Warning: Permanently added '[localhost]:1231' (ECDSA) to the list of known hosts. 2025/06/20 17:50:40 fuzzer started 2025/06/20 17:50:41 dialing manager at localhost:40967 syzkaller login: [ 110.829878] cgroup: Unknown subsys name 'net' [ 110.956884] cgroup: Unknown subsys name 'cpuset' [ 111.006210] cgroup: Unknown subsys name 'rlimit' 2025/06/20 17:50:59 syscalls: 202 2025/06/20 17:50:59 code coverage: enabled 2025/06/20 17:50:59 comparison tracing: enabled 2025/06/20 17:50:59 extra coverage: enabled 2025/06/20 17:50:59 setuid sandbox: enabled 2025/06/20 17:50:59 namespace sandbox: enabled 2025/06/20 17:50:59 Android sandbox: enabled 2025/06/20 17:50:59 fault injection: enabled 2025/06/20 17:50:59 leak checking: enabled 2025/06/20 17:50:59 net packet injection: enabled 2025/06/20 17:50:59 net device setup: enabled 2025/06/20 17:50:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/20 17:50:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/20 17:50:59 USB emulation: enabled 2025/06/20 17:50:59 hci packet injection: enabled 2025/06/20 17:50:59 wifi device emulation: enabled 2025/06/20 17:50:59 802.15.4 emulation: enabled 2025/06/20 17:50:59 fetching corpus: 0, signal 0/0 (executing program) 2025/06/20 17:51:00 starting 8 fuzzer processes 17:51:00 executing program 0: ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1af1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/virtio', 0x1, 0x70) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private2}}, &(0x7f0000000180)=0xe8) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000300)={'security\x00', 0x0, [0x3ff, 0x7fffffff, 0x6, 0x81, 0xa5c4]}, &(0x7f0000000380)=0x54) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/class/pci_bus', 0x0, 0x104) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x5, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}}, 0x20001080) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000500)={0x7eda}, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1b0, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x35700451}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x93}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xced}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_NET={0x4}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20000805}, 0x24000001) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x890) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x94, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000840}, 0x24020) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000800}, 0x20000000) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x820010}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r3) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000010c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000d80)={0x2d8, r7, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9268}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb6}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3b}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8083}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff0001}, @TIPC_NLA_NODE_ID={0xe3, 0x3, "1716b4e8114c971788fd61fd6f322d1cc4277818e242ba353d633e5c6ff23bc2d31f2a4c4214fae0b4e6ba0333fc75b1eb94575c7a9e7ad72e8dc41d91664126dc9bebc85400eed4d838bb265483e03cf71d9da02574eeecdb3b2bfb893d384e5441bfaa81bc10188dba857bae90249c4a8a8d3e818c3e19a61572d9b48d033c3353cabedb01dac781f4976e6dc9ca9dafb2b8870e0945f9769510f009c03f25dea1ed68a525578e921dc6443054d86833e7641e9c0820d944cccc72d8e0362df8a67ee066b480110c96bd54fe1578e050585759e1bd48b9c25ab1b2fa518e"}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x71}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff534b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}]}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4}, 0x4015) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x104a00c}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x124, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3e7d6ad4cdfb"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac9e0da7af4ffe5b717dddb3af"}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8432b7d8fe585f51a417be5a31"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "97778acd439577e2936357567d"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ae}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x65d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_SSID={0xd, 0x34, @random="f391c3e1f584270538"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x124}, 0x1, 0x0, 0x0, 0x801}, 0x4) 17:51:00 executing program 1: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x80000) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400, 0x7ff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21, 0x6a, 0x4e23, 0x81a, 0xa, 0x80, 0x80, 0x3a, 0x0, r1}, {0x40, 0x4e0d, 0x6, 0x5, 0x9, 0x2, 0x8000, 0x9}, {0x6, 0x8, 0x3, 0x3}, 0x1, 0x6e6bbc, 0x2, 0x1, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x33}, 0x2, @in=@remote, 0x3506, 0x4, 0x3, 0x6, 0x8, 0x9d4, 0x5}}, 0xe8) r2 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d34, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe4, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0x3f, {0x9, 0x21, 0xe957, 0x4, 0x1, {0x22, 0xc2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x74, 0x80}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x1, 0x9, 0x6, 0x10, 0xff}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x1, [{0xe6, &(0x7f0000000380)=@string={0xe6, 0x3, "47dbbbe820ee0f030fc4fbddaf859c8e30cf5c37dde9abb7d082e54c4bb3cf8b65070f6e0a2db1fcbc3af3bbcac53c4cfe691b497549bfe4dce0c15f9b5ddfeae1ebb0c3e5871c8b3571d3ec5f3369d73f898cecf0365b8ff227348137945420c33b60785af717d8a1f9ddbb13b25d6a63eb636db989ec0ede1df194bff8056f171da343478634bfbd690c71c6f37b03436634008de9f69faff391aeda8ec2bd8725adb6e670470f7fae04f0fac607bc3b4ab270ada6d8e6feec34d25f694db58c9d717c261768d5213da77cda5e0c61b8bcb52cf79ebec065cb900de22de8b0417b6497"}}]}) syz_usb_control_io$hid(r2, &(0x7f00000005c0)={0x24, &(0x7f00000004c0)={0x0, 0x23, 0x3, {0x3, 0xa, '?'