[ 76.958018] audit: type=1400 audit(1750212954.557:6): avc: denied { checkpoint_restore } for pid=224 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:32251' (ECDSA) to the list of known hosts. 2025/06/18 02:16:02 fuzzer started 2025/06/18 02:16:03 dialing manager at localhost:34087 syzkaller login: [ 86.012785] cgroup: Unknown subsys name 'net' [ 86.150663] cgroup: Unknown subsys name 'cpuset' [ 86.184581] cgroup: Unknown subsys name 'rlimit' 2025/06/18 02:16:18 syscalls: 208 2025/06/18 02:16:18 code coverage: enabled 2025/06/18 02:16:18 comparison tracing: enabled 2025/06/18 02:16:18 extra coverage: enabled 2025/06/18 02:16:18 setuid sandbox: enabled 2025/06/18 02:16:18 namespace sandbox: enabled 2025/06/18 02:16:18 Android sandbox: enabled 2025/06/18 02:16:18 fault injection: enabled 2025/06/18 02:16:18 leak checking: enabled 2025/06/18 02:16:18 net packet injection: enabled 2025/06/18 02:16:18 net device setup: enabled 2025/06/18 02:16:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/18 02:16:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/18 02:16:18 USB emulation: enabled 2025/06/18 02:16:18 hci packet injection: enabled 2025/06/18 02:16:18 wifi device emulation: enabled 2025/06/18 02:16:18 802.15.4 emulation: enabled 2025/06/18 02:16:18 fetching corpus: 0, signal 0/0 (executing program) 2025/06/18 02:16:20 starting 8 fuzzer processes 02:16:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000000, 0x200000) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000000c0)={0x1000, ""/4096}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000001140)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000003, 0x810, r1, 0x10000000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000011c0)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xe4, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xe4}, 0x1, 0x0, 0x0, 0x400804d}, 0x4005) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x4010, r1, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000002740)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r1, 0x0, &(0x7f0000002700)={&(0x7f0000001380)=@isdn, 0x80, &(0x7f00000025c0)=[{&(0x7f0000001400)=""/90, 0x5a}, {&(0x7f0000001480)=""/36, 0x24}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/140, 0x8c}, {&(0x7f0000002580)=""/20, 0x14}], 0x5, &(0x7f0000002640)=""/175, 0xaf}, 0x0, 0x0, 0x1, {0x3}}, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000002780)=0xd, 0x4) write$P9_RMKNOD(r1, &(0x7f00000027c0)={0x14, 0x13, 0x1, {0x80, 0x4, 0x4}}, 0x14) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r1, 0x81) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002800)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000003a40)={0x50, 0x0, &(0x7f00000029c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002900)={@ptr={0x70742a85, 0x1, &(0x7f0000002840)=""/153, 0x99, 0x2, 0x34}, @fda={0x66646185, 0x2, 0x0, 0x11}, @flat=@handle={0x73682a85, 0x10a, 0x2}}, &(0x7f0000002980)={0x0, 0x28, 0x48}}}, @free_buffer], 0x1000, 0x0, &(0x7f0000002a40)="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"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000003ac0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x1c, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000003bc0), 0x800000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000003cc0)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c40)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4841}, 0x80) 02:16:20 executing program 1: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x86}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x18}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x20040000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x539, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5f61}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000002c0)="ba4cccf4581663b53755d9638e805472", 0x10) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040800}, 0x8084) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x104, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8038}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4b4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x66e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4048804}, 0x20000001) getpgrp(0xffffffffffffffff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x8001, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000c80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f00000006c0)={0x554, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x11}}}}, [@NL80211_ATTR_IE={0x12e, 0x2a, [@measure_req={0x26, 0x56, {0x81, 0x40, 0x2, "091d5ea10118f9fa4c61c7de04487f6782cb30a272ed0e99d1f3c21a0b1c680d32efef2622477730a6f0fba0ebf47ecbac09fbd39c75f77c6ecf19834c9b1ad410b9a9b4b5ebb1c48d5bcdf4e4f7531c10ead2"}}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x1, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @chsw_timing={0x68, 0x4, {0xfff, 0x9b}}, @dsss={0x3, 0x1, 0xab}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0x1}, @cf={0x4, 0x6, {0x5, 0x9, 0x2, 0x8001}}, @tim={0x5, 0xa6, {0x80, 0xca, 0x7, "756736052037ad755e690969e7a273b1b5485e91b5d0db656e250dcbe4aa6ebcb79c6d8106765b87e05378b031a88ff191cc17b640400fdbc8cd78e2a5b36493ddc4d1412b36063bd5cf11421d11ce772bb12a828c04226387348711a9fde3c46d4cd1fb99f26c97f72479119e514bd2b21254bdb6f155958633737aee15d3c64837832c867b4f6707fd63e977a351ff5aeca1b5c4dbe141478a9018c77efc00005270"}}]}, @NL80211_ATTR_IE={0x33, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb2, 