syzkaller login: [ 98.426943] sshd (232) used greatest stack depth: 24992 bytes left Warning: Permanently added '[localhost]:21441' (ECDSA) to the list of known hosts. 2025/06/14 17:30:20 fuzzer started 2025/06/14 17:30:21 dialing manager at localhost:42061 [ 102.270349] cgroup: Unknown subsys name 'net' [ 102.403862] cgroup: Unknown subsys name 'cpuset' [ 102.439218] cgroup: Unknown subsys name 'rlimit' 2025/06/14 17:30:37 syscalls: 2214 2025/06/14 17:30:37 code coverage: enabled 2025/06/14 17:30:37 comparison tracing: enabled 2025/06/14 17:30:37 extra coverage: enabled 2025/06/14 17:30:37 setuid sandbox: enabled 2025/06/14 17:30:37 namespace sandbox: enabled 2025/06/14 17:30:37 Android sandbox: enabled 2025/06/14 17:30:37 fault injection: enabled 2025/06/14 17:30:37 leak checking: enabled 2025/06/14 17:30:37 net packet injection: enabled 2025/06/14 17:30:37 net device setup: enabled 2025/06/14 17:30:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/14 17:30:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/14 17:30:37 USB emulation: enabled 2025/06/14 17:30:37 hci packet injection: enabled 2025/06/14 17:30:37 wifi device emulation: enabled 2025/06/14 17:30:37 802.15.4 emulation: enabled 2025/06/14 17:30:37 fetching corpus: 0, signal 0/0 (executing program) 2025/06/14 17:30:39 starting 8 fuzzer processes 17:30:40 executing program 1: sync_file_range(0xffffffffffffffff, 0x1, 0x800, 0x1) ioctl$CDROMREADCOOKED(0xffffffffffffffff, 0x5315, &(0x7f0000000000)) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000a80)={0x0, 0x0, 0x1, 0x0, '\x00', [{0xfffffffe, 0x8, 0x8, 0xff61, 0x7, 0x3}, {0x80000000, 0x80, 0x8001, 0x1ff, 0x7, 0x3}], ['\x00']}) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) flistxattr(0xffffffffffffffff, &(0x7f0000000b80)=""/31, 0x1f) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='rdma.current\x00', 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, 0x8, 0xb, 0x101, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x6}, [@typed={0x8, 0x8a, 0x0, 0x0, @uid=0xee00}, @generic="5c587e3278a47ea152d1200b9febaa5ad3124344b171ec13f8d7c9fcebc361", @typed={0x8, 0x3d, 0x0, 0x0, @ipv4=@multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x6) r1 = epoll_create1(0x80000) fsetxattr$security_evm(r1, &(0x7f0000000d40), &(0x7f0000000d80)=@ng={0x4, 0x2, "481369c7810ec0b0d2cdfc"}, 0xd, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000dc0)={0x0, 0x2, 0x7}) getsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) r2 = socket$inet6(0xa, 0x80000, 0x69e1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000e80)={{0x0, 0x8, 0x8, 0x400, 0x5, 0x3, 0x7f45, 0x1f, 0xff, 0x200, 0x5, 0x5, 0x40, 0x10001, 0xfffffffffffffffc}, 0x10, [0x0, 0x0]}) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) faccessat2(r3, &(0x7f0000000f00)='./file0\x00', 0x7, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001380), 0x101001) r5 = fsmount(r0, 0x0, 0x74) r6 = syz_open_pts(r3, 0x8000) sendmsg$unix(r0, &(0x7f0000001c80)={&(0x7f0000001040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001340)=[{&(0x7f00000010c0)="80a75faeb165c2918a0f4df2ed40043307770052707d4df06a58d7f2b271e97dce155e42e8f25a2b1ec76604091a74bdd7d2b8690b06fe3044c5b08e926af4707a2233b68d977090f24581a61d08de52aecfce934e3698a5f492ec90bac0ec270525dc96fd011dda758b3d3e03e3aafb0f5e4428848d912e8a791845d517cac26acb7440ff963cffa4bc4a11f78147f65a3d1cc892c90f8cc2cf6b9ed3b0d63c3e419c6b97930247eb3412b50364342593", 0xb1}, {&(0x7f0000001180)="5bb867da9b11abacee5ef0787a028b285ec1f9c61bab80f8ca0d100bc943480385b77fc3803914e129cfc3ecb6c4e9c2ef5dbd237618ecb418e7155d18807eedb428e34e89defa2f27ace92e6e8de379b8a3bb4fc6e728853ccf51a8550249a17b2fe59239134a1e6012ea31f69009a3a911cf1b754cf5892e3e98d79a4b5d71acaf7369eccf9933003a9233c14ec99f03617781276d4bd76782ba720e392f6884230ca462477d6379cc5dc63ce67d218c3027e6a3", 0xb5}, {&(0x7f0000001240)="6fbc4a4382cbbf67236eaff932de809cd2c0e731231a3d3b9a5950b1cf77693cd39a4c541add03f41581c5fdc05634334c9d55e6b6b5285ccfa3031da1297777195a2b971b6ecffe8b471b7e2ff7c5c5be34e025d3e8afbde37fa1aaa7c98d297122e98af5bdbcf25eaa46f4b20b67c2a395f35bf9498550990f11854f51", 0x7e}, {&(0x7f00000012c0)="2e91eb867395ab2738642e6a8070ecdb280ccf0fdf0722a56d4d44dfd87a9c9e2f4e0f5873b2945f70ca03c1b669072b3f96916dc2e24a8f43064087bee49baed423307967ae46552d9c3dac5652995adae62b", 0x53}], 0x4, &(0x7f0000001b80)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r4, r5, r6]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r3, r0]}}], 0xe8, 0x8}, 0x0) 17:30:40 executing program 0: sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x22}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000001) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f00000001c0)={0x4e0, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd336}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x63938c0d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x180}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x61c53df4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaca4}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x110}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0x27c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "ffe1354e6e6fd9060e621897531d67bb2b4725a504dbc92bb60f42"}}, @TIPC_NLA_NODE_ID={0xc4, 0x3, "fe428f55e33f57b5489ce6dae27b4bcf708b81bfd269fa44271dae70c76171a85855af0e7201d082abb88b9a952bbf24018c28392c7c53f7b86e3b07ee6877d3d708a107cd1c158e170c18e459806ce20dca02f97c04bc291d37cb49ff6f8003b570396a0bb71b9de6341f241ed02f7cfd1fa2562c3d62b43089042c14d2fa2bf486ddb0b2aa782a3d0e22195fba64033105093e44f638caaff52973af1a94f02d0113895867a2f91e98c05f9c448ae8accf6fd968ba836203736a7433cfbb5b"}, @TIPC_NLA_NODE_ID={0x4e, 