[   54.223970] sshd (223) used greatest stack depth: 23704 bytes left

Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:21060' (ECDSA) to the list of known hosts.
2025/01/15 04:21:53 fuzzer started
2025/01/15 04:21:53 dialing manager at localhost:33219
syzkaller login: [   63.811015] cgroup: Unknown subsys name 'net'
[   63.932104] cgroup: Unknown subsys name 'cpuset'
[   63.962278] cgroup: Unknown subsys name 'rlimit'
[   68.955227] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/15 04:22:12 syscalls: 204
2025/01/15 04:22:12 code coverage: enabled
2025/01/15 04:22:12 comparison tracing: enabled
2025/01/15 04:22:12 extra coverage: enabled
2025/01/15 04:22:12 setuid sandbox: enabled
2025/01/15 04:22:12 namespace sandbox: enabled
2025/01/15 04:22:12 Android sandbox: enabled
2025/01/15 04:22:12 fault injection: enabled
2025/01/15 04:22:12 leak checking: enabled
2025/01/15 04:22:12 net packet injection: enabled
2025/01/15 04:22:12 net device setup: enabled
2025/01/15 04:22:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/15 04:22:12 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/15 04:22:12 USB emulation: enabled
2025/01/15 04:22:12 hci packet injection: enabled
2025/01/15 04:22:12 wifi device emulation: enabled
2025/01/15 04:22:12 802.15.4 emulation: enabled
2025/01/15 04:22:12 fetching corpus: 0, signal 0/0 (executing program)
2025/01/15 04:22:14 starting 8 fuzzer processes
04:22:14 executing program 0:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x800, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)={0x1})
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000180))
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x64, 0x0, &(0x7f00000002c0)=[@register_looper, @request_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x4, 0x1, 0xa}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x8, 0x2, 0x23}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}, @dead_binder_done], 0x8f, 0x0, &(0x7f0000000340)="731602351c099e3c72585fb9b34690c7bdb50e2d160c913e8d85de928342cbb5265e9b974723f5955aff270aa13187be1cfca59686cd0e6fe57f7cdcf0f103daf30e2c50132cbd89aea92dffb1bd7292078d4e934b8b04fdd1798f7346d62650dfbb0bd6e5deb7f7fc19b0026bc3ba118a1bd5e0b0a6a5aeea8d6b42ad72d0f146287f7b9339a4376c69163dc122b8"})
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008094}, 0x20000000)
r3 = clone3(&(0x7f0000000740)={0x22001080, &(0x7f0000000540), &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0), {0x41}, &(0x7f0000000600)=""/137, 0x89, &(0x7f00000006c0)=""/52, &(0x7f0000000700)=[0x0], 0x1, {r2}}, 0x58)
arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000007c0))
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
clone3(&(0x7f0000001940)={0x398208080, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880), {0x17}, &(0x7f00000008c0)=""/4096, 0x1000, &(0x7f00000018c0)=""/38, &(0x7f0000001900)=[r4, r3], 0x2, {r0}}, 0x58)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000019c0))
syz_open_dev$vcsu(&(0x7f0000001a00), 0xfffffffffffffffe, 0x10800)
syz_open_dev$loop(&(0x7f0000001a40), 0x4e, 0x4240)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1)

04:22:14 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40014)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000200))
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffff6d}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x3d}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040040}, 0x48081)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r5, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'NLBL_UNLBL\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000540)=0x59)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000580)="ae6d36ff71bbd90c72ce2dbd6690daf7c51f97f8c42424a51422d92ec15ec1e0565ead60668e2a8198d97e7aa6aafec9e8ed214322816f64fce0e2fbf497551b6d0e935b98f5cba600", 0x49)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000)
r7 = socket(0x22, 0x5, 0x6)
sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, 0x0, 0xb84, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe8, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb0c}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044014}, 0x60000080)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r6)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x8c, r8, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3b}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x4048030)

04:22:14 executing program 2:
r0 = socket(0xb, 0x6, 0x6dc)
r1 = socket(0x1e, 0x4, 0x3)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0)
getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000040)=0x80000000, &(0x7f0000000080)=0x4)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x3d, 0xff, 0xb8f, 0x19, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x40, 0x1, 0x2}})
r4 = socket(0x0, 0x1, 0xfe)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x8, 0x8000, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x700, 0x8, 0x9, 0x81}})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000240)=0x200, &(0x7f0000000280)=0x2)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r4)
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x19c, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa0ac}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe00}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd98f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x19c}, 0x1, 0x0, 0x0, 0x70}, 0x2008810)
r7 = getegid()
r8 = getegid()