}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f0000000540)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "ea52956e"}, @local=@item_4={0x3, 0x2, 0x2, "fcf36d31"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0x4, 0x1, {0x22, 0x740}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000600)={0x20, 0x0, 0xb0, "04c67adba6cc727e5914261185bca7554d3c4057b9a4163acab3d84af884e07224fb83957ee587c2da20744fbdb42abe04b44de9c5d0243d045cd5a9b1cd0ad9f3e2ae1d86c1cb72b6a89b49df25d19110105a23af5f1e8b10bb40573bed9c68646eb657e3007bd86a6d9e71d635dcbc63d104bf3dcaf66c5b72a2e9ec75a262247b142417fb60bd1ff4130601bb59cc540cb9c9503d53467be3e3e3ce22ab72239cee30696a24c15d1b994ca9557d17"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000740)={0x20, 0x1, 0x96, "986d38d8a7bc06cca00addbfbaf9bb417f952b17caf0f72948992103319c60f42fd2924fa321c998ba122cbe9c4ede8605e9f1e083774d129d23887729c52a588622aa190b75d341b9dda50ecf26a16d9c0f724722d72b7e96e61aa6a1d3e141fd2b51459e9560fe5ab9c2dc5abc80bd21aa9712c54d42be9fc3cb2c1f409a7709b783d94fcce09348320ed165ebc1c5a3b81efb1cf0"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x9}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c080) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f0000000980)="a05f74f413f26e767a46e3c4bea62d8da0e8e2e1a46862734f6002f6246e43ddcf8ddef40860d6f69058d0ec2368deec6833d1a121fedce4364e6b3c26be46846073e6da5f8f7dd819151d18453aade1f7223c0ba9a481717f3e575591f468506a6690d455cbd35b94d6196dd94e29b2e89bebe716fcffa87ba393404b3c2615f7acec6d6caf8d7d3486b865621578c58c1d93c5c88f6e36290f11ed3ccd15346e6ec4a8e91bd5da9548e3d0506d1ee5844b2d56741d2f67883df086e28ebc6e1241e1eaf5a7b72fcb9bfc3c4795bf464024f45f405375157611f2", 0xdb, 0x4044054, &(0x7f0000000a80)={0x11, 0x4, 0x0, 0x1, 0x15, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000ac0)='freezer.state\x00', 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000b00)=@req={0x6, 0x20, 0x1, 0x2}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b40)={{{@in=@empty, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000c40)=0xe8) r5 = openat$cgroup_ro(r4, &(0x7f0000000c80)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_devices(r5, &(0x7f0000000cc0)='devices.allow\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001240)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000001340)=0xe8) syz_mount_image$nfs(&(0x7f0000000d00), &(0x7f0000000d40)='./file0\x00', 0xffff, 0x7, &(0x7f0000001180)=[{&(0x7f0000000d80)="1f648d6ec094b6bbb7d52f9cd97c6e5e630f9dcb041abc067594ac38a1c5f8e33ff0475bd995888b038315d4ff65b69cf40d051c43b6b3c11e0e125fc0b4623e4a1a309458243e8cd12b408f1c5df2a4b6dcce2a536a0fc67c05c626951a30b7d63aff61da6d6128085b62fe5e1f10501d685e15de9118802fe8de2bed2b765c98e0698a2a99e5ff50c7672c637e04677e5770a95b1b1ce7d8364d41221bf8bd2a13dc82c01154dc67a7f2e230330a8e504325364bb032022d04fecfac8292a1ff8e3bdf6fd4e50748ec1a7d90af3217fc50717b2462a01827cc72bd361407fe9df10129b0641cef07ed043e678d5f8004dbd564c6", 0xf5, 0x7}, {&(0x7f0000000e80)="5a03de6f5f131d2a0d9665f835ceb82601f1bf95cc16", 0x16, 0x1}, {&(0x7f0000000ec0)="a33e626e7b9e6c3a4845eb3740407b4dfaf51f1f7c248760180a5d79f2dac339e57a38110a0e5b1e658c43749947a72a6e7979f094092e11a6ae06aec5fd8db68313db7b0374efa45f5871be94b54ced92fd72130287e045546f861a40d077a0cde8809223e89fbf53916d26cccee59563574cef961492327376b16dfaea531e364cb359baf22297e6dfad99e2fdaaa447488e230d109f7559df", 0x9a, 0x6}, {&(0x7f0000000f80)="e717d68f735d0365b937280cf8e9b3ea02e53f6e0b9199f0e10939c36423a7dc780aeb8ba221be05e25e330ecf787171c968327a12ac13cd2798f2a678656b1244b8c2f37ed42f924664b1aa3aabf1c12876c88d22d61d3d6b4f6edeb035d99c4876e4494febb700281e8abaee599ea0d31dbcc344cc7984ef0b610c6052df2dec8e6bad128ae37efb00325004da3f675c9d721807af29e8712d84fd8a3990c391762f258a29929f146e9a6481", 0xad, 0xac40}, {&(0x7f0000001040)="2a5d8c7b9a2ae099ca9f370be6c6d18daf481ba3ccd3fab6a2e7e548c0dcadc46fd524d98decf4a8c3170052d45fac6208ced6ac87bc7e5fc569114c5fa9ff6510", 0x41, 0x6}, {&(0x7f00000010c0)="6edea954c5e7da75bbbae5e0256046fdac4636e6df90c5627b98c8408c27d29115ef10b6cba472027a0ba31fc3b5eb0f08db88f0f321792eaf3e7950f5a8afbeb3ec842b383cc0ef50e8a94782df0d5ef474ebcc81ce1755c89214e3ad68b0f090d5f95a2e2165591dda", 0x6a, 0x400}, {&(0x7f0000001140)="16614c3c297b4d802bd21525105d0931c4c1e2be7aae9f6f7dfc673fe36b541bcb2d1765b9e2", 0x26, 0x8}], 0x800000, &(0x7f0000001380)={[{}, {'hugetlb.2MB.rsvd.usage_in_bytes\x00'}, {'@\xe9^'}, {'freezer.state\x00'}], [{@dont_measure}, {@obj_user={'obj_user', 0x3d, '-!$^\\&$+^/^-#'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':}:,:\xd4$,\''}}, {@subj_type}, {@uid_eq={'uid', 0x3d, r6}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001440)={@loopback, @private}, &(0x7f0000001480)=0x8) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/module/pcmcia', 0x10001, 0x16) openat$cgroup_procs(r7, &(0x7f0000001500)='cgroup.threads\x00', 0x2, 0x0) r8 = openat$cgroup(r5, &(0x7f0000001540)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f0000001580), 0x2, 0x0) 17:51:00 executing program 2: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={0x384, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc608}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1eb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xed}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x1a0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "e2eb955f1be03f58b333176e496604c53707638137610682fe2b955edc7a8f09be"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0xa4, 0x3, "e15780358154698fb3d59b4d009fba45cb3c47aea75bc5771acf730ab4f065dbecb7010536eca4958b6841079f908bee02d66342b730718fcbf4b36cc87df45b9d66ca04f9637b24d560cd4b84f62eb93d50ca5c5808b72215b215e8d18e263dc9446ccf347289870b215c640f78166eefe2d32e118f616f4af33460f148a51abb538db2d73c496be16187b94c5abc56b40d244aea8ca935d800de57601fe7d6"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "dd85f20b4cb35eafc9b0aa14859e9f440d3e40787e151a67a1f9b6ec76bf"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "63537dc179bb89444482f7c8c4b7cdc68fe46f2c929760a637e52ec9"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2325}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x31fd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffcede}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa2000000}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x430}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x50a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x961}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x27}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/forcedeth', 