Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:25903' (ECDSA) to the list of known hosts. 2025/06/02 01:37:35 fuzzer started 2025/06/02 01:37:35 dialing manager at localhost:34361 syzkaller login: [ 85.968219] cgroup: Unknown subsys name 'net' [ 86.109886] cgroup: Unknown subsys name 'cpuset' [ 86.146775] cgroup: Unknown subsys name 'rlimit' 2025/06/02 01:37:52 syscalls: 206 2025/06/02 01:37:52 code coverage: enabled 2025/06/02 01:37:52 comparison tracing: enabled 2025/06/02 01:37:52 extra coverage: enabled 2025/06/02 01:37:52 setuid sandbox: enabled 2025/06/02 01:37:52 namespace sandbox: enabled 2025/06/02 01:37:52 Android sandbox: enabled 2025/06/02 01:37:52 fault injection: enabled 2025/06/02 01:37:52 leak checking: enabled 2025/06/02 01:37:52 net packet injection: enabled 2025/06/02 01:37:52 net device setup: enabled 2025/06/02 01:37:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/02 01:37:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/02 01:37:52 USB emulation: enabled 2025/06/02 01:37:52 hci packet injection: enabled 2025/06/02 01:37:52 wifi device emulation: enabled 2025/06/02 01:37:52 802.15.4 emulation: enabled 2025/06/02 01:37:52 fetching corpus: 0, signal 0/0 (executing program) 2025/06/02 01:37:54 starting 8 fuzzer processes 01:37:54 executing program 0: r0 = socket(0xa, 0x5, 0x7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xcffb2a0cdb88ae75}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x4000010) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x66339db41c9972a1) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/rt6_stats\x00') openat$cgroup_subtree(r1, &(0x7f0000000240), 0x2, 0x0) epoll_create(0x8) socketpair(0x5, 0x5, 0x1, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbac}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x61}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40401}, 0x20008095) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80c0) r4 = socket(0x26, 0x80000, 0x5) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x40010) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4001}, 0x8040) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24060041}, 0x740861eb5d1c67d9) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r6 = syz_open_procfs(0x0, &(0x7f0000000a40)='net/sockstat\x00') ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000000a80)) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) 01:37:54 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000080)=""/147, &(0x7f0000000140)=0x93) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) write$binfmt_script(0xffffffffffffffff, &(0x7f00000011c0)={'#! ', './file0', [{0x20, '.\\'}, {0x20, 'net/mcfilter6\x00'}, {}, {0x20, 'attr/keycreate\x00'}], 0xa, "292ba2f1cc948bf0add448af114adb4ad538ca651acb3df64c4d880a8407bc14db176d17d7b9ab3dbfa9a9881ae1b3be0f9cd47030736ca10dcc8c0b9e3d5b12d66f429b7ead0a4cbc02c38283773fb9872fd7b7e54b"}, 0x84) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001280)={0x1e, 0x37, 0x2, {0x2, 0x3f, 0x7, 0xffffffffffffffff}}, 0x1e) pipe2$9p(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLERRORu(r2, &(0x7f0000001300)={0x16, 0x7, 0x1, {{0x9, '\'}/*+-(+&'}, 0x3}}, 0x16) pipe2$9p(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RCREATE(r3, &(0x7f0000001380)={0x18, 0x73, 0x1, {{0x1, 0x1, 0x8}, 0x4}}, 0x18) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000017c0)={&(0x7f0000001400)={0x3ac, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc9d8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5ff2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000000}]}]}, @TIPC_NLA_NODE={0x1fc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1c9}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "dfd96c90a6d069ad4f9dd9da9894e9a59f4a18f21f4fa58666"}}, @TIPC_NLA_NODE_ID={0xe7, 0x3, "cef9ebd34c1170fc10a5c491b619d427a47b72b2a850fa0dd7a544718b319936fc0c5be3f2ec4fcd7b7118bf9cc147fd42287d2edfff0d60737cde03c9f5003bc439be5760f1bdbc5a856fe50ba2459cf8e212a20b9425c6bbdac9ad15920f35cd67275ddfdd3c2d430ee44332ee703585ead0d9212ca70cd72af2ef6c62eb7278189263bffe2bb2260b10a2f9cd839cca182f1e41c4ba2913c18267e11a00e569d512eea190f3b9ae97eaf2ec97b756fe0a54b9c2b9279eefe06f0b32436cac287afeb574c72d5cee00c4af130fb49681617974ee13d4d38b5ef2e2c6ce15deba0006"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfdb}, @TIPC_NLA_NODE_ID={0xb3, 0x3, "b085b0f6edb2113c2e9c32a4ad2b529d3ac117ba109fb9225f1be80edaff229676a28aa426defc26b2c9a12a232bca824441bc27de9c136144d014502a1946e3c88363270c2a77c7efe32fa73fddf8c355a06bd02f777b6684b257343f9a6157b442a62fa9775c55d85146a05b87416218ae81fd6fe7d2d2b46f764abd6c6cc1c6350b349bfead91d3703d5f1680da47a9fa2402e8e2813b3a2ee964c3cfd6beca522d0e313e8228f6e9f11dff5bd9"}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x69a0e5e0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa82}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x39}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x44000080}, 0x0) write$nbd(r0, &(0x7f0000001840)={0x67446698, 0x0, 0x1, 0x3, 0x1, "6910c750ba9ffa03a4"}, 0x19) syz_genetlink_get_family_id$team(&(0x7f0000001880), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001900), r1) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000001c80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001940)={0x2ec, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x43}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x72, 