Warning: Permanently added '[localhost]:55940' (ECDSA) to the list of known hosts. 2025/01/24 23:33:20 fuzzer started 2025/01/24 23:33:20 dialing manager at localhost:40883 syzkaller login: [ 69.278476] cgroup: Unknown subsys name 'net' [ 69.348523] cgroup: Unknown subsys name 'cpuset' [ 69.373423] cgroup: Unknown subsys name 'rlimit' [ 74.838484] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/24 23:33:38 syscalls: 201 2025/01/24 23:33:38 code coverage: enabled 2025/01/24 23:33:38 comparison tracing: enabled 2025/01/24 23:33:38 extra coverage: enabled 2025/01/24 23:33:38 setuid sandbox: enabled 2025/01/24 23:33:38 namespace sandbox: enabled 2025/01/24 23:33:38 Android sandbox: enabled 2025/01/24 23:33:38 fault injection: enabled 2025/01/24 23:33:38 leak checking: enabled 2025/01/24 23:33:38 net packet injection: enabled 2025/01/24 23:33:38 net device setup: enabled 2025/01/24 23:33:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/24 23:33:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/24 23:33:38 USB emulation: enabled 2025/01/24 23:33:38 hci packet injection: enabled 2025/01/24 23:33:38 wifi device emulation: enabled 2025/01/24 23:33:38 802.15.4 emulation: enabled 2025/01/24 23:33:38 fetching corpus: 0, signal 0/0 (executing program) 2025/01/24 23:33:40 starting 8 fuzzer processes 23:33:40 executing program 0: ioctl$sock_ifreq(0xffffffffffffffff, 0x894a, &(0x7f0000000040)={'rose0\x00', @ifru_data=&(0x7f0000000000)="944f247cf5115624aea2771f3cb5be4e1e33a0f6978a5b85dca599ebb3f00cd1"}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000640)={0x0, @can={0x1d, r1}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}, @hci={0x1f, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)='veth0_to_hsr\x00', 0xffffffffffffffff, 0x2, 0x57bb}) r2 = pidfd_getfd(r0, r0, 0x0) bind$802154_raw(r2, &(0x7f0000001cc0)={0x24, @none={0x0, 0x3}}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_void(r3, 0x1, 0x63281d92559fe205, 0x0, 0x0) r4 = epoll_create(0x1f1) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000001d00)={0x40000006}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x3, @bearer=@l2={'ib', 0x3a, 'ipvlan1\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040040}, 0x80) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000002080)={&(0x7f0000001e40), 0xc, &(0x7f0000002040)={&(0x7f0000001e80)={0x1b4, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1a0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x16, 0x3, "ef6bc8657913e13767a52ae1bdd0853a93f2"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ID={0xf2, 0x3, "6dfa156031522aa13c0b0cfb43ea50a16dea77cfc6af26c397aa3dd85747c939f0f53abd53d2e3a7c8075bbd549730e12136ad0d084eee1e6d0755809212da6f7fc64820913db9a4c3991956f9ffb0726b709c6372831bde1ae4690372953b19d00e9c6485b2e30fbf48862695376a659e458df5555b07f731aa6f082b48a62b72255249384a96bfa5d2ff27c92bbaf1d4d91c2d694db34ad4abcf5149b2a829d57245c2e735603833891a2d04cbf38d9550d9b5cb4019f4b29f4159e8ce4ae5669c11cf5f64cb4e20aa8c7d7544b3dc79ac9ee9c91ee0ab67f55267151a053a538771ca69ec8b5cbe4e9147b254"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "07669cf74cc94fe6af99a0df6cb852a6811443a7558e74bd2e7dbcc37603"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "57bb6c92c4a3da4f3b5c6dd324291001bcba26a4"}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x90}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000020c0)={'batadv_slave_0\x00'}) socketpair(0x21, 0x6, 0x7fffffff, &(0x7f0000003440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000003540)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x2c, 0xa, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7d}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000003680)={&(0x7f0000003580), 0xc, &(0x7f0000003640)={&(0x7f00000035c0)={0x50, 0xa, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xe4}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x20}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x8040) recvmsg(r5, &(0x7f0000004b00)={&(0x7f00000036c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003740)=""/34, 0x22}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/247, 0xf7}, {&(0x7f0000004880)=""/158, 0x9e}, {&(0x7f0000004940)=""/27, 0x1b}, {&(0x7f0000004980)=""/93, 0x5d}], 0x6, &(0x7f0000004a80)=""/111, 0x6f}, 0x2022) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004b40)={'wlan0\x00'}) 23:33:40 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=0x80, &(0x7f0000000040)=@hci, 0x0, 0x800, 0x1}, 0x1) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x400001, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) process_mrelease(r2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000180)={'vlan0\x00'}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1b8, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c0000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x764b501c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "688667b1c8683639e8aceeea8f519503d841e594f1c5366e62"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x69bd0ab0}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbbd6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3fc0000}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "56ce6978d31dbd48eca2b1ceeb8ca74e3ad602cd4c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc8, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd855}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x144}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5b1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x73b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2e}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000880}, 0x40084) openat$cgroup_devices(r1, &(0x7f0000000640)='devices.deny\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x6) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xa, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4a}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400d840}, 0x0) write$nbd(r1, &(0x7f0000000780)={0x67446698, 0x1, 0x3, 0x3, 0x3, "6109e09c49f3a3f89d741ef15a006384b6917366"}, 0x24) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000800)={0x590, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa5, 