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000600)={@rand_addr=0x64010100, @broadcast}, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/class/wmi_bus', 0x107700, 0x100) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x4c}}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x115000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000800)={'netpci0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000d00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000880)={0x418, 0x0, 0x108, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4946b34d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd47}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcf8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc75a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb07}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa3dc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd0d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7b0d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @private0, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xdb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}}}}]}, @TIPC_NLA_SOCK={0xcc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdd}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5fe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc73}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x23e7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x78}]}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @loopback, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc4, 0x3, "e9ff74e664c3d08ccb8954159f7877d9025a85e6b0041617b580b2980b12b858667be0997c5abbf13c99562735b9d6f0b15a7eb448a2781e491e4297fc35a4dcd46a754fbd65a3a1963b72d735735886cb68238fb9ebb7664db9bb92698fdb4b822bb80593bc445f1d957ea12fe1747b7f8f02ff72acba321552fbd0254c6f1a5b1ff6f8e6254d43340bb51eac105eb533d7e3c19799df4e785a2025f30def59904b383035c12ee301cf4280af425fa7793c57b7049e1444165f9f83e751553a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc1a7}]}]}, 0x418}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000100) r4 = accept$inet(r0, &(0x7f0000000d40)={0x2, 0x0, @remote}, &(0x7f0000000d80)=0x10) r5 = accept4$inet(r4, &(0x7f0000000dc0)={0x2, 0x0, @dev}, &(0x7f0000000e00)=0x10, 0x80000) r6 = accept$inet(r5, &(0x7f0000000e40)={0x2, 0x0, @broadcast}, &(0x7f0000000e80)=0x10) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001200)=@filter={'filter\x00', 0xe, 0x2, 0x2dc, [0x0, 0x20000f00, 0x20000f30, 0x200011ac], 0x0, &(0x7f0000000ec0), &(0x7f0000000f00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x11, 0x4, 0x0, 'sit0\x00', 'veth0_to_batadv\x00', 'veth1_to_hsr\x00', 'bond_slave_1\x00', @local, [0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0xff], 0x6e, 0x9e, 0x116, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3f}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xffff7fff, 0x2, 0x7, 0x0, 0x0, "e98df5d5157770ef7aa93beb88a0e50e3a637cdca7bfb07f6abffbd01aab2a488d7c43ddefcb576fc1c931e9fdc3c5c83e66c19827e6f27a4e1bb10db90f56a5"}}}}, {0x5, 0x28, 0xa01, 'veth0_to_bridge\x00', 'rose0\x00', 'bond_slave_1\x00', 'veth1_to_bridge\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0x0, 0xa4033461248fd09d], @link_local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xe6, 0xe6, 0x136, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@loopback, @empty, [0xff000000, 0xffffffff, 0xffffffff, 0xff], [0xff000000, 0xff000000, 0x0, 0xff], 0xe0, 0x4, 0xa2, 0xc, 0x4e24, 0x4e20, 0x4e21, 0x4e24}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00', {0xfff}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x354) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0), r1) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000016c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001680)={&(0x7f0000001300)={0x344, r7, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6fd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x38}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbebb2b86}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc05}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff2855}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x174, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcaa1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f8c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x4008000}, 0x4090) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001740)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001780)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 17:51:00 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x100, 0x100) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28000804}, 0x41) r2 = syz_open_dev$rtc(&(0x7f0000000180), 0x6c8, 0x107800) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1ee) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000200)={0x23, 0x16, 0x0, 0x17, 0x8, 0x3ff, 0x1, 0x1f}) r4 = fork() perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x4f, 0x40, 0x23, 0x0, 0x0, 0x1, 0x1210, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x8000, 0x1, 0x4c, 0x3, 0x4b, 0x6, 0x1, 0x0, 0x3, 0x0, 0x8001}, r4, 0x5, r1, 0xa) r5 = socket$inet(0x2, 0x6, 0x10000) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000300)={'mangle\x00', 0x6b, "64d1684c86d9e0c73c80558caca82a612a6c1b91fafc6e0f44227e15e923238621286252035c1737471015fb081ecc7887390ca25d86b9ab00e38a760daaf4b6079976dc75ceae1f74f54e07a81513ac67b41d5739247c8dc5e5bd302e9df709c14b2f6b92474912feaa32"}, &(0x7f00000003c0)=0x8f) sched_setscheduler(r4, 0x1, &(0x7f0000000400)=0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/class/scsi_device', 0x200, 0x82) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000480)) r6 = syz_mount_image$nfs4(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x6, 0x6, &(0x7f0000000940)=[{&(0x7f0000000540)="35aaa6decb20a5dbc9228445f3025c7c104b9f894c5de74bb1201aacc95a3bad1a0ef3b279d8e942672a3869248062c1055604527f73b815da2c3ac4d98826b8ee21e1a71939e375f1d4e0c91a261f2d8984865955f29856ebaa44a8e986fb147a2696dc0b48d58ec568c05cf2d7faa999d1efb51741de38f3a2de32844ce3991409862503c55d510da0da158a2117e0556e088f80", 0x95, 0x3}, {&(0x7f0000000600)="282247cf08e2fdddfa1b212f60ef0cfa9aaad7ee57fdcba00f4fd9cd6252f0a5e77b3dab1a8053e3bb1aeff41a2d19f9f666841f863d3566df4bc6c1a3f3a456d1100f305c3740428926dc296a79c7", 