0x3, "1b9bf59c52ccc372e81580c9ebf0ee3c110625c3633651cfb7475c62190a319f44b82cebdde67cd34315888205bef3b81a23dca06f70b12408ec2538e6c41767542aa21ccef14ca7a3b1"}, @TIPC_NLA_NODE_ID={0x11, 0x3, "73159eeab052f18a9ab11976a3"}, @TIPC_NLA_NODE_ID={0x33, 0x3, "4cd3fc1dbfe2f478d92181b4fad69b10452938f024d7f218691c902ccb8365dd8b738f69e72fe42506a892643326d5"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8b, 0x3, "b450194f79bc53e148f4fe6b4db3008ea6652cea5f874c0876cc537d6beb6599c7d82340e4eb4e0357ddfeaf6fd311b1d869c0fea693756a13f506144c53d757520f16c88147f554e9140665ab401a11e7441564b470eed0ac52db7390159c6ea64171aa6a1e4910d936ec2cdf4c68f0d8cdfafd51f57528be45cd1b7b150455d0b1dd6742a1da"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "d576a97c513083479773fc41da0c714169cc86529995"}}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x115991551d6c6122}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)={0x258, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x258}, 0x1, 0x0, 0x0, 0xd564f6af5128013a}, 0x4004001) readlink(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)=""/88, 0x58) syz_genetlink_get_family_id$gtp(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x45}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x58, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x40}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x6}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x5, 0x200}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4015) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000e40)={'gre0\x00', &(0x7f0000000dc0)=@ethtool_coalesce={0xf, 0x81, 0x7, 0x7, 0x1, 0x7, 0x7, 0x8, 0x6, 0x8, 0x3ff, 0x62f80000, 0x3, 0x6, 0xffff, 0x800, 0x3, 0x6, 0x2, 0x7, 0xfffffffa, 0x4, 0x3}}) r1 = epoll_create1(0x80000) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000e80)={0x0, 0x2, 0xc}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xf0, r0, 0x400, 0x70bd26, 0x832, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6ea5f0f1}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc030}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf903}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0xf0}}, 0x44080) link(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)='./file0\x00') sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0xb8, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x22, 0x37dd]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xbd}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x773f917f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x191}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ad}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4c}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4044005}, 0x40000) fchownat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0xffffffffffffffff, 0xee01, 0x1000) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0), 0x121000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001300)={0x1, 0x8, 0x275c}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000001340), 0x4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x8000, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x44000) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0xb0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe8c7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xbb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9d1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}]}, 0xb0}}, 0x4004080) 17:30:40 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x24002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x40080, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, r1, r2, 0xffffffffffffffff, r3], 0x5) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3f}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x16}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x81}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x80c1) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x2) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x108, r6, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x50}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x108}, 0x1, 0x0, 0x0, 0x4020000}, 0x811) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040081}, 0x810) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000740)={'IDLETIMER\x00'}, &(0x7f0000000780)=0x1e) r7 = fsmount(r5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000007c0)={{0x3, 0x1, 0x3fa8, 0x0, 0x1512e91d}}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000840)={0x350, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6a}}}}, [@NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x3, 0xff, 0xfcfd, 0x7, 0x7ff, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x5, 0x0, 0x401, 0x9, 0x9, 0x882a, 0x3]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x5d, 0xfffd, 0xff, 0x401, 0xffff, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0xc, 0x4, 0x24, 0x16, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xd1ab, 0x1, 0x401, 0x6, 0x6, 0xfffd, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3741, 0x5, 0x3, 0x7, 0x1f, 0x2, 0xfffe, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x6, 0x0, 0x4, 0x6, 0xfffe, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x18, 0x16, 0x30, 0x6, 0x6c, 0x48, 0x3, 0x1b, 0x6, 0x2, 0x1, 0x48, 0x1, 0x4]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x5}, {0x1, 0x3}, {0x1, 0x7}, {0x4}, {0x5}, {0x1, 0x9}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0x3}, {0x1}, {0x0, 0x6}, {0x4, 0x1}, {0x6, 0x2}, {0x2, 0x8}, {0x2, 0x2}, {}, {0x0, 0x9}, {0x6, 0xa}, {}, {0x0, 0x1}, {0x3, 