syzkaller login: [ 62.011825] sshd (240) used greatest stack depth: 23792 bytes left Warning: Permanently added '[localhost]:21871' (ECDSA) to the list of known hosts. 2024/10/26 04:09:50 fuzzer started 2024/10/26 04:09:51 dialing manager at localhost:45639 [ 64.026325] cgroup: Unknown subsys name 'net' [ 64.154606] cgroup: Unknown subsys name 'cpuset' [ 64.194239] cgroup: Unknown subsys name 'rlimit' 2024/10/26 04:10:08 syscalls: 220 2024/10/26 04:10:08 code coverage: enabled 2024/10/26 04:10:08 comparison tracing: enabled 2024/10/26 04:10:08 extra coverage: enabled 2024/10/26 04:10:08 setuid sandbox: enabled 2024/10/26 04:10:08 namespace sandbox: enabled 2024/10/26 04:10:08 Android sandbox: enabled 2024/10/26 04:10:08 fault injection: enabled 2024/10/26 04:10:08 leak checking: enabled 2024/10/26 04:10:08 net packet injection: enabled 2024/10/26 04:10:08 net device setup: enabled 2024/10/26 04:10:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/26 04:10:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/26 04:10:08 USB emulation: enabled 2024/10/26 04:10:08 hci packet injection: enabled 2024/10/26 04:10:08 wifi device emulation: enabled 2024/10/26 04:10:08 802.15.4 emulation: enabled 2024/10/26 04:10:08 fetching corpus: 0, signal 0/0 (executing program) 2024/10/26 04:10:09 starting 8 fuzzer processes 04:10:09 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDADDIO(r0, 0x4b34, 0x81) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x7, 0x20, 0x5a4b, 0xfff}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000000c0)) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x100c1, 0x0) ioctl$CDROMRESET(r2, 0x5312) ioctl$CDROMREADALL(r2, 0x5318, &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000c00)={0x32c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb106}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff40}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbf}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xea, 0x3, "b83b0f1ac8d3ce0f307626ad8e6a5f41c4c367fff45305bec24487b37e2bef2f393375f38746bf74e86b9c6b38a8fe273902f7486214adb4d94699924bf4c222856982e776c5222368c048e26bc9af70f571f2df299d4de786998125817914679d4286a398061e1165c02d13dd6fb3c7e1f1700470f4ff5d83236a3160138b71efe07aba5dc1477d7f52748747fcc3178100497062059581594cdd74ac6eabfc2dfa3f8ba0c93a640e28cc328e99a19a7cf2b1afdb6c223ccf76d0d0ce63eb386451d7f2de96a429ba3bfa16186dba9bc950650b3f5cea7b10f9e09b7dda590d08540bb83be6"}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x14}, 0x10) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) ioctl$CDROM_LOCKDOOR(r2, 0x5329, 0x1) r3 = syz_open_pts(r0, 0x4000) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x457d) ioctl$KDADDIO(r4, 0x4b34, 0x1) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000fc0), 0x4002, 0x0) ioctl$CDROM_LOCKDOOR(r5, 0x5329, 0x0) ioctl$CDROMSUBCHNL(r5, 0x530b, &(0x7f0000001000)={0x2, 0x1f, 0x3, 0x1, 0x0, 0x40, @msf={0x4, 0x1, 0x7}, @msf={0x8e, 0x2, 0x1}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), 0xffffffffffffffff) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f0000001080)) 04:10:09 executing program 1: accept4(0xffffffffffffffff, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000080)=0x80, 0x80800) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = accept(r0, 0x0, &(0x7f00000000c0)) r2 = accept(r1, &(0x7f0000000140)=@qipcrtr, &(0x7f00000001c0)=0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) r3 = socket(0x23, 0x5, 0x462) accept4(r3, &(0x7f0000000200)=@can, &(0x7f0000000280)=0x80, 0xf113f33b930f82d6) accept(r1, &(0x7f00000002c0)=@pppol2tpv3in6, &(0x7f0000000340)=0x80) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000380)) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x40480, 0x0) ioctl$CDROM_SELECT_DISK(r4, 0x5322, 0x99f5) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000400)=@target={'target ', {'PCI:', 'f', ':', '13', ':', '10', '.', '1a'}}, 0x16) sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000440)) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f0000000480)={0xd8, 0x93, 0x6, 0x1}) accept(r0, 0x0, &(0x7f00000004c0)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x101080, 0x0) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xd2, 0x9, 0x9}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), r1) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001000)={'vcan0\x00'}) 04:10:09 executing program 2: ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000000)={0x6, 0xf, 0x3, 0xc4b9529e46bb2180, @lba=0x80000001, 0x8}) ioctl$CDROMVOLREAD(0xffffffffffffffff, 0x5313, &(0x7f0000000040)) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x16, 0xd, 0x56, &(0x7f0000000080)}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x109000, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000500)={0x1, 0x1, 0x4}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x25) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000540)) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000980)={0x1, 0x80, 0x12, 0x1d, 0x1a3, &(0x7f0000000580)}) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000009c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a00), 0x4040, 0x0) ioctl$CDROMMULTISESSION(r2, 0x5310, &(0x7f0000000a40)={@lba=0x7, 0x1, 0x2}) pipe2$9p(&(0x7f0000000b00)={0xffffffffffffffff}, 0x80000) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = getuid() mount$9p_fd(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x10, &(0x7f0000000b40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@fscache}, {@posixacl}, {@access_uid={'access', 0x3d, r5}}, {@noextend}, {@cache_loose}], [{@appraise_type}]}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$CDROM_LOCKDOOR(r2, 0x5329, 0x0) syz_open_pts(r1, 0x12001) 04:10:09 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000100)=0x28) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000140)="80648cfbbdb013132f751818aa0f760436bbdff01d95340f449e3d4bbbcf16bf9e55a2ca7551640eed99f5c3f1689a48a154131231a3897a67f0315ec2e860dfd4313c4c3448e586ed9229c363443badf55c9753fe7a9a923ca27a8d26340fc1a0f5641e5c920222d9233db14711fc3fefdea97bab4638494c484b50b123f13d56f90f9f9e62a5141b1bb0f81a70ee", 0x8f, 0x5, 0x0, 