0x3, "aa48ffdada7856b7b800f0f7fbdf11dce17142741593fd1c6aeb76280990dfdabdd4b4eb65c21c86bcfe50fc30b358f5ae78bdb63f671f4bb4ae294fd875b3a5cd38e6851b0dcd0834e2840bab2f448690fefa5a34a00afb46b38df6f59eab85a2d79bd49f7f8da947fcc86ec876"}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "8176545f62174cfd41b1be98cc8b5b4c627bd34fc6c1"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "86a45e34364605fa731b09aba97ec645d11cf2b1feda20f6de365d6e"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x148, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9ee}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8d1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x59}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdadd}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}]}, 0x2ec}}, 0xc000) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000002080)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002040)={&(0x7f0000001d00)={0x30c, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb88}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4455}]}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff872}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x776}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6731}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x51e}]}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "00683946b72971a92a3df89746784ed59cad79a5581fef3661"}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc2}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdc7}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "ea4172b7475a43b68d5dfac8235224bc4e3546be77d2ad871ed29a571e4f60ed"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "59c1fd5381d9fbf87a539ed272b6a7f208afeb2e61df"}}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/tcp6\x00') ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f0000002100)) 01:37:54 executing program 2: getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/224, &(0x7f0000000100)=0xe0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/nf_conntrack\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x96}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000e, 0x40010, r0, 0x10000000) io_uring_setup(0x6ac5, &(0x7f0000000300)={0x0, 0xe19e, 0x4, 0x3, 0x272, 0x0, r0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x29, 0x40, 0x1, 0x3, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x700, 0xffffff7f, 0x8}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51ebeeac}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040004}, 0x92) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040841}, 0x40800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f00000009c0)={&(0x7f0000000700)={0x284, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @local, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @empty, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87a}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa47b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "30b0dde8c4d31aa78d60d2f6920c79894392e74a247c2b878290d18a72f5ba365e7028"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "322365e19dc01bcd7bd980db9be6d820e081b1205999"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x24f64000}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb62}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48004) epoll_create(0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x712bcd814ef5c1bd}, 0x20000041) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000dc0)={'syztnl1\x00', r3, 0x4, 0x57, 0x3, 0x4, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x700, 0x1, 0x20, 0x80}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001540)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001500)={&(0x7f0000001040)={0x4b4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r7}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x40000}, 0x4044000) [ 103.955209] audit: type=1400 audit(1748828274.154:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:37:54 executing program 3: ptrace$setopts(0x4200, 0x0, 0x5, 0x0) process_vm_writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000000600)=[{&(0x7f0000000140)=""/109, 0x6d}, {&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000002c0)=""/238, 0xee}, {&(0x7f00000003c0)=""/70, 0x46}, {&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000480)=""/220, 0xdc}, {&(0x7f0000000580)=""/112, 0x70}], 0x8, 0x0) ptrace$getsig(0x4202, 0x0, 0x9, &(0x7f0000000680)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='net/netlink\x00') write$P9_RGETLOCK(r0, &(0x7f0000000740)={0x25, 0x37, 0x2, {0x1, 0x80, 0x3, 0x0, 0x7, ':!:\xe7,*\x18'}}, 0x25) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0xfffffffffffffffc, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000780)=0xc337, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000a00)=[{&(0x7f00000007c0)=""/188, 0xbc}, {&(0x7f0000000880)=""/20, 0x14}, {&(0x7f00000008c0)=""/207, 0xcf}, {&(0x7f00000009c0)=""/38, 0x26}], 0x4) r1 = gettid() process_vm_writev(r1, &(0x7f0000001f40)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)=""/9, 0x9}, {&(0x7f0000001ac0)=""/84, 0x54}, {&(0x7f0000001b40)=""/206, 0xce}, {&(0x7f0000001c40)=""/187, 0xbb}, {&(0x7f0000001d00)=""/173, 0xad}, {&(0x7f0000001dc0)=""/199, 0xc7}, {&(0x7f0000001ec0)=""/125, 0x7d}], 0x9, &(0x7f0000002140)=[{&(0x7f0000002000)=""/55, 0x37}, {&(0x7f0000002040)=""/3, 0x3}, {&(0x7f0000002080)=""/123, 0x7b}, {&(0x7f0000002100)=""/56, 0x38}], 0x4, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000002280)={&(0x7f0000002180), 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x4010) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x11, r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000002500)=[{&(0x7f00000022c0)=""/236, 0xec}, {&(0x7f00000023c0)=""/85, 0x55}, {&(0x7f0000002440)}, {&(0x7f0000002480)=""/71, 