Warning: Permanently added '[localhost]:40592' (ECDSA) to the list of known hosts. 2022/10/01 10:19:34 fuzzer started 2022/10/01 10:19:35 dialing manager at localhost:35095 syzkaller login: [ 44.728523] cgroup: Unknown subsys name 'net' [ 44.863357] cgroup: Unknown subsys name 'rlimit' 2022/10/01 10:19:50 syscalls: 211 2022/10/01 10:19:50 code coverage: enabled 2022/10/01 10:19:50 comparison tracing: enabled 2022/10/01 10:19:50 extra coverage: enabled 2022/10/01 10:19:50 setuid sandbox: enabled 2022/10/01 10:19:50 namespace sandbox: enabled 2022/10/01 10:19:50 Android sandbox: enabled 2022/10/01 10:19:50 fault injection: enabled 2022/10/01 10:19:50 leak checking: enabled 2022/10/01 10:19:50 net packet injection: enabled 2022/10/01 10:19:50 net device setup: enabled 2022/10/01 10:19:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 10:19:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 10:19:50 USB emulation: enabled 2022/10/01 10:19:50 hci packet injection: enabled 2022/10/01 10:19:50 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 10:19:50 802.15.4 emulation: enabled 2022/10/01 10:19:50 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 10:19:52 starting 8 fuzzer processes 10:19:52 executing program 0: getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040)={0x6, 0x3}, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x2b}}}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x8010) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}}, 0x4004800) r1 = syz_io_uring_complete(0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000400)=0x1, 0x4) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000440)=0xffff, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f00000004c0)=0x1, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000500)=0x5, 0x1) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000540)=0xff00, 0x2) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000580)=0x5, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) write$bt_hci(r1, &(0x7f00000005c0)={0x1, @sniff_mode={{0x803, 0xa}, {0x0, 0x2, 0xff78, 0x2, 0x20}}}, 0xe) r3 = syz_open_dev$vcsu(&(0x7f0000000600), 0x3b6, 0x800) accept$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000740)={'gre0\x00', &(0x7f00000006c0)={'syztnl0\x00', r4, 0x80, 0x8000, 0x6, 0x5, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x67, 0x0, 0x3d, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0x77, 0x1, 0x2, [{@remote, 0x8000}, {@empty, 0x5}]}, @timestamp_prespec={0x44, 0xc, 0x19, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x5}]}]}}}}}) 10:19:52 executing program 1: setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x700, 0x20, 0x26f, 0x1, {{0xe, 0x4, 0x3, 0x7, 0x38, 0x7fff, 0x0, 0xcc, 0x2f, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x5e, 0x1, 0x3, [{@local, 0x10001}]}, @ssrr={0x89, 0x17, 0xbe, [@multicast2, @multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40801) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000280)) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf5ab005c91040bf7}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x11, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40008000}, 0x4000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ff}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x16a62bfb}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6b48}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000051) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) r6 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r7 = syz_open_dev$vcsu(&(0x7f0000000980), 0x9, 0x101000) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r7) 10:19:52 executing program 2: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3b5b, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x75}, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}]}, 0x24}}, 0x8000) write$P9_RREADDIR(r0, &(0x7f0000000300)={0xa6, 0x29, 0x2, {0x6, [{{0x10, 0x1, 0x6}, 0x800, 0x7f, 0x7, './file0'}, {{0x4, 0x4, 0x6}, 0x7fffffff, 0x7, 0x7, './file0'}, {{0x80, 0x4, 0x1}, 0x9, 0x2, 0x7, './file0'}, {{0x0, 0x0, 0x2}, 0x0, 0x80, 0x7, './file0'}, {{0x10, 0x3, 0x3}, 0xd02c, 0x7, 0x7, './file0'}]}}, 0xa6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000003c0)={0x7ff, [0x200], 0x200}, 0x10) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000400)={'macvtap0\x00'}) write$P9_RREADDIR(r1, &(0x7f0000000440)={0xe4, 0x29, 0x2, {0x6, [{{0x50, 0x4, 0x8}, 0x9, 0x5, 0x7, './file0'}, {{0x1, 0x3, 0x8}, 0x3, 0x40, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0xffffffff80000001, 0xb6, 0x7, './file0'}, {{0x82, 0x0, 0x1}, 0x1ff, 0x3, 0x7, './file0'}, {{0x40, 0x3, 0x4}, 0x2, 0x7, 0x7, './file0'}, {{0x4, 0x1, 0x8}, 0x1, 0x1f, 0x7, './file0'}, {{0x4, 0x2, 0x5}, 0x80, 0x6, 0x7, './file0'}]}}, 0xe4) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000540)=0xc5a, 0x4) move_mount(r1, &(0x7f0000000580)='./file1\x00', r0, &(0x7f00000005c0)='./file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file2\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000640)=""/4096, &(0x7f0000001640)=0x1000) syz_genetlink_get_family_id$tipc2(&(0x7f0000001680), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001740)={'gretap0\x00', &(0x7f00000016c0)={'gre0\x00', 0x0, 0x10, 0x20, 0x4, 0x9, {{0xe, 0x4, 0x1, 0x29, 0x38, 0x67, 0x0, 0x25, 0x4, 0x0, @multicast2, @private=0xffe00, {[@timestamp_addr={0x44, 0x14, 0xb5, 0x1, 0x3, [{@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}]}]}}}}}) connect$packet(r4, &(0x7f0000001780)={0x11, 0x0, r5, 0x1, 0x9, 0x6, @local}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r0, {0x98}}, './file1\x00'}) setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000001800)=0x4, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) [ 61.283824] audit: type=1400 audit(1664619592.132:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:19:52 executing program 3: getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000), &(0x7f0000000040)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x5, &(0x7f00000000c0)=0x4) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000140)=""/210, &(0x7f0000000240)=0xd2) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0x7, 0x9]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x80000000, 0x2, 0x8]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x17c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x49bb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x671df717}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x52}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffa1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee77}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x400, @remote, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x67}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = syz_open_dev$vcsu(&(0x7f0000000640), 0x30, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc801}, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f00000007c0)={0x9, 0x80000001, 0xffffffff, 0xfffffffd}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000005}, 0x8000) sendmsg$BATADV_CMD_TP_METER(r1, 0xfffffffffffffffd, 0x24000004) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8840) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8400000c}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, r5, 0x11e, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffff7f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x14000080) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000bc0)=0x60, 0x2) 10:19:52 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="a86540cf8abb01c9e75f2a03ae3db796af41fcf5da407c506e2555d2ec22b7fd8366b3b72f07b7aa6a85c25db13cda36911cfe20b0216bdb433a51ba8883694fa7da906dc18d472e3380bf36da2655fe744f543807b9e3a71e1049e16dc4c79a620488a99fac393ddbe03347725546d45ac4df1bf4385a46cb232215ffc78cc08826550e440056427b8d62d9", 