0x3, "3776ace6c6ca1a434538d42aa1e787fb60dd1a496dda5c5322bab4ab1ce8c319dcff04101288dffe50a734dbb7abd2b8c3fb3fb27b37b919cd7aff4c5c23a09cd4483c1005f5993ae72b11a6d0cc15067f2faad259b2d2a1a416706ee55864a4ef3a582942879739752d999a464937486b71f2680851d00af153a1fe1b95b24b1c478a77808e2d3b88dfd8bedd791cf5d6a768f0303a59826073966ba382488fa2"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "7cfff44b7875b61a859bb24677aa254f64304a0598bee27b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x22}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x168, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7fff, @empty, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xac}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3c6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80, @mcast2, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @remote, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffffffff, @empty, 0x6}}}}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x92, 0x3, "fac2788ac1006e9d7b7ab893e0268ce1d08d4d987639e9e14a6753df630f14f81c665bf6421f3c0fd288cee194a9211b92a794c5a64f111e1b1ffa9f07ab02c440c1f736956e0aedc5fc93d3f453729234cc78e4a407bc982e3b0f87b138cad0afdce74d259dcc0aeb20e7f57b22be4c4a71674adcc70272e86aa12943ce712ea029da9fe4b166e02a4f8bc99014"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x120, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xce5e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb41}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f28}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff0000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2cde}]}]}, 0x590}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000e40), 0x400c0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000f80)='udp:syz0\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x40, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x243f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048001}, 0x10) r5 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r5) 23:33:41 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c4, r0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6e9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb02d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x347}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x883}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d12e2fa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x1000}, 0x8010) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x2001, 0x0) r4 = syz_io_uring_complete(0x0) r5 = syz_io_uring_complete(0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x48}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) socketpair(0x26, 0x2, 0x10001, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r6, &(0x7f00000005c0)=@ax25={{0x3, @bcast}, [@rose, @null, @null, @remote, @netrom, @netrom, @netrom, @netrom]}, &(0x7f0000000640)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x3, 0xffffffff, 0x0, 0x7, 0x3, 0x1}, 0x3) r8 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x4000, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000700)) r9 = syz_io_uring_complete(0x0) ioctl$EVIOCGID(r9, 0x80084502, &(0x7f0000000740)=""/193) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000bc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2c8, r0, 0x2, 0x7, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd6a1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffc0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcdc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x748}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ID={0x86, 0x3, "2688ea29bbf7b04e2d07e2529a538851c1c5a32c90ccb4e6d08f4c20e8280577640def83e18e4e4672d8fa288c5b460473f4d5dee85729599019e062df7b5f709e9fd20911263abcf7d399f6024f50bdfd05207504a2d35218aa7ac227e963e4d3d1cfd5f02e1499fb83782f98fcca7c9631cdb83f06ad53d6cd6995bf9a9d92bd6e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xae, 0x3, "189eeeeb5846f5f9c8f089416f62cfee057e51eee38947295f058edeffceecf8f8fa72fd06bfb9e11c57f5ace7c48cc12f7f938abb218070f3478f7c6edfd566a80a7da3418f69301aef15e9195f0b1260efbd478ca25a7424f40f5b0be0039555d6c09afa5ae90ba9a322e0531206bc1356448236fc3c5fcd57cd74f4e0367d2142fc11b733727b06c43cec55bc5646dbb8fbde58267311dfc8ee02fd6f74ccfe25f22055b57f9c87e1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x40880}, 0x48880) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000c00)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000c40)={0x0, 'vlan1\x00', {0x2}, 0x8}) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x78, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xec7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x280000000000000}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040804) 23:33:41 executing program 3: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x110, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) io_uring_setup(0x770, &(0x7f0000000000)={0x0, 0x6a30, 0x4, 0x2, 0x182, 0x0, r1}) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000080)=""/146) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x10000000) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000140)={0x4, 0x2}) pkey_free(0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0xf9, 0x313400) r3 = pidfd_getfd(r1, r2, 0x0) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000280)=0x8) r5 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x6, 0x2, 0x3, 0x2, 0x0, 0x7fff, 0x10000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000002c0), 0x8}, 0x4002, 0xfff, 0xffff, 0x4, 0x8, 0x4dc, 0x101, 0x0, 0xfff, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r1, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x1ff) waitid$P_PIDFD(0x3, r1, &(0x7f0000000380), 0x40000000, 0x0) bind$802154_dgram(r3, &(0x7f0000000400)={0x24, @none={0x0, 0xffff}}, 0x14) openat$cgroup_devices(r3, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) pidfd_send_signal(r1, 0x7, &(0x7f0000000480)={0x28, 0x4, 0x5}, 0x0) [ 89.523342] audit: type=1400 audit(1737761621.062:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:33:41 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8c2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) ioctl$sock_ifreq(r0, 