0x47}], 0x4, &(0x7f00000025c0)=[{&(0x7f0000002540)=""/62, 0x3e}, {&(0x7f0000002580)=""/64, 0x40}], 0x2, 0x0) socketpair(0x8, 0x1ee6de29b20f1712, 0x400, &(0x7f0000002600)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000002640)) ptrace$getsig(0x4202, r2, 0x10001, &(0x7f0000002680)) process_vm_writev(r1, &(0x7f0000002980)=[{&(0x7f0000002700)=""/230, 0xe6}, {&(0x7f0000002800)=""/189, 0xbd}, {&(0x7f00000028c0)=""/165, 0xa5}], 0x3, &(0x7f0000002c00)=[{&(0x7f00000029c0)=""/197, 0xc5}, {&(0x7f0000002ac0)=""/41, 0x29}, {&(0x7f0000002b00)=""/233, 0xe9}], 0x3, 0x0) r4 = socket(0xb, 0xa, 0x6) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0xc050}, 0x4000001) 01:37:54 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0xf3, 0x9, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x0, 0x8000, 0x81, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x81, 0x3c4, 0x40, @private2, @loopback, 0x7f21, 0x20, 0x3, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x81, 0x6, 0x10, @empty, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7800, 0x20, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0}, &(0x7f00000004c0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000500)={0xb28, r0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4a36c3d2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xefc}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x4, 0x8, 0x80}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc649}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x56, 0x5b, 0xe9a}, {0x6, 0x0, 0x94, 0x401}, {0x9, 0x31, 0x5, 0x7}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x6, 0x58, 0x7fffffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xca}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xadc}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd17}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xffa9, 0x3f, 0x3f, 0x1f}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}]}}]}, 0xb28}}, 0x40000c0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r11, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d34}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0xc040000) syz_genetlink_get_family_id$team(&(0x7f0000001200), 0xffffffffffffffff) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000001240)) socketpair(0x2c, 0x1, 0x2ee, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f00000012c0)) pselect6(0x40, &(0x7f0000001300)={0x8, 0x101, 0x8, 0x0, 0xb6fb, 0x400, 0x9, 0x8}, &(0x7f0000001340)={0x8, 0x8, 0x800, 0x6, 0x800, 0x80000000, 0x2, 0x3}, &(0x7f0000001380)={0x100000000, 0x0, 0x0, 0x100000001, 0x8, 0xb3, 0x400, 0x24000000}, &(0x7f00000013c0)={0x77359400}, &(0x7f0000001440)={&(0x7f0000001400)={[0x8]}, 0x8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r13, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x2c, r11, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff0001}, @BATADV_ATTR_VLANID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 01:37:54 executing program 5: r0 = syz_io_uring_setup(0x1a4a, &(0x7f0000000000)={0x0, 0xb0c4, 0x0, 0x0, 0x87}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_setup(0x57b1, &(0x7f0000000100)={0x0, 0xccef, 0x0, 0x2, 0x102, 0x0, r0}) r1 = io_uring_setup(0x343, &(0x7f0000000180)={0x0, 0xddab, 0x20, 0x1, 0x154, 0x0, r0}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='comm\x00') mq_getsetattr(r2, &(0x7f0000000240)={0x3, 0x9, 0x1, 0x5025}, &(0x7f0000000280)) io_uring_setup(0x29eb, &(0x7f00000002c0)={0x0, 0x3e9b, 0x4, 0x0, 0x1b}) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000340)) r3 = syz_io_uring_setup(0x6b78, &(0x7f0000000380)={0x0, 0x1193, 0x29, 0x3, 0x34, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000e, 0x30, r3, 0x0) io_uring_setup(0x1cab, &(0x7f0000000480)={0x0, 0x789c, 0x20, 0x1, 0x308}) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000500)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000540)={0xd2b, 0x4, 0x3, 0x1}, &(0x7f0000000580)) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000005c0)) ioctl$RTC_PIE_OFF(r2, 0x7006) mq_timedreceive(r2, &(0x7f0000000600)=""/94, 0x5e, 0x388, &(0x7f0000000680)={0x77359400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x100, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000700)) r5 = mq_open(&(0x7f0000000740)='!\'\x00', 0x80, 0x1, &(0x7f0000000780)={0xb01, 0x3c1, 0x100000001, 0x1}) write$binfmt_script(r5, &(0x7f00000007c0)={'#! ', './file0', [{0x20, 'comm\x00'}, {0x20, '^'}, {0x20, '\xf1\\$,&}#)Z,\xd4@'}], 0xa, "a2d01c05c2db46eb5c208b052c0e2d6ea9d8e316d2c8527bc02fb8a6bb5f858180f5822ad0089567c0a605b7756c312cea90e065763097aedadfc4f595defb443844548ea505dd85eb9dd24d4cb6a1f6c4107b0b70ecdb5d52bf5e55d7ef29d96e1746bfa3e16a72545d150b8e921091e0b39444cc65c352cbad7839dcfd283fad89a2a90a24a84c115f90f1c18f3ff4ec083552efca498be4b6398da775525c3680528f656d49ccad91d5fe3537eecc111da12ab4cc6f7635b27ce18a382577119d7ff211747dc723d0f3e16dfe8f7b0133929eca8364f61a40ca481acd2ad3e231bc90a2e24b1bf97c1a9987c92322507e27fe684412dc"}, 0x118) 01:37:54 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xff, 0x28a03) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000080)) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000000c0)=""/6, &(0x7f0000000100)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000140)={0x2c, 0x29, 0x3, 0xc, 0x2, 0x800, 0x0, 0x11f, 0xffffffffffffffff}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) accept$packet(r2, 0x0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x48000) geteuid() mq_open(&(0x7f0000000340)='/dev/net/tun\x00', 0x80, 0x81, &(0x7f0000000380)={0xfffffffffffff95c, 0x3f, 0x1, 0x6}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x890) 