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x24008814) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x110, 0xffffffffffffffff, 0x10000000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c884) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r0 = socket(0x10, 0x4, 0x5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="84774f5ab84ea9f017ad7c3ad4d8ec57dd30d5458358af73c6be6b8c91437ebf82c4c5efc8626ae6d99361096b2530bafbb1546369104256795f77dba14a242df35eeeae5ae4a588b73a1337e3464309289a16e1e854b5605aa3d6d530d256587a46b5a5224be43586031eb8208265bc35c55bd2c9156a6c597282777a73ad41be1333bb7d49f31bc1d15d1abcb408ee1592a2612229358b196f7accc08f083b2337be1d797fb56724cc4f8338938cbbc3c57d5d4a9469233d5db1df94ae5ded0e77aaaf2ec2fde888c1a23f", 0xcc) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RCREATE(r1, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x40, 0x3, 0x4}, 0x7}}, 0x18) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffd}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r0) r2 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0xd00, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) read$ptp(r2, &(0x7f0000000800)=""/201, 0xc9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2, {0xee00}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c001}, 0x8c0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x40, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x3) 10:19:52 executing program 5: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) setsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000100)="b1b6ca161d8a946e45dfd0a115b2de023f3d6cef3783265f22b0ae58bf031eeed1d4d2e5ab0707404b9ab9c57ba09dabaa843b4a8ae379c8cbe3d4849a72313e8b072089912711fcd435b7053038ff1d31d7a8677e61bffd867183e50cbdbbc5b9d80f005a878d66e55fdd8ed3f448c8ed7ac96a67fba1ea31421fe93ad50808baedb328e3209f44316fb2a1a825036716fae62f4934994e3628b16bd548f30795d40c27e7948a30db89a67d8389012b70d54fb14131eb88dea6e7b68c8b8d3e0276f7e476ec4127ad771d65", 0xcc) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x1, 0x8b, 0x6, @multicast}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x5ad}}, './file0\x00'}) write$9p(r5, &(0x7f0000000280)="57c02f6ee49444e40ab7e68c694d32fdac7402a523ac76b21cb08b39ec10fae3133691baf0daea8e91efd0a12f23be78b1f465b024bfed07d2bd9c1490ccb9886d4be627740e5e2bb27fd18bb7e80e7eeaae85207e022634ee52e5ec98e058", 0x5f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', r9, 0x2f, 0x7f, 0x1, 0x80000001, 0x2, @empty, @private2, 0x20, 0x7800, 0x10000, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r9, 0x8, 0x8000, 0xfb2, 0x2, {{0xe, 0x4, 0x3, 0x36, 0x38, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @multicast2, {[@lsrr={0x83, 0xb, 0x35, [@dev={0xac, 0x14, 0x14, 0x3d}, @multicast1]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xe4, 0x3, 0x5, [{@loopback, 0x8001}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x2}]}]}}}}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r2) write$P9_RFLUSH(r2, &(0x7f0000000640)={0x7, 0x6d, 0x2}, 0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file1\x00'}) 10:19:52 executing program 6: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000004}, 0x80000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x70b}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5b, 0x5, 0x6]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x44051) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffae}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x38}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008080}, 0xd9f28021723638d3) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4606}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6548}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x48c0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x3, 0x8000, {{0x1a, 0x4, 0x0, 0x5, 0x68, 0x67, 0x0, 0x5, 0x0, 0x0, @multicast1, @rand_addr=0x64010102, {[@noop, @cipso={0x86, 0x25, 0x13a57b624540ce3d, [{0x7, 0xe, "895cee695206e6126c6133cc"}, {0x0, 0xd, "da71a58f6d390b409cb768"}, {0x7, 0x4, "76f4"}]}, @noop, @timestamp={0x44, 0x2c, 0x74, 0x0, 0xa, [0x751, 0x1ff, 0x5cde, 0x8, 0x6, 0x8, 0x8, 0x4, 0x5, 0x1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip_vti0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0x7978, 0x2, {{0x21, 0x4, 0x0, 0x5, 0x84, 0x67, 0x0, 0xd6, 0x2f, 0x0, @empty, @broadcast, {[@end, @timestamp_prespec={0x44, 0x14, 0x88, 0x3, 0x5, [{@remote, 0x9}, {@empty, 0x1}]}, @ssrr={0x89, 0x7, 0x1f, [@multicast2]}, @lsrr={0x83, 0xf, 0x52, [@dev={0xac, 0x14, 0x14, 0xe}, @remote, @broadcast]}, @ssrr={0x89, 0x2b, 0x4, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @loopback, @multicast2, @empty, @broadcast, @multicast2]}, @noop, @generic={0x82, 0x12, "971eb7d9f29463dc4623c3840f12fa67"}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff291}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x2004c011}, 0x8005) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, 0x0, 0x710, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x53}}}}, [@crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x1e, 0x115, "07e79102a87679cfa9e2d329be607102829b5e33a21d3d43d75a"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd39}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10:19:52 executing program 7: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0xfffffff9, &(0x7f0000000080)=0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x2) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7bd}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8b}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004094}, 0x20004001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000440)={0x1ff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x0, 0x2, {{0x1c, 0x4, 0x2, 0x3b, 0x70, 0x64, 0x0, 0x9, 0x4, 0x0, @loopback, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x7d, 0x1, 0x8, [{@broadcast, 0x6}]}, @generic={0x88, 0x7, "9f0bfd74ca"}, @timestamp={0x44, 0x10, 0x12, 0x0, 0x9, [0x0, 0x7, 0x9]}, @timestamp_prespec={0x44, 0x34, 0xd8, 0x3, 0x1, [{@remote, 0x7fffffff}, {@broadcast, 0x2}, {@empty, 0x80}, {@empty, 0x7ff}, {@multicast2, 0x5}, {@broadcast, 0x9}]}, @end]}}}}}) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x8895) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000740), 0x1) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000780)={0xffffffe1, 0x4}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f00000007c0)=0x63, 0x2) [ 62.538128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.540487] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.550081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.551363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.552739] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.553843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.559735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.561048] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.580501] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.582538] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.583747] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.584861] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.586534] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.589193] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.590513] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.592033] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.594665] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.596381] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.598149] Bluetooth: hci0: HCI_REQ-0x0c1a [ 62.601625] Bluetooth: hci1: HCI_REQ-0x0c1a [ 