Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:36959' (ECDSA) to the list of known hosts.
2025/01/16 01:23:49 fuzzer started
2025/01/16 01:23:49 dialing manager at localhost:37863
syzkaller login: [   69.585632] cgroup: Unknown subsys name 'net'
[   69.678343] cgroup: Unknown subsys name 'cpuset'
[   69.705545] cgroup: Unknown subsys name 'rlimit'
[   74.824823] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
[   86.916359] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/16 01:24:08 syscalls: 201
2025/01/16 01:24:08 code coverage: enabled
2025/01/16 01:24:08 comparison tracing: enabled
2025/01/16 01:24:08 extra coverage: enabled
2025/01/16 01:24:08 setuid sandbox: enabled
2025/01/16 01:24:08 namespace sandbox: enabled
2025/01/16 01:24:08 Android sandbox: enabled
2025/01/16 01:24:08 fault injection: enabled
2025/01/16 01:24:08 leak checking: enabled
2025/01/16 01:24:08 net packet injection: enabled
2025/01/16 01:24:08 net device setup: enabled
2025/01/16 01:24:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/16 01:24:08 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/16 01:24:08 USB emulation: enabled
2025/01/16 01:24:08 hci packet injection: enabled
2025/01/16 01:24:08 wifi device emulation: enabled
2025/01/16 01:24:08 802.15.4 emulation: enabled
2025/01/16 01:24:08 fetching corpus: 0, signal 0/0 (executing program)
2025/01/16 01:24:11 starting 8 fuzzer processes
01:24:11 executing program 0:
r0 = semget$private(0x0, 0x0, 0x400)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x7, 0xf7c3, 0x2, 0x3f, 0x6, 0x1760, 0x4])
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
accept4$bt_l2cap(r2, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x80000)
r3 = accept4$unix(r1, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x800)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000300)=""/172)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000440)={{0x7, 0xb3}, {0x5, 0x1}, 0xdd1})
ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014)
recvmsg$unix(r1, &(0x7f00000005c0)={&(0x7f00000004c0), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000540)=""/12, 0xc}], 0x1}, 0x12020)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000600)={0x80000000, 0x600, 0x0, 'queue1\x00', 0x5})
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000006c0)=""/13)
r4 = semget$private(0x0, 0x3, 0x58a)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000700)=[0x6])
semctl$GETNCNT(r4, 0x0, 0xe, &(0x7f0000000740)=""/75)

01:24:11 executing program 1:
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x4, 0x4)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x4102, 0x0)
ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000000080)={0x1, 0x6, 0xdc, 0x20, 0x81})
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$CDROMREADTOCENTRY(r0, 0x5306, &(0x7f0000000b00)={0x40, 0x4, 0xb, 0x1, @lba=0x2, 0x5})
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000b40))
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000b80)=0x80000000, 0x4)
ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000bc0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000c00), 0x191242, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000c40)='FROZEN\x00', 0x7)
ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000c80)={0x0, 0x6b, 0xc, 0x6, 0x20, 0x0, @msf={0x2, 0x4, 0x7}, @msf={0x7f, 0x1}})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000cc0), r3)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000d00), 0x4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000d40)={0x101, 0x3, 0x7f, 0xff, 0x3f, 0x29, 0x2}, 0xc)
accept$unix(r5, &(0x7f0000000d80), &(0x7f0000000e00)=0x6e)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'batadv_slave_1\x00'})

01:24:11 executing program 2:
setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000), 0x4)
socketpair(0x1d, 0x800, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x279}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000240))
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x781180, 0x0)
ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f00000002c0)={0x20, 0xe6, 0x56, 0xf9, 0x1, 0x2})
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000d80), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0), r1)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x8c, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4a3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x36}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$CDROMSUBCHNL(r2, 0x530b, &(0x7f0000001040)={0x3, 0x4, 0x9, 0xa, 0x40, 0x3, @msf={0x4, 0x80, 0x3b}, @lba})
recvmsg$unix(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001080)=""/111, 0x6f}, {&(0x7f0000001100)=""/240, 0xf0}, {&(0x7f0000001200)=""/243, 0xf3}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x4, &(0x7f0000002340)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x10100)
sendmsg$nl_xfrm(r5, &(0x7f0000002640)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002600)={&(0x7f0000002400)=@getsadinfo={0x1e0, 0x23, 0x100, 0x70bd29, 0x25dfdbfb, 0x0, [@algo_aead={0x136, 0x12, {{'rfc4543(authencesn(hmac(sha256-ce),xts-aes-ce))\x00'}, 0x750, 0x60, "fe8c59ba7d30b3ed66bdc348c63e2b0cd560cc08696065c6620400cce2e865c7283d28be1e85f9dcf93836fc63d70072b3e5491a897f700c90a14e0e2d14fe381c7e06a4564b5128421443304c35e3065a96d30544dc67c9a2b00f4808cddb669b5a7b76dc7aebdeed5cd9fc20608507aadf9e71a84265e54104ac64f69223a85a30e040beb2e6eab8bfc5d4083e4b40d93d5aba5a8bdca58fbc0482930d24057642b4780ed30e112064258832da624bcbd12dc55a01ed61be9ea95be17394dd191155f66a7c24b45b280c1aa67f6bf97190649fc23870e74c21f057a8851a543b083e4fb9c6de1c369a"}}, @lastused={0xc, 0xf, 0x7ff}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2}}, @mark={0xc, 0x15, {0x35075a, 0x8}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @coaddr={0x14, 0xe, @in=@remote}, @srcaddr={0x14, 0xd, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @encap={0x1c, 0x4, {0x1, 0x4e20, 0x4e24, @in=@broadcast}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40}, 0x4004080)
ioctl$CDROMSETSPINDOWN(r2, 0x531e, &(0x7f0000002680)=0x5)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x50, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8202}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x13}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
ioctl$DVD_WRITE_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000002800)=@copyright={0x1, 0x0, 0x5, 0x4})
ioctl$CDROMSEEK(r5, 0x5316, &(0x7f0000003040)={0x5, 0x0, 0x40, 0x89, 0x0, 0x81})
syz_genetlink_get_family_id$gtp(&(0x7f0000003080), r5)

01:24:11 executing program 3:
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@abs, 0x6e, 0xffffffffffffffff, 0x0, &(0x7f0000000080)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r0=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r1=>0x0, 0x0, <r2=>0x0}}}, @rights={{0x2c, 0x1, 0x1, [<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r10=>0x0, <r11=>0x0, <r12=>0x0}}}], 0x88}, 0x2020)
sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x2400c0d1)
