syzkaller login: [ 58.737462] sshd (228) used greatest stack depth: 22976 bytes left Warning: Permanently added '[localhost]:15247' (ECDSA) to the list of known hosts. 2025/01/25 16:49:19 fuzzer started 2025/01/25 16:49:19 dialing manager at localhost:40883 [ 61.796594] cgroup: Unknown subsys name 'net' [ 61.896387] cgroup: Unknown subsys name 'cpuset' [ 61.928370] cgroup: Unknown subsys name 'rlimit' [ 67.491700] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 16:49:37 syscalls: 213 2025/01/25 16:49:37 code coverage: enabled 2025/01/25 16:49:37 comparison tracing: enabled 2025/01/25 16:49:37 extra coverage: enabled 2025/01/25 16:49:37 setuid sandbox: enabled 2025/01/25 16:49:37 namespace sandbox: enabled 2025/01/25 16:49:37 Android sandbox: enabled 2025/01/25 16:49:37 fault injection: enabled 2025/01/25 16:49:37 leak checking: enabled 2025/01/25 16:49:37 net packet injection: enabled 2025/01/25 16:49:37 net device setup: enabled 2025/01/25 16:49:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 16:49:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 16:49:37 USB emulation: enabled 2025/01/25 16:49:37 hci packet injection: enabled 2025/01/25 16:49:37 wifi device emulation: enabled 2025/01/25 16:49:37 802.15.4 emulation: enabled 2025/01/25 16:49:37 fetching corpus: 0, signal 0/0 (executing program) 2025/01/25 16:49:39 starting 8 fuzzer processes 16:49:39 executing program 0: ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000000)={0xeb5, 0xff, 0x9, 0xfffffffc}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3b96) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x42a080, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40009, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@fscache}, {@cachetag={'cachetag', 0x3d, '!'}}, {@nodevmap}], [{@subj_type={'subj_type', 0x3d, '&,'}}, {@fsmagic={'fsmagic', 0x3d, 0xff}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@subj_user={'subj_user', 0x3d, ',#*:'}}, {@obj_user={'obj_user', 0x3d, '*]]'}}]}}) r1 = syz_open_dev$hiddev(&(0x7f0000000200), 0x8, 0xc0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000280)={0x617b, 0xd88, 0x5, 0x6, 0x7, 0xff, 0x40}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000002c0)={0x1, 0x8, 0xdee, 0xc4, 0x2, 0x7f, 0x4}, 0xc) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0xd46265b684536e62}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4c800) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000480)=0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x1) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f00000004c0)={0xffffffff, 0x8001, 0x8, 0x5}) timer_create(0x4, &(0x7f0000000500)={0x0, 0x1a, 0x1}, &(0x7f0000000540)=0x0) timer_settime(r7, 0x1, &(0x7f0000000580)={{0x77359400}}, &(0x7f00000005c0)) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x4c8c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {r3, r4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {r6, r4}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0xa08010, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}, {@mmap}, {@access_uid={'access', 0x3d, r9}}, {@posixacl}, {@privport}, {@mmap}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@access_user}, {@cache_fscache}], [{@smackfsdef={'smackfsdef', 0x3d, '*\'@'}}, {@fowner_gt={'fowner>', r3}}, {@appraise}, {@audit}, {@euid_gt={'euid>', r3}}, {@uid_gt={'uid>', r10}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'obj_user'}}]}}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 16:49:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000044}, 0x48840) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={0x0, @ax25={0x3, @null, 0x5}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xa7}, @hci={0x1f, 0x0, 0x2}, 0x13, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)='veth0_to_bridge\x00', 0x1000000000000000, 0x4, 0x401}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffba88}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044040}, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000480)={0x2, 0x1, 0x4, 0x32, 0x1, 0x5f, 0x3}, 0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000580)) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x4180, 0x0) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x120, 0x7, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6tnl0\x00', r2, 0x4, 0x7f, 0x8, 0x5, 0x10, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8, 0x8, 0xffff8000, 0x7fffffff}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6gre0\x00', r9, 0x4, 0x3f, 0x7, 0x67b1, 0x3, @mcast1, @local, 0x7800, 0x8, 0x8, 0x20}}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000880)={0x8000, 0x11, 0x4, 0x0, 0x81, 0x81, 0x2}, 0xc) write$P9_RMKDIR(r3, &(0x7f00000008c0)={0x14, 0x49, 0x2, {0x80, 0x2, 0x8}}, 0x14) 16:49:39 executing program 2: clock_settime(0x3, &(0x7f0000000000)={0x0, 0x3938700}) timer_delete(0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x10001, 0x8000, 0x800, 0x7, 0xc4, 0x8, 0x800, 0x1000}, &(0x7f0000000080)={0x2ba, 0x8314, 0x800, 0x7, 0x1, 0x3, 0xfffffffffffffffa, 0xcea}, &(0x7f00000000c0)={0x80, 0x1, 0x7fffffff, 0x0, 0x40, 0x0, 0x9, 0xc6}, &(0x7f0000000140)={r0, r1+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3a847ab3]}, 0x8}) semtimedop(0xffffffffffffffff, &(0x7f0000000200)=[{0x2, 0xffff}, {0x0, 0x7ff}, {0x0, 0xfff}], 0x3, &(0x7f0000000240)={0x77359400}) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000280)={0x3, 0x100, 0x3}) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000002c0)={{0x1, 0x1, 0xfffffeff, 0x9, 0xfffffff7, 0x8}, 0x1ca, [0x6, 0x0, 0xffff, 0x4, 0x7, 0x7, 0xff, 0x0, 0x5, 0x2, 0x6, 0x0, 0x6, 0x6, 0x1000, 0x619, 0x6, 0x1, 0x499, 0x8000, 0x5, 0xfffffffc, 0xa9ec, 0x5, 0x5, 0x0, 0x1, 0x7fff, 0x0, 0x1f, 0x0, 0x7f, 0x21a, 0x8, 0x8000, 0xc0000, 0x80000000, 0x93, 0x38000000, 0x5, 0x9, 0x8, 0x2, 0x7fff, 0x6d, 0xa99c, 0x2, 0x1, 0x1ff, 0x4, 0x3, 0x7fffffff, 0x2, 0x9, 0x4, 0x1f, 0x1, 0x7, 0x1, 0x4a5f, 0x5, 0x5, 0x1, 0x2, 0x8, 0x6, 0x7, 0x2e, 0x1, 0x2, 0xfffffff9, 0x1, 0x401, 0xffff8ee7, 0x83, 0x1f, 0xfffffffc, 0x0, 0xff, 0x7, 0x6, 0x80000001, 0x7ff, 0x3, 0x80000001, 0xffffffff, 0x200, 0x101, 0x3d0, 0x2, 0x2, 0x0, 0x0, 0x9, 0x9, 0x9, 0x2, 0x7, 0x8001, 0xffffffc0, 0x10001, 0xffff4793, 0x1, 0x1, 0x3f, 0x2, 0xa000, 0xffffffff, 0x73b, 0x7, 0x0, 0x671, 0x9, 0x80000001, 0x7, 0x80000001, 0x7, 0x2, 0x6, 0x8, 0x1, 0xffffffff, 0x6, 0x1, 0x49, 0x1000, 0xa75c, 0x2, 0x8, 0x3, 0x3, 0x5, 0x2, 0x5, 0x6, 0x40, 0x6, 0x8, 0x5, 0x3f, 0x9968a85, 0x7f, 0x2000, 0x0, 0x3ff, 0x8, 0x101, 0x7, 0xff, 0x101, 0x7ff, 0x5, 0xace5, 0x68, 0x4, 0x8000, 0x5, 0x7, 0x10001, 0x9, 0x4, 0x5, 0xe51db7e, 0x6, 0x3, 0x9421, 0x800, 0x6df, 0x6, 0x96, 0x9, 0x7, 0xa24e, 0x0, 0x3, 0x7f, 0xcd, 0x4, 0x7, 0x7fffffff, 0x2, 0x100, 0x80, 0xffffffff, 0x5, 0x8, 0x2, 0xf8d, 0x8, 0x66, 0x570, 0x2, 0x9, 0x8, 0x9, 0x1, 0x4, 0x80000001, 0x934c, 0x5, 0x8, 0x0, 0x0, 0xe8, 0x1, 0x7, 0x800, 0x6, 0x8, 0x2000, 0x10001, 0x20, 0x9, 0x1ff, 0x400, 0x32f, 0xfff, 0x0, 0x9, 0x6, 0x0, 0x8, 0x1, 0x2, 0x2, 0x9, 0x3, 0x10001, 0x0, 0x8, 0x7fff, 0x2, 0x4, 0x4, 0x1, 0x7, 0x5, 0xfda6, 0x1, 0x80, 0x520, 0x1, 0x400, 0x2, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0x80, 0x8, 0x7f, 0x3ff, 0x6, 0x5, 0x100, 0xffffffff, 0x1, 0x400, 0x8001, 0x1ff, 0x7, 0x81, 0xffffffff, 0x5c281328, 0x3, 0x8001, 0x3, 0xfffffffd, 0x2, 0x7, 0xf8e, 0x3, 0x7, 0x10001, 0x7, 0x7, 0x7, 0x6, 0x7, 0x33e, 0x9, 0xffff, 0x8, 0x1f, 0x81, 0xfff, 0xf7, 0x1000, 0x9, 0x80, 0x87, 0x5, 0x8, 0xffffffff, 0x401, 0x6847148e, 0xffff, 0x8, 0xab29, 0x85e, 0x3c, 0x200, 0x7fffffff, 0x6, 0x2, 0x7ff, 0x200, 0x8, 0x6, 0x3, 0x7, 0x8000, 0x400, 0x61, 0x7, 0x81, 0x0, 0x80000000, 0x7fffffff, 0x7, 0xfffff8e6, 0x1400000, 0xfff, 0x9, 0x340, 0x165, 0x3f, 0xa650, 0x7ff, 0x2, 0x7, 0x1000, 0x22a59a0, 0x1f, 0xae, 0x1, 0x0, 0x1, 0x4, 0x603, 0x1, 0x4, 0x200, 0x5, 0x5, 0x80000001, 0x75, 0x8, 0x80000000, 0xd2d5, 0x3ff, 0x81, 0x5, 0x800, 0xfffffffb, 0x10001, 0x1000, 0x3f, 0x2, 0x3, 0xa09, 0x3, 0x2b, 0x9c, 0x9, 0xffffff38, 0x80, 