62.602003] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.603627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.604432] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.606225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.606293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.606708] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.608587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.609504] Bluetooth: hci2: HCI_REQ-0x0c1a [ 62.618765] Bluetooth: hci3: HCI_REQ-0x0c1a [ 62.644942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.646076] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.648570] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.649717] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.650791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.656320] Bluetooth: hci4: HCI_REQ-0x0c1a [ 62.763188] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 62.776052] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 62.781995] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 62.795401] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 62.802410] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 62.826712] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 62.845313] Bluetooth: hci6: HCI_REQ-0x0c1a [ 64.611910] Bluetooth: hci1: command 0x0409 tx timeout [ 64.675395] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 64.677044] Bluetooth: hci2: command 0x0409 tx timeout [ 64.678289] Bluetooth: hci3: command 0x0409 tx timeout [ 64.679124] Bluetooth: hci0: command 0x0409 tx timeout [ 64.679993] Bluetooth: hci4: command 0x0409 tx timeout [ 64.739400] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 64.868342] Bluetooth: hci6: command 0x0409 tx timeout [ 66.660525] Bluetooth: hci1: command 0x041b tx timeout [ 66.723691] Bluetooth: hci0: command 0x041b tx timeout [ 66.725264] Bluetooth: hci4: command 0x041b tx timeout [ 66.726046] Bluetooth: hci3: command 0x041b tx timeout [ 66.726895] Bluetooth: hci2: command 0x041b tx timeout [ 66.915416] Bluetooth: hci6: command 0x041b tx timeout [ 67.653920] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.656146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.658015] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.661369] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.663105] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.664577] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.670399] Bluetooth: hci5: HCI_REQ-0x0c1a [ 67.800705] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.823573] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.831761] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.849378] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.855387] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 67.858918] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.866373] Bluetooth: hci7: HCI_REQ-0x0c1a [ 68.707327] Bluetooth: hci1: command 0x040f tx timeout [ 68.771343] Bluetooth: hci2: command 0x040f tx timeout [ 68.771886] Bluetooth: hci3: command 0x040f tx timeout [ 68.772800] Bluetooth: hci4: command 0x040f tx timeout [ 68.773322] Bluetooth: hci0: command 0x040f tx timeout [ 68.963270] Bluetooth: hci6: command 0x040f tx timeout [ 69.731369] Bluetooth: hci5: command 0x0409 tx timeout [ 69.923322] Bluetooth: hci7: command 0x0409 tx timeout [ 70.755770] Bluetooth: hci1: command 0x0419 tx timeout [ 70.819358] Bluetooth: hci0: command 0x0419 tx timeout [ 70.819911] Bluetooth: hci4: command 0x0419 tx timeout [ 70.820482] Bluetooth: hci3: command 0x0419 tx timeout [ 70.821042] Bluetooth: hci2: command 0x0419 tx timeout [ 71.011313] Bluetooth: hci6: command 0x0419 tx timeout [ 71.779328] Bluetooth: hci5: command 0x041b tx timeout [ 71.971286] Bluetooth: hci7: command 0x041b tx timeout [ 73.827287] Bluetooth: hci5: command 0x040f tx timeout [ 74.019317] Bluetooth: hci7: command 0x040f tx timeout [ 75.875326] Bluetooth: hci5: command 0x0419 tx timeout [ 76.067268] Bluetooth: hci7: command 0x0419 tx timeout [ 121.508313] syz-executor.0 (296) used greatest stack depth: 24512 bytes left [ 123.824068] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.825329] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.825980] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.827348] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.828390] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.829025] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.833299] Bluetooth: hci0: HCI_REQ-0x0c1a 10:20:55 executing program 5: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) setsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000100)="b1b6ca161d8a946e45dfd0a115b2de023f3d6cef3783265f22b0ae58bf031eeed1d4d2e5ab0707404b9ab9c57ba09dabaa843b4a8ae379c8cbe3d4849a72313e8b072089912711fcd435b7053038ff1d31d7a8677e61bffd867183e50cbdbbc5b9d80f005a878d66e55fdd8ed3f448c8ed7ac96a67fba1ea31421fe93ad50808baedb328e3209f44316fb2a1a825036716fae62f4934994e3628b16bd548f30795d40c27e7948a30db89a67d8389012b70d54fb14131eb88dea6e7b68c8b8d3e0276f7e476ec4127ad771d65", 0xcc) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x1, 0x8b, 0x6, @multicast}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x5ad}}, './file0\x00'}) write$9p(r5, &(0x7f0000000280)="57c02f6ee49444e40ab7e68c694d32fdac7402a523ac76b21cb08b39ec10fae3133691baf0daea8e91efd0a12f23be78b1f465b024bfed07d2bd9c1490ccb9886d4be627740e5e2bb27fd18bb7e80e7eeaae85207e022634ee52e5ec98e058", 0x5f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', r9, 0x2f, 0x7f, 0x1, 0x80000001, 0x2, @empty, @private2, 0x20, 0x7800, 0x10000, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r9, 0x8, 0x8000, 0xfb2, 0x2, {{0xe, 0x4, 0x3, 0x36, 0x38, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @multicast2, {[@lsrr={0x83, 0xb, 0x35, [@dev={0xac, 0x14, 0x14, 0x3d}, @multicast1]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xe4, 0x3, 0x5, [{@loopback, 0x8001}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x2}]}]}}}}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r2) write$P9_RFLUSH(r2, &(0x7f0000000640)={0x7, 0x6d, 0x2}, 0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file1\x00'}) [ 124.512325] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.531525] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.540907] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.567207] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.568154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.569212] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.570828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.572888] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 124.574375] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.603940] Bluetooth: hci2: HCI_REQ-0x0c1a [ 124.648270] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 124.650104] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 124.651835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 124.655444] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 10:20:55 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="a86540cf8abb01c9e75f2a03ae3db796af41fcf5da407c506e2555d2ec22b7fd8366b3b72f07b7aa6a85c25db13cda36911cfe20b0216bdb433a51ba8883694fa7da906dc18d472e3380bf36da2655fe744f543807b9e3a71e1049e16dc4c79a620488a99fac393ddbe03347725546d45ac4df1bf4385a46cb232215ffc78cc08826550e440056427b8d62d9", 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x24008814) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x110, 0xffffffffffffffff, 0x10000000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c884) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r0 = socket(0x10, 0x4, 0x5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="84774f5ab84ea9f017ad7c3ad4d8ec57dd30d5458358af73c6be6b8c91437ebf82c4c5efc8626ae6d99361096b2530bafbb1546369104256795f77dba14a242df35eeeae5ae4a588b73a1337e3464309289a16e1e854b5605aa3d6d530d256587a46b5a5224be43586031eb8208265bc35c55bd2c9156a6c597282777a73ad41be1333bb7d49f31bc1d15d1abcb408ee1592a2612229358b196f7accc08f083b2337be1d797fb56724cc4f8338938cbbc3c57d5d4a9469233d5db1df94ae5ded0e77aaaf2ec2fde888c1a23f", 