0x2}, &(0x7f0000000240)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000006c0)={0x1, 0x1, 0x17, 0x7, 0x3a, &(0x7f00000002c0)}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000700)={0x40, 0x0, 0x4}) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000740)) msgget$private(0x0, 0x24d) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000780)) ioctl$CDROMCLOSETRAY(0xffffffffffffffff, 0x5319) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000007c0)=0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000800)=0xd) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000000840)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000012c0), 0x1e1800, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000001300)={0x5f7d, 0xfff7, 0x9}) [ 82.111397] audit: type=1400 audit(1729915810.011:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:10:10 executing program 4: prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_ENDIAN(0x14, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8) r0 = getpgid(0xffffffffffffffff) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x2) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/132}, 0x8c, 0x0, 0x3000) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$poke(0x4, r1, &(0x7f0000000180), 0x5) mlockall(0x5) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000001c0)) r2 = getpid() getpgid(r2) wait4(r1, &(0x7f0000000200), 0x60000002, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000240)) personality(0x5000004) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) migrate_pages(r3, 0x4, &(0x7f00000002c0)=0x7, &(0x7f0000000300)=0x5340) sched_rr_get_interval(0x0, &(0x7f0000000380)) 04:10:10 executing program 5: ioctl$CDROMSUBCHNL(0xffffffffffffffff, 0x530b, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x2, 0x6, 0x81, @lba, @lba=0x3}) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$CDROMVOLREAD(r0, 0x5313, &(0x7f0000000080)) ioctl$CDROM_SELECT_DISK(r0, 0x5322, 0x5) ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x535a) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x208000, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0xb, 0x2, 0x10001, &(0x7f0000000100)}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) ioctl$CDROMVOLCTRL(r2, 0x530a, &(0x7f0000000580)={0x4, 0x4, 0x5, 0x2}) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f00000005c0)) r3 = syz_open_pts(r2, 0x4080) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0) ioctl$CDROMEJECT_SW(r4, 0x530f, 0x1) accept4(r3, &(0x7f0000000640)=@in, &(0x7f00000006c0)=0x80, 0x80000) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000740)={0x2, &(0x7f0000000700)=[{0x1, 0x1}, {0xff, 0x9}]}) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000780)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) 04:10:10 executing program 6: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000085}, 0x80) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xffffffc0, @remote, 0x10001}}, {0x20, 0x2, @in6={0xa, 0x990, 0x8, @mcast2, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff21}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}]}]}, 0xcc}}, 0x20000000) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000600)) r3 = socket(0x1, 0x80000, 0xffffffff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf4, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000040) syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r3) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000880)={0x728, 0xff65, 0xd, 0x0, 0x2, "8f668d43f1b5a036"}) r5 = syz_open_pts(0xffffffffffffffff, 0x129000) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f00000008c0)) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xe4, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7cc}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4dc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcb}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20040084}, 0x800) r6 = socket(0x11, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4040005) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000bc0)) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000c80)={0x34c, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "091e42ed59ba774ca2d197b970ace3681c678555d22d7893feb6"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x379}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x129f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffeffff}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6d}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3821da5a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd66}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff800}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x379}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x86}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa2, 0x3, "38451724bbf32866d239940db73a11e14f5587ae485065303f8791e239f8438b49158594c0b8beb2360e42acfe1971167dc45b63f85bc583d232f7af8e9853c873ab04314c8982c4dd2d9e17f151a0a6ccd0254b262941b1880c5e17781641a46ebda1829feba462a8abc76f9c4ee87f4d8e77eab253818841f133996fb59d9883d35d91a5826571a553409692d4580d58b4dd4d19718ac5b3ff08b010ec"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 04:10:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5a1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1f0, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffc0}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1db}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4c6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18}]}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0xd0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5057}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff80}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x11060000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = accept4(r0, 0x0, &(0x7f0000000540), 0x40000) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x88d0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x104, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x49c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdd9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0xf6fbfdbebf789d23}, 