0x2}}, @dsss={0x3, 0x1, 0x88}, @prep={0x83, 0x25, @ext={{}, 0x8, 0x20, @broadcast, 0x8, @broadcast, 0xe8, 0x3ff, @device_b, 0x8}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xaf, 0xfc, "c89cde24178e800926d34f8aabf5095101a7b00936dab933fcb097b4b00e18286ce254c871c10609b80434c5104596e8d134ffffa429684613202781f738633529d704e8943e702e441b50d9d040993d3a7ccd014e38c104d88d65f4ab501af657671f20f9b87b1e171d04b6f8e34c956b52ed9ffa0836dc1b18c0c70a35137d20a4ca5b85f771686f261c0d98cdddc5f3d7c5553f352819fc892e3f5a0133e4da8ff57e02674cdfe76e6b"}, @NL80211_ATTR_FILS_ERP_REALM={0x5b, 0xfa, "f8e0433fabd2227ce35a4084dc798e5c01487fb9f3f80e3565c4db51d32c3f7192a311b62709f7b2222ae225e4a722ac119cea64e11b298b2d5f30eec2c111aca2fb95d5242ddaa99ed50ff7a585c7464acb118d74bd33"}, @NL80211_ATTR_FILS_ERP_RRK={0xb4, 0xfc, "778efb58a92d0b4284733a984d0add7b4835d66282d6d8d95cbac3db1b8edacfa69d365f64aba6c349228ca0e7e3ab4f19433ad8278648670e4f85cbe0bf55a9c71fb3c8cb860308873ac56ebe496721882b8d5c4a18c2f51acbd5ef05756f01dba19ecccf562519ef289476870d1fe086c047209b4c30afd91242893ece92eedf823ad84137dd8c6ecdef4f7994beca756db784a4dc0c807637f5c456a721ffb59778b853c6c02d9e531bbc3e7c50f0"}, @NL80211_ATTR_FILS_ERP_RRK={0xe, 0xfc, "c6ccaff4850417e2512d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7e}, @NL80211_ATTR_FILS_ERP_REALM={0xf4, 0xfa, "24781224a5f8ce6d195f8c39569d5d14f97ae9f5481f17eb5c6a90932ac31a65661210068e9d4a99000e1bf0286527bf2382c7469c3c3e6b07b009dd2e7fb12607ff15a5019e4713ce8456a58d8ac005876fdc41fbb7e80691eda4fc4e6f7fd2f8fcfdb160781ed6b7310cebd3fe0da5a07f18f8498a58a98a212b7107c97fd75490bc91ede2158312ad0d15f8693f70738ad23d6580f37b28177b6da3b68487294784f39440172c22a82dc93b9752b5c858f447203f7699f6ec32690b3606f62408593ec0d5754dbbb2e93f294ad55708b0ea8586f315cd844ec55ab901f73cf60cff97d84c7f3b4cb6711f7237609c"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "fca8cb0d46cb21"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "ecbc558ac13a220acab61850d879"}], @NL80211_ATTR_IE={0x64, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x30, 0x80}}, @ht={0x2d, 0x1a, {0x2081, 0x2, 0x2, 0x0, {0x2, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x2, 0x3d}}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x8, 0xca, @broadcast, 0x549, 0x9a27, 0x401}}, @channel_switch={0x25, 0x3, {0x0, 0x40, 0xc1}}, @link_id={0x65, 0x12, {@random="af4814ade7e7", @device_a, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x4d, 0x62}}, @gcr_ga={0xbd, 0x6}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3140}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "e65cccd1a521"}, @NL80211_ATTR_FILS_ERP_RRK={0x59, 0xfc, "4c145e10f6e8e6d24353025f80baaba50456f8ec80376e9cf4b58665a42f7cdb3f629ab05428718c5ca5347926b6e5001878f0ed3bbabb40b5fb109af8114182095882db1afe9f4ad12b41aa169b1f6aa00ba57077"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}]]}, 0x554}, 0x1, 0x0, 0x0, 0x44000}, 0x4040) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000dc0)={'ip6tnl0\x00', &(0x7f0000000d40)={'syztnl1\x00', r0, 0x4, 0x1, 0x1, 0xe6a0, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x80, 0x7, 0x10000}}) getsockname$packet(r3, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000e40)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000f00)={'ip6_vti0\x00', &(0x7f0000000e80)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x81, 0x7, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000, 0x8, 0x7, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000fc0)={'sit0\x00', &(0x7f0000000f40)={'ip6_vti0\x00', r0, 0x29, 0x7, 0xff, 0xa5d, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x708, 0x40, 0xd404, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000001080)={'syztnl1\x00', &(0x7f0000001000)={'ip6tnl0\x00', r0, 0x29, 0x0, 0x2, 0x8357, 0x4, @local, @empty, 0x8, 0x80b0, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000001180)={'syztnl1\x00', &(0x7f0000001100)={'ip6gre0\x00', r0, 0x2f, 0x40, 0x1, 0x80000001, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7, 0x40, 0x1f}}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001a40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a00)={&(0x7f00000011c0)={0x804, r4, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xee}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb0f}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6b2}}}]}}, {{0x8, 0x1, r9}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfe}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x40, 0x3f, 0xffff}, {0x401, 0x9, 0x7, 0xffff}, {0x83e5, 0x4, 0x12, 0x1}, {0x0, 0x8, 0x1, 0x1}, {0x7ef, 0x3, 0x2, 0x3}, {0xe3e9, 0x3, 0xec, 0x8001}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r0}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}]}, 0x804}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 02:16:20 executing program 2: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/209, 0xd1, 0x1, &(0x7f0000000100)}, &(0x7f0000000180)=0x40) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)="ed7aa40d421bfc12488eec5f9dda80143807c03c7a06026e5d7c4d33c4bd49275455bd0c477f7aee47e535eca629993babecec65e42edc860ab9c86e95fdad1605b3e2e0a4ac11bd65ef4db0ed9e86781756e6cad38c492edea8337f85b33795f9e14b313a85cb75027074949277350ebdcf088ce35d08d26feec40b3432df81518d19d484a350541f0e7e7ad8c25b8d28a54d4329d2b7a628d224d5a6495958dac3b9ca82e0dce8", 0xa8) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0xa0000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r0, &(0x7f0000000340)={0x10100, 0x180, 0x6}, &(0x7f0000000380)='./file0\x00', 