0x8934, &(0x7f0000000040)={'geneve0\x00', @ifru_addrs=@ethernet={0x0, @dev}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x2b8, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa04}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f77}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8d3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5597}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe64}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x407a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x66d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xee}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x47}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4000000}, 0xc1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xefa8, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40005) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20008890}, 0x20000089) ioctl$sock_ifreq(0xffffffffffffffff, 0x891d, &(0x7f0000000740)={'ipvlan1\x00', @ifru_ivalue}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44010}, 0x4048000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000071}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r4, &(0x7f0000000980)=@can, &(0x7f0000000a00)=0x80) getsockname(r4, &(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xcc, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1400000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0xcc}}, 0x0) r6 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x190, 0x0, 0x8, 0x2, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffdcf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x83}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x90000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xc054}, 0x40000) 23:33:41 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf7d2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x121042, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000180)) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f00000001c0)) pidfd_send_signal(0xffffffffffffffff, 0x34, &(0x7f0000000200)={0x1b, 0xffff000, 0x8}, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000280)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f00000002c0)=""/240) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000003c0)={'veth1\x00'}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000400)={0x2, 0x3ff}) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xfffffffffffffffe) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x539100, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000480), &(0x7f0000000500)=0x68) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000540), 0x4) 23:33:41 executing program 6: setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @short={0x2, 0x0, 0x1}}, 0x14) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000000c0)) listen(0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair(0x1, 0x803, 0x8, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000200)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000280)) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x1f) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x3, 0x3, 0x9, 0xfffffffd}]}) r5 = epoll_create(0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000340)={0x0, 0x0, r5, 0xce}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000380)) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x10c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x646}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf503b13}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfd4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6f60d8ae}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfe5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x793}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8c2}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x4100) sendmsg$802154_dgram(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000006c0)={&(0x7f0000000600)="e65afcfba185046fe879c47d720cd13470e5f53f0b630668d51a71568fee3d6df6024734e08dc6b26ca3b8b7a4cdf96a7b13bf82a1a5a8c90a181dfbd809f5b914fbf9699bee1c391c97a2aa1dc8f8f26621e8f1a551d1a024da7c14107f057c1e2fea086a7521d64994eb17187ea304072ec4ae0fec3a7a41a442971d799b2f6089c300a7049b7d", 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000740), &(0x7f0000000780)=0x4) 23:33:41 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x814244, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000100)={0x5d4, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffff2f5c, @dev={0xfe, 0x80, '\x00', 0x6}, 0xffffff00}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x520b, @remote, 0x86ee}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x80000001}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x575}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x140, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6251a056}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf31f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xce1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc57}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_NODE={0x1c8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xbc, 0x3, "27b745d62aed99ab42b14cb84f6507f7926de07ed537d54e4978dbc7d2fc195970d24af5b56bf853c90095a545e2f21e14b64543e0c0ba3744dd48049ea8698cb714ef86b82c9c813b08811d2ddf2df2ba7a44e3cf21f7f8c0f7e5c2518a04ceac8a782d0dfa7c42189ffe7b7c0aac9058711c5426a64bc60a09d52c35d90f1da4e96c75c996f8dd1e6a643b8b144ffe3c766ea77733d25e4d5fa96dbee91c01c76d4bbf0b9967fbe9180de867363b256f0eb3d75d9fc302"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "92f7a9d85b2b2c7506f5c65aeac31311fc89f767cfb30f91617a0cc0a14100e5143e18c2"}}, @TIPC_NLA_NODE_ID={0x24, 0x3, "83d8e3c9abdba8402f0095c9d7baaed8ffc67bc042992cde54733d5b161d266b"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "a6460051746167d35387f226d3c3f5ddfef9ee1c36"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "2d01ed8252d6b14943479bccf5538b170cfd89cf4c"}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x54, 0x3, "1a1b22681db9226f7c99eb7e6499477b98e6a0be4862498c0ebdf8b16f47a66735e2044e0e18beaa3d1b1e08798df0779b3ee8296847d82a83ba2bfef559987fcc19b2b34540efe4794fc2ebeb577981"}, @TIPC_NLA_NODE_ID={0x42, 0x3, "68aa48d5e181937a93bac66556a2b691517b0515d5e373eecef88521a88516792bad6d17b8bc3e3ad45627fe0b0fc694291ec951c8026327316d8524ec6b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xeaf9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ID={0xbe, 