0x20002841) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f00000008c0)={0x7, 0x7, 0x2}, &(0x7f0000000900)=0x28) r4 = accept4(r0, &(0x7f0000000980)=@nfc, &(0x7f0000000a00)=0x80, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a40)={0x0, @ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @isdn={0x22, 0x20, 0x5, 0x5, 0x4}, @in={0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x6, 0x5, 0x5}) syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000b00)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r4) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x1b8, r8, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "968d01935f1c033e85f21a3e9641ec075df61b8e36170023b5f3b52650e13730794a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x74, 0x3, "bf7c1480f860c8af0b96f311cb561f02be317589f9f14b5b5076f9b33971260853f33f033e604a264291ff938ade0dda3f3cbb22b098564c2b5cb660c68ac34aab9e2e36bb69c3fd72012c2bdaf476ed18be45e87389f372d4f30d6a6440e335450e9c5d2aa3b4158b65b58015a5e9ee"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "55dc440c5f77de80d87c54fb756977f8120bb843beec9f81b1aac6f03c047750e142"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "e161ee0804ee7697e66daa45f69f6bf73cc02d1d9524429e1a44"}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 83.575368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.577745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.579390] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.583830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.593739] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.595995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.600726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.604746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.610914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.612985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.614146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.620642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.622589] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.625551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.627192] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.634543] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.635702] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.636923] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.637375] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.656985] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.658221] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.659359] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.661628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.662651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.663416] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.666338] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.670184] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.676892] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.681254] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.682786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.685596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.686589] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.686638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.687287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.691606] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.692343] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.693812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.695043] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.696410] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.697344] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.697366] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.699260] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.702498] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.704954] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.705443] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.723786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.724947] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.726380] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.687984] Bluetooth: hci1: command tx timeout [ 85.687989] Bluetooth: hci2: command tx timeout [ 85.751614] Bluetooth: hci5: command tx timeout [ 85.752561] Bluetooth: hci7: command tx timeout [ 85.752626] Bluetooth: hci6: command tx timeout [ 85.753592] Bluetooth: hci4: command tx timeout [ 85.754130] Bluetooth: hci3: command tx timeout [ 85.754529] Bluetooth: hci0: command tx timeout [ 87.736575] Bluetooth: hci1: command tx timeout [ 87.738189] Bluetooth: hci2: command tx timeout [ 87.800556] Bluetooth: hci0: command tx timeout [ 87.802243] Bluetooth: hci7: command tx timeout [ 87.803376] Bluetooth: hci3: command tx timeout [ 87.804513] Bluetooth: hci4: command tx timeout [ 87.805630] Bluetooth: hci6: command tx timeout [ 87.805667] Bluetooth: hci5: command tx timeout [ 89.784563] Bluetooth: hci1: command tx timeout [ 89.785118] Bluetooth: hci2: command tx timeout [ 89.847695] Bluetooth: hci7: command tx timeout [ 89.848237] Bluetooth: hci6: command tx timeout [ 89.848917] Bluetooth: hci4: command tx timeout [ 89.849401] Bluetooth: hci5: command tx timeout [ 89.850579] Bluetooth: hci3: command tx timeout [ 89.850614] Bluetooth: hci0: command tx timeout [ 91.831727] Bluetooth: hci2: command tx timeout [ 91.832273] Bluetooth: hci1: command tx timeout [ 91.895609] Bluetooth: hci3: command tx timeout [ 91.896151] Bluetooth: hci0: command tx timeout [ 91.896967] Bluetooth: hci6: command tx timeout [ 91.897064] Bluetooth: hci5: command tx timeout [ 91.897415] Bluetooth: hci4: command tx timeout [ 91.897847] Bluetooth: hci7: command tx timeout [ 