01:37:54 executing program 7: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000000000)=""/185) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x24a3, 0x8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RWSTAT(r1, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) msgrcv(0xffffffffffffffff, &(0x7f0000000180)={0x0, ""/132}, 0x8c, 0x2, 0x7800) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000240)=""/221) write$P9_RMKDIR(r1, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x40, 0x1}}, 0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000003c0)={0x30, 0x0, &(0x7f0000000380)=[r0]}, 0x1) r2 = syz_open_dev$rtc(&(0x7f0000000400), 0x6, 0x200) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000440)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000480), 0x4000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/igmp6\x00') ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000500)) msgrcv(0x0, &(0x7f0000000540)={0x0, ""/153}, 0xa1, 0x1, 0x0) [ 105.469726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.476814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.481315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.484624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.490523] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.494768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.502706] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.510251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.517794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.526937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.544625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.573861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.587461] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 105.590516] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.592657] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 105.597673] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.599097] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 105.600661] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.604977] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.605650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.609665] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 105.609719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.613875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.617608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.626272] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 105.628429] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.642375] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 105.646651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.655481] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.658690] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 105.675521] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.678507] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 105.689261] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 105.698414] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 105.702764] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.711399] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 105.719422] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 105.719662] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 105.730222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 105.753529] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 107.605598] Bluetooth: hci0: command tx timeout [ 107.605592] Bluetooth: hci1: command tx timeout [ 107.731185] Bluetooth: hci2: command tx timeout [ 107.732752] Bluetooth: hci5: command tx timeout [ 107.733332] Bluetooth: hci3: command tx timeout [ 107.795700] Bluetooth: hci7: command tx timeout [ 107.796589] Bluetooth: hci4: command tx timeout [ 107.860667] Bluetooth: hci6: command tx timeout [ 109.651070] Bluetooth: hci1: command tx timeout [ 109.653024] Bluetooth: hci0: command tx timeout [ 109.780498] Bluetooth: hci3: command tx timeout [ 109.780526] Bluetooth: hci5: command tx timeout [ 109.781142] Bluetooth: hci2: command tx timeout [ 109.843150] Bluetooth: hci7: command tx timeout [ 109.844031] Bluetooth: hci4: command tx timeout [ 109.907072] Bluetooth: hci6: command tx timeout [ 111.699867] Bluetooth: hci0: command tx timeout [ 111.699909] Bluetooth: hci1: command tx timeout [ 111.827722] Bluetooth: hci2: command tx timeout [ 111.828737] Bluetooth: hci5: command tx timeout [ 111.829332] Bluetooth: hci3: command tx timeout [ 111.891289] Bluetooth: hci4: command tx timeout [ 111.891740] Bluetooth: hci7: command tx timeout [ 111.957671] Bluetooth: hci6: command tx timeout [ 113.747266] Bluetooth: hci0: command tx timeout [ 113.748432] Bluetooth: hci1: command tx timeout [ 113.875138] Bluetooth: hci5: command tx timeout [ 113.875581] Bluetooth: hci2: command tx timeout [ 113.876119] Bluetooth: hci3: command tx timeout [ 113.940070] Bluetooth: hci4: command tx timeout [ 113.940510] Bluetooth: hci7: command tx timeout [ 114.004191] Bluetooth: hci6: command tx timeout [ 