Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:30597' (ECDSA) to the list of known hosts.
2025/06/09 09:46:46 fuzzer started
2025/06/09 09:46:47 dialing manager at localhost:40003
syzkaller login: [  100.934508] cgroup: Unknown subsys name 'net'
[  101.069475] cgroup: Unknown subsys name 'cpuset'
[  101.105638] cgroup: Unknown subsys name 'rlimit'
2025/06/09 09:47:09 syscalls: 202
2025/06/09 09:47:09 code coverage: enabled
2025/06/09 09:47:09 comparison tracing: enabled
2025/06/09 09:47:09 extra coverage: enabled
2025/06/09 09:47:09 setuid sandbox: enabled
2025/06/09 09:47:09 namespace sandbox: enabled
2025/06/09 09:47:09 Android sandbox: enabled
2025/06/09 09:47:09 fault injection: enabled
2025/06/09 09:47:09 leak checking: enabled
2025/06/09 09:47:09 net packet injection: enabled
2025/06/09 09:47:09 net device setup: enabled
2025/06/09 09:47:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/09 09:47:09 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/09 09:47:09 USB emulation: enabled
2025/06/09 09:47:09 hci packet injection: enabled
2025/06/09 09:47:09 wifi device emulation: enabled
2025/06/09 09:47:09 802.15.4 emulation: enabled
2025/06/09 09:47:09 fetching corpus: 0, signal 0/0 (executing program)
2025/06/09 09:47:11 starting 8 fuzzer processes
09:47:11 executing program 0:
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x44, 0x7d, 0x1, {0x0, 0x3d, 0x401, 0x3, {0x951a6d9180814775, 0x0, 0x6}, 0x84000000, 0x4, 0x2, 0x5, 0x0, '', 0x2, '@[', 0x6, '\x03*}*\x1d\'', 0x2, '^&'}}, 0x44)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7)
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7)
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7)
r0 = syz_io_uring_complete(0x0)
write$P9_RVERSION(r0, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x6cab3f34, 0x6, '9P2000'}, 0x13)
ioctl$CDROMREADTOCENTRY(r0, 0x5306, &(0x7f0000000180)={0x5, 0x4, 0xa, 0x0, @lba=0x10000, 0xfe})
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x2f40, 0xfffffffa, 0x5, 0x3112b783, 0x10001, 0x1, 0x4}, 0x1c)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x44800)
write$P9_RSTATu(r1, &(0x7f0000000240)={0x54, 0x7d, 0x1, {{0x0, 0x39, 0x1, 0x2, {0x2, 0x1, 0x8}, 0x2010000, 0x7ff, 0xb3, 0x9, 0x4, ']\\^{', 0x0, '', 0x2, '@['}, 0x6, '9P2000', 0xee01, 0xee01, 0xee00}}, 0x54)
inotify_init1(0x800)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000002c0)={0xf, 0x7, 0x1, {{0x2, '@['}, 0xffffffff}}, 0xf)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0x500, 0xf8, 0x2, 0x1000}, {0x1000, 0x1, 0x5, 0x2}, {0x81, 0x3, 0x20, 0x5}, {0x2, 0x8, 0x4, 0x7}, {0x1f, 0x9, 0xe0, 0x401}]}, 0x10)
write$P9_RCLUNK(r0, &(0x7f0000000380)={0x7, 0x79, 0x2}, 0x7)
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0)
ioctl$CDROMREADAUDIO(r2, 0x530e, &(0x7f0000000440)={@lba=0xc3, 0x0, 0x19, &(0x7f0000000400)=""/25})
pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0xc4000)
write$P9_RLCREATE(r3, &(0x7f00000004c0)={0x18, 0xf, 0x2, {{0x1, 0x2, 0x6}, 0x6}}, 0x18)
r4 = inotify_init()
inotify_rm_watch(r4, 0x0)

09:47:11 executing program 1:
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmget(0x0, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil)
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x5, 0x80000001, 0x5)
get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0xfffffffffffffffc, &(0x7f0000ff9000/0x7000)=nil, 0x4)
munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x4010, 0xffffffffffffffff, 0x6)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x10050, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x33bf, &(0x7f00000000c0)={0x0, 0xbf67, 0x2, 0x1, 0x4d}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000001c0))
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xd155)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240)="4b4a2eccf788ca061f1cbfdc7fb54d0b799f9a2134c7c32eb2b3fd481aa07e463debeee3eee075b90d62cdcbd1fb8fd0a2ece16d44090126e100b01597e9fa56bcdf1174a08a0892a8c99148bde4db6021823a1586f718ff7bf34bf2396ec914921c79d5aaba9225f39bbd3800c9ee638c68cf02b5099bedfc9f38ff3e19d87032e6cf0a3a96b186b354835f1db302f35033be6b10ce94e647ff16b0cf8c0f8c810a8e234c0966d755d01c1bc86d02be05e888cc595fdad20389b09741480d0246157f6d02cff33fda5d9fa904c88e9cc039b8463484ec2cbf226a2eb54bbc4c8196e3a1dd", 0xe5, r3}, 0x68)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000003c0))
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x10, r4, 0x6edce000)
r5 = syz_io_uring_complete(r1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/231, 0xe7, 0x0, &(0x7f0000000500)=""/191, 0xbf}, &(0x7f0000000600)=0x40)
write$P9_RREADDIR(r0, &(0x7f0000000640)={0xa6, 0x29, 0x2, {0x6341, [{{0x0, 0x3}, 0xfff, 0x1, 0x7, './file0'}, {{0x1, 0x1, 0x7}, 0x6, 0x4, 0x7, './file0'}, {{0x20, 0x2, 0x2}, 0x3, 0x1, 0x7, './file0'}, {{0x8, 0x1, 0x1}, 0x8000, 0x80, 0x7, './file0'}, {{0x4, 0x2, 0x2}, 0x5, 0x5, 0x7, './file0'}]}}, 0xa6)

09:47:11 executing program 2:
r0 = syz_io_uring_complete(0x0)
write$P9_ROPEN(r0, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x8, 0x2, 0x5}, 0xfff}}, 0x18)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2d0, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72f}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ccfe755}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd44c}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeeee000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x164, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd5, 0x3, "c382353fe2f669c35e2de46fbb2314efa4b7e551deefda7a60366a75c0fb7364a509f06f04ce65a5bb6627aaa2fe2ee715d29b9ac06564f3333d9e6d899f7b8d79ab7b0ee79e027064e8f058b0c37bdd3b854bcdedbb240e0ab6368e078515d66c3f527697012ef187ebed64f23e87e51e8eecaa0b64af62f596fe11fbf3115cdfdd9a53d9ef1f54fed5cc053231f863e8d5c40fbcba28f2d3e5352991c9717b82b3c36da5a7d7d3b6384289ac6ebcc5bdf1a64c3cb75b1f2a5d20b1017f4a9a8e7252cd8f260a9435a1e9dfe73a9a30c9"}, @TIPC_NLA_NODE_ID={0x85, 0x3, "e5eabaff399aa7ae72f9244f90f42afb13a4dce5c23e74394a5096dc5d3e5d75323afdb8687a854efc14511d91e393a846b7e4283e43e03dbe875ff7eb14a30092707cc5a5efc21738ff56500e610e0a362e5b3f1ed94f8d815619a7b7c1a00ec65b9da3c2f48c72f27ffe8527df0387833818a714122c805258e2b1a6a493f1e0"}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x46a00000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x8eda36022148c84}, 0x4)
