Warning: Permanently added '[localhost]:28526' (ECDSA) to the list of known hosts.
2025/06/05 14:44:32 fuzzer started
2025/06/05 14:44:33 dialing manager at localhost:42669
syzkaller login: [  111.159742] cgroup: Unknown subsys name 'net'
[  111.304406] cgroup: Unknown subsys name 'cpuset'
[  111.339681] cgroup: Unknown subsys name 'rlimit'
2025/06/05 14:44:51 syscalls: 218
2025/06/05 14:44:51 code coverage: enabled
2025/06/05 14:44:51 comparison tracing: enabled
2025/06/05 14:44:51 extra coverage: enabled
2025/06/05 14:44:51 setuid sandbox: enabled
2025/06/05 14:44:51 namespace sandbox: enabled
2025/06/05 14:44:51 Android sandbox: enabled
2025/06/05 14:44:51 fault injection: enabled
2025/06/05 14:44:51 leak checking: enabled
2025/06/05 14:44:51 net packet injection: enabled
2025/06/05 14:44:51 net device setup: enabled
2025/06/05 14:44:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/05 14:44:51 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/05 14:44:51 USB emulation: enabled
2025/06/05 14:44:51 hci packet injection: enabled
2025/06/05 14:44:51 wifi device emulation: enabled
2025/06/05 14:44:51 802.15.4 emulation: enabled
2025/06/05 14:44:51 fetching corpus: 0, signal 0/0 (executing program)
2025/06/05 14:44:52 starting 8 fuzzer processes
14:44:52 executing program 0:
semctl$SETVAL(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0x2)
ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4)
semctl$GETZCNT(0x0, 0x2, 0xf, &(0x7f0000000040)=""/12)
semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x2, 0x14, &(0x7f0000000080)=""/17)
semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f00000000c0)=""/49)
semctl$SETVAL(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)=0x84)
semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000140)=""/4096)
semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001140)=""/112)
ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f00000011c0)=0xfffffff9)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000001200))
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000001240))
r0 = semget$private(0x0, 0x0, 0x534)
semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000001280)=""/174)
ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000001340)=0x3)
semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0)
r1 = semget(0x3, 0x1, 0x301)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000001380)=[0x5, 0x5, 0x4, 0x9, 0x60, 0x1])
r2 = syz_open_dev$sg(&(0x7f00000013c0), 0x3436, 0x20002)
ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000001400))
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000001440)=[0x1, 0x2, 0xfe00, 0xe771])

14:44:52 executing program 1:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x8000, 0x68)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x110802, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x102100, 0x110)
ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381)
ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381)
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000140))
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000180))
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000200)={{0x1, 0x2, 0x1, 0x3, 0x800}, 0x3, 0x200})
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000280))
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/i2c_algo_bit', 0x22000, 0x10)
getpeername$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r4 = pidfd_getfd(r2, r1, 0x0)
ioctl$SCSI_IOCTL_SYNC(r4, 0x4)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x14c, 0x0, 0xbea5d832a8d61120, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3e534f25}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffa0f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x1c, 0x3, "7580f937c0dc9fec43b200c44af041c593fa89d13441980f"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "881e0586c275e2cd1e88d647f883c996acbc093f7208689e03ff6fc14a5b142f952d8a"}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x99cf}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa056}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000000)
r5 = syz_open_dev$sg(&(0x7f00000005c0), 0x8cb, 0x101080)
ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f0000000600))

14:44:52 executing program 2:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x2, 0x4}})
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000080)={{0x0, 0x1, 0x7ff, 0x2, 0x1}, 0xadc0})
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb66}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1fe00000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x440c0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000240))
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x134, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x71aa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6fd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffffffa, @private1, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40}, 0x4c000)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000500)={{0x2, 0x1, 0x1, 0x1, 0xfe2}, 0x8a24, 0x700})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x41, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x402, 0x0)
ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6)
socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000600)={0x3, 0x3, 0x100, 0x2, 0x1f})
socket$inet6_icmp(0xa, 0x2, 0x3a)
socketpair(0x1e, 0x6, 0x869, &(0x7f0000000640)={<r4=>0xffffffffffffffff})
sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x170, r1, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "9521f2753f3664cd2efc807da654da7dd994c2b295764a9b8dcadc2912b2"}}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffcf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)

14:44:52 executing program 3:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x16380, 0x0)
process_madvise(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="bd141da92a8214a4fbe9f64b303bd49b40b8371d20e8b909558ca56261aaec0e37", 0x21}, {&(0x7f0000000080)="4f8307fc645a985b83545f8e5ae9d28d868fc74ddd9bbadadaee842d6e267346b70e5cbfc1a762e395fc74697291c97b57bbb617e38c7965332068074601f07f7581e909a803bd92dae8f71c4e7aba9d291586563d852d7238412641577cd4ec2a48df281ca2dc3947369a55313955bc177bc507f24e081de90d9afd0fdf25a9dd65d7dd48a2a55bec26859e8079cecdb0f5d83aafcff513fb79158d24ae42c19a98acf5f0b212c4bf78ba038725f15b8f51dfd26907c7b86eeb5e980cc2a55d83", 0xc1}], 0x2, 0x14, 0x0)
