Warning: Permanently added '[localhost]:46168' (ECDSA) to the list of known hosts. 2025/06/24 07:34:57 fuzzer started 2025/06/24 07:34:58 dialing manager at localhost:37113 syzkaller login: [ 90.812905] cgroup: Unknown subsys name 'net' [ 90.988997] cgroup: Unknown subsys name 'cpuset' [ 91.030435] cgroup: Unknown subsys name 'rlimit' 2025/06/24 07:35:14 syscalls: 219 2025/06/24 07:35:14 code coverage: enabled 2025/06/24 07:35:14 comparison tracing: enabled 2025/06/24 07:35:14 extra coverage: enabled 2025/06/24 07:35:14 setuid sandbox: enabled 2025/06/24 07:35:14 namespace sandbox: enabled 2025/06/24 07:35:14 Android sandbox: enabled 2025/06/24 07:35:14 fault injection: enabled 2025/06/24 07:35:14 leak checking: enabled 2025/06/24 07:35:14 net packet injection: enabled 2025/06/24 07:35:14 net device setup: enabled 2025/06/24 07:35:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/24 07:35:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/24 07:35:14 USB emulation: enabled 2025/06/24 07:35:14 hci packet injection: enabled 2025/06/24 07:35:14 wifi device emulation: enabled 2025/06/24 07:35:14 802.15.4 emulation: enabled 2025/06/24 07:35:14 fetching corpus: 0, signal 0/0 (executing program) 2025/06/24 07:35:16 starting 8 fuzzer processes 07:35:16 executing program 0: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x103, 0x29, 0x2, {0x2, [{{0x10, 0x2, 0x7}, 0x9, 0x80, 0x7, './file0'}, {{0x80, 0x2, 0x7}, 0x988, 0x81, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0xb8, 0x4, 0x7, './file0'}, {{0x40, 0x3ff, 0x1}, 0x54000000000000, 0x7f, 0x7, './file0'}, {{0x8, 0x1, 0x7}, 0x5, 0x7, 0x7, './file0'}, {{0x4, 0x3, 0x3}, 0x8000, 0xff, 0x7, './file0'}, {{0x20, 0x2, 0x7}, 0x6, 0xf8, 0x7, './file0'}, {{0x2, 0x4, 0x5}, 0x19, 0x6, 0x7, './file0'}]}}, 0x103) r0 = memfd_secret(0x80000) getgroups(0x1, &(0x7f0000000140)=[0xffffffffffffffff]) write$P9_RSTATu(r0, &(0x7f0000000180)={0x5b, 0x7d, 0x1, {{0x0, 0x46, 0xb6, 0x2, {0x2, 0x0, 0x1}, 0x2280000, 0x5, 0x66, 0x795, 0x2, '.,', 0x9, ']-&()@/$&', 0x5, ':(+/[', 0x3, '.)['}, 0x0, '', 0xffffffffffffffff, r1, 0xffffffffffffffff}}, 0x5b) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000200)={0x9, 0xe000000, 0x200, {0x6fd, 0x81}, 0x1, 0x4}) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x40, 0x80000) write$P9_RCREATE(r0, &(0x7f00000002c0)={0x18, 0x73, 0x1, {{0x2, 0x3, 0x2}, 0xfff}}, 0x18) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x89, 0x50000) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xf06, 0x0, 0x0, 0x4, 0x14, 0x11, "14063004f6bdf7de89d49dd60165bc4bfe4b41f386fcdb811df8ca0e1fae26fa92ce0662de3eb9b461c09e6b7458f1429d271ab5633b595b55b860ce8a2d1ff1", "a7eba5d7a3042315248ef529ea6c641245c6606815807e26603e3b4091d2fcbddfa60132312350d8332f4ada66e311f42d277599afbb926fff1c8d8882521fe5", "4c37be67dfac40672af81805cf6c290640c1fb444a1bfb3fe2bbcae0d6b606f4"}) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x9, 0x40e00) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x4) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x264, 0x0, 0x12, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9ca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xada}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "f6038737d56a071bbd17c42a09dcac1ed32ecc04e8497f2d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x444d}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfff}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$LOOP_CLR_FD(r2, 0x4c01) write$P9_RFSYNC(r0, &(0x7f00000007c0)={0x7, 0x33, 0x2}, 0x7) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000800)) pipe2(&(0x7f0000000900)={0xffffffffffffffff}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000c00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x214, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xdd6f}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x51cc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdd6}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf94}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5676be9c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffc0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8bb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x10}, 0x80) r6 = memfd_secret(0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000c40)) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000dc0)) 07:35:16 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0x3, 0x9}, 'port1\x00', 0x5, 0x40, 0x5, 0x0, 0x0, 0xffffffff, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000100)={{0x7, 0x1}, 'port1\x00', 0x20, 0x48, 0x800, 0x8, 0x9992, 0x9, 0x6, 0x0, 0x2, 0xf9}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000001c0)) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000200)={0x0, 0x17, 0x57}, 0x0, &(0x7f0000000240)="c21bcc322fb1c30f6afea8540ce0e851128449964316e2", &(0x7f0000000280)=""/87) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x1, 'queue0\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000640)={0x67446698, 0x0, 0x2, 0x2, 0x3, "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"}, 0x1010) r2 = syz_open_dev$vcsa(&(0x7f0000001680), 0x100000001, 0x80800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001880)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0xf0, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x927ab6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000001900)) r5 = syz_open_dev$vcsa(&(0x7f0000001980), 0x1, 0x4464c0) mq_notify(r2, &(0x7f00000019c0)={0x0, 0xd}) pipe(&(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RAUTH(r6, &(0x7f0000001a40)={0x14, 0x67, 0x1, {0x0, 0x3, 0x2}}, 0x14) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c001}, 0x41) [ 108.974309] audit: type=1400 audit(1750750516.629:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:35:16 executing program 2: write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) keyctl$get_keyring_id(0x0, 0x0, 