Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:26996' (ECDSA) to the list of known hosts. 2025/05/26 23:30:58 fuzzer started 2025/05/26 23:30:59 dialing manager at localhost:33805 syzkaller login: [ 94.607201] cgroup: Unknown subsys name 'net' [ 94.753256] cgroup: Unknown subsys name 'cpuset' [ 94.805250] cgroup: Unknown subsys name 'rlimit' 2025/05/26 23:31:13 syscalls: 206 2025/05/26 23:31:13 code coverage: enabled 2025/05/26 23:31:13 comparison tracing: enabled 2025/05/26 23:31:13 extra coverage: enabled 2025/05/26 23:31:13 setuid sandbox: enabled 2025/05/26 23:31:13 namespace sandbox: enabled 2025/05/26 23:31:13 Android sandbox: enabled 2025/05/26 23:31:13 fault injection: enabled 2025/05/26 23:31:13 leak checking: enabled 2025/05/26 23:31:13 net packet injection: enabled 2025/05/26 23:31:13 net device setup: enabled 2025/05/26 23:31:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/26 23:31:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/26 23:31:13 USB emulation: enabled 2025/05/26 23:31:13 hci packet injection: enabled 2025/05/26 23:31:13 wifi device emulation: enabled 2025/05/26 23:31:13 802.15.4 emulation: enabled 2025/05/26 23:31:13 fetching corpus: 0, signal 0/0 (executing program) 2025/05/26 23:31:15 starting 8 fuzzer processes 23:31:15 executing program 0: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x62f, 0x40, 0x80, 0x1, 0x100, 0x40}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x7f) r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000140)=0x80) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x11c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff54}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff7abf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x85, @mcast1, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x11c}}, 0x4040000) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@privport}, {@nodevmap}, {@posixacl}]}}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r3, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "7c57eed9ccd518594b7198c137088f1fba43ab8c0555905cc7250f"}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000600)) ioctl$TCSBRK(r0, 0x5409, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000640)=0x6) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000680)="2785b7c04e0f91eceb22735b3257d675c618f3013444a0802c357f2a56234facfaa9a7b87ae2a177b063b2cdfddbe75ef0d3b72e34e49715b542089421c86829a7a158") ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000700)={0x9, 0x8, 0x8}) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000740)={0xd, 0x6}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000780)=0x5) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000007c0), 0x400000, 0x0) ioctl$TIOCNOTTY(r4, 0x5422) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000800), 0x2, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000840)) 23:31:15 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x410, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7d}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x9001) r0 = accept(0xffffffffffffffff, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000280)=0x80) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8004000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400d0}, 0x8001) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa8, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000010}, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x105041, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdaed}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000801) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r2) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r4, 0x2, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x8841) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x4400c0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r2) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x348d}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff91}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4c015}, 0x1) write$cgroup_int(r5, &(0x7f0000000ac0)=0x2, 0x12) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r7, 0xc0305302, &(0x7f0000000b40)={0x6bfa3880, 0x3ff, 0x1, 0x6, 0xe0000000, 0x85d}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000e80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x268, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x10, 0x3, "ae139a9d291e03cf1a20b245"}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x304f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "11c8ce76ad1a8e36e121888c07e5c356d1d4bc2f2a9291b091"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x572}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2e0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x120, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x166, @local, 0x10001}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x667, @private0, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xa8, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x713}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca0e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20004840}, 0x40800) 23:31:15 executing program 2: r0 = socket(0xf, 0x3, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x1b, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2c1) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x7, 0x3}, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000000c0)={0x1, 0x2185, 0x200}) r2 = socket(0x25, 0x800, 0x100) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x270, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @mcast2, 0x3f}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @empty, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @private0, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x8010}, 0x40) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r3 = socket(0x5, 0x1, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000580)) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40840}, 0x4000880) r4 = socket(0x27, 0x6, 0x9) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000780)={0x3, "c17ae1"}, 0x6) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={0x0, @vsock={0x28, 