clone3(&(0x7f00000006c0)={0x800, &(0x7f0000000440)=<r1=>0xffffffffffffffff, &(0x7f0000000480)=<r2=>0x0, &(0x7f00000004c0), {0x9}, &(0x7f0000000500)=""/175, 0xaf, &(0x7f00000005c0)=""/174, &(0x7f0000000680)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58)
r3 = getpid()
r4 = clone3(&(0x7f0000000a00)={0x200000, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=<r5=>0x0, {0xd}, &(0x7f0000000800)=""/235, 0xeb, &(0x7f0000000900)=""/170, &(0x7f00000009c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58)
clone3(&(0x7f0000000ac0)={0x288000, &(0x7f00000001c0)=<r6=>0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x30}, &(0x7f0000000280)=""/241, 0xf1, &(0x7f0000000380)=""/153, &(0x7f0000000a80)=[r2, 0x0, r3, 0x0, r4, 0x0], 0x6}, 0x58)
mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10, 0x10, 0xffffffffffffffff, 0x6)
clone3(&(0x7f0000000e00)={0x20000000, &(0x7f0000000b40), &(0x7f0000000b80)=<r7=>0x0, &(0x7f0000000bc0), {0x2a}, &(0x7f0000000c00)=""/140, 0x8c, &(0x7f0000000cc0)=""/228, &(0x7f0000000dc0)=[r5], 0x1}, 0x58)
ptrace$poke(0x4, r7, &(0x7f0000000e80), 0x10000)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x118, r8, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b1e}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6cc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a59}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8d2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100020}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x1}, 0x4042082)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f0000001440)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001140)={0x290, r8, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3c41}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffce95}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c1b}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x779f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4000000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xab}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf3c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x40, @mcast2, 0x8001}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80000001, @empty, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffffa, @mcast2, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1000, @local, 0x3ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x571}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x801}, 0x20000801)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000001480)={{0x9e, 0x800}, {0x7, 0x5}, 0x7})
process_mrelease(r6, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000014c0))
r10 = openat$full(0xffffffffffffff9c, &(0x7f0000001580), 0x410040, 0x0)
ioctl$LOOP_SET_FD(r10, 0x4c00, r1)
syz_genetlink_get_family_id$devlink(&(0x7f00000015c0), r10)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001640)={0x278, r8, 0x501, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @remote, 0x3f}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x48000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdc6c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfeb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9541f36}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x124}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x626}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffe0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4}, 0x8844)

14:44:52 executing program 4:
semctl$GETZCNT(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=""/4096)
r0 = getpid()
r1 = semget$private(0x0, 0x0, 0x251)
semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000001000)=0x7)
r2 = semget(0x3, 0x3, 0x32)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000001040)=[0x3ff, 0x4c8, 0x9, 0x3ff])
semctl$IPC_RMID(r2, 0x0, 0x0)
r3 = pidfd_open(r0, 0x0)
semctl$SEM_INFO(r1, 0x2, 0x13, &(0x7f0000001080)=""/133)
semctl$IPC_RMID(r2, 0x0, 0x0)
semctl$IPC_INFO(r2, 0x1, 0x3, &(0x7f0000001140)=""/4096)
r4 = pidfd_getfd(r3, r3, 0x0)
ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000002140))
r5 = semget(0x0, 0x1, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000002180)=[0x2ed6, 0x5398, 0xfff, 0x20c])
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x20, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}}, 0x1)
waitid$P_PIDFD(0x3, r4, &(0x7f00000022c0), 0x1, &(0x7f0000002340))
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000002400)=""/159)

14:44:52 executing program 5:
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x9, 0x2, 0xf7b5})
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2800, 0x0)
ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x20, 0x2, 0x80000000})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x42640)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nf_conntrack_irc', 0x104000, 0x30)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000001c0))
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000200))
ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000240)={0x5})
r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000700))
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x4002, 0x0)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000780))
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/module/eeprom_93cx6', 0x402000, 0x2)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r1)
sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x80, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000050}, 0x20004081)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/devices/virtual', 0x1, 0xc3)
ioctl$PTP_SYS_OFFSET_EXTENDED(r5, 0xc4c03d09, &(0x7f0000000a40)={0xc})
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000f00), 0x8800, 0x0)
ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, &(0x7f0000000f40)={0xd})
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000001500)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001300)={0x1a8, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x30, 0x3, "01cb301dfaf0b2e784ba311f678ab603136425b3eb16b64a9577cef38d3207db9a0f0c695dd718cb11470b80"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x873}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x208e2288}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d78}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x66d}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x48080}, 0x40000)