0x80000001) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000200)=[r0, 0xee00, 0x0, 0xffffffffffffffff, r2, 0xee01, 0xee01]) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000240)=@hci, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/21, 0x15}, {&(0x7f0000000300)=""/2, 0x2}, {&(0x7f0000000340)=""/124, 0x7c}], 0x3, &(0x7f0000000400)=""/212, 0xd4}, 0x7}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/225, 0xe1}], 0x1}, 0x5}, {{&(0x7f0000000640)=@llc, 0x80, &(0x7f0000000b80)=[{&(0x7f00000006c0)=""/144, 0x90}, {&(0x7f0000000780)=""/36, 0x24}, {&(0x7f00000007c0)=""/144, 0x90}, {&(0x7f0000000880)=""/131, 0x83}, {&(0x7f0000000940)=""/13, 0xd}, {&(0x7f0000000980)=""/227, 0xe3}, {&(0x7f0000000a80)=""/131, 0x83}, {&(0x7f0000000b40)=""/64, 0x40}], 0x8, &(0x7f0000000c00)}, 0x3}], 0x3, 0x40000000, &(0x7f0000000d00)) r4 = getuid() r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000003240)={'sit0\x00', &(0x7f00000031c0)={'syztnl1\x00', 0x0, 0x29, 0x7e, 0x3, 0xadfc, 0x48, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0x20, 0x4, 0x1}}) getgroups(0x2, &(0x7f0000003280)=[r3, r3]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000032c0)={0x60, 0x7d, 0x1, {{0x0, 0x4b, 0x200, 0x3, {0x20, 0x4, 0x6}, 0x11080000, 0x9, 0x200, 0x80000000, 0x10, ')\xc5#-/*/]]%#-/,\\\'', 0x3, '---', 0x1, '\x00', 0x4, '\\*}.'}, 0x0, '', r1, r7, r4}}, 0x60) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000003340)={0x18, 0x71, 0x1, {{0x1, 0x0, 0x8}, 0x5}}, 0x18) bind$bt_sco(0xffffffffffffffff, &(0x7f0000003380)={0x1f, @none}, 0x8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x14) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000034c0)="e22e4a19caf3d1d177fc56ce57", 0xd) setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f0000003500)=0x7ff, 0x4) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000003540)={0x7, 0x47, 0x2}, 0x7) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000003600)={'syztnl0\x00', &(0x7f0000003580)={'sit0\x00', r6, 0x29, 0x8a, 0xa9, 0x6, 0x21, @loopback, @private1, 0x80, 0x7, 0x689, 0x1}}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000003940)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003680)={0x25c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "17a2a038bb662085c131fbeaa445c7e716492163819820637545e7d1037d6977018ebb32"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "1c3f37b57bd85c47e1e5b3db7f37e5148444588fd533412c"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "a7980ff4d3aa0f384ec3019833953b4aecafd18020"}}, @TIPC_NLA_NODE_ID={0x30, 0x3, "15f387d127c9ca1d82168412cbd8a1f55b16e1f9827de2564a7f2fb57518747fd4ad8dfe2e3f6041325a3ef2"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc0000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x60}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000001) 07:35:16 executing program 3: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1f0, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8b1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x140, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @loopback, 0x80000001}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @mcast1, 0xfffffffd}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9829}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @private0, 0xf6e}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20008000}, 0x890) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x3, 0x7ff, 0x20, @mcast2, @private2, 0x10, 0x8, 0x6, 0x80}}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x18, 0x18, {0x4, @bearer=@l2={'eth', 0x3a, 'ip6erspan0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040000) r0 = syz_open_dev$vcsa(&(0x7f0000000480), 0x0, 0x20040) write$P9_RGETATTR(r0, &(0x7f00000004c0)={0xa0, 0x19, 0x2, {0x4, {0x20, 0x0, 0x8}, 0x2, 0x0, 0xffffffffffffffff, 0x3, 0xf1072d8, 0x92a, 0xff, 0x200, 0x30, 0x7fffffff, 0x5, 0x8001, 0x9, 0x9, 0x7, 0x8, 0xfffffffffffffc00, 0x8000}}, 0xa0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x0, 0xffffffff, {{0x10, 0x4, 0x0, 0x1b, 0x40, 0x65, 0x0, 0xff, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@rr={0x7, 0x17, 0x27, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @broadcast]}, @generic={0x7, 0xc, "165474c2c9ad10f01b69"}, @end, @lsrr={0x83, 0x7, 0x75, [@rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6_vti0\x00', r1, 0x4, 0x43, 0x40, 0xcd, 0x18, @remote, @loopback, 0x7, 0x8, 0x5, 0x5}}) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x2c8, 0x0, 0x30, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d06}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "ff24ffa39f57b4a7268f23ddf60580138222bd030510d54f12af4295dd396614f23f"}}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "842f8249a24f71bf2408a6c203cac6c05d8384c4e2ca5b6faef285bc12dc6a6a"}}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "e8876e8a32c917df9caae4e58a541e9ce280029202621895d40067"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "b1e769fe68971622e89cbe5be74bf53978fc6bf7466da567fd7d3012776a330b6a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2fcc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf0a7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xee26}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfbf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x90, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "d4e47b7a298ddfd8aad01f6229015d0eeb09ffe3e451690d9fb68d06b6b0a84b12"}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x531}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb906}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x693}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r4 = memfd_secret(0x80000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000c40)=[@sack_perm, @window={0x3, 0x8, 0x3}, @sack_perm], 0x3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000d00)={'erspan0\x00', &(0x7f0000000c80)={'gretap0\x00', r2, 0x7800, 0x10, 0x2a9, 0x7fff, {{0xd, 0x4, 0x3, 0x24, 