Warning: Permanently added '[localhost]:34335' (ECDSA) to the list of known hosts. 2024/10/24 08:44:58 fuzzer started 2024/10/24 08:44:58 dialing manager at localhost:45639 syzkaller login: [ 72.857574] cgroup: Unknown subsys name 'net' [ 72.940022] cgroup: Unknown subsys name 'cpuset' [ 72.952282] cgroup: Unknown subsys name 'rlimit' 2024/10/24 08:45:15 syscalls: 207 2024/10/24 08:45:15 code coverage: enabled 2024/10/24 08:45:15 comparison tracing: enabled 2024/10/24 08:45:15 extra coverage: enabled 2024/10/24 08:45:15 setuid sandbox: enabled 2024/10/24 08:45:15 namespace sandbox: enabled 2024/10/24 08:45:15 Android sandbox: enabled 2024/10/24 08:45:15 fault injection: enabled 2024/10/24 08:45:15 leak checking: enabled 2024/10/24 08:45:15 net packet injection: enabled 2024/10/24 08:45:15 net device setup: enabled 2024/10/24 08:45:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/24 08:45:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/24 08:45:15 USB emulation: enabled 2024/10/24 08:45:15 hci packet injection: enabled 2024/10/24 08:45:15 wifi device emulation: enabled 2024/10/24 08:45:15 802.15.4 emulation: enabled 2024/10/24 08:45:15 fetching corpus: 0, signal 0/0 (executing program) 2024/10/24 08:45:16 starting 8 fuzzer processes 08:45:16 executing program 0: ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x4, 0x8002) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000001c0)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x8c5dc) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000340)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000500)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000540)={0x0}) r3 = syz_open_dev$sg(&(0x7f00000005c0), 0x80000001, 0xc002) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000600)={r2, 0x3, r3, 0xe5, 0x80000}) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x2c8940, 0x0) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000680)) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) r5 = syz_open_dev$sg(&(0x7f00000006c0), 0x20, 0x80000) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x6) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) epoll_create(0x10001) 08:45:16 executing program 1: ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x30440, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000000c0)) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x400, 0x2c0400) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000140)=0x1) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000180)) r2 = socket(0x25, 0x6, 0xebf9) r3 = syz_genetlink_get_family_id$tipc2(0xfffffffffffffffc, r0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc0000}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20040010) r4 = syz_open_dev$sg(&(0x7f0000000300), 0x40, 0x101000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) syz_open_dev$sg(&(0x7f0000000340), 0x1e, 0x60100) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{0x8, 0x5, 0x3, 0x9}, {0x7f, 0x4, 0xa4, 0x4}]}) r5 = syz_open_dev$sg(&(0x7f0000000400), 0x5, 0x8000) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000440)=0x4) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000004c0)=0x1) 08:45:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x400000) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)=0x1) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x248800) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000000c0)={0xd9, ""/217}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000001c0)) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000200)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000280)) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x7, 0x301000) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xbc, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x19164f34}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x3600800c) syz_extract_tcp_res(&(0x7f0000000480), 0x3dd80000, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x1bade) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000500)={0x65, ""/101}) r4 = accept4(r2, &(0x7f0000000580)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000600)=0x80, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x3f2, 0x2, 0x70bd2b, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x10) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000740)=0x8, 0x1) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) [ 90.474581] audit: type=1400 audit(1729759516.848:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:45:16 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80, 0x80000) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x900}, 0x20000810) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x2c}}, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x6, 0x20, @private0, @mcast1, 0x20, 0x7, 0x1, 0xfffffffe}}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) accept(r3, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000003c0)=0x80) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'veth0_to_batadv\x00', @ifru_flags}}) syz_io_uring_setup(0x1b0e, &(0x7f0000000480)={0x0, 0x480e, 0x2, 0x2, 0x2dd, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x178, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, '\x00', 0x33}, 0x400}}, {0x14, 0x2, @in={0x2, 0x9, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xae, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x800, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd23}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e02}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff69}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) epoll_create(0x100) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'sit0\x00', r2, 0x29, 0xb5, 0x3f, 0x1, 0x4, @empty, @rand_addr=' \x01\x00', 0x80, 0x7, 0xffffff50, 