000004000)=""/4096, 0x1000}], 0x1, &(0x7f0000005380)=[{&(0x7f0000005040)}, {&(0x7f0000005080)=""/211, 0xd3}, {&(0x7f0000005180)=""/157, 0x9d}, {&(0x7f0000005240)=""/32, 0x20}, {&(0x7f0000005280)=""/193, 0xc1}], 0x5, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x12) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f0000005400)=0x100, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000005440)={{0x5, 0x1f}, 'port1\x00', 0x11, 0x20000, 0x1, 0x6, 0x10000, 0x8, 0x40, 0x0, 0x6, 0x80}) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r12 = getpgrp(r5) ptrace$getregset(0x4204, r12, 0x202, &(0x7f0000005540)={&(0x7f0000005500)=""/26, 0x1a}) syz_io_uring_setup(0x3588, &(0x7f0000005580)={0x0, 0x8ab1, 0x0, 0x0, 0x1c8, 0x0, r4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000005600), &(0x7f0000005640)=0x0) syz_io_uring_submit(r10, r13, &(0x7f0000005680)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2000, @fd=r2, 0x6820, 0x4, 0x9, 0x10, 0x0, {0x3}}, 0x2) r14 = accept4(r6, &(0x7f00000056c0)=@alg, &(0x7f0000005740)=0x80, 0x800) getsockopt$bt_BT_VOICE(r14, 0x112, 0xb, &(0x7f0000005780)=0x1f, &(0x7f00000057c0)=0x2) ptrace$getregset(0x4204, r12, 0x6, &(0x7f00000058c0)={&(0x7f0000005800)=""/172, 0xac}) 06:13:58 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000000)={0x1c000, 0xfffffff9, 0x1, 'queue1\x00', 0x6}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81, 0x1}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000300)={0x0, 0x46d, 0x1, 'queue1\x00', 0x9}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000440)={0x200, 0x8001, 0x0, 'queue1\x00', 0x2}) r3 = syz_io_uring_complete(0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000500)={{0x3, 0x8}, {0x6, 0x9}, 0xfff, 0x9, 0x9}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000640)={'gretap0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x1, 0x8, 0xffffffff, 0x401, {{0x19, 0x4, 0x0, 0x2, 0x64, 0x68, 0x0, 0x1f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x41, 0xffffffffffffffff, [{0x2, 0x7, "d849ff922c"}, {0x0, 0x3, 'J'}, {0x7, 0x7, "8d91f74a66"}, {0x2, 0x8, "f6727748823a"}, {0x5, 0xb, "525e20b824d02dd324"}, {0x5, 0x6, "27e068e1"}, {0x8e21a4785dbc1dd, 0x11, "1381cc01c09c71146a2850225c4262"}]}, @lsrr={0x83, 0xb, 0xb9, [@local, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'gretap0\x00', &(0x7f0000000680)={'ip_vti0\x00', r4, 0x4525d2cb46335d77, 0x9add83b8fa84d338, 0x200, 0xc3, {{0x13, 0x4, 0x2, 0x34, 0x4c, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast1, @multicast1, {[@noop, @rr={0x7, 0x17, 0xbe, [@local, @empty, @loopback, @broadcast, @loopback]}, @cipso={0x86, 0x13, 0x5, [{0x0, 0xd, "2e66afa6f95777f8faceda"}]}, @cipso={0x86, 0xb, 0x3, [{0x7, 0x5, "e1b8e8"}]}]}}}}}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000740), 0x440400, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000780)={0x93c, 0x7, 0x9255, 0x8a83, 0x8, 0xff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5000003, 0x13, r3, 0x0) recvmsg$unix(r3, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/198, 0xc6}, {&(0x7f0000001900)=""/145, 0x91}, {&(0x7f00000019c0)=""/221, 0xdd}, {&(0x7f0000001ac0)=""/142, 0x8e}], 0x5, &(0x7f0000001c00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}, 0x2020) syz_io_uring_setup(0x1183, &(0x7f0000001d80)={0x0, 0x1d5d, 0x20, 0x2, 0x1cc, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001e00), &(0x7f0000001e40)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000001e80)={0x2, 0x200, 0x39a}) recvmsg$unix(r5, &(0x7f00000036c0)={&(0x7f0000001f00), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000001f80)=""/233, 0xe9}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)}, {&(0x7f00000030c0)=""/6, 0x6}, {&(0x7f0000003100)}, {&(0x7f0000003140)=""/101, 0x65}, {&(0x7f00000031c0)=""/211, 0xd3}, {&(0x7f00000032c0)=""/237, 0xed}, {&(0x7f00000033c0)=""/118, 0x76}, {&(0x7f0000003440)=""/66, 0x42}], 0xa, &(0x7f0000003580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x2000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f0000003700)={{0x9, 0xfd}, {0x2, 0x1}, 0x1, 0x4, 0xcb}) 06:13:58 executing program 6: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1, &(0x7f0000000140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a85323, &(0x7f00000002c0)={{0x1f, 0x5}, 'port0\x00', 0x80, 0x10000, 0x1f, 0x96, 0x1, 0x3, 0x3, 0x0, 0x2, 0x2}) socket(0x25, 0x800, 0x1ff) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x82a02, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {0x7}}, './file0\x00'}) recvmmsg(r3, &(0x7f0000002900)=[{{&(0x7f0000000400)=@un=@abs, 0x80, &(0x7f00000027c0)=[{&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/68, 0x44}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/128, 0x80}, {&(0x7f0000002600)=""/152, 0x98}, {&(0x7f00000026c0)=""/131, 0x83}, {&(0x7f0000002780)=""/2, 0x2}], 0x8, &(0x7f0000002840)=""/169, 0xa9}, 0x1}], 0x1, 0x2042, &(0x7f0000002940)={0x77359400}) r10 = accept4(r2, &(0x7f0000002980), &(0x7f0000002a00)=0x80, 0x400) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x5c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r11, &(0x7f0000002ec0)={&(0x7f0000002b80), 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002c00)=""/235, 0xeb}, {&(0x7f0000002d00)=""/120, 0x78}, {&(0x7f0000002d80)=""/29, 0x1d}, {&(0x7f0000002dc0)=""/127, 0x7f}], 0x4, &(0x7f0000002e80)=[@cred={{0x1c}}], 0x20}, 0x10000) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf424}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc581}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x4008080) syz_io_uring_setup(0x498c, &(0x7f0000003040)={0x0, 0x6b84, 0x10, 0x3, 0x303, 0x0, r9}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00000030c0)=0x0, &(0x7f0000003100)=0x0) r14 = syz_io_uring_setup(0x3eca, &(0x7f0000003140)={0x0, 0x5262, 0xa, 0x0, 0x2e1, 0x0, r1}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f00000031c0), &(0x7f0000003200)) syz_io_uring_submit(0x0, r13, &(0x7f0000003240)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r14}, 0x80000000) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000003280)=0x1, 0x4) r15 = syz_io_uring_complete(r12) sendmsg$BATADV_CMD_GET_ORIGINATORS(r15, &(0x7f00000033c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003380)={&(0x7f0000003300)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x46}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4c}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) statx(r7, &(0x7f0000003400)='./file0\x00', 