0x0, 0x0, @local}, @sco, @l2={0x1f, 0xc4, @any, 0x7}, 0x400, 0x0, 0x0, 0x0, 0x7ff, &(0x7f00000007c0)='xfrm0\x00', 0xd, 0x10000, 0x101}) socket(0x26, 0x5, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x503800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000008c0)={0x200, 0x40, 0x1, 'queue0\x00', 0xe3}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xf4, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @local, 0xfff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @remote, 0xffff0001}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000b40)=@gcm_256={{0x303}, "4e4d562090f19e3b", "0c6dad6d4c25075f43d3663b31702aaf55f762852f335ffb406577d76bff38b4", "c7edaec1", "aa441a5e0bad89fd"}, 0x38) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000b80)) 23:31:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x14040004}, 0x400e0c0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000004) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x128, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x783}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xaf18}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x25}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x56c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbf}]}]}, 0x128}}, 0x4040804) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3f}, @ETHTOOL_A_RINGS_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa0, 0x0, 0x506, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "3a138c8954df54dbd21121983aa4ac8647f7b55a"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "56d0939248a967f1a6174950f078c1023b773d24f96bad5e477f91bb537c122786d8edd4"}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x20000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000700)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000780), 0x2000, 0x0) r5 = syz_genetlink_get_family_id$mptcp(0xfffffffffffffffd, r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x7c, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40040) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000980)) r7 = socket(0x25, 0x5, 0x270f) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x1b4, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x215, @mcast1, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffff001, @loopback, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff8eb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9f}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xad42}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x719}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfdc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x5}, 0x40044) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x118, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x413}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x81) [ 110.652607] audit: type=1400 audit(1748302275.394:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:31:15 executing program 4: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0xd00, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40004) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000140)={0xd15, 0x3ff, 0x1}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, @isdn={0x22, 0x5, 0x20, 0x8, 0x6}, @xdp={0x2c, 0x3, 0x0}, @nl=@kern={0x10, 0x0, 0x0, 0x40}, 0x2, 0x0, 0x0, 0x0, 0x20, &(0x7f00000001c0)='ip6gre0\x00', 0x80000000, 0x8}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x80, 0x7800, 0x7, 0x0, {{0x18, 0x4, 0x3, 0x2, 0x60, 0x65, 0x0, 0xaf, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, {[@cipso={0x86, 0x4a, 0x3, [{0x5, 0xe, "475edb4229d5c352c03e0ee5"}, {0x7, 0x12, "7949e6fa6f781862fb888bf8bb263030"}, {0x7, 0x4, "f66b"}, {0x5, 0x4, "d2fb"}, {0x7, 0x12, "7c5c9185562667a4164415a892b5d11a"}, {0x7, 0xa, "45e0fbc6aa1f538e"}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000340)={0x534, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x6c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x67, 0x4, "285146e91fe3abee6ad66d121964f0ec571a8bce82f5bb1c1c6d2b22f1fc0ad98eb67ad28f608dc63137a89860a58a1514d324de5e13df5648ed8dedb8c66926776efdce6757220e73fb05a8855e54379965e16cb605b7f3db6a168b5b8f8ceb13177b"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7c20abe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7c2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xed5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#.$\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&/^,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "e827286113a7eb3121712f82444bea080d1f90b59a4ce08cd1b9ab60d1658ac2e0981b7e68e241b80c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x7a, 0x4, "42c95bac68a62437bc71e3b2262ee0b93894772433ba0b0d0a148cdb88f621ddc5d2befb83b41b0bb54d5ab7782cbdef242fbb4007ef2e1937c9820b00c18dfaacd4fe0a71594626629c0eaf0798f6f89c94b0d0bc3cae2f6d27be65aa4c2da22e1d45c8dfc37b2eb0bbadb4f58a18ecfb8132925beb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "a0d70dfc775a129d831026b1a22e29ef58e5acab7da95dc8a6d17510231f1db30ab59469a2fa73"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "d3cf54b118e664274d6ea60ef6a5aeb2aa412134d1065539b393e5274655524a5310b1c5c0d7eb0211a4d8b03a45c728163fd6f5a1a4dd89bee444e10bcd2508362e4c67307bd4b3c227273e53d187a3453ed1addb2e3d191eabdb2b97dcfa3e81"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xa4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1f}, @ETHTOOL_A_BITSET_MASK={0x96, 0x5, "4ee3b7840f3209228a07030c96f11e405da41e753a3821df4791566ad4be7483b3b8fe416191237ba3bcc32fa7b7791d2f4a19bcbc295dabe19894b387187b080027abecdd859f5f64dded9a1de69a7f366ba6c8d618bb361a550fb3bb6e21ed70636e8ea5a27f181dbe71ba24d29e47fe95e46727722eff443536c7ea96f6cf55f0aa9d2da50ea7f6c28ac4ce80116e2751"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x154, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa181}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1400}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xedc4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#\'!&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.]