0xd6e1, 0x3, 0x7fff, 0x64, 0x1, 0xa15, 0x1, 0x38f, 0x8201, 0x8000, 0x7, 0xffffff00, 0x3, 0x5, 0x400, 0x7fffffff, 0x12d8, 0x4, 0x10001, 0x6, 0x4, 0x65, 0x2, 0xff, 0x3746edd9, 0xffffffff, 0xfff, 0xedc, 0x6, 0x8, 0x9, 0x8cc3, 0x4, 0x20, 0xfffffff9, 0x2, 0xfffffffb, 0x8001, 0x1, 0x2, 0x2, 0x3, 0xfffffffe, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, 0x1, 0x6, 0x7f, 0x7fff, 0x40, 0x3, 0x2, 0x8000, 0x3ff, 0x80, 0x810, 0x71, 0x6, 0x7, 0x1, 0x2f89, 0x8, 0x8, 0x3ff, 0x5, 0x7ff, 0x2, 0x4, 0xde, 0x10001, 0x99, 0x8, 0xfffffe00, 0x2, 0xffff, 0x7, 0x7, 0xffff, 0x200, 0x8, 0x3, 0x2, 0x200, 0x9, 0x20, 0x35b8, 0xfffff9ee, 0x5, 0x4, 0x81, 0x2, 0x7f, 0xf4, 0xffff, 0x3ff, 0x4, 0x4, 0xc45, 0x7, 0xffff7fff, 0x3, 0x6, 0x7, 0x1ff80000, 0x400, 0x4, 0x8001, 0x0, 0x7, 0xffffffff, 0x53b2, 0xebe, 0x4, 0x7, 0x1, 0x5, 0x7, 0x80000001, 0xa69, 0x459, 0x8000, 0x10001, 0x10001, 0xfffffffb, 0x9, 0x3f, 0x100, 0x0, 0x2, 0x3, 0x6, 0x8000, 0x2, 0x1, 0x9, 0x7, 0x9, 0x8, 0xffffff7e, 0x3cd, 0x1, 0x7f, 0xfff, 0x2, 0x1, 0x6, 0x7, 0xfb3, 0x3ff, 0x7fffffff, 0x9aaf, 0x6, 0x0, 0x1, 0x2800000, 0x4, 0xff, 0x7ff, 0xc, 0x7fff, 0x4, 0x1, 0x2, 0x1f, 0x854c, 0x2, 0x277, 0x80000000, 0x3, 0x6, 0x3ff, 0x2, 0x5, 0x6eb, 0x200, 0x4, 0x1, 0x7, 0x6, 0x5, 0x0, 0x9, 0x6, 0x3f, 0x9d5, 0x8, 0x9dce, 0x2, 0x4, 0x5, 0x4, 0x8, 0x4, 0x6, 0x400, 0x3, 0x40, 0x0, 0x1, 0x0, 0x0, 0x5, 0x9a0, 0x80, 0x94f9, 0xff, 0x0, 0x1, 0x4, 0x4, 0x8, 0x3, 0xf33b, 0x498, 0x1, 0x7fffffff, 0x4, 0x1, 0x2c, 0x7, 0x3, 0x200, 0x0, 0x8, 0x1, 0x2, 0x9, 0xce3, 0x3, 0x7, 0x3, 0x4, 0xfffffff8, 0x1f, 0x8, 0xffffff2b, 0x7f, 0x2, 0x9, 0x9, 0x4, 0x7, 0x1000, 0xc136, 0x4, 0x6, 0x5, 0x8000, 0xea6, 0x5, 0x158, 0xfff, 0xfffffffc, 0x7, 0x3e000000, 0x3, 0x1, 0x9, 0x20, 0x3, 0xe00000, 0x0, 0xffffff80, 0x5, 0x1, 0x5, 0x5, 0x0, 0x1, 0x723, 0x1, 0x7, 0x9, 0x5db, 0x9, 0x5, 0xa68, 0x90d4, 0x8, 0x200, 0x4, 0xffffffff, 0x5, 0x1, 0x8, 0x2, 0xe00, 0x7, 0x40, 0x1, 0x6b333b38, 0x1, 0x8, 0x8000, 0x2, 0x7, 0x8001, 0x1ff, 0x6db, 0x80000000, 0x100, 0x2, 0x3, 0x3, 0x99, 0x10000, 0x5, 0x8, 0x8000, 0x3, 0x7fff, 0x5, 0x4e, 0x7ff, 0x3, 0x602, 0x0, 0x20, 0x9, 0x4, 0x2, 0xdfac, 0x7, 0x7, 0x8, 0x1000, 0x200, 0xa52, 0x64, 0xc87, 0x0, 0xfffff327, 0xff, 0x80, 0x5, 0x2, 0x7, 0x0, 0xca58, 0xfd7b, 0x1c7000, 0x3039, 0x6, 0x85, 0x51, 0x8, 0xff, 0x7ff, 0x8, 0x81, 0x2, 0x2, 0x3ff, 0xd7, 0x3ff, 0x5, 0x3, 0xfffffff8, 0xff, 0x3, 0x8, 0xdfd0, 0x4, 0x1, 0x81, 0x3, 0x6, 0x7ff, 0x8, 0x1, 0x6, 0x69, 0x0, 0xd8, 0x7, 0x7, 0xe0000000, 0x1000, 0x8, 0xfffffff9, 0x0, 0x4, 0x4e, 0x65b4, 0x0, 0x7, 0xe85b, 0xffff, 0x80000, 0x28c8, 0x6, 0x800, 0x0, 0x4, 0x2, 0x74b, 0xc220, 0x7, 0xab, 0x7fff, 0x80000000, 0x4, 0x4, 0x0, 0x2, 0x1, 0x7, 0x40, 0x7, 0x4, 0x20, 0x80, 0x1f, 0x0, 0x0, 0x20, 0x2, 0xffffffff, 0x3ff, 0x4, 0x1, 0x7, 0x1, 0x13, 0x3f, 0x8001, 0x3f, 0x94, 0xfffff000, 0x3, 0xffff0001, 0x1000, 0xce, 0x80000001, 0x6, 0xfffffffc, 0x7, 0x45, 0x3, 0x1000, 0x4, 0x3, 0x7, 0xa9e, 0x0, 0xe48, 0x5, 0x8, 0xfffffffb, 0x1000, 0x4, 0xf5f3, 0x96, 0x3d, 0x5, 0x8, 0x8, 0x4, 0x2, 0x9, 0x8, 0xee6, 0x0, 0x0, 0x1, 0x7ff, 0x5, 0xfff, 0x9, 0x100, 0x4000, 0x80000001, 0x7ff, 0x8, 0xfffffffb, 0x100, 0x3f, 0xffff, 0xf78, 0xfc4e, 0x2, 0x5e, 0x4, 0x1, 0x9, 0x5, 0x7f, 0xc2, 0x9c4b, 0x92, 0x2, 0xb1, 0xfffffffe, 0x0, 0xe9c, 0x3, 0x8, 0x7, 0x8001, 0x9, 0x1, 0x1000, 0x8, 0x80000001, 0x7f, 0x200, 0x6, 0x7fffffff, 0x1f, 0x0, 0x7f, 0x2, 0x8, 0x80000000, 0xffffff00, 0x20, 0xc2, 0xfff, 0x200, 0x1, 0x4, 0x7, 0x51f, 0x1, 0x1, 0x5, 0x4, 0x3, 0x9b, 0x30080, 0x800, 0x7, 0x1000, 0x2, 0x1, 0x8, 0x8000, 0x20, 0x8, 0xf9, 0x0, 0x2, 0x2, 0x1, 0x800000, 0x800, 0x18cf, 0x5, 0xf2a2, 0x0, 0x9, 0x0, 0x2, 0x6, 0x6, 0x15ed, 0x9, 0x1, 0x7, 0x7, 0x0, 0x2320446, 0x0, 0x8, 0x8, 0x8, 0x8, 0x40, 0x1, 0x8, 0x9, 0xf43c, 0x4, 0x1, 0xff, 0x3, 0x4, 0x20, 0x1, 0x5, 0x4454, 0xffffffff, 0x9, 0xb4, 0x9, 0xff, 0x1, 0xde4e, 0x200, 0xffffffff, 0xfffffffb, 0xfffeffff, 0x6, 0x6c8f, 0x4, 0x2, 0x401, 0x5, 0x6, 0x8, 0xffffffff, 0x8, 0x8, 0x80000000, 0x2, 0xc8c7, 0x4, 0x40, 0x40, 0x10001, 0x5, 0xcd10, 0x8, 0x2, 0x20, 0x1, 0x1, 0x8001, 0xf74, 0x77df, 0x1, 0x3ff, 0x81, 0x80, 0x5, 0x4, 0x83e4, 0x7, 0xffff0000, 0x62, 0x1, 0xd54, 0x5, 0x6939, 0x1, 0x82, 0x2, 0x285a, 0x8, 0x7, 0x5c, 0x0, 0x3ff, 0x2c, 0xe0f, 0x4, 0x5, 0x3, 0x8, 0x8]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001300)) r2 = syz_open_dev$hiddev(&(0x7f0000001340), 0x7, 0x0) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000001380)={0x3, 0x2, 0x8, 0x1dc, 0x8, 0x8}) timer_delete(0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x40, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}}, 0x4000800) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) pselect6(0x40, &(0x7f00000014c0)={0xfb, 0x3, 0xa3, 0x9, 0x3, 0x3, 0x3, 0x8000}, &(0x7f0000001500)={0x7fff, 0x7ff, 0x1, 0x1, 0x3f, 0xfffffffffffffc00, 0x2, 0x64}, &(0x7f0000001540)={0x7, 0x0, 0x10000, 0x2, 0x9, 0xbc, 0x1, 0x3d4}, &(0x7f00000015c0)={r3, r4+10000000}, &(0x7f0000001640)={&(0x7f0000001600)={[0xffffffff]}, 0x8}) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001680)=""/4096) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002700)={'syztnl0\x00', &(0x7f0000002680)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x7e, 0x9, 0x4, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0x4, 0x3ff}}) socketpair(0x25, 0x0, 0x8951, &(0x7f0000002740)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000002780), &(0x7f00000027c0)=0x4) 16:49:39 executing program 3: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socketpair(0x37, 0x80000, 0x20, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0xe, 0x1, 0x9, 0x69, @mcast1, @rand_addr=' \x01\x00', 0x80, 0x8000, 0x8a, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', r2, 0x2f, 0x7, 0x0, 0x7, 0x2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x0, 0x6, 0x200}}) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2864}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x200410c0}, 0x40880) socketpair(0x8, 0x4, 0x7, &(0x7f0000000580)={0xffffffffffffffff}) getsockname(r5, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000700)={0x0, @rc={0x1f, @none, 0x20}, @phonet={0x23, 0x81, 0x5, 0x6}, @llc={0x1a, 0x207, 0x3, 0x9, 0x3, 0xf9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x401, 0x0, 0x0, 0x0, 0x7, &(0x7f00000006c0)='ip6tnl0\x00', 0x10001, 0x80000000, 0xf6b6}) socketpair(0x5, 0x0, 0x3f, &(0x7f0000000780)) r7 = add_key$fscrypt_v1(&(0x7f00000007c0), &(0x7f0000000800)={'fscrypt:', @desc3}, &(0x7f0000000840)={0x0, "bcd190e8656abb6704b2fe11d3eb2a11075abf6c5257891c06a5424e7e958fe2f8a6902bd2a015d3f7fcef83f9d1bf07e28b60827de3189c697758efb39848f9", 0x1c}, 0x48, 0xfffffffffffffff9) keyctl$update(0x2, r7, &(0x7f00000008c0)="c8562b443d33e3fe7e513074198b9940a334003de9f443d88eb124ff35a2346041d9e2275cc5d6739f702854ad4bdd8d367cd569faa71e939828a0beecbc5970d919cf50f9e606ef128c8c246ab5cbef71ecdd6e6c81cc7382afbeda8612a5116ff398ecc0781abad6de3588aac361239c34aeed03c8556d707402f36f266733310d2d271df8e52475e664a1c976b0d23c50342fcfb0bb7335c5e09bb8658c453606a8fe291dd728a1497673fa87e589", 0xb0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000a00)={0x14, 0x0, &(0x7f0000000980)=[@increfs_done={0x40106308, 0x1}], 0x3b, 0x0, &(0x7f00000009c0)="074c48c6bc815ac1036f9917e43c8f1ee74250134fb2c53980d836ebda7a8d4308fdd7fc10c38e70e82a38177ca7dd00ce69768ef8f03b172bc2ec"}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000a80), 0x12) [ 81.699512] audit: type=1400 audit(1737823779.607:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:49:39 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x440c4}, 0x8810) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000002c0)={0x630, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x208, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd0000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xab, 0x3, "550ea29f39d43a3ebd9b833ac86e928ea4a9aef6c88d87bb0e84c83d6c91d8792c3f3f64b680f31ddb205806e3c8c3f1b723bffae812692899f9105b77e652ed2d9cdb54dcbc24b242067267754d937173f9e8be631c4795bee0c412876c0c968251d5d927b9f038fdb5b9d075a813b4280fe49c0886f3ef82102941ea3f415d5dfb7b7535a53a635e7b9f8fd6b21d232eae001cf2c36c1861da4fe458f2f4d2c291d21f125a1d"}, @TIPC_NLA_NODE_ID={0xfd, 