146.124204] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.125842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.127045] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.129640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.132891] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.133973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.188632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.197714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.201171] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.207982] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.213118] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.222909] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.255397] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.264193] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.269195] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.307414] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.310797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.313186] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.315769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.322545] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.326730] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.332869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.353269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.362730] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.368023] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.369213] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.370228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.371376] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.376844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.378739] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.381637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.383756] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.386745] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.387359] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.390183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.395024] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.404832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.419624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.423921] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.427862] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.428818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.433070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.437213] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.440898] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.442256] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.452695] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.463275] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.467839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.151585] Bluetooth: hci0: command tx timeout [ 148.279561] Bluetooth: hci1: command tx timeout [ 148.344539] Bluetooth: hci2: command tx timeout [ 148.471551] Bluetooth: hci4: command tx timeout [ 148.535649] Bluetooth: hci5: command tx timeout [ 148.536316] Bluetooth: hci7: command tx timeout [ 148.599635] Bluetooth: hci6: command tx timeout [ 148.600302] Bluetooth: hci3: command tx timeout [ 150.200751] Bluetooth: hci0: command tx timeout [ 150.327658] Bluetooth: hci1: command tx timeout [ 150.391636] Bluetooth: hci2: command tx timeout [ 150.520567] Bluetooth: hci4: command tx timeout [ 150.585587] Bluetooth: hci7: command tx timeout [ 150.586091] Bluetooth: hci5: command tx timeout [ 150.647564] Bluetooth: hci6: command tx timeout [ 150.648058] Bluetooth: hci3: command tx timeout [ 152.247846] Bluetooth: hci0: command tx timeout [ 152.376682] Bluetooth: hci1: command tx timeout [ 152.439550] Bluetooth: hci2: command tx timeout [ 152.568235] Bluetooth: hci4: command tx timeout [ 152.631581] Bluetooth: hci5: command tx timeout [ 152.632087] Bluetooth: hci7: command tx timeout [ 152.695730] Bluetooth: hci3: command tx timeout [ 152.696231] Bluetooth: hci6: command tx timeout [ 154.301602] Bluetooth: hci0: command tx timeout [ 154.424531] Bluetooth: hci1: command tx timeout [ 154.488594] Bluetooth: hci2: command tx timeout [ 154.617543] Bluetooth: hci4: command tx timeout [ 154.679594] Bluetooth: hci5: command tx timeout [ 154.680081] Bluetooth: hci7: command tx timeout [ 154.743962] Bluetooth: hci3: command tx timeout [ 154.744607] Bluetooth: hci6: command tx timeout [ 208.322658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.324203] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.325232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.327905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.329391] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.330586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.450389] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.451925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.452998] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.459758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.461570] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.462937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.514656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.528854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.530022] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.541240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.544890] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.548652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.685955] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.689736] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.692085] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.698233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.712151] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.716622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.718658] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.722786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.725241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.726769] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.730077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.730689] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.735813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.737079] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.739777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.741194] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.742282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.750829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.766563] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.776715] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 