0x18, 0x0, 0x23456}, 0xa0000000) write$P9_RSYMLINK(r0, &(0x7f0000000400)={0x14, 0x11, 0x2, {0x0, 0x0, 0x4}}, 0x14) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000440)) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000480)="c6c9917229fe8cb8956b3375cae53e82", 0x10) socketpair(0x0, 0x800, 0x5, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) r4 = msgget(0x0, 0x4) msgctl$MSG_INFO(r4, 0xc, &(0x7f0000000580)=""/91) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x43, 0x0, "c8648b7e293441718959f55a419b8acbdf72277fcc8fe4c94be10e88b0e011f3ed0a6a7a14403090fed1fd72d580004a6fcea215216b452c6c7afac0eea267dd562b3812e0180315228e9ddeaf9e8ed2"}, 0xd8) msgget$private(0x0, 0x51) r5 = syz_open_dev$sg(&(0x7f0000000700), 0x99, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000740)={0x22, ""/34}) 02:16:20 executing program 3: getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000180)=0x7) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000001c0)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x10000, 0x8000) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000240)) syz_genetlink_get_family_id$team(&(0x7f0000000280), r1) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000002c0)) syz_genetlink_get_family_id$team(&(0x7f0000000300), r1) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000340)=0x1) r3 = syz_open_dev$sg(&(0x7f0000000380), 0xbe07, 0x4000) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f00000003c0)=0x9) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000400)=0x1) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000440)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) write$P9_RMKNOD(r4, &(0x7f00000004c0)={0x14, 0x13, 0x2, {0x20, 0x4}}, 0x14) 02:16:21 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x39}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb94c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xedb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000034}, 0x1000c041) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x2a0, r0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x11cc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6f9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdf11}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x150, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c050) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d07}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) socketpair(0x2b, 0x3, 0x3, &(0x7f0000000880)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x4044014) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xf8, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdca7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x962}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004810}, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000b80)=0x47, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x302}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400009f}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xc0, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcb9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2aaf5598}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7179}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) syz_genetlink_get_family_id$gtp(&(0x7f0000000e80), r3) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4080) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair(0x2, 0x5, 0x1, &(0x7f00000010c0)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000001100)=0x5, 0x4) [ 103.419477] audit: type=1400 audit(1750212981.021:7): avc: denied { execmem } for pid=276 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:16:21 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040005) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x224, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x208, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa447}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x80, 0x1f, 0x3f}, {0x2, 0x3f, 0xe6}, {0x6, 0x9, 0x6, 0xcc5}, {0x9b5d, 0x1, 0xbe, 0x7}, {0x1, 0x3, 0x0, 0x4d4}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x81, 0x1, 0x9}, {0x7, 0x4, 0x3f, 0x40b}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x880}, 0x20000001) socketpair(0x23, 0x3, 0x8, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl0\x00', r0, 0x4, 0xff, 0x5d, 0x2, 0x16, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x700, 0x40, 0x0, 0x5}}) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x401}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x800) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0}, &(0x7f0000000700)=0x14) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x10000, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', r4, 0x29, 0xff, 0x3, 0x5, 0xc, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x87, 0x10001, 0x7}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x48000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'ip6tnl0\x00', r1, 0x4, 0xea, 0x7f, 0xdf, 0x10, @empty, @local, 0x10, 0x700, 0x8000, 0x8}}) getsockname$packet(r3, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b00)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b40)={'syztnl1\x00', r4, 0x4, 0x3f, 0x1, 0x101, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @remote}, 0x700, 0x20, 0x80, 0x6}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001200)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000c00)={0x5ac, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r4}, {0x238, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x50fc1dd8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x17bf}}}]}}, {{0x8, 