Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:48819' (ECDSA) to the list of known hosts.
2025/06/08 01:45:22 fuzzer started
2025/06/08 01:45:23 dialing manager at localhost:40003
syzkaller login: [   86.686058] cgroup: Unknown subsys name 'net'
[   86.842199] cgroup: Unknown subsys name 'cpuset'
[   86.881171] cgroup: Unknown subsys name 'rlimit'
2025/06/08 01:45:40 syscalls: 218
2025/06/08 01:45:40 code coverage: enabled
2025/06/08 01:45:40 comparison tracing: enabled
2025/06/08 01:45:40 extra coverage: enabled
2025/06/08 01:45:40 setuid sandbox: enabled
2025/06/08 01:45:40 namespace sandbox: enabled
2025/06/08 01:45:40 Android sandbox: enabled
2025/06/08 01:45:40 fault injection: enabled
2025/06/08 01:45:40 leak checking: enabled
2025/06/08 01:45:40 net packet injection: enabled
2025/06/08 01:45:40 net device setup: enabled
2025/06/08 01:45:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/08 01:45:40 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/08 01:45:40 USB emulation: enabled
2025/06/08 01:45:40 hci packet injection: enabled
2025/06/08 01:45:40 wifi device emulation: enabled
2025/06/08 01:45:40 802.15.4 emulation: enabled
2025/06/08 01:45:40 fetching corpus: 0, signal 0/0 (executing program)
2025/06/08 01:45:41 starting 8 fuzzer processes
01:45:41 executing program 0:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', r0, 0x29, 0x1, 0xff, 0x6, 0xc, @mcast1, @dev={0xfe, 0x80, '\x00', 0x30}, 0x20, 0x8, 0x6, 0x2}})
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
fork()
ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000380)={0x10})
io_uring_setup(0x53b7, &(0x7f0000000840)={0x0, 0x8d5f, 0x8, 0x3, 0x8})
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r2)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000900)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x1c, 0x0, "e5f8341e4e28f00dcb1db01e8568daab8a74ddae50ddc1f2a70290ccee3fc2b6685fddb80355c65b846f3365a31032c111c8d7940202a0d130a48248d24be23a9e37681b65c16a45ada08b95a134d329"}, 0xd8)
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000a00)=0x4)
r3 = openat2(0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x8, 0x3}, 0x18)
syz_genetlink_get_family_id$team(&(0x7f0000000a40), r3)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), r2)
sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x4)

01:45:41 executing program 1:
r0 = syz_io_uring_setup(0x41ce, &(0x7f0000000000)={0x0, 0x33c2, 0x0, 0x3, 0x1f}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
r2 = io_uring_setup(0x5626, &(0x7f0000000100)={0x0, 0xcd75, 0x10, 0x1, 0x14f, 0x0, r0})
io_uring_setup(0x129e, &(0x7f0000000180)={0x0, 0xd7a3, 0x20, 0x2, 0x28f, 0x0, r2})
ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000200)={0x2, 0x200, 0x9f5})
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x4010, r3, 0x8000000)
r4 = syz_io_uring_setup(0xec6, &(0x7f0000000280)={0x0, 0x5f71, 0x0, 0x0, 0x1f1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)=<r5=>0x0)
r6 = syz_open_dev$mouse(&(0x7f0000000380), 0x3, 0x10f080)
io_uring_register$IORING_REGISTER_PROBE(r6, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x18)
ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f00000004c0)={{0x2, 0x100, 0x7f, 0x4, 0x7fff, 0x1}, 0x377, [0x2, 0x1, 0x3, 0x7fff, 0x7fffffff, 0xe, 0x7, 0x2, 0xfffffff8, 0x9a89, 0x2, 0x6, 0x83, 0x8000, 0x1d800000, 0xe26, 0x1f, 0x10000, 0x9, 0x56, 0x6, 0x6, 0xfffffff7, 0x3, 0x81, 0xff, 0x6, 0xcc72, 0x7, 0x1ff, 0x40000, 0x1000, 0x9, 0x5, 0x20, 0x1ff, 0x5, 0x568c5d1b, 0x1000, 0x8, 0x4, 0xd4, 0xffffffff, 0x1, 0x6f, 0x14b152dd, 0x7, 0x2, 0x450fb07b, 0x5, 0xfffff801, 0x20, 0x1f, 0x800, 0x1, 0x5, 0x8, 0x2, 0x9, 0x2, 0x40, 0x4, 0x0, 0x7, 0x5, 0xa33f, 0xfffff800, 0x3, 0x1, 0x0, 0x3, 0x3, 0x80, 0x8, 0x362b68b5, 0x3, 0x6, 0x1, 0x10000, 0xb60, 0x6, 0xc3, 0xa2e, 0x3f, 0x5, 0xff, 0x3, 0x9, 0x7ff, 0x1, 0x10001, 0xfffffffb, 0x7, 0x200, 0x101, 0x6, 0x8000, 0x401, 0x3d, 0x7860, 0x8, 0x7fffffff, 0x200, 0x80, 0x7ff, 0x6, 0x6, 0x8000, 0x800, 0x3ff, 0x200, 0x1, 0x8, 0x0, 0x80, 0x1ff, 0x10001, 0x7, 0x400, 0x2, 0x2, 0x10001, 0x4, 0xfffff6b5, 0xfff, 0x8, 0x6, 0x8, 0x8, 0x0, 0x8000, 0x6, 0x4, 0x0, 0x8, 0x1000, 0xfffeffff, 0x9, 0x10001, 0x2, 0x7, 0xf35, 0x9, 0x3ff, 0x0, 0x6, 0x3, 0xd72, 0x8, 0x9f, 0x814, 0x2, 0x5, 0xb4e, 0x4, 0x6, 0xffffffff, 0x0, 0x5, 0x0, 0x1, 0x5, 0x100, 0x10000, 0x0, 0x7fffffff, 0xfffffff9, 0x2, 0x3cb6, 0xff, 0x3, 0x6, 0x3, 0x401, 0x736, 0x7, 0x3, 0xffffff01, 0xffffffff, 0x6, 0x200, 0x7, 0x80000000, 0x7, 0x2, 0x40, 0x9, 0x3, 0x4, 0x0, 0x6, 0xffff3879, 0x4, 0xfffffffb, 0x8, 0x3, 0x7, 0x0, 0x2, 0x80000001, 0x17c, 0x8, 0x115a, 0x4, 0x929d, 0x5, 0x7fffffff, 0x1f, 0x423, 0x1, 0x4, 0x4, 0x200, 0x800, 0x100, 0x9, 0x1, 0x0, 0xf815, 0x3, 0x4, 0x3f, 0x81, 0xdd3, 0x80, 0x7ff, 0x0, 0xffff0001, 0x2, 0x6, 0x0, 0xfffffffd, 0x3f, 0x80000001, 0x2db, 0x10000, 0x7fff, 0x4d5, 0x200000, 0x0, 0x5323, 0x4, 0x40000000, 0x7, 0x81, 0x2, 0x4, 0x8, 0x7, 0x0, 0xffffffff, 0x100, 0x4, 0x7, 0xc2d, 0xffffffff, 0xfff, 0x59, 0x3, 0x3, 0x1f, 0x1, 0x7, 0xffff, 0x2, 0x10001, 0x1, 0xd7a, 0x8, 0x8, 0xd8, 0x8, 0x3, 0x600, 0x314b, 0xc21, 0x1, 0xff, 0xff, 0x10001, 0xff, 0x5, 0x0, 0x4, 0x7f, 0x10001, 0x2f7, 0x5, 0x8, 0x5, 0x1, 0x2, 0x1, 0x2, 0x9, 0x4720, 0x5, 0xb3, 0x7, 0x401, 0x9, 0x6, 0x10001, 0x6e65, 0x7, 0xfff, 0x0, 0x0, 0x3, 0x4, 0xfffffff9, 0xac, 0x1, 0x4, 0x3ff, 0xffff, 0x2, 0x5, 0x4, 0x1, 0x101, 0xd795, 0x2, 0xffffffff, 0x10001, 0x9, 0x0, 0xfffffff9, 0x80000001, 0x0, 0x9, 0x401, 0x77b7, 0xf8, 0xfffffbff, 0x5, 0x480000, 0x4, 0x2, 0x0, 0xff, 0x7, 