0x3, "906aa56e5645b66e9f807fa9c24b888bf051256b4416345020fa4495cb544571394063e1dde2f7732cafed6fee9754f4ad986142fa963412fd8dd7cede07b77c591654a0a2ddd8d87f4e620bd3f0e6485d91f25485c9a3e41cb70e639b158e915031c1455a01b2ddc3e9c3e70ab219c5d1e838287442e970eb866b3bf7eb9cf79662ec49aee8705c36ceebbad1ddf83044a42c035315c2e4b9b02fc24b9b75d2c0de4012fdc448951c8e7fc91878c8ecbe4ef65c108c98e5cfbb"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffeffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x5d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000007c0)=""/4096, &(0x7f00000017c0)=0x1000) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000001800)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x68}}, 0x8051) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001980), &(0x7f00000019c0)=0xc) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001ac0), 0x40000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001c40), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x4e90737c18b9e837}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x70, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004000) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001d80), 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x84, r5, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x84}, 0x1, 0x0, 0x0, 0x200000d4}, 0x240081c5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x2c, r7, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xc9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x89}, 0x8050) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x30, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x4008040) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000022c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002280)={&(0x7f00000021c0)={0x90, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x42}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) [ 91.009510] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.013116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.015456] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.025911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.029882] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.035761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.063510] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.069986] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.072868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.079372] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.085829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.087922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.132191] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.145740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.159623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.191969] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.197420] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.200808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.202466] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.205802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.207640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.209128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.216975] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.218541] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.218720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.221793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.227638] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.229590] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.231247] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.259336] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.273809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.277811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.284709] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.287736] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.289759] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.291392] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.320721] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.322760] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.326680] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.328855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.337779] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.342123] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.348415] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.350971] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.352892] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.395159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.399927] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.428948] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.094532] Bluetooth: hci0: command tx timeout [ 93.156881] Bluetooth: hci1: command tx timeout [ 93.285391] Bluetooth: hci2: command tx timeout [ 93.286213] Bluetooth: hci3: command tx timeout [ 93.348411] Bluetooth: hci6: command tx timeout [ 93.412441] Bluetooth: hci7: command tx timeout [ 93.413247] Bluetooth: hci4: command tx timeout [ 93.476346] Bluetooth: hci5: command tx timeout [ 95.141484] Bluetooth: hci0: command tx timeout [ 95.205342] Bluetooth: hci1: command tx timeout [ 95.334427] Bluetooth: hci2: command tx timeout [ 95.334915] Bluetooth: hci3: command tx timeout [ 95.396595] Bluetooth: hci6: command tx timeout [ 95.460407] Bluetooth: hci4: command tx timeout [ 95.460882] Bluetooth: hci7: command tx timeout [ 95.525537] Bluetooth: hci5: command tx timeout [ 97.190567] Bluetooth: hci0: command tx timeout [ 97.253468] Bluetooth: hci1: command tx timeout [ 97.381506] Bluetooth: hci3: command tx timeout [ 97.382063] Bluetooth: hci2: command tx timeout [ 97.445356] Bluetooth: hci6: command tx timeout [ 97.509365] Bluetooth: hci7: command tx timeout [ 97.509855] Bluetooth: hci4: command tx timeout [ 97.574314] Bluetooth: hci5: command tx timeout [ 99.237350] Bluetooth: hci0: command tx timeout [ 99.301332] Bluetooth: hci1: command tx timeout [ 99.428368] Bluetooth: hci2: command tx timeout [ 99.428850] Bluetooth: hci3: command tx timeout [ 99.493352] Bluetooth: hci6: command tx timeout [ 99.558315] Bluetooth: hci4: command tx timeout [ 99.558774] Bluetooth: hci7: command tx timeout [ 99.620536] Bluetooth: hci5: command tx timeout [ 150.914900] syz-executor.1 (280) used greatest stack depth: 23896 bytes left [ 