0x6}, {}, {0x3, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x6}, {0x6, 0x6}, {0x0, 0x2}, {0x7, 0x3}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x6, 0x4, 0x6, 0x200, 0x9, 0xfff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0xed, 0x6, 0x2, 0xff7f, 0x7ff, 0x1ff, 0xfffd]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x73a, 0xd554, 0x2, 0x4, 0x2a44, 0x2, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0x200, 0x3, 0xe4de, 0x0, 0x74, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x9, 0x1, 0x0, 0x8, 0x9, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0x0, 0x1, 0x2, 0x6000, 0x0, 0x7]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x273c, 0x3ff, 0x4, 0x4, 0x20, 0x0, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x3, 0x18, 0x6c, 0x0, 0x4, 0x16, 0x3, 0x1b, 0x18, 0x3, 0x1b, 0x5, 0x1, 0x48, 0x6c, 0x2, 0x6c, 0x1, 0x4, 0x2, 0x4, 0x16, 0x1b, 0x1, 0x6c, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7f, 0x8, 0x7f, 0x779, 0x1, 0x4]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x6, 0x4}, {0x7, 0xa}, {0x7, 0x7}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe283, 0x101, 0x8001, 0x1, 0x3, 0x5, 0x0, 0x3]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x3, 0x7}, {0x0, 0x9}, {0x6, 0x4}, {0x4, 0x6}, {0x7, 0x4}, {0x7, 0x9}, {0x7, 0x2}, {0x0, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x7, 0x1}, {0x1, 0x8}, {}, {0x0, 0x7}, {0x1, 0x7}, {0x5, 0x3}, {0x3, 0xa}, {0x1, 0x2}, {0x6, 0x8}, {0x6}, {0x1, 0x7}, {0x6, 0x9}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x6}, {0x5, 0xa}, {0x6}, {0x5, 0x7}, {0x6, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x1, 0x8}, {0x6, 0xa}, {0x7, 0x1}, {0x6, 0xa}, {0x0, 0x1}, {0x4, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x1}, {0x3, 0x7}, {0x4, 0x7}, {0x1, 0xa}, {}, {0x1, 0x9}, {0x5, 0x2}, {0x0, 0x2}, {0x3, 0xa}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x8}, {0x0, 0x8}, {0x2, 0x8}, {0x3, 0xa}, {0x2, 0x8}, {0x3, 0x8}, {0x7, 0x5}, {0x3, 0x5}, {0x5, 0x5}, {0x3, 0x6}, {0x7, 0xa}, {0x2, 0x8}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0x1}, {0x0, 0x3}, {0x7, 0x4}, {0x0, 0x7}, {0x6, 0x3}, {0x6, 0x8}, {0x7, 0x1}, {0x6, 0xa}, {0x1}, {0x0, 0x3}, {0x2, 0xa}, {0x5, 0x8}, {0x0, 0x1}, {0x1, 0x8}, {0x0, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x4}, {0x5, 0xa}, {}, {0x7, 0x5}, {0x4, 0x9}, {0x5, 0x6}, {0x5, 0x3}, {0x1}, {0x5, 0x5}, {0x0, 0x1}, {0x6, 0x5}, {0x1, 0xa}, {0x6, 0x3}, {0x7, 0x6}, {0x3, 0xa}, {0x4, 0x6}, {0x4, 0x6}, {0x6, 0x2}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x400, 0x92, 0x8, 0x9, 0x1, 0x401]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x5}, {0x7, 0x1c}, {0x0, 0x9}, {0x4, 0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x5}, {0x1, 0x2}, {0x1, 0x1}, {0x1, 0x4}, {0x5, 0xa}, {0x1, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0x1}, {0x7}, {0x6, 0x5}, {0x1, 0x5}, {0x5, 0x2}, {}, {0x4, 0x1}, {0x5, 0x6}, {0x7, 0x6}, {0x3, 0x4}, {0x7, 0x6}, {0x7}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x7}, {0x2, 0x3}, {0x1, 0xa}, {0x0, 0x4}, {0x2, 0x2}, {0x0, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x4, 0x4}, {0x1, 0x9}, {0x2, 0x5}, {0x7, 0x3}, {0x4, 0x5}, {0x5, 0x8}, {0x7, 0x8}, {0x2, 0x6}, {0x7, 0x9}, {0x2, 0x5}, {0x7, 0x3}, {0x3, 0x6}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x7ff, 0xfffd, 0x401, 0x9, 0x2, 0x3907]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcc3, 0xffb2, 0x3f, 0x7b, 0x0, 0x1b, 0xf5, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x804}, 0x0) write$binfmt_misc(r7, &(0x7f0000000c40)={'syz1', "3772acd80e166eed4f879b122b52be57066b85288a90257f232a5a4da61f1d8d46c761e7b956006165609ea99a2cb1d6f977cfd70c0ac86c7a"}, 0x3d) fstat(r0, &(0x7f0000000c80)) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d00), 0x448a02, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x8004) 17:30:40 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'ipvlan0\x00', 0x5}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000040)={0x8, 'ip6tnl0\x00', {'vxcan1\x00'}, 0x2}) r1 = signalfd4(r0, &(0x7f0000000080)={[0x10000]}, 0x8, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x1, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004800}, 0x20008000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20040045) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000440)="b8af17c8f5b65ae00fa9085af19d992a6c50a208edee581fa27ede4ab7792456c0ea01563993bb776c5130c8") r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r5, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000014) recvmmsg$unix(r2, &(0x7f0000000f40)=[{{&(0x7f0000000600)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/47, 0x2f}, {&(0x7f00000006c0)=""/80, 0x50}, {&(0x7f0000000740)=""/105, 0x69}, {&(0x7f00000007c0)=""/195, 0xc3}, {&(0x7f00000008c0)=""/215, 0xd7}], 0x5}}, {{&(0x7f0000000a40), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/27, 0x1b}, {&(0x7f0000000b00)=""/30, 0x1e}], 0x2, &(0x7f0000000b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000c00)=@abs, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000c80)=""/45, 0x2d}, {&(0x7f0000000cc0)=""/207, 0xcf}, {&(0x7f0000000dc0)=""/229, 0xe5}], 0x3, &(0x7f0000000f00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x3, 0x40000000, &(0x7f0000001000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001040)={'vcan0\x00'}) getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f0000001080)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000010c0)=0x2c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000001100)={{0x1, 0x1, 0x18, r0, {r7}}, './file0\x00'}) sendmsg$AUDIT_GET_FEATURE(r9, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x10, 