167.837073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.840489] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.843555] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.857502] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.861524] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.969914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.972703] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.977774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.000050] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.004565] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.075421] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.076870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.090736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.092354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.093121] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.095682] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.105116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.113371] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.141719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.142469] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.158494] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 168.160721] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 168.164325] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 168.175582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 168.181474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 168.183114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.187468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.188327] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 168.189352] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.192530] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.195607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.212267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 168.215732] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 168.218457] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 168.222131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.233912] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.262419] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 168.272428] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 168.277666] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 168.286543] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 169.939060] Bluetooth: hci0: command tx timeout [ 170.068400] Bluetooth: hci1: command tx timeout [ 170.260146] Bluetooth: hci3: command tx timeout [ 170.260833] Bluetooth: hci2: command tx timeout [ 170.324131] Bluetooth: hci4: command tx timeout [ 170.387071] Bluetooth: hci5: command tx timeout [ 170.387604] Bluetooth: hci7: command tx timeout [ 170.451047] Bluetooth: hci6: command tx timeout [ 171.988080] Bluetooth: hci0: command tx timeout [ 172.118020] Bluetooth: hci1: command tx timeout [ 172.307312] Bluetooth: hci3: command tx timeout [ 172.307802] Bluetooth: hci2: command tx timeout [ 172.372322] Bluetooth: hci4: command tx timeout [ 172.436278] Bluetooth: hci5: command tx timeout [ 172.436750] Bluetooth: hci7: command tx timeout [ 172.499195] Bluetooth: hci6: command tx timeout [ 174.036308] Bluetooth: hci0: command tx timeout [ 174.165005] Bluetooth: hci1: command tx timeout [ 174.355032] Bluetooth: hci2: command tx timeout [ 174.355525] Bluetooth: hci3: command tx timeout [ 174.420252] Bluetooth: hci4: command tx timeout [ 174.484117] Bluetooth: hci5: command tx timeout [ 174.484620] Bluetooth: hci7: command tx timeout [ 174.547047] Bluetooth: hci6: command tx timeout [ 176.083265] Bluetooth: hci0: command tx timeout [ 176.212169] Bluetooth: hci1: command tx timeout [ 176.403280] Bluetooth: hci3: command tx timeout [ 176.403772] Bluetooth: hci2: command tx timeout [ 176.468019] Bluetooth: hci4: command tx timeout [ 176.532270] Bluetooth: hci7: command tx timeout [ 176.532765] Bluetooth: hci5: command tx timeout [ 176.596242] Bluetooth: hci6: command tx timeout [ 230.056680] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.060888] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.064980] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.072617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.077858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.109557] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.113708] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.116976] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.129343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.135312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.265117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.271231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.275559] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.290231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.293820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.326284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.330878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.333576] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.347217] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.356702] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.455690] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.463405] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.464701] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 230.469062] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 230.473746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.474654] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 230.475739] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 230.481129] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 230.483482] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 230.494388] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 230.496678] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.501247] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.506522] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 230.508855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 