r1 = perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x1f, 0x16, 0x1, 0x5, 0x0, 0x40, 0x400, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x4, 0x5}, 0x2004, 0x9, 0x3f, 0x0, 0x7, 0x2, 0xffff, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x9)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0)
clock_getres(0x6, &(0x7f0000000480))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1)
r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x92, 0x300)
ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f0000000500)={0x40, 0x8, 0xcf, 0xd3, 0x81, 0x3})
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x30008841}, 0x4000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x70, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
write$P9_RREAD(r2, &(0x7f0000001200)={0x82, 0x75, 0x2, {0x77, "4ee931dd52150d2c7e208fa1ff59c0d98a19fcace978d1143c3c20ca739b9c4a63c1eee65e5e5a2e45a7d8d6c9a9c8afe10bf8812ac6adfacbdbb7b4fc1c032b4e5d2510967135b2bdce8c12d2b4c0ef52872212f389c997a0d740255ffd448cf93d90b4192efa8c31fe6968313499a96483cf31e9a70d"}}, 0x82)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001300), r3)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x7c, r5, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x743fdfa1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x48810)
getsockname$packet(r0, &(0x7f0000001480)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000014c0)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000001600)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x19400}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)={0x98, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
getsockname$packet(r2, &(0x7f0000001680)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000016c0)=0x14)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001940)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001700)={0x1e0, 0x12, 0x4, 0x70bd2c, 0x25dfdbfe, {0xb, 0x9, 0x9, 0x3a, {0x4e20, 0x4e22, [0x4, 0x8, 0x0, 0x9], [0x1, 0x8, 0xfffffff7, 0x6], r7, [0x5, 0x5]}, 0x0, 0x800}, [@INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "28adec5af63eb082fc3c550b13a9954d2d83a23e445671dea27f895462e7c75eb2670cbd47819d68ee46e3c7e23458d564199fa0b73cfb89592f548febaa7cf3673234b5b360165567dd0898ec28450535442ba55ef5f7bb436e26bc7ff495addebaf6c4c74bec0827803f476d3b456b6dc79c86714ad160b824234d5a2ba0e6958be1a04862e6d88775c8b70a5ec2942e969232b6dad28a"}, @INET_DIAG_REQ_BYTECODE={0xf8, 0x1, "484d930dd33ab5cc9d8ec9345c16045551eabdb4dbb61b92c0e1a2692efd17d303f44768d9f7fe7011d078d746f467131b62bb1903510baa5af1e1329560b816ed3a1e40fbdcbecb990c5deea1539a268a19018c732b24cbc56693fb40c53543546caea24e313a22f55f2681cd048aae7f8ff885d70f33f9fa57b32568b4ff6baca2ee99817cfbe99feea01295f29a1fa2377a220b28c66062974f3ddadf6220656280a9c3160fc9fb157769d90ef0ab4810e3163ef994201f168aa87c1691eff307b98d2a23bc0e52cf6bc10764bb2ec5f2c11ad7b1b4356e58343a66579c175001e6fde9684b48e63228353d1a0a5e404bf839"}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0x14)

09:47:11 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x20000)
write$P9_RREADDIR(r0, &(0x7f0000000040)={0x122, 0x29, 0x1, {0x1ff, [{{0x60, 0x1, 0x6}, 0x7fffffff, 0x2, 0x7, './file0'}, {{0x0, 0x2, 0x6}, 0x100000001, 0x81, 0x7, './file0'}, {{0x1, 0x2, 0x7}, 0xfffffffffffffffb, 0x4, 0x7, './file0'}, {{0x0, 0x0, 0x8}, 0x7fff, 0x80, 0x7, './file0'}, {{0x80, 0x0, 0x6}, 0x8, 0x3, 0x7, './file0'}, {{0x1, 0x0, 0x1}, 0x100000001, 0x1, 0x7, './file0'}, {{0x10, 0x1, 0x5}, 0x724, 0x16, 0x7, './file0'}, {{0xc3, 0x2, 0x8}, 0x4, 0x3, 0x7, './file0'}, {{0x2, 0x2, 0x2}, 0x7, 0x20, 0x7, './file0'}]}}, 0x122)
write$P9_RFLUSH(r0, &(0x7f0000000180)={0x7, 0x6d, 0x1}, 0x7)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', <r2=>0x0, 0x8, 0x40, 0x1, 0x7, {{0x36, 0x4, 0x1, 0x6, 0xd8, 0x67, 0x0, 0x3b, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1c}, {[@ssrr={0x89, 0x1f, 0x61, [@remote, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010100, @multicast1]}, @lsrr={0x83, 0x27, 0x93, [@dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010100, @private=0xa010102, @empty, @private=0xa010102, @broadcast, @remote, @loopback, @local]}, @cipso={0x86, 0x45, 0x3, [{0x6, 0x3, 'C'}, {0x5, 0xa, "78cd5dc65d8e8ca0"}, {0x0, 0xf, "aaa7b31f2aa02f294448782735"}, {0x5, 0x5, "b0eee2"}, {0x2, 0x9, "14601989854a1e"}, {0x0, 0x3, '*'}, {0x4, 0x8, "4cf4c4b50f86"}, {0x1, 0xa, "c38d04842f1b69f4"}]}, @generic={0x7, 0x2}, @generic={0x83, 0x7, "95517ae17b"}, @ssrr={0x89, 0xb, 0x95, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xb}]}, @rr={0x7, 0x17, 0xa4, [@dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x1e}, @local, @empty, @multicast2]}, @generic={0x82, 0x2}, @generic={0x83, 0xb, "205d922208d9821291"}, @end]}}}}})
r3 = accept4$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14, 0x800)
r5 = accept4$packet(r0, &(0x7f0000000440)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14, 0x80800)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'ip_vti0\x00', <r7=>0x0, 0x700, 0x10, 0x0, 0x7, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x66, 0x0, 0x9, 0x29, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4}, @cipso={0x86, 0x2b, 0x3, [{0x6, 0x10, "95e0981b5eab17c332a153d5dfff"}, {0x2, 0x3, "be"}, {0x5, 0x4, "7af6"}, {0x1, 0x2}, {0x4, 0xc, "381b2475bf3606efbe2a"}]}, @ssrr={0x89, 0x7, 0x51, [@rand_addr=0x64010102]}, @end]}}}}})