0x1, r0}, {0x1d8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x80}, 0xe001) r13 = socket$netlink(0x10, 0x3, 0x16) sendmsg$TIPC_NL_NODE_GET(r13, &(0x7f0000001500)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000001280)={0x204, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3c, 0x3, "771fba0c52aca87c31952965cd03fc17f1b549b3ef30ea93aaf80890b8f31e8ce9b0ef453ec773da615e72a30d764837cfaccea517fd5f33"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x3b, 0x3, "8b46818a2dc4b890ed9eddd7325f3892658af002f2596e89dab4883b481f4b90a01f4aa99624f1edb69c21c5151f2459784c46f9c5aa44"}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xab56}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffab7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3b6b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd0}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x8050}, 0x20000000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001880)={&(0x7f0000001600)={0x248, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r11}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r12}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 02:16:21 executing program 6: timer_create(0x4, &(0x7f0000000000)={0x0, 0x1, 0x954a667052eb1295, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_gettime(r0, &(0x7f0000000080)) timer_delete(0x0) timer_create(0x6, &(0x7f0000000280)={0x0, 0x0, 0x1, @thr={&(0x7f00000000c0)="ada7acf8b5e9cb4ba43e6ebb0a750c2eaa12afb8965fdc0419b88af2660ba5d790652574c8fbf54aa20f97bb241f0df2e9558db25e38b8937aee95ee8b27682a229011fbacdb76ae1521a576b3524d10dd1b48dc97580391c4bc86653e4f96e73b5db8a9cb695a3bb10b5e80399cb001fdd6ab48a82905731d0f4378bfd45327232a0987ae6bfe8e6efe05e06960d45feb6618f4d83af711036a5c076fd2e1c69072071990828430737ff99aef174280616fa21588a67fdf08953045d62035c33b5c6a7724fe891c39fa21ab05ded4edfd540c8e2e2c2c8eb183804e574203bb629ed60bf6b871cf6b466a9808d716", &(0x7f00000001c0)="aa328c20ba5f807aea581e7e9ba5914ddd3c051fb5d361251c13f0ad533586c9fbacca50bab3d55083ffab9bb4295de4adda426b9a3be95550a3140884c29ef3b1e50235120e85eda6a315fa49181dbabfb40683e52a3ea0082fe7a3b22133e48a07ab32af80706f0bfd5df023e86b97162494540a6e6c84d5f43ac9ccd28d4f1e5c712d"}}, &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {r2, r3+60000000}}, 0x0) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000380)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2000, @fd_index=0x2, 0x0, &(0x7f00000003c0)=""/51, 0x33, 0xbaa1a37fd2e72411}, 0x7fffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb92c}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8a}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x90}, 0x4004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000700)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000600)="db6e1c9800c989555842f3b9edbe083d29a1a683f7e72e8720ca6e28107ace5d44bfe2178b53941f74a50c2548826d40071929c48ca690ab2a54a542ddd6b127947cb2a7f592181dac4279779b8a4485a13f50e898c61b6b74fcf033c57ac45682606fa415883b557e81641a8ca64889e7d4bab7134e81c2c5a408688b46114ec4cf0a37b0326fa93fc2abdc9dbcafd2aa472010e19dc10737602e9fde13c249dad39128f756e71eb97d7b3324cd4fb309a1065cea89586e2074bb08d22230c9e37cd5a71e592fa80841a8fcedbf4f1374c1ef441213f506704f2711dbc4fb9b", 0xe0}, 0x68) r5 = syz_io_uring_setup(0x6e13, &(0x7f0000000780)={0x0, 0xffffffff, 0x1, 0x2, 0x103}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000800), &(0x7f0000000840)) syz_io_uring_setup(0x6972, &(0x7f0000000880)={0x0, 0xb624, 0x8, 0x1, 0x102, 0x0, r5}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000900), &(0x7f0000000940)) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000980), 0x40000, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r6, 0x1) socketpair(0x3, 0x4, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000a00)={0x4399f790, 0xefc0, 0xb8a4, 0x1, 0x40}, 0x14) mremap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x8000000) 02:16:21 executing program 7: ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r0 = socket$netlink(0x10, 0x3, 0x5) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x32d6}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x24014040) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044091}, 0x7803d358bf4bfab7) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000240)) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x4, 0x1810c0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000002c0)=0xf4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xe510008a}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x23c, 0x18}}}}, [@fils_params, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x200480c5) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000440)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004841}, 0x4000) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r4) r5 = msgget$private(0x0, 0x290) msgsnd(r5, &(0x7f00000005c0)={0x0, "764acb0d0e16d0353161930fccf43d5a54516893dcedbfceeb1291d4ae9a6dc1fefc16aac1ac8780b83c890378409045ce6a44fab492d2ef52bd6ece52e97e0e7b0df12d8ff33e5c5a1c94316d07a0452899bbf173d0f8669d71acdccb46d78858cf29d2fcdd865f5b7051e8f37cc7f1f6bb68e8c626348bfb8d692dc4eac4e4fbcc56b90503"}, 0x8e, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x7) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000001000)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000940)={0x680, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xed}}, {0x8}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1, 