0x34, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @local, {[@end, @ssrr={0x89, 0x1b, 0x45, [@local, @private=0xa010101, @loopback, @private=0xa010100, @private=0x3ff, @empty]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'ip6_vti0\x00', r5, 0x75, 0x0, 0x6, 0x7ff, 0x7e, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8000, 0x40, 0x7, 0x7aed}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000f40)={'syztnl1\x00', &(0x7f0000000e00)={'gretap0\x00', r6, 0x0, 0x7, 0x0, 0x87, {{0x3b, 0x4, 0x2, 0x3, 0xec, 0x64, 0x0, 0x99, 0x2f, 0x0, @private=0xa010100, @remote, {[@cipso={0x86, 0x16, 0x1, [{0x2, 0x3, "17"}, {0x6, 0xd, "ec4f4c5e39ddb031649494"}]}, @timestamp_addr={0x44, 0x4, 0x3c, 0x1, 0x5}, @timestamp={0x44, 0x28, 0x7d, 0x0, 0x0, [0x1ff, 0x2, 0x2f, 0xe65, 0x5, 0x7fffffff, 0x7fffffff, 0x2, 0x9]}, @generic={0x88, 0x4, "220e"}, @rr={0x7, 0x23, 0x8, [@empty, @broadcast, @rand_addr=0x64010101, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @lsrr={0x83, 0xf, 0x5f, [@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}]}, @noop, @timestamp_prespec={0x44, 0x54, 0x78, 0x3, 0x1, [{@multicast1, 0xffff82a8}, {@multicast1, 0x5}, {@multicast1, 0x101}, {@broadcast, 0x3}, {@loopback, 0xfffff001}, {@dev={0xac, 0x14, 0x14, 0x41}}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x1}, {@local, 0x9}, {@empty}, {@multicast2, 0x79}]}, @lsrr={0x83, 0xb, 0xaa, [@private=0xa010101, @loopback]}]}}}}}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), r4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001240)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f0000001000)={0x1c8, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @local}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf51}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9d90}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd0d7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff4cc7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ec}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe2a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x9}, 0x0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}]}, 0x20}}, 0x580a1) r8 = memfd_secret(0x80000) write$P9_RLOCK(r8, &(0x7f0000001380)={0x8, 0x35, 0x2, 0x1}, 0x8) 07:35:16 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c1}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x64fbebbd, @link='broadcast-link\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x844}, 0x4001) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1b4, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x55d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd975}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x604}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x640}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x55}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfd}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x561}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfa7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40000}, 0x2000000c) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x2f, 0x1c, 0xe1, 0x3, 0x23, @mcast1, @loopback, 0x80, 0x0, 0x7ff, 0x2d6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl0\x00', r3, 0x0, 0xe0, 0x6, 0xc0, 0x8, @empty, @mcast1, 0x40, 0x700, 0x0, 0x81}}) r5 = socket(0x28, 0xa, 0x5) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r4, 0x38, 0x3, 0x4, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xb688fcf4749395d4, 0x8000, 0xffffffff, 0x4}}) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000780)=""/25, &(0x7f00000007c0)=0x19) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bind$bt_sco(r7, &(0x7f0000000840)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r7, 0xc0605345, &(0x7f0000000880)={0x3, 0x1, {0x3, 0x0, 0x5, 0x2, 0x4}, 0x4}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'ip6_vti0\x00', r6, 0x2f, 0x1f, 0x6, 0xfffffffd, 0x18, @mcast2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x80, 0x10, 0x20, 0x2}}) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x98, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_LINK={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x804}, 0x845) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r8) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r10, 0x4, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000d00)={'ip6tnl0\x00', &(0x7f0000000c80)={'ip6_vti0\x00', r9, 0x2f, 0x3, 0x5, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, 0x80, 0x40, 0x1000, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'syztnl0\x00', r11, 0x2f, 0x0, 0x0, 0x2, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x10, 0x700, 0xff, 0x3d97}}) 07:35:16 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x101, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8094) recvmmsg(0xffffffffffffffff, &(0x7f00000088c0)=[{{&(0x7f0000000180)=@x25, 0x80, &(0x7f00000025c0)=[{&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f0000000480)=""/160, 0xa0}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/44, 0x2c}, {&(0x7f0000002580)=""/39, 0x27}], 0x8, &(0x7f0000002640)=""/48, 0x30}, 0xfffffff8}, {{&(0x7f0000002680)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002700)=""/101, 0x65}, {&(0x7f0000002780)=""/65, 0x41}, {&(0x7f0000002800)=""/95, 0x5f}], 0x3}, 0x3f}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000028c0)=""/25, 0x19}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/206, 0xce}], 0x3, &(0x7f0000003a40)=""/103, 0x67}, 0x2}, {{&(0x7f0000003ac0)=@hci, 0x80, &(0x7f0000007d40)=[{&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)=""/144, 0x90}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)}, {&(0x7f0000005c40)=""/4096, 0x1000}, {&(0x7f0000006c40)=""/4096, 0x1000}, {&(0x7f0000007c40)=""/33, 0x21}, {&(0x7f0000007c80)=""/131, 0x83}], 0x8, &(0x7f0000007dc0)=""/232, 0xe8}, 0x8}, {{&(0x7f0000007ec0)=@tipc, 0x80, &(0x7f0000008140)=[{&(0x7f0000007f40)=""/242, 