0x3, "5b5072e27e05b42b61109ed6f87866add5a45f1463a66862fe5c74a79b1b03e6baad7f1c3faca08326c7eefb23910691a93e61af3cb10c2579883d412b60974ca612fe1a4f868453c5f6326926b462be4f0193c286459936991282fa64bada4fdd337f32bb79f429eecec092f4bdadea3459af118ca6d2a62d21978b0e251d1d111b011c42ba58b2512a5191a3c32bfb3b574de4d71e6184dfb52b5524bedb3ff51493741a879e635d331229bea1760fc4af4344f21db2dea8424f663cf2a9b826934e7c1ea29344fffe1c599ae479cf6c355be37fd6b14a3a5b24593d3d427cd26d5d88f9c904f757df06a6f073f91236c23042b834b824ef"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "fea242fb1be44a51c6959c7a3df7410a65943ed6241c2a2a07"}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x776}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x19c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7274}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @loopback, 0xffff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}]}, @TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "1261fdf060fa4c97715692bc02481335aa3e8aae7c00de9c0399e043c49c04fe9e79dfb819dc45d8aa3d6234b58102b103f52f33e0af8f67adf6e8ec2846de544017bcebcd87c146c291b3979f95ab18429c57e45e2fcf1a20d5b0a20e7ad4bd68fe4273c8b2995097c78ce2b17b020623fb554593aba000612cf21597295f7b253dfd5ab9df5766c3f699c167b54e11"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "3d0fb502aba26e8d22dc1a774cc42c2d8f68b0d0fa"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "e8fe12272716f18d94cb9efef9f7c2c1fc39c6f1d943f62e1d61c5"}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010102}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f1}]}]}, 0x630}, 0x1, 0x0, 0x0, 0x10000}, 0x40000c0) bind$bt_l2cap(r0, &(0x7f0000000980)={0x1f, 0x8c1, @none, 0x8, 0x1}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0x44}}, 0x4015) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000f80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x73c9f5713877cfe2}, 0xc, &(0x7f0000000f40)={&(0x7f0000000b40)={0x3d8, 0x0, 0x204, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10001}}}}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe9be}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x40000000, @ipv4={'\x00', '\xff\xff', @local}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4b}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x282}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7b}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x8000}, 0x81) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001380)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f0000001000)={0x338, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x387d7a03}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4a2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x71741aa6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x329}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c006ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb9, 0x3, "70860b04525f86641b49a8f773bff469d720535030e8a872fa7aba6ceb51558c680e754a0f63da7417ba891f30b3b80f75ff19af4905e6e252721755b53f373f5de358fdc6bad253c376cbe351e61521969644a75f184be4ef404ccc74eb9828eb60d0478d6fe4352717e694663083ea45a647f1a7a32078c7cb8bc4873b23eac430920f825fd93c81a44ab897a4de75c6f8a27158f3cf3bce6782973ae5c026be0bdc3ddbd61e9dd36f087899030305f512302e19"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "1f4ede423e1eba4c7977de390e0f2066f51d6d6eba72ef"}}, @TIPC_NLA_NODE_ID={0x89, 0x3, "17d3eb2b402fa0ec9be65644bd72a8fc87f8742cbaef60c99c7071ceb7c34ae9eae753eb5728a131935c04794f0239f194eba9a6bb5fbc1bc6f6ffaedee0d1f3e9538ce70f1421f11e96fce10782667ad5e8e010c8fd5bc789588bbb4a2eaca9da050e553bcf6e62f5b85f3408cb7f3820162be1da646fcf70a79af82879bd60f2d2c8099c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xad}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd544}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x10}, 0x2004c814) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x80, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc040}, 0x1) write$P9_RCLUNK(r0, &(0x7f0000001500)={0x7, 0x79, 0x1}, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001540)={{0x3, 0x1, 0x7ff, 0x13, 0xffffffff, 0x1}, 0x3d6, [0x0, 0xf83, 0x6, 0xff, 0x3, 0xffffffc1, 0x10000000, 0x0, 0x80000000, 0x5, 0x8001, 0x6, 0x4, 0x6a3f4b0c, 0x5, 0xffffffff, 0x9, 0x4, 0xa8, 0x8, 0x2, 0x1, 0x8001, 0x0, 0x8, 0xff, 0x0, 0x9, 0x4, 0x7fffffff, 0x9, 0x1ff, 0x200, 0x5aa, 0x0, 0xff, 0x81, 0x7, 0x8, 0x8, 0x0, 0x7, 0x19e, 0x1, 0x7fffffff, 0x4, 0x1, 0xb98c, 0x234, 0x6, 0x7ff, 0x7fff, 0x8, 0x2, 0x6, 0x1, 0x4, 0x408a, 0xff, 0xc8c, 0x2, 0x8, 0x5, 0xbe6d, 0x4, 0xffff, 0x1, 0x8, 0x7, 0x173221e8, 0xfff, 0x3, 0x7, 0x7, 0x1, 0x3, 0x7, 0x7, 0x6201, 0x5, 0xfffffff9, 0x9dc, 0x4, 0x3, 0x2, 0xffffffff, 0x3, 0x4, 0x4, 0x5, 0x0, 0xcc67, 0x10000, 0x8, 0x4, 0x7, 0x7, 0x6a9, 0xffffffff, 0x100, 0x7f, 0x1740, 0x2, 0x10000, 0x800, 0x5, 0x200, 0x3f, 0x8, 0x33, 0x3ef5, 0xfff, 0x2, 0x1, 0x7f, 0x8, 0x401, 0x2c2, 0x0, 0x2, 0x18000, 0x8, 0x13, 0x6, 0x6, 0xfffffff7, 0x70000, 0x8, 0x9, 0xfffffffa, 0x2, 0x800, 0x1, 0x7fffffff, 0x200, 0x7ff, 0x5, 0x5, 0x3, 0xac47, 0x800, 0x5012, 0x101, 0x0, 0x1, 0x62, 0x0, 0x9, 0x0, 0x7, 0x200, 0x8, 0x9b4, 0xfff, 0x3, 0x4, 0xff00, 0xffffffff, 0xf5, 0x1f, 0x2, 0xc25, 0xffff, 0x7, 0x98, 0x6, 0x0, 0x5, 0xffffffff, 0xa8a4, 0x3, 0x3ffc0000, 0x3, 0xc6, 0x3, 0xf6, 0x1f, 0xfffffa7d, 0x80000000, 0x503, 0x53, 0xc521, 0xfff, 0x2, 0x7e, 0x5, 0x7fffffff, 0x1, 0xaaf8, 0x2, 0x800, 0x4, 0x80, 0x10000, 0x1, 0x10000, 0x9f, 0xfffffffb, 0xffff, 0x10000, 0x0, 0x0, 0x9, 0x80000000, 0x400, 0x3ff, 0x214, 0x5, 0x1ff, 0x4, 0x3ff, 0x1ff, 0x5, 0x6, 0x7, 0x2d, 0x1, 0x5, 0x3, 0x5, 0x80, 0x6, 0x7f, 0x6, 0x9, 0x4, 0x3, 0x5, 0x7, 0xbe, 0x0, 0x1, 0x10001, 0x400, 0x9, 0x2, 0x1000, 0xfc8, 0x800, 0xffffffff, 0x8000, 0x8, 0x0, 0x0, 0x9, 0x38, 0xcc5d, 0xa2d3d0e, 0x10000, 0x2, 0xc8bd, 0x7, 0x0, 0xfffffffb, 0x4, 0x7, 0x5, 0x0, 0x8, 0x9, 0x1cf1, 0xaaed, 0x1ff, 0x7, 0x1f, 0x8, 0x200, 0x1, 0x8e, 0x5, 0x6f5d, 0x3, 0xc432, 0x400, 0x7, 0x8, 0x6, 0xfff, 0x4, 0x5, 0x100, 0xaa, 0x0, 0x6, 0xff, 0x20, 0x8, 0x4f, 0x802c, 0x3, 0x5, 0x6, 0x6, 0x3a35, 0x80000001, 0x9, 0x5, 0x200, 0x40, 0x20, 0x5, 0x10000, 0x101, 0x0, 0x9, 0x7, 0x80, 0x9, 0x10001, 0x5, 0x9f, 0x20000, 0xfffffff7, 0x1, 0x1, 0x6fe, 0x8, 0x4f65, 0x0, 0x1, 0x1, 0x3, 0x81, 0x9, 0x2, 0x20, 0x7f, 0x1, 0x7, 0x7, 0x0, 0x7658517f, 0x0, 0x6, 0x1ff, 0x20, 0x1ff, 0x8, 0x9, 0x401, 0x2, 0xfffffffc, 0x7f, 0xfffffff9, 0xf67, 0x400, 0x800, 0x8, 0x8000, 0x2, 0x7, 0x8, 0xff, 0x4, 0x1ff, 0x0, 0x3, 0xe8, 0x400, 0x1f, 0xffffffff, 0x7, 0xfff, 0xbb58, 0xffffffff, 0xb3f, 0x3f, 0x6, 0x6b2, 0x5, 0xfffffff9, 0x4, 0x2, 0x1000, 0x7f, 0x100, 0xffff0065, 0x4, 0x0, 0x100, 0x80000000, 0x9d0, 0x7, 0x5, 0x2, 0x2e82, 0x7f, 0x7, 0x5, 0x100, 0x1, 0x1, 0xb67a, 0x2, 0xffff, 0x7ff0, 0x6c7e, 0x310e, 0x2, 0x9, 0x9, 0x7, 0x0, 0x0, 0x10000, 0x4, 0x80000001, 0x9e85, 0xfffff5df, 0x2, 0x37, 0x4, 0x8001, 0x8001, 0xe4, 0x8bb8, 0x7f, 0xffffffff, 0x80000001, 0xb6b, 0xffffffff, 0x3, 0x9d, 0x4, 0x3f, 0x2, 0x5, 0xfffffffc, 0x8000, 0x8, 0x10001, 0xef582570, 0x56d, 0x401, 0xe932, 0x44ef1236, 0x10000, 0x8, 0xffff, 0x800, 0xd2, 0x81, 0x148, 0x1ff, 0xff, 0x401, 0x369, 0x80000001, 0x2, 0x3, 0x5, 0x1, 0x9, 0x7, 0x5, 0xef12, 0x8001, 0xcab, 0x1, 0x101, 0x3, 0xffffffff, 0xff, 0x3, 0x1, 0x6, 0x6, 0x3, 0x0, 0x8, 0x3f, 0x8, 0xdcbf, 0x43486803, 0x480000, 0x7, 0xfffffffc, 0x3, 0x4, 0x3, 0x10001, 0x4, 0x4, 0x6, 0x8, 0x1, 0x1000, 0x5, 0x5, 0x1000, 0x5, 0x0, 0x10000, 0xee, 0xfef4, 0xd6e, 0xde0f, 0x80000000, 0x2, 0x8, 0x0, 0x80000000, 0xa5, 0x400, 0x7, 0xffff, 0x0, 0x0, 0x6, 0x7, 0x4, 0x5, 0x7, 0x6, 0x7ff, 0xf2, 0x8, 0x9, 0xda, 0x8, 0x7, 0x1f, 0xff, 0x28, 0x64e5, 0x1ff, 0x9, 0x20, 0x800, 0x6, 0x2, 0x9, 0x8, 0x9, 0x4, 0x8, 0x40d8135c, 0x9, 0x7ff, 0x0, 0x80, 0x1, 0x200, 0x10001, 0x4, 0x7, 0x3, 0x7f, 0x2, 0x1f, 0x0, 0x1ff, 0x0, 0x7, 0x4, 0x8, 0x40, 0x9, 0x3, 0x0, 0xfff, 0x3, 0x7f, 0x401, 0x1000, 0x80, 0x7, 