0xcc) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RCREATE(r1, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x40, 0x3, 0x4}, 0x7}}, 0x18) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffd}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r0) r2 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0xd00, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) read$ptp(r2, &(0x7f0000000800)=""/201, 0xc9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2, {0xee00}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c001}, 0x8c0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x40, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x3) [ 124.707447] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.712798] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 124.714433] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 124.717073] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.718462] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.726917] Bluetooth: hci6: HCI_REQ-0x0c1a [ 124.730141] Bluetooth: hci1: HCI_REQ-0x0c1a 10:20:55 executing program 5: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) setsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000100)="b1b6ca161d8a946e45dfd0a115b2de023f3d6cef3783265f22b0ae58bf031eeed1d4d2e5ab0707404b9ab9c57ba09dabaa843b4a8ae379c8cbe3d4849a72313e8b072089912711fcd435b7053038ff1d31d7a8677e61bffd867183e50cbdbbc5b9d80f005a878d66e55fdd8ed3f448c8ed7ac96a67fba1ea31421fe93ad50808baedb328e3209f44316fb2a1a825036716fae62f4934994e3628b16bd548f30795d40c27e7948a30db89a67d8389012b70d54fb14131eb88dea6e7b68c8b8d3e0276f7e476ec4127ad771d65", 0xcc) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x1, 0x8b, 0x6, @multicast}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x5ad}}, './file0\x00'}) write$9p(r5, &(0x7f0000000280)="57c02f6ee49444e40ab7e68c694d32fdac7402a523ac76b21cb08b39ec10fae3133691baf0daea8e91efd0a12f23be78b1f465b024bfed07d2bd9c1490ccb9886d4be627740e5e2bb27fd18bb7e80e7eeaae85207e022634ee52e5ec98e058", 0x5f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', r9, 0x2f, 0x7f, 0x1, 0x80000001, 0x2, @empty, @private2, 0x20, 0x7800, 0x10000, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r9, 0x8, 0x8000, 0xfb2, 0x2, {{0xe, 0x4, 0x3, 0x36, 0x38, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @multicast2, {[@lsrr={0x83, 0xb, 0x35, [@dev={0xac, 0x14, 0x14, 0x3d}, @multicast1]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xe4, 0x3, 0x5, [{@loopback, 0x8001}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x2}]}]}}}}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r2) write$P9_RFLUSH(r2, &(0x7f0000000640)={0x7, 0x6d, 0x2}, 0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file1\x00'}) 10:20:55 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="a86540cf8abb01c9e75f2a03ae3db796af41fcf5da407c506e2555d2ec22b7fd8366b3b72f07b7aa6a85c25db13cda36911cfe20b0216bdb433a51ba8883694fa7da906dc18d472e3380bf36da2655fe744f543807b9e3a71e1049e16dc4c79a620488a99fac393ddbe03347725546d45ac4df1bf4385a46cb232215ffc78cc08826550e440056427b8d62d9", 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x24008814) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x110, 0xffffffffffffffff, 0x10000000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c884) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r0 = socket(0x10, 0x4, 0x5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="84774f5ab84ea9f017ad7c3ad4d8ec57dd30d5458358af73c6be6b8c91437ebf82c4c5efc8626ae6d99361096b2530bafbb1546369104256795f77dba14a242df35eeeae5ae4a588b73a1337e3464309289a16e1e854b5605aa3d6d530d256587a46b5a5224be43586031eb8208265bc35c55bd2c9156a6c597282777a73ad41be1333bb7d49f31bc1d15d1abcb408ee1592a2612229358b196f7accc08f083b2337be1d797fb56724cc4f8338938cbbc3c57d5d4a9469233d5db1df94ae5ded0e77aaaf2ec2fde888c1a23f", 0xcc) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RCREATE(r1, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x40, 0x3, 0x4}, 0x7}}, 0x18) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffd}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r0) r2 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0xd00, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) read$ptp(r2, &(0x7f0000000800)=""/201, 0xc9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2, {0xee00}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c001}, 0x8c0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x40, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x3) 10:20:56 executing program 5: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) setsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000100)="b1b6ca161d8a946e45dfd0a115b2de023f3d6cef3783265f22b0ae58bf031eeed1d4d2e5ab0707404b9ab9c57ba09dabaa843b4a8ae379c8cbe3d4849a72313e8b072089912711fcd435b7053038ff1d31d7a8677e61bffd867183e50cbdbbc5b9d80f005a878d66e55fdd8ed3f448c8ed7ac96a67fba1ea31421fe93ad50808baedb328e3209f44316fb2a1a825036716fae62f4934994e3628b16bd548f30795d40c27e7948a30db89a67d8389012b70d54fb14131eb88dea6e7b68c8b8d3e0276f7e476ec4127ad771d65", 0xcc) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x1, 0x8b, 0x6, @multicast}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x5ad}}, './file0\x00'}) write$9p(r5, &(0x7f0000000280)="57c02f6ee49444e40ab7e68c694d32fdac7402a523ac76b21cb08b39ec10fae3133691baf0daea8e91efd0a12f23be78b1f465b024bfed07d2bd9c1490ccb9886d4be627740e5e2bb27fd18bb7e80e7eeaae85207e022634ee52e5ec98e058", 0x5f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$NS_GET_USERNS(r6, 0xb701, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', r9, 0x2f, 0x7f, 0x1, 0x80000001, 0x2, @empty, @private2, 0x20, 0x7800, 0x10000, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r9, 0x8, 0x8000, 0xfb2, 0x2, {{0xe, 0x4, 0x3, 0x36, 0x38, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @multicast2, {[@lsrr={0x83, 0xb, 0x35, [@dev={0xac, 0x14, 0x14, 0x3d}, @multicast1]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xe4, 0x3, 0x5, [{@loopback, 0x8001}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x2}]}]}}}}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r2) write$P9_RFLUSH(r2, &(0x7f0000000640)={0x7, 0x6d, 0x2}, 0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file1\x00'}) 10:20:56 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="a86540cf8abb01c9e75f2a03ae3db796af41fcf5da407c506e2555d2ec22b7fd8366b3b72f07b7aa6a85c25db13cda36911cfe20b0216bdb433a51ba8883694fa7da906dc18d472e3380bf36da2655fe744f543807b9e3a71e1049e16dc4c79a620488a99fac393ddbe03347725546d45ac4df1bf4385a46cb232215ffc78cc08826550e440056427b8d62d9", 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x24008814) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x110, 0xffffffffffffffff, 0x10000000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c884) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r0 = socket(0x10, 0x4, 0x5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="84774f5ab84ea9f017ad7c3ad4d8ec57dd30d5458358af73c6be6b8c91437ebf82c4c5efc8626ae6d99361096b2530bafbb1546369104256795f77dba14a242df35eeeae5ae4a588b73a1337e3464309289a16e1e854b5605aa3d6d530d256587a46b5a5224be43586031eb8208265bc35c55bd2c9156a6c597282777a73ad41be1333bb7d49f31bc1d15d1abcb408ee1592a2612229358b196f7accc08f083b2337be1d797fb56724cc4f8338938cbbc3c57d5d4a9469233d5db1df94ae5ded0e77aaaf2ec2fde888c1a23f", 0xcc) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RCREATE(r1, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x40, 0x3, 0x4}, 0x7}}, 0x18) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffd}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r0) r2 