recvmmsg$unix(r7, &(0x7f0000004500)=[{{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000700)=""/255, 0xff}, {&(0x7f0000000800)=""/193, 0xc1}, {&(0x7f0000000900)=""/72, 0x48}, {&(0x7f0000000980)=""/117, 0x75}, {&(0x7f0000000a00)=""/27, 0x1b}], 0x5, &(0x7f0000000ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000b40), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)=""/187, 0xbb}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/22, 0x16}, {&(0x7f0000001d40)=""/102, 0x66}], 0x6, &(0x7f0000001e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001f40)=""/251, 0xfb}], 0x1, &(0x7f0000002080)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000002180)=[{&(0x7f0000002140)=""/43, 0x2b}], 0x1, &(0x7f00000021c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, <r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r14=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000002300), 0x6e, &(0x7f0000003440)=[{&(0x7f0000002380)=""/151, 0x97}, {&(0x7f0000002440)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000003480)=@abs, 0x6e, &(0x7f0000003740)=[{&(0x7f0000003500)=""/220, 0xdc}, {&(0x7f0000003600)=""/254, 0xfe}, {&(0x7f0000003700)=""/50, 0x32}], 0x3, &(0x7f0000003780)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r15=>0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [<r16=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003880)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003900)=""/41, 0x29}, {&(0x7f0000003940)=""/198, 0xc6}, {&(0x7f0000003a40)=""/80, 0x50}, {&(0x7f0000003ac0)=""/208, 0xd0}, {&(0x7f0000003bc0)=""/75, 0x4b}], 0x5, &(0x7f0000003cc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r17=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000003dc0)=@abs, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000003e40)=""/57, 0x39}, {&(0x7f0000003e80)=""/228, 0xe4}, {&(0x7f0000003f80)=""/209, 0xd1}, {&(0x7f0000004080)=""/117, 0x75}, {&(0x7f0000004100)=""/189, 0xbd}], 0x5}}, {{&(0x7f0000004240)=@abs, 0x6e, &(0x7f0000004440)=[{&(0x7f00000042c0)=""/63, 0x3f}, {&(0x7f0000004300)=""/3, 0x3}, {&(0x7f0000004340)=""/242, 0xf2}], 0x3, &(0x7f0000004480)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, <r18=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}], 0x9, 0x10121, &(0x7f0000004740))
r19 = socket$nl_generic(0x10, 0x3, 0x10)
r20 = syz_open_procfs$namespace(r10, &(0x7f0000004780)='ns/time\x00')
r21 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
r22 = socket$inet6_udp(0xa, 0x2, 0x0)
r23 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000047c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004800)={0xffffffffffffffff, <r24=>0xffffffffffffffff})
r25 = syz_io_uring_setup(0x1c95, &(0x7f0000004840)={0x0, 0x85fb, 0x20, 0x1, 0x322, 0x0, r9}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000048c0), &(0x7f0000004900))
r26 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000004940), 0x8080)
sendmsg$unix(r4, &(0x7f0000004a80)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000300)="266750f960bcaff011590130259983a5c0c1836f759f2b9d0aceeeeacc1c", 0x1e}], 0x1, &(0x7f0000004980)=[@cred={{0x1c, 0x1, 0x2, {r1, r11, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r1, r15, r12}}}, @rights={{0x18, 0x1, 0x1, [r19, r7]}}, @rights={{0x20, 0x1, 0x1, [r0, r3, r20, r21]}}, @rights={{0x1c, 0x1, 0x1, [r5, r5, r22]}}, @rights={{0x28, 0x1, 0x1, [r23, r6, r24, r9, r25, r26]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r2}}}, @rights={{0x18, 0x1, 0x1, [r8, r9]}}], 0xf8, 0x4000005}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000004ac0)={'batadv0\x00', <r27=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r16, 0x89f2, &(0x7f0000004b80)={'syztnl2\x00', &(0x7f0000004b00)={'syztnl2\x00', r27, 0x4, 0x3f, 0x2, 0x0, 0x0, @mcast1, @mcast1, 0x10, 0x48, 0x8001, 0xfffffffe}})
r28 = accept$unix(r18, &(0x7f0000004bc0), &(0x7f0000004c40)=0x6e)
getpeername$unix(r28, &(0x7f0000004c80)=@abs, &(0x7f0000004d00)=0x6e)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r17, 0xc0bc5310, &(0x7f0000004d40))
r29 = openat$null(0xffffffffffffff9c, &(0x7f0000004e00), 0x131800, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r29, 0x40605346, &(0x7f0000004e40)={0x1ff, 0x2, {0x1, 0x3, 0x470a, 0x0, 0x80}, 0x6})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r14, 0x89fa, &(0x7f0000004f40)={'ip6gre0\x00', &(0x7f0000004ec0)={'ip6gre0\x00', r27, 0x4, 0xe2, 0x3, 0x5, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x700, 0x8, 0x80}})

01:24:11 executing program 4:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, r0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7412}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x82c}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x824}, 0x4000000)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000500)=""/207, 0xcf}, {&(0x7f0000000600)=""/61, 0x3d}, {&(0x7f0000000640)=""/49, 0x31}, {&(0x7f0000000680)=""/165, 0xa5}, {&(0x7f0000000740)=""/201, 0xc9}], 0x7, &(0x7f00000008c0)=[@rights={{0x18, 0x1, 0x1, [<r2=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000a00)={'ip6tnl0\x00', <r6=>0x0, 0x2f, 0xa7, 0x2c, 0x80, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x6}})
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000ac0)={'syztnl2\x00', r6, 0x2f, 0xcf, 0x7a, 0xffff, 0x40, @mcast1, @mcast1, 0xc2025b326ad21d3d, 0x40, 0x2, 0x672}})
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r8, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004084}, 0x40000)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000d40), r4)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x48, r9, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20004804)
recvmmsg$unix(r3, &(0x7f0000001500)=[{{&(0x7f0000000e80), 0x6e, &(0x7f0000001240)=[{&(0x7f0000000f00)=""/80, 0x50}, {&(0x7f0000000f80)=""/35, 0x23}, {&(0x7f0000000fc0)}, {&(0x7f0000001000)}, {&(0x7f0000001040)=""/171, 0xab}, {&(0x7f0000001100)=""/187, 0xbb}, {&(0x7f00000011c0)=""/63, 0x3f}, {&(0x7f0000001200)=""/11, 0xb}], 0x8, &(0x7f00000012c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001300), 0x6e, &(0x7f0000001480)=[{&(0x7f0000001380)=""/193, 0xc1}], 0x1, &(0x7f00000014c0)=[@rights={{0x28, 0x1, 0x1, [<r10=>0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x2, 0x2040, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r11, 0x89f6, &(0x7f0000001600)={'syztnl1\x00', &(0x7f0000001580)={'syztnl2\x00', r6, 0x29, 0x1, 0x1, 0x0, 0x1b, @empty, @remote, 0x40, 0x8, 0x71c, 0xc000000}})
recvmmsg$unix(r12, &(0x7f0000002a80)=[{{&(0x7f0000001640)=@abs, 0x6e, &(0x7f00000029c0)=[{&(0x7f00000016c0)=""/96, 0x60}, {&(0x7f0000001740)=""/247, 0xf7}, {&(0x7f0000001840)=""/60, 0x3c}, {&(0x7f0000001880)=""/191, 0xbf}, {&(0x7f0000001940)=""/97, 0x61}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002a40)=[@rights={{0x18, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x1, 0x40, &(0x7f0000002ac0))
r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r13, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0xd58996958b34a025}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x1c, r14, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x97}]}, 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x4040)
recvmsg$unix(r5, &(0x7f00000041c0)={&(0x7f0000002c40)=@abs, 0x6e, &(0x7f0000004100)=[{&(0x7f0000002cc0)=""/150, 0x96}, {&(0x7f0000002d80)=""/131, 0x83}, {&(0x7f0000002e40)=""/110, 0x6e}, {&(0x7f0000002ec0)=""/183, 0xb7}, {&(0x7f0000002f80)=""/141, 0x8d}, {&(0x7f0000003040)=""/13, 0xd}, {&(0x7f0000003080)=""/71, 0x47}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x8, &(0x7f0000004180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r15=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x40012002)
sendmsg$IPVS_CMD_SET_DEST(r15, &(0x7f0000004340)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004300)={&(0x7f0000004240)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1c5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000041)
sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000004500)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000044c0)={&(0x7f00000043c0)={0xd4, 0x0, 0xa00, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff8001}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040010)

[   90.002202] audit: type=1400 audit(1736990651.093:7): avc:  denied  { execmem } for  pid=279 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
01:24:11 executing program 7:
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000080)={{0x0, 0x1, 0x6}, 0x2, 0x2, 0x362})
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100))
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000140)={{0x1, 0x3, 0x7f, 0x2, 0x88}, 0x800})
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044085}, 0x90)
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1318, &(0x7f0000000380)={[{0x46, 0x4e00, "b4eb164fbe38002a0a79e1a592a13cc3dbe8111acc3e04bcbd6203150e1eaad1121be136032b26db3231229647d57b33cdbaaea6d7e29929b4f0626c4168812d0b681fe9f52f"}, {0x8, 0x4e00, "5ce46816d7fa6e8d"}, {0xd3, 0x4e00, "49a72befaa78b0af38e45f4fa759b80313f7faacd9bfcb765acf181c68acfbd0edb87d3f3ad8435e71f3e58bfcda30adc5d2fc01378a6680a247bca6942333cbfab7f0c2774a546a26e1e2eb3acfc967535059f5ce1fde0635a933bb4b2c7a80ad7fefe7a246924a6189df6756102fe04ff38a8617168c817a71dde72c9efd202fb5b207f1f30f22cc9c46d1c9f7902935a56f28b4c372659a8090bc9e6387ae655806400a94333df9f8dc2bcaa361f3a45689a46193dea476dac6c53ebf0a5a69051388bfa922cab2632459745a3fc645f1cc"}, {0xeb, 0x4e00, "589cbd24cabd938015a60f541ca28bbe2089759cb8a537c115dcf92ea1f2f6221a4a2dc11ef7bfba7bc417d7a16bcc692232b782a2cdc7e7d8a5d320d8bad87edbdda5992f8632e211501056dbe5a05fedb833a2750aec34a3c998f74c780314df6833320073e7871a797b5a3a6939da1cca960e0fc1eec4a1e6f5521a551ca5342086e5a42ee12e83827e7f82956d70d02b806095019c94b7e11df0561b2cccb4ac7f4659537b5c1684907e5ba75b600b09334e6184efdc3027cb10d5ca2eb9be57f7dee29391a78a76a9418e70a3b9a514c65cd0a8d1458c2d4103c3406f68008d7b18479f786d066458"}, {0xef, 0x4e00, "9bdf2692743dded97d789ef7a558d0dce0fda64a92931215409b585fceda9b15f091b4e5351546eb4fde62abd2d46d547a795a65a681fafbf5665d542d10e892d103f1b73933832274b2066f66db6796da6bf6739c145c1443098ac3c1b7eded16bf953c3ee0baa74d3003f42c314659060c7c921edbc9ea4b851f025d783fce2e112cc8cfca9f7468f5159383986450692641360132ade60a307c1875309c7d09ff9455e4586a44f3d53ae7869676792f6e2d3b46865079b169489087ced56e9555040f131d732ce44f558cc449627a5cdfe6c78cac7a0b08191310fc2282019742780d297ed9c1cecd6170f1cafa"}, {0x1000, 0x4e00, "3ec297ab4a6f8f8cf3fdbf0cdac0f2aae3b5fb4bef04f8aef5899de6b44b0575b3f5b314eeafbbc1aa169c18d40e83e4d1f1b66d5e2f58e60993e88904800a3da555264ad095d6a7ed42ea59372d7494840e8da29f7ad726c00abf47d26771363296cf5bb00e49e7b27110c9cfe07a1e9915193e4e77806eb764ca8a06a8ba59021832fa62ab783bcd46aa04814de9e5c52c0608bb936f220d9afcfc8c1a31c5512b77f691e997332370daaa5a3acf1dd34874ed83d57aadf10822eb9508575688db72fb7d88f176d5e78af7dc715c1a8f5ce66fe9fb5a65e60c12297f1b4d72aa356d43451de7146c6ace071f84ccb336fcb05d9abb3cfacdbaf9054e3dd71d3d7699930e2207a2fd51e3ef714c8f08f30fee180cdf702b20aadedcfd31dc1f7698627a924858730a0b0e2d6510f360d5beffe6634f34ab9ddb3e6829aad9b19d8f48ad4c41c2ea8e930992ca92f0aef74a69eda6a03ea8ed7a6f2b5dfa6ee4fc849c09bbe7195094c76f17c2c102515dc50b0d3a898cc286aa17689aabc177c5e3a7ac5063b81bc61732a5251c984c0de74d47404efa569e78187f72d5c7633f2ad38802b689d67f61c80ce51eeb34b60865ab7ab35d493992d7b512f1143b1446e5884a98188438b5cad9d9831e17ebc51952b524d5217aca14bc3e36786897217ac139d346df84e96a8a684d4a5e9f730437e3ba86dd29ffee666b6feef2f56dfde30a80c56c76e52f29a2cc46d7b1935af2fe5316dddde4d77a66eb7bfd362f5574698591da73b132adb26cc7322486ab80eebe2da8c897cf5790e06dd2479c4aab616e584dbeadd760ea2a411c2aabb8c7860d0f904bff85d38c65162f718ef5b35c352d31a5ac874aec50a45199f7d08b0eb3950fd931ad2363c736b54710d9f9bdf64a37d923c3ec771d8f92687b5106dca94ac2afafa03625305a3ea134311edd17f6e89889d24face66a4b72cdcd7303d9dc4ae03fa99a7357541ecb866415b9c49b10bb4a5ca6968d0fae512d853300ca06d0e8033fd08193dc212f1dbf7bfe2e60a36724cf960a281b3d959d293555a8f5537a81e5f6a499129b8a176996207aeeaa4e04aa49a03b8dc13b695b80b8852eb77599d0c531fa22cfb2248ed87aefc9ecc567dcb4ebc2050b591c9f3f70c3ea78e785dab2c800df716791c9f19ed6d39913979eeedc5c94a4cff7fae5679e682508b7b3259dc2477e93c33fc6e98eaf0ce22feff7201b6d093e60a70193cd604ddc8489847bc96f1ae9fc7263d36627a01be75f133456280c7446f73c49f1a1e812178bed9650ce2d21b1299d489e94d956b8416bc916df51880a21d7bf1bbfe36307b42f4a1aca66d00ed6885a1d2971114f566c5b76a8b2e3d6949e9f468622bbd2b3f7525704d592f9dad697b8e6cce81aa965ec1adfea097d6400c9f984fe1c80a3416cd28c5b6868252becde7e74b5438dcb1490cec9a4efc2e3497ec4273d25b9bc3ab576a10820f2a518d109676d3f72aa4950120d94cb7643fd4f1144b6da231beb632a9d2cd4ddd812b6a36f62510f43ff125f7ee46bc9adab24b3fc9901fd095eca4f8911ccdb05662d0adf0a37e156f1e499f912eeb53d1a006c8cf1b9a955e29b19a43994d4108724a7d3fe0f313cf142fb93a1957c6122000eef37eb3feff3a1296fa9bff159aaa13f5f96e9787617d86cf9d8da78afaa582fe0d9db8bcdd0df4550df7ebe7e0dec4d6590ea52a180ee6c645ea199e43cef2c03a3bf73ba34922cf0c3bcd05194ea7d5f457fbe2a14e2e96d51e300b67fe27a957c8951cf964658801f3a9b4117c0e21d87eed05028d61dfe2835dc2804c9285fb35edd012269ae9a4f08047ca8e58f7f7299cc50494a64c8cf8d54f3701fa2f16bac10f43d2572412a534775715df3786885702e4307a1c03a550a3380070a1ef04847b4dd12aee9954d01e92899cf0100434a9e45eb8b8af36d4d948a95e48078dbfd135113b44b1da0c6302de3ec31f4cd6e9517e8a672c0d8d345d3719d8f59d9c1fa3dd0b362256a861b37f59a2187d5d91b4b8745f867a4a459f713c747174a0f16385e57ffbc17a1623e5a65110fc8d2abe93ee983b08780524b6d3a29e91a6fcd6aef095661d0046d4a639047eb02d2a8115d9ea036bbf8194336d29077d06c547be30f0b1e7a80485514bcd14ebdf41ae57597e08b40125b5dd7a345253c1e1a6af33cee0dffbd36462e3a39af0acb3977ca1b9171e3a6a3c22f074a5125901ea74e1ff6c1a964ecab57ec8a0c1412fc0e1d0f7bbe8f53116ef65c0ff90cc7dd00cf6209286081f611ff7cbf617e135c44abdb52d858314b68ecc10c27ba008453bc8d93abe613666593fd52bfeb8546646321481794e4c37f3e28a30c18e95af94285d3479eb0e5fc77e0ffe0691cc10d9c4f98ceee183140ebf2332384df38e59a1157c543a90b8602f3d27ff8a100fad25869ed7255bb62aae756cbb91eb44702e2221885970776f34139391b57600f6683aaebde32266e5953c7322af2c6493bcd485f2814a3bb82956979ef46832ce7dde8e5972a2ba084f495acda8bc5f92bc6775f4abe1f47aa3c342f77de9e09d7589b90a7e3fa267231def922c4ffcba3bade4e41343b8d408e4dc91050a50091bc70dac15fe4ce26ec68135de3a843679e2eb65ad16bd15014e4fec95cf0b31ece8b3f048986c03a5e301e3f7f35c5f3462b5addd4da31f76b33a5f30a49cfb7845c2100d98385078468fecfdfc36cd6a44b9c5e09562172b790297c462c619b02c02952d131ed0695d147281df9d3bb86e5e5d0d840cb0fedf2766e232424712504c512d733a06b826bad7c0bf214af1d7609b3a2829f4fdcdb243a4f359dee75a3fbebca6b7813829a12fa159431c3c8a91571f9691b097bda9c0c463d4e8f3434ec04810cb783caadb388057fe283e7990086fa68850596045d7f857404e3af77fedf9c0a8c81d4264f9e44498e122db96c94152e5eb6ba1ce1cbcad55c6a44f19a475b787160d0051d3665cb89109cdaeb5a0ab4f88bf73a260778c91edb47296fc8b52e42759539211de3c6e3f00cdc8afd3bcfb4fb740d3be978f7ffe184b70e018196093942bd593612b298eeae460585ec85da7191917c10ccede07c5163dbf070774c7d82b09cf05946fcc4a42b20aa49e33069c6f64f5a8562a5af0e5f3d171c402d8c1b14ad76f277e0b104d1ebd8783cc79dbd425733c3705635f7350aee7722c1c7f2e8f40d94487822c1bc41acd0c6e2591263042fbb2230815b96972da339550d3c9e5f7c452cd85fe7f978950f070eaa5549a5558900513aedd50c56415d136d5c61bd7b34cd76e605c7fd96e613fecebb0d41a6ff54af12bd18979eba8387b17dec47d392141029b2a419aeea17fa07ca4af564b992b366f982721586aa39ec20a414b1cd72f4e552a7742ee8fdd87fa9c4b000bbec9d3b8b9c836ef76142e