0x8, 0x1f, 0x3, 0x10000, 0x7f, 0xd3ed, 0xfc5b, 0x200, 0x9f44, 0x7fff, 0x0, 0x10001, 0x8, 0xff, 0x7fff, 0x6, 0x8, 0x0, 0x6, 0x5, 0xaeae, 0x9, 0x3, 0x100, 0xd4, 0x7, 0x1, 0x7ff, 0x3ff, 0x9, 0x1, 0x8, 0x0, 0x8, 0xffffff99, 0x1f, 0x8, 0xd9c, 0xd3f, 0x0, 0xad9e, 0xa6, 0x2, 0xec08, 0x2, 0x80000001, 0x7, 0x1, 0x2, 0x1000, 0x1ff, 0x40, 0x0, 0x5, 0x4, 0x4, 0x4, 0x1, 0x4, 0x101, 0xa6c6, 0x7fffffff, 0x0, 0xffff6c88, 0xffffff7f, 0x401, 0x37, 0x6, 0xfb, 0x8001, 0x80000000, 0x7ff, 0x9, 0x8, 0x1, 0x3, 0x32, 0x9, 0x10000, 0x10000, 0x1000, 0x7f, 0x6, 0xfff, 0x8, 0x200, 0x4, 0x0, 0x2, 0x1, 0x1ff, 0x6, 0x2800000, 0x1ff, 0x2, 0x0, 0x9, 0x800, 0xed7e, 0xcbf2, 0x400000, 0x0, 0x8000, 0xffff, 0x1, 0x6, 0x326, 0x1, 0xfffffffc, 0x1, 0x9, 0x80, 0x52, 0x3, 0x602, 0x4, 0x1, 0x4c5, 0x8, 0x9, 0x7e9, 0x0, 0x1, 0x5, 0x9, 0x9, 0x40, 0x7, 0x5ea7b882, 0x80000000, 0x7, 0x37, 0x20, 0x9, 0x8, 0x8000, 0x49, 0x3, 0x5, 0x3f, 0x200, 0x7, 0x101, 0x6, 0xffff0001, 0x97e, 0xb1c, 0x19c, 0x946c, 0x1, 0x0, 0x8d, 0x8000, 0x5, 0xffffffc1, 0x80, 0x6, 0x658, 0x3, 0x1, 0x9, 0x9, 0x2, 0x1, 0x1ff, 0x2, 0x5, 0x43, 0x1ff, 0x0, 0x100, 0x85, 0x6, 0x5, 0x4, 0x9, 0x2, 0x4, 0x85f, 0x25, 0x9, 0x2, 0xe0d, 0x9, 0x4, 0x35659ce2, 0x5, 0x2, 0x20c2, 0x0, 0x80, 0x80, 0xfffffff7, 0x2, 0x8, 0x7f, 0x6, 0x1f, 0x3, 0x1, 0x0, 0x81, 0x3f, 0x400, 0x2, 0x8, 0x6, 0x2, 0x9, 0x47, 0xe4, 0x3, 0x8, 0x80000001, 0x1ff, 0x6, 0x4, 0xfffffffd, 0x400, 0x81, 0x1f, 0x200, 0x80000001, 0xf5bc, 0x5, 0x8, 0x1ff, 0x2, 0x2, 0xfffffffc, 0x100, 0x4, 0x7a, 0x4, 0x9, 0x401, 0x3f, 0x8, 0x1000, 0x7, 0x8, 0x1, 0x81, 0x3ff, 0xa, 0x9, 0x3, 0xfffff001, 0x0, 0x6, 0x401, 0x1, 0x3, 0xff, 0x1, 0x7fffffff, 0xfffffffc, 0x9, 0x0, 0x9, 0x7f, 0x200, 0x8, 0x9, 0x8, 0x1, 0x7f, 0x2, 0x1, 0x3, 0x800, 0xa2, 0x3, 0x5, 0xfffff000, 0x8, 0x7, 0x3, 0x1, 0x9b, 0x8, 0xff, 0x8, 0xc7f, 0x8001, 0xffffffff, 0x4, 0xd5c, 0x7fffffff, 0x8000, 0x8000000, 0x2, 0x4, 0x4a, 0xa8b, 0x0, 0x9, 0x3, 0x2, 0x8, 0x0, 0xfffffff8, 0x7fffffff, 0x3ff, 0x800, 0x3, 0x3, 0x0, 0x1000, 0xda, 0x9, 0x0, 0x4ec9, 0x5, 0xffffffc1, 0x0, 0x4, 0x200, 0xe9, 0xfffffffc, 0x231, 0x4, 0x88, 0x847, 0x6f5, 0x7, 0x3, 0x7fff, 0x1, 0x3, 0xe10d, 0x2, 0x0, 0x0, 0x3ff, 0x9, 0x9, 0x2, 0x40, 0x3, 0x8, 0x7, 0x2, 0x2, 0x7, 0x8, 0x1f, 0x7, 0x20, 0x7, 0x5b, 0x3, 0x4, 0x8000, 0x9, 0xffff, 0x0, 0x1, 0x1, 0x5, 0xb7, 0x7, 0x3ff, 0x6, 0xffff, 0x100, 0x3, 0x8, 0x1, 0x9, 0x6, 0xfffffffe, 0x80000001, 0x8000, 0x1, 0x80, 0x8, 0x7, 0x0, 0xdd, 0x0, 0x7, 0x9cb, 0x8001, 0x36, 0x8b, 0x0, 0xeb06, 0x7, 0x5, 0xe97f, 0x1, 0x9, 0x8001, 0x400, 0xfff, 0x5, 0x5f, 0x1ff, 0x76, 0xffffffff, 0x8001, 0x6e, 0x7, 0xbd, 0x4, 0x5, 0x5, 0x7673, 0x8, 0x80, 0x5, 0x1000, 0x5, 0x8001, 0x6ddd, 0x8, 0x8, 0x3f, 0x8, 0x2, 0x2, 0x787f82e6, 0x7b3, 0x9, 0x1, 0x7, 0xfff, 0x40, 0x0, 0x5, 0x3, 0x73e, 0xffffffe3, 0x1, 0x5, 0x8, 0x3, 0x1f, 0x0, 0xf60, 0x4, 0x9, 0x72ee, 0x7fffffff, 0x5, 0x1e, 0x1, 0x0, 0x3f, 0xfffffffc, 0x9, 0x5, 0x101, 0x3, 0xfffffc00, 0x40, 0x5, 0x1, 0x3, 0x9, 0x4, 0x8, 0x81, 0x6, 0x0, 0x81, 0x3, 0x5, 0x2, 0xff, 0xfffffffb, 0xfff, 0x2, 0x7fffffff, 0x3, 0x6a, 0x2, 0x496, 0x5, 0xfff, 0x3, 0x9, 0x1, 0x9dc00000, 0x8, 0x2, 0x1ff, 0xfff, 0xff, 0x8, 0x0, 0x2, 0x80000000, 0x6, 0x7, 0x8, 0x2b2f, 0xffff7ec0, 0x9, 0x100, 0x8, 0x1, 0x80000000, 0x8, 0x5, 0x1, 0xd68, 0x10000000, 0x10001, 0x1000, 0x0, 0x6, 0x1, 0x6, 0x8000, 0xfffffffb, 0x4, 0x875, 0x3, 0x3c51bc2e, 0x1, 0x0, 0x9, 0x0, 0x8, 0x5, 0x0, 0x5e, 0x7, 0xdef9, 0x0, 0x0, 0xfff, 0x1ff, 0x0, 0x10000000, 0x9, 0x8001, 0x7, 0x6, 0x6, 0x1000, 0x9, 0x2, 0xfffffff9, 0xb01, 0x1, 0x80000000, 0x8, 0xffffe87d, 0xfffffffb, 0x8, 0x4, 0x20000000, 0x0, 0xfffffffa, 0x8, 0x100, 0x1, 0xc89, 0x8, 0x1000, 0xcc2, 0x6, 0x20, 0x9, 0xa79, 0x9, 0x6, 0x1ff, 0xf4c6, 0x6, 0x6, 0x5, 0x1f, 0x6, 0x1f, 0x6, 0x2, 0x2, 0x1ff, 0x1, 0x369f, 0x40, 0x7, 0x3, 0x9, 0xfff, 0x1ff, 0x5, 0x0, 0x2, 0x8f, 0x3, 0x20, 0x0, 0xcb4c, 0x10000, 0xfffffffe, 0x401, 0xfffffff7, 0x0, 0x2, 0x2, 0xfc, 0x0, 0x0, 0x8, 0x8001, 0x9, 0x97a2, 0x4, 0x40, 0x9, 0x35ad, 0x5, 0x81, 0x9, 0x7, 0x6a5e, 0x8, 0x80, 0x6, 0x9, 0x408, 0xffffffff, 0xd3b, 0x1, 0x7f, 0x0, 0x9, 0x8, 0x800, 0x0, 0x4, 0xcbb, 0x7, 0x80, 0x0, 0x9, 0x20, 0x1, 0x5e, 0x7ff, 0x2, 0x8, 0x80, 0x5, 0x80000000, 0x8, 0x6, 0x1ff, 0x3, 0x0, 0x80000000, 0x5, 0x0, 0x2, 0x8, 0x3f, 0x74a, 0x6, 0x7ff, 0x1f, 0x4, 0xa2a9, 0x5, 0x5, 0x10000, 0x0, 0x2, 0x8000, 0x4, 0xf8, 0x6, 0x3ff, 0xdf2, 0x7f, 0x7f, 0x800, 0x3]})
ioctl$HIDIOCGNAME(r3, 0x80404806, &(0x7f0000001500))
socketpair(0x1, 0x2, 0x6, &(0x7f0000001540)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bind$netlink(r7, &(0x7f0000001580)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc)
io_uring_register$IORING_REGISTER_PROBE(r6, 0x8, &(0x7f00000015c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x19)
r8 = socket$netlink(0x10, 0x3, 0x12)
syz_io_uring_submit(r1, r5, &(0x7f0000001780)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd=r8, 0x3, &(0x7f00000016c0)="5472be7914e6a74c2426030973eda50c46fa1b9c84811ec4210fdf97304db990aa79629c09c778e4b6d4f2d2f80c8b3d784347b046c27bd51053f88ed618be1b740f97c5482daf8e55f294994e300955f787cbc7a5d995433f05c6a79f454fb31a14cbcb7d2486254467dbacc1983df676b8ae42d64986918d26b43ff816f7c1f5b719a7b48b736bfb0ae74bbf2315491c5d2c5a4c9b79ebe68ee4ed91", 0x9d, 0x0, 0x1}, 0x90)
io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$KDGKBMETA(r6, 0x4b62, &(0x7f00000017c0))
syz_open_dev$tty1(0xc, 0x4, 0x4)

01:45:41 executing program 2:
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6)
ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000080)={0xd})