153.205691] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.208619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.210631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.216040] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.237930] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.244567] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.471497] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.480803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.503079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.506671] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.508468] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.512734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.519437] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.523535] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.524896] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.526491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.531902] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.535187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.536957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.540398] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.543470] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.551775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.554617] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.556429] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.680331] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.692128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.694739] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.698961] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.709003] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.719148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.732609] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.733054] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.737495] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.739134] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.747611] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.752579] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.972633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.988590] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.066392] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.102505] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.138639] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.153543] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.306936] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.335112] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.340768] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.399084] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.400423] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.401854] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.300597] Bluetooth: hci0: command tx timeout [ 155.557116] Bluetooth: hci2: command tx timeout [ 155.620349] Bluetooth: hci3: command tx timeout [ 155.684347] Bluetooth: hci1: command tx timeout [ 155.813467] Bluetooth: hci5: command tx timeout [ 155.876338] Bluetooth: hci4: command tx timeout [ 156.261365] Bluetooth: hci6: command tx timeout [ 156.518131] Bluetooth: hci7: command tx timeout [ 157.349332] Bluetooth: hci0: command tx timeout [ 157.605315] Bluetooth: hci2: command tx timeout [ 157.670184] Bluetooth: hci3: command tx timeout [ 157.733346] Bluetooth: hci1: command tx timeout [ 157.860359] Bluetooth: hci5: command tx timeout [ 157.925342] Bluetooth: hci4: command tx timeout [ 158.309832] Bluetooth: hci6: command tx timeout [ 158.566296] Bluetooth: hci7: command tx timeout [ 159.396954] Bluetooth: hci0: command tx timeout [ 159.652619] Bluetooth: hci2: command tx timeout [ 159.717874] Bluetooth: hci3: command tx timeout [ 159.780387] Bluetooth: hci1: command tx timeout [ 159.909810] Bluetooth: hci5: command tx timeout [ 159.972375] Bluetooth: hci4: command tx timeout [ 160.357163] Bluetooth: hci6: command tx timeout [ 160.612930] Bluetooth: hci7: command tx timeout [ 161.444335] Bluetooth: hci0: command tx timeout [ 161.701815] Bluetooth: hci2: command tx timeout [ 161.764431] Bluetooth: hci3: command tx timeout [ 161.829314] Bluetooth: hci1: command tx timeout [ 161.957410] Bluetooth: hci5: command tx timeout [ 162.020510] Bluetooth: hci4: command tx timeout [ 162.405394] Bluetooth: hci6: command tx timeout [ 162.661398] Bluetooth: hci7: command tx timeout [ 215.552637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.558700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.561143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.565458] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.568933] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.571667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.728741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.740487] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.743129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.744864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.748665] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.753486] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.753557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.760888] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.763016] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.775461] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.792403] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.796436] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.886807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.892863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.896218] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.912192] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.932635] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.951893] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.042852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.050826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.063913] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.143617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.150042] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.157516] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.164540] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.165709] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