[  130.242811] audit: type=1400 audit(1749134692.787:7): avc:  denied  { execmem } for  pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
14:44:52 executing program 6:
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0x54, 0x8})
ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x8000, 0x0, 0x4})
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x1, 0x0, 0x401})
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000180)={0x3, 0xd})
ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000001c0)={{0x0, 0x7fffffff}, {0xcf5, 0xfffffc01}, 0xc9a5dd0, 0x1})
ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000200)={0x2, 0xb})
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000240)={{0x1f, 0x3ff}, {0x10000, 0x59}, 0x3ff, 0x1})
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0xe943, 0x0)
ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000002c0)={0x3, 0x8})
ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000300))
ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000380)={'\x00', 0x3f, 0x0, 0x5c})
ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000400)={'\x00', 0x8, 0x3, 0xfffff000})
ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1)
r2 = syz_open_dev$loop(&(0x7f0000000480), 0x6f54, 0x10000)
ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x1000)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000004c0)={{0x8, 0xfff}, {0x0, 0xfffffffe}, 0x9, 0x1})
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0x204541, 0x0)
ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000540)={'\x00', 0x9, 0x3, 0xfffffa86})
ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000600)={'\x00', 0x80000000, 0x1, 0x3})

14:44:52 executing program 7:
semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=""/4096)
r0 = semget(0x2, 0x0, 0x1c0)
semctl$SEM_INFO(r0, 0x102073acfa6f7d8f, 0x13, &(0x7f0000001000)=""/40)
r1 = semget$private(0x0, 0x5, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/virtio_pci_modern_dev', 0x20000, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r2)
semtimedop(r0, &(0x7f00000010c0)=[{0x3, 0x60a, 0x1000}, {0x3, 0x600}], 0x2, &(0x7f0000001100)={0x77359400})
semtimedop(0xffffffffffffffff, &(0x7f0000001140)=[{0x2, 0x8, 0x800}, {0x2, 0x9, 0x800}, {0x1, 0xfe01, 0x1000}, {0x4, 0x3, 0x2000}, {0x0, 0x6, 0x1000}], 0x5, &(0x7f0000001180))
r3 = semget$private(0x0, 0x2, 0x682)
semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000011c0)=""/137)
semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000001280)=""/60)
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x527b0c1d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb1e}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x21}, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001400), 0x200100, 0x0)
socketpair(0x21, 0x80006, 0x6, &(0x7f0000001440)={<r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000014c0), r2)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000015c0)={&(0x7f0000001480), 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x68, r5, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004038}, 0x4)
r6 = semget$private(0x0, 0x2, 0x340)
semctl$SEM_STAT_ANY(r6, 0x3, 0x14, &(0x7f0000001600)=""/203)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001700), 0x101002, 0x0)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000001740)=""/119)

[  131.606920] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  131.608508] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  131.610064] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  131.623820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  131.626007] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  131.665668] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.672426] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.675183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.676490] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.678571] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.683063] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.685791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.688896] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.691905] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.702733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.734946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  131.751946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  131.756912] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  131.763882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  131.765088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  131.766277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  131.771026] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  131.782587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  131.796421] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  131.802758] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  131.817712] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  131.825552] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  131.833112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  131.840521] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  131.843796] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  131.849783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  131.850518] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  131.865401] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  131.866044] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  131.880561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  131.883620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  131.888204] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  131.892024] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  131.894526] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  131.901829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  133.688735] Bluetooth: hci0: command tx timeout
[  133.753509] Bluetooth: hci1: command tx timeout
[  133.753596] Bluetooth: hci2: command tx timeout
[  133.816387] Bluetooth: hci3: command tx timeout
[  133.881446] Bluetooth: hci4: command tx timeout
[  133.944466] Bluetooth: hci6: command tx timeout
[  133.944542] Bluetooth: hci5: command tx timeout
[  134.009382] Bluetooth: hci7: command tx timeout
[  135.737512] Bluetooth: hci0: command tx timeout