0x4f, 0xfffffffffffffffb}, {&(0x7f0000000680)="57ba906519e442a3badad6b93b75d87ba2005345a26d4331019deb68c4bedec54c39e49e2ddf2a10b0bb536aad246feab179c443b6c35aa353bb83b9c19fb6bc3e115843e11d5b6392d2866a20b032fccb01ec30a3e36a0f1c7cc99d28cf8dbc3d5099e5ac396b1997740be48dbe0660b8a34cc525bbb6cca8745f3098ecd6d31276e95864a38153f1cd6ed9195a7d65", 0x90, 0x6}, {&(0x7f0000000740)="a998ec838cbdb5cdddfae1ec2aedc4590825e0818f49d91ea622581d10ba0355cf389a938619375469d7bec157a185ec9cb524fcd54409e9f8c80e1f93fb4b773b13c96e9d650e6d84b0fbf362", 0x4d, 0x1}, {&(0x7f00000007c0)="edbe2c289abb208a4ba94b19004e4b8818a9a738ad0ff1a99ad1787121dde80fc6d38e125cb5d447564ad6147040b2e398046be16ac2eb1252f0d5fc130cabdfb94062c1444dca72101567f602e8df8ba27c2bbba6fc62fe3b4522f01e24c224808623e788f22d0cab85ff5f37b4", 0x6e, 0x200}, {&(0x7f0000000840)="da588d9516117e223d5ed3d2766b875ef675aecfbeb00d9ad088f5d95d8fac168b977645d5639602af0c4ba6e0884deb5f2cbf8fdbeb7771302fde6f5fd0e561cc29ca39af128220133b7ade9674f634c4611bc1a522224b00af18ce5f78fc15f174fc6547feb9be95a80040ce31741f94501c0a46488f8d1fa56e15f99f0f09ed57869e29a9c05fad07b26e9593877659446fa0e42cc059dd4f432d34b81bf8da2e63f0ca6928719357208ca516a72a13d9fbc1856bbc87c0fe1ed159b36c04ae14b99cc7ba57bcef8eb385bec425dddb066d1deff509", 0xd7, 0x4}], 0xc004, &(0x7f0000000a00)={[{'mangle\x00'}, {'mangle\x00'}, {'/dev/rtc#\x00'}, {'hugetlb.1GB.rsvd.usage_in_bytes\x00'}, {'/dev/rtc0\x00'}, {'-*/'}, {',\'-}@/,}@}+'}, {'({!'}], [{@euid_gt}]}) linkat(r6, &(0x7f0000000a80)='./file0\x00', r1, &(0x7f0000000ac0)='./file0\x00', 0x400) ioctl$RTC_AIE_ON(r3, 0x7001) socket$packet(0x11, 0x2, 0x300) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) 17:51:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xc4c) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000080)={0x9, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}}}, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) socket$packet(0x11, 0x3, 0x300) r3 = accept$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) getpeername$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0x7, 0x0, 0x7, 0x7}, {0xcb91, 0x9, 0x4, 0x5}, {0xfff, 0xa, 0x2, 0x6ca}]}, 0x10) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r4 = syz_open_dev$rtc(&(0x7f0000000340), 0xff, 0x224040) ioctl$RTC_AIE_OFF(r4, 0x7002) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000380)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/yenta_socket', 0x4000, 0x160) mkdirat$cgroup(r5, &(0x7f0000000400)='syz0\x00', 0x1ff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000480)=0x14) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r1) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r6, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x29}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000640)={'raw\x00', 0x16, "40c47abe083714b8592831b11672e928bbcebe880f50"}, &(0x7f0000000680)=0x3a) [ 129.957365] audit: type=1400 audit(1750441860.805:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:51:00 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/hid', 0x202, 0xc0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/pnp', 0x101000, 0x9) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000100), 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1080000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x84) r4 = openat$cgroup_ro(r1, &(0x7f0000000400)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x90044}, 0x20000000) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1d4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4c9d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x16, 0x3, "2604f44597e50bd9a8f9fb496db8fd85672c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "28c2a98062e3fd0411b480aed4040d9dfba61504e0e00a0249adacc9ab3f"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "53eacc84979d2161ffab158a5d55b0ba643ca5ba74e2cd0d67defa5f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x61}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "d0fb0ad5593fabb54b88e1d6b270ee3534d89ca854c0dd"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x69c6c814}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40}, 0x2000) r5 = accept4$inet(r1, &(0x7f0000000800)={0x2, 0x0, @private}, &(0x7f0000000840)=0x10, 0x80800) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000000880)={0x3ff, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000e80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e40)={&(0x7f00000009c0)={0x460, r6, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x2dc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "96f4d9467f96d4cff6b9767ed3f9db05e64dc2504597a0e943fe"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "7a416b4d193e0c3864f02d3f395773cf91b0c6414a09ecebf0fa3d7bfcc933"}}, @TIPC_NLA_NODE_ID={0x8d, 0x3, "beae6a37f1e481f1e0d6ee6ae1f8cb0a674e698053ce4b3d87454b80fed734a642101c2bf248e2862e88fa22ac43cf62c3d0d7e5f4f79ee4c1194eb561c9e945f91cbbbec7516afc8173e3e2b45d9ff3ec93e419c762d7efa2dac15002dc16b4217c1b650829fca5a36a80fef675bb4a59e120545d90505f7e49a45f241c3f818730e31e663716a73f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ID={0x58, 0x3, "32fda329e6e161a92469ea81887f0d048336c08f1d2cefa178dfe6deb06edf00cff14126a5f0a5f8ef46391c00eb89ea0170c3b53c750d763c422ac1d372a9e2e0c4f9851fbf57ee301ca76f3148a8067442b80c"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "35c52444311bc88df934f9488e5317473c813dfbf61e0418d77b8394c6d848b9c0"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "02a3504b2540f19502b814b1455acad8bbf322f273"}}, @TIPC_NLA_NODE_ID={0xc8, 0x3, "b5ae9d5c7c921900e36d2fd813b679a3aa35c27532aa1f77635f6e4357039eb02367360314aef6d0c2607cfbda710207010d8bea5cd3faf7af78c3bfa9acc0432b3093914392c428fc279e643ca7601c15eb88c047a5021233fe83ff4b7d430d01156b2ac62684bd5719f28bf84e84d07c069115eaac4a8bd3ee97b49bb3656c44aefc7ad3f8de77b43d156320ba0efa9a31bb88a8b2040afbfcecb751c88781221f3ac310237d9bf3e379c43b6a348357d8065dd157dfaeb6e8278b69966c60162f215a"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf5, 