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0xd00, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) read$ptp(r2, &(0x7f0000000800)=""/201, 0xc9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2, {0xee00}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c001}, 0x8c0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x40, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x3) 10:20:56 executing program 5: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) setsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000100)="b1b6ca161d8a946e45dfd0a115b2de023f3d6cef3783265f22b0ae58bf031eeed1d4d2e5ab0707404b9ab9c57ba09dabaa843b4a8ae379c8cbe3d4849a72313e8b072089912711fcd435b7053038ff1d31d7a8677e61bffd867183e50cbdbbc5b9d80f005a878d66e55fdd8ed3f448c8ed7ac96a67fba1ea31421fe93ad50808baedb328e3209f44316fb2a1a825036716fae62f4934994e3628b16bd548f30795d40c27e7948a30db89a67d8389012b70d54fb14131eb88dea6e7b68c8b8d3e0276f7e476ec4127ad771d65", 0xcc) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x1, 0x8b, 0x6, @multicast}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x5ad}}, './file0\x00'}) write$9p(r3, &(0x7f0000000280)="57c02f6ee49444e40ab7e68c694d32fdac7402a523ac76b21cb08b39ec10fae3133691baf0daea8e91efd0a12f23be78b1f465b024bfed07d2bd9c1490ccb9886d4be627740e5e2bb27fd18bb7e80e7eeaae85207e022634ee52e5ec98e058", 0x5f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', r7, 0x2f, 0x7f, 0x1, 0x80000001, 0x2, @empty, @private2, 0x20, 0x7800, 0x10000, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r7, 0x8, 0x8000, 0xfb2, 0x2, {{0xe, 0x4, 0x3, 0x36, 0x38, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @multicast2, {[@lsrr={0x83, 0xb, 0x35, [@dev={0xac, 0x14, 0x14, 0x3d}, @multicast1]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xe4, 0x3, 0x5, [{@loopback, 0x8001}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x2}]}]}}}}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r2) write$P9_RFLUSH(r2, &(0x7f0000000640)={0x7, 0x6d, 0x2}, 0x7) 10:20:56 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="a86540cf8abb01c9e75f2a03ae3db796af41fcf5da407c506e2555d2ec22b7fd8366b3b72f07b7aa6a85c25db13cda36911cfe20b0216bdb433a51ba8883694fa7da906dc18d472e3380bf36da2655fe744f543807b9e3a71e1049e16dc4c79a620488a99fac393ddbe03347725546d45ac4df1bf4385a46cb232215ffc78cc08826550e440056427b8d62d9", 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x24008814) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x110, 0xffffffffffffffff, 0x10000000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c884) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r0 = socket(0x10, 0x4, 0x5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="84774f5ab84ea9f017ad7c3ad4d8ec57dd30d5458358af73c6be6b8c91437ebf82c4c5efc8626ae6d99361096b2530bafbb1546369104256795f77dba14a242df35eeeae5ae4a588b73a1337e3464309289a16e1e854b5605aa3d6d530d256587a46b5a5224be43586031eb8208265bc35c55bd2c9156a6c597282777a73ad41be1333bb7d49f31bc1d15d1abcb408ee1592a2612229358b196f7accc08f083b2337be1d797fb56724cc4f8338938cbbc3c57d5d4a9469233d5db1df94ae5ded0e77aaaf2ec2fde888c1a23f", 0xcc) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RCREATE(r1, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x40, 0x3, 0x4}, 0x7}}, 0x18) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffd}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r0) r2 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0xd00, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) read$ptp(r2, &(0x7f0000000800)=""/201, 0xc9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2, {0xee00}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c001}, 0x8c0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x3) [ 125.859332] Bluetooth: hci0: command 0x0409 tx timeout [ 126.627360] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 126.628416] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 126.691322] Bluetooth: hci2: command 0x0409 tx timeout [ 126.755482] Bluetooth: hci1: command 0x0409 tx timeout [ 126.819474] Bluetooth: hci6: command 0x0409 tx timeout [ 127.908139] Bluetooth: hci0: command 0x041b tx timeout [ 128.739308] Bluetooth: hci2: command 0x041b tx timeout [ 128.803367] Bluetooth: hci1: command 0x041b tx timeout [ 128.867270] Bluetooth: hci6: command 0x041b tx timeout [ 129.115889] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.117188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.119318] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.142018] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.142999] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 129.145182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.154718] Bluetooth: hci4: HCI_REQ-0x0c1a [ 129.955283] Bluetooth: hci0: command 0x040f tx timeout [ 130.787306] Bluetooth: hci2: command 0x040f tx timeout [ 130.851318] Bluetooth: hci1: command 0x040f tx timeout [ 130.915388] Bluetooth: hci6: command 0x040f tx timeout [ 131.107396] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 131.171347] Bluetooth: hci4: command 0x0409 tx timeout [ 132.004304] Bluetooth: hci0: command 0x0419 tx timeout [ 132.835281] Bluetooth: hci2: command 0x0419 tx timeout [ 132.900361] Bluetooth: hci1: command 0x0419 tx timeout [ 132.963345] Bluetooth: hci6: command 0x0419 tx timeout [ 133.219498] Bluetooth: hci4: command 0x041b tx timeout [ 133.499134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.538084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.544084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.548581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.563449] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 133.565408] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.588291] Bluetooth: hci3: HCI_REQ-0x0c1a [ 135.267458] Bluetooth: hci4: command 0x040f tx timeout [ 135.651328] Bluetooth: hci3: command 0x0409 tx timeout [ 137.315291] Bluetooth: hci4: command 0x0419 tx timeout [ 137.699366] Bluetooth: hci3: command 0x041b tx timeout [ 139.747314] Bluetooth: hci3: command 0x040f tx timeout [ 141.796295] Bluetooth: hci3: command 0x0419 tx timeout 10:21:55 executing program 0: getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040)={0x6, 0x3}, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x2b}}}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x8010) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}}, 0x4004800) r1 = syz_io_uring_complete(0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000400)=0x1, 0x4) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000440)=0xffff, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f00000004c0)=0x1, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000500)=0x5, 0x1) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000540)=0xff00, 0x2) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000580)=0x5, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) write$bt_hci(r1, &(0x7f00000005c0)={0x1, @sniff_mode={{0x803, 0xa}, {0x0, 0x2, 0xff78, 0x2, 0x20}}}, 0xe) r3 = syz_open_dev$vcsu(&(0x7f0000000600), 0x3b6, 0x800) accept$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000740)={'gre0\x00', &(0x7f00000006c0)={'syztnl0\x00', r4, 0x80, 0x8000, 0x6, 0x5, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x67, 0x0, 0x3d, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0x77, 0x1, 0x2, [{@remote, 0x8000}, {@empty, 0x5}]}, @timestamp_prespec={0x44, 0xc, 0x19, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x5}]}]}}}}}) 10:21:55 executing program 7: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0xfffffff9, &(0x7f0000000080)=0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x4, &(0x7f0000000100)=0x2) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7bd}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8b}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004094}, 