230.510205] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.578863] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 230.590411] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 230.638330] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 230.691927] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 230.726545] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 232.147046] Bluetooth: hci1: command tx timeout [ 232.148109] Bluetooth: hci0: command tx timeout [ 232.342013] Bluetooth: hci2: command tx timeout [ 232.403022] Bluetooth: hci3: command tx timeout [ 232.531045] Bluetooth: hci6: command tx timeout [ 232.531707] Bluetooth: hci4: command tx timeout [ 232.595288] Bluetooth: hci5: command tx timeout [ 232.916265] Bluetooth: hci7: command tx timeout [ 234.195143] Bluetooth: hci0: command tx timeout [ 234.195614] Bluetooth: hci1: command tx timeout [ 234.387304] Bluetooth: hci2: command tx timeout [ 234.451100] Bluetooth: hci3: command tx timeout [ 234.579297] Bluetooth: hci4: command tx timeout [ 234.579719] Bluetooth: hci6: command tx timeout [ 234.645161] Bluetooth: hci5: command tx timeout [ 234.963081] Bluetooth: hci7: command tx timeout [ 236.243058] Bluetooth: hci1: command tx timeout [ 236.243526] Bluetooth: hci0: command tx timeout [ 236.435022] Bluetooth: hci2: command tx timeout [ 236.499517] Bluetooth: hci3: command tx timeout [ 236.627995] Bluetooth: hci6: command tx timeout [ 236.628413] Bluetooth: hci4: command tx timeout [ 236.691258] Bluetooth: hci5: command tx timeout [ 237.012376] Bluetooth: hci7: command tx timeout [ 238.291063] Bluetooth: hci0: command tx timeout [ 238.291534] Bluetooth: hci1: command tx timeout [ 238.483014] Bluetooth: hci2: command tx timeout [ 238.547198] Bluetooth: hci3: command tx timeout [ 238.675042] Bluetooth: hci6: command tx timeout [ 238.675457] Bluetooth: hci4: command tx timeout [ 238.739207] Bluetooth: hci5: command tx timeout [ 239.059184] Bluetooth: hci7: command tx timeout [ 292.339334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.346571] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.351511] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.361726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.368206] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.519067] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 292.528735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.536734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.557518] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.569501] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.607524] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.613782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.616211] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.626637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.637176] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.711324] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 292.748296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 292.752717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 292.755605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.760503] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 292.765600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.791289] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 292.800374] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.804077] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 292.810636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.812365] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 292.814829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.821589] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.830816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.844833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.845121] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 292.862724] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.872874] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.886113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.889565] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.154448] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 293.172436] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 293.188829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 293.230495] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 293.254782] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 294.420191] Bluetooth: hci0: command tx timeout [ 294.611193] Bluetooth: hci1: command tx timeout [ 294.675084] Bluetooth: hci2: command tx timeout [ 294.931039] Bluetooth: hci4: command tx timeout [ 294.995019] Bluetooth: hci6: command tx timeout [ 295.059011] Bluetooth: hci3: command tx timeout [ 295.379340] Bluetooth: hci5: command tx timeout [ 295.380846] Bluetooth: hci7: command tx timeout [ 296.468290] Bluetooth: hci0: command tx timeout [ 296.659068] Bluetooth: hci1: command tx timeout [ 296.723143] Bluetooth: hci2: command tx timeout [ 296.979025] Bluetooth: hci4: command tx timeout [ 297.044261] Bluetooth: hci6: command tx timeout [ 297.107487] Bluetooth: hci3: command tx timeout [ 297.427140] Bluetooth: hci7: command tx timeout [ 297.427328] Bluetooth: hci5: command tx timeout [ 298.515334] Bluetooth: hci0: command tx timeout [ 298.707319] Bluetooth: hci1: command tx timeout [ 298.771030] Bluetooth: hci2: command tx timeout [ 299.028999] Bluetooth: hci4: command tx timeout [ 299.091097] Bluetooth: hci6: command tx timeout [ 299.155109] Bluetooth: hci3: command tx timeout [ 299.476187] Bluetooth: hci5: command tx timeout [ 