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x200, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fce}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8b3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcc69}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x39}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44c3aaca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x200}}, 0x4000000)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000680), r0)
r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x80000)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x6)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000780)='\x00', 0x0, r1)
openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8400, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd4, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb0e1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}]}]}, 0xd4}}, 0x40005)
r3 = fsmount(0xffffffffffffffff, 0x0, 0xf0)
ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000a00))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x3c}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b40), r5)
ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000b80), &(0x7f0000000bc0)=0x6)

[  104.832394] audit: type=1400 audit(1749347141.714:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
01:45:41 executing program 3:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x10400)
fstat(r0, &(0x7f0000000040))
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = fsmount(r0, 0x0, 0x80)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x3, 0x2, 0x1})
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x400380, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000140))
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsopen(&(0x7f00000001c0)='bfs\x00', 0x0)
r5 = fsmount(r4, 0x0, 0x3)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r6)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1)
ioctl$HIDIOCGPHYS(r5, 0x80404812, &(0x7f0000000240))
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000280)=0x4)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1fc, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5ee3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x896c, @private1={0xfc, 0x1, '\x00', 0x4}, 0x1}}}}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdd9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x29, 0x3, "34930102178ebea534a83cd96af48d4d4c9bf1eafcd24b42a238d8c0bfd42ad842152d0fea"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f00000005c0)='\x00', &(0x7f0000000600)='./file0\x00', r1)

01:45:41 executing program 4:
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000))
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040))
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x3, @private2, 0x9}}, 0x0, 0x0, 0x4c, 0x0, "dbe52454482b9a2fe221481b52c8404b079df5bc04d7d86f3bbcc9ad650eb1043394071256b1c87d837f8863420fde086f0e16b8f217f7a5f4305b670bd036b1bf000aab807a795ea21498d3e671194a"}, 0xd8)
ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000180)={0xbda, 0x5})
fsopen(&(0x7f00000001c0)='cifs\x00', 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000200), 0x8, 0x452002)
ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000240)={0x9, 0x1f})
r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x6, 0x400)
r2 = fsmount(r1, 0x1, 0x82)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0)
read$snapshot(r3, &(0x7f0000000300)=""/118, 0x76)
r4 = fsopen(&(0x7f0000000380)='ubifs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000003c0)='[@\x00', &(0x7f0000000400)="5e88e18beb5eb5c6f6f3f620731fcf2ed532523fb1142cd05e99b0c0ee6fcc01529f83216a700b1fe7f945dc80d5b4f97c48a334b9937d513b90efa72348c88f091094c4e0a8202b46d88bc71ae3ec4aea4667fa7f50bb39ee352e35b5097d1042d3e5dc656537467c454f44b4186c8f5231e94d399c4b32e52840e1780214ffa9ee974324127ad8b4ea927d230c364953b0e402c9ce5ee86d2a001ebda1fd7f0928c7739273c84b8bfb76328f5821341496fb3fa762f3a4e7f18fa8554bb71e19ff29a789de2130e9d9d9e39e97144ec03ffec345ccadac4d8fd06f93d81eefd6", 0xe1)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000500))
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000540)='cifs\x00', 0x0, r4)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x4a, 0x0, "2769c08cd24cdd5fd230a3025782b285c043ac8d578b432aa25dfd12d382594e30135bae8179b2401b59f17eaf5149f38fb120ae439feed7353a256bd205215277a87e968de8167928763d8c12963138"}, 0xd8)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000006c0)=r2, 0x1)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r2)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4d6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x561}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x959e}]}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46d62361}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x5}, 0x4080)

01:45:41 executing program 5:
r0 = fsmount(0xffffffffffffffff, 0x0, 0x4)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x120, 0x0, 0x300, 0x7ff, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a95bfa6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b0b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe4ed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd68}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfad7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3f}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x78}}, 0x8000)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000380)={0x2, 0x0, 0x36842b53, 0x2, 0x200, 0x2})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c818}, 0x40010)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), r1)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020090}, 0x4000)