\'@#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3fe7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^%#[\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xca\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(#/\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x534}, 0x1, 0x0, 0x0, 0x10}, 0x800) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000940)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000980)={r3, 0x1, 0x6, @multicast}, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x54) r4 = accept$packet(r2, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b00)=0x14) getsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000bc0)={0xf8cdab3, 0x0, 0x0, 'queue0\x00', 0x400}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c0}, 0x40040) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e00)={'tunl0\x00', &(0x7f0000000dc0)={'gre0\x00', 0x0, 0x40, 0x40, 0x80000000, 0x1, {{0x6, 0x4, 0x1, 0x27, 0x18, 0x65, 0x0, 0x11, 0x0, 0x0, @broadcast, @loopback, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'gre0\x00', r5, 0x0, 0x8000, 0x9d1, 0x5, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x65, 0x0, 0x7, 0x29, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x7, 0xed, [@rand_addr=0x64010102]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x5, [0x7ff, 0x81]}]}}}}}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), r6) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x58, r8, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000}, 0x20000800) 23:31:15 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x34, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8001}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1000}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8044}, 0x14) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x20044081) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000480)={0x401, 0x7fff, 0x4, 0x40, 0x7f, 0x5}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x40) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000640)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x95}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x891) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x442100, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r8, 0x40045402, &(0x7f0000000880)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0x80585414, &(0x7f00000008c0)) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x7c, r2, 0x844, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x7c}}, 0x0) 23:31:15 executing program 6: getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={r0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x4, &(0x7f00000000c0)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', r0, 0x10, 0x7800, 0x3f, 0x7, {{0x11, 0x4, 0x2, 0x3, 0x44, 0x67, 0x0, 0x20, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0x8, 0xc2, 0x0, 0x3, [0x5]}, @noop, @ssrr={0x89, 0x27, 0xa5, [@empty, @empty, @multicast1, @broadcast, @multicast2, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x80}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x212802, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f00000003c0)) r4 = accept(r1, 0x0, &(0x7f0000000400)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000500)={'tunl0\x00', r2, 0x7, 0x8000, 0xffff, 0x0, {{0x8, 0x4, 0x1, 0x1, 0x20, 0x66, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, {[@rr={0x7, 0xb, 0xd4, [@multicast2, @dev={0xac, 0x14, 0x14, 0x28}]}]}}}}}) recvfrom$packet(r4, &(0x7f0000000440)=""/163, 0xa3, 0x2, &(0x7f0000000580)={0x11, 0xf6, r5, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x82}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x404c080}, 0x85) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000007c0)=0x14) connect$packet(r7, &(0x7f0000000800)={0x11, 0x1b, r6, 0x1, 0x80, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) sendto$packet(r4, &(0x7f0000000840)="ec749a0cf1572a66801d37a7192dd060936ec7b802add8bd190eefd5d50dfb1e62aedb0614f490e7ab4a249dcdc7b4e83334", 0x32, 0x10, &(0x7f0000000880)={0x11, 0x1c, r5, 0x1, 0xf9, 0x6, @remote}, 0x14) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000001ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a80)={&(0x7f0000000900)={0x1154, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x10ec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "8661c8b1bf4879008c9460fd2c239dde89ba6192"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "3ad6238783a8c157089bce2bc564cc611ddb5e08a1d4bdf124a07e46cd1db56d0425289c8150d14dc02550dbe5427384fb53fd28967b5da862ea6304619f22511a8abb16a54a4056fa49b2328661db03b8c04dfd710942d199e6299cac2f2ac0415ea1f4de1d58cde25ab276a18340ba767a9d99c7908ded175c7918b826b00a597d3cf78bd1f98dd9e2c00114e1d166f73e6af1586135a67ff8c5d7d57f3d582125eee456f1da2dff7ddfbbf6d7b71899f1c182ca133f20a7013b5ebed376a054c63dbd12683d6ebeb54f1215819b90cba6936312a08dac33f81c233b9645ef8218734692332b3a540719493f0ca2e7f293a7fb00b53f7e6778e5ad5f8df3d2f1ab480bc8549c517af487a96ccd07ce9305af58a52da00939785ddaf91890850c859a46f66190ede3d1b7adfb352c58ef8ca05873e0ad430a27a1aec8944bbe86284fda734b550b7e3aa519af07fb58369c2a0cf77b1e73eaec2c995d1e74ebd8295870b4315e5ba45670abf18aa6fc03ed96f8f2f6795c127c606f709d966a34fbec4f254f11e6fa4744963b1acd477a33d4fdf1fcaf50e78f67a17406c23c7e8509931e044948acc5326e5b35b0373a98fe05b99651a8f0a5c311a86b72c409f01c2703e84ae63ad5d29cf12d9b2ea2019ffad720571343cbb06d75c35ca1a4c0367a0e5dc52a7afaad045770f80bd599a13dd5627db67827a71fb56a5ea0c4365281e7493957084560281d934536209e503974ca481ae2131b2496d37af0bbd96416eb95d2aeb00ca85774940cc7e8e6997f8698c887a9afeb41b653c1126b49aa2244f94276f5ca6f1aaf5428abbcb24cecb9fd06b79d48fd31dbe394352f5924aeb4b9d2260fb817f2fd298091c73631fa44712283fb239d3ec8a7f7ab212b891748c4433982635846b1e32191be322383cb83f873d05e4ba5365e6ce7d1354a7a473252a99999c1ed024f0a7afdcb827b9c61d6e22ed562de9e85f5f195db8ddd2212633403a21b6595e825e83fa68ae4b891d56243b4ee8ac2a237f5acdef82accd0ad30f604cdc54f462a54e00fb18fdc440445233fd2828394c81a30c47df82eaf8f7d3457e29ef66c83f79186b91c94266ae15944a31ffc943399fd5d5c62a1b23806cf312631a5316346964e3c76b7784205a6cd2fe4edba848fe05c2d2cb3b1d31d8fc2f82a4d583ab4a51344abd88478a9eedb78cea8a2261a5704bd1440554f80ab25f26affe3b1283bdfb1cadb55c30c9f6c93100a8eae8c16617d285bd55e0654b2d09873f5