0x40, 0x3, 0xfff, 0xfffffffd, 0x2, 0x0, 0x4, 0x1000, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x20, 0xff, 0x14, 0x1, 0x3, 0x1, 0x0, 0x18000000, 0x542a, 0x4, 0x6, 0x3ff, 0xffffffff, 0x40, 0x5, 0x40, 0x81, 0x7, 0x0, 0x80, 0x1, 0x1000, 0xfffff800, 0x904, 0x0, 0x8, 0x8, 0x63, 0x2, 0x401, 0x7, 0x1000, 0x3129, 0x4, 0x100, 0x400, 0x10001, 0x7, 0xfffffff8, 0x10000, 0x8, 0x3ff, 0x0, 0x7, 0x2, 0x0, 0x7, 0x6, 0x5, 0x2, 0x1f, 0x1f, 0x80, 0x3, 0x8, 0x6, 0x800, 0xfffffe01, 0xffffff00, 0x20, 0xae37, 0x5, 0x2f2c, 0x0, 0x56c, 0x101, 0x9, 0x884, 0x10000, 0x200, 0x3, 0xfffffff8, 0x0, 0x4, 0x6, 0x2f7ab15a, 0x4, 0x2eb5, 0x5, 0xd2, 0x33e8, 0xffffffff, 0x9, 0x7, 0x7, 0x5, 0x400, 0x2, 0xe8000000, 0x10000, 0x5, 0x1, 0x1, 0x8, 0x8, 0x5, 0x3, 0xffffffff, 0x400, 0x7, 0x8, 0x2, 0xfffffe01, 0x94d7, 0x945, 0x1, 0x2, 0x1, 0x0, 0x9, 0x1f, 0x4, 0x38000, 0xf6d, 0x8, 0x101, 0x4b6, 0x0, 0x9, 0x400, 0x63d9, 0x7, 0x7, 0x4, 0xb3, 0x52, 0x3, 0x0, 0xfffffff7, 0x4, 0xfffffffb, 0x1, 0x80000001, 0x2, 0x8, 0x6b31, 0x6, 0x1e54caeb, 0xffffffd0, 0x7fffffff, 0x5, 0x7, 0x3ff, 0x7, 0x1, 0x7f, 0x9, 0x0, 0x801, 0x1000, 0x18715f24, 0x2, 0x3, 0x6, 0x5, 0xb90, 0x4, 0x9, 0x7, 0x7, 0x1, 0x3, 0x5, 0x80000000, 0x21ae, 0x349, 0x5, 0x80000000, 0x3, 0x4, 0x6, 0x3, 0x9, 0x1, 0xfff, 0x0, 0x80000001, 0x8000, 0x6, 0x1, 0x6, 0xff, 0x1000, 0x18d, 0x86, 0x101, 0x800, 0x4, 0x8001, 0x1, 0x1, 0x0, 0x7fff, 0x1, 0x4dec, 0xfffffd95, 0x0, 0x6, 0x1, 0x400, 0xffff, 0x3, 0x67, 0x7, 0x4, 0x3, 0x5, 0x6, 0x20, 0x7, 0xe1, 0xffff, 0x0, 0x6, 0xb95b, 0x20, 0x8, 0x7fff, 0x4, 0x8, 0x80, 0x655e2b9, 0xffff6728, 0x0, 0x6d, 0x7ff, 0x7, 0x9, 0x1, 0x3ff, 0x3827, 0x4, 0x3ff, 0xffffff01, 0xc4, 0x3, 0x7fffffff, 0x7ff, 0x6, 0x7, 0xc00, 0x1ff, 0x4, 0x7f, 0x10000, 0xff, 0x8, 0xff, 0x8, 0x9, 0x20, 0x2, 0x7, 0xffff8001, 0x1, 0x4, 0x7, 0x7ff, 0x97c3, 0x7ff, 0x7, 0x1, 0x9, 0x7, 0x1, 0xc2, 0xfffffff8, 0x10000, 0x0, 0x1, 0x100, 0x5, 0x55dd, 0x9, 0x5, 0x9, 0xffff, 0x8, 0xffffffc1, 0x5, 0x8, 0x3f, 0x9, 0x0, 0x40, 0x7, 0x6, 0x3, 0x1, 0xfffffe00, 0xfffffff7, 0x80000000, 0x6f, 0x3, 0x4, 0x9, 0x200, 0x4, 0xff, 0x20000, 0x2, 0x9, 0x3e, 0x8001, 0x3, 0x81, 0x10001, 0x7f, 0x6, 0x6, 0x81, 0x6, 0x8aa9, 0x47, 0x800, 0xd29, 0xffffffff, 0x0, 0x7ff, 0x713, 0x6, 0x8, 0x0, 0x4, 0xfffffffc, 0xc0000000, 0x1ff, 0x1, 0xfffffffc, 0x7, 0x12000, 0x10000, 0x3, 0x8, 0x1, 0x5, 0x0, 0xffffffff, 0x9, 0x4, 0x0, 0x7, 0x8, 0x1, 0x277c, 0x100, 0xaed, 0x80000000, 0xa9, 0x8, 0x1, 0x7, 0x0, 0x0, 0xedc, 0x7, 0x401, 0x1, 0x8, 0x0, 0x3, 0x4, 0x7ff, 0xffffffff, 0x2, 0x10001, 0x9, 0xffff, 0x401, 0x8, 0xffffffff, 0x7b, 0x200, 0x1ff80, 0x40, 0xfffffffc, 0x9, 0x7f, 0x3, 0x8001, 0xffff2267, 0xd5, 0x8, 0x1ff, 0x4570, 0x80, 0x99, 0x82, 0x8, 0xffffffff, 0x4, 0x1, 0x2, 0x6, 0x3f6, 0x1, 0xffffff0c, 0x7, 0x400, 0x0, 0xde20, 0xffffffe0, 0x0, 0x84, 0x2, 0x1, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x4, 0xeaeb, 0x4, 0x1, 0x1, 0x6, 0xd, 0xff, 0x2, 0x13f8bab7, 0x4, 0x400, 0xffffffff, 0x80, 0x401, 0x8, 0x7f, 0x401, 0xc37d, 0x10000, 0x3, 0x8, 0x1, 0x0, 0x5, 0x7, 0x7, 0x120, 0x8, 0x1000, 0x4, 0x9, 0x8001, 0x2]}) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002580), 0x680042, 0x0) connect$bt_l2cap(r6, &(0x7f00000025c0)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfc00, 0xfb994a5faec783d9}, 0xe) 16:49:39 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x507702, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x100, 0x80000001, 0x8, 0xff, 0x81, 0x9, 0x5, 0x81, 0xd3, 0x4, 0x3, 0xc5, 0x9a}) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x400000, 0x501400) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$HIDIOCSUSAGES(r4, 0x501c4814, &(0x7f0000000180)={{0x3, 0xffffffff, 0x56d2, 0x7f, 0x6, 0x4}, 0x3a, [0x3, 0x5, 0x3, 0x882, 0x9, 0x44, 0x6, 0x20, 0x40, 0x2d, 0x101, 0x3, 0xfffff496, 0x0, 0x4, 0x7, 0x4, 0x400, 0x7, 0x5, 0x4, 0x1, 0x9, 0x20, 0x3f, 0x3, 0x3, 0x7, 0x7fffffff, 0x1, 0x80000001, 0x5, 0xffffffff, 0x8, 0x1, 0x400, 0x101, 0x2, 0x1000, 0x2, 0x20, 0x0, 0x4, 0x5, 0x0, 0x7, 0x7, 0x0, 0x5, 0x300b1923, 0x10001, 0x40, 0xfff, 0x80, 0x10001, 0x7, 0x6, 0x100, 0x0, 0xfffff255, 0x50, 0xd3a8, 0x3, 0x1, 0x6, 0xb, 0x6, 0x3, 0x5, 0xf38c, 0x1, 0x0, 0x5, 0x0, 0x800, 0x1, 0x0, 0xffffff21, 0x1f, 0x6, 0x10, 0x7fff, 0x9, 0x6, 0x1, 0x9, 0x280, 0xfffffffd, 0x8, 0x4, 0x5, 0x1c, 0x26d, 0x0, 0x7, 0x8, 0x2, 0x40, 0x6, 0x401, 0x0, 0x3, 0xffffffdd, 0xffff, 0x9, 0x0, 0x7, 0x0, 0x10001, 0x2, 0x8, 0x0, 0x1, 0x8, 0x1, 0x2, 0x2, 0x80, 0x7b4b9274, 0x3, 0x9, 0x5, 0x7, 0x1, 0x6bd3, 0x10000, 0x406, 0x2, 0xfff, 0x80000000, 0x0, 0x80000001, 0x1, 0x80000000, 0x699, 0x81, 0x28d7, 0x2, 0x5, 0x4, 0x40, 0x20, 0x80, 0x1, 0xfa2, 0x0, 0x0, 0x2, 0x7f43, 0x8, 0x7, 0x92ef, 0xfffffffd, 0x100, 0x1, 0xdae, 0x3, 0x40, 0x400, 0xfffff697, 0x8, 0x6, 0x6, 0x759, 0x4, 0x9d, 0x8, 0x4, 0xca2, 0x3, 0x0, 0x1, 0x40, 0x6, 0xd2a0, 0x1, 0x0, 0x665, 0x5, 0xffff, 0x40, 0x101, 0x200, 0x3, 0x4, 0x9c2, 0x7, 0xf255, 0x65, 0x7, 0x7, 0x6, 0x8001, 0x3, 0x20, 0x100, 0x0, 0xa233, 0x1, 0x6, 0x6, 0x0, 0x2, 0x6, 0xfffffffe, 0x5, 0x401, 0x8, 0x0, 0x8, 0x5, 0x2, 0x6, 0x4, 0x101, 0xffffffff, 0xffff, 0x800, 0xd51d, 0x2, 0x3ff, 0x4, 0x3, 0x1, 0x8, 0x2, 0x0, 0x6, 0x2, 0x0, 0x4a44, 0x3f, 0x1, 0x3f, 0x0, 0x25, 0x3a, 0x3, 0x5, 0x0, 0x6589, 0x6, 0x3, 0x3f, 0x3, 0x101, 0x80000000, 0x7, 0x3, 0x6, 0x48, 0xfffffffb, 0xf13a, 0xe44, 0xffffffff, 0x5, 0x5, 0x19a0, 0x1000, 0x6, 0x9af, 0x7, 0x3, 0x6, 0x7, 0x5, 0x0, 0xff, 0x80, 0x6, 0xb54, 0x40, 0x40, 0x7, 0x7, 0x2, 0x5, 0x0, 0xe91c, 0x6, 0x417, 0x37ab, 0x81, 0xfb, 0x8, 0x5, 0x7fffffff, 0x6, 0x2, 0xfffffffe, 0x7, 0x1ff, 0x8000, 0xffff, 0xfffffffe, 0x6, 0x400, 0x4, 0x401, 0xffffffff, 0x2e3b5610, 0x100, 0xffffffff, 0x0, 0x4, 0x5, 0x10001, 0x100, 0x3, 0x400, 0x17, 0x7f, 0x1, 0x2, 0x8, 0xffff0001, 0x81, 0x1000, 0x1, 0x100, 0x6, 0x8000, 0xffffff80, 0x2, 0x2, 0xd0b, 0x2, 0x1, 0x9, 0x20, 0x6, 0x7b93ecd, 0x2d4c, 0x0, 0x83c1, 0x80000000, 0x3c, 0x8000, 0x6, 0x4, 0x6, 0x2, 0x5, 0x6, 0x0, 0x1, 0x5df, 0x7fff, 0x1, 0x200, 0x0, 0x7, 0x39, 0x14, 0x3ff, 0x20, 0x5, 0xccb, 0x9, 0x4f, 0x101, 0xa69, 0x8000, 0x4af, 0xffffffff, 0x1, 0x1, 0xffffff7f, 0x48, 0x14017dfd, 0x1, 0x101, 0x4, 0xcf3a, 0x10001, 0x1, 0xff, 0x0, 0x8, 0xfffffff9, 0x81, 0x80000000, 0x8d5d, 0x0, 0x8001, 0x7fff, 0x8, 0x4, 0x1000, 0x5b, 0x4615, 0xcb98, 0x6, 0x8, 0xfea1, 0x7ff, 0x6, 0xffffab6e, 0x2553, 0x64, 0x0, 0x9, 0x74, 0x5, 0x101, 0x1, 0x4, 0x5, 0x6, 0x783f, 0x80000001, 0x2, 0x1f, 0x80000001, 0x5, 0x6, 0x4, 0x5, 0xffffffff, 0x400, 0x2, 0x4, 0x8, 0xc0, 0xfff, 0x463cefed, 0x80000000, 0x1, 0x2395, 0x7, 0xfff, 0x3, 0x6, 0x7fffffff, 0x2, 0x2, 0xeea, 0x1, 0x6, 0x80, 0xffff7fff, 0x0, 0x0, 0x71f, 0x80000000, 0x4, 0x3ff, 0x80, 0x8, 0x1, 0x676, 0x80000000, 0x8, 0x800, 0x5, 0x4f9, 0xc6d, 0x0, 0xfd31, 0x1ff, 0x0, 0x101, 0x2, 0x9, 0x80, 0x3, 0xfd4, 0x4, 0x7f, 0x1ff, 0x1ff, 0x9, 0x5, 0x8, 0x1000, 0x4, 0x8000, 0x3f, 0x9, 0x1, 0x3, 0x1, 0x5, 0x4, 0x0, 0x6, 0x6, 0xffffff01, 0xbd3c, 0x8001, 0x6, 0x9, 0x10001, 0x7, 0x5, 0x8, 0x2, 0x6, 0xde, 0x3, 0x9, 0x8, 0x400, 0xffffff81, 0x6, 0x70, 0x800, 0x5983, 0x9, 0x465, 0x0, 0x7, 0x9, 0x8, 0xec, 0x4, 0x6, 0x7, 0x3, 0x7, 0x2, 0x4, 0x7, 0x2, 0xfe9, 0x401, 0x0, 0x8, 0x0, 0x9a9, 0x4d20e696, 0x4, 0x2, 0x89, 0x4, 0x1, 0x9, 0x3, 0x36e, 0x4, 0x19, 0xfff, 0x7, 0x2, 0x20, 0x10001, 0x10000, 0x101, 0x3, 0x2, 0x1, 0x8, 0xaa6, 0x10001, 0x6, 0x9, 0x1, 0x5, 0x1, 0xdc9d, 0x3, 0xe0, 0x2, 0x4, 0x7, 0xbe3, 0x4, 0x8001, 0x2, 0x3ff, 0x6, 0x3, 0x8, 0x6, 0x6cd1, 0x4, 0x7, 0x1, 0x7, 0x8, 0x7f, 0xc1da, 0x4, 0x5, 0xff, 0x7ff, 0x8, 0x6, 0x7, 0x1, 0xffffffff, 0x9, 0xf2, 0xff, 0x2, 0x9, 0x1, 0x2, 0x5e, 0x0, 0xfffffffc, 0x8, 0x3, 0x62, 0x1f, 0xd300, 0x4, 0x3ff, 0xfffffffe, 0x91, 0xfffffff9, 0x5fb3, 0x9, 0xb19, 0x6, 0x0, 0x81, 0x5, 0x7fffffff, 0x7fff, 0x6262, 0x3, 0x9, 0x7a, 0x6, 0x80000001, 0xb25, 0xea, 0x2, 0x8, 0x3, 0x5, 0x8001, 0x4, 0x4, 0x0, 0x10000, 0x81, 0x3ff, 0x7fff, 0x10000, 0x8, 0xffffffff, 0x2, 0x4, 0x4, 0x3cf, 0xd2, 0x6, 0x3c7b, 0x9, 0x1, 0x2, 0x1, 0x1ff, 0x80000001, 0x6, 0x8001, 0x1, 0x9, 0x552dbb46, 0x3, 0x2, 0x4, 0x0, 0x9, 0x8, 0x5, 0x8001, 0x7f, 0x8, 0x3ff, 0x80, 0x8000, 0x0, 0x9c, 0x101, 0x5, 0x101, 0x6, 0x8, 