r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4)
r5 = openat2(r0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x1e000, 0x10, 0x2}, 0x18)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000007c0)='westwood\x00', 0x9)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xb8, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3f}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20048895}, 0x20000000)
r7 = fsmount(r5, 0x0, 0x74)
sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44880}, 0x80)

01:45:41 executing program 6:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040))
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000080)={0x5, 0x100000000, 0x3, 0x3, 0x8000})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x7, 0x6, 0x9, 0x3f, 0x1f, "7a9026bdd4e7a061d4a88cd33563739c6a6d9f", 0x0, 0x6})
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000100)={0x8, 0xd6, 0x2, 0x55, 0x0, "a6b3b0f1b2442c42f39dae55a2ac77b7224e89", 0x77ebed3, 0x3})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000009, 0x12, 0xffffffffffffffff, 0x8000000)
r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x4, 0x400100)
ioctl$HIDIOCGPHYS(r2, 0x80404812, &(0x7f0000000180))
ioctl$TIOCGICOUNT(r0, 0x545d, 0x0)
ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000001c0))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0xa800, 0x0)
ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000240)=0x2)
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x214, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x268}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x40000000}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4323}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x286}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2f0e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x38e}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x21e}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7b4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x810}, 0x20044000)
r3 = syz_open_dev$hiddev(&(0x7f0000000580), 0x9, 0x40000)
ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f00000005c0)={0x3, 0x1, 0x2})
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x40090c1)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000700)={0x1, 0x2, 0x69, 0xd1a, 0xe3, "3163d54169aa12cabfbce818d49c6a118bcdaf", 0x0, 0x9})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0)

01:45:41 executing program 7:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb79}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc50}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4008804}, 0x805)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4083af5a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x269}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000800}, 0x8018)
fstat(0xffffffffffffffff, &(0x7f0000000340))
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x198, r0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xba, 0x3, "29b7194c5172c9ea186b0ee140388faa8bd24715646baf5992c349322d08c23b1a117823a63c473d4b1011b0d8280de461deb224cd600ff36e3a66bd8ef08381430e3faf3d1dd676faab8e2216cc497449bbdb4b5eeea54231446eb37b39dd8f1abdb6b77ae317fdf8d98549617bcee1a0777bb1dc9d643aeaebf6ebd16652f5ae8781383cdf51037b2b6732f6eba118e407ee7715ae29264460391fecefb30d8fc3f14a5d7e0a555f96ab2e9c231253804310324417"}, @TIPC_NLA_NODE_ID={0x4b, 0x3, "1530231d893ee20ef2554c19193aadd8e77aa7cd536a256bdccb3b55381fffdf9210cc8d72c2869c8701791d4c3a104d865709ce7c570a9cdfb629ff1e9e62b26ed0229923454f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c}]}]}]}, 0x198}}, 0x2000000)
r2 = accept4$bt_l2cap(r1, &(0x7f0000000680), &(0x7f00000006c0)=0xe, 0x800)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x6)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000007c0)={0xf1, 0x7fff, 0x4, 0x41, 0x3f, 0x2, 0x2}, 0xc)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000840), 0x100, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r1}, {0x8, 0x1, r5}, {0x8, 0x1, r1}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x96c0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x10000001}, 0x4000000)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000009c0), 0x111800, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)=0xc)
getsockname$netlink(r1, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc)
r7 = fsopen(&(0x7f0000000b00)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1880a00}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xa8, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x125}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8094}, 0x4040)