r8 = accept$packet(r0, &(0x7f0000000580)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x22c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8711c6f78a0d2139}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x8000}, 0x50)
connect$packet(r8, &(0x7f00000008c0)={0x11, 0x18, r4, 0x1, 0x0, 0x6, @random="ec9af6302d14"}, 0x14)
accept4$packet(r0, &(0x7f0000000940)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000980)=0x14, 0x80000)
getsockname$packet(r3, &(0x7f00000009c0)={0x11, 0x0, <r11=>0x0}, &(0x7f0000000a00)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000c80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)={0x1d4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x58, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xa63}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x401}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xf032}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0xc840)
write$P9_RLERRORu(r3, &(0x7f0000000e00)={0x17, 0x7, 0x1, {{0xa, '/dev/vcs#\x00'}, 0xc4}}, 0x17)
accept4$packet(r5, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e80)=0x14, 0x80800)
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000)
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000ec0)={r10, 0x1, 0x6, @remote}, 0x10)
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000f40)=""/181, 0xb5, 0x10000, 0x0, 0x0)

[  125.546480] audit: type=1400 audit(1749462431.881:7): avc:  denied  { execmem } for  pid=279 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:47:11 executing program 4:
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000000)={0xcc, 0x75, 0x1, {0xc1, "504d5b75b7eb7648564614f6314765daec477c2a1fdf268e7e81112235f2a0c9f0ee5c8f00f45204084105fbcf3a6a5afa93624dd0dc0d87b92edd80eaeea129a093b65d6d78225c48bd247f5e8308d00f4993d473b68c0724606176e34f9a3c3fe5266acc23edc1ea887a2b2aa7fa154353cb46ba09af890e034f4540ff2dc6742df953931d542ffe0f774270685304572325af55d6908003300ac7627382d7f285d85bba39880c0a8f147123d2d1babc6b9e9be9287cb5688e2b82917c1aafca"}}, 0xcc)
r0 = syz_io_uring_complete(0x0)
write$P9_RFSYNC(r0, &(0x7f0000000100)={0x7, 0x33, 0x2}, 0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040000}, 0x40000)
write$9p(r0, &(0x7f0000000240)="7e9739581be4f4715c88923c8aea06eb821a2af09c7319247a8082d249767bbd0e525b53550b13a262f8699242b48c904df640e06c3d477eb6440c82de2239388a1d7d", 0x43)
r2 = syz_io_uring_complete(0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2)
write$9p(r0, &(0x7f0000000300)="09a234fe", 0x4)
write$P9_RWRITE(r0, &(0x7f0000000340)={0xb, 0x77, 0x2, 0x7}, 0xb)
socketpair(0x11, 0x5, 0x7f, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x163f}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200080c0}, 0x40000)
write$P9_RSTATFS(r2, &(0x7f00000004c0)={0x43, 0x9, 0x1, {0x7, 0x8, 0x18d, 0x7, 0x3, 0x8, 0x5, 0xfffffffffffffff9, 0x2}}, 0x43)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r4)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb8, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x66}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xecd5}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x945efb1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}]}]}, 0xb8}}, 0x0)
r7 = syz_open_dev$hiddev(&(0x7f0000000700), 0xff, 0x18121)
ioctl$HIDIOCGDEVINFO(r7, 0x801c4803, &(0x7f0000000740)=""/8)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000840)={'tunl0\x00', &(0x7f0000000780)={'gretap0\x00', 0x0, 0xf830, 0x8000, 0x1bb, 0x100, {{0x25, 0x4, 0x3, 0x1, 0x94, 0x66, 0x0, 0x8d, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, {[@noop, @rr={0x7, 0x13, 0x53, [@broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp_prespec={0x44, 0x54, 0x19, 0x3, 0x5, [{@empty, 0x6}, {@rand_addr=0x64010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xbd}, {@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010100, 0x1}, {@local, 0x1}, {@multicast1, 0x80000000}, {@broadcast, 0x3e2bcc74}, {@multicast1, 0x100}, {@loopback, 0x3}]}, @timestamp={0x44, 0x18, 0xf7, 0x0, 0x0, [0x9, 0xfffffff9, 0xf68d, 0x1000, 0x3ff]}]}}}}})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x651935571c2e9ac}, 0x40000)

09:47:11 executing program 5:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x25ed0a7e}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20044810)
socketpair(0x2, 0xa, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x5)
syz_io_uring_setup(0xb1, &(0x7f00000002c0)={0x0, 0x5dbb, 0x0, 0x800, 0x1eb}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000380))
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x20010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x2, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1}, 0x1)
setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000440)=0x10000, 0x4)
recvfrom$packet(r2, &(0x7f0000000480)=""/4096, 0x1000, 0x1, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480), r1)
r6 = syz_open_dev$vcsn(&(0x7f00000014c0), 0x81, 0x80)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001500)=@req={0x7fff, 0x7, 0x3, 0x80000000}, 0x10)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000001680)={&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/154, 0x9a, 0x1, &(0x7f0000001600)=""/98, 0x62}, &(0x7f00000016c0)=0x40)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x114, &(0x7f0000001700), 0x0, 0x4)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0xbc, r5, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x93}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa4ea}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x17}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x385}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x4044071)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f00000018c0)={0x0, 0x1, 0x6, @random="feb12502afca"}, 0x10)
getsockopt$packet_int(r6, 0x107, 0x0, &(0x7f0000001900), &(0x7f0000001940)=0x4)
sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000020c0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002080)={&(0x7f00000019c0)={0x6b8, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5e8a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa4}]}, @TIPC_NLA_BEARER={0x150, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x20, @local, 0x401}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x8001, 0xf6, @private1, 0xffffffff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x58c, @loopback, 0x10001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xab3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x50}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffe0af}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x278, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe3, 0x3, "58c6eb70d3003c43de9030449fb0a0e8bba6eebc8c1a9f80f935cc77b8ec143de38e0eb211368671f0d857ed6c4d105b0a8acb99bd278f1460b13ff956e41d358936bf703a42c9ed59f44f0cece5ca3da446713e501359194bb9f7bcd49e25a5a8975abda9939f05e8236d5ccb3118e428815a33b940666f0cd74d79bc08b2b9d93d7cac3d2700cf2d31b20c6c7c7d159a93d60dd00b956ed5f95dda88ead80dfff67e4c35b9661ed3144384f3ce293c49958eb2c26764c6c28cb2512bfe91f099940523d06065d55e6bc72cfab5dd6fcef981b4dd128d3b7eefe220cbe123"}, @TIPC_NLA_NODE_ID={0x7e, 0x3, "f300ae36635ba2e79a3dc0a90504a06dc8b2a18997528161661f21eeb42d94c0081784e65b75d5b72d35490962b9b8c32220c442f23c475af3f97938a161bdc01fdb428490e1617f0d6a336d50e2ef4589ac67e289cd30022dc49121c959fa87ec1ff28fa146b9c81b02838c9d4199026c3671f5f541a793299f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc3, 0x3, "24fccae7d0c02a6b9d05f7606afcfb096f6b1f828f59eaab348f156730970e08a823dc69b23882b66701b5b41331134ed9d54ac0fd0954bbb075422191b78d3b02eab934a1ea57760b3416277d7d49bdcb1774c6693841fdb17535ec95181930fd1c2bee0986073a1fd5c8ef2399d01541bc0ae1c917da8342d5fa5963844fc0aa643e4f9c138eaee4a01abe61bf015ea5b9a6efce358de0e2284461da2f7d933edb7fd7ce3ed2b3e81e7c05eb8124b5782ca629e1f7bbfd4cd2ec0ee8d27f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x37, 0x3, "a0b6accc2d541615e5394d2d24e5182c95851acf1cfa5b49770e159a3eaf15022639e05733125a5f8aa42a5f6669aff393367b"}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc47}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcd34}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x38141f24}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8cb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xbb40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5c4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xde}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffe00}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x300}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80a5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x6b8}, 0x1, 0x0, 0x0, 0x8050}, 0x20000890)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000022c0)={&(0x7f0000002140)={0x154, r5, 0x100, 0xd0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe3ee}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @private2, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x80)

09:47:11 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1976d688}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc456}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc6b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x26}]}]}, 0x90}}, 0x10)
socketpair(0x22, 0x5, 0x6, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x120, r3, 0x109, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a5e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x790}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x47}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x400a001}, 0x90)
r4 = syz_io_uring_complete(0x0)
sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff97e4}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x47eb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x78}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x44000101}, 0x8000)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x17}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff00}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd10}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r5 = syz_io_uring_complete(0x0)
bind$packet(r5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x1, 0x1f, 0x6, @link_local}, 0x14)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r4)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000980)={&(0x7f00000006c0), 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1f0, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe00}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff0000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa963}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffc00}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a79}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46e4e7c1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8040)
accept$packet(r1, &(0x7f0000000ac0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14)
connect$packet(r2, &(0x7f0000000b40)={0x11, 0x5, r9, 0x1, 0x76, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x14)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xfffffe01}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40000)
socketpair(0x21, 0xa, 0x1, &(0x7f0000000c80)={<r10=>0xffffffffffffffff})
sendmsg$ETHTOOL_MSG_RINGS_GET(r10, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840)

09:47:12 executing program 7:
ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x10802, 0x0)
r0 = syz_io_uring_complete(0x0)
ioctl$CDROM_DEBUG(r0, 0x5330, 0x1)
ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5394, &(0x7f0000000040))
perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x8, 0x9, 0x20, 0x0, 0x6, 0x20882, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x6, 0x31dddab3}, 0x18248, 0x800, 0x9, 0x0, 0x100000000, 0x0, 0x8, 0x0, 0x101, 0x0, 0x20}, r0, 0xe, r0, 0x1b)
ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f0000000100)={0x20, 0x20})
ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000140))
ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000180))
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$CDROM_DEBUG(r1, 0x5330, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x238, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x497}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3fa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x301}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf27}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1dd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @empty, 0x400}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @empty, 0x80000001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xb01, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r3 = accept$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14)
getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14)
socketpair(0x2a, 0x4, 0x7, &(0x7f0000000640)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r0)
sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x20040004)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000800)={0x2, &(0x7f00000007c0)=[{0x20, 0x2, 0x0, 0x80000001}, {0x7, 0x20, 0x6, 0x7}]}, 0x10)
ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000840))

[  126.994124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.999525] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  127.008636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.011393] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.014013] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.016173] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  127.025141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.028209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.043782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  127.063087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  127.073975] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  127.077619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  127.096410] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  127.105633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  127.116922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  127.142778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  127.154999] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  127.168253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  127.173393] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  127.181101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  127.183897] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  127.186603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  127.191067] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  127.197414] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  127.199782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  127.206878] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  127.208369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  127.214261] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  127.214484] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  127.247575] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  127.288461] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  127.290632] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  127.296335] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  127.298075] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  127.302368] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  127.303767] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  127.324868] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  127.331124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  127.332726] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  127.341365] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  129.080251] Bluetooth: hci1: command tx timeout
[  129.143793] Bluetooth: hci2: command tx timeout
[  129.144503] Bluetooth: hci0: command tx timeout
[  129.272816] Bluetooth: hci6: command tx timeout
[  129.273552] Bluetooth: hci4: command tx timeout
[  129.400728] Bluetooth: hci3: command tx timeout
[  129.463787] Bluetooth: hci5: command tx timeout
[  129.464417] Bluetooth: hci7: command tx timeout
[  131.128472] Bluetooth: hci1: command tx timeout
[  131.192455] Bluetooth: hci2: command tx timeout
[  131.193163] Bluetooth: hci0: command tx timeout
[  131.321920] Bluetooth: hci4: command tx timeout
[  131.322424] Bluetooth: hci6: command tx timeout
[  131.447947] Bluetooth: hci3: command tx timeout
[  131.511899] Bluetooth: hci7: command tx timeout
[  131.512770] Bluetooth: hci5: command tx timeout
[  133.176777] Bluetooth: hci1: command tx timeout
[  133.240145] Bluetooth: hci0: command tx timeout
[  133.240851] Bluetooth: hci2: command tx timeout
[  133.368526] Bluetooth: hci6: command tx timeout
[  133.369170] Bluetooth: hci4: command tx timeout
[  133.495885] Bluetooth: hci3: command tx timeout
[  133.559782] Bluetooth: hci7: command tx timeout
[  133.560297] Bluetooth: hci5: command tx timeout
[  135.223757] Bluetooth: hci1: command tx timeout
[  135.287878] Bluetooth: hci2: command tx timeout
[  135.288311] Bluetooth: hci0: command tx timeout
[  135.415866] Bluetooth: hci6: command tx timeout
[  135.416309] Bluetooth: hci4: command tx timeout
[  135.543759] Bluetooth: hci3: command tx timeout
[  135.607935] Bluetooth: hci5: command tx timeout
[  135.608361] Bluetooth: hci7: command tx timeout