0x5, 0xa1e, 0x2cb0, 0x1, 0x0, 0x9826, 0x0, 0x1, 0xffff, 0x7, 0x4, 0x80000001, 0x2, 0x331, 0x4, 0x1, 0x0, 0x25, 0x9, 0x0, 0x6, 0x9, 0x10001, 0x80, 0x9, 0x7, 0x4, 0x3f, 0x586, 0x3ff, 0x3, 0x874, 0x4, 0x6, 0x200, 0x3, 0x8, 0x4, 0xf2, 0x3, 0x4, 0xfffffffd, 0xffff, 0x1, 0x7fffffff, 0x9, 0x0, 0x7fffffff, 0x7, 0x7, 0xa666, 0x4, 0x7ff, 0x8, 0x8, 0x7f, 0x7fff, 0x1, 0x5, 0xa0c, 0x1, 0xffffffff, 0x1, 0xff, 0x20, 0x2, 0x4, 0xf9ee, 0x4000, 0x400, 0x8000, 0x1, 0x1, 0x6, 0x2, 0x4ed, 0x81, 0x2, 0x2, 0xacf, 0x2, 0x2, 0x163e, 0x401, 0x1, 0x36, 0x200, 0x3, 0x5, 0x1ff, 0x8, 0x0, 0x5, 0x6, 0x9, 0x752, 0x2, 0x2, 0xffff, 0x800, 0x6, 0x100, 0x3, 0x4, 0x2, 0x8000, 0x1, 0x0, 0xc3, 0x3, 0x2, 0x7f, 0x3, 0x2b, 0x6, 0x1000, 0x81, 0x81, 0x3, 0xffffffaf, 0x9, 0x6, 0x3, 0x8, 0x2, 0x9, 0x108c, 0x3, 0xfffffbff, 0x2, 0x8, 0x100, 0x13d, 0x9d7, 0x7, 0x2, 0xffff, 0x0, 0x3, 0x1, 0x4, 0x40, 0xfffffffb, 0x800, 0x3, 0x2, 0x6, 0x3, 0x1, 0x5, 0x3, 0x8, 0x3, 0x2, 0x4, 0x10000, 0x5, 0x1, 0x0, 0xff, 0xffffffff, 0x401, 0x48, 0x9, 0x2, 0x8, 0x200, 0x65, 0x9, 0x2, 0x8001, 0x80, 0x1, 0x7, 0xfffffffb, 0x10000, 0x1, 0x7, 0x8, 0xffff, 0x68, 0x1, 0x4, 0x9, 0x80, 0x0, 0x6, 0x9d4, 0xfffffff8, 0x8, 0x192, 0x1000, 0x7f, 0x9, 0x1ff, 0x3ff, 0x247, 0x400, 0x296, 0x2, 0x5, 0x3f, 0x80000001, 0x5, 0x1000, 0x7ff, 0x4, 0x2, 0x3, 0x4, 0x400, 0x8, 0x7f, 0x1ff, 0x1000, 0x105a, 0x8001, 0x3ff, 0x7, 0x7, 0x9, 0x20, 0x7f, 0x5e, 0x5, 0x6, 0x9, 0x7, 0x1, 0x5, 0x5, 0x3, 0x7, 0x0, 0x5, 0xfffff801, 0x5, 0xd33, 0x5, 0x4, 0xffff0000, 0x1, 0x0, 0x8001, 0xfffffffe, 0x3, 0x1, 0x0, 0x6, 0x7, 0x4, 0xbb7c, 0x3ff, 0x648f, 0x6f3d, 0x10000, 0x400, 0x7, 0x1, 0x0, 0x4, 0x9c, 0x8, 0x7fffffff, 0x20, 0x3, 0x3, 0x1c9c, 0x9, 0x2, 0xd1e, 0xffffffff, 0x1ff, 0x10001, 0x67, 0x8, 0x4, 0xff, 0x80, 0x8, 0x5, 0x0, 0x100, 0x0, 0x3, 0x3, 0x7, 0x4, 0x450f, 0x8f, 0x9, 0x3, 0x7, 0x7, 0x200, 0x5, 0x49, 0x400, 0x6, 0x51d, 0x10001, 0x100, 0x8000, 0x2, 0xa23, 0x1, 0x101, 0x2, 0x9, 0x7, 0x8, 0x8, 0x3, 0xfffffff9, 0x9, 0x0, 0x7, 0x81, 0x7, 0x4, 0x7, 0x2, 0x11c, 0x5, 0x8001, 0xba1, 0x8, 0x10000, 0x0, 0x80000001, 0x140fced6, 0x5, 0x5, 0x0, 0x7f, 0x5eb, 0x2, 0x7, 0xfffffffc, 0x1d, 0x8000, 0xfffffff8, 0x9]}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000011c0), 0x1e9003, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xa) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, r7, 0x300, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040095}, 0x881) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000001340)={0x2, 0x1, 0x200, 0x10001, 0x3ff, 0x3ff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001500)={{0x1, 0x1, 0x18, r3, {r9, r10}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000001600)={0x7c, 0x0, &(0x7f0000001540)=[@free_buffer, @clear_death={0x400c630f, 0x3}, @acquire_done, @clear_death, @acquire_done, @request_death={0x400c630e, 0x1}, @increfs={0x40046304, 0x2}, @exit_looper, @acquire={0x40046305, 0x3}, @exit_looper], 0x3, 0x0, &(0x7f00000015c0)="a58a8b"}) ioctl$HIDIOCSUSAGE(r8, 0x4018480c, &(0x7f0000001640)={0x2, 0x2, 0x4, 0xfd, 0x0, 0x70ea}) 16:49:39 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = socket(0x28, 0x3, 0x2) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x44200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf90e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1928}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffdd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40041}, 0x8000) socketpair(0x1, 0x6, 0x3d, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x1}]}, 0x20}}, 0x4000000) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40008880) geteuid() sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4048000) socketpair(0x1a, 0x6, 0xcdb, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x2f, 0x6, 0xb8, 0x5, 0x40, @dev={0xfe, 0x80, '\x00', 0x36}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x4, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'sit0\x00', r7, 0x4, 0x3, 0x5, 0x6, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x40, 0x8, 0x31, 0x400}}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, @nfc={0x27, 0x1, 0x0, 0x7}, @generic={0x8, "f26c7468da855dfc8aa704b8f428"}, @llc={0x1a, 0x207, 0x0, 0x9, 0x81, 0xe9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x7, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000800)='bridge_slave_1\x00', 0x5, 0x5, 0x56a3}) r8 = socket(0x11, 0x80001, 0xd33a) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x10c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x582}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf1}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5b0e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1133}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf782}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}]}, 0x10c}}, 0x840) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x8c, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x12, 0x3, "ccb81785fac34cbdf7c3126c23fb"}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0xc38ce0159fb7afd9}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r10, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffc00}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb4aa}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008074) 16:49:39 executing program 7: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x70, 0x0, &(0x7f00000000c0)=[@decrefs, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x1001, 0x3}, @fda={0x66646185, 0x5, 0x1, 0xd}, @fda={0x66646185, 0x0, 0x1, 0x3d}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @enter_looper, @increfs_done], 0x9c, 0x0, &(0x7f0000000140)="0b794888808ccf2e98b0989ddd9b3b5fe58fe93199bda6119da361a9b1e34a4d19d76d5f210a598ddcc8b638cf438da8329829d5cff03bc976aedc1454cc947f6b13d31141ad6f904e6858fe88ea7ae180b8a11b56f2f7a454e487993f17ecb26f98b2d514d2a9cfb557c78dd68fc53a8be6aa4f7cf2f8a11a3d553a5ddbe72ff993f3d5960e15da5fb61cff6b75854a98b92d7e92a41a613c7a84dd"}) r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x7, 0x3, 0x0, 0xb3, 0x0, 0xdd, 0x1080, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x6}, 0x108, 0x9, 0x855c, 0x0, 0x2, 0xffffff51, 0x1760, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x158, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb704}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x437}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xeb20}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2d7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}]}, 0x158}}, 0x8084) timer_create(0x1, &(0x7f0000000680)={0x0, 0x36, 0x4, @thr={&(0x7f0000000580)="0a80665a98d6eb45b35b668e4060a38b2d55df91a71918c184f14d29beab7d4330b1f1aaf817e97dc541bcdb89f8ed6816", &(0x7f00000005c0)="695fbc79a548956407a43cd44d62ac2120e9cb087ecad3b60cc4b3d749e99dd3ad26fc10325f2198d9ae758bc918e50e800b79225eab24a51d13b147200e5480fe58f58bf3530731685454a384aead2ef19114f83e7d54603bcb686a3e96db11e338df0306a923c66a7e7b190afeeae11ad761ae3e5fe210f21b16819d0b9f99dc986e50dc03205dd74047b8eeaeffac766b"}}, &(0x7f00000006c0)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x6000, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000880), &(0x7f00000008c0)=0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r3) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, r3, 0x100000000) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000940), &(0x7f0000000980)=0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x29, 0xa, 0x34, &(0x7f0000000a00)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x41000007}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40009c1}, 0x4044890) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b40), 0x612000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004040}, 0x80) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000cc0)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d80)={'syztnl2\x00', &(0x7f0000000d00)={'syztnl1\x00', 0x0, 0x29, 0xb9, 0xe1, 0x115, 0x8, @private2, @local, 0x8, 0x700, 0x100, 0xfd}}) [ 