fsetxattr$system_posix_acl(r1, &(0x7f0000000580)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1}], {0x4, 0x4}, [{0x8, 0x2, r7}, {0x8, 0x9, 0xffffffffffffffff}, {0x8, 0x6, r8}, {0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x3}], {0x10, 0x7}, {0x20, 0x5}}, 0x54, 0x3)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000640)={<r9=>r4, 0x80000000, 0xfffffffffffff001, 0x1d})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000780)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'ip6gre0\x00', r10, 0x4, 0x3a, 0x5f, 0x4, 0x42, @dev={0xfe, 0x80, '\x00', 0x3f}, @mcast2, 0x10, 0x8, 0x9, 0x40}})
getsockopt$bt_BT_POWER(r9, 0x112, 0x9, &(0x7f0000000880)=0x1, &(0x7f00000008c0)=0x1)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000940))

04:22:14 executing program 3:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x82ce}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf5d}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20008880}, 0x40)
r1 = syz_open_dev$loop(&(0x7f0000000200), 0xffffffffffff8000, 0x44000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000240)=0x3, 0x2)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f00000002c0)=[@request_death, @acquire, @acquire={0x40046305, 0x1}], 0xb2, 0x0, &(0x7f0000000300)="419f765c1047486903bf1ffd5518f3617a5382fa5ec0c4e3b31011314770ec537e93ae130d3ad71498074e166b5f0a7031418b7058762b474a7c8875bc8074d7c17a2b8b1479908aa2cba06cbca462fa51d2dac2cb969b13e488f578cf4c1181b5a9ea0fcf699edbbdc1cbf27859ae2f0e5a2ffd9aaa4b4e7049fe3a0829546c0388e019f9bda7a10a2e8af97e526d39c4dee405ac236147338d38e339652a2ac9a0b96064311dc292d764f9e7fe316c17ec"})
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000400)=0x90, &(0x7f0000000440)=0x4)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0xd00, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r3)
getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000500)=0x5, &(0x7f0000000540)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
waitid(0x2, 0x0, 0x0, 0x40000000, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000580)=0x6, 0x1)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x101000, 0x0)
preadv2(r4, &(0x7f0000000880)=[{&(0x7f0000000600)=""/253, 0xfd}, {&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f00000007c0)=""/159, 0x9f}], 0x3, 0xfff, 0x10000, 0x3c)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000008c0))
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a40), 0x200, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201)

[   83.748102] audit: type=1400 audit(1736914934.640:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
04:22:14 executing program 5:
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3f}}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x64}}, 0x200000d0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40400d0}, 0x40004)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000500)=0xfdf)
r4 = dup(r3)
sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44004001)
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000680)={<r5=>r2, 0xf4, 0x2, 0xc52c})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000007c0), 0x200002, 0x0)
ioctl$SG_SCSI_RESET(r6, 0x2284, 0x0)

04:22:14 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x84800)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x3})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x8040, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000240)={<r3=>r0, 0x87, 0x6, 0x8})
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0xfffffffb, 0x3d}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4)
dup(r0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000540)={<r6=>r3, 0x1ff, 0x3, 0x6})
sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x20}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4850}, 0x4800)
r7 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x9, 0xa0403)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r6)
sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x48020}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe4, r8, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2fff1bec}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000900), 0xffffffffffffffff)

04:22:14 executing program 6:
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/4096)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000001040)=""/4096)
msgget(0x2, 0x52)
msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000002040)=""/249)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000002140)=""/245)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000002240)=[0xf54b, 0x6, 0x400])
semctl$GETPID(0x0, 0x3, 0xb, &(0x7f0000002280)=""/163)
sched_setscheduler(0x0, 0x2, &(0x7f0000002340)=0x475)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000002380)='devices.allow\x00', 0x2, 0x0)
r1 = openat$cgroup(r0, &(0x7f00000023c0)='syz1\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000002400), 0x2, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002440), 0x8200, 0x0)
r3 = openat$cgroup(r2, &(0x7f0000002480)='syz1\x00', 0x200002, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000024c0), 0x202000, 0x0)
r4 = openat$cgroup(r3, &(0x7f0000002500)='syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r4, &(0x7f0000002540)='tasks\x00', 0x2, 0x0)
syz_open_dev$sg(&(0x7f0000002580), 0x100, 0x280000)
r5 = msgget(0x0, 0x1e8)
msgctl$MSG_STAT(r5, 0xb, &(0x7f00000025c0)=""/239)

04:22:14 executing program 7:
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="dc6369c634a189674af12cf854340f416ef4a4e7d3841a2d6d8d5af19ac3293da82b5c518d38e693", 0x28, 0xfffffffffffffffa)