ffe737c184fdf8f5084e61241220dafca2a7ba0d0c97cf208f76ae7678fbad32b6a284fc4242f566a63d96c6321e0c763ae2a3563c36acfbbc7a399f8053694581f8df2cd480d49b6f76b164118b022b535ae32bf6b033ca77d0a9874b2aa590e9b22980dcea267b2194bf5da541cc1183a9d9eaa3d094258cb00a55ae2db734cb03b32fc9378e80588022f7688b0969318ce8aeadbc04df0da5b62ce0954c97c3d69b9c583383f8c57bd2809f9cf402d30806cdc94bd47ca3bc0054d18754e6c559288299028e30684b4436e1ad95acf8ffeaf7942bf511dc80ef4f039562edd947b9a73d31de89703194c749893d79d46c029ff59d5fae03731848c308a517559773b0e103c1245c08b53ff487eb35076b30e2e4c8f73a6bfe18d03ec17503a75e5a06fac694d5d72cbeaca754de4167e6fba9abf6fcc88db5f6adb930488c080119d55081a8ce7eb79ed7dd49fa61f0a32468431c4417d5f1da09abc36e23bd118c07afc2342b3e482ff52d81881178bbe873fb231c7925bb2e814ba890d68c80745c6540316a07bb856c344cb2ac2661de400deb49f2b45c223d5cfd742f5271337292664dda425059a5b6a337848c6fb494c724033128bb7f9f45eee21f56b417b85da58fd9c1c6fcd3d6551c1d00f51da67ac8b21ead9ca327d4d81a18a38a85a31429525ff235c4926e00299687d6a4150adfe4168f3f62bbf8efbba1c06bbb3e16ac16a2b4aa40482cb1c229a636f4a0dc94b49441eccaad6a42df26e9ad7e758dbc4d6fe45ad9909fe6649c1eff63181b3a1ce4568251b116a6378f69a3c5ad73874cbfd52c218abec4bef7191f6396fdac5607d4d26a6e6f513ffa482865a8663c124c663615ec2a85bf10cb771f999e7ee2c3a1edbfa7f0dab43fb4fcb82ab6f18ac2b7bb82619f571ecbb930d6b193113beee5415a06bf9d9134a5058db2c0e187b86965c034c85e29c78a369d2a22c531c5abebd8a4cf5c342136b5f0907feea025c6e81825e0110066c8309ebb88f1cb1c8acb1baa008e8ae721b325e6dd09480a9ed0930cb2de414ca58c38335f19085f05a962a528bb97ec6c2373fd488dd7a99262bf0157edf18ea9c738848aeb29b95eb4fe12cf81978782cfb98da36ac51ce08522ac5bffeed825d4a512a082cd29f0d3a9dd2601d43de3d7a6a14af9c38c15ea4a9b3a53200bfb6b42bb4bd3355032ed75e49263db148e8dcf449abed0b30f8a125ef55b864665790a49715d777e4a7f0654aea089676f257e195f3353b9f0609966fbce1c1c25afa56321b2b91777ad693b91e8e427ccd20527323ce0b9a583183750bafe82d7c96ed1cf05f95caa436f6bf73782e6d9163d4cec56f1700ddae10626576eacdc1f29ebb49b67c6e0f46964cd71e88ce73d8d03fbb95bd3d810384ff7b33bb149fff432d226fbfc67c10df009260d94bdd9fecb99adf44baf5e4e18495f3f245c21b83a224cbf0064120205ef3a0d4843c17f952a1ac4ea7f5a87d568ec9f987da0753355568873b984acf78575179263ab77b93bf3e2bf5eb46617dd50985c1488ecb0802e1053cc77a5428af5f4e076b7aa59676175e9fa7335a195548d824a822eabd94e52129fda387ca1d58270f3e3ee9805becd5bd82410a53b123ca766d33d99547b17a93c4112af0d325d86bfeb5d19ea6d718e44983827ff4fdffd462f6902d48844b58c10f288898fb447aa3c72d40de2525f93c03099f1b7484d5ef9b0dbcacf19935dcd81d1e1db9722a89449dfdc3e5e1f82625509bbec3ca1bcbeef201536a741143217f8ed89e7e0b7d7b2b51359df646227f6d64e33ee97ca5a032091cb729f3688031d757d8076da4cb23729c37185e97d38e216f0a0d578e27c0787f5374eb69a058863f2d4c04ca287523d9e6127434d905fd5c7c1bc1e9bded7d34452e768c05a8fd3753d04808886343e58d7a3b68b79fc307c849ea7af3b3544901bd49ef88605232ddc0f510410d1169f6b3398c187937b8faea74498f68f1bd3e7bd2f820136a70f50207e0d74879318082c9386dd4c032d3e59f102a6a9ed20bda47cb97dca8adb636e8a157403c0a53c543f9e6fe8e30fd619c0b585e43285609dde9a15de3a7b1eb872dc120f0e1d880af3f6337d9ffdf7bcd14ef86b919656d5cdeb9ee7f29f130974c1e5215df6ef4dc42c6a67b2ec0cbfaa25a881ba0cb68aa8d193ed0ed119c8ae07a6f077823b8079178e2a75e3295d96033866d39189527a52e20654ff7c881305e677c1e3c80f5eeeeafd3c9ea41dc040d55979389bc8e8513d9a86e35b7e951c677885c78f0246b7d9a3ee139a992539c3a880fd593cb6b89069363dc4c85f27456650087b9a2f26ceeef2c2c559b0c63766289f1325b745b80c0892211153bc523182fd934672969adf863f6c65a86bbdf5b6a36cd4a439c96742f80eb5109c5b0e0a6309b817b25a131f175daef1b9c14e5213b7db2f781a10bd6680cafdae4e8ba200e039c1ee4050f17622858bb075678b25c7c54b06a641affd83b6a72f68e2d803259a6e05139d36d19d5a39dec4b9aaa1ab7c5eb6b5f4f76733b7fb1dfab6630d6c4a4bd86b85a4571e78c15ee270bf9115984dfbe96f050c05d2f2dfe315a531b00cb5d05c9df291a039460226fbad6924dd4275e7d886247f5bf472f5e9b2599dfdf0de288ccd757a25d9993df843f766c68a4ad44f206f8a74e6d770ec6bf28342baee9aa759d7133daadb2ecc5b8757313535af31e1c68311fb3718740489c6577248a48ed4ca4f40ad31942576d5e5fb07cc256d55c444eced2e9ffb4d8d4722601e35f9e4c796b6644cd19f9f2538a8b19db87e41fb27aeb2018bd7eebe474f9db60b959f6b0dc463f33e695e8abd0fbcc325e8604196a1920038097f94525b4c2953a96eee5775b84ed8550296a7a153ecd09d789a402870aee1855ee6f5eb1acd9e9904ce81f36c81012d3bc4aa4ae460b6a500c30f9154d46ef18e489b098f8178896dfdc9d720ea4b75abfb077df853b74e3d069a15fb2c2484f29db7e80aaddd99c492e32a809df3b0f569e345cf83cc365de73d292d7f8ab57a7f78e0de19744a3249cd20781e3e447df544fd959cf4efa7d55f26429052f0af2497b6202032ebd085e34352d19092ad9f51afa8afe22b712f49e55c14aa19ec05d72cb3e16f1381ef5d6a25b0d720f9a6cafddaf0876c36a88ff5dda9b222a81ac067ce7f8baa400754d875ea67b37701e3ff9456c31428c17d6181b625c067f1d12fa656a2ac27cca73f0c4ff5eeadeb68f794159195a17da36812135ce3b90c4fbe54ae00efb5d54931e132fc349816c2246434de5cff84987fa2bb0da42d1cfe6b3825b1a81c22489b42ca3bf917550ee70f35c22886f1b3710689cd2378d19576820bf0ee20db61d3f3bfe6cf259d19159fbfa1d501f749df477b5457bd62b32f1e3a08718d7b5ffe8810f049469018c6dcc7897a57371cbf005c33e4762d01f9cdf13ae780480fa529698c0059d301d92c07f8b81050e0d8b548ba43eb4b9d418ed03cafa0ec55227e9a0cee1153cc6276883190830b644442969d42127ce985ec7598e14349e53ad10c760ea9ff4cf59c7db06d70c319500f8d5f6c3c3d58564739e497df78012a9315db9b964dedd9fccbc4f8706cb8946eac4b437cf40ec815ca0f755d373408b5e4b3fb08f1b4005c0c2c41eadd84fc326c0aebf2e0655fdb6fca7dc80d49fc72e0246b2feb2cba2f5e0d11eab2c4db9b7bd3bb8e69b15a1062df3117de666cbfdfdfd0ba1f73e96253a969896003d181d54444b51b8934e33d58a5a383ebb66048a8901c68ac9890d4e008349d0db4d3f6017e92e29aa7475450f678210f3caa4bd1dfe07dabf94c853f78ed1a5d0ad14dee7e9e11bc0b870aa1bd4bf37a6176a9f8b0adcf906cc55a079997de1582a2084f876d8933aa7cebd263d9512bdd6280da1a3857797e21e1643fb7a27028ca24fc253240b66d16ce6981f354066b21a0200d0c8dec0105296455c7285d5e3e3d2ec8a16d79a1bb6bdf45e8ced6dd4545cc45ea47f2e8b99d36451dec2d11b267065b15c959837fe8b66d483fb5f9e69a2081ecd6dffab69f84f33f456ecab297a18c5d001bd210d20a35dd91f2d12b916a80a7f6604570a1f881afbb4678801bc298dd09dec79762425e3fd291e5037e09dd5b7840ed69c199572a3c028d716dedd6ad1ad3e5bd417dfc2b7d394f7e0ef018d4a0c9aadd0a7dd7e72b9216c5776f4ab175f42e043d735f534fee51c9b71d131cb8275bcb29dfa3b495d2c1ddcb01b61260ffaea7cdcc9515f7dc9d9293529518854f0f720565299bf5102b39966551483950476f5cc8e587c6489992562456f9331ae2740e8779d1d32dbcb3dce40b58a9cf7bd242d905411c4bdbf84b2c3f1b6dd0ef29ecfb62504c121874e287dfc1d3ccde5d527e798f0326fe1e2876af5b62bef500305527316190c58746065cbe452c26339a37636b416f01df8d"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ca7aa19526607d77d5e675b5bf760f7f1755b9e3c4fb5d3417cb8a91093bd3c4a4"}}, @TIPC_NLA_NODE_ID={0x56, 