0x20004001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000440)={0x1ff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x0, 0x2, {{0x1c, 0x4, 0x2, 0x3b, 0x70, 0x64, 0x0, 0x9, 0x4, 0x0, @loopback, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x7d, 0x1, 0x8, [{@broadcast, 0x6}]}, @generic={0x88, 0x7, "9f0bfd74ca"}, @timestamp={0x44, 0x10, 0x12, 0x0, 0x9, [0x0, 0x7, 0x9]}, @timestamp_prespec={0x44, 0x34, 0xd8, 0x3, 0x1, [{@remote, 0x7fffffff}, {@broadcast, 0x2}, {@empty, 0x80}, {@empty, 0x7ff}, {@multicast2, 0x5}, {@broadcast, 0x9}]}, @end]}}}}}) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x8895) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000740), 0x1) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000780)={0xffffffe1, 0x4}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f00000007c0)=0x63, 0x2) 10:21:55 executing program 4: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="a86540cf8abb01c9e75f2a03ae3db796af41fcf5da407c506e2555d2ec22b7fd8366b3b72f07b7aa6a85c25db13cda36911cfe20b0216bdb433a51ba8883694fa7da906dc18d472e3380bf36da2655fe744f543807b9e3a71e1049e16dc4c79a620488a99fac393ddbe03347725546d45ac4df1bf4385a46cb232215ffc78cc08826550e440056427b8d62d9", 0x8c}, 0x1, 0x0, 0x0, 0x44}, 0x24008814) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x110, 0xffffffffffffffff, 0x10000000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c884) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r0 = socket(0x10, 0x4, 0x5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) write$9p(0xffffffffffffffff, &(0x7f0000000400)="84774f5ab84ea9f017ad7c3ad4d8ec57dd30d5458358af73c6be6b8c91437ebf82c4c5efc8626ae6d99361096b2530bafbb1546369104256795f77dba14a242df35eeeae5ae4a588b73a1337e3464309289a16e1e854b5605aa3d6d530d256587a46b5a5224be43586031eb8208265bc35c55bd2c9156a6c597282777a73ad41be1333bb7d49f31bc1d15d1abcb408ee1592a2612229358b196f7accc08f083b2337be1d797fb56724cc4f8338938cbbc3c57d5d4a9469233d5db1df94ae5ded0e77aaaf2ec2fde888c1a23f", 0xcc) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RCREATE(r1, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x40, 0x3, 0x4}, 0x7}}, 0x18) syz_extract_tcp_res$synack(&(0x7f0000000580), 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffd}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r0) r2 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0xd00, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) read$ptp(r2, &(0x7f0000000800)=""/201, 0xc9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2, {0xee00}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c001}, 0x8c0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x3) 10:21:55 executing program 5: setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) setsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000100)="b1b6ca161d8a946e45dfd0a115b2de023f3d6cef3783265f22b0ae58bf031eeed1d4d2e5ab0707404b9ab9c57ba09dabaa843b4a8ae379c8cbe3d4849a72313e8b072089912711fcd435b7053038ff1d31d7a8677e61bffd867183e50cbdbbc5b9d80f005a878d66e55fdd8ed3f448c8ed7ac96a67fba1ea31421fe93ad50808baedb328e3209f44316fb2a1a825036716fae62f4934994e3628b16bd548f30795d40c27e7948a30db89a67d8389012b70d54fb14131eb88dea6e7b68c8b8d3e0276f7e476ec4127ad771d65", 0xcc) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x1, 0x8b, 0x6, @multicast}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x5ad}}, './file0\x00'}) write$9p(r3, &(0x7f0000000280)="57c02f6ee49444e40ab7e68c694d32fdac7402a523ac76b21cb08b39ec10fae3133691baf0daea8e91efd0a12f23be78b1f465b024bfed07d2bd9c1490ccb9886d4be627740e5e2bb27fd18bb7e80e7eeaae85207e022634ee52e5ec98e058", 0x5f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', r7, 0x2f, 0x7f, 0x1, 0x80000001, 0x2, @empty, @private2, 0x20, 0x7800, 0x10000, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r7, 0x8, 0x8000, 0xfb2, 0x2, {{0xe, 0x4, 0x3, 0x36, 0x38, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @multicast2, {[@lsrr={0x83, 0xb, 0x35, [@dev={0xac, 0x14, 0x14, 0x3d}, @multicast1]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xe4, 0x3, 0x5, [{@loopback, 0x8001}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x2}]}]}}}}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r2) write$P9_RFLUSH(r2, &(0x7f0000000640)={0x7, 0x6d, 0x2}, 0x7) 10:21:55 executing program 2: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3b5b, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x75}, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}]}, 0x24}}, 0x8000) write$P9_RREADDIR(r0, &(0x7f0000000300)={0xa6, 0x29, 0x2, {0x6, [{{0x10, 0x1, 0x6}, 0x800, 0x7f, 0x7, './file0'}, {{0x4, 0x4, 0x6}, 0x7fffffff, 0x7, 0x7, './file0'}, {{0x80, 0x4, 0x1}, 0x9, 0x2, 0x7, './file0'}, {{0x0, 0x0, 0x2}, 0x0, 0x80, 0x7, './file0'}, {{0x10, 0x3, 0x3}, 0xd02c, 0x7, 0x7, './file0'}]}}, 0xa6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000003c0)={0x7ff, [0x200], 0x200}, 0x10) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000400)={'macvtap0\x00'}) write$P9_RREADDIR(r1, &(0x7f0000000440)={0xe4, 0x29, 0x2, {0x6, [{{0x50, 0x4, 0x8}, 0x9, 0x5, 0x7, './file0'}, {{0x1, 0x3, 0x8}, 0x3, 0x40, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0xffffffff80000001, 0xb6, 0x7, './file0'}, {{0x82, 0x0, 0x1}, 0x1ff, 0x3, 0x7, './file0'}, {{0x40, 0x3, 0x4}, 0x2, 0x7, 0x7, './file0'}, {{0x4, 0x1, 0x8}, 0x1, 0x1f, 0x7, './file0'}, {{0x4, 0x2, 0x5}, 0x80, 0x6, 0x7, './file0'}]}}, 0xe4) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000540)=0xc5a, 0x4) move_mount(r1, &(0x7f0000000580)='./file1\x00', r0, &(0x7f00000005c0)='./file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file2\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000640)=""/4096, &(0x7f0000001640)=0x1000) syz_genetlink_get_family_id$tipc2(&(0x7f0000001680), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001740)={'gretap0\x00', &(0x7f00000016c0)={'gre0\x00', 0x0, 0x10, 0x20, 0x4, 0x9, {{0xe, 0x4, 0x1, 0x29, 0x38, 0x67, 0x0, 0x25, 0x4, 0x0, @multicast2, @private=0xffe00, {[@timestamp_addr={0x44, 0x14, 0xb5, 0x1, 0x3, [{@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}]}]}}}}}) connect$packet(r4, &(0x7f0000001780)={0x11, 0x0, r5, 0x1, 0x9, 0x6, @local}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r0, {0x98}}, './file1\x00'}) setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000001800)=0x4, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) 10:21:55 executing program 1: setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x700, 0x20, 0x26f, 0x1, {{0xe, 0x4, 0x3, 0x7, 0x38, 0x7fff, 0x0, 0xcc, 0x2f, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x5e, 0x1, 0x3, [{@local, 0x10001}]}, @ssrr={0x89, 0x17, 0xbe, [@multicast2, @multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40801) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000280)) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xf5ab005c91040bf7}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x11, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40008000}, 0x4000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ff}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x16a62bfb}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6b48}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000051) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) r6 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r7 = syz_open_dev$vcsu(&(0x7f0000000980), 0x9, 0x101000) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r7) 10:21:55 executing program 3: getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000), &(0x7f0000000040)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x5, &(0x7f00000000c0)=0x4) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000140)=""/210, &(0x7f0000000240)=0xd2) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0x7, 