0xfd, 0x3f, 0x6}, {0x1, 0x5, 0x0, 0xfffffff9}, {0x8, 0x1, 0x80, 0x7fffffff}, {0x2, 0x1, 0x4}, {0x2, 0x3, 0x5, 0x3d}, {0x5, 0x2, 0x3f, 0xa0000000}, {0x6, 0x3, 0x0, 0x7fff}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffff94}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x680}, 0x1, 0x0, 0x0, 0x4801}, 0x94) [ 104.985338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.989709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.992304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.000602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.004670] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.070761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.072601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.075160] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.078445] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.079955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.081418] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.091256] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.093714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.095330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.106657] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.109428] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.120167] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.122935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.131217] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.134440] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.137461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.165560] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.170993] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 105.182340] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.184648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 105.224108] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 105.226604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 105.229305] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 105.230536] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.233308] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 105.237123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.243524] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 105.250368] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 105.258915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 105.270333] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 105.273413] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 105.275290] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 105.276568] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 105.309525] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 105.361025] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 107.071437] Bluetooth: hci0: command tx timeout [ 107.200146] Bluetooth: hci2: command tx timeout [ 107.262137] Bluetooth: hci3: command tx timeout [ 107.263278] Bluetooth: hci1: command tx timeout [ 107.326843] Bluetooth: hci4: command tx timeout [ 107.390962] Bluetooth: hci6: command tx timeout [ 107.391576] Bluetooth: hci5: command tx timeout [ 107.519202] Bluetooth: hci7: command tx timeout [ 109.117899] Bluetooth: hci0: command tx timeout [ 109.245956] Bluetooth: hci2: command tx timeout [ 109.310006] Bluetooth: hci3: command tx timeout [ 109.310534] Bluetooth: hci1: command tx timeout [ 109.374874] Bluetooth: hci4: command tx timeout [ 109.438275] Bluetooth: hci5: command tx timeout [ 109.438777] Bluetooth: hci6: command tx timeout [ 109.565878] Bluetooth: hci7: command tx timeout [ 111.166230] Bluetooth: hci0: command tx timeout [ 111.294069] Bluetooth: hci2: command tx timeout [ 111.358243] Bluetooth: hci1: command tx timeout [ 111.359268] Bluetooth: hci3: command tx timeout [ 111.421955] Bluetooth: hci4: command tx timeout [ 111.486661] Bluetooth: hci6: command tx timeout [ 111.487908] Bluetooth: hci5: command tx timeout [ 111.614459] Bluetooth: hci7: command tx timeout [ 113.214230] Bluetooth: hci0: command tx timeout [ 113.341952] Bluetooth: hci2: command tx timeout [ 113.405961] Bluetooth: hci3: command tx timeout [ 113.406422] Bluetooth: hci1: command tx timeout [ 113.470259] Bluetooth: hci4: command tx timeout [ 113.534097] Bluetooth: hci5: command tx timeout [ 113.534588] Bluetooth: hci6: command tx timeout [ 113.662848] Bluetooth: hci7: command tx timeout [ 165.051137] syz-executor.0 (284) used greatest stack depth: 24912 bytes left [ 165.119528] syz-executor.3 (286) used greatest stack depth: 24784 bytes left [ 165.288447] syz-executor.7 (290) used greatest stack depth: 24576 bytes left [ 