r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="8f6b52edba0227e0cdb5587e84e725be4ff46321dcd46bed5f6ef0291566c6e4c6704c0829f065ffbfd837bbac2dd91edb2e5bf4e25f", 0x36, 0xfffffffffffffffe)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000004}, 0x408c0)
keyctl$dh_compute(0x17, &(0x7f0000000440)={r0, r0, r1}, &(0x7f0000000480)=""/230, 0xe6, &(0x7f0000000640)={&(0x7f0000000580)={'sha384-avx2\x00'}, &(0x7f00000005c0)="9eb444ea080899ff8508dc582037a7ed88055af33e57be1f55dd3bc84d9ebe10d6d2f81101abb84ff0dc5b9dd9854f1a2e2cb8fa32e45f790a139976a3d59ce79f43d4f072bdc23849475c83958b4c9dbd75592ecad7aa0e8efecf3d6a2f02359737beb49a986c8a01", 0x69})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)="501794853e6ae24128efed55615d9dac0a9c1d1e77e6c29341a59fe5f2a5b0734dc32f3edfb19ae70b7a7b3dd30e4bac5b1c8058e17c8ff2c54804b94883accd4b16e099448acce09e32e37049038f03e78b63efc5a68c0a713a64efd17958df7c3f86c04ebeda439ca6f9d177e873b9a51b3df15acb80cde855abf34e64b89a6ac91fd0cfea3495460926dae5282914d5b0ecc2dce972a28dc2c00e387a3253477367008e4981239bd1b9eb7d642de9abc4d4f5f71c38ad2a126be24d845461ae6a2452ac428c3f6bce0c2c53f1318ff29a9e8feda2c5e16aba4a9c912096350336c50a7d7f28e4a43014c8a6e33fe7a500972b62388b4049", 0xf9, 0xfffffffffffffffa)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r4, r0}, &(0x7f0000000840)=""/215, 0xd7, &(0x7f0000000a80)={&(0x7f0000000940)={'sha384\x00'}, &(0x7f0000000980)="9360c0055cef2807e4fd0892b6675f5042506ad3864e4cae230824a4c9e617156da678f8d4c0f9252a6db4d9e00ee97fa524edc1483c39becef1fbd1057d18365af00def4b5015daaa70c8e5a03e59dfa6a2781214aa535011d9a0b18451915b9e315bf0efc32dbd52cdee5335e6a4688f3e408f719d251f91850c736855d851457d8aed994634049672cb73f177593844499de86155c415f341d7272ee7776fdb3d16a21ba2e556ebff79a47eaa5353dd543659ff7e594d6a4d4850cadccf8c14b1e537aae097dc3a978c9a2498c9fae61812a8d2a1ec13d58dc1551ae7b94775", 0xe1})
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x44}}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000880}, 0x400c085)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r5, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4060020}, 0x40000000)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x11}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004004}, 0x800)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000e80)={0x1f, 0xe09, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8001, 0x2}, 0xe)
r6 = dup(r3)
syz_genetlink_get_family_id$gtp(&(0x7f0000000ec0), r6)
syz_open_dev$sg(&(0x7f0000000f00), 0x0, 0x200)
sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000)
syz_init_net_socket$bt_l2cap(0x1f, 0xa9925500b80a4893, 0x0)

[   85.290601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.292666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.294772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.299774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.302644] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   85.306100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.311101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.314013] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.319455] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.331637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.342454] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   85.348931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.397929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.400671] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.401726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.405028] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.406957] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   85.407920] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.415007] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.421642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.426584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.448473] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.452333] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   85.454816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.481944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.487840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.497470] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   85.505758] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   85.515416] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   85.517629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   85.550557] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   85.559775] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   85.567035] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   85.581683] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   85.587803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   85.590057] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   85.599344] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   85.611383] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   85.623891] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   85.629555] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   85.631797] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   85.636861] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   85.642562] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   85.644607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   85.652801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   85.681790] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   85.696306] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   85.704581] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   87.368646] Bluetooth: hci1: command tx timeout