0x0, 0x80, &(0x7f0000003440)) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000003600)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000035c0)={&(0x7f0000003580)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 06:13:58 executing program 7: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000080)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) pause() r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcaa}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7321}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x71}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x569d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040080}, 0x10000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r4, 0x303, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8cbadbdeab71"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x800) prctl$PR_GET_FPEMU(0x9, &(0x7f00000006c0)) sync() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000780)=""/9, 0x9}, {&(0x7f00000007c0)=""/126, 0x7e}, {&(0x7f0000000840)=""/160, 0xa0}], 0x3, &(0x7f0000000940)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, r4, 0x300, 0x6, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x81}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) [ 84.011362] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.068838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.071744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.073473] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.077561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.079914] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.088163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.091976] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.094582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.098489] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.101477] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.103437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.136573] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.141201] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.152079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.165925] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.171161] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.173420] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.193046] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.195964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.197873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.203171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.205687] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.208432] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.267728] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.272689] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.285474] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.287012] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.295079] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.303272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.303633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.329993] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.339509] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.340964] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.344115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.348188] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.351342] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.361953] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.363544] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.380350] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.407046] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.414538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.419189] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.422564] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.431937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.459184] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.463365] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.482946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.160403] Bluetooth: hci1: command tx timeout [ 86.161420] Bluetooth: hci0: command tx timeout [ 86.224038] Bluetooth: hci3: command tx timeout [ 86.224600] Bluetooth: hci2: command tx timeout [ 86.415896] Bluetooth: hci5: command tx timeout [ 86.480820] Bluetooth: hci6: command tx timeout [ 86.543894] Bluetooth: hci7: command tx timeout [ 86.544608] Bluetooth: hci4: command tx timeout [ 88.208105] Bluetooth: hci1: command tx timeout [ 88.208589] Bluetooth: hci0: command tx timeout [ 88.271908] Bluetooth: hci2: command tx timeout [ 88.272341] Bluetooth: hci3: command tx timeout [ 88.465803] Bluetooth: hci5: command tx timeout [ 88.527972] Bluetooth: hci6: command tx timeout [ 88.593667] Bluetooth: hci4: command tx timeout [ 88.594263] Bluetooth: hci7: command tx timeout [ 90.257932] Bluetooth: hci0: command tx timeout [ 90.258392] Bluetooth: hci1: command tx timeout [ 90.320164] Bluetooth: hci3: command tx timeout [ 90.320614] Bluetooth: hci2: command tx timeout [ 90.511870] Bluetooth: hci5: command tx timeout [ 90.575999] Bluetooth: hci6: command tx timeout [ 90.640992] Bluetooth: hci7: command tx timeout [ 90.641425] Bluetooth: hci4: command tx timeout [ 92.312088] Bluetooth: hci1: command tx timeout [ 92.312568] Bluetooth: hci0: command tx timeout [ 92.383890] Bluetooth: hci2: command tx timeout [ 92.384403] Bluetooth: hci3: command tx timeout [ 92.560802] Bluetooth: hci5: command tx timeout [ 92.623848] Bluetooth: hci6: command tx timeout [ 92.687942] Bluetooth: hci4: command tx timeout [ 92.688438] Bluetooth: hci7: command tx timeout [ 