167.667958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.675224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.676747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.687382] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.693667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.704233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.707360] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.711065] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.716480] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.718208] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.729313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.732501] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.735282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.735947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.739513] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.757519] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.766580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.777903] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.792555] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.800605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.837702] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.847184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.850272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.857919] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.862175] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.863775] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 167.866404] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 167.869176] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 167.871019] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 167.873033] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 167.886399] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 167.896190] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 167.898102] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 167.905919] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 167.909575] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.914199] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.918111] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 167.918951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.968076] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.980642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.725908] Bluetooth: hci0: command tx timeout [ 169.790084] Bluetooth: hci1: command tx timeout [ 169.853978] Bluetooth: hci3: command tx timeout [ 169.854938] Bluetooth: hci2: command tx timeout [ 169.918141] Bluetooth: hci5: command tx timeout [ 169.983066] Bluetooth: hci7: command tx timeout [ 170.045961] Bluetooth: hci6: command tx timeout [ 170.110984] Bluetooth: hci4: command tx timeout [ 171.774298] Bluetooth: hci0: command tx timeout [ 171.839872] Bluetooth: hci1: command tx timeout [ 171.902197] Bluetooth: hci2: command tx timeout [ 171.902340] Bluetooth: hci3: command tx timeout [ 171.965890] Bluetooth: hci5: command tx timeout [ 172.032846] Bluetooth: hci7: command tx timeout [ 172.093888] Bluetooth: hci6: command tx timeout [ 172.158287] Bluetooth: hci4: command tx timeout [ 173.824855] Bluetooth: hci0: command tx timeout [ 173.887010] Bluetooth: hci1: command tx timeout [ 173.950347] Bluetooth: hci3: command tx timeout [ 173.950400] Bluetooth: hci2: command tx timeout [ 174.013895] Bluetooth: hci5: command tx timeout [ 174.078961] Bluetooth: hci7: command tx timeout [ 174.141993] Bluetooth: hci6: command tx timeout [ 174.206059] Bluetooth: hci4: command tx timeout [ 175.869957] Bluetooth: hci0: command tx timeout [ 175.934107] Bluetooth: hci1: command tx timeout [ 175.998044] Bluetooth: hci3: command tx timeout [ 175.999063] Bluetooth: hci2: command tx timeout [ 176.062467] Bluetooth: hci5: command tx timeout [ 176.126979] Bluetooth: hci7: command tx timeout [ 176.190851] Bluetooth: hci6: command tx timeout [ 176.254833] Bluetooth: hci4: command tx timeout [ 230.391395] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.393736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.395751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.400707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.402992] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.415044] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.421715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.449732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.453149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.453347] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.456488] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.463411] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.467500] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.481432] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.491115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.497710] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.501090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.503943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.517740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.527143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.641139] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.643114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.659288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.666492] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.678055] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.756173] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 230.761345] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 230.764286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 230.807571] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 230.844395] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.870205] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 230.874633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 230.876986] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 230.884454] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 230.900468] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 230.995259] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 