[  189.784789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.804203] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.820385] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.834071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.843258] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.874014] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  189.897943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  189.912267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  189.915341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  189.917577] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  189.921583] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  189.928312] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  189.932469] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.936065] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  189.937972] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.944289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.946713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  189.947095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  189.953739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  189.960789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  189.974947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  190.005270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  190.019101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  190.075447] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  190.077552] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  190.087588] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  190.089536] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  190.099266] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  190.102242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  190.106987] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  190.115233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  190.134292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  190.138273] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  190.151473] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  190.162568] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  190.167030] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  190.182937] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  190.209027] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  190.258882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  190.283376] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  191.927807] Bluetooth: hci0: command tx timeout
[  191.992092] Bluetooth: hci2: command tx timeout
[  192.055871] Bluetooth: hci1: command tx timeout
[  192.055915] Bluetooth: hci4: command tx timeout
[  192.248017] Bluetooth: hci3: command tx timeout
[  192.314762] Bluetooth: hci5: command tx timeout
[  192.376076] Bluetooth: hci7: command tx timeout
[  192.377287] Bluetooth: hci6: command tx timeout
[  193.977789] Bluetooth: hci0: command tx timeout
[  194.040896] Bluetooth: hci2: command tx timeout
[  194.103822] Bluetooth: hci4: command tx timeout
[  194.105281] Bluetooth: hci1: command tx timeout
[  194.295881] Bluetooth: hci3: command tx timeout
[  194.360161] Bluetooth: hci5: command tx timeout
[  194.424013] Bluetooth: hci6: command tx timeout
[  194.425773] Bluetooth: hci7: command tx timeout
[  196.023945] Bluetooth: hci0: command tx timeout
[  196.087900] Bluetooth: hci2: command tx timeout
[  196.151826] Bluetooth: hci1: command tx timeout
[  196.151844] Bluetooth: hci4: command tx timeout
[  196.344729] Bluetooth: hci3: command tx timeout
[  196.408330] Bluetooth: hci5: command tx timeout
[  196.471968] Bluetooth: hci7: command tx timeout
[  196.472457] Bluetooth: hci6: command tx timeout
[  198.073735] Bluetooth: hci0: command tx timeout
[  198.135983] Bluetooth: hci2: command tx timeout
[  198.199844] Bluetooth: hci4: command tx timeout
[  198.199958] Bluetooth: hci1: command tx timeout
[  198.392767] Bluetooth: hci3: command tx timeout
[  198.456899] Bluetooth: hci5: command tx timeout
[  198.520764] Bluetooth: hci6: command tx timeout
[  198.521623] Bluetooth: hci7: command tx timeout
[  251.725339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  251.730509] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  251.744031] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  251.754947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  251.764591] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  251.914632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  251.917451] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  251.921510] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  251.932899] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  251.941326] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  251.994753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  252.002291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  252.005277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  252.011132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  252.014572] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  252.160361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  252.173168] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  252.190579] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  252.228977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  252.243115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  252.248185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  252.264336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  252.270833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  252.273625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  252.294188] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  252.300419] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  252.310614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  252.312715] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  252.316321] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  252.319823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  252.322486] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  252.350265] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  252.353656] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  252.359154] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  252.363425] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  252.371879] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  252.394126] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  252.402278] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  252.482629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  252.487131] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  253.817189] Bluetooth: hci0: command tx timeout