[  106.128771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  106.134437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  106.139170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  106.146079] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  106.154027] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  106.270006] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  106.277184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  106.284172] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  106.288115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  106.302021] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  106.304181] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  106.308463] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  106.313375] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  106.325434] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  106.339941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  106.360930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  106.375233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  106.379011] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  106.388392] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  106.398321] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  106.461052] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  106.476114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  106.479088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  106.481944] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  106.488255] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  106.490214] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  106.500375] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  106.503711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  106.508081] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  106.515226] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  106.515304] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  106.522388] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  106.524093] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  106.524146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  106.528137] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  106.537062] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  106.556717] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  106.565116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  106.575761] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  106.590980] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  108.209665] Bluetooth: hci0: command tx timeout
[  108.401560] Bluetooth: hci1: command tx timeout
[  108.466584] Bluetooth: hci3: command tx timeout
[  108.467361] Bluetooth: hci2: command tx timeout
[  108.592645] Bluetooth: hci4: command tx timeout
[  108.657323] Bluetooth: hci5: command tx timeout
[  108.658174] Bluetooth: hci6: command tx timeout
[  108.723537] Bluetooth: hci7: command tx timeout
[  110.256837] Bluetooth: hci0: command tx timeout
[  110.448641] Bluetooth: hci1: command tx timeout
[  110.513885] Bluetooth: hci2: command tx timeout
[  110.515746] Bluetooth: hci3: command tx timeout
[  110.640630] Bluetooth: hci4: command tx timeout
[  110.704750] Bluetooth: hci6: command tx timeout
[  110.705622] Bluetooth: hci5: command tx timeout
[  110.768948] Bluetooth: hci7: command tx timeout
[  112.305132] Bluetooth: hci0: command tx timeout
[  112.496682] Bluetooth: hci1: command tx timeout
[  112.561052] Bluetooth: hci3: command tx timeout
[  112.562060] Bluetooth: hci2: command tx timeout
[  112.688655] Bluetooth: hci4: command tx timeout
[  112.752659] Bluetooth: hci5: command tx timeout
[  112.753647] Bluetooth: hci6: command tx timeout
[  112.817610] Bluetooth: hci7: command tx timeout
[  114.354178] Bluetooth: hci0: command tx timeout
[  114.545863] Bluetooth: hci1: command tx timeout
[  114.610895] Bluetooth: hci3: command tx timeout
[  114.611397] Bluetooth: hci2: command tx timeout
[  114.737572] Bluetooth: hci4: command tx timeout
[  114.803523] Bluetooth: hci5: command tx timeout
[  114.804021] Bluetooth: hci6: command tx timeout
[  114.864753] Bluetooth: hci7: command tx timeout
[  168.961143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  168.966415] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  168.982914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  168.991248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  168.998127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  169.086946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  169.092473] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  169.096150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  169.111286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  169.113104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  169.122002] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  169.125014] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  169.127242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  169.152190] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  169.178313] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  169.185627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  169.199191] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  169.218094] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  169.220329] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  169.229788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  169.231151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  169.235228] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  169.240277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  169.244621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  169.244953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  169.246146] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  169.249392] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  169.249409] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  