231.031695] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 231.080490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 231.103410] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.119289] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 232.446890] Bluetooth: hci0: command tx timeout [ 232.509922] Bluetooth: hci2: command tx timeout [ 232.573933] Bluetooth: hci1: command tx timeout [ 232.637901] Bluetooth: hci3: command tx timeout [ 232.895043] Bluetooth: hci4: command tx timeout [ 232.957916] Bluetooth: hci5: command tx timeout [ 233.085895] Bluetooth: hci7: command tx timeout [ 233.278133] Bluetooth: hci6: command tx timeout [ 234.495079] Bluetooth: hci0: command tx timeout [ 234.557915] Bluetooth: hci2: command tx timeout [ 234.622902] Bluetooth: hci1: command tx timeout [ 234.687039] Bluetooth: hci3: command tx timeout [ 234.942213] Bluetooth: hci4: command tx timeout [ 235.007359] Bluetooth: hci5: command tx timeout [ 235.136169] Bluetooth: hci7: command tx timeout [ 235.327208] Bluetooth: hci6: command tx timeout [ 236.542889] Bluetooth: hci0: command tx timeout [ 236.606228] Bluetooth: hci2: command tx timeout [ 236.671246] Bluetooth: hci1: command tx timeout [ 236.735017] Bluetooth: hci3: command tx timeout [ 236.990261] Bluetooth: hci4: command tx timeout [ 237.055177] Bluetooth: hci5: command tx timeout [ 237.183995] Bluetooth: hci7: command tx timeout [ 237.373999] Bluetooth: hci6: command tx timeout [ 238.589888] Bluetooth: hci0: command tx timeout [ 238.654779] Bluetooth: hci2: command tx timeout [ 238.718197] Bluetooth: hci1: command tx timeout [ 238.782893] Bluetooth: hci3: command tx timeout [ 239.039083] Bluetooth: hci4: command tx timeout [ 239.101871] Bluetooth: hci5: command tx timeout [ 239.230083] Bluetooth: hci7: command tx timeout [ 239.422890] Bluetooth: hci6: command tx timeout [ 292.692202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.698265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.701187] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.708877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.715726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.879158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.881927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.886097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.891756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.901358] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.918681] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 292.923319] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.933002] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.958185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.964202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.028352] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 293.032495] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 293.041205] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.041509] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 293.059677] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 293.091163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 293.095230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 293.116344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 293.146065] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 293.162536] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.195307] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 293.219729] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 293.233548] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 293.238018] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.251382] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.264202] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 293.268257] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 293.292278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.297506] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 293.302589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.308467] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 293.317595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.320042] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 293.358873] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 293.395535] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 294.783564] Bluetooth: hci0: command tx timeout [ 294.974877] Bluetooth: hci2: command tx timeout [ 295.038981] Bluetooth: hci1: command tx timeout [ 295.229997] Bluetooth: hci3: command tx timeout [ 295.294085] Bluetooth: hci4: command tx timeout [ 295.421942] Bluetooth: hci6: command tx timeout [ 295.422112] Bluetooth: hci5: command tx timeout [ 295.487323] Bluetooth: hci7: command tx timeout [ 296.830409] Bluetooth: hci0: command tx timeout [ 297.023072] Bluetooth: hci2: command tx timeout [ 297.085920] Bluetooth: hci1: command tx timeout [ 297.277888] Bluetooth: hci3: command tx timeout [ 297.342117] Bluetooth: hci4: command tx timeout [ 297.469855] Bluetooth: hci5: command tx timeout [ 297.470913] Bluetooth: hci6: command tx timeout [ 297.533870] Bluetooth: hci7: command tx timeout [ 298.878836] Bluetooth: hci0: command tx timeout [ 299.071086] Bluetooth: hci2: command tx timeout [ 299.134120] Bluetooth: hci1: command tx timeout [ 299.326100] Bluetooth: hci3: command tx timeout [ 299.389876] Bluetooth: hci4: command tx timeout [ 299.519353] Bluetooth: hci6: command tx timeout [ 299.519385] Bluetooth: hci5: command tx