[  254.008758] Bluetooth: hci1: command tx timeout
[  254.073805] Bluetooth: hci2: command tx timeout
[  254.328819] Bluetooth: hci3: command tx timeout
[  254.455822] Bluetooth: hci4: command tx timeout
[  254.521423] Bluetooth: hci6: command tx timeout
[  254.583823] Bluetooth: hci7: command tx timeout
[  254.648741] Bluetooth: hci5: command tx timeout
[  255.865789] Bluetooth: hci0: command tx timeout
[  256.057086] Bluetooth: hci1: command tx timeout
[  256.119896] Bluetooth: hci2: command tx timeout
[  256.376763] Bluetooth: hci3: command tx timeout
[  256.504919] Bluetooth: hci4: command tx timeout
[  256.567751] Bluetooth: hci6: command tx timeout
[  256.632881] Bluetooth: hci7: command tx timeout
[  256.696798] Bluetooth: hci5: command tx timeout
[  257.912448] Bluetooth: hci0: command tx timeout
[  258.106717] Bluetooth: hci1: command tx timeout
[  258.168892] Bluetooth: hci2: command tx timeout
[  258.425203] Bluetooth: hci3: command tx timeout
[  258.553707] Bluetooth: hci4: command tx timeout
[  258.616724] Bluetooth: hci6: command tx timeout
[  258.680933] Bluetooth: hci7: command tx timeout
[  258.745961] Bluetooth: hci5: command tx timeout
[  259.960906] Bluetooth: hci0: command tx timeout
[  260.151780] Bluetooth: hci1: command tx timeout
[  260.216758] Bluetooth: hci2: command tx timeout
[  260.472751] Bluetooth: hci3: command tx timeout
[  260.600843] Bluetooth: hci4: command tx timeout
[  260.665992] Bluetooth: hci6: command tx timeout
[  260.727797] Bluetooth: hci7: command tx timeout
[  260.791894] Bluetooth: hci5: command tx timeout
[  314.189570] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  314.197596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  314.202091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  314.214305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  314.222206] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  314.261755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  314.265244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  314.267510] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  314.279636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  314.286369] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  314.330896] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  314.338342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  314.346252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  314.359236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  314.371210] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  314.608185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  314.614306] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  314.645989] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  314.684552] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  314.692734] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  314.701723] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  314.703196] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  314.726580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  314.727533] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  314.736858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  314.744250] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  314.756797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  314.764516] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  314.767996] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  314.783296] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  314.789028] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  314.798917] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  314.816974] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  314.818981] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  314.819615] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  314.838502] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  314.843287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  314.870409] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  314.904569] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  314.907931] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  316.279777] Bluetooth: hci0: command tx timeout
[  316.345763] Bluetooth: hci1: command tx timeout
[  316.472756] Bluetooth: hci2: command tx timeout
[  316.792957] Bluetooth: hci3: command tx timeout
[  316.919758] Bluetooth: hci6: command tx timeout
[  316.984238] Bluetooth: hci5: command tx timeout
[  316.984909] Bluetooth: hci4: command tx timeout
[  316.985000] Bluetooth: hci7: command tx timeout
[  318.329009] Bluetooth: hci0: command tx timeout
[  318.392097] Bluetooth: hci1: command tx timeout
[  318.522707] Bluetooth: hci2: command tx timeout
[  318.840069] Bluetooth: hci3: command tx timeout
[  318.967771] Bluetooth: hci6: command tx timeout
[  319.031990] Bluetooth: hci5: command tx timeout
[  319.032448] Bluetooth: hci4: command tx timeout
[  319.033040] Bluetooth: hci7: command tx timeout
[  320.376018] Bluetooth: hci0: command tx timeout
[  320.441604] Bluetooth: hci1: command tx timeout
[  320.568057] Bluetooth: hci2: command tx timeout
[  320.888701] Bluetooth: hci3: command tx timeout