[  135.800514] Bluetooth: hci2: command tx timeout
[  135.801895] Bluetooth: hci1: command tx timeout
[  135.865389] Bluetooth: hci3: command tx timeout
[  135.928400] Bluetooth: hci4: command tx timeout
[  135.992488] Bluetooth: hci5: command tx timeout
[  135.992707] Bluetooth: hci6: command tx timeout
[  136.057711] Bluetooth: hci7: command tx timeout
[  137.786420] Bluetooth: hci0: command tx timeout
[  137.849332] Bluetooth: hci1: command tx timeout
[  137.849839] Bluetooth: hci2: command tx timeout
[  137.913423] Bluetooth: hci3: command tx timeout
[  137.978334] Bluetooth: hci4: command tx timeout
[  138.040787] Bluetooth: hci5: command tx timeout
[  138.042319] Bluetooth: hci6: command tx timeout
[  138.104477] Bluetooth: hci7: command tx timeout
[  139.832660] Bluetooth: hci0: command tx timeout
[  139.897132] Bluetooth: hci2: command tx timeout
[  139.897676] Bluetooth: hci1: command tx timeout
[  139.960611] Bluetooth: hci3: command tx timeout
[  140.026197] Bluetooth: hci4: command tx timeout
[  140.088755] Bluetooth: hci6: command tx timeout
[  140.089460] Bluetooth: hci5: command tx timeout
[  140.153327] Bluetooth: hci7: command tx timeout
[  194.461390] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  194.463135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  194.464443] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  194.467650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  194.469827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.568154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  194.569886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  194.572635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  194.576188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  194.578942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  194.649901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  194.659143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  194.665617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  194.669707] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  194.672735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.686872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  194.694658] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  194.701835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  194.718498] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  194.723641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  194.729699] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  194.733468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  194.752504] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  194.755269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.757667] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  194.829321] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  194.835684] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  194.838601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  194.876019] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  194.894403] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  195.036144] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  195.036587] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  195.051958] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  195.052210] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  195.061777] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  195.076591] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  195.136823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  195.148761] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  195.148950] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  195.216331] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  196.537487] Bluetooth: hci0: command tx timeout
[  196.601581] Bluetooth: hci1: command tx timeout
[  196.793661] Bluetooth: hci2: command tx timeout
[  196.857448] Bluetooth: hci3: command tx timeout
[  196.921724] Bluetooth: hci4: command tx timeout
[  196.984607] Bluetooth: hci5: command tx timeout
[  197.304436] Bluetooth: hci6: command tx timeout
[  197.305184] Bluetooth: hci7: command tx timeout
[  198.584433] Bluetooth: hci0: command tx timeout
[  198.649382] Bluetooth: hci1: command tx timeout
[  198.840393] Bluetooth: hci2: command tx timeout
[  198.904487] Bluetooth: hci3: command tx timeout
[  198.968425] Bluetooth: hci4: command tx timeout
[  199.032485] Bluetooth: hci5: command tx timeout
[  199.353063] Bluetooth: hci6: command tx timeout
[  199.353698] Bluetooth: hci7: command tx timeout
[  200.632492] Bluetooth: hci0: command tx timeout
[  200.696507] Bluetooth: hci1: command tx timeout
[  200.889327] Bluetooth: hci2: command tx timeout
[  200.952794] Bluetooth: hci3: command tx timeout
[  201.016412] Bluetooth: hci4: command tx timeout
[  201.080396] Bluetooth: hci5: command tx timeout
[  201.400574] Bluetooth: hci6: command tx timeout
[  201.401144] Bluetooth: hci7: command tx timeout
[  202.680372] Bluetooth: hci0: command tx timeout
[  202.744665] Bluetooth: hci1: command tx timeout
[  202.936818] Bluetooth: hci2: command tx timeout
[  203.001431] Bluetooth: hci3: command tx timeout
[  203.064431] Bluetooth: hci4: command tx timeout
[  203.128397] Bluetooth: hci5: command tx timeout
[  203.448479] Bluetooth: hci7: command tx timeout
[  203.449044] Bluetooth: hci6: command tx timeout
[  256.975249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  256.976901] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  256.981618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  256.987861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  256.991754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  257.091629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  257.093458] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  257.094806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  257.104661] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  257.106567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  257.108068] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  257.118614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  257.120596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  257.123764] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  257.136592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  