0x9]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x80000000, 0x2, 0x8]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x17c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x49bb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x671df717}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x52}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffa1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee77}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x400, @remote, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x67}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = syz_open_dev$vcsu(&(0x7f0000000640), 0x30, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc801}, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f00000007c0)={0x9, 0x80000001, 0xffffffff, 0xfffffffd}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000005}, 0x8000) sendmsg$BATADV_CMD_TP_METER(r1, 0xfffffffffffffffd, 0x24000004) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8840) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8400000c}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, r5, 0x11e, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffff7f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x14000080) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000bc0)=0x60, 0x2) 10:21:55 executing program 6: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000004}, 0x80000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x70b}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5b, 0x5, 0x6]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x44051) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffae}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x38}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008080}, 0xd9f28021723638d3) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4606}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6548}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x48c0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x3, 0x8000, {{0x1a, 0x4, 0x0, 0x5, 0x68, 0x67, 0x0, 0x5, 0x0, 0x0, @multicast1, @rand_addr=0x64010102, {[@noop, @cipso={0x86, 0x25, 0x13a57b624540ce3d, [{0x7, 0xe, "895cee695206e6126c6133cc"}, {0x0, 0xd, "da71a58f6d390b409cb768"}, {0x7, 0x4, "76f4"}]}, @noop, @timestamp={0x44, 0x2c, 0x74, 0x0, 0xa, [0x751, 0x1ff, 0x5cde, 0x8, 0x6, 0x8, 0x8, 0x4, 0x5, 0x1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'ip_vti0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0x7978, 0x2, {{0x21, 0x4, 0x0, 0x5, 0x84, 0x67, 0x0, 0xd6, 0x2f, 0x0, @empty, @broadcast, {[@end, @timestamp_prespec={0x44, 0x14, 0x88, 0x3, 0x5, [{@remote, 0x9}, {@empty, 0x1}]}, @ssrr={0x89, 0x7, 0x1f, [@multicast2]}, @lsrr={0x83, 0xf, 0x52, [@dev={0xac, 0x14, 0x14, 0xe}, @remote, @broadcast]}, @ssrr={0x89, 0x2b, 0x4, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @loopback, @multicast2, @empty, @broadcast, @multicast2]}, @noop, @generic={0x82, 0x12, "971eb7d9f29463dc4623c3840f12fa67"}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff291}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x2004c011}, 0x8005) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, 0x0, 0x710, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x53}}}}, [@crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x1e, 0x115, "07e79102a87679cfa9e2d329be607102829b5e33a21d3d43d75a"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd39}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10:21:56 executing program 2: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3b5b, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x75}, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}]}, 0x24}}, 0x8000) write$P9_RREADDIR(r0, &(0x7f0000000300)={0xa6, 0x29, 0x2, {0x6, [{{0x10, 0x1, 0x6}, 0x800, 0x7f, 0x7, './file0'}, {{0x4, 0x4, 0x6}, 0x7fffffff, 0x7, 0x7, './file0'}, {{0x80, 0x4, 0x1}, 0x9, 0x2, 0x7, './file0'}, {{0x0, 0x0, 0x2}, 0x0, 0x80, 0x7, './file0'}, {{0x10, 0x3, 0x3}, 0xd02c, 0x7, 0x7, './file0'}]}}, 0xa6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000003c0)={0x7ff, [0x200], 0x200}, 0x10) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000400)={'macvtap0\x00'}) write$P9_RREADDIR(r1, &(0x7f0000000440)={0xe4, 0x29, 0x2, {0x6, [{{0x50, 0x4, 0x8}, 0x9, 0x5, 0x7, './file0'}, {{0x1, 0x3, 0x8}, 0x3, 0x40, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0xffffffff80000001, 0xb6, 0x7, './file0'}, {{0x82, 0x0, 0x1}, 0x1ff, 0x3, 0x7, './file0'}, {{0x40, 0x3, 0x4}, 0x2, 0x7, 0x7, './file0'}, {{0x4, 0x1, 0x8}, 0x1, 0x1f, 0x7, './file0'}, {{0x4, 0x2, 0x5}, 0x80, 0x6, 0x7, './file0'}]}}, 0xe4) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000540)=0xc5a, 0x4) move_mount(r1, &(0x7f0000000580)='./file1\x00', r0, &(0x7f00000005c0)='./file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file2\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000640)=""/4096, &(0x7f0000001640)=0x1000) syz_genetlink_get_family_id$tipc2(&(0x7f0000001680), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001740)={'gretap0\x00', &(0x7f00000016c0)={'gre0\x00', 0x0, 0x10, 0x20, 0x4, 0x9, {{0xe, 0x4, 0x1, 0x29, 0x38, 0x67, 0x0, 0x25, 0x4, 0x0, @multicast2, @private=0xffe00, {[@timestamp_addr={0x44, 0x14, 0xb5, 0x1, 0x3, [{@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}]}]}}}}}) connect$packet(r4, &(0x7f0000001780)={0x11, 0x0, r5, 0x1, 0x9, 0x6, @local}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r0, {0x98}}, './file1\x00'}) setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000001800)=0x4, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) [ 187.811518] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.812820] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.813792] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.815093] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.817542] Call Trace: [ 187.817979] [ 187.818409] __schedule+0x893/0x2470 [ 187.819072] ? io_schedule_timeout+0x150/0x150 [ 187.819899] ? do_raw_spin_lock+0x121/0x260 [ 187.820705] ? rwlock_bug.part.0+0x90/0x90 [ 187.821493] schedule+0xda/0x1b0 [ 187.822097] rescuer_thread+0x851/0xdb0 [ 187.822830] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.823726] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.824657] ? lockdep_hardirqs_on+0x79/0x100 [ 187.825439] ? worker_thread+0x1260/0x1260 [ 187.826090] kthread+0x2ed/0x3a0 [ 187.826649] ? kthread_complete_and_exit+0x40/0x40 [ 187.827441] ret_from_fork+0x22/0x30 [ 187.828059] [ 187.828466] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.829481] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.830318] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.831495] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.832786] Call Trace: [ 187.833196] [ 187.833582] __schedule+0x893/0x2470 [ 187.834149] ? io_schedule_timeout+0x150/0x150 [ 187.834840] ? do_raw_spin_lock+0x121/0x260 [ 187.835509] ? rwlock_bug.part.0+0x90/0x90 [ 187.836141] schedule+0xda/0x1b0 [ 187.836701] rescuer_thread+0x851/0xdb0 [ 187.837324] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.838052] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.838814] ? lockdep_hardirqs_on+0x79/0x100 [ 187.839523] ? worker_thread+0x1260/0x1260 [ 187.840153] kthread+0x2ed/0x3a0 [ 187.840698] ? kthread_complete_and_exit+0x40/0x40 [ 187.841454] ret_from_fork+0x22/0x30 [ 187.842020] [ 187.842394] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.843368] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.844145] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.845291] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.846526] Call Trace: [ 187.846908] [ 187.847278] __schedule+0x893/0x2470 [ 187.847855] ? io_schedule_timeout+0x150/0x150 [ 187.848580] ? do_raw_spin_lock+0x121/0x260 [ 187.849259] ? rwlock_bug.part.0+0x90/0x90 [ 187.849906] schedule+0xda/0x1b0 [ 187.850457] rescuer_thread+0x851/0xdb0 [ 187.851063] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.851837] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.852636] ? lockdep_hardirqs_on+0x79/0x100 [ 187.853361] ? worker_thread+0x1260/0x1260 [ 187.854008] kthread+0x2ed/0x3a0 [ 187.854551] ? kthread_complete_and_exit+0x40/0x40 [ 187.855323] ret_from_fork+0x22/0x30 [ 187.855926] [ 187.856310] INFO: task netns:6 blocked for more than 143 seconds. [ 187.857207] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.858015] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.859157] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.860401] Call Trace: [ 187.860788] [ 187.861136] __schedule+0x893/0x2470 [ 187.861750] ? io_schedule_timeout+0x150/0x150 [ 187.862469] ? do_raw_spin_lock+0x121/0x260 [ 187.863125] ? rwlock_bug.part.0+0x90/0x90 [ 187.863799] schedule+0xda/0x1b0 [ 187.864376] rescuer_thread+0x851/0xdb0 [ 187.864988] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.865769] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.866550] ? lockdep_hardirqs_on+0x79/0x100 [ 187.867258] ? worker_thread+0x1260/0x1260 [ 187.867902] kthread+0x2ed/0x3a0 [ 187.868466] ? kthread_complete_and_exit+0x40/0x40 [ 187.869203] ret_from_fork+0x22/0x30 [ 187.869826] [ 187.870185] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.871173] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.871981] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.873172] task:kworker/0:0H state:I stack:29048 pid:8 ppid:2 flags:0x00004000 [ 187.874445] Workqueue: 0x0 (kblockd) [ 187.875025] Call Trace: [ 187.875446] [ 187.875792] __schedule+0x893/0x2470 [ 187.876429] ? io_schedule_timeout+0x150/0x150 [ 187.877136] schedule+0xda/0x1b0 [ 187.877691] worker_thread+0x15f/0x1260 [ 187.878346] ? process_one_work+0x16a0/0x16a0 [ 187.879035] kthread+0x2ed/0x3a0 [ 187.879601] ? kthread_complete_and_exit+0x40/0x40 [ 187.880374] ret_from_fork+0x22/0x30 [ 187.880968] [ 187.881350] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.882364] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.883138] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.884278] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.885549] Call Trace: [ 187.885935] [ 187.886311] __schedule+0x893/0x2470 [ 187.886891] ? io_schedule_timeout+0x150/0x150 [ 187.887606] ? do_raw_spin_lock+0x121/0x260 [ 187.888313] ? rwlock_bug.part.0+0x90/0x90 [ 187.889013] schedule+0xda/0x1b0 [ 187.889591] rescuer_thread+0x851/0xdb0 [ 187.890257] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.891048] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.891876] ? lockdep_hardirqs_on+0x79/0x100 [ 187.892619] ? worker_thread+0x1260/0x1260 [ 187.893330] kthread+0x2ed/0x3a0 [ 187.893865] ? kthread_complete_and_exit+0x40/0x40 [ 187.894664] ret_from_fork+0x22/0x30 [ 187.895315] [ 187.895677] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.896800] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.897651] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.898853] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.900171] Call Trace: [ 187.900616] [ 187.900980] __schedule+0x893/0x2470 [ 187.901620] ? io_schedule_timeout+0x150/0x150 [ 187.902387] ? mark_held_locks+0x9e/0xe0 [ 187.903031] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.903856] schedule+0xda/0x1b0 [ 187.904440] rcu_tasks_one_gp+0x3db/0xc10 [ 187.905130] rcu_tasks_kthread+0x80/0xa0 [ 187.905797] ? rcu_tasks_postscan+0x10/0x10 [ 187.906495] kthread+0x2ed/0x3a0 [ 187.907035] ? kthread_complete_and_exit+0x40/0x40 [ 187.907844] ret_from_fork+0x22/0x30 [ 187.908498] [ 187.908870] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.909936] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.910776] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.911987] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 187.913324] Workqueue: 0x0 (events_highpri) [ 187.914024] Call Trace: [ 187.914457] [ 187.914824] __schedule+0x893/0x2470 [ 187.915512] ? io_schedule_timeout+0x150/0x150 [ 187.916278] schedule+0xda/0x1b0 [ 187.916832] worker_thread+0x15f/0x1260 [ 187.917518] ? process_one_work+0x16a0/0x16a0 [ 187.918269] kthread+0x2ed/0x3a0 [ 187.918819] ? kthread_complete_and_exit+0x40/0x40 [ 187.919616] ret_from_fork+0x22/0x30 [ 187.920266] [ 187.925613] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 187.926782] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.927638] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.928848] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 187.930176] Call Trace: [ 187.930613] [ 187.930976] __schedule+0x893/0x2470 [ 187.931610] ? io_schedule_timeout+0x150/0x150 [ 187.932375] ? do_raw_spin_lock+0x121/0x260 [ 187.933075] ? rwlock_bug.part.0+0x90/0x90 [ 187.933782] schedule+0xda/0x1b0 [ 187.934354] rescuer_thread+0x851/0xdb0 [ 187.934997] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.935819] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.936649] ? lockdep_hardirqs_on+0x79/0x100 [ 187.937385] ? worker_thread+0x1260/0x1260 [ 187.938068] kthread+0x2ed/0x3a0 [ 187.938643] ? kthread_complete_and_exit+0x40/0x40 [ 187.939448] ret_from_fork+0x22/0x30 [ 187.940072] [ 187.940484] INFO: task kblockd:31 blocked for more than 143 seconds. [ 187.941495] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.942348] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.943558] task:kblockd state:I stack:30176 pid:31 ppid:2 flags:0x00004000 [ 187.944899] Call Trace: [ 187.945335] [ 187.945708] __schedule+0x893/0x2470 [ 187.946352] ? io_schedule_timeout+0x150/0x150 [ 187.947071] ? do_raw_spin_lock+0x121/0x260 [ 187.947785] ? rwlock_bug.part.0+0x90/0x90 [ 187.948495] schedule+0xda/0x1b0 [ 187.949041] rescuer_thread+0x851/0xdb0 [ 187.949695] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.950519] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.951326] ? lockdep_hardirqs_on+0x79/0x100 [ 187.952040] ? worker_thread+0x1260/0x1260 [ 187.952763] kthread+0x2ed/0x3a0 [ 187.953323] ? kthread_complete_and_exit+0x40/0x40 [ 187.954104] ret_from_fork+0x22/0x30 [ 187.954745] [ 187.955183] [ 187.955183] Showing all locks held in the system: [ 187.956131] 1 lock held by rcu_tasks_kthre/11: [ 187.956823] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 187.958257] 1 lock held by khungtaskd/25: [ 187.958844] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 187.960195] 1 lock held by systemd-journal/112: [ 187.960907] 1 lock held by in:imklog/190: [ 187.961533] 2 locks held by syz-executor/6800: [ 187.962211] [ 187.962524] ============================================= [ 187.962524] [ 191.907503] Bluetooth: hci7: command 0x0406 tx timeout [ 191.907528] Bluetooth: hci5: command 0x0406 tx timeout VM DIAGNOSIS: 10:21:58 Registers: info registers vcpu 0 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f988 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000033 R11=0000000000000001 R12=0000000000000033 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9ad156a344 CR3=0000000008bce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4146d46000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=1ffff11006c57a9d RBX=ffff8880362bd040 RCX=ffffffff817bd057 RDX=1ffff11006c57a08 RSI=0000000000000008 RDI=ffff8880362bd040 RBP=dffffc0000000000 RSP=ffff888024c27a88 R8 =0000000000000000 R9 =ffff8880362bd047 R10=ffffed1006c57a08 R11=0000000000000001 R12=ffff8880788ceff9 R13=ffff8880362bd040 R14=0000000000000000 R15=0000000000000086 RIP=ffffffff81787e94 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555d03400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd84520080 CR3=000000002dd8e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775 YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000