0x3fb, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000005}, 0xc000) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001280)=@OVL_FILEID_V0={0x19, 0xfb, {0x0, 0xfb, 0x19, 0x0, 0xff, "945173ae33d10e89ca1737b9e60a2bb0", "c13a69f4"}}, 0x3c1082) [ 120.992881] audit: type=1400 audit(1749922240.041:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:30:40 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xa793df24289fbfbd, 0x0) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000040)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_mr_cache\x00') ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xc000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @auto="84c30f4d5cbd60bf08b626e215f5b748"}}) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f00000001c0)=""/244, 0x3}) connect(r0, &(0x7f0000000300)=@l2={0x1f, 0x81, @none, 0x8, 0x1}, 0x80) ioctl$CDROM_SELECT_DISK(r3, 0x5322, 0x19) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000380)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "1677071b626658"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000001380)={{r4, 0x1, 0x6, 0x7, 0x3, 0x2, 0x400, 0x6, 0x290, 0x1, 0x5, 0x8, 0x400, 0x800, 0x8}, 0x8, [0x0]}) r5 = epoll_create1(0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r5, 0xf505, 0x0) ioctl$CDROMRESUME(r2, 0x5302) r6 = socket$netlink(0x10, 0x3, 0x9) fcntl$setownex(r6, 0xf, &(0x7f0000001480)={0x1}) 17:30:40 executing program 5: ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000000040)="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", 0xfa) r0 = inotify_init1(0x80000) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x5, 0xff, 0x5, 0x5, 0x2, 0x3e, 0x3, 0x366, 0x38, 0x398, 0xe6, 0x0, 0x20, 0x2, 0xd33e, 0x3a4, 0xb}, [{0x60000000, 0x6, 0x62be, 0x0, 0x1, 0x4, 0xc79f, 0x6}, {0x2, 0x88d, 0x2, 0x7, 0x7, 0x1000, 0x3, 0x4}], "0347c0f51d63f457e446f8b04e19ea733843a99988f398cb70c0d2ec5462347878e9c3674dbee9a21edb9fcd366fea53cf9e872c9bf4550447c58450870a7bdd9fe39c58e82d74f32665c8cd8df8273d61345f61a5cde79587a5a61dc1e87f7ef75196cfc0823ff6580a9f3f0bff6f3a831b116541ed026e66206622b954ea91fe70917eacdb10ec22d4b68928f67814aee9fdc1f1bc49d10923cce77c46d8584d2b782acf29b3e03872de9e09d19a484847ac03dbfbea0f01f47d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x833) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a80)={'veth1_to_bridge\x00', &(0x7f00000009c0)=@ethtool_regs={0x4, 0x7, 0x78, "5a46b0c305200670feacdc2a31fed29767ee4a517031c025f7251cf9e38534b1311789907e37f1b2b8871ae2c2758cffe64fd5aef0ed3ebf1f13eaa18bd7c36e3150231dc1422bbbcfbdf101e059d6e61c1d2b7ca13e9c90d3a32272b901abc598feeb24e7e2a949dea64eb495be7d76440ffb30fd8261ae"}}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000ac0)) connect$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x2, 0x4e23, @loopback}, 0x10) getpeername$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x2, 0x0, @loopback}, &(0x7f0000000b80)=0x10) r3 = socket$inet(0x2, 0x80000, 0xff) close_range(0xffffffffffffffff, r3, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000bc0)) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000c00)={0x1, 0x1, 0x62d, 0x50, 0x40, 0xc30}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000c40), 0x404400) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000c80)={0x6, 0x5, 0x1, 0x6737, 0x3, [0x800, 0x100, 0x9, 0x40000000]}) flistxattr(0xffffffffffffffff, &(0x7f0000000cc0)=""/142, 0x8e) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000d80)={[0xbc]}, 0x8) openat$cgroup_devices(r5, &(0x7f0000000dc0)='devices.deny\x00', 0x2, 0x0) 17:30:40 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0x1}, r2}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'sit0\x00', r2, 0x29, 0x7f, 0xff, 0x9, 0x75, @loopback, @loopback, 0x80, 0x20, 0xff, 0x9}}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x40240, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000380)={'veth1\x00', @local}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x10000, 0x0) fcntl$setstatus(r4, 0x4, 0x6000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/125, 0x7d, 0x0, &(0x7f0000000480)}, &(0x7f0000000500)=0x40) r5 = dup3(r3, r0, 0x80000) ioctl$KDGETKEYCODE(r5, 0x4b4c, &(0x7f0000000540)={0x5, 0x166}) r6 = pidfd_open(r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000580)={r3, 0x3, 0x9, 0x4}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000005c0)={{0x0, 0xb2, 0xf9d, 0xffffffffffffffe0, 0x8069, 0x5, 0x2, 0x3, 0x9, 0x81, 0x200, 0x3, 0xb, 0x7ff}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000680)=""/4096) ioctl$BTRFS_IOC_SYNC(r5, 0x9408, 0x0) r7 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x1) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000001680)) 17:30:40 executing program 7: setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0x8) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000080)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={{r0}, 0x8, 0x800000010000, 0x5}) write$P9_ROPEN(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x71, 0x2, {{0x4, 0x1, 0x5}, 0x5d}}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000200)={0x4}, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000240)={0x1f, 0x2, {0x0, 0x1, 0x10000, 0x3, 0x2000000}, 0x3}) pwrite64(r0, &(0x7f00000002c0)="b5bf465c982f9fa2261a9b5463caf689b90864582b298da21c2398c12e7f411f8a96f86ad77e3182835106572fd629ba9c47d7f2d630a7f233979f4ed5172bb3adf92559c3fe2af99e10a8bc426f08c4dddf091942b6648db9319593a3c007755537", 0x62, 0x100000000) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x11, 0xffffffffffffffff, 