6d96d30ffe9449bbac0d2f9433d0fd798860bcda9dc1243545f88076569bbacc7daa5ee60b910547eab07beac5b41c861628079f8e00d64cb4fe330aa31091d8e9ae535cf8f4b55ebda693c12f14d3898c0c107b8c0c12e640e26d1c45cfe444c05bb1136f62f46fa8193941344989578571b653a3af5e37be2eb0e13ddbecd782b5a8c22288fdeb76641676f6e6e484200b30c82a0699efe64ac0c4fc9b072911603c6b1479daf6fb1f689aed9e0acef48819c0db1d1bcec8a01b2c8015f278068cd08563a301877bbd38a9008d68c028c1af98e11e0a3455e9ea89bbba29bc5b47dd2fae49c159a00f9096d7d0cb0cff07e249a26d155a45c51861139747eada5f863f5494affcbf5f731989c5518fc03ba39fad546aedfac5a1955bbaf70a79ea44132756623df2f4ae311196246a30200ac672ad7eb9ca81ad074da9eb65d9a839d5dbfc4fd71a7dae06b7ae604919bd5cfaec68f2cdaa3e96bbea9fb867a5619f81a6a59b0ddaa14acbd4a3770d5dd82ccde24d7ab985e5c84048b91161729f40cbf8136b988a6039558f60d28946f7ab41184ce3fed16a45983b09bfb6356ae2afff9811ba3cf4f84858b904d2fd36d378a229dd3a7a4bbe500d19aa89fd73d8e30552af47ea8cbad838fe4b93ae46dfdc4796bb2730e53012dc95de4c9a1eb963ebbe9408b3ed634b8a3ca4cf00f5ad35cfb35d7036f0c4f4aca91790c31aef958689db75b6b5ae76c24374339bae69f624af85dbde38c95ec1c240795e94b8dcb0fe66f6183c609046cb6b63af19308fbc428cd1c62a25f69bc524e674817b27ad91ebc3e441d49b871b31d60224b83594a5d00880e2b48d8ccbcccddffcbd5b8f2614aedac9c2ca8ce80930c8524c3d42cadad1065b2791679f6fe4a7bcce386ee795656a01d08df4553f27898a2ededcce502096cd6adc661149cc279a549445ddab9195653b64bd0e834bc255e66ebc128e629c9a014e183d0dc53ebe5a42eb96898543b38cf29986613ffba3d77c92539a5d669b7df8b415c5ce494718f2553582218b576c26f9c11a0e47cad6d37a759e8a4374a26fd68165b62f4d50c1afaaaa588faf8bb282b7780c28dcdbbab2a2489425c1e22e8cb4bb8ac07c23dd993627018916e1c9ec3a92793b0e2d99eabb32bce002c61c4a6087b6bb8c48ded97dac2cd166b0fdd756c223ee56cb1d94b2ec3198fca2e822df060c2598641cda44a28f5803fc4e42de5b9d09838c6abfea141f647c6f2e7583e2731b0c756383b508ddd5a49c49278c09a014b28330d5dd916fe717091e37dfcb18dfb3600acb1c956a9e34d4128ac65a63898485310d489b45d02c111604656628ad51d78d0447105913d755e5f18f3a6bad6b8c3c9056501f7b1bf3c5bbaae7e3cf4c6fcf800dfc24bdafe0fd59969f0cb5f498313f4924538bd0ef9730b9875f793a7ad67b9c3fcb7f4bccfb28eb6452ed02b602eb8cd514943dff88dc3d41658ff1cfd11d51ea3320d0aa2b1cd84859d190487b74445d67f6b929be6fba772c87e47219588eb3e6aa534e5058ff3f88ac58b2188226edd32da66b6d96fef7953ecdfc51a7603892f73763652ba702a1aa8f8e98bc501070c81152ce009357ba21b2503d6926e02c5bc51cb5f9d0e7919c4b9c31b60086def7fbab380e5c727e218fda20c2c1a175a1cbb2902969a5dd4d87f904a0ab15264d52b260ee47943a5036d0146721e7661fa2e6ae0e0da63e8af99f2a57ef2816b43b78cd855173e2186b93eb2425bbca114ba9e82afad2617dfe1b3c8de02e82f2288c571e9352c6a71a88de0eeadac9b8b7459c95b40549b56f9926e8f9fedc658099d53826b093114755a1a9651228d82130891f4d6d3d19577e5234a7bf50ceaed95e30e29691a0ea82ada0f675e8bf52e0238f89b8cef76ec7fc9ee709075b5cb324d1bea56ed60d1a61b33c7f6d72a968fe250efb10720a88af03f0045e64d965f029e721c32dde6d27dee3619987a9eb4ef8a30c82b85f4c4af89be3d02f21e157167187931de52a65af623d5835b8e9828ed07050c4fcad7ed3aef34a7244a3e56f3f65db75a1a4c349433a7d2a4991054f39d49dbddca1900e7b315be28ec16c21e070b14b005d22df60cd0dcb508490498ef188949b9c69c8c595a2e12a69d1c7f603a224ddf8d659234accb7c63b072d68f6dc4b2c4b9626aa30baf5d9dd4a020becb2ab8cecad7e095302a3cb768b5472825dfe9d83e5f7f9849d34cbf6ec3407212c898926fe5020dc6cf0bfac22f4dfef5c86392bc1e6d549f1c9aefa10ed16e931f962353388ceb28853285"}]})
ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f00000016c0)={0x8, 0x3, 0x3f, 0x6})
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001700)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$tcp_mem(r0, &(0x7f0000001740)={0xfffffffffffffffe, 0x20, 0x1, 0x20, 0xf660}, 0x48)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000017c0)={0x2, 0x1, {0x1, 0x0, 0x40000, 0x1, 0xe13}, 0x8})
syz_io_uring_setup(0x5c16, &(0x7f0000001840)={0x0, 0x8634, 0x2, 0x0, 0x138}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000018c0)=<r1=>0x0, &(0x7f0000001900))
r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000001940), &(0x7f0000001980)=0xe, 0x800)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000001a80)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, &(0x7f00000019c0)=0x80, &(0x7f0000001a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0, 0x0, 0x1, {0x0, r3}}, 0x9)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001ac0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffc714}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)

01:24:11 executing program 5:
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40844}, 0x40)
socketpair(0x2, 0x2, 0x25a, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x90)
recvmsg$unix(r0, &(0x7f00000005c0)={&(0x7f00000002c0), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000340)=""/135, 0x87}, {&(0x7f0000000400)=""/118, 0x76}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [<r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x12140)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000600))
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl1\x00', <r9=>0x0, 0x2f, 0x1f, 0x8, 0x63, 0x0, @private0, @remote, 0x7800, 0x7, 0xff, 0x9}})
sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r8, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000840), r6)
ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000880)={0x1})
socketpair(0x2b, 0x800, 0xffff0001, &(0x7f00000008c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x44000)
ioctl$RTC_AIE_ON(r7, 0x7001)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x535d14de9b36aba9}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xfc, r11, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xdb}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80c4}, 0x8001)
r12 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000c40), 0x440200, 0x0)
ioctl$RNDCLEARPOOL(r12, 0x5206, &(0x7f0000000c80))
r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d00), r5)
sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x64, r13, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x0]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)

01:24:11 executing program 6:
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000180)=""/20, 0x14}, {&(0x7f00000001c0)}], 0x4}, 0x12000)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, &(0x7f0000001340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r0=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}, 0x40003141)
clock_gettime(0x0, &(0x7f0000004200)={<r1=>0x0, <r2=>0x0})
recvmmsg$unix(r0, &(0x7f0000003fc0)=[{{&(0x7f0000001400), 0x6e, &(0x7f0000001500)=[{&(0x7f0000001480)=""/125, 0x7d}], 0x1, &(0x7f0000001540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f00000015c0)=@abs, 0x6e, &(0x7f0000001640), 0x0, &(0x7f0000001680)}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001740)=""/138, 0x8a}, {&(0x7f0000001800)=""/141, 0x8d}, {&(0x7f00000018c0)=""/212, 0xd4}, {&(0x7f00000019c0)=""/183, 0xb7}, {&(0x7f0000001a80)=""/18, 0x12}, {&(0x7f0000001ac0)=""/23, 0x17}], 0x6}}, {{&(0x7f0000001b80)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000001c00)=""/68, 0x44}, {&(0x7f0000001c80)=""/64, 0x40}, {&(0x7f0000001cc0)=""/59, 0x3b}, {&(0x7f0000001d00)=""/210, 0xd2}, {&(0x7f0000001e00)=""/139, 0x8b}, {&(0x7f0000001ec0)=""/96, 0x60}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/160, 0xa0}], 0x8}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003080)=""/239, 0xef}, {&(0x7f0000003180)=""/229, 0xe5}, {&(0x7f0000003280)=""/57, 0x39}, {&(0x7f00000032c0)=""/59, 0x3b}, {&(0x7f0000003300)=""/63, 0x3f}, {&(0x7f0000003340)=""/96, 0x60}, {&(0x7f00000033c0)=""/183, 0xb7}], 0x7, &(0x7f0000003500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000035c0)=""/41, 0x29}], 0x1, &(0x7f0000003640)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000003740), 0x6e, &(0x7f0000003a00)=[{&(0x7f00000037c0)=""/51, 0x33}, {&(0x7f0000003800)=""/180, 0xb4}, {&(0x7f00000038c0)=""/24, 0x18}, {&(0x7f0000003900)=""/229, 0xe5}], 0x4}}, {{&(0x7f0000003a40), 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003ac0)=""/36, 0x24}, {&(0x7f0000003b00)=""/162, 0xa2}, {&(0x7f0000003bc0)=""/64, 0x40}, {&(0x7f0000003c00)=""/56, 0x38}], 0x4, &(0x7f0000003c80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000003d80), 0x6e, &(0x7f0000003f40)=[{&(0x7f0000003e00)=""/128, 0x80}, {&(0x7f0000003e80)=""/49, 0x31}, {&(0x7f0000003ec0)=""/76, 0x4c}], 0x3, &(0x7f0000003f80)=[@cred={{0x1c}}], 0x20}}], 0x9, 0x2102, &(0x7f0000004240)={r1, r2+10000000})