[   87.368655] Bluetooth: hci0: command tx timeout
[   87.495356] Bluetooth: hci3: command tx timeout
[   87.496247] Bluetooth: hci2: command tx timeout
[   87.623440] Bluetooth: hci4: command tx timeout
[   87.687538] Bluetooth: hci6: command tx timeout
[   87.751280] Bluetooth: hci5: command tx timeout
[   87.815335] Bluetooth: hci7: command tx timeout
[   89.416262] Bluetooth: hci1: command tx timeout
[   89.416391] Bluetooth: hci0: command tx timeout
[   89.543372] Bluetooth: hci3: command tx timeout
[   89.543465] Bluetooth: hci2: command tx timeout
[   89.673307] Bluetooth: hci4: command tx timeout
[   89.736366] Bluetooth: hci6: command tx timeout
[   89.800593] Bluetooth: hci5: command tx timeout
[   89.864754] Bluetooth: hci7: command tx timeout
[   91.464291] Bluetooth: hci0: command tx timeout
[   91.464387] Bluetooth: hci1: command tx timeout
[   91.591368] Bluetooth: hci2: command tx timeout
[   91.591463] Bluetooth: hci3: command tx timeout
[   91.720348] Bluetooth: hci4: command tx timeout
[   91.783268] Bluetooth: hci6: command tx timeout
[   91.849262] Bluetooth: hci5: command tx timeout
[   91.912249] Bluetooth: hci7: command tx timeout
[   93.512366] Bluetooth: hci1: command tx timeout
[   93.512396] Bluetooth: hci0: command tx timeout
[   93.639485] Bluetooth: hci3: command tx timeout
[   93.639506] Bluetooth: hci2: command tx timeout
[   93.768395] Bluetooth: hci4: command tx timeout
[   93.832720] Bluetooth: hci6: command tx timeout
[   93.896482] Bluetooth: hci5: command tx timeout
[   93.960312] Bluetooth: hci7: command tx timeout
[  147.741068] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  147.745533] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  147.751868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  147.761752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  147.767073] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  147.771563] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  147.878423] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  147.883578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  147.884629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  147.888411] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  147.891940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  147.894426] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  147.899149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  147.900013] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  147.904934] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  147.912867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  147.914732] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  147.918389] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  147.923349] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  147.930272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  147.936306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  147.974101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  147.983705] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  148.001844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  148.011975] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  148.025647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  148.050745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  148.058783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  148.059889] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  148.060308] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  148.069857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  148.073538] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  148.074961] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  148.077831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  148.082392] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  148.084645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  148.088705] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  148.090756] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  148.093308] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  148.098754] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  148.102585] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  148.105508] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  148.116563] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  148.141046] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  148.147439] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  148.152745] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  148.156729] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  148.160910] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  149.831419] Bluetooth: hci0: command tx timeout
[  149.959271] Bluetooth: hci3: command tx timeout
[  149.959571] Bluetooth: hci1: command tx timeout
[  150.088680] Bluetooth: hci2: command tx timeout
[  150.153002] Bluetooth: hci4: command tx timeout
[  150.215427] Bluetooth: hci6: command tx timeout
[  150.215850] Bluetooth: hci7: command tx timeout
[  150.216251] Bluetooth: hci5: command tx timeout
[  151.881220] Bluetooth: hci0: command tx timeout
[  152.007444] Bluetooth: hci3: command tx timeout
[  152.007667] Bluetooth: hci1: command tx timeout
[  152.135452] Bluetooth: hci2: command tx timeout
[  152.200296] Bluetooth: hci4: command tx timeout
[  152.263325] Bluetooth: hci5: command tx timeout
[  152.263417] Bluetooth: hci6: command tx timeout