0xf2}, {&(0x7f0000008040)=""/217, 0xd9}], 0x2}, 0x80000001}, {{0x0, 0x0, &(0x7f0000008580)=[{&(0x7f0000008180)=""/144, 0x90}, {&(0x7f0000008240)=""/250, 0xfa}, {&(0x7f0000008340)=""/118, 0x76}, {&(0x7f00000083c0)=""/151, 0x97}, {&(0x7f0000008480)=""/222, 0xde}], 0x5, &(0x7f0000008600)=""/38, 0x26}, 0x7ff}, {{&(0x7f0000008640)=@l2, 0x80, &(0x7f00000087c0)=[{&(0x7f00000086c0)=""/19, 0x13}, {&(0x7f0000008700)=""/182, 0xb6}], 0x2, &(0x7f0000008800)=""/177, 0xb1}, 0x7}], 0x7, 0x62, &(0x7f0000008a80)) r1 = syz_open_dev$vcsa(&(0x7f0000008ac0), 0x3, 0x10280) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000008b80)={'syztnl1\x00', &(0x7f0000008b00)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x7, 0x0, 0x27, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x7800, 0x4, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000008c40)={'ip6_vti0\x00', &(0x7f0000008bc0)={'syztnl0\x00', r2, 0x2f, 0xff, 0xfc, 0x3, 0xc1, @loopback, @mcast1, 0x8, 0x80, 0x4, 0xffffffff}}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000008cc0), r1) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000008dc0)={&(0x7f0000008c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000008d80)={&(0x7f0000008d00)={0x44, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x74}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x801) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000091c0)={'syztnl2\x00', &(0x7f0000009140)={'sit0\x00', r3, 0x4, 0x0, 0x8, 0x36, 0x18, @loopback, @remote, 0x20, 0x10, 0x7, 0x1f}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000009280)={'ip6gre0\x00', &(0x7f0000009200)={'ip6gre0\x00', r5, 0x29, 0x0, 0x7, 0x800, 0x10, @loopback, @private2, 0x700, 0x7f69, 0x9, 0x7fff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000009400)={'syztnl2\x00', &(0x7f00000092c0)={'syztnl2\x00', r6, 0x8000, 0x40, 0x7fffffff, 0xffffffc1, {{0x41, 0x4, 0x2, 0x4, 0x104, 0x64, 0x0, 0x80, 0x4, 0x0, @local, @private=0xa010100, {[@rr={0x7, 0x13, 0xb0, [@remote, @private=0xa010102, @empty, @broadcast]}, @noop, @timestamp_prespec={0x44, 0x3c, 0x70, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x400}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@local, 0x6}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2b}}, {@private=0xa010102, 0xfffffff9}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x7f, [@multicast2, @multicast2, @remote, @broadcast, @rand_addr=0x64010102]}, @ssrr={0x89, 0x13, 0xba, [@rand_addr=0x64010101, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x64010101]}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x6, 0xf, "4386bece6e374198cad2216f1f"}, {0x6, 0x9, "cea27f746403fb"}, {0x0, 0x6, "6a5c379e"}, {0x5, 0x10, "dbf4c553babba3f3324bd280fd88"}]}, @timestamp={0x44, 0x20, 0x9, 0x0, 0x3, [0xfc99, 0x3, 0x1, 0x80000000, 0x6, 0x1f, 0x4]}, @rr={0x7, 0x1b, 0x12, [@empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000094c0)={'ip6tnl0\x00', &(0x7f0000009440)={'syztnl0\x00', r7, 0x2f, 0x9, 0x99, 0x7fffffff, 0x71, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x80, 0x76e0104a, 0x40}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000009500)) pipe2(&(0x7f0000009540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000009640)={&(0x7f0000009580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000009600)={&(0x7f00000095c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80d0) r9 = memfd_secret(0x0) mq_notify(r9, &(0x7f00000097c0)={0x0, 0xb, 0x4, @thr={&(0x7f0000009680)="fa1ae9bbc90c06d7e71d0ddd87c60b76c45df905e0c80c69a69658a8c99a2272d4d7daccbdab46dbf6ff35a385de41040066ad2c3c60684c8a89a75aa9dc3410db19a91c60d6f26d9bfabade57ce9ce36298e879651467ac276bcef255bb4dba4e1797e888d05fc70110526857dc420fba6305516e3809804d2c343033dff1ad1bebbf1ed4001ce3760e96d88b8a17e2ac0b01f167", &(0x7f0000009740)="e2395254f15bed3710e1c961b72da63073160883b018b52d7ff5a26465722d52be5e617aacf2dfa0f511b7093f70211cb135b84f050bc0defe247aa6ef8b5e6696fdbe57237f585cc48ec1f247f6a609fb489a98"}}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r10, 0x89f9, &(0x7f0000009880)={'syztnl0\x00', &(0x7f0000009800)={'syztnl1\x00', r7, 0x29, 0x4, 0x3, 0xff, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x10, 0x700, 0x9, 0xdb9}}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000009a00)={&(0x7f00000098c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000099c0)={&(0x7f0000009900)={0xa8, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1300}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfeab}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2404080c}, 0x4000) 07:35:16 executing program 6: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) r2 = socket(0x1a, 0x4, 0x9) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002004}, 0x10000000) iopl(0xff) write$P9_RXATTRWALK(r0, &(0x7f0000000640)={0xf, 0x1f, 0x2, 0x307}, 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x230, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffb5e}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4eb478c4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x66ea}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x304b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "4ba01944981cb95090bd555e3b836d02e91332cd5c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf, 0x3, "43205aab46d763caa1d406"}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4f1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3fffffffc0}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x94}, 0x4) r3 = add_key$fscrypt_v1(&(0x7f0000000ac0), &(0x7f0000000b00)={'fscrypt:', @desc4}, &(0x7f0000000b40)={0x0, "c10cae90490c08abb91b12df150461469b6d7abb7f75a5174936f435341622162ca585bacc6617e290aff9d4bde07aaadfe63d98612577762f8f69c3881f4d55", 0x38}, 0x48, 0xfffffffffffffff9) add_key$user(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x1}, &(0x7f0000000a40)="423c6b16e02114759bc496c689dc6f5a56da1ec1781858a53066725b1474d6d1563ac9ac01aacb7ee8d6e9e8efda7c8837fc66fb17c2bc22c4c1e5ff1491bd58b661d66af20d92c749c74bcc7851", 