sendto$unix(r12, &(0x7f0000004280)="4332b308f06d170044fbe3460cc75fccebd2a393c31f9a133690b887f48ba219b12733d82c397c1bb1cafe38271786dcc0c7fd0c6d7792d53ceba61866e11d0de90ba96da203ff164fd1dab3d3b579b00546b2745a3e80c5bd7abf081d7c291b87289fa5b55d894190dbbd4a3deab04db8e5b04e80fafb1aad390c7b73de4af62ee0b9724e4d1aa0eae6a0e8b5ee75f903fd9fdb5aef6b8bc7f36b9f83c9122fa0ee0b9d61a064e44e106b2f6a505b1296c565c5599f52e52958dcef1d98ba13456b19a8c8054cf22e62de59a47baf560593d304a27a963e33f1e6206caf7abc36b55805d39ea3fcac2540c42b4c8257724765bd1e85a7c6", 0xf8, 0x80084, &(0x7f0000004380)=@file={0x1, './file0\x00'}, 0x6e)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004440), r11)
sendmsg$IPVS_CMD_DEL_DAEMON(r13, &(0x7f0000004640)={&(0x7f0000004400), 0xc, &(0x7f0000004600)={&(0x7f0000004480)={0x15c, r14, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x958}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x12}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbb}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000)
setsockopt$inet_icmp_ICMP_FILTER(r12, 0x1, 0x1, &(0x7f0000004680)={0x7}, 0x4)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f00000046c0)={0x40, 0xa, 0x1, 'queue1\x00', 0x1})
sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x60, r14, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x88c0)
recvmsg$unix(r8, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f00000048c0)=""/182, 0xb6}, {&(0x7f0000004980)=""/114, 0x72}, {&(0x7f0000004a00)=""/138, 0x8a}], 0x3, &(0x7f0000004b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r15=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x20)
r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004c00), r7)
sendmsg$IPVS_CMD_DEL_DEST(r15, &(0x7f0000004d40)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004c40)={0x98, r16, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}]}, 0x98}, 0x1, 0x0, 0x0, 0x4048010}, 0x20040000)
recvmsg$unix(r5, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004ec0)=[{&(0x7f0000004d80)=""/217, 0xd9}, {&(0x7f0000004e80)=""/33, 0x21}], 0x2, &(0x7f0000004f00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r17=>0xffffffffffffffff]}}], 0x30}, 0x2000)
recvmmsg$unix(r17, &(0x7f0000005c80)=[{{&(0x7f0000004f80), 0x6e, &(0x7f0000005400)=[{&(0x7f0000005000)=""/234, 0xea}, {&(0x7f0000005100)=""/206, 0xce}, {&(0x7f0000005200)=""/178, 0xb2}, {&(0x7f00000052c0)=""/62, 0x3e}, {&(0x7f0000005300)=""/241, 0xf1}], 0x5, &(0x7f0000005480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000054c0), 0x6e, &(0x7f0000005a80)=[{&(0x7f0000005540)=""/241, 0xf1}, {&(0x7f0000005640)=""/70, 0x46}, {&(0x7f00000056c0)=""/191, 0xbf}, {&(0x7f0000005780)=""/62, 0x3e}, {&(0x7f00000057c0)=""/1, 0x1}, {&(0x7f0000005800)=""/250, 0xfa}, {&(0x7f0000005900)=""/105, 0x69}, {&(0x7f0000005980)=""/13, 0xd}, {&(0x7f00000059c0)=""/173, 0xad}], 0x9, &(0x7f0000005b40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}}], 0x2, 0x147, &(0x7f0000005d00))
syz_io_uring_setup(0x3aef, &(0x7f0000005d40)={0x0, 0xe730, 0x4, 0x0, 0x245, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000005dc0)=<r18=>0x0, &(0x7f0000005e00))
syz_io_uring_setup(0x67a, &(0x7f0000005e40)={0x0, 0xa0b, 0x1, 0x0, 0xdf, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000005ec0), &(0x7f0000005f00)=<r19=>0x0)
r20 = epoll_create1(0x0)
syz_io_uring_submit(r18, r19, &(0x7f0000005f80)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, r20, &(0x7f0000005f40)={0x8}, r9, 0x3, 0x0, 0x1}, 0x4d)

[   91.421084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   91.423157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   91.426183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   91.426544] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   91.428268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   91.431813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   91.436891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   91.437416] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   91.440909] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   91.444772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   91.445136] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   91.447264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   91.532884] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   91.537285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   91.539636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   91.561355] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   91.569257] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   91.575323] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   91.613271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   91.624433] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   91.627198] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   91.678912] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   91.692067] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   91.694903] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   91.697046] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   91.699228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   91.702088] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   91.707901] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   91.712822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   91.719071] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   91.719460] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   91.722866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   91.729150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   91.733584] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   91.738616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   91.739153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   91.739733] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   91.746312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   91.746637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   91.768803] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   91.783303] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   91.785036] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   91.785751] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   91.803306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   91.806134] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   91.814545] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   91.820482] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   91.838698] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   93.499291] Bluetooth: hci0: command tx timeout