83.108774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.113168] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.115455] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.119712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.122539] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.124506] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.239022] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.243358] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.249351] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.251423] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.255566] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.260488] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.262664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.271932] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.274290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.275685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.287561] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.289657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.337773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.342713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.345360] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.350470] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.359427] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.362965] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.367392] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.374544] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.378626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.385872] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.389012] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.393941] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.395931] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.398114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.398895] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.399932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.404196] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.407531] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.415928] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.419548] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.422872] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.423834] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.426678] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.432683] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.433910] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.434972] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.438983] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.439958] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.443268] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.453884] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.198189] Bluetooth: hci0: command tx timeout [ 85.324135] Bluetooth: hci1: command tx timeout [ 85.388148] Bluetooth: hci2: command tx timeout [ 85.452346] Bluetooth: hci5: command tx timeout [ 85.452963] Bluetooth: hci3: command tx timeout [ 85.517162] Bluetooth: hci4: command tx timeout [ 85.517804] Bluetooth: hci6: command tx timeout [ 85.581155] Bluetooth: hci7: command tx timeout [ 87.246091] Bluetooth: hci0: command tx timeout [ 87.373301] Bluetooth: hci1: command tx timeout [ 87.438836] Bluetooth: hci2: command tx timeout [ 87.501243] Bluetooth: hci3: command tx timeout [ 87.501741] Bluetooth: hci5: command tx timeout [ 87.564372] Bluetooth: hci6: command tx timeout [ 87.565016] Bluetooth: hci4: command tx timeout [ 87.629116] Bluetooth: hci7: command tx timeout [ 89.293156] Bluetooth: hci0: command tx timeout [ 89.421275] Bluetooth: hci1: command tx timeout [ 89.485470] Bluetooth: hci2: command tx timeout [ 89.549250] Bluetooth: hci3: command tx timeout [ 89.549741] Bluetooth: hci5: command tx timeout [ 89.614100] Bluetooth: hci4: command tx timeout [ 89.614577] Bluetooth: hci6: command tx timeout [ 89.676174] Bluetooth: hci7: command tx timeout [ 91.341096] Bluetooth: hci0: command tx timeout [ 91.469170] Bluetooth: hci1: command tx timeout [ 91.533139] Bluetooth: hci2: command tx timeout [ 91.597423] Bluetooth: hci5: command tx timeout [ 91.597908] Bluetooth: hci3: command tx timeout [ 91.660299] Bluetooth: hci6: command tx timeout [ 91.660784] Bluetooth: hci4: command tx timeout [ 91.725134] Bluetooth: hci7: command tx timeout [ 145.880525] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.894850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.897080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.903480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.912408] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.917999] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.018790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.022295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.024606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.036374] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.046603] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.048130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.104920] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.118537] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.126226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.127887] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.130347] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.137568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.143151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.146523] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.147270] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.153308] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.157393] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.161425] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.163201] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.165717] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.167472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.170885] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.175251] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.179006] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.180954] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.189360] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.200556] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.202536] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.210665] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.215401] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.222629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.225243] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.227012] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.231016] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.243319] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.245061] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.254370] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.255175] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.257433] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.259079] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.259832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.265955] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.981150] Bluetooth: hci0: command tx timeout [ 148.108172] Bluetooth: hci1: command tx timeout [ 148.236147] Bluetooth: hci5: command tx timeout [ 148.237226] Bluetooth: hci2: command tx timeout [ 148.301102] Bluetooth: hci6: command tx timeout [ 148.301776] Bluetooth: hci7: command tx timeout [ 148.302362] Bluetooth: hci4: command tx timeout [ 148.302905] Bluetooth: hci3: command tx timeout [ 150.029214] Bluetooth: hci0: command tx timeout [ 150.156922] Bluetooth: hci1: command tx timeout [ 150.284576] Bluetooth: hci2: command tx timeout [ 