.172619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.177090] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.196592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.196741] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.201353] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.202964] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.206444] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.210739] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.231019] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.244098] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.287612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.294595] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.295932] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.297706] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.310956] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.338620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.636349] Bluetooth: hci0: command tx timeout [ 217.829543] Bluetooth: hci1: command tx timeout [ 217.892465] Bluetooth: hci2: command tx timeout [ 218.021351] Bluetooth: hci3: command tx timeout [ 218.276468] Bluetooth: hci4: command tx timeout [ 218.276496] Bluetooth: hci5: command tx timeout [ 218.405408] Bluetooth: hci7: command tx timeout [ 218.405462] Bluetooth: hci6: command tx timeout [ 219.684372] Bluetooth: hci0: command tx timeout [ 219.876555] Bluetooth: hci1: command tx timeout [ 219.940342] Bluetooth: hci2: command tx timeout [ 220.070325] Bluetooth: hci3: command tx timeout [ 220.324712] Bluetooth: hci4: command tx timeout [ 220.324736] Bluetooth: hci5: command tx timeout [ 220.452480] Bluetooth: hci6: command tx timeout [ 220.453479] Bluetooth: hci7: command tx timeout [ 221.733110] Bluetooth: hci0: command tx timeout [ 221.925366] Bluetooth: hci1: command tx timeout [ 221.990300] Bluetooth: hci2: command tx timeout [ 222.116427] Bluetooth: hci3: command tx timeout [ 222.372302] Bluetooth: hci5: command tx timeout [ 222.372589] Bluetooth: hci4: command tx timeout [ 222.500779] Bluetooth: hci6: command tx timeout [ 222.500834] Bluetooth: hci7: command tx timeout [ 223.780303] Bluetooth: hci0: command tx timeout [ 223.972421] Bluetooth: hci1: command tx timeout [ 224.036410] Bluetooth: hci2: command tx timeout [ 224.164401] Bluetooth: hci3: command tx timeout [ 224.420321] Bluetooth: hci5: command tx timeout [ 224.421303] Bluetooth: hci4: command tx timeout [ 224.548302] Bluetooth: hci7: command tx timeout [ 224.549487] Bluetooth: hci6: command tx timeout [ 278.001780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.007846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.020793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.027657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.031913] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.034547] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.323607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.329694] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.332719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.338952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.340356] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.344181] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.354728] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.363027] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.370594] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.370627] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.375707] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.379470] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.447007] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.449479] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.460661] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.460997] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.464920] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.470291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.476327] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.481573] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.483928] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.483932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.490427] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.494447] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.571192] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.575520] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.578319] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.586525] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.593625] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.607077] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.617947] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.624930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.650010] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.677695] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.685525] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.695622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.707510] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.713587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.741618] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.761549] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.781552] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.786720] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.101069] Bluetooth: hci0: command tx timeout [ 280.420537] Bluetooth: hci1: command tx timeout [ 280.484395] Bluetooth: hci2: command tx timeout [ 280.548451] Bluetooth: hci3: command tx timeout [ 280.612725] Bluetooth: hci4: command tx timeout [ 280.741441] Bluetooth: hci5: command tx timeout [ 280.868567] Bluetooth: hci6: command tx timeout [ 280.932452] Bluetooth: hci7: command tx timeout [ 282.149347] Bluetooth: hci0: command tx timeout [ 282.468330] Bluetooth: hci1: command tx timeout [ 282.534337] Bluetooth: hci2: command tx timeout [ 282.598320] Bluetooth: hci3: command tx timeout [ 282.660385] Bluetooth: hci4: command tx timeout [ 282.789302] Bluetooth: hci5: command tx timeout [ 282.916309] Bluetooth: hci6: command tx timeout [ 282.981647] Bluetooth: hci7: command tx timeout [ 284.197308] Bluetooth: hci0: command tx timeout [ 284.517346] Bluetooth: hci1: command tx timeout [ 284.581321] Bluetooth: hci2: command tx timeout [ 284.645627] Bluetooth: hci3: command tx timeout [ 284.709281] Bluetooth: hci4: command tx timeout [ 284.836295] Bluetooth: hci5: command tx timeout [ 284.964302] Bluetooth: hci6: command tx timeout [ 285.028430] Bluetooth: hci7: command tx timeout [ 286.247395] Bluetooth: hci0: command tx timeout [ 286.564320] Bluetooth: hci1: command tx timeout [ 286.646851] Bluetooth: hci2: command tx timeout [ 286.692709] Bluetooth: hci3: command tx timeout [ 286.756586] Bluetooth: hci4: command tx timeout [ 286.884638] Bluetooth: hci5: command tx timeout [ 287.012395] Bluetooth: hci6: command tx timeout [ 287.077884] Bluetooth: hci7: command tx timeout [ 340.535555] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.542718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.545791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.551783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.555129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.559524] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.908699] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.914047] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.916497] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.923800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.928429] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.932729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.045539] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.051330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.054488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.069795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.074683] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.076391] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.080325] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.082343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.085704] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.096499] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.129740] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.133822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.171503] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.200768] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.202469] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.227795] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.258444] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.260417] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.262576] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.295729] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.309418] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.311737] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.319369] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.349985] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.351431] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.352141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.357138] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.357417] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.358867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.368706] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.380425] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.387616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.392467] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.397655] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.399864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.428612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 342.628326] Bluetooth: hci0: command tx timeout [ 343.012489] Bluetooth: hci1: command tx timeout [ 343.140963] Bluetooth: hci3: command tx timeout [ 343.204386] Bluetooth: hci2: command tx timeout [ 343.460422] Bluetooth: hci5: command tx timeout [ 343.460484] Bluetooth: hci6: command tx timeout [ 343.588402] Bluetooth: hci7: command tx timeout [ 343.588436] Bluetooth: hci4: command tx timeout [ 344.676411] Bluetooth: hci0: command tx timeout [ 345.061487] Bluetooth: hci1: command tx timeout [ 345.189286] Bluetooth: hci3: command tx timeout [ 345.252281] Bluetooth: hci2: command tx timeout [ 345.509303] Bluetooth: hci5: command tx timeout [ 345.509341] Bluetooth: hci6: command tx timeout [ 345.637267] Bluetooth: hci4: command tx timeout [ 345.637295] Bluetooth: hci7: command tx timeout [ 346.724405] Bluetooth: hci0: command tx timeout [ 347.108511] Bluetooth: hci1: command tx timeout [ 347.237264] Bluetooth: hci3: command tx timeout [ 347.300504] Bluetooth: hci2: command tx timeout [ 347.556305] Bluetooth: hci5: command tx timeout [ 347.556340] Bluetooth: hci6: command tx timeout [ 347.684727] Bluetooth: hci7: command tx timeout [ 347.684756] Bluetooth: hci4: command tx timeout [ 348.772871] Bluetooth: hci0: command tx timeout [ 349.156315] Bluetooth: hci1: command tx timeout [ 349.284319] Bluetooth: hci3: command tx timeout [ 349.348319] Bluetooth: hci2: command tx timeout [ 349.604340] Bluetooth: hci5: command tx timeout [ 349.605389] Bluetooth: hci6: command tx timeout [ 349.732437] Bluetooth: hci7: command tx timeout [ 349.732512] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 23:38:48 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=00000000000000d2 RCX=ffffffff814f3e3e RDX=fffffbfff0fe15e8 RSI=0000000000000008 RDI=ffffffff87f0af38 RBP=ffff888035b1a6b0 RSP=ffff88806ce09b08 R8 =0000000000000000 R9 =fffffbfff0fe15e7 R10=ffffffff87f0af3f R11=0000000000000001 R12=ffff888035b19bc0 R13=0000000000000000 R14=ffffffff86405170 R15=0000000000000000 RIP=ffffffff84ab2f40 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fba1a1d16f4 CR3=00000000355b0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fba1a1e047000007fba1a1dff20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88801268bbe0 RBX=ffff888012690e48 RCX=ffff88801961fb00 RDX=ffff888011b77510 RSI=ffff88801961fa00 RDI=0000000000000000 RBP=ffff88801660da68 RSP=ffff888035ba7500 R8 =0000000000000000 R9 =ffffed1006b74e91 R10=0000000000000003 R11=0000000000000001 R12=ffff88801961fa00 R13=0000000000000100 R14=0000000000000001 R15=0000000000000282 RIP=ffffffff81aef661 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffe7055fe0 CR3=0000000035f02000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000