0x542}}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x17c, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfe83}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc75}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x44}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6110}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff473}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf67}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe264}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5bcb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4}, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b00)='./binderfs/custom1\x00', 0x802, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000e80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b80)={0x2b0, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x128, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x34, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x10000, @rand_addr=' \x01\x00', 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}]}]}, 0x2b0}}, 0x80) 08:45:16 executing program 4: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x7, [@random="1f7853baa7b6", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @broadcast, @local, @multicast, @multicast, @empty]}) socket$nl_audit(0x10, 0x3, 0x9) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000040)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80340, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)={'ip6gretap0\x00'}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0xffe1, 0x0, 0x81, 0x6}, {0x7a4, 0x6, 0x5}, {0x8, 0x2, 0x2}, {0x0, 0x1, 0x20, 0x2}, {0x401, 0x3f, 0x9, 0x1}, {0x6, 0x4, 0x55, 0x10000}, {0x200, 0x3f, 0x7f, 0x386}, {0x100, 0x2, 0x9, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000200)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x600, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000280)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000300)={'veth1_vlan\x00'}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x450181, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000380), 0x1f, 0x40080) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x200002, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000500)={0x6, &(0x7f00000004c0)=[{0xd77f, 0xff, 0x5, 0xfffffffa}, {0x1, 0x5, 0x6, 0x4}, {0x81, 0x0, 0x40, 0x4}, {0x9, 0x1f, 0x1, 0x1}, {0x5, 0x1c, 0x88}, {0x401, 0x4, 0xa9, 0xfffffffc}]}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000740)={0x94, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000540)={@flat=@weak_binder={0x77622a85, 0x100}, @fda={0x66646185, 0x8, 0x1, 0x35}, @fd={0x66642a85, 0x0, r8}}, &(0x7f00000005c0)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @exit_looper], 0x55, 0x0, &(0x7f00000006c0)="39358c4aed1032d8d84705ea259eccc34dc06764b10c56cd70f0d9f0a0abeaed67b128b038299ea06bba7762b23dbe1aa60e8b63b4ebb3e1faaf862efa68dac7367d8171ce88e58346bfe471e2256aa07d15f9aceb"}) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000780)=0x7fff, 0x2) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000800)={0x2, &(0x7f00000007c0)=[{0xffef, 0xd8, 0x9, 0x5}, {0x6, 0x42, 0x3f, 0x8001}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f0000000840)={r2, 0x8, 0x6}) 08:45:16 executing program 5: r0 = socket(0x2b, 0x4, 0x20) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1fc, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "ae56b073b6afa978ed739abb9cb4d2b95719c3bcadae"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x786}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "5ff6dd238c1faaa5055effd405ab7c353882e2c4d3183e7a1a5c950b76879c1b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x17, 0x3, "fc62149fa0f3527ec23c71ad5f132bf2111b28"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "8cacd8833756f162cbd7a7c38c30ecf74cea5c66f0015c70940e7f6911ca"}}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x33c, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xa4, @mcast1, 0x81}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7c18}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ada4d90}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc3c}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4f81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f6, 0x400, 0x70bd29, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000ac0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000400)={0x658, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfd75}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4d5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1bab}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbc}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2b4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x655}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_LINK={0x118, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe569}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f9a}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79d0}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x83c2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x22c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "6346cab8843f2689d7df840b97293aafcece1ef07d2123873ac4a55ad0b76ea045"}}, @TIPC_NLA_NODE_ID={0xfd, 0x3, "bae06898bd220e165c84a196562c25c6b77f9ea28756c363618f1c669ce4efd791cf1a9f08016c200ae3070d12f6c456d6099d093ad05e7467c75b6bb61d047302e5a9352d6db7e6aadf23c022cbfbf9d9b3df862c01b7d8eb3c568d20ed329df143087336755e16c6c2ad70bd282bfd2517b3e7d0fa2864be5a92b6949dd6cf6215da10d89a5b58a994ecb907e52d2b46de5125a8c3840105bccf58e7bb49224dcae893e2e3249b1983318b2188b7f4c868805ba484abda21ed679e64a6cf45b8f6be75cfe52479a05242cee98507f782f59fa7a4829bc69dec648b63f38c7918c91a7f562e3fdf966c907a5603518966afeea71ef5322a2a"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "081fce6a368755226bf3dbeaacdeaa646797cdb6845341"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x121}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x7a, 