150.285261] Bluetooth: hci5: command tx timeout [ 150.348238] Bluetooth: hci4: command tx timeout [ 150.348834] Bluetooth: hci3: command tx timeout [ 150.349462] Bluetooth: hci7: command tx timeout [ 150.350102] Bluetooth: hci6: command tx timeout [ 152.076198] Bluetooth: hci0: command tx timeout [ 152.204217] Bluetooth: hci1: command tx timeout [ 152.332261] Bluetooth: hci5: command tx timeout [ 152.332288] Bluetooth: hci2: command tx timeout [ 152.396267] Bluetooth: hci7: command tx timeout [ 152.396327] Bluetooth: hci6: command tx timeout [ 152.396707] Bluetooth: hci3: command tx timeout [ 152.397571] Bluetooth: hci4: command tx timeout [ 154.124210] Bluetooth: hci0: command tx timeout [ 154.252266] Bluetooth: hci1: command tx timeout [ 154.380163] Bluetooth: hci5: command tx timeout [ 154.381442] Bluetooth: hci2: command tx timeout [ 154.445356] Bluetooth: hci4: command tx timeout [ 154.446444] Bluetooth: hci3: command tx timeout [ 154.446522] Bluetooth: hci6: command tx timeout [ 154.447485] Bluetooth: hci7: command tx timeout [ 207.961783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.963650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.965447] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.968654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.971277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.973292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.102582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.104770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.105924] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.111294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.114673] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.125337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.157665] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.168108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.172646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.178591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.182355] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.184587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.225139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.232223] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.239541] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.241569] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.246251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.262539] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.267144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.271702] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.272406] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.276439] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.281429] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.284749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.413816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.421877] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.444414] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.486900] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 208.498384] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 208.502644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.504290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.506897] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.512400] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.525595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.535802] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.539293] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.540619] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.542779] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.555447] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.565543] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 208.601410] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 208.607867] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.996412] Bluetooth: hci0: command tx timeout [ 210.188174] Bluetooth: hci1: command tx timeout [ 210.254109] Bluetooth: hci2: command tx timeout [ 210.380149] Bluetooth: hci4: command tx timeout [ 210.380906] Bluetooth: hci3: command tx timeout [ 210.636450] Bluetooth: hci6: command tx timeout [ 210.636583] Bluetooth: hci5: command tx timeout [ 210.764298] Bluetooth: hci7: command tx timeout [ 212.044189] Bluetooth: hci0: command tx timeout [ 212.236296] Bluetooth: hci1: command tx timeout [ 212.300184] Bluetooth: hci2: command tx timeout [ 212.428096] Bluetooth: hci4: command tx timeout [ 212.428116] Bluetooth: hci3: command tx timeout [ 212.684072] Bluetooth: hci6: command tx timeout [ 212.687043] Bluetooth: hci5: command tx timeout [ 212.814168] Bluetooth: hci7: command tx timeout [ 214.093279] Bluetooth: hci0: command tx timeout [ 214.285119] Bluetooth: hci1: command tx timeout [ 214.348127] Bluetooth: hci2: command tx timeout [ 214.476252] Bluetooth: hci4: command tx timeout [ 214.476820] Bluetooth: hci3: command tx timeout [ 214.733177] Bluetooth: hci5: command tx timeout [ 214.733202] Bluetooth: hci6: command tx timeout [ 214.860133] Bluetooth: hci7: command tx timeout [ 216.140201] Bluetooth: hci0: command tx timeout [ 216.332196] Bluetooth: hci1: command tx timeout [ 216.397157] Bluetooth: hci2: command tx timeout [ 216.524143] Bluetooth: hci4: command tx timeout [ 216.524301] Bluetooth: hci3: command tx timeout [ 216.780208] Bluetooth: hci6: command tx timeout [ 216.780280] Bluetooth: hci5: command tx timeout [ 216.909234] Bluetooth: hci7: command tx timeout [ 270.052682] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.055604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.062882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.063358] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.067831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.071644] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.073064] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.080851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.084923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.092045] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.095597] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.101744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.139507] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.146504] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.155465] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.162693] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.177781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.184559] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.363622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.374406] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.376762] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.404537] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.422797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 270.424268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.429643] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.431496] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.437122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.440503] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.446499] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.450270] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.451297] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.458393] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 270.462480] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.474857] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 270.489440] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.490879] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 270.491906] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.493779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.504403] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.506655] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 