0x4e, r3) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x10001}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x4) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000cc0)={{0x2, 0x4e23, @private=0xa010100}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0xa, {0x2, 0x4e21, @remote}, 'veth0_vlan\x00'}) r4 = memfd_secret(0x0) write$nbd(r4, &(0x7f0000000d40)={0x67446698, 0x0, 0x4, 0x0, 0x3, "0129fc38a5e44ee337deff176bea14b60ff2beebe96e13fd00e68715a89ddb5f8f17dae2f721237a44a3061fa957418abe2226b00aa51a9544444cb4ecbd20c7188ced06985eb2883bb8f750ee379362f7b7b2c619878445a980c78af3c5bb665957edfd027edcdcb8ca0df71c055839e83120f9e7157e300aa8f6e94b365a62c02ff304654812bc92ca6373bc64a8b5a7b2ed9c1c58726bd419b35cd0218f3378b82b008bee0deb45cd6d3f88ec7bcd2a89846a5f11421a016394a9380d79bd06eb49ef7c1045efea1f00fa7fc1d3"}, 0xdf) write$P9_RLINK(r4, &(0x7f0000000e40)={0x7, 0x47, 0x2}, 0x7) r5 = add_key$keyring(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key$fscrypt_v1(&(0x7f0000000e80), &(0x7f0000000ec0)={'fscrypt:', @desc2}, &(0x7f0000000f00)={0x0, "91cd0abf92873a0e643720e6a3ba0c1fead3fee7055f10eaccdb85b91334481982a2690c57aaf8abb5d16ea5b3c0b8b9be3cd3c058fcecdb630f4da403d77751", 0x19}, 0x48, r5) pipe(&(0x7f0000001000)={0xffffffffffffffff}) write$P9_RWSTAT(r6, &(0x7f0000001040)={0x7, 0x7f, 0x1}, 0x7) 07:35:16 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x41c000) fstat(r0, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x4, 0x591100) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={0x0, 0x2, r0, 0x7, 0x80000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0xddd3, 0x101, 0x1, 'queue0\x00', 0xef1}) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000240)) r2 = memfd_secret(0x80000) write$P9_RLERROR(r2, &(0x7f0000000280)={0xa, 0x7, 0x2, {0x1, '\x00'}}, 0xa) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000002c0)=0x2, 0x4) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000340)={0x0, 0x1, r3, 0x7, 0x80000}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000380)={{0x1, 0x3f}, {0xd3, 0x9}, 0x8, 0x6}) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRWALK(r5, &(0x7f0000000440)={0xf, 0x1f, 0x1, 0x8}, 0xf) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x100, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}}, 0x40000) pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000000600)=0x48, 0x4) memfd_secret(0x80000) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000680)={0x14, 0x67, 0x1, {0x1, 0x2, 0x2}}, 0x14) [ 110.365051] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.368247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.370456] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.373736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.376337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.378244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.385339] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.388748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.393416] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.398170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.503464] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.506068] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.508212] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.514335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.518128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.560188] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.564208] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.569819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.576294] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.580986] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.610100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.614956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.622127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.651447] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.652238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.655933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.657463] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.672349] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.705085] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.730376] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.731908] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 110.734050] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 110.736217] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 110.741446] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 110.748144] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 110.785555] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 110.814069] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 110.817348] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 110.834590] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 110.842351] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 112.487224] Bluetooth: hci0: command tx timeout [ 112.487985] Bluetooth: hci1: command tx timeout [ 112.614732] Bluetooth: hci3: command tx timeout [ 112.615759] Bluetooth: hci2: command tx timeout [ 112.743705] Bluetooth: hci4: command tx timeout [ 112.806804] Bluetooth: hci6: command tx timeout [ 112.872051] Bluetooth: hci5: command tx timeout [ 112.934849] Bluetooth: hci7: command tx timeout [ 114.534886] Bluetooth: hci0: command tx timeout [ 114.535420] Bluetooth: hci1: command tx timeout [ 114.662750] Bluetooth: hci2: command tx timeout [ 114.663214] Bluetooth: hci3: command tx timeout [ 114.790831] Bluetooth: hci4: command tx timeout [ 114.854768] Bluetooth: hci6: command tx timeout [ 114.918714] Bluetooth: hci5: command tx timeout [ 114.982926] Bluetooth: hci7: command tx timeout [ 116.582739] Bluetooth: hci1: command tx timeout [ 116.583224] Bluetooth: hci0: command tx timeout [ 116.710810] Bluetooth: hci2: command tx timeout [ 116.711284] Bluetooth: hci3: command tx timeout [ 116.838771] Bluetooth: hci4: command tx timeout [ 116.902730] Bluetooth: hci6: command tx timeout [ 116.966777] Bluetooth: hci5: command tx timeout [ 117.031521] Bluetooth: hci7: command tx timeout [ 118.633028] Bluetooth: hci1: command tx timeout [ 118.633519] Bluetooth: hci0: command tx timeout [ 118.759777] Bluetooth: hci2: command tx timeout [ 118.760245] Bluetooth: hci3: command tx timeout [ 118.886759] Bluetooth: hci4: command tx timeout [ 118.950702] Bluetooth: hci6: command tx timeout [ 119.015045] Bluetooth: hci5: command tx timeout [ 119.078691] Bluetooth: hci7: command tx timeout [ 173.058962] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.061883] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.062868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.066251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.067001] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.080472] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.086404] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.091879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.093008] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.097193] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.112310] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.115270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.116044] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.118170] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.120104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.123084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.125079] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.126142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.133289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.139837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.183331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.183445] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.192027] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.193201] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.197582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.199157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.202070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.203754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.211924] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.213466] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.262550] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.282206] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.287081] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.289226] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.291777] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.294041] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.295792] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.299813] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.328279] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.337055] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.144724] Bluetooth: hci0: command tx timeout [ 175.206738] Bluetooth: hci2: command tx timeout [ 175.207738] Bluetooth: hci3: command tx timeout [ 175.208254] Bluetooth: hci1: command tx timeout [ 175.271103] Bluetooth: hci5: command tx timeout [ 175.271788] Bluetooth: hci4: command tx timeout [ 175.334711] Bluetooth: hci6: command tx timeout [ 175.398934] Bluetooth: hci7: command tx timeout [ 177.190770] Bluetooth: hci0: command tx timeout [ 177.256800] Bluetooth: hci1: command tx timeout [ 177.257233] Bluetooth: hci3: command tx timeout [ 177.257814] Bluetooth: hci2: command tx timeout [ 177.318784] Bluetooth: hci4: command tx timeout [ 177.319222] Bluetooth: hci5: command tx timeout [ 177.383377] Bluetooth: hci6: command tx timeout [ 177.448028] Bluetooth: hci7: command tx timeout [ 179.239808] Bluetooth: hci0: command tx timeout [ 179.302767] Bluetooth: hci2: command tx timeout [ 179.303223] Bluetooth: hci3: command tx timeout [ 179.303805] Bluetooth: hci1: command tx timeout [ 179.367163] Bluetooth: hci5: command tx timeout [ 179.367591] Bluetooth: hci4: command tx timeout [ 179.430732] Bluetooth: hci6: command tx timeout [ 179.494703] Bluetooth: hci7: command tx timeout [ 181.287012] Bluetooth: hci0: command tx timeout [ 181.350845] Bluetooth: hci2: command tx timeout [ 181.351323] Bluetooth: hci3: command tx timeout [ 181.351880] Bluetooth: hci1: command tx timeout [ 181.414980] Bluetooth: hci5: command tx timeout [ 181.415483] Bluetooth: hci4: command tx timeout [ 181.478807] Bluetooth: hci6: command tx timeout [ 181.543717] Bluetooth: hci7: command tx timeout [ 235.195889] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.203518] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.208312] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.222177] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.229161] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.366237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.370561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.375983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.382197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.389253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.441196] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.459031] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.486233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.508053] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.513473] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.522814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.526426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.530574] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.544443] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.553507] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.618084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.631558] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.652604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.660177] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.666909] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.675046] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.690183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.711456] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.717318] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.721288] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 