[   93.499898] Bluetooth: hci1: command tx timeout
[   93.690460] Bluetooth: hci2: command tx timeout
[   93.820113] Bluetooth: hci5: command tx timeout
[   93.820666] Bluetooth: hci6: command tx timeout
[   93.821026] Bluetooth: hci3: command tx timeout
[   93.885043] Bluetooth: hci4: command tx timeout
[   93.885443] Bluetooth: hci7: command tx timeout
[   95.546133] Bluetooth: hci1: command tx timeout
[   95.546745] Bluetooth: hci0: command tx timeout
[   95.739999] Bluetooth: hci2: command tx timeout
[   95.867253] Bluetooth: hci3: command tx timeout
[   95.868047] Bluetooth: hci6: command tx timeout
[   95.868084] Bluetooth: hci5: command tx timeout
[   95.930090] Bluetooth: hci7: command tx timeout
[   95.930770] Bluetooth: hci4: command tx timeout
[   97.596002] Bluetooth: hci1: command tx timeout
[   97.596165] Bluetooth: hci0: command tx timeout
[   97.786256] Bluetooth: hci2: command tx timeout
[   97.914167] Bluetooth: hci5: command tx timeout
[   97.914346] Bluetooth: hci3: command tx timeout
[   97.914838] Bluetooth: hci6: command tx timeout
[   97.978358] Bluetooth: hci7: command tx timeout
[   97.978505] Bluetooth: hci4: command tx timeout
[   99.644110] Bluetooth: hci0: command tx timeout
[   99.644254] Bluetooth: hci1: command tx timeout
[   99.834033] Bluetooth: hci2: command tx timeout
[   99.962105] Bluetooth: hci5: command tx timeout
[   99.962664] Bluetooth: hci6: command tx timeout
[   99.962802] Bluetooth: hci3: command tx timeout
[  100.026050] Bluetooth: hci4: command tx timeout
[  100.026130] Bluetooth: hci7: command tx timeout
[  151.237104] syz-executor.1 (288) used greatest stack depth: 24272 bytes left
[  153.992004] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  153.995009] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  154.004114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  154.016984] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  154.049645] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  154.054778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  154.071588] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  154.076503] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  154.079748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  154.087706] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  154.088392] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  154.093602] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  154.095415] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  154.095850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  154.096569] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  154.108585] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  154.109566] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  154.110000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  154.200800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  154.205291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  154.211264] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  154.251139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  154.254421] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  154.256878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  154.258885] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  154.305229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  154.308866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  154.311458] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  154.315756] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  154.319461] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  154.323666] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  154.324358] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  154.325071] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  154.332511] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  154.333308] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  154.333694] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  154.365234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  154.367730] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  154.368571] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  154.379581] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  154.383539] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  154.386569] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  154.429076] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  154.435641] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  154.445184] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  154.465428] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  154.472572] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  154.478354] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  156.091410] Bluetooth: hci0: command tx timeout
[  156.154056] Bluetooth: hci2: command tx timeout
[  156.154085] Bluetooth: hci1: command tx timeout
[  156.348225] Bluetooth: hci3: command tx timeout
[  156.410102] Bluetooth: hci4: command tx timeout
[  156.410168] Bluetooth: hci5: command tx timeout
[  156.474058] Bluetooth: hci6: command tx timeout
[  156.538053] Bluetooth: hci7: command tx timeout
[  158.138022] Bluetooth: hci0: command tx timeout
[  158.204054] Bluetooth: hci2: command tx timeout
[  158.204197] Bluetooth: hci1: command tx timeout
[  158.394038] Bluetooth: hci3: command tx timeout
[  158.457989] Bluetooth: hci5: command tx timeout
[  158.459038] Bluetooth: hci4: command tx timeout
[  158.521998] Bluetooth: hci6: command tx timeout
[  158.587886] Bluetooth: hci7: command tx timeout
[  160.186282] Bluetooth: hci0: command tx timeout
[  160.252022] Bluetooth: hci1: command tx timeout
[  160.252487] Bluetooth: hci2: command tx timeout
[  160.442028] Bluetooth: hci3: command tx timeout
[  160.506041] Bluetooth: hci4: command tx timeout
[  160.506941] Bluetooth: hci5: command tx timeout
[  160.570023] Bluetooth: hci6: command tx timeout
[  160.635006] Bluetooth: hci7: command tx timeout
[  162.234101] Bluetooth: hci0: command tx timeout
[  162.298949] Bluetooth: hci2: command tx timeout
[  162.298974] Bluetooth: hci1: command tx timeout
[  162.491056] Bluetooth: hci3: command tx timeout
[  162.553978] Bluetooth: hci5: command tx timeout
[  162.555028] Bluetooth: hci4: command tx timeout
[  162.617995] Bluetooth: hci6: command tx timeout
[  162.682194] Bluetooth: hci7: command tx timeout