0x2) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000340)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000380)=r2) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x28103, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000400)={0x3ff, {{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x34}}, 0x1, 0x1, [{{0xa, 0x4e23, 0xe46, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9e}}]}, 0x110) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000009c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x67ef9a7e887f3106}, 0xc, &(0x7f0000000980)={&(0x7f00000005c0)={0x39c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x1c0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68b}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xce49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xea6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb676}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffc00000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x65}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xec}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040804) [ 122.296123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.305908] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.309892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.321596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.332819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.402881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.406793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.411061] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.420978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.424705] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.479658] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.486745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.489576] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.493548] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.497914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.501594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.519666] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.542064] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.572158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 122.585740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.651874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.690546] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.693970] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.701735] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.705919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.708753] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.710933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.715002] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.749791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.776835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.781457] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 122.807618] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 122.817505] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.822646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 122.826796] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 122.831928] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 122.839761] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 122.850352] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 122.857554] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 122.859568] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.366787] Bluetooth: hci0: command tx timeout [ 124.495518] Bluetooth: hci1: command tx timeout [ 124.560247] Bluetooth: hci2: command tx timeout [ 124.687690] Bluetooth: hci3: command tx timeout [ 124.750463] Bluetooth: hci4: command tx timeout [ 124.879477] Bluetooth: hci5: command tx timeout [ 124.942514] Bluetooth: hci7: command tx timeout [ 124.943637] Bluetooth: hci6: command tx timeout [ 126.414933] Bluetooth: hci0: command tx timeout [ 126.542409] Bluetooth: hci1: command tx timeout [ 126.606320] Bluetooth: hci2: command tx timeout [ 126.734303] Bluetooth: hci3: command tx timeout [ 126.801253] Bluetooth: hci4: command tx timeout [ 126.927289] Bluetooth: hci5: command tx timeout [ 126.991837] Bluetooth: hci6: command tx timeout [ 126.993317] Bluetooth: hci7: command tx timeout [ 128.462262] Bluetooth: hci0: command tx timeout [ 128.591355] Bluetooth: hci1: command tx timeout [ 128.654564] Bluetooth: hci2: command tx timeout [ 128.782733] Bluetooth: hci3: command tx timeout [ 128.846539] Bluetooth: hci4: command tx timeout [ 128.974683] Bluetooth: hci5: command tx timeout [ 129.038369] Bluetooth: hci6: command tx timeout [ 129.038852] Bluetooth: hci7: command tx timeout [ 130.510412] Bluetooth: hci0: command tx timeout [ 130.639426] Bluetooth: hci1: command tx timeout [ 130.702279] Bluetooth: hci2: command tx timeout [ 130.830272] Bluetooth: hci3: command tx timeout [ 130.894325] Bluetooth: hci4: command tx timeout [ 131.023220] Bluetooth: hci5: command tx timeout [ 131.086488] Bluetooth: hci6: command tx timeout [ 131.086975] Bluetooth: hci7: command tx timeout [ 182.273987] syz-executor.3 (285) used greatest stack depth: 24912 bytes left [ 