235.723379] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.729543] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.733330] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.737853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 235.745078] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 235.746484] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.750272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.762410] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.763862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.803611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.286846] Bluetooth: hci0: command tx timeout [ 237.479962] Bluetooth: hci1: command tx timeout [ 237.606739] Bluetooth: hci2: command tx timeout [ 237.734945] Bluetooth: hci4: command tx timeout [ 237.735915] Bluetooth: hci3: command tx timeout [ 237.862731] Bluetooth: hci6: command tx timeout [ 237.863489] Bluetooth: hci7: command tx timeout [ 237.927295] Bluetooth: hci5: command tx timeout [ 239.334729] Bluetooth: hci0: command tx timeout [ 239.526908] Bluetooth: hci1: command tx timeout [ 239.656090] Bluetooth: hci2: command tx timeout [ 239.784478] Bluetooth: hci4: command tx timeout [ 239.785197] Bluetooth: hci3: command tx timeout [ 239.911809] Bluetooth: hci7: command tx timeout [ 239.912275] Bluetooth: hci6: command tx timeout [ 239.975118] Bluetooth: hci5: command tx timeout [ 241.382766] Bluetooth: hci0: command tx timeout [ 241.575681] Bluetooth: hci1: command tx timeout [ 241.702896] Bluetooth: hci2: command tx timeout [ 241.830818] Bluetooth: hci4: command tx timeout [ 241.832254] Bluetooth: hci3: command tx timeout [ 241.959225] Bluetooth: hci7: command tx timeout [ 241.960309] Bluetooth: hci6: command tx timeout [ 242.022835] Bluetooth: hci5: command tx timeout [ 243.430740] Bluetooth: hci0: command tx timeout [ 243.623185] Bluetooth: hci1: command tx timeout [ 243.752095] Bluetooth: hci2: command tx timeout [ 243.879737] Bluetooth: hci3: command tx timeout [ 243.880334] Bluetooth: hci4: command tx timeout [ 244.006876] Bluetooth: hci6: command tx timeout [ 244.007462] Bluetooth: hci7: command tx timeout [ 244.071017] Bluetooth: hci5: command tx timeout [ 297.525274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.529451] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.532374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.537487] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.541584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.661587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.668153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.670662] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.681073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.685875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.782275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.786490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.793038] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.802138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.809070] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.937120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.941414] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.942917] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.953054] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.955417] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.961780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.965946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.971850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.972676] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.980899] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.981940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.984833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.013115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.018436] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.021482] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.048236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.049417] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.075180] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.077850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.096915] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.108760] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.114283] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.150794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.150988] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.192052] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.622801] Bluetooth: hci0: command tx timeout [ 299.752725] Bluetooth: hci1: command tx timeout [ 299.878710] Bluetooth: hci2: command tx timeout [ 300.070714] Bluetooth: hci3: command tx timeout [ 300.135692] Bluetooth: hci4: command tx timeout [ 300.262727] Bluetooth: hci5: command tx timeout [ 300.327698] Bluetooth: hci7: command tx timeout [ 300.390911] Bluetooth: hci6: command tx timeout [ 301.672708] Bluetooth: hci0: command tx timeout [ 301.798694] Bluetooth: hci1: command tx timeout [ 301.927837] Bluetooth: hci2: command tx timeout [ 302.119676] Bluetooth: hci3: command tx timeout [ 302.183887] Bluetooth: hci4: command tx timeout [ 302.311884] Bluetooth: hci5: command tx timeout [ 