169.260211] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  169.272111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  169.283150] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  169.288283] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  169.290678] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  169.299720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  169.313015] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  169.329896] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  169.330712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  169.333087] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  169.338824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  169.353921] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  171.056655] Bluetooth: hci0: command tx timeout
[  171.185010] Bluetooth: hci1: command tx timeout
[  171.313803] Bluetooth: hci2: command tx timeout
[  171.376850] Bluetooth: hci5: command tx timeout
[  171.376883] Bluetooth: hci4: command tx timeout
[  171.440583] Bluetooth: hci7: command tx timeout
[  171.440611] Bluetooth: hci3: command tx timeout
[  171.441708] Bluetooth: hci6: command tx timeout
[  173.106628] Bluetooth: hci0: command tx timeout
[  173.232568] Bluetooth: hci1: command tx timeout
[  173.360616] Bluetooth: hci2: command tx timeout
[  173.425533] Bluetooth: hci5: command tx timeout
[  173.425623] Bluetooth: hci4: command tx timeout
[  173.488749] Bluetooth: hci3: command tx timeout
[  173.491516] Bluetooth: hci6: command tx timeout
[  173.491987] Bluetooth: hci7: command tx timeout
[  175.152609] Bluetooth: hci0: command tx timeout
[  175.280562] Bluetooth: hci1: command tx timeout
[  175.408589] Bluetooth: hci2: command tx timeout
[  175.472600] Bluetooth: hci5: command tx timeout
[  175.472681] Bluetooth: hci4: command tx timeout
[  175.536729] Bluetooth: hci6: command tx timeout
[  175.536870] Bluetooth: hci7: command tx timeout
[  175.537305] Bluetooth: hci3: command tx timeout
[  177.202368] Bluetooth: hci0: command tx timeout
[  177.329544] Bluetooth: hci1: command tx timeout
[  177.457622] Bluetooth: hci2: command tx timeout
[  177.520576] Bluetooth: hci4: command tx timeout
[  177.522516] Bluetooth: hci5: command tx timeout
[  177.584960] Bluetooth: hci7: command tx timeout
[  177.585395] Bluetooth: hci6: command tx timeout
[  177.586129] Bluetooth: hci3: command tx timeout
[  231.370443] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  231.377892] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  231.385061] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  231.398307] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  231.405921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  231.413828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  231.425813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  231.435267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  231.443688] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  231.448275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  231.450265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  231.451515] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  231.481172] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  231.506205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  231.511052] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  231.560716] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  231.563455] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  231.565813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  231.570868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  231.573985] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  231.594317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  231.599152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  231.605112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  231.611307] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  231.614369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  231.628251] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  231.630212] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  231.632018] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  231.635735] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  231.642387] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  231.648640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  231.656927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  231.663757] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  231.681851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  231.734429] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  231.767697] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  231.770633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  231.810550] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  231.844872] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  231.852452] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  233.521627] Bluetooth: hci1: command tx timeout
[  233.521664] Bluetooth: hci0: command tx timeout
[  233.584572] Bluetooth: hci2: command tx timeout
[  233.648606] Bluetooth: hci3: command tx timeout
[  233.649592] Bluetooth: hci4: command tx timeout
[  233.712601] Bluetooth: hci6: command tx timeout
[  233.840866] Bluetooth: hci5: command tx timeout
[  233.905725] Bluetooth: hci7: command tx timeout
[  235.568924] Bluetooth: hci1: command tx timeout