299.476456] Bluetooth: hci7: command tx timeout [ 300.563255] Bluetooth: hci0: command tx timeout [ 300.755029] Bluetooth: hci1: command tx timeout [ 300.819407] Bluetooth: hci2: command tx timeout [ 301.075051] Bluetooth: hci4: command tx timeout [ 301.139014] Bluetooth: hci6: command tx timeout [ 301.203142] Bluetooth: hci3: command tx timeout [ 301.523133] Bluetooth: hci5: command tx timeout [ 301.523155] Bluetooth: hci7: command tx timeout [ 354.789376] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.799213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.802405] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.811316] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.816363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.046552] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 355.051291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 355.053781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 355.062807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.069679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.203161] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.235367] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.237526] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.240204] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.242373] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.247466] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.251213] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.255726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.261404] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.270092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.591328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.593824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 355.600291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 355.606924] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 355.629575] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 355.635811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.643651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.645367] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 355.664293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.669807] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 355.675265] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 355.686462] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.717467] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.742527] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 355.757286] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 355.759399] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 355.775535] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 355.824977] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 355.942997] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 355.957639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 356.884318] Bluetooth: hci0: command tx timeout [ 357.140137] Bluetooth: hci1: command tx timeout [ 357.332366] Bluetooth: hci2: command tx timeout [ 357.396089] Bluetooth: hci3: command tx timeout [ 357.843173] Bluetooth: hci4: command tx timeout [ 357.844005] Bluetooth: hci5: command tx timeout [ 358.036106] Bluetooth: hci6: command tx timeout [ 358.036843] Bluetooth: hci7: command tx timeout [ 358.931004] Bluetooth: hci0: command tx timeout [ 359.187575] Bluetooth: hci1: command tx timeout [ 359.379247] Bluetooth: hci2: command tx timeout [ 359.443981] Bluetooth: hci3: command tx timeout [ 359.891222] Bluetooth: hci4: command tx timeout [ 359.891686] Bluetooth: hci5: command tx timeout [ 360.083220] Bluetooth: hci7: command tx timeout [ 360.083669] Bluetooth: hci6: command tx timeout [ 360.979326] Bluetooth: hci0: command tx timeout [ 361.235278] Bluetooth: hci1: command tx timeout [ 361.427427] Bluetooth: hci2: command tx timeout [ 361.491003] Bluetooth: hci3: command tx timeout [ 361.939070] Bluetooth: hci5: command tx timeout [ 361.939526] Bluetooth: hci4: command tx timeout [ 362.131374] Bluetooth: hci6: command tx timeout [ 362.131917] Bluetooth: hci7: command tx timeout [ 363.027985] Bluetooth: hci0: command tx timeout [ 363.283322] Bluetooth: hci1: command tx timeout [ 363.475295] Bluetooth: hci2: command tx timeout [ 363.540180] Bluetooth: hci3: command tx timeout [ 363.987189] Bluetooth: hci5: command tx timeout [ 363.987648] Bluetooth: hci4: command tx timeout [ 364.179164] Bluetooth: hci6: command tx timeout [ 364.179773] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 01:43:04 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff81604940 RCX=ffff8880364cf71c RDX=0000000000000000 RSI=ffffffff85c1d1c0 RDI=ffff888016ed1f7c RBP=ffff8880364cf860 RSP=ffff8880364cf7c8 R8 =0000000000000001 R9 =ffff8880364cf808 R10=000000000003b6bd R11=0000000000006f47 R12=ffff8880364cf890 R13=0000000000000000 R14=ffff888016ed1b80 R15=0000000000092cc0 RIP=ffffffff812d99dc RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcc8455a540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c85d03c008 CR3=000000000d451000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81aec338 RBX=0000000000000002 RCX=ffff88806cf0897c RDX=ffff88806cf08a70 RSI=ffffffff81aec338 RDI=ffff88806cf08a28 RBP=ffff88806cf08a80 RSP=ffff88806cf089b8 R8 =ffffffff86876ad2 R9 =ffff88806cf08a68 R10=000000000003b6bd R11=0000000000024c25 R12=0000000000000000 R13=ffff88806cf08a70 R14=ffff888016f83700 R15=ffff88806cf08a28 RIP=ffffffff81353dd4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5435e5c1f0 CR3=0000000013571000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000