timeout [ 299.582107] Bluetooth: hci7: command tx timeout [ 300.927872] Bluetooth: hci0: command tx timeout [ 301.117882] Bluetooth: hci2: command tx timeout [ 301.182244] Bluetooth: hci1: command tx timeout [ 301.376119] Bluetooth: hci3: command tx timeout [ 301.438026] Bluetooth: hci4: command tx timeout [ 301.565943] Bluetooth: hci6: command tx timeout [ 301.566014] Bluetooth: hci5: command tx timeout [ 301.630912] Bluetooth: hci7: command tx timeout [ 354.965257] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.968734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.973555] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.981232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.992960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.088626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 355.093052] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 355.097548] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 355.130762] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.139316] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.295665] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.299763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.303164] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.315964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.323367] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.397490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.406099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.410598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.422318] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.432291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.493363] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 355.509990] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 355.511699] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 355.513643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.522394] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.524926] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 355.533518] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 355.541374] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 355.546717] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.548706] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 355.557235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 355.560276] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 355.569325] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 355.579308] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.581619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 355.590292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 355.592409] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 355.597360] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.608997] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.654208] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 357.053939] Bluetooth: hci0: command tx timeout [ 357.182042] Bluetooth: hci1: command tx timeout [ 357.438874] Bluetooth: hci2: command tx timeout [ 357.501894] Bluetooth: hci3: command tx timeout [ 357.694881] Bluetooth: hci5: command tx timeout [ 357.757996] Bluetooth: hci7: command tx timeout [ 357.758032] Bluetooth: hci6: command tx timeout [ 357.758941] Bluetooth: hci4: command tx timeout [ 359.102038] Bluetooth: hci0: command tx timeout [ 359.229943] Bluetooth: hci1: command tx timeout [ 359.489095] Bluetooth: hci2: command tx timeout [ 359.549961] Bluetooth: hci3: command tx timeout [ 359.743924] Bluetooth: hci5: command tx timeout [ 359.806084] Bluetooth: hci4: command tx timeout [ 359.807006] Bluetooth: hci6: command tx timeout [ 359.807214] Bluetooth: hci7: command tx timeout [ 361.151775] Bluetooth: hci0: command tx timeout [ 361.279901] Bluetooth: hci1: command tx timeout [ 361.534823] Bluetooth: hci2: command tx timeout [ 361.599014] Bluetooth: hci3: command tx timeout [ 361.791147] Bluetooth: hci5: command tx timeout [ 361.854138] Bluetooth: hci6: command tx timeout [ 361.854436] Bluetooth: hci4: command tx timeout [ 361.854726] Bluetooth: hci7: command tx timeout [ 363.197925] Bluetooth: hci0: command tx timeout [ 363.327168] Bluetooth: hci1: command tx timeout [ 363.581996] Bluetooth: hci2: command tx timeout [ 363.646106] Bluetooth: hci3: command tx timeout [ 363.838059] Bluetooth: hci5: command tx timeout [ 363.902559] Bluetooth: hci6: command tx timeout [ 363.903059] Bluetooth: hci7: command tx timeout [ 363.903476] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 02:21:21 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=4b952e4da9267483 RDX=00000000915d54c6 RSI=000000005e406224 RDI=0000000000104185 RBP=ffffffff85c1cc40 RSP=ffff88806ce08c98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8151b05e RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2271ab6260 CR3=0000000025afd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff8880094b0040 RCX=ffffffff81906df8 RDX=ffff88802c550000 RSI=ffffffff819074b5 RDI=ffff8880094b0000 RBP=ffffea0000605600 RSP=ffff88802978f7b8 R8 =0000000000000000 R9 =fffff940000c0ac0 R10=0000000000000001 R11=0000000000000001 R12=ffff88802978f858 R13=ffff88802978f878 R14=0000000000000000 R15=ffff88807ffdc640 RIP=ffffffff819074b9 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007efd2b7076f4 CR3=00000000269c6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007efd2b71647000007efd2b715f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000