257.238983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  257.249984] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  257.253785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  257.257131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  257.259622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  257.263798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  257.266806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  257.269567] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  257.271821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  257.283654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  257.306618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  257.358651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  257.362808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  257.370501] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  257.372217] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  257.373430] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  257.375620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  257.381459] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  257.392515] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  257.398660] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  257.400103] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  257.404692] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  257.414652] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  257.488440] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  257.532932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  259.065679] Bluetooth: hci0: command tx timeout
[  259.193263] Bluetooth: hci1: command tx timeout
[  259.193856] Bluetooth: hci2: command tx timeout
[  259.320689] Bluetooth: hci4: command tx timeout
[  259.384495] Bluetooth: hci3: command tx timeout
[  259.449381] Bluetooth: hci5: command tx timeout
[  259.517012] Bluetooth: hci7: command tx timeout
[  259.644897] Bluetooth: hci6: command tx timeout
[  261.112406] Bluetooth: hci0: command tx timeout
[  261.240420] Bluetooth: hci2: command tx timeout
[  261.240957] Bluetooth: hci1: command tx timeout
[  261.368395] Bluetooth: hci4: command tx timeout
[  261.432392] Bluetooth: hci3: command tx timeout
[  261.497498] Bluetooth: hci5: command tx timeout
[  261.561723] Bluetooth: hci7: command tx timeout
[  261.688411] Bluetooth: hci6: command tx timeout
[  263.160433] Bluetooth: hci0: command tx timeout
[  263.288513] Bluetooth: hci1: command tx timeout
[  263.289500] Bluetooth: hci2: command tx timeout
[  263.416394] Bluetooth: hci4: command tx timeout
[  263.480969] Bluetooth: hci3: command tx timeout
[  263.544590] Bluetooth: hci5: command tx timeout
[  263.608403] Bluetooth: hci7: command tx timeout
[  263.736434] Bluetooth: hci6: command tx timeout
[  265.208688] Bluetooth: hci0: command tx timeout
[  265.336527] Bluetooth: hci2: command tx timeout
[  265.337056] Bluetooth: hci1: command tx timeout
[  265.464402] Bluetooth: hci4: command tx timeout
[  265.528548] Bluetooth: hci3: command tx timeout
[  265.592525] Bluetooth: hci5: command tx timeout
[  265.656646] Bluetooth: hci7: command tx timeout
[  265.785263] Bluetooth: hci6: command tx timeout
[  319.831928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  319.833230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  319.835634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  319.840758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  319.842215] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  319.848171] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  319.851056] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  319.854189] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  319.858398] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  319.860875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  319.948526] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  319.957417] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  319.966445] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  319.974600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  319.977026] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  320.023399] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  320.025774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  320.030076] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  320.037591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  320.041842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  320.049554] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  320.052672] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  320.054743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  320.083608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  320.091934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  320.095077] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  320.102884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  320.105542] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  320.107161] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  320.120580] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  320.124854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  320.130891] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  320.132532] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  320.132725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  320.139045] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  320.187867] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  320.209130] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  320.215471] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  320.216786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  320.221588] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  321.912549] Bluetooth: hci0: command tx timeout
[  321.912656] Bluetooth: hci1: command tx timeout
[  322.041368] Bluetooth: hci2: command tx timeout
[  322.106728] Bluetooth: hci3: command tx timeout
[  322.168415] Bluetooth: hci5: command tx timeout
[  322.296403] Bluetooth: hci4: command tx timeout
[  322.375324] Bluetooth: hci7: command tx timeout
[  322.375933] Bluetooth: hci6: command tx timeout
[  323.960386] Bluetooth: hci0: command tx timeout
[  323.961400] Bluetooth: hci1: command tx timeout
[  324.090585] Bluetooth: hci2: command tx timeout