[  215.819829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  215.822569] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  215.823175] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  215.825609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  215.826392] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  215.829314] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  215.829826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  215.831683] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  215.833112] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  215.833506] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  215.834321] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  215.837169] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  215.943646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  215.953534] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  215.955623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  215.961722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  215.963792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  215.966307] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  216.012054] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  216.019256] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  216.020746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  216.042516] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  216.085552] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  216.087414] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  216.090573] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  216.095926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  216.100576] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  216.107597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  216.108758] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  216.112936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  216.124514] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  216.139455] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  216.145337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  216.148321] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  216.158191] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  216.168083] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  216.245442] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  216.250125] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  216.254103] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  216.260296] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  216.265576] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  216.269152] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  216.352797] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  216.379613] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  216.431205] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  216.460651] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  216.475078] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  216.477268] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  217.850219] Bluetooth: hci1: command tx timeout
[  217.914025] Bluetooth: hci0: command tx timeout
[  218.042053] Bluetooth: hci2: command tx timeout
[  218.171444] Bluetooth: hci3: command tx timeout
[  218.234009] Bluetooth: hci4: command tx timeout
[  218.298087] Bluetooth: hci6: command tx timeout
[  218.426241] Bluetooth: hci5: command tx timeout
[  218.618279] Bluetooth: hci7: command tx timeout
[  219.898008] Bluetooth: hci1: command tx timeout
[  219.962248] Bluetooth: hci0: command tx timeout
[  220.090023] Bluetooth: hci2: command tx timeout
[  220.218470] Bluetooth: hci3: command tx timeout
[  220.282091] Bluetooth: hci4: command tx timeout
[  220.346343] Bluetooth: hci6: command tx timeout
[  220.474333] Bluetooth: hci5: command tx timeout
[  220.667108] Bluetooth: hci7: command tx timeout
[  221.946030] Bluetooth: hci1: command tx timeout
[  222.010072] Bluetooth: hci0: command tx timeout
[  222.139241] Bluetooth: hci2: command tx timeout
[  222.267125] Bluetooth: hci3: command tx timeout
[  222.330030] Bluetooth: hci4: command tx timeout
[  222.394339] Bluetooth: hci6: command tx timeout
[  222.522245] Bluetooth: hci5: command tx timeout
[  222.714236] Bluetooth: hci7: command tx timeout
[  223.995047] Bluetooth: hci1: command tx timeout
[  224.058111] Bluetooth: hci0: command tx timeout
[  224.186951] Bluetooth: hci2: command tx timeout
[  224.315939] Bluetooth: hci3: command tx timeout
[  224.378084] Bluetooth: hci4: command tx timeout
[  224.443097] Bluetooth: hci6: command tx timeout
[  224.569947] Bluetooth: hci5: command tx timeout
[  224.761966] Bluetooth: hci7: command tx timeout
[  278.281350] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  278.287351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  278.290494] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  278.298512] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  278.303480] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  278.306811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  278.609230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  278.613198] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  278.619393] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  278.619702] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  278.625752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  278.636813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  278.642112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  278.647006] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  278.649284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  278.653396] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  278.664589] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  278.666600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  278.667048] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  278.675033] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  278.684235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  278.697374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  278.700284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  278.725209] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  278.749870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  278.755589] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  278.762179] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  278.805168] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  278.833449] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  278.839242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  278.840308] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  278.847026] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  278.861215] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  278.872669] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  278.878319] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  278.883062] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  278.885788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  278.892311] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  278.893268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  278.901600] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  278.927290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  278.929777] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  278.935408] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  278.946423] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  278.965657] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  278.971475] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  279.012249] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  279.028257] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  280.378014] Bluetooth: hci0: command tx timeout
[  280.698092] Bluetooth: hci1: command tx timeout
[  280.761980] Bluetooth: hci2: command tx timeout
[  280.890953] Bluetooth: hci4: command tx timeout
[  280.891376] Bluetooth: hci3: command tx timeout
[  281.018150] Bluetooth: hci5: command tx timeout
[  281.082158] Bluetooth: hci7: command tx timeout
[  281.209993] Bluetooth: hci6: command tx timeout
[  282.426037] Bluetooth: hci0: command tx timeout