[  235.569408] Bluetooth: hci0: command tx timeout
[  235.632704] Bluetooth: hci2: command tx timeout
[  235.696646] Bluetooth: hci4: command tx timeout
[  235.697163] Bluetooth: hci3: command tx timeout
[  235.760594] Bluetooth: hci6: command tx timeout
[  235.888571] Bluetooth: hci5: command tx timeout
[  235.953870] Bluetooth: hci7: command tx timeout
[  237.616622] Bluetooth: hci0: command tx timeout
[  237.617129] Bluetooth: hci1: command tx timeout
[  237.680722] Bluetooth: hci2: command tx timeout
[  237.745728] Bluetooth: hci3: command tx timeout
[  237.746180] Bluetooth: hci4: command tx timeout
[  237.809882] Bluetooth: hci6: command tx timeout
[  237.936710] Bluetooth: hci5: command tx timeout
[  238.001918] Bluetooth: hci7: command tx timeout
[  239.665585] Bluetooth: hci1: command tx timeout
[  239.666070] Bluetooth: hci0: command tx timeout
[  239.730806] Bluetooth: hci2: command tx timeout
[  239.794658] Bluetooth: hci4: command tx timeout
[  239.795098] Bluetooth: hci3: command tx timeout
[  239.856658] Bluetooth: hci6: command tx timeout
[  239.984650] Bluetooth: hci5: command tx timeout
[  240.049532] Bluetooth: hci7: command tx timeout
[  293.702109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  293.708022] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  293.711294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  293.718596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  293.726039] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  293.826372] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  293.830869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  293.833612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  293.840983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  293.847429] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  293.911579] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  293.926249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  293.929045] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  293.946971] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  293.956184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  293.965886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  293.971185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  293.980232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  294.002844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  294.012080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  294.079627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  294.088696] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  294.101139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  294.111025] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  294.115410] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  294.137108] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  294.144793] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  294.159596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  294.171912] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  294.175793] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  294.183845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  294.194282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  294.206341] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  294.211431] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  294.211985] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  294.307006] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  294.334114] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  294.367358] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  294.406442] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  294.436019] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  295.792574] Bluetooth: hci0: command tx timeout
[  295.920601] Bluetooth: hci1: command tx timeout
[  296.048582] Bluetooth: hci3: command tx timeout
[  296.049318] Bluetooth: hci2: command tx timeout
[  296.177741] Bluetooth: hci4: command tx timeout
[  296.240717] Bluetooth: hci6: command tx timeout
[  296.304749] Bluetooth: hci5: command tx timeout
[  297.585179] Bluetooth: hci7: command tx timeout
[  297.840626] Bluetooth: hci0: command tx timeout
[  297.969676] Bluetooth: hci1: command tx timeout
[  298.096957] Bluetooth: hci3: command tx timeout
[  298.098265] Bluetooth: hci2: command tx timeout
[  298.224658] Bluetooth: hci4: command tx timeout
[  298.289217] Bluetooth: hci6: command tx timeout
[  298.352674] Bluetooth: hci5: command tx timeout
[  299.632645] Bluetooth: hci7: command tx timeout
[  299.888628] Bluetooth: hci0: command tx timeout
[  300.017805] Bluetooth: hci1: command tx timeout
[  300.144619] Bluetooth: hci2: command tx timeout
[  300.145233] Bluetooth: hci3: command tx timeout
[  300.272554] Bluetooth: hci4: command tx timeout
[  300.336838] Bluetooth: hci6: command tx timeout
[  300.400809] Bluetooth: hci5: command tx timeout
[  301.680669] Bluetooth: hci7: command tx timeout
[  301.936555] Bluetooth: hci0: command tx timeout
[  302.067517] Bluetooth: hci1: command tx timeout
[  302.192833] Bluetooth: hci3: command tx timeout
[  302.193345] Bluetooth: hci2: command tx timeout
[  302.321717] Bluetooth: hci4: command tx timeout
[  302.384549] Bluetooth: hci6: command tx timeout
[  302.448590] Bluetooth: hci5: command tx timeout
[  303.728786] Bluetooth: hci7: command tx timeout