0x3, "9fbbcdce6e9905c897e3192f2db24a7d8f0541656c2fb9b28e0ef135494378a05bd61fb76df318f01668ca24ed841ca61e0ef87581b57820e7981b036574b6d705c9e06190b03255901d86f31d7d1c5c9e6baee92acd900e137b38772f08edc2162aabf8d2674b4b17cbc4853be09a87362b109c8418"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8cd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41e}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @loopback, 0xa585}}}}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x658}, 0x1, 0x0, 0x0, 0x8c0}, 0x440c0) r2 = socket(0x1, 0xa, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000b00)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x10001, 0x0, {0x2}}, 0xcc) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r2) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000e80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x268, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6ad}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "586250832d7f48cf8f08ece7129ed927bbcbbd555aad59fff97f5083a0b0df6b58b1f5b5"}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x52d8fee6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3021}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}]}]}, 0x268}, 0x1, 0x0, 0x0, 0xc0}, 0x41) syz_io_uring_submit(r3, 0x0, &(0x7f0000000ec0)=@IORING_OP_NOP={0x0, 0x5}, 0x9) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), r2) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9cc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x46080) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001040), 0x8000, 0x0) setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000001080)=0x183, 0x2) accept4(0xffffffffffffffff, &(0x7f00000010c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000001140)=0x80, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f00000013c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001380)={&(0x7f00000011c0)={0x190, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x180}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9fa8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe0000000}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc00e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x46, 0x3, "a3fbc01be49b7d07edfab741cf198ed52f470fb34a6c195401f877c1c2edc7239097f6ece21abb116af35882bb53edfb5fd6a466281dd19b7611a45c047344ecea34"}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}]}]}, 0x190}}, 0x4040) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001580)={&(0x7f0000001440)={0x110, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x54c}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffc3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000001640)=@req={0x28, &(0x7f0000001600)={'\x00', @ifru_hwaddr=@remote}}) 08:45:16 executing program 6: ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x200) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x3, 0x400) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000100)) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000140)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) write$char_usb(0xffffffffffffffff, &(0x7f0000000180)="b39d77093fe86fe7d0e6bef7efe872eb3f1d2188c24d657be69d5b120fc9b6df3443484de9ad03e51c401984ae902bc3e6134902ebe27c5d170f75bee794bdcbfb1d86cc30c63ae63cf299cbdd4b366bd3f1df581397f9ecaf3353c85b93c5a09dd7678ba95830f9146cb2a7939e", 0x6e) r2 = socket(0xf, 0x2, 0x700000) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000200)=0x6, &(0x7f0000000240)=0x2) r3 = syz_open_dev$sg(&(0x7f0000000280), 0xfffffffffffffffb, 0x204240) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f00000002c0)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000300)=0x2c, &(0x7f0000000340)=0x1) getrusage(0x0, &(0x7f0000000380)) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000440)) r4 = syz_open_dev$sg(&(0x7f0000000480), 0x5d37, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f00000004c0)=0x2) 08:45:17 executing program 7: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x108) syz_extract_tcp_res(&(0x7f0000000040), 0x1, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x410000, 0x0) write$tun(r0, &(0x7f00000000c0)={@void, @void, @eth={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @multicast, @rand_addr=0x64010102, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast}}}}}, 0x2a) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x90000001}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000140)) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000180)=0x65, &(0x7f00000001c0)=0x1) r2 = accept(r1, 0x0, &(0x7f0000000200)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x12a) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6467cb457c45d62e, &(0x7f0000000280)={0x6, &(0x7f0000000240)=[{0xfff, 0x40, 0xb5, 0x8}, {0x100, 0x2, 0x14}, {0xffff, 0x5, 0x6, 0x5}, {0x8, 0x6, 0x8, 0xffffffff}, {0xc23, 0x5, 0x81, 0xf4}, {0xca5, 0x6, 0x1, 0x24}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x1, r2, 0x4, 0x80000}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x6, 0x5, 0xc1, 0xec}]}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) syz_extract_tcp_res(&(0x7f0000000380), 0xfffff7cd, 0x1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0xbc3a1508ace1cab4, 0x3}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r2) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xbc, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa1, 0x3, "1e628af2803dca143dd5b0314fe5f2420013fd20451f565167cbabe0f5cf7474ba0cafb8a4991d461c574f0baeccd9629cbf2e918dbc2512dc1b803d64ba101c9b1918ef70f9d8a3ff3358f5cdd145618b26acf75e901de00d5bd8f626e467424bf4ed91ab128db3d49e86c8554beca928d6578156f6b012d975102d2703cc944e7453db902211136929bddf0376fb33d4f18188ba3a3a7d7e14c8372c"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8041}, 0x404c080) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0) [ 