146.470603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.472106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.478536] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.480072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.482459] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.483642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.487076] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.489343] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.493094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.496092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.498197] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.500064] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.539561] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.543118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.544578] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.550869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.555223] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.557011] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.598068] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.601579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.608440] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.617190] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.622261] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.624348] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.628647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.631068] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.632357] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.635385] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.645165] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.648401] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.675329] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.677441] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.678950] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.684417] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.690182] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.694829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.696870] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.702900] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.703090] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.705696] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.707050] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.710179] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.721698] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.726587] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.729356] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.756145] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.772084] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.788224] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.559853] Bluetooth: hci1: command tx timeout [ 148.560690] Bluetooth: hci0: command tx timeout [ 148.624792] Bluetooth: hci2: command tx timeout [ 148.687843] Bluetooth: hci4: command tx timeout [ 148.688439] Bluetooth: hci3: command tx timeout [ 148.751860] Bluetooth: hci6: command tx timeout [ 148.752435] Bluetooth: hci5: command tx timeout [ 148.879875] Bluetooth: hci7: command tx timeout [ 150.607961] Bluetooth: hci1: command tx timeout [ 150.608441] Bluetooth: hci0: command tx timeout [ 150.671979] Bluetooth: hci2: command tx timeout [ 150.735880] Bluetooth: hci3: command tx timeout [ 150.736382] Bluetooth: hci4: command tx timeout [ 150.800596] Bluetooth: hci5: command tx timeout [ 150.801546] Bluetooth: hci6: command tx timeout [ 150.929326] Bluetooth: hci7: command tx timeout [ 152.655860] Bluetooth: hci1: command tx timeout [ 152.656571] Bluetooth: hci0: command tx timeout [ 152.719946] Bluetooth: hci2: command tx timeout [ 152.783908] Bluetooth: hci4: command tx timeout [ 152.784555] Bluetooth: hci3: command tx timeout [ 152.847864] Bluetooth: hci6: command tx timeout [ 152.848503] Bluetooth: hci5: command tx timeout [ 152.975950] Bluetooth: hci7: command tx timeout [ 154.703824] Bluetooth: hci0: command tx timeout [ 154.704308] Bluetooth: hci1: command tx timeout [ 154.768155] Bluetooth: hci2: command tx timeout [ 154.831914] Bluetooth: hci3: command tx timeout [ 154.832500] Bluetooth: hci4: command tx timeout [ 154.895870] Bluetooth: hci5: command tx timeout [ 154.896430] Bluetooth: hci6: command tx timeout [ 155.023818] Bluetooth: hci7: command tx timeout [ 204.151671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.152583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.501544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.502256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.876740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.877406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.359786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.360459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.029941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.037404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.040345] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.049130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.053990] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.058058] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.103479] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.124071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.126496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.134183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.139338] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.145391] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.190860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.195048] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.197149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.203964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.205984] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.207269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.480529] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.483341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.497575] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.502289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.503701] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.505427] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.508852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.512168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.514406] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.523611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.529965] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.539394] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.549484] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.560415] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.564371] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.567958] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.575217] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.575680] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.581023] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.582333] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.584377] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.635936] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.664067] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.672049] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.692999] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 