270.508255] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.520901] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 270.523706] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.532226] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.533945] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 270.534835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 270.536342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.539336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.140136] Bluetooth: hci0: command tx timeout [ 272.141222] Bluetooth: hci1: command tx timeout [ 272.271163] Bluetooth: hci2: command tx timeout [ 272.525142] Bluetooth: hci5: command tx timeout [ 272.525206] Bluetooth: hci6: command tx timeout [ 272.525962] Bluetooth: hci3: command tx timeout [ 272.588157] Bluetooth: hci4: command tx timeout [ 272.588719] Bluetooth: hci7: command tx timeout [ 274.188135] Bluetooth: hci1: command tx timeout [ 274.188588] Bluetooth: hci0: command tx timeout [ 274.317127] Bluetooth: hci2: command tx timeout [ 274.572206] Bluetooth: hci6: command tx timeout [ 274.572679] Bluetooth: hci5: command tx timeout [ 274.573964] Bluetooth: hci3: command tx timeout [ 274.638054] Bluetooth: hci7: command tx timeout [ 274.638570] Bluetooth: hci4: command tx timeout [ 276.237196] Bluetooth: hci0: command tx timeout [ 276.237709] Bluetooth: hci1: command tx timeout [ 276.365111] Bluetooth: hci2: command tx timeout [ 276.621109] Bluetooth: hci3: command tx timeout [ 276.621619] Bluetooth: hci5: command tx timeout [ 276.622346] Bluetooth: hci6: command tx timeout [ 276.686817] Bluetooth: hci4: command tx timeout [ 276.687317] Bluetooth: hci7: command tx timeout [ 278.284161] Bluetooth: hci1: command tx timeout [ 278.284670] Bluetooth: hci0: command tx timeout [ 278.414516] Bluetooth: hci2: command tx timeout [ 278.669262] Bluetooth: hci6: command tx timeout [ 278.669835] Bluetooth: hci5: command tx timeout [ 278.669936] Bluetooth: hci3: command tx timeout [ 278.732118] Bluetooth: hci7: command tx timeout [ 278.732321] Bluetooth: hci4: command tx timeout [ 332.514471] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.521606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.524544] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.533270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.537760] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.542633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.635281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.640689] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.643338] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.656599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.662483] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 332.674648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.758465] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.762392] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.769150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.776628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.780378] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 332.783726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.924358] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.945142] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.947468] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.958488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.966321] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 332.971539] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.980239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.986464] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.992571] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.000389] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.013505] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.016960] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.021326] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.024738] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.028464] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.037295] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.042778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.043448] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.043889] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.075286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.077563] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 333.081714] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.084410] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.086213] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.090098] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.092326] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 333.094130] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 333.097839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.166584] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 333.174308] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.604138] Bluetooth: hci0: command tx timeout [ 334.732095] Bluetooth: hci1: command tx timeout [ 334.796232] Bluetooth: hci2: command tx timeout [ 335.052142] Bluetooth: hci3: command tx timeout [ 335.180239] Bluetooth: hci6: command tx timeout [ 335.180334] Bluetooth: hci7: command tx timeout [ 335.181801] Bluetooth: hci5: command tx timeout [ 335.244448] Bluetooth: hci4: command tx timeout [ 336.652646] Bluetooth: hci0: command tx timeout [ 336.780099] Bluetooth: hci1: command tx timeout [ 336.844081] Bluetooth: hci2: command tx timeout [ 337.100118] Bluetooth: hci3: command tx timeout [ 337.228098] Bluetooth: hci5: command tx timeout [ 337.228222] Bluetooth: hci7: command tx timeout [ 337.228577] Bluetooth: hci6: command tx timeout [ 337.292151] Bluetooth: hci4: command tx timeout [ 338.700560] Bluetooth: hci0: command tx timeout [ 338.828092] Bluetooth: hci1: command tx timeout [ 338.893307] Bluetooth: hci2: command tx timeout [ 339.148112] Bluetooth: hci3: command tx timeout [ 339.276131] Bluetooth: hci7: command tx timeout [ 339.276433] Bluetooth: hci6: command tx timeout [ 339.276615] Bluetooth: hci5: command tx timeout [ 339.340066] Bluetooth: hci4: command tx timeout [ 340.748236] Bluetooth: hci0: command tx timeout [ 340.876652] Bluetooth: hci1: command tx timeout [ 340.940091] Bluetooth: hci2: command tx timeout [ 341.198137] Bluetooth: hci3: command tx timeout [ 341.324068] Bluetooth: hci5: command tx timeout [ 341.325182] Bluetooth: hci6: command tx timeout [ 341.325256] Bluetooth: hci7: command tx timeout [ 341.388051] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 16:54:47 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffffff87f15750 RCX=ffffffff814fda56 RDX=0000000000000008 RSI=ffff88802817ddb8 RDI=ffff88802817d340 RBP=ffff88802817ddb8 RSP=ffff88806ce09b00 R8 =0000000000000000 R9 =fffffbfff0fe15e7 R10=ffffffff87f0af3f R11=0000000000000000 R12=ffff88802817d340 R13=0000000000000003 R14=dffffc0000000000 R15=0000000000000003 RIP=ffffffff814fbea0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd39413b540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffef6c7ffa0 CR3=000000002f746000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff86c01fd6 RDX=0000000000000008 RSI=ffff888027c47f48 RDI=ffff888027c477f8 RBP=ffff888027c47850 RSP=ffff888027c47768 R8 =0000000000000001 R9 =ffff888027c47838 R10=000000000003ab7c R11=00000000000c2867 R12=ffff888027c47858 R13=ffff888027c47840 R14=ffff888027c47f48 R15=ffff888027c477f8 RIP=ffffffff81348c80 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9aa2b8c6f4 CR3=0000000027224000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ff00000000000000000000ff0000 XMM02=000000000000ff000000000000000000 XMM03=0000000000000000000000ff00000000 XMM04=ff00000000000000ff00000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000