[  282.746040] Bluetooth: hci1: command tx timeout
[  282.810192] Bluetooth: hci2: command tx timeout
[  282.938151] Bluetooth: hci3: command tx timeout
[  282.938303] Bluetooth: hci4: command tx timeout
[  283.066269] Bluetooth: hci5: command tx timeout
[  283.130992] Bluetooth: hci7: command tx timeout
[  283.261166] Bluetooth: hci6: command tx timeout
[  284.474074] Bluetooth: hci0: command tx timeout
[  284.795016] Bluetooth: hci1: command tx timeout
[  284.859255] Bluetooth: hci2: command tx timeout
[  284.986020] Bluetooth: hci4: command tx timeout
[  284.987238] Bluetooth: hci3: command tx timeout
[  285.114321] Bluetooth: hci5: command tx timeout
[  285.177985] Bluetooth: hci7: command tx timeout
[  285.306520] Bluetooth: hci6: command tx timeout
[  286.522024] Bluetooth: hci0: command tx timeout
[  286.842576] Bluetooth: hci1: command tx timeout
[  286.905935] Bluetooth: hci2: command tx timeout
[  287.035996] Bluetooth: hci3: command tx timeout
[  287.036418] Bluetooth: hci4: command tx timeout
[  287.161985] Bluetooth: hci5: command tx timeout
[  287.225954] Bluetooth: hci7: command tx timeout
[  287.354984] Bluetooth: hci6: command tx timeout
[  340.677814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  340.679727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  340.685161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  340.689100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  340.692666] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  340.694633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  340.739825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  340.752220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  340.763722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  340.776237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  340.782537] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  340.795823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  340.820317] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  340.825534] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  340.827575] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  340.835801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  340.840592] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  340.843357] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  340.931798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  340.939415] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  340.958274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  340.966006] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  340.970429] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  340.970842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  340.995615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  341.004205] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  341.024777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  341.054778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  341.072642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  341.086181] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  341.086368] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  341.096040] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  341.108695] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  341.127249] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  341.130586] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  341.132626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  341.199168] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  341.208051] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  341.210078] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  341.210497] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  341.212193] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  341.213124] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  341.213512] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  341.232158] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  341.266134] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  341.268021] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  341.270103] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  341.270504] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  342.778695] Bluetooth: hci0: command tx timeout
[  342.841996] Bluetooth: hci1: command tx timeout
[  342.906054] Bluetooth: hci2: command tx timeout
[  343.034254] Bluetooth: hci3: command tx timeout
[  343.162108] Bluetooth: hci4: command tx timeout
[  343.290035] Bluetooth: hci7: command tx timeout
[  343.290405] Bluetooth: hci5: command tx timeout
[  343.354053] Bluetooth: hci6: command tx timeout
[  344.825985] Bluetooth: hci0: command tx timeout
[  344.889962] Bluetooth: hci1: command tx timeout
[  344.954039] Bluetooth: hci2: command tx timeout
[  345.081941] Bluetooth: hci3: command tx timeout
[  345.210193] Bluetooth: hci4: command tx timeout
[  345.338135] Bluetooth: hci7: command tx timeout
[  345.338304] Bluetooth: hci5: command tx timeout
[  345.402219] Bluetooth: hci6: command tx timeout
[  346.874002] Bluetooth: hci0: command tx timeout
[  346.937973] Bluetooth: hci1: command tx timeout
[  347.001967] Bluetooth: hci2: command tx timeout
[  347.129946] Bluetooth: hci3: command tx timeout
[  347.257993] Bluetooth: hci4: command tx timeout
[  347.386027] Bluetooth: hci7: command tx timeout
[  347.386138] Bluetooth: hci5: command tx timeout
[  347.451943] Bluetooth: hci6: command tx timeout
[  348.921990] Bluetooth: hci0: command tx timeout
[  348.986019] Bluetooth: hci1: command tx timeout
[  349.050018] Bluetooth: hci2: command tx timeout
[  349.178620] Bluetooth: hci3: command tx timeout
[  349.306097] Bluetooth: hci4: command tx timeout
[  349.434028] Bluetooth: hci7: command tx timeout
[  349.434189] Bluetooth: hci5: command tx timeout
[  349.498002] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
01:29:18  Registers:
info registers vcpu 0
RAX=ffffffff87f1c580 RBX=1ffff11005715ee0 RCX=ffffffff814f3ede RDX=dffffc0000000000
RSI=0000000000000008 RDI=ffffffff87f08f50 RBP=ffff888030aad340 RSP=ffff88802b8af6d8
R8 =0000000000000000 R9 =fffffbfff0fe11ea R10=ffffffff87f08f57 R11=0000000000000001
R12=0000000000000002 R13=0000000000000004 R14=ffff888030aadd90 R15=ffff88800e215a68
RIP=ffffffff814fbff6 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f4a92415540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f497cba6008 CR3=000000000d374000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff
XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f
XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88802ebefc58 RCX=ffffffff818a26c4 RDX=ffff888015be3780
RSI=ffffffff818a26ce RDI=0000000000000001 RBP=ffffea0001b3ff40 RSP=ffff88802ebefb28
R8 =0000000000000001 R9 =fffff94000367fe8 R10=0000000000000000 R11=0000000000000000
R12=000000000000010d R13=dffffc0000000000 R14=0000000000000000 R15=ffff88802ebefd98
RIP=ffffffff84ab3040 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb1ce0d9540 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb1ce20d570 CR3=0000000035eee000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000ff0000000000000000000000 XMM01=ffffffff00ffffffffffffffffffffff
XMM02=42494c4700342e332e325f4342494c47 XMM03=00000000000000000000000000006f72
XMM04=6f6c77725f646165726874705f5f0079 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000