0x3, "5accd4f0cf6584afab4b7a4d3c561cb39c7f02a6634ef6aa0244f2055f9e1f48d1c51adc9f825de31cf621e9a94af817f54b95c1056f004f698ab0a09e9799f88fe23323f3893793403852146db35ab49b004d52c94f3c230d05fe8ce78ad160ec7d150de07ad30e1845171e387e323f592880aa9b7003790e841403158888e27786414adcff2e26ed5939d0a95011b1a1838517e1375deb702fa0e52f328c9e1526981869f5680f02a54c976c993ee652eef653ed8d2a56febf4e6403590a23585cc0589c3a805f3c952a7e5022c0bf59441bf4e3b44253a15c088830868e63bfd2cef186a2aa1dccdea7c1c287e65064"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "95d4bb1c872d7766c8de4d4b0d7a45ce44b385a1f9bc2287bc78fe2a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}]}, 0x460}, 0x1, 0x0, 0x0, 0xa480}, 0x4000) r7 = openat$cgroup_ro(r1, &(0x7f0000000ec0)='blkio.bfq.io_merged\x00', 0x0, 0x0) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000000f00)={'hsr0\x00'}) getsockname$packet(r0, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000fc0)=0x14) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x64, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x24000011) 17:51:00 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = syz_open_dev$rtc(&(0x7f0000000040), 0x8fec, 0x802) ioctl$RTC_PIE_OFF(r1, 0x7006) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xc3e) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000140)={0xfffffffd, 0x6, 0x0, 0x6, 0x4, 0x2, 0x1d0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/boot_params', 0x80000, 0x80) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048080}, 0x20000080) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000400)={r5, 0x1, 0x6, @multicast}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20081204}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x20000880) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x100000000) utimensat(r0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={{}, {0x77359400}}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/class/ata_port', 0x8000, 0x20) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}]}]}, 0x3c}}, 0x4000800) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/module/sr_mod', 0x101000, 0xb2) ioctl$RTC_PIE_ON(r8, 0x7005) 17:51:00 executing program 7: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}}, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x50) socketpair(0x3c, 0x3, 0x401, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x894) setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000380)="9058836ca013f5f9c73acef04d01e0dedbfbedfdb15af695daaa2ce678db5b3b7859d1235fc5b0217c58288f5bccac1beae65445e37b2b9577bfb001119c0e7acebeb8b2d7d0b2d8e954b33885a6dd4cc2d2259b3067c5e743c2ed3a41d29642871b16dcb509af161f72d72f8b0d39fc701dcc66eaea70c12f22540289058ae027a6ca71756231949abf84f6191e5025f8d62fb2b10f63e37900bd93f3eec4ab95e9f3bc35621a122db7e13d60d17837fa5e7f1561aa20b7800d361a448969316444665ac1d975569e4a74500a4375f1445e4d4a2be3", 0xd6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "0c42865d105a0e57edd3569674d13a84f9f176f85d0d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf7d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40}, 0x40c0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='pids.events\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x84, r7, 0x72a, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="df50ccb618d07618eed7edf8ef3267096aa6fe8de9de006a238f8a96"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @random="cf35caac3ad1"}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb667}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]]}, 0x84}, 0x1, 0x0, 0x0, 0x4008014}, 0x40081) clone3(&(0x7f0000000ac0)={0x0, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940), {0x1a}, &(0x7f0000000980)=""/153, 0x99, &(0x7f0000000a40)=""/48, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r6}}, 0x58) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r8, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa, 0x6, @random="cad9b2d1ed60"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc0) accept4$packet(r2, &(0x7f0000000d80), &(0x7f0000000dc0)=0x14, 0x100800) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000e00)={0x20, {{0x2, 0x4e23, @remote}}}, 0x88) [ 131.590711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.590870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.592256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.598294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.599221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.600355] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.602126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.604037] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.605008] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.606530] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.611941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.615068] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.616483] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.618009] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.619265] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.619894] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 131.621492] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 131.623944] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 131.627284] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 131.631160] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 131.635622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.635769] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.637701] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.639325] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.641580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.652363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.655933] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.657295] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.658444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.661501] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.662557] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.668974] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.681548] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.688582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.690702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.693198] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.700911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.701752] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.727821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.729479] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.744242] Bluetooth: hci4: command tx timeout [ 133.744351] Bluetooth: hci5: command tx timeout [ 133.744904] Bluetooth: hci7: command tx timeout [ 133.806708] Bluetooth: hci2: command tx timeout [ 133.806787] Bluetooth: hci1: command tx timeout [ 133.807310] Bluetooth: hci0: command tx timeout [ 133.808044] Bluetooth: hci6: command tx timeout [ 133.808444] Bluetooth: hci3: command tx timeout [ 135.791145] Bluetooth: hci7: command tx timeout [ 135.792700] Bluetooth: hci5: command tx timeout [ 135.793157] Bluetooth: hci4: command tx timeout [ 135.854850] Bluetooth: hci1: command tx timeout [ 135.855645] Bluetooth: hci0: command tx timeout [ 135.856163] Bluetooth: hci6: command tx timeout [ 135.856519] Bluetooth: hci3: command tx timeout [ 135.857201] Bluetooth: hci2: command tx timeout [ 137.839103] Bluetooth: hci4: command tx timeout [ 137.839173] Bluetooth: hci5: command tx timeout [ 137.839650] Bluetooth: hci7: command tx timeout [ 137.903697] Bluetooth: hci0: command tx timeout [ 137.904166] Bluetooth: hci2: command tx timeout [ 137.904807] Bluetooth: hci3: command tx timeout [ 137.905277] Bluetooth: hci6: command tx timeout [ 137.905359] Bluetooth: hci1: command tx timeout [ 139.887130] Bluetooth: hci5: command tx timeout [ 139.887692] Bluetooth: hci4: command tx timeout [ 139.888137] Bluetooth: hci7: command tx timeout [ 139.950939] Bluetooth: hci3: command tx timeout [ 139.951412] Bluetooth: hci1: command tx timeout [ 139.952775] Bluetooth: hci6: command tx timeout [ 139.953223] Bluetooth: hci2: command tx timeout [ 139.953652] Bluetooth: hci0: command tx timeout [ 194.238276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.248870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.250091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.251795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.253148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.257106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.258652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.267069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.280696] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.288775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.390734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.399015] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.403968] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.423972] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.425088] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.434895] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.446210] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.451479] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.454246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.456334] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.460829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.465024] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.469015] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.470259] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.472011] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.475959] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.479224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.485969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.487560] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.499147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.502036] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.505259] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.507172] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.517822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.519288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.575113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 194.577000] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 194.578761] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 194.594103] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.602171] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 196.335064] Bluetooth: hci0: command tx timeout [ 196.335389] Bluetooth: hci1: command tx timeout [ 196.526761] Bluetooth: hci6: command tx timeout [ 196.526874] Bluetooth: hci3: command tx timeout [ 196.590715] Bluetooth: hci5: command tx timeout [ 196.655152] Bluetooth: hci2: command tx timeout [ 196.730901] Bluetooth: hci7: command tx timeout [ 196.911422] Bluetooth: hci4: command tx timeout [ 198.382688] Bluetooth: hci0: command tx timeout [ 198.383883] Bluetooth: hci1: command tx timeout [ 198.574816] Bluetooth: hci6: command tx timeout [ 198.575328] Bluetooth: hci3: command tx timeout [ 198.640709] Bluetooth: hci5: command tx timeout [ 198.702960] Bluetooth: hci2: command tx timeout [ 198.766677] Bluetooth: hci7: command tx timeout [ 198.958953] Bluetooth: hci4: command tx timeout [ 200.430819] Bluetooth: hci1: command tx timeout [ 200.431363] Bluetooth: hci0: command tx timeout [ 200.624187] Bluetooth: hci3: command tx timeout [ 200.624494] Bluetooth: hci6: command tx timeout [ 200.687049] Bluetooth: hci5: command tx timeout [ 200.750834] Bluetooth: hci2: command tx timeout [ 200.814710] Bluetooth: hci7: command tx timeout [ 201.006728] Bluetooth: hci4: command tx timeout [ 202.479238] Bluetooth: hci0: command tx timeout [ 202.479258] Bluetooth: hci1: command tx timeout [ 202.670782] Bluetooth: hci6: command tx timeout [ 202.671898] Bluetooth: hci3: command tx timeout [ 202.735118] Bluetooth: hci5: command tx timeout [ 202.799087] Bluetooth: hci2: command tx timeout [ 202.862839] Bluetooth: hci7: command tx timeout [ 203.054832] Bluetooth: hci4: command tx timeout [ 