208.712136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 208.713881] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.748941] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 208.754297] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 208.759923] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.129817] Bluetooth: hci0: command tx timeout [ 210.192074] Bluetooth: hci1: command tx timeout [ 210.255899] Bluetooth: hci2: command tx timeout [ 210.639921] Bluetooth: hci5: command tx timeout [ 210.641107] Bluetooth: hci4: command tx timeout [ 210.641795] Bluetooth: hci3: command tx timeout [ 210.703851] Bluetooth: hci6: command tx timeout [ 210.895915] Bluetooth: hci7: command tx timeout [ 212.176792] Bluetooth: hci0: command tx timeout [ 212.240831] Bluetooth: hci1: command tx timeout [ 212.304841] Bluetooth: hci2: command tx timeout [ 212.687864] Bluetooth: hci3: command tx timeout [ 212.689078] Bluetooth: hci4: command tx timeout [ 212.689515] Bluetooth: hci5: command tx timeout [ 212.751931] Bluetooth: hci6: command tx timeout [ 212.943936] Bluetooth: hci7: command tx timeout [ 214.224025] Bluetooth: hci0: command tx timeout [ 214.288793] Bluetooth: hci1: command tx timeout [ 214.351907] Bluetooth: hci2: command tx timeout [ 214.736822] Bluetooth: hci5: command tx timeout [ 214.737290] Bluetooth: hci4: command tx timeout [ 214.737685] Bluetooth: hci3: command tx timeout [ 214.801059] Bluetooth: hci6: command tx timeout [ 214.993549] Bluetooth: hci7: command tx timeout [ 216.272968] Bluetooth: hci0: command tx timeout [ 216.336869] Bluetooth: hci1: command tx timeout [ 216.400890] Bluetooth: hci2: command tx timeout [ 216.783821] Bluetooth: hci5: command tx timeout [ 216.784289] Bluetooth: hci3: command tx timeout [ 216.784778] Bluetooth: hci4: command tx timeout [ 216.849190] Bluetooth: hci6: command tx timeout [ 217.039835] Bluetooth: hci7: command tx timeout [ 270.812381] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.815408] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.820116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.826692] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.831512] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.834631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.088634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.094381] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.099523] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.106966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.118667] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.121271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.125473] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.130515] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.134127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.138626] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.140934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.142597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.269145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.272274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.274398] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.281566] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.287643] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.289622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.353811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.360739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.364052] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.368960] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.389141] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.404961] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.408897] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.422522] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.441183] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.447336] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.449204] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.452171] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.455167] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.456857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.466932] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.473949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.491194] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.496270] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.496415] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.502061] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.518972] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.521376] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.525260] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.533889] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 272.911847] Bluetooth: hci0: command tx timeout [ 273.168122] Bluetooth: hci2: command tx timeout [ 273.232268] Bluetooth: hci1: command tx timeout [ 273.359855] Bluetooth: hci3: command tx timeout [ 273.553794] Bluetooth: hci7: command tx timeout [ 273.615958] Bluetooth: hci5: command tx timeout [ 273.616131] Bluetooth: hci6: command tx timeout [ 273.680754] Bluetooth: hci4: command tx timeout [ 274.959854] Bluetooth: hci0: command tx timeout [ 275.216123] Bluetooth: hci2: command tx timeout [ 275.281965] Bluetooth: hci1: command tx timeout [ 275.408823] Bluetooth: hci3: command tx timeout [ 275.599837] Bluetooth: hci7: command tx timeout [ 275.663897] Bluetooth: hci6: command tx timeout [ 275.664049] Bluetooth: hci5: command tx timeout [ 275.728802] Bluetooth: hci4: command tx timeout [ 277.009834] Bluetooth: hci0: command tx timeout [ 277.264802] Bluetooth: hci2: command tx