[  152.263469] Bluetooth: hci7: command tx timeout
[  153.927393] Bluetooth: hci0: command tx timeout
[  154.055320] Bluetooth: hci1: command tx timeout
[  154.055485] Bluetooth: hci3: command tx timeout
[  154.183886] Bluetooth: hci2: command tx timeout
[  154.247738] Bluetooth: hci4: command tx timeout
[  154.311310] Bluetooth: hci5: command tx timeout
[  154.311391] Bluetooth: hci7: command tx timeout
[  154.311475] Bluetooth: hci6: command tx timeout
[  155.976227] Bluetooth: hci0: command tx timeout
[  156.103876] Bluetooth: hci1: command tx timeout
[  156.103985] Bluetooth: hci3: command tx timeout
[  156.231231] Bluetooth: hci2: command tx timeout
[  156.295271] Bluetooth: hci4: command tx timeout
[  156.359296] Bluetooth: hci6: command tx timeout
[  156.359397] Bluetooth: hci7: command tx timeout
[  156.359448] Bluetooth: hci5: command tx timeout
[  206.468892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.469014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.750539] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  209.754030] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  209.757608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  209.761669] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  209.765611] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  209.767291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  209.876861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  209.880939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  209.883399] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  209.890540] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  209.892644] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  209.893893] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  209.936671] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  209.943522] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  209.949036] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  209.955538] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  209.959088] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  209.960894] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  210.018860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  210.024491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  210.033788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  210.048400] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  210.059700] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  210.061982] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  210.076129] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  210.092893] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  210.097346] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  210.114434] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  210.119908] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  210.128292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  210.132458] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  210.142458] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  210.144626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  210.147057] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  210.148507] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  210.149556] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  210.167834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  210.194430] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  210.200930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  210.216384] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  210.221836] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  210.232545] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  210.304019] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  210.313487] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  210.325863] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  210.386050] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  210.388940] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  210.389742] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  211.784236] Bluetooth: hci0: command tx timeout
[  211.912337] Bluetooth: hci1: command tx timeout
[  212.040306] Bluetooth: hci2: command tx timeout
[  212.103384] Bluetooth: hci3: command tx timeout
[  212.232492] Bluetooth: hci4: command tx timeout
[  212.295272] Bluetooth: hci5: command tx timeout
[  212.359270] Bluetooth: hci6: command tx timeout
[  212.488201] Bluetooth: hci7: command tx timeout
[  213.831409] Bluetooth: hci0: command tx timeout
[  213.961239] Bluetooth: hci1: command tx timeout
[  214.087280] Bluetooth: hci2: command tx timeout
[  214.151802] Bluetooth: hci3: command tx timeout
[  214.280684] Bluetooth: hci4: command tx timeout
[  214.344346] Bluetooth: hci5: command tx timeout
[  214.408230] Bluetooth: hci6: command tx timeout
[  214.536285] Bluetooth: hci7: command tx timeout
[  215.879234] Bluetooth: hci0: command tx timeout
[  216.007341] Bluetooth: hci1: command tx timeout
[  216.136205] Bluetooth: hci2: command tx timeout
[  216.200235] Bluetooth: hci3: command tx timeout
[  216.327314] Bluetooth: hci4: command tx timeout
[  216.391368] Bluetooth: hci5: command tx timeout
[  216.455247] Bluetooth: hci6: command tx timeout
[  216.584359] Bluetooth: hci7: command tx timeout
[  217.929381] Bluetooth: hci0: command tx timeout
[  218.056234] Bluetooth: hci1: command tx timeout
[  218.184388] Bluetooth: hci2: command tx timeout
[  218.248301] Bluetooth: hci3: command tx timeout