257.029701] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.031522] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.034001] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.038181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.040409] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.151251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.153058] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.154475] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.158673] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.163170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.366087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.368482] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.374294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.391621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.397045] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.401279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.405186] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.413198] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.421472] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.429765] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.442351] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.447175] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.454106] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.457323] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.473150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.506260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.512516] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.522405] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.526037] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.538156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.541475] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.543255] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.548064] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.555407] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.565189] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.575285] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.601882] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.604866] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.625986] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.628475] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 259.120821] Bluetooth: hci0: command tx timeout [ 259.247905] Bluetooth: hci1: command tx timeout [ 259.439159] Bluetooth: hci2: command tx timeout [ 259.502746] Bluetooth: hci3: command tx timeout [ 259.630972] Bluetooth: hci4: command tx timeout [ 259.631972] Bluetooth: hci5: command tx timeout [ 259.694707] Bluetooth: hci7: command tx timeout [ 259.759721] Bluetooth: hci6: command tx timeout [ 261.169112] Bluetooth: hci0: command tx timeout [ 261.295646] Bluetooth: hci1: command tx timeout [ 261.488355] Bluetooth: hci2: command tx timeout [ 261.551686] Bluetooth: hci3: command tx timeout [ 261.678764] Bluetooth: hci4: command tx timeout [ 261.679273] Bluetooth: hci5: command tx timeout [ 261.742865] Bluetooth: hci7: command tx timeout [ 261.807670] Bluetooth: hci6: command tx timeout [ 263.216108] Bluetooth: hci0: command tx timeout [ 263.342690] Bluetooth: hci1: command tx timeout [ 263.536771] Bluetooth: hci2: command tx timeout [ 263.600687] Bluetooth: hci3: command tx timeout [ 263.727677] Bluetooth: hci5: command tx timeout [ 263.728166] Bluetooth: hci4: command tx timeout [ 263.790859] Bluetooth: hci7: command tx timeout [ 263.854938] Bluetooth: hci6: command tx timeout [ 265.262674] Bluetooth: hci0: command tx timeout [ 265.391084] Bluetooth: hci1: command tx timeout [ 265.583882] Bluetooth: hci2: command tx timeout [ 265.647913] Bluetooth: hci3: command tx timeout [ 265.775735] Bluetooth: hci4: command tx timeout [ 265.776225] Bluetooth: hci5: command tx timeout [ 265.838812] Bluetooth: hci7: command tx timeout [ 265.903698] Bluetooth: hci6: command tx timeout [ 319.753815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.764315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.768854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.772098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.774049] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.945958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.947764] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.955963] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.964558] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.968473] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.969148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.971488] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.980083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.987936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.992418] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.999788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.009890] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.012931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.034046] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.037021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.041172] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.055176] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.059886] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.065635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.069420] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.141389] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.141745] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 320.160218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.160397] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 320.168293] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.171909] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.173200] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.179922] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.180263] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.186874] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 320.195960] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.198666] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.206493] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.211774] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 320.221996] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 321.862651] Bluetooth: hci0: command tx timeout [ 322.030964] Bluetooth: hci2: command tx timeout [ 322.031094] Bluetooth: hci1: command tx timeout [ 322.094771] Bluetooth: hci3: command tx timeout [ 322.096012] Bluetooth: hci4: command tx timeout [ 322.286768] Bluetooth: hci7: command tx timeout [ 322.286791] Bluetooth: hci6: command tx timeout [ 322.286914] Bluetooth: hci5: command tx timeout [ 