timeout [ 277.328006] Bluetooth: hci1: command tx timeout [ 277.456076] Bluetooth: hci3: command tx timeout [ 277.647832] Bluetooth: hci7: command tx timeout [ 277.712893] Bluetooth: hci6: command tx timeout [ 277.714042] Bluetooth: hci5: command tx timeout [ 277.776781] Bluetooth: hci4: command tx timeout [ 279.055838] Bluetooth: hci0: command tx timeout [ 279.312890] Bluetooth: hci2: command tx timeout [ 279.375780] Bluetooth: hci1: command tx timeout [ 279.503866] Bluetooth: hci3: command tx timeout [ 279.695824] Bluetooth: hci7: command tx timeout [ 279.759893] Bluetooth: hci6: command tx timeout [ 279.759917] Bluetooth: hci5: command tx timeout [ 279.823920] Bluetooth: hci4: command tx timeout [ 333.284897] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.294175] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.300247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.308988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.314061] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.320030] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.476889] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.480298] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.482562] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.488532] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.494512] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.496484] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.542148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.553911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.558975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.573120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.590192] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.615290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.617047] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.637302] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.639357] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.645244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.662839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.679239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.681431] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.684442] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.688998] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.691331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 333.696036] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.701092] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.704924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.705282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.713028] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.719979] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.741897] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.753331] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.763138] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.771115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.774039] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.775643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.820071] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.823028] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.825184] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.865561] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 333.867835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.881969] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.897198] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 333.899132] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.398925] Bluetooth: hci0: command tx timeout [ 335.567813] Bluetooth: hci1: command tx timeout [ 335.696781] Bluetooth: hci2: command tx timeout [ 335.823961] Bluetooth: hci4: command tx timeout [ 335.887865] Bluetooth: hci5: command tx timeout [ 335.888787] Bluetooth: hci3: command tx timeout [ 335.953909] Bluetooth: hci6: command tx timeout [ 336.015839] Bluetooth: hci7: command tx timeout [ 337.423834] Bluetooth: hci0: command tx timeout [ 337.617795] Bluetooth: hci1: command tx timeout [ 337.744027] Bluetooth: hci2: command tx timeout [ 337.871805] Bluetooth: hci4: command tx timeout [ 337.935813] Bluetooth: hci3: command tx timeout [ 337.936242] Bluetooth: hci5: command tx timeout [ 338.002793] Bluetooth: hci6: command tx timeout [ 338.063758] Bluetooth: hci7: command tx timeout [ 339.471866] Bluetooth: hci0: command tx timeout [ 339.664759] Bluetooth: hci1: command tx timeout [ 339.793744] Bluetooth: hci2: command tx timeout [ 339.921915] Bluetooth: hci4: command tx timeout [ 339.984776] Bluetooth: hci5: command tx timeout [ 339.984855] Bluetooth: hci3: command tx timeout [ 340.047865] Bluetooth: hci6: command tx timeout [ 340.111828] Bluetooth: hci7: command tx timeout [ 341.520519] Bluetooth: hci0: command tx timeout [ 341.711774] Bluetooth: hci1: command tx timeout [ 341.841740] Bluetooth: hci2: command tx timeout [ 341.967808] Bluetooth: hci4: command tx timeout [ 342.033136] Bluetooth: hci5: command tx timeout [ 342.033233] Bluetooth: hci3: command tx timeout [ 342.097761] Bluetooth: hci6: command tx timeout [ 342.159820] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 06:19:06 Registers: info registers vcpu 0 RAX=ffffffff85d02438 RBX=0000000000000000 RCX=0000000000000000 RDX=1ffffffff0ba0487 RSI=0000000000000000 RDI=ffffffff85d02438 RBP=0000000000000001 RSP=ffff8880265ef2d0 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff863fcd97 R11=0000000000000532 R12=ffff88803650d340 R13=ffffffff85d02438 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff814fcbac RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f40edc066f4 CR3=00000000320f4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f40edc1547000007f40edc14f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff815eb6c0 RCX=0000000000000001 RDX=1ffff11005289f13 RSI=ffffffff8143c69e RDI=ffff88802944f898 RBP=ffff88802944f930 RSP=ffff88802944f870 R8 =0000000000000001 R9 =ffff88802944f8d8 R10=000000000003a9cc R11=000000000003ddb4 R12=ffff88802944f960 R13=0000000000000000 R14=ffff8880347dd340 R15=ffff88802944f898 RIP=ffffffff81348bc0 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff39a7474a1 CR3=00000000264f2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000ff0000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000