0x3, "0d6afcbec1d71c5d333f61647339746e96d91cc1d9d50343cb5367afef59d5ca52ca7e8285fbda0cbc3c94b64e9852f5a447296a245f5681ada7fcbf572070260efcd22fa5ec0a9923ce83269f4b330a855b"}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x649}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}]}]}, 0x1154}, 0x1, 0x0, 0x0, 0x4880}, 0x10) r8 = accept(r4, &(0x7f0000001b00), &(0x7f0000001b80)=0x80) setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000001bc0)=0x8, 0x4) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000001c00)=0x6, 0x2) 23:31:15 executing program 7: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3128441, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, '--{'}}, {@loose}, {@afid={'afid', 0x3d, 0x7}}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@afid}, {@noextend}, {@debug={'debug', 0x3d, 0x1}}, {@msize={'msize', 0x3d, 0x4}}], [{@euid_gt={'euid>', 0xee00}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}}) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000001c0)=0x8, &(0x7f0000000200)=0x4) r0 = accept(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000002c0)=0x80) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000300)=0x1, 0x4) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x600, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000440)={0x401}, 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xbb3}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xffffffff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7fff}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x100}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x300000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x2}, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x4}}, @l2tp={0x2, 0x0, @loopback, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0xdc, 0x6}) bind$packet(r1, &(0x7f0000000640)={0x11, 0xf5}, 0x14) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000680)={0x200, 0x8, 0x2, 0x6, 0xff, "f87a3e44f5b9f9c4529fbaeb87b49cd8cac4c2", 0x8001, 0x10000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000084}, 0x11) r3 = accept(r0, &(0x7f0000000800)=@sco={0x1f, @fixed}, &(0x7f0000000880)=0x80) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000008c0)=0x1000, 0x2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x74, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8001}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x40}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7fff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xd24}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1f}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0xc000}, 0x2008085) r4 = socket$packet(0x11, 0x3, 0x300) connect$packet(r4, &(0x7f0000000a40)={0x11, 0xf6, 0x0, 0x1, 0x7f, 0x6, @random="d68c5166796c"}, 0x14) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x82a}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x66a}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20102240}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044000}, 0x40809) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000009}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x64, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8000}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) [ 112.141057] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.145985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.148817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.156795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.160111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.201048] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.207150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.209859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.217827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.223958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.225846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.229864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.248264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.252010] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.264579] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.270784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.279612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.279618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.288945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.315144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.317250] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.319150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.348551] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.364873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.402539] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.411890] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.427043] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.441240] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 112.451198] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.463176] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 112.485667] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 112.492738] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.497813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.499875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 112.505448] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 112.518333] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 112.546325] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 112.573805] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 112.628975] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 112.635192] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.198846] Bluetooth: hci0: command tx timeout [ 114.261555] Bluetooth: hci1: command tx timeout [ 114.453669] Bluetooth: hci2: command tx timeout [ 114.517882] Bluetooth: hci3: command tx timeout [ 114.583420] Bluetooth: hci5: command tx timeout [ 114.584068] Bluetooth: hci6: command tx timeout [ 114.585030] Bluetooth: hci4: command tx timeout [ 114.710610] Bluetooth: hci7: command tx timeout [ 116.246176] Bluetooth: hci0: command tx timeout [ 116.309569] Bluetooth: hci1: command tx timeout [ 116.502448] Bluetooth: hci2: command tx timeout [ 116.566555] Bluetooth: hci3: command tx timeout [ 116.630812] Bluetooth: hci4: command tx timeout [ 116.631278] Bluetooth: hci6: command tx timeout [ 116.632404] Bluetooth: hci5: command tx timeout [ 116.758843] Bluetooth: hci7: command tx timeout [ 118.294431] Bluetooth: hci0: command tx timeout [ 118.358564] Bluetooth: hci1: command tx timeout [ 118.551505] Bluetooth: hci2: command tx timeout [ 118.613658] Bluetooth: hci3: command tx timeout [ 118.677487] Bluetooth: hci4: command tx timeout [ 118.677970] Bluetooth: hci5: command tx timeout [ 118.678013] Bluetooth: hci6: command tx timeout [ 118.806420] Bluetooth: hci7: command tx timeout [ 120.341642] Bluetooth: hci0: command tx timeout [ 120.406793] Bluetooth: hci1: command tx timeout [ 120.598455] Bluetooth: hci2: command tx timeout [ 120.663446] Bluetooth: hci3: command tx timeout [ 120.725634] Bluetooth: hci6: command tx timeout [ 120.727020] Bluetooth: hci4: command tx timeout [ 120.728964] Bluetooth: hci5: command tx timeout [ 120.853432] Bluetooth: hci7: command tx timeout [ 174.497430] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.498972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.500151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.502658] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.504205] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.594718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.597704] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.602138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.608493] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.616811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.678779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.700161] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.704285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.717829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.721726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.725075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.728651] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.730202] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.734928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.746504] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.794172] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.802691] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.814954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.836171] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.854843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.862107] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.862151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.870247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.912770] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.935769] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.947171] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.948608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.954081] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.971792] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.000821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.020873] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.042799] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.044603] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.070950] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.134145] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.534103] Bluetooth: hci0: command tx timeout [ 176.661751] Bluetooth: hci2: command tx timeout [ 176.789874] Bluetooth: hci1: command tx timeout [ 176.853641] Bluetooth: hci3: command tx timeout [ 176.981477] Bluetooth: hci4: command tx timeout [ 177.045623] Bluetooth: hci5: command tx timeout [ 177.173512] Bluetooth: hci7: command tx timeout [ 177.237478] Bluetooth: hci6: command tx timeout [ 178.581670] Bluetooth: hci0: command tx timeout [ 178.711184] Bluetooth: hci2: command tx timeout [ 178.837589] Bluetooth: hci1: command tx timeout [ 178.902583] Bluetooth: hci3: command tx timeout [ 179.029446] Bluetooth: hci4: command tx timeout [ 179.094415] Bluetooth: hci5: command tx timeout [ 179.221609] Bluetooth: hci7: command tx timeout [ 179.285485] Bluetooth: hci6: command tx timeout [ 180.629666] Bluetooth: hci0: command tx timeout [ 180.757447] Bluetooth: hci2: command tx timeout [ 180.888163] Bluetooth: hci1: command tx timeout [ 180.950500] Bluetooth: hci3: command tx timeout [ 181.078392] Bluetooth: hci4: command tx timeout [ 181.142452] Bluetooth: hci5: command tx timeout [ 181.270524] Bluetooth: hci7: command tx timeout [ 181.334778] Bluetooth: hci6: command tx timeout [ 182.679905] Bluetooth: hci0: command tx timeout [ 182.806480] Bluetooth: hci2: command tx timeout [ 182.935037] Bluetooth: hci1: command tx timeout [ 182.999443] Bluetooth: hci3: command tx timeout [ 183.126044] Bluetooth: hci4: command tx timeout [ 183.189432] Bluetooth: hci5: command tx timeout [ 183.319305] Bluetooth: hci7: command tx timeout [ 183.381814] Bluetooth: hci6: command tx timeout [ 