91.896439] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.901516] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.903576] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.906929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.909367] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.910540] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.958353] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.959666] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.961456] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.964548] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.966861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.968020] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.976618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.984562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.985607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.989347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.991309] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.992590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.026080] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.029913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.031274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.032722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.035324] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.037148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.037930] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.040406] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.051683] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.053212] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.054380] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.055083] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.056015] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.057325] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.058707] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.062999] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.065502] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.066563] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.083974] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.084244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.088063] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.089548] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.090989] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.091982] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.097749] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.099488] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.107940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.110937] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.119325] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.136835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.928606] Bluetooth: hci0: command tx timeout [ 93.992389] Bluetooth: hci1: command tx timeout [ 94.058255] Bluetooth: hci2: command tx timeout [ 94.122254] Bluetooth: hci7: command tx timeout [ 94.184340] Bluetooth: hci3: command tx timeout [ 94.185973] Bluetooth: hci6: command tx timeout [ 94.248457] Bluetooth: hci5: command tx timeout [ 94.248528] Bluetooth: hci4: command tx timeout [ 95.979211] Bluetooth: hci0: command tx timeout [ 96.041379] Bluetooth: hci1: command tx timeout [ 96.104251] Bluetooth: hci2: command tx timeout [ 96.168261] Bluetooth: hci7: command tx timeout [ 96.235224] Bluetooth: hci6: command tx timeout [ 96.235249] Bluetooth: hci3: command tx timeout [ 96.298237] Bluetooth: hci4: command tx timeout [ 96.298271] Bluetooth: hci5: command tx timeout [ 98.024285] Bluetooth: hci0: command tx timeout [ 98.088360] Bluetooth: hci1: command tx timeout [ 98.152297] Bluetooth: hci2: command tx timeout [ 98.217201] Bluetooth: hci7: command tx timeout [ 98.281224] Bluetooth: hci6: command tx timeout [ 98.281240] Bluetooth: hci3: command tx timeout [ 98.344280] Bluetooth: hci5: command tx timeout [ 98.344302] Bluetooth: hci4: command tx timeout [ 100.073227] Bluetooth: hci0: command tx timeout [ 100.136333] Bluetooth: hci1: command tx timeout [ 100.200394] Bluetooth: hci2: command tx timeout [ 100.264347] Bluetooth: hci7: command tx timeout [ 100.328253] Bluetooth: hci6: command tx timeout [ 100.328355] Bluetooth: hci3: command tx timeout [ 100.392286] Bluetooth: hci5: command tx timeout [ 100.392410] Bluetooth: hci4: command tx timeout [ 154.422485] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.424382] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.432382] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.439893] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.442057] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.443110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.493243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.495999] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.497982] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.503025] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.504878] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.505985] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.552677] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.555822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.557452] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.558554] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.563048] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.566838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.572128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.573282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.580546] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.596989] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.607032] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.610660] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.629692] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.635285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.638479] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.670339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.688709] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.689925] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.694502] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.708560] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.740816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.750829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.766808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.766874] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.771397] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.781958] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.785116] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.785525] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.797277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.807404] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.807879] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.811569] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.811910] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.814633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.829475] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.837547] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.456306] Bluetooth: hci0: command tx timeout [ 156.584325] Bluetooth: hci1: command tx timeout [ 156.648227] Bluetooth: hci2: command tx timeout [ 156.714217] Bluetooth: hci3: command tx timeout [ 156.776454] Bluetooth: hci4: command tx timeout [ 156.907232] Bluetooth: hci5: command tx timeout [ 156.907259] Bluetooth: hci6: command tx timeout [ 156.968404] Bluetooth: hci7: command tx timeout [ 158.504438] Bluetooth: hci0: command tx timeout [ 158.632283] Bluetooth: hci1: command tx timeout [ 158.696325] Bluetooth: hci2: command tx timeout [ 158.760582] Bluetooth: hci3: command tx timeout [ 158.826232] Bluetooth: hci4: command tx timeout [ 158.952330] Bluetooth: hci6: command tx timeout [ 158.952426] Bluetooth: hci5: command tx timeout [ 159.016300] Bluetooth: hci7: command tx timeout [ 160.552303] Bluetooth: hci0: command tx timeout [ 160.682201] Bluetooth: hci1: command tx timeout [ 160.744228] Bluetooth: hci2: command tx timeout [ 160.808259] Bluetooth: hci3: command tx timeout [ 160.872339] Bluetooth: hci4: command tx timeout [ 161.000254] Bluetooth: hci5: command tx timeout [ 161.002205] Bluetooth: hci6: command tx timeout [ 161.064316] Bluetooth: hci7: command tx timeout [ 162.600321] Bluetooth: hci0: command tx timeout [ 162.728255] Bluetooth: hci1: command tx timeout [ 162.792469] Bluetooth: hci2: command tx timeout [ 162.856352] Bluetooth: hci3: command tx timeout [ 162.920224] Bluetooth: hci4: command tx timeout [ 163.048494] Bluetooth: hci6: command tx timeout [ 163.049883] Bluetooth: hci5: command tx timeout [ 163.112400] Bluetooth: hci7: command tx timeout [ 198.485682] hrtimer: interrupt took 3396849 ns [ 216.735752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.737359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.743316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.751543] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.753879] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.755368] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.816753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.821454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.822788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.835740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.837655] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.839243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.949820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.957461] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.961632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.969197] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.973042] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.976415] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.158637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.167057] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.177723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.186019] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.189380] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.193555] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.206695] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.224431] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.237236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.257429] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.263380] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.270501] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.343681] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.345714] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.378397] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.379760] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.402401] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.415615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.422475] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.428488] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.436434] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.486817] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.492034] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.493073] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.498509] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.499820] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.502819] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.534359] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.537569] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.539609] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.793331] Bluetooth: hci0: command tx timeout [ 218.857309] Bluetooth: hci1: command tx timeout [ 219.049365] Bluetooth: hci2: command tx timeout [ 219.240782] Bluetooth: hci3: command tx timeout [ 219.304234] Bluetooth: hci4: command tx timeout [ 219.560473] Bluetooth: hci6: command tx timeout [ 219.560498] Bluetooth: hci5: command tx timeout [ 219.625353] Bluetooth: hci7: command tx timeout [ 220.842356] Bluetooth: hci0: command tx timeout [ 220.905313] Bluetooth: hci1: command tx timeout [ 221.097305] Bluetooth: hci2: command tx timeout [ 221.288239] Bluetooth: hci3: command tx timeout [ 221.354187] Bluetooth: hci4: command tx timeout [ 221.608347] Bluetooth: hci6: command tx timeout [ 221.608369] Bluetooth: hci5: command tx timeout [ 221.673229] Bluetooth: hci7: command tx timeout [ 222.889413] Bluetooth: hci0: command tx timeout [ 222.953457] Bluetooth: hci1: command tx timeout [ 223.145256] Bluetooth: hci2: command tx timeout [ 223.337207] Bluetooth: hci3: command tx timeout [ 223.400418] Bluetooth: hci4: command tx timeout [ 223.657203] Bluetooth: hci5: command tx timeout [ 223.657222] Bluetooth: hci6: command tx timeout [ 223.721553] Bluetooth: hci7: command tx timeout [ 224.937363] Bluetooth: hci0: command tx timeout [ 225.001387] Bluetooth: hci1: command tx timeout [ 225.192659] Bluetooth: hci2: command tx timeout [ 225.384244] Bluetooth: hci3: command tx timeout [ 225.448232] Bluetooth: hci4: command tx timeout [ 225.704342] Bluetooth: hci5: command tx timeout [ 225.704505] Bluetooth: hci6: command tx timeout [ 225.769205] Bluetooth: hci7: command tx timeout [ 279.123747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.126736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.131898] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.136064] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.140797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.141706] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.145816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.147845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.150513] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.151597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.161273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.166030] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.358320] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.362499] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.367465] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.374772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.378168] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.381324] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.501373] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.515612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.521364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.539775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.560134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.564753] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 279.566696] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.569272] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.571703] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.574728] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.577241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.580004] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.583085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.585625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.591560] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.643010] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.655568] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.666736] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.670506] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.676360] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.685333] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.687534] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.710384] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.758999] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.760928] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.771865] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 279.781345] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.783369] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.795356] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.809311] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.193232] Bluetooth: hci1: command tx timeout [ 281.257326] Bluetooth: hci0: command tx timeout [ 281.448214] Bluetooth: hci2: command tx timeout [ 281.640342] Bluetooth: hci3: command tx timeout [ 281.641370] Bluetooth: hci4: command tx timeout [ 281.834197] Bluetooth: hci5: command tx timeout [ 281.913176] Bluetooth: hci7: command tx timeout [ 281.913981] Bluetooth: hci6: command tx timeout [ 283.241189] Bluetooth: hci1: command tx timeout [ 283.304202] Bluetooth: hci0: command tx timeout [ 283.497485] Bluetooth: hci2: command tx timeout [ 283.688221] Bluetooth: hci3: command tx timeout [ 283.689728] Bluetooth: hci4: command tx timeout [ 283.881491] Bluetooth: hci5: command tx timeout [ 283.945367] Bluetooth: hci6: command tx timeout [ 283.946781] Bluetooth: hci7: command tx timeout [ 285.289216] Bluetooth: hci1: command tx timeout [ 285.359173] Bluetooth: hci0: command tx timeout [ 285.544247] Bluetooth: hci2: command tx timeout [ 285.737330] Bluetooth: hci3: command tx timeout [ 285.738989] Bluetooth: hci4: command tx timeout [ 285.929199] Bluetooth: hci5: command tx timeout [ 285.992235] Bluetooth: hci7: command tx timeout [ 285.992799] Bluetooth: hci6: command tx timeout [ 287.337327] Bluetooth: hci1: command tx timeout [ 287.401177] Bluetooth: hci0: command tx timeout [ 287.593177] Bluetooth: hci2: command tx timeout [ 287.785240] Bluetooth: hci4: command tx timeout [ 287.785757] Bluetooth: hci3: command tx timeout [ 287.977399] Bluetooth: hci5: command tx timeout [ 288.045590] Bluetooth: hci6: command tx timeout [ 288.046167] Bluetooth: hci7: command tx timeout [ 341.439984] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.441428] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.445859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.451737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.453427] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.454651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.618829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.620236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.625401] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.634183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.639266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.640665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.697823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.705358] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.710334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.712827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.715642] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.717610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.758335] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.773899] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.775396] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.778043] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.780500] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.781743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.833651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.834146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.838855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.839866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.845575] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.848232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.851888] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.852904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.858453] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.876014] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.888647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.895053] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.903238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.904047] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.904933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.907305] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.951339] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.971347] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.989774] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.991846] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.992890] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.999288] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.013654] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.015414] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.528207] Bluetooth: hci0: command tx timeout [ 343.721208] Bluetooth: hci1: command tx timeout [ 343.784394] Bluetooth: hci2: command tx timeout [ 343.849302] Bluetooth: hci3: command tx timeout [ 343.912216] Bluetooth: hci5: command tx timeout [ 343.976190] Bluetooth: hci4: command tx timeout [ 344.104257] Bluetooth: hci6: command tx timeout [ 344.105004] Bluetooth: hci7: command tx timeout [ 345.576190] Bluetooth: hci0: command tx timeout [ 345.768305] Bluetooth: hci1: command tx timeout [ 345.832410] Bluetooth: hci2: command tx timeout [ 345.897475] Bluetooth: hci3: command tx timeout [ 345.960648] Bluetooth: hci5: command tx timeout [ 346.024216] Bluetooth: hci4: command tx timeout [ 346.152414] Bluetooth: hci7: command tx timeout [ 346.152918] Bluetooth: hci6: command tx timeout [ 347.625156] Bluetooth: hci0: command tx timeout [ 347.817409] Bluetooth: hci1: command tx timeout [ 347.880234] Bluetooth: hci2: command tx timeout [ 347.944202] Bluetooth: hci3: command tx timeout [ 348.008410] Bluetooth: hci5: command tx timeout [ 348.072165] Bluetooth: hci4: command tx timeout [ 348.200411] Bluetooth: hci6: command tx timeout [ 348.200915] Bluetooth: hci7: command tx timeout [ 349.672210] Bluetooth: hci0: command tx timeout [ 349.864403] Bluetooth: hci1: command tx timeout [ 349.928186] Bluetooth: hci2: command tx timeout [ 349.992217] Bluetooth: hci3: command tx timeout [ 350.056162] Bluetooth: hci5: command tx timeout [ 350.121259] Bluetooth: hci4: command tx timeout [ 350.248196] Bluetooth: hci7: command tx timeout [ 350.248701] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 08:50:17 Registers: info registers vcpu 0 RAX=fffff9400003a5d8 RBX=fffff9400003a5d9 RCX=ffffffff81792c4f RDX=fffff9400003a5d9 RSI=0000000000000008 RDI=ffffea00001d2ec0 RBP=fffff9400003a5d8 RSP=ffff888034337880 R8 =0000000000000000 R9 =fffff9400003a5d8 R10=ffffea00001d2ec7 R11=00000000efe4b99a R12=0000000000000000 R13=ffffea00001d2ec0 R14=00007f3e2f085000 R15=ffff888034337ce0 RIP=ffffffff818b31e1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fca331ce02c CR3=000000002583c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000186 RCX=ffffffff812ef5ee RDX=fffffbfff0fda9db RSI=0000000000000008 RDI=ffffffff87ed4ed0 RBP=ffff888033fd0000 RSP=ffff888028727878 R8 =0000000000000000 R9 =fffffbfff0fda9da R10=ffffffff87ed4ed7 R11=0000000000000001 R12=ffff888033fd0b08 R13=0000000000000000 R14=ffffffff863f34b4 R15=0000000000000000 RIP=ffffffff812ef5f6 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4fef12a540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe1200000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4fef1c74a0 CR3=00000000230a4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000