302.374786] Bluetooth: hci7: command tx timeout [ 302.440063] Bluetooth: hci6: command tx timeout [ 303.718868] Bluetooth: hci0: command tx timeout [ 303.846733] Bluetooth: hci1: command tx timeout [ 303.976976] Bluetooth: hci2: command tx timeout [ 304.169647] Bluetooth: hci3: command tx timeout [ 304.231711] Bluetooth: hci4: command tx timeout [ 304.360197] Bluetooth: hci5: command tx timeout [ 304.423007] Bluetooth: hci7: command tx timeout [ 304.487898] Bluetooth: hci6: command tx timeout [ 305.767744] Bluetooth: hci0: command tx timeout [ 305.894676] Bluetooth: hci1: command tx timeout [ 306.022696] Bluetooth: hci2: command tx timeout [ 306.214850] Bluetooth: hci3: command tx timeout [ 306.279694] Bluetooth: hci4: command tx timeout [ 306.407762] Bluetooth: hci5: command tx timeout [ 306.470693] Bluetooth: hci7: command tx timeout [ 306.534682] Bluetooth: hci6: command tx timeout [ 360.123263] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.127547] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.130373] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.140246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.145219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.318177] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.322998] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.326722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.335219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.341078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.476269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.483143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.494882] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.497309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.512496] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.513064] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.516728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.517165] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.531760] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.541420] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.625509] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.635172] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.641669] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.662035] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.665093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.688926] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.701501] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.723551] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.734131] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.746259] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.847890] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.875939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.894673] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.906176] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.909425] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.966278] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.970105] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.979984] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.984917] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.989347] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.215006] Bluetooth: hci0: command tx timeout [ 362.406894] Bluetooth: hci1: command tx timeout [ 362.600734] Bluetooth: hci2: command tx timeout [ 362.601415] Bluetooth: hci3: command tx timeout [ 362.790730] Bluetooth: hci6: command tx timeout [ 362.791440] Bluetooth: hci4: command tx timeout [ 363.047409] Bluetooth: hci7: command tx timeout [ 363.174921] Bluetooth: hci5: command tx timeout [ 364.262711] Bluetooth: hci0: command tx timeout [ 364.454759] Bluetooth: hci1: command tx timeout [ 364.646997] Bluetooth: hci3: command tx timeout [ 364.647467] Bluetooth: hci2: command tx timeout [ 364.840662] Bluetooth: hci6: command tx timeout [ 364.841136] Bluetooth: hci4: command tx timeout [ 365.095948] Bluetooth: hci7: command tx timeout [ 365.222771] Bluetooth: hci5: command tx timeout [ 366.311721] Bluetooth: hci0: command tx timeout [ 366.503829] Bluetooth: hci1: command tx timeout [ 366.694852] Bluetooth: hci3: command tx timeout [ 366.695297] Bluetooth: hci2: command tx timeout [ 366.886927] Bluetooth: hci6: command tx timeout [ 366.887366] Bluetooth: hci4: command tx timeout [ 367.142849] Bluetooth: hci7: command tx timeout [ 367.271103] Bluetooth: hci5: command tx timeout [ 368.358743] Bluetooth: hci0: command tx timeout [ 368.551113] Bluetooth: hci1: command tx timeout [ 368.742735] Bluetooth: hci2: command tx timeout [ 368.743183] Bluetooth: hci3: command tx timeout [ 368.934907] Bluetooth: hci4: command tx timeout [ 368.935348] Bluetooth: hci6: command tx timeout [ 369.191272] Bluetooth: hci7: command tx timeout [ 369.319213] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 07:40:26 Registers: info registers vcpu 0 RAX=0000000000001141 RBX=0000000000000200 RCX=ffffffff817bb6b6 RDX=0000000000000000 RSI=ffffffff81360123 RDI=ffffffff81360118 RBP=ffff888035717f58 RSP=ffff888035717ec8 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff86414657 R11=0000000000000000 R12=0000000000000006 R13=00007f8cbfd9e018 R14=0000000000000000 R15=ffff888015d41ec0 RIP=ffffffff81738d98 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8cbf8e8540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8cbfd9e018 CR3=0000000026d79000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85c1cc40 RBP=ffffffff85c1cc40 RSP=ffff88806cf08938 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=00000000000043f8 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf08a20 RIP=ffffffff8151af47 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2074abe540 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd634e5b98 CR3=00000000271ce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000