[  321.015927] Bluetooth: hci6: command tx timeout
[  321.079765] Bluetooth: hci7: command tx timeout
[  321.080226] Bluetooth: hci5: command tx timeout
[  321.080702] Bluetooth: hci4: command tx timeout
[  322.424151] Bluetooth: hci0: command tx timeout
[  322.487748] Bluetooth: hci1: command tx timeout
[  322.616572] Bluetooth: hci2: command tx timeout
[  322.936792] Bluetooth: hci3: command tx timeout
[  323.063734] Bluetooth: hci6: command tx timeout
[  323.128785] Bluetooth: hci4: command tx timeout
[  323.129219] Bluetooth: hci5: command tx timeout
[  323.129646] Bluetooth: hci7: command tx timeout
[  376.592884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.599831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.604641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  376.613465] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  376.622525] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.748837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.756223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.760405] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.767472] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.772201] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  376.822738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  376.833190] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  376.836228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  376.847350] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  376.854280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  377.033369] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  377.040223] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  377.047221] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  377.052250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  377.056406] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  377.102179] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  377.160866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  377.203489] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  377.213186] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  377.218414] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  377.234161] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  377.236522] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  377.241565] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  377.241587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  377.245650] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  377.250166] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  377.258285] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  377.262183] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  377.265109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  377.280596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  377.292161] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  377.299152] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  377.305019] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  377.316925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  377.321653] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  378.679989] Bluetooth: hci0: command tx timeout
[  378.808689] Bluetooth: hci1: command tx timeout
[  378.936065] Bluetooth: hci2: command tx timeout
[  379.191799] Bluetooth: hci3: command tx timeout
[  379.385715] Bluetooth: hci6: command tx timeout
[  379.385937] Bluetooth: hci7: command tx timeout
[  379.449836] Bluetooth: hci5: command tx timeout
[  379.511828] Bluetooth: hci4: command tx timeout
[  380.727815] Bluetooth: hci0: command tx timeout
[  380.857268] Bluetooth: hci1: command tx timeout
[  380.985794] Bluetooth: hci2: command tx timeout
[  381.239944] Bluetooth: hci3: command tx timeout
[  381.432197] Bluetooth: hci6: command tx timeout
[  381.432281] Bluetooth: hci7: command tx timeout
[  381.495861] Bluetooth: hci5: command tx timeout
[  381.559851] Bluetooth: hci4: command tx timeout
[  382.776214] Bluetooth: hci0: command tx timeout
[  382.903837] Bluetooth: hci1: command tx timeout
[  383.033163] Bluetooth: hci2: command tx timeout
[  383.287740] Bluetooth: hci3: command tx timeout
[  383.482076] Bluetooth: hci7: command tx timeout
[  383.482233] Bluetooth: hci6: command tx timeout
[  383.544898] Bluetooth: hci5: command tx timeout
[  383.608149] Bluetooth: hci4: command tx timeout
[  384.824754] Bluetooth: hci0: command tx timeout
[  384.952726] Bluetooth: hci1: command tx timeout
[  385.080101] Bluetooth: hci2: command tx timeout
[  385.336954] Bluetooth: hci3: command tx timeout
[  385.528941] Bluetooth: hci7: command tx timeout
[  385.529446] Bluetooth: hci6: command tx timeout
[  385.591901] Bluetooth: hci5: command tx timeout
[  385.655799] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
09:52:15  Registers:
info registers vcpu 0
RAX=0000000000000005 RBX=0000000000000200 RCX=ffffffff87a68108 RDX=0000000000000008
RSI=ffff888016ecdd00 RDI=ffff888016ecd280 RBP=ffff888016ecd280 RSP=ffff88801a8a7178
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000
R12=0000000000000009 R13=0000000000000001 R14=ffff888016ecdd00 R15=0000000000000004
RIP=ffffffff81518464 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe2400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f356d11e000 CR3=0000000030cb2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff88802d048001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88802d047f01
RSI=ffff88802d047f48 RDI=ffff88802d0473e8 RBP=ffff88802d047430 RSP=ffff88802d047368
R8 =0000000000000001 R9 =ffff88802d047418 R10=000000000003b6cd R11=00000000000c4cf3
R12=ffff88802d047438 R13=ffff88802d047420 R14=ffff88802d047f48 R15=ffff88802d0473d8
RIP=ffffffff81355488 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8f43fb58e0 CR3=0000000023d55000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000