208.785047] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.785829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 208.793864] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.801790] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.838678] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.869137] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.870929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.883005] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 208.907673] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 208.923940] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.360577] Bluetooth: hci0: command tx timeout [ 210.551547] Bluetooth: hci1: command tx timeout [ 210.616520] Bluetooth: hci2: command tx timeout [ 210.808580] Bluetooth: hci5: command tx timeout [ 210.809620] Bluetooth: hci3: command tx timeout [ 210.871704] Bluetooth: hci6: command tx timeout [ 210.935579] Bluetooth: hci4: command tx timeout [ 211.063866] Bluetooth: hci7: command tx timeout [ 212.408557] Bluetooth: hci0: command tx timeout [ 212.600112] Bluetooth: hci1: command tx timeout [ 212.663587] Bluetooth: hci2: command tx timeout [ 212.856539] Bluetooth: hci3: command tx timeout [ 212.857080] Bluetooth: hci5: command tx timeout [ 212.920740] Bluetooth: hci6: command tx timeout [ 212.983723] Bluetooth: hci4: command tx timeout [ 213.111492] Bluetooth: hci7: command tx timeout [ 214.456548] Bluetooth: hci0: command tx timeout [ 214.648513] Bluetooth: hci1: command tx timeout [ 214.711690] Bluetooth: hci2: command tx timeout [ 214.904491] Bluetooth: hci5: command tx timeout [ 214.904977] Bluetooth: hci3: command tx timeout [ 214.967657] Bluetooth: hci6: command tx timeout [ 215.031494] Bluetooth: hci4: command tx timeout [ 215.159617] Bluetooth: hci7: command tx timeout [ 216.504694] Bluetooth: hci0: command tx timeout [ 216.697473] Bluetooth: hci1: command tx timeout [ 216.759621] Bluetooth: hci2: command tx timeout [ 216.953023] Bluetooth: hci3: command tx timeout [ 216.953548] Bluetooth: hci5: command tx timeout [ 217.015513] Bluetooth: hci6: command tx timeout [ 217.080564] Bluetooth: hci4: command tx timeout [ 217.208470] Bluetooth: hci7: command tx timeout [ 270.729298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.730827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.735708] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.748121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.760243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.765705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.846671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.848050] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.849189] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.851599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.853159] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.854159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.935901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.944680] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.947730] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.972622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.977883] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.979683] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.986376] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.988793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.996949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.999119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.004834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.006575] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.012073] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.013786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.017136] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.039121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.044068] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.063227] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.068664] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.071127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.073093] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.075797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.087852] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.096780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.099837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.127957] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.143735] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.155701] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.164599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.175526] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.183518] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 271.212803] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.216490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.219667] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.224313] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.226875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.824548] Bluetooth: hci0: command tx timeout [ 272.887556] Bluetooth: hci1: command tx timeout [ 273.015512] Bluetooth: hci2: command tx timeout [ 273.079493] Bluetooth: hci3: command tx timeout [ 273.207562] Bluetooth: hci5: command tx timeout [ 273.207578] Bluetooth: hci4: command tx timeout [ 273.272141] Bluetooth: hci7: command tx timeout [ 273.337139] Bluetooth: hci6: command tx timeout [ 274.871587] Bluetooth: hci0: command tx timeout [ 274.936474] Bluetooth: hci1: command tx timeout [ 275.065538] Bluetooth: hci2: command tx timeout [ 275.127816] Bluetooth: hci3: command tx timeout [ 275.255692] Bluetooth: hci5: command tx timeout [ 275.256679] Bluetooth: hci4: command tx timeout [ 275.321484] Bluetooth: hci7: command tx timeout [ 275.383674] Bluetooth: hci6: command tx timeout [ 276.921573] Bluetooth: hci0: command tx timeout [ 276.983503] Bluetooth: hci1: command tx timeout [ 277.111680] Bluetooth: hci2: command tx timeout [ 277.175644] Bluetooth: hci3: command tx timeout [ 277.303708] Bluetooth: hci4: command tx timeout [ 277.304293] Bluetooth: hci5: command tx timeout [ 277.367948] Bluetooth: hci7: command tx timeout [ 277.431488] Bluetooth: hci6: command tx timeout [ 278.968575] Bluetooth: hci0: command tx timeout [ 279.031578] Bluetooth: hci1: command tx timeout [ 279.159726] Bluetooth: hci2: command tx timeout [ 279.224563] Bluetooth: hci3: command tx timeout [ 279.351652] Bluetooth: hci5: command tx timeout [ 279.351986] Bluetooth: hci4: command tx timeout [ 279.415713] Bluetooth: hci7: command tx timeout [ 279.479495] Bluetooth: hci6: command tx timeout [ 332.940277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.968144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.980226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.998854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.003252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.005962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.322603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.329710] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.332962] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.334122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.337980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.339346] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.341379] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.343095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.344255] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.346875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.348928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.349629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.356778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 333.368992] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.370862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.380519] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.386715] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.392596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.395529] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.398733] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.401729] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.404030] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.414639] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.416890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.419165] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.420850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.422616] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.424830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.435827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.439198] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.445382] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.446246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.463099] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.467937] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 333.471809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.473048] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 333.479912] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.481523] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.487732] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.489135] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.490805] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 333.492870] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.041988] Bluetooth: hci0: command tx timeout [ 335.415675] Bluetooth: hci2: command tx timeout [ 335.480527] Bluetooth: hci3: command tx timeout [ 335.481353] Bluetooth: hci4: command tx timeout [ 335.482072] Bluetooth: hci1: command tx timeout [ 335.543514] Bluetooth: hci5: command tx timeout [ 335.544193] Bluetooth: hci7: command tx timeout [ 335.608037] Bluetooth: hci6: command tx timeout [ 337.080448] Bluetooth: hci0: command tx timeout [ 337.463603] Bluetooth: hci2: command tx timeout [ 337.527581] Bluetooth: hci1: command tx timeout [ 337.528099] Bluetooth: hci3: command tx timeout [ 337.528655] Bluetooth: hci4: command tx timeout [ 337.591584] Bluetooth: hci7: command tx timeout [ 337.592080] Bluetooth: hci5: command tx timeout [ 337.655588] Bluetooth: hci6: command tx timeout [ 339.127696] Bluetooth: hci0: command tx timeout [ 339.511743] Bluetooth: hci2: command tx timeout [ 339.575650] Bluetooth: hci3: command tx timeout [ 339.576143] Bluetooth: hci4: command tx timeout [ 339.576934] Bluetooth: hci1: command tx timeout [ 339.641471] Bluetooth: hci7: command tx timeout [ 339.641971] Bluetooth: hci5: command tx timeout [ 339.703495] Bluetooth: hci6: command tx timeout [ 341.175517] Bluetooth: hci0: command tx timeout [ 341.559514] Bluetooth: hci2: command tx timeout [ 341.623662] Bluetooth: hci3: command tx timeout [ 341.624187] Bluetooth: hci1: command tx timeout [ 341.625499] Bluetooth: hci4: command tx timeout [ 341.687605] Bluetooth: hci5: command tx timeout [ 341.688120] Bluetooth: hci7: command tx timeout [ 341.751504] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 04:15:20 Registers: info registers vcpu 0 RAX=1ffff11005bf3f22 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000092cc0 RSI=000000000000000e RDI=ffff88802df9f910 RBP=dffffc0000000000 RSP=ffff88802df9f888 R8 =0000000000000001 R9 =ffff8880232a8a38 R10=ffffffff863f274f R11=00000000000c3270 R12=000000000000000e R13=ffff88802df9f910 R14=00000000000000e8 R15=0000000000092cc0 RIP=ffffffff813e911a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4f522bf288 CR3=0000000028daa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88802d7dfad8 RCX=ffffffff847a5f15 RDX=ffff888023360000 RSI=0000000000000003 RDI=0000000000000005 RBP=dffffc0000000000 RSP=ffff88802d7df920 R8 =0000000000000001 R9 =ffff88802d7dfe30 R10=0000000000000000 R11=0000000000000001 R12=ffff88800d1210e0 R13=0000000000000000 R14=ffff88802d7dfb15 R15=0000000000000002 RIP=ffffffff81517c20 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe35b82fd0 CR3=000000000a848000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000