236.836581] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.846197] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.850120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.857900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.861261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.901236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.906223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.908489] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.913623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.917780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.011820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.020062] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.027923] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.039132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.057078] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.263769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.264984] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.269996] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.272247] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.292408] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.295251] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.323231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.329904] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.352466] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.355028] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.370283] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.373210] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.376010] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.382888] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 237.390564] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.397299] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.427268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.429219] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 237.471910] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 237.481799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.525717] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.530335] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.553935] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 237.587607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 237.596978] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.934606] Bluetooth: hci0: command tx timeout [ 238.998459] Bluetooth: hci1: command tx timeout [ 239.125442] Bluetooth: hci2: command tx timeout [ 239.510625] Bluetooth: hci4: command tx timeout [ 239.573534] Bluetooth: hci3: command tx timeout [ 239.574543] Bluetooth: hci7: command tx timeout [ 239.637891] Bluetooth: hci5: command tx timeout [ 239.765848] Bluetooth: hci6: command tx timeout [ 240.983649] Bluetooth: hci0: command tx timeout [ 241.045411] Bluetooth: hci1: command tx timeout [ 241.174873] Bluetooth: hci2: command tx timeout [ 241.558746] Bluetooth: hci4: command tx timeout [ 241.622439] Bluetooth: hci7: command tx timeout [ 241.622883] Bluetooth: hci3: command tx timeout [ 241.686435] Bluetooth: hci5: command tx timeout [ 241.813565] Bluetooth: hci6: command tx timeout [ 243.031395] Bluetooth: hci0: command tx timeout [ 243.095675] Bluetooth: hci1: command tx timeout [ 243.222869] Bluetooth: hci2: command tx timeout [ 243.606423] Bluetooth: hci4: command tx timeout [ 243.670454] Bluetooth: hci7: command tx timeout [ 243.670910] Bluetooth: hci3: command tx timeout [ 243.733467] Bluetooth: hci5: command tx timeout [ 243.862445] Bluetooth: hci6: command tx timeout [ 245.078691] Bluetooth: hci0: command tx timeout [ 245.142638] Bluetooth: hci1: command tx timeout [ 245.269426] Bluetooth: hci2: command tx timeout [ 245.654467] Bluetooth: hci4: command tx timeout [ 245.720243] Bluetooth: hci3: command tx timeout [ 245.720697] Bluetooth: hci7: command tx timeout [ 245.782508] Bluetooth: hci5: command tx timeout [ 245.910796] Bluetooth: hci6: command tx timeout [ 299.268831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.274875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.278125] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.284562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.289064] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.292017] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.297101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.304495] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.318765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.325007] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.391486] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.409517] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.411970] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.421292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.437641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.514275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.570972] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.587669] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.609890] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.629209] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.634644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.652859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.685114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.692754] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.709289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.713156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.718870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.736588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.740431] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.743267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.745179] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.751768] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.753216] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.765333] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.789109] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.797065] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.802934] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.812632] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.815298] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.821877] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.398452] Bluetooth: hci1: command tx timeout [ 301.398483] Bluetooth: hci0: command tx timeout [ 301.525518] Bluetooth: hci2: command tx timeout [ 301.781593] Bluetooth: hci4: command tx timeout [ 301.781716] Bluetooth: hci3: command tx timeout [ 301.909475] Bluetooth: hci5: command tx timeout [ 301.909511] Bluetooth: hci6: command tx timeout [ 301.973475] Bluetooth: hci7: command tx timeout [ 303.445520] Bluetooth: hci1: command tx timeout [ 303.447020] Bluetooth: hci0: command tx timeout [ 303.574403] Bluetooth: hci2: command tx timeout [ 303.830597] Bluetooth: hci4: command tx timeout [ 303.832055] Bluetooth: hci3: command tx timeout [ 303.957540] Bluetooth: hci5: command tx timeout [ 303.958503] Bluetooth: hci6: command tx timeout [ 304.022429] Bluetooth: hci7: command tx timeout [ 305.496833] Bluetooth: hci0: command tx timeout [ 305.497875] Bluetooth: hci1: command tx timeout [ 305.622521] Bluetooth: hci2: command tx timeout [ 305.877797] Bluetooth: hci3: command tx timeout [ 305.878915] Bluetooth: hci4: command tx timeout [ 306.005530] Bluetooth: hci5: command tx timeout [ 306.006427] Bluetooth: hci6: command tx timeout [ 306.069506] Bluetooth: hci7: command tx timeout [ 307.542610] Bluetooth: hci1: command tx timeout [ 307.544493] Bluetooth: hci0: command tx timeout [ 307.669931] Bluetooth: hci2: command tx timeout [ 307.925629] Bluetooth: hci3: command tx timeout [ 307.926983] Bluetooth: hci4: command tx timeout [ 308.054771] Bluetooth: hci5: command tx timeout [ 308.056027] Bluetooth: hci6: command tx timeout [ 308.118246] Bluetooth: hci7: command tx timeout [ 361.579829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.586715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.592629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.604986] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.613282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.774104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.777159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.783602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.792844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.798078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.927696] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.933944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.940031] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.956787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.961901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.006064] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.033026] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.041119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.095195] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.136830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.178793] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.183214] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.206322] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.216101] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.218593] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.221181] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.223963] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.237190] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.242957] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.261748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.289726] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.295015] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.299167] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.302858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.310493] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.324010] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.326977] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 362.330897] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.336989] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.394132] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 363.669619] Bluetooth: hci0: command tx timeout [ 363.862777] Bluetooth: hci1: command tx timeout [ 363.990603] Bluetooth: hci2: command tx timeout [ 364.309459] Bluetooth: hci3: command tx timeout [ 364.438480] Bluetooth: hci4: command tx timeout [ 364.501550] Bluetooth: hci7: command tx timeout [ 364.502831] Bluetooth: hci6: command tx timeout [ 364.630655] Bluetooth: hci5: command tx timeout [ 365.719083] Bluetooth: hci0: command tx timeout [ 365.909655] Bluetooth: hci1: command tx timeout [ 366.037707] Bluetooth: hci2: command tx timeout [ 366.357635] Bluetooth: hci3: command tx timeout [ 366.485710] Bluetooth: hci4: command tx timeout [ 366.549962] Bluetooth: hci6: command tx timeout [ 366.550735] Bluetooth: hci7: command tx timeout [ 366.677499] Bluetooth: hci5: command tx timeout [ 367.767805] Bluetooth: hci0: command tx timeout [ 367.958744] Bluetooth: hci1: command tx timeout [ 368.086683] Bluetooth: hci2: command tx timeout [ 368.406624] Bluetooth: hci3: command tx timeout [ 368.535412] Bluetooth: hci4: command tx timeout [ 368.599619] Bluetooth: hci6: command tx timeout [ 368.600056] Bluetooth: hci7: command tx timeout [ 368.725417] Bluetooth: hci5: command tx timeout [ 369.815326] Bluetooth: hci0: command tx timeout [ 370.006411] Bluetooth: hci1: command tx timeout [ 370.133593] Bluetooth: hci2: command tx timeout [ 370.454873] Bluetooth: hci3: command tx timeout [ 370.582402] Bluetooth: hci4: command tx timeout [ 370.645532] Bluetooth: hci6: command tx timeout [ 370.646002] Bluetooth: hci7: command tx timeout [ 370.774429] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 23:36:17 Registers: info registers vcpu 0 RAX=fffffffffae42bc6 RBX=ffffffff8646ca04 RCX=ffffffff812af5b6 RDX=0000000000000000 RSI=ffffffff867aec32 RDI=ffffffff8646c9f4 RBP=ffffffff8646c9f4 RSP=ffff88806ce08970 R8 =ffffffff867aec32 R9 =0000000000000000 R10=000000000003b6ad R11=00000000000037c3 R12=ffffffff8646ca14 R13=ffffffff8646c9f4 R14=ffffffff8646c9f4 R15=dffffc0000000000 RIP=ffffffff81353253 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9987430028 CR3=0000000029dd8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff867aec32 RDX=0000000000000008 RSI=ffff888033bdff00 RDI=ffff88806cf08a98 RBP=ffff88806cf08af0 RSP=ffff88806cf08a08 R8 =0000000000000001 R9 =ffff88806cf08ad8 R10=000000000003b6ad R11=00000000000037c3 R12=ffff88806cf08af8 R13=ffff88806cf08ae0 R14=ffff888033bdff00 R15=ffff88806cf08a98 RIP=ffffffff813539b0 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3e2940f1f0 CR3=000000002a6c2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000