[  324.152574] Bluetooth: hci3: command tx timeout
[  324.216405] Bluetooth: hci5: command tx timeout
[  324.344359] Bluetooth: hci4: command tx timeout
[  324.408393] Bluetooth: hci6: command tx timeout
[  324.408421] Bluetooth: hci7: command tx timeout
[  326.008765] Bluetooth: hci1: command tx timeout
[  326.008885] Bluetooth: hci0: command tx timeout
[  326.137498] Bluetooth: hci2: command tx timeout
[  326.201947] Bluetooth: hci3: command tx timeout
[  326.264429] Bluetooth: hci5: command tx timeout
[  326.392549] Bluetooth: hci4: command tx timeout
[  326.456711] Bluetooth: hci7: command tx timeout
[  326.457203] Bluetooth: hci6: command tx timeout
[  328.056430] Bluetooth: hci0: command tx timeout
[  328.057399] Bluetooth: hci1: command tx timeout
[  328.186328] Bluetooth: hci2: command tx timeout
[  328.250419] Bluetooth: hci3: command tx timeout
[  328.312635] Bluetooth: hci5: command tx timeout
[  328.440522] Bluetooth: hci4: command tx timeout
[  328.504533] Bluetooth: hci7: command tx timeout
[  328.504654] Bluetooth: hci6: command tx timeout
[  382.679528] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  382.682492] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  382.684109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  382.686568] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  382.687697] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  382.689997] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  382.694112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  382.697153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  382.701294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  382.709191] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  382.808032] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  382.827186] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  382.830816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  382.870314] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  382.893665] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  382.898015] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  382.902671] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  382.907631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  382.916340] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  382.918208] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  382.979093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  382.984257] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  382.994171] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  383.000063] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  383.015392] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  383.019338] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  383.035931] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  383.041931] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  383.044545] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  383.054665] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  383.055717] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  383.058180] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  383.066442] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  383.080622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  383.096604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  383.103772] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  383.148145] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  383.159625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  383.187094] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  383.192448] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  384.760471] Bluetooth: hci0: command tx timeout
[  384.761612] Bluetooth: hci1: command tx timeout
[  384.953718] Bluetooth: hci2: command tx timeout
[  385.017752] Bluetooth: hci3: command tx timeout
[  385.144404] Bluetooth: hci4: command tx timeout
[  385.145365] Bluetooth: hci5: command tx timeout
[  385.208462] Bluetooth: hci6: command tx timeout
[  385.272441] Bluetooth: hci7: command tx timeout
[  386.810342] Bluetooth: hci0: command tx timeout
[  386.810899] Bluetooth: hci1: command tx timeout
[  387.001653] Bluetooth: hci2: command tx timeout
[  387.065616] Bluetooth: hci3: command tx timeout
[  387.193747] Bluetooth: hci5: command tx timeout
[  387.194530] Bluetooth: hci4: command tx timeout
[  387.257324] Bluetooth: hci6: command tx timeout
[  387.321164] Bluetooth: hci7: command tx timeout
[  388.856476] Bluetooth: hci1: command tx timeout
[  388.857025] Bluetooth: hci0: command tx timeout
[  389.048714] Bluetooth: hci2: command tx timeout
[  389.113079] Bluetooth: hci3: command tx timeout
[  389.242343] Bluetooth: hci5: command tx timeout
[  389.242896] Bluetooth: hci4: command tx timeout
[  389.304578] Bluetooth: hci6: command tx timeout
[  389.369627] Bluetooth: hci7: command tx timeout
[  390.904773] Bluetooth: hci0: command tx timeout
[  390.905611] Bluetooth: hci1: command tx timeout
[  391.097423] Bluetooth: hci2: command tx timeout
[  391.160362] Bluetooth: hci3: command tx timeout
[  391.288602] Bluetooth: hci5: command tx timeout
[  391.289194] Bluetooth: hci4: command tx timeout
[  391.352386] Bluetooth: hci6: command tx timeout
[  391.417489] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
14:50:02  Registers:
info registers vcpu 0
RAX=fffff9400002cdf6 RBX=fffff9400002cdf7 RCX=ffffffff81a1bfeb RDX=0000000000000001
RSI=0000000000000004 RDI=ffffea0000166fb0 RBP=fffff9400002cdf6 RSP=ffff888035387ab0
R8 =0000000000000001 R9 =fffff9400002cdf6 R10=ffffea0000166fb3 R11=0000000000000001
R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=ffffea0000166f98
RIP=ffffffff81aee6bb RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe4000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3e4f1a7090 CR3=0000000023592000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000000 RCX=ffff88802cc777f4 RDX=0000000000000001
RSI=ffffffff85c1cbc0 RDI=ffff8880346d8a58 RBP=ffffffff85c1cbc0 RSP=ffff88802cc777b8
R8 =0000000000000001 R9 =ffff88802cc778e0 R10=000000000003b6bd R11=000000000003f1d3
R12=ffff8880346d8a58 R13=ffff88802cc777f4 R14=0000000000000001 R15=0000000000000001
RIP=ffffffff8151410e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0708ac0008 CR3=0000000035726000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000