323.887852] Bluetooth: hci0: command tx timeout [ 324.078724] Bluetooth: hci2: command tx timeout [ 324.079235] Bluetooth: hci1: command tx timeout [ 324.142755] Bluetooth: hci4: command tx timeout [ 324.142960] Bluetooth: hci3: command tx timeout [ 324.335656] Bluetooth: hci7: command tx timeout [ 324.335687] Bluetooth: hci6: command tx timeout [ 324.336181] Bluetooth: hci5: command tx timeout [ 325.936628] Bluetooth: hci0: command tx timeout [ 326.126947] Bluetooth: hci2: command tx timeout [ 326.129637] Bluetooth: hci1: command tx timeout [ 326.191120] Bluetooth: hci4: command tx timeout [ 326.192964] Bluetooth: hci3: command tx timeout [ 326.383061] Bluetooth: hci6: command tx timeout [ 326.383584] Bluetooth: hci5: command tx timeout [ 326.385305] Bluetooth: hci7: command tx timeout [ 327.982701] Bluetooth: hci0: command tx timeout [ 328.175796] Bluetooth: hci1: command tx timeout [ 328.176330] Bluetooth: hci2: command tx timeout [ 328.238865] Bluetooth: hci3: command tx timeout [ 328.239365] Bluetooth: hci4: command tx timeout [ 328.430812] Bluetooth: hci5: command tx timeout [ 328.431354] Bluetooth: hci7: command tx timeout [ 328.431876] Bluetooth: hci6: command tx timeout [ 382.405882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.409023] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.411411] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.421293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.428359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.538549] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.546947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.550905] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.560537] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.578288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.610196] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.614136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.618331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.626159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.638014] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.677379] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.680219] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.685276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.685468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.692251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.695378] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.701012] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.705871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.715768] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.735337] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.827737] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.844813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.851907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.871362] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.875892] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.906796] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 382.928870] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 382.938289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 382.957375] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 383.000754] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 383.028616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 383.030756] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 383.045795] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 383.053823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 383.087182] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 384.495063] Bluetooth: hci0: command tx timeout [ 384.622687] Bluetooth: hci1: command tx timeout [ 384.686718] Bluetooth: hci2: command tx timeout [ 384.750740] Bluetooth: hci3: command tx timeout [ 384.814671] Bluetooth: hci4: command tx timeout [ 385.071529] Bluetooth: hci5: command tx timeout [ 385.199734] Bluetooth: hci6: command tx timeout [ 385.327049] Bluetooth: hci7: command tx timeout [ 386.543752] Bluetooth: hci0: command tx timeout [ 386.670672] Bluetooth: hci1: command tx timeout [ 386.734918] Bluetooth: hci2: command tx timeout [ 386.799923] Bluetooth: hci3: command tx timeout [ 386.863873] Bluetooth: hci4: command tx timeout [ 387.119661] Bluetooth: hci5: command tx timeout [ 387.248129] Bluetooth: hci6: command tx timeout [ 387.374671] Bluetooth: hci7: command tx timeout [ 388.591654] Bluetooth: hci0: command tx timeout [ 388.719298] Bluetooth: hci1: command tx timeout [ 388.783668] Bluetooth: hci2: command tx timeout [ 388.847691] Bluetooth: hci3: command tx timeout [ 388.910677] Bluetooth: hci4: command tx timeout [ 389.166797] Bluetooth: hci5: command tx timeout [ 389.294933] Bluetooth: hci6: command tx timeout [ 389.423686] Bluetooth: hci7: command tx timeout [ 390.639998] Bluetooth: hci0: command tx timeout [ 390.767037] Bluetooth: hci1: command tx timeout [ 390.831931] Bluetooth: hci2: command tx timeout [ 390.895097] Bluetooth: hci3: command tx timeout [ 390.959622] Bluetooth: hci4: command tx timeout [ 391.214902] Bluetooth: hci5: command tx timeout [ 391.343676] Bluetooth: hci6: command tx timeout [ 391.471093] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 17:56:10 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88801578d280 RCX=ffff8880313cf6f4 RDX=0000000000000000 RSI=ffffffff85c1cc40 RDI=ffff88801578d67c RBP=ffff88801578d280 RSP=ffff8880313cf700 R8 =0000000000000001 R9 =ffff8880313cf830 R10=000000000003b53d R11=00000000000043f8 R12=ffff88801578d280 R13=ffff8880313cf838 R14=ffff8880313cf888 R15=ffff8880313cf7f0 RIP=ffffffff815bb10a RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f30f8de4b90 CR3=000000000d0df000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000002fa0f801 RBX=ffffffff816049e0 RCX=ffff88802fa0f7ec RDX=0000000000000000 RSI=ffffffff85c1cc40 RDI=ffff88800e4d03fc RBP=ffff88802fa0f930 RSP=ffff88802fa0f878 R8 =0000000000000001 R9 =ffff88802fa0f8d8 R10=000000000003b53d R11=00000000000211de R12=ffff88802fa0f960 R13=ffff88802fa0f8e0 R14=ffff88802fa0fea0 R15=ffff88802fa0f898 RIP=ffffffff81353cab RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6bfd914170 CR3=00000000335a8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000