[  356.165010] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  356.183250] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  356.186321] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  356.203343] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  356.211669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  356.427887] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  356.433086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  356.441079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  356.443943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  356.446946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  356.450375] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  356.457807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  356.464307] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  356.468074] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  356.485121] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  356.591221] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  356.597920] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  356.602276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  356.604064] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  356.608827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  356.615143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  356.617418] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  356.619098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  356.623045] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  356.630109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  356.643156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  356.646621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  356.667980] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  356.678144] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  356.682222] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  356.686013] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  356.693090] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  356.715341] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  356.717566] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  356.748823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  356.784055] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  356.795783] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  356.839756] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  356.853987] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  356.872196] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  358.257628] Bluetooth: hci0: command tx timeout
[  358.512618] Bluetooth: hci2: command tx timeout
[  358.576836] Bluetooth: hci1: command tx timeout
[  358.768600] Bluetooth: hci3: command tx timeout
[  358.769365] Bluetooth: hci4: command tx timeout
[  358.832578] Bluetooth: hci5: command tx timeout
[  358.833792] Bluetooth: hci6: command tx timeout
[  358.961586] Bluetooth: hci7: command tx timeout
[  360.306714] Bluetooth: hci0: command tx timeout
[  360.561646] Bluetooth: hci2: command tx timeout
[  360.626800] Bluetooth: hci1: command tx timeout
[  360.817615] Bluetooth: hci4: command tx timeout
[  360.818118] Bluetooth: hci3: command tx timeout
[  360.880714] Bluetooth: hci6: command tx timeout
[  360.881217] Bluetooth: hci5: command tx timeout
[  361.008542] Bluetooth: hci7: command tx timeout
[  362.353936] Bluetooth: hci0: command tx timeout
[  362.611505] Bluetooth: hci2: command tx timeout
[  362.673681] Bluetooth: hci1: command tx timeout
[  362.864610] Bluetooth: hci3: command tx timeout
[  362.865174] Bluetooth: hci4: command tx timeout
[  362.930252] Bluetooth: hci5: command tx timeout
[  362.931002] Bluetooth: hci6: command tx timeout
[  363.057775] Bluetooth: hci7: command tx timeout
[  364.400544] Bluetooth: hci0: command tx timeout
[  364.656913] Bluetooth: hci2: command tx timeout
[  364.720685] Bluetooth: hci1: command tx timeout
[  364.912810] Bluetooth: hci4: command tx timeout
[  364.913331] Bluetooth: hci3: command tx timeout
[  364.977571] Bluetooth: hci6: command tx timeout
[  364.978089] Bluetooth: hci5: command tx timeout
[  365.105698] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
01:50:51  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff8880141a9b80 RCX=ffffffff87a7f038 RDX=0000000000000001
RSI=0000000000000000 RDI=0000000000000001 RBP=ffff8880141aa5d8 RSP=ffff8880160d7b60
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000
R12=ffff8880141aa600 R13=0000000000000000 R14=0000000000000000 R15=0000000000000005
RIP=ffffffff815190c8 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f5b489da540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5b48bc5620 CR3=000000002e9e5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000000000000000ff000000 XMM01=00000000000000000000000000ffffff
XMM02=00362e322e325f4342494c4700352e32 XMM03=00000000000000000000004700352e32
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000000 RCX=25508ca8f3079cb5 RDX=0000000085b43e03
RSI=000000007e136c90 RDI=00000000240df03a RBP=ffff888036978a58 RSP=ffff88802e557120
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffff888036978a80 R13=0000000003c7aa93 R14=0000000000000000 R15=25508ca8f3079cb5
RIP=ffffffff815192a2 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe0600000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1b798e2580 CR3=000000002d6f3000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000