184.752432] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.756737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.761803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.774276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.783338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.793236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.796991] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.798260] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.804015] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.806516] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.810062] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.824746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.827520] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.836702] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.853671] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.030799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.039762] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.053751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.075888] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.084437] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.124473] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.129977] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.156402] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.159874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 185.164685] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 185.167919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 185.167924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.194602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.205972] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 185.227605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.298879] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 185.310489] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 185.343299] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 185.347567] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 185.395198] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 185.449577] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 185.450293] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 185.464995] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 185.484641] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 185.530362] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 186.830241] Bluetooth: hci0: command tx timeout [ 186.894267] Bluetooth: hci1: command tx timeout [ 186.958478] Bluetooth: hci2: command tx timeout [ 187.214466] Bluetooth: hci3: command tx timeout [ 187.278309] Bluetooth: hci5: command tx timeout [ 187.278813] Bluetooth: hci4: command tx timeout [ 187.600248] Bluetooth: hci6: command tx timeout [ 187.662271] Bluetooth: hci7: command tx timeout [ 188.878438] Bluetooth: hci0: command tx timeout [ 188.942275] Bluetooth: hci1: command tx timeout [ 189.007512] Bluetooth: hci2: command tx timeout [ 189.262645] Bluetooth: hci3: command tx timeout [ 189.326619] Bluetooth: hci5: command tx timeout [ 189.327051] Bluetooth: hci4: command tx timeout [ 189.646554] Bluetooth: hci6: command tx timeout [ 189.710314] Bluetooth: hci7: command tx timeout [ 190.926422] Bluetooth: hci0: command tx timeout [ 190.990243] Bluetooth: hci1: command tx timeout [ 191.054282] Bluetooth: hci2: command tx timeout [ 191.310462] Bluetooth: hci3: command tx timeout [ 191.374323] Bluetooth: hci4: command tx timeout [ 191.374808] Bluetooth: hci5: command tx timeout [ 191.694651] Bluetooth: hci6: command tx timeout [ 191.759362] Bluetooth: hci7: command tx timeout [ 192.974312] Bluetooth: hci0: command tx timeout [ 193.038302] Bluetooth: hci1: command tx timeout [ 193.103209] Bluetooth: hci2: command tx timeout [ 193.358364] Bluetooth: hci3: command tx timeout [ 193.422282] Bluetooth: hci5: command tx timeout [ 193.422771] Bluetooth: hci4: command tx timeout [ 193.742567] Bluetooth: hci6: command tx timeout [ 193.806271] Bluetooth: hci7: command tx timeout [ 247.587778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.588985] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.590432] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.591811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.594850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.596757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.597831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.611695] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.622117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.629932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.669642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.677464] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.693595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.698747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.705446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.938475] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.944754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.978926] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.004805] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 248.008006] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.013966] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.020639] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 248.022296] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 248.024047] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.034349] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.035708] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.037618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.043449] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.044732] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.045981] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.049988] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.077923] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.084369] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.094009] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 