[  218.375238] Bluetooth: hci4: command tx timeout
[  218.441192] Bluetooth: hci5: command tx timeout
[  218.504383] Bluetooth: hci6: command tx timeout
[  218.631330] Bluetooth: hci7: command tx timeout
[  267.171491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.171564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.421718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.421796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.161047] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  272.173865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  272.181620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  272.194046] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  272.201645] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  272.203923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  272.401530] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  272.404968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  272.407622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  272.413541] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  272.417557] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  272.419980] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  272.610790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  272.614777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  272.615736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  272.621646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  272.624627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  272.626390] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  272.627325] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  272.637394] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  272.642972] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  272.664804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  272.683494] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  272.690024] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  272.708960] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  272.715005] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  272.719007] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  272.723537] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  272.725393] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  272.726309] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  272.744648] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  272.757509] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  272.767973] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  272.775244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  272.778538] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  272.782690] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  273.076577] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  273.084006] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  273.104513] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  273.126770] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  273.144797] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  273.147446] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  273.148388] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  273.163342] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  273.196040] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  273.210605] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  273.215495] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  273.230677] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  274.247346] Bluetooth: hci0: command tx timeout
[  274.439326] Bluetooth: hci1: command tx timeout
[  274.695330] Bluetooth: hci3: command tx timeout
[  274.759242] Bluetooth: hci2: command tx timeout
[  274.825183] Bluetooth: hci4: command tx timeout
[  274.887346] Bluetooth: hci6: command tx timeout
[  275.335415] Bluetooth: hci5: command tx timeout
[  275.336369] Bluetooth: hci7: command tx timeout
[  276.297204] Bluetooth: hci0: command tx timeout
[  276.487207] Bluetooth: hci1: command tx timeout
[  276.744189] Bluetooth: hci3: command tx timeout
[  276.809218] Bluetooth: hci2: command tx timeout
[  276.871321] Bluetooth: hci4: command tx timeout
[  276.935268] Bluetooth: hci6: command tx timeout
[  277.383226] Bluetooth: hci7: command tx timeout
[  277.383365] Bluetooth: hci5: command tx timeout
[  278.343301] Bluetooth: hci0: command tx timeout
[  278.535251] Bluetooth: hci1: command tx timeout
[  278.792168] Bluetooth: hci3: command tx timeout
[  278.855181] Bluetooth: hci2: command tx timeout
[  278.921181] Bluetooth: hci4: command tx timeout
[  278.983223] Bluetooth: hci6: command tx timeout
[  279.431402] Bluetooth: hci5: command tx timeout
[  279.431518] Bluetooth: hci7: command tx timeout
[  280.394295] Bluetooth: hci0: command tx timeout
[  280.583201] Bluetooth: hci1: command tx timeout
[  280.840183] Bluetooth: hci3: command tx timeout
[  280.904312] Bluetooth: hci2: command tx timeout
[  280.967245] Bluetooth: hci4: command tx timeout
[  281.032210] Bluetooth: hci6: command tx timeout
[  281.480344] Bluetooth: hci7: command tx timeout
[  281.480395] Bluetooth: hci5: command tx timeout
[  334.806603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  334.815370] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  334.818915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  334.829956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  334.838419] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  334.842613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  334.887805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  334.890580] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  334.894843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  334.902917] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  334.906071] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  334.908614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  335.084636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  335.097943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  335.103837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  335.114375] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  335.121982] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  335.125527] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  335.128404] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  335.138698] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  335.142622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  335.145418] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  335.147910] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  335.149033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  335.154293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  335.188660] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  335.191371] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  335.200014] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  335.202582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  335.204843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  335.206828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  335.208869] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  335.214482] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  335.217084] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  335.225580] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  335.228066] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  335.247900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  335.274316] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  335.295555] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  335.300094] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  335.304957] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  335.308623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  335.314423] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  335.317383] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  335.319383] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  335.340612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  335.392590] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  335.403704] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  336.903256] Bluetooth: hci0: command tx timeout
[  336.967213] Bluetooth: hci1: command tx timeout
[  337.287253] Bluetooth: hci4: command tx timeout
[  337.287651] Bluetooth: hci3: command tx timeout
[  337.287828] Bluetooth: hci2: command tx timeout
[  337.351338] Bluetooth: hci7: command tx timeout
[  337.352519] Bluetooth: hci6: command tx timeout
[  337.480226] Bluetooth: hci5: command tx timeout
[  338.952230] Bluetooth: hci0: command tx timeout
[  339.015181] Bluetooth: hci1: command tx timeout
[  339.337178] Bluetooth: hci2: command tx timeout
[  339.337269] Bluetooth: hci3: command tx timeout
[  339.337364] Bluetooth: hci4: command tx timeout
[  339.399317] Bluetooth: hci7: command tx timeout
[  339.399402] Bluetooth: hci6: command tx timeout
[  339.527251] Bluetooth: hci5: command tx timeout
[  341.001182] Bluetooth: hci0: command tx timeout
[  341.063191] Bluetooth: hci1: command tx timeout
[  341.383250] Bluetooth: hci4: command tx timeout
[  341.383346] Bluetooth: hci3: command tx timeout
[  341.383437] Bluetooth: hci2: command tx timeout
[  341.447234] Bluetooth: hci6: command tx timeout
[  341.447322] Bluetooth: hci7: command tx timeout
[  341.575915] Bluetooth: hci5: command tx timeout
[  343.047344] Bluetooth: hci0: command tx timeout
[  343.111220] Bluetooth: hci1: command tx timeout
[  343.431738] Bluetooth: hci2: command tx timeout
[  343.431835] Bluetooth: hci3: command tx timeout
[  343.431925] Bluetooth: hci4: command tx timeout
[  343.495434] Bluetooth: hci7: command tx timeout
[  343.495634] Bluetooth: hci6: command tx timeout
[  343.623240] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
04:27:22  Registers:
info registers vcpu 0
RAX=ffffffff84a38dc6 RBX=ffffffff815ec500 RCX=0000000000000001 RDX=1ffff1100570ce79
RSI=ffffffff84a38dc6 RDI=ffff88802b867438 RBP=ffff88802b867408 RSP=ffff88802b867368
R8 =0000000000000001 R9 =ffff88802b8673b0 R10=000000000003ab2c R11=0000000000022b11
R12=ffff88802b867438 R13=0000000000000000 R14=ffff888029500000 R15=ffff88801a9fbc00
RIP=ffffffff815ec504 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdc479b4260 CR3=0000000027e44000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff818e5f96 RDX=ffff88801563d340
RSI=0000000000000000 RDI=0000000000000001 RBP=ffffea00001bc4c0 RSP=ffff8880347f7828
R8 =0000000000000000 R9 =fffff94000037898 R10=0000000000000001 R11=0000000000000001
R12=0000000006f13025 R13=00007f5675a43000 R14=ffff8880347f7ce8 R15=0000000000000000
RIP=ffffffff84aae000 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe5e00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5675e9c6f4 CR3=0000000025252000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f5675eab47000007f5675eaaf20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000