248.094153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.095412] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.099080] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 248.105598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.121374] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.127223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.615022] Bluetooth: hci1: command tx timeout [ 249.679267] Bluetooth: hci0: command tx timeout [ 249.743625] Bluetooth: hci2: command tx timeout [ 250.126873] Bluetooth: hci3: command tx timeout [ 250.192282] Bluetooth: hci4: command tx timeout [ 250.193405] Bluetooth: hci5: command tx timeout [ 250.254317] Bluetooth: hci6: command tx timeout [ 250.255488] Bluetooth: hci7: command tx timeout [ 251.662569] Bluetooth: hci1: command tx timeout [ 251.726600] Bluetooth: hci0: command tx timeout [ 251.791290] Bluetooth: hci2: command tx timeout [ 252.176195] Bluetooth: hci3: command tx timeout [ 252.238329] Bluetooth: hci5: command tx timeout [ 252.238554] Bluetooth: hci4: command tx timeout [ 252.303366] Bluetooth: hci7: command tx timeout [ 252.303519] Bluetooth: hci6: command tx timeout [ 253.713278] Bluetooth: hci1: command tx timeout [ 253.774239] Bluetooth: hci0: command tx timeout [ 253.838276] Bluetooth: hci2: command tx timeout [ 254.225199] Bluetooth: hci3: command tx timeout [ 254.286350] Bluetooth: hci5: command tx timeout [ 254.286823] Bluetooth: hci4: command tx timeout [ 254.350445] Bluetooth: hci7: command tx timeout [ 254.350652] Bluetooth: hci6: command tx timeout [ 255.758615] Bluetooth: hci1: command tx timeout [ 255.822720] Bluetooth: hci0: command tx timeout [ 255.886295] Bluetooth: hci2: command tx timeout [ 256.270322] Bluetooth: hci3: command tx timeout [ 256.334345] Bluetooth: hci4: command tx timeout [ 256.335256] Bluetooth: hci5: command tx timeout [ 256.400538] Bluetooth: hci6: command tx timeout [ 256.401008] Bluetooth: hci7: command tx timeout [ 310.180261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.183535] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.186336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.193315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.199135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.258859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.261130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.267022] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.274925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.282780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.448231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.464919] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.487676] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.500795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.519357] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.521819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.533693] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.549449] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.557372] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.573116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.582366] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.600697] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.618676] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.619830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.624542] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.629496] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.650257] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.665823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.675622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.678128] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.681109] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.684132] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.690254] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.694150] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.733057] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.802656] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 310.864659] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 310.878567] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 310.908031] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 310.931685] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.270257] Bluetooth: hci0: command tx timeout [ 312.335255] Bluetooth: hci1: command tx timeout [ 312.654416] Bluetooth: hci2: command tx timeout [ 312.782449] Bluetooth: hci6: command tx timeout [ 312.782599] Bluetooth: hci3: command tx timeout [ 312.846412] Bluetooth: hci4: command tx timeout [ 312.910309] Bluetooth: hci5: command tx timeout [ 313.038276] Bluetooth: hci7: command tx timeout [ 314.319815] Bluetooth: hci0: command tx timeout [ 314.382290] Bluetooth: hci1: command tx timeout [ 314.702248] Bluetooth: hci2: command tx timeout [ 314.830326] Bluetooth: hci3: command tx timeout [ 314.830355] Bluetooth: hci6: command tx timeout [ 314.895327] Bluetooth: hci4: command tx timeout [ 314.958251] Bluetooth: hci5: command tx timeout [ 315.086286] Bluetooth: hci7: command tx timeout [ 316.366599] Bluetooth: hci0: command tx timeout [ 316.431521] Bluetooth: hci1: command tx timeout [ 316.750365] Bluetooth: hci2: command tx timeout [ 316.878320] Bluetooth: hci3: command tx timeout [ 316.879984] Bluetooth: hci6: command tx timeout [ 316.943250] Bluetooth: hci4: command tx timeout [ 317.007232] Bluetooth: hci5: command tx timeout [ 317.135344] Bluetooth: hci7: command tx timeout [ 318.415292] Bluetooth: hci0: command tx timeout [ 318.479616] Bluetooth: hci1: command tx timeout [ 318.799253] Bluetooth: hci2: command tx timeout [ 318.926262] Bluetooth: hci6: command tx timeout [ 318.926711] Bluetooth: hci3: command tx timeout [ 318.990523] Bluetooth: hci4: command tx timeout [ 319.054240] Bluetooth: hci5: command tx timeout [ 319.184227] Bluetooth: hci7: command tx timeout [ 372.446017] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.453826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.456133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.470533] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.476872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 372.711949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 372.715568] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 372.718223] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 372.725694] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 372.731913] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 372.854657] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 372.860708] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.862702] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 372.865764] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.871857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.874004] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 372.877101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.882323] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 372.884577] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.889778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.892479] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.911053] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.922473] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 372.948821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 372.956043] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.015092] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 373.027694] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 373.030563] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 373.037224] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 373.066465] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 373.076726] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 373.088864] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 373.091350] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 373.107717] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 373.121515] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 373.128913] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 373.145058] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 373.152799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 373.165128] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 373.172088] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 374.542540] Bluetooth: hci0: command tx timeout [ 374.798252] Bluetooth: hci1: command tx timeout [ 374.990321] Bluetooth: hci3: command tx timeout [ 375.054478] Bluetooth: hci4: command tx timeout [ 375.055889] Bluetooth: hci2: command tx timeout [ 375.182439] Bluetooth: hci7: command tx timeout [ 375.246248] Bluetooth: hci5: command tx timeout [ 375.310508] Bluetooth: hci6: command tx timeout [ 376.590248] Bluetooth: hci0: command tx timeout [ 376.847239] Bluetooth: hci1: command tx timeout [ 377.039481] Bluetooth: hci3: command tx timeout [ 377.102579] Bluetooth: hci2: command tx timeout [ 377.103011] Bluetooth: hci4: command tx timeout [ 377.230453] Bluetooth: hci7: command tx timeout [ 377.295201] Bluetooth: hci5: command tx timeout [ 377.358256] Bluetooth: hci6: command tx timeout [ 378.638534] Bluetooth: hci0: command tx timeout [ 378.894250] Bluetooth: hci1: command tx timeout [ 379.086747] Bluetooth: hci3: command tx timeout [ 379.150472] Bluetooth: hci4: command tx timeout [ 379.152143] Bluetooth: hci2: command tx timeout [ 379.278255] Bluetooth: hci7: command tx timeout [ 379.342261] Bluetooth: hci5: command tx timeout [ 379.407234] Bluetooth: hci6: command tx timeout [ 380.686258] Bluetooth: hci0: command tx timeout [ 380.943099] Bluetooth: hci1: command tx timeout [ 381.134270] Bluetooth: hci3: command tx timeout [ 381.198623] Bluetooth: hci2: command tx timeout [ 381.198893] Bluetooth: hci4: command tx timeout [ 381.326553] Bluetooth: hci7: command tx timeout [ 381.390397] Bluetooth: hci5: command tx timeout [ 381.454816] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 17:35:49 Registers: info registers vcpu 0 RAX=0000000000000246 RBX=0000000000089100 RCX=ffffffff8151f403 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff8880302dbc00 RBP=ffff8880302dbc00 RSP=ffff88802928f620 R8 =0000000000000001 R9 =ffffed1005251eb4 R10=0000000000000003 R11=0000000000000001 R12=0000000000000000 R13=0000000000000246 R14=0000000000000000 R15=ffff8880302dbc00 RIP=ffffffff81b20eb2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e562f000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff6c28a28e0 CR3=00000000318cb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff816049f0 RCX=ffff888035d1733c RDX=1ffff11006ba2eaf RSI=ffffffff84b1d2bf RDI=ffff888035d174bc RBP=ffff888035d17480 RSP=ffff888035d173e8 R8 =0000000000000001 R9 =ffff888035d17428 R10=000000000003b4ed R11=00000000000037c3 R12=ffff888035d174b0 R13=0000000000000000 R14=ffff888029280000 R15=ffff88800d2c28c0 RIP=ffffffff812d9638 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4ebb8bf368 CR3=0000000015fb9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000