Warning: Permanently added '[localhost]:28380' (ECDSA) to the list of known hosts.
2025/01/30 02:47:29 fuzzer started
2025/01/30 02:47:29 dialing manager at localhost:36977
syzkaller login: [   69.190432] cgroup: Unknown subsys name 'net'
[   69.272888] cgroup: Unknown subsys name 'cpuset'
[   69.301168] cgroup: Unknown subsys name 'rlimit'
2025/01/30 02:47:47 syscalls: 202
2025/01/30 02:47:47 code coverage: enabled
2025/01/30 02:47:47 comparison tracing: enabled
2025/01/30 02:47:47 extra coverage: enabled
2025/01/30 02:47:47 setuid sandbox: enabled
2025/01/30 02:47:47 namespace sandbox: enabled
2025/01/30 02:47:47 Android sandbox: enabled
2025/01/30 02:47:47 fault injection: enabled
2025/01/30 02:47:47 leak checking: enabled
2025/01/30 02:47:47 net packet injection: enabled
2025/01/30 02:47:47 net device setup: enabled
2025/01/30 02:47:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/30 02:47:47 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/30 02:47:47 USB emulation: enabled
2025/01/30 02:47:47 hci packet injection: enabled
2025/01/30 02:47:47 wifi device emulation: enabled
2025/01/30 02:47:47 802.15.4 emulation: enabled
2025/01/30 02:47:47 fetching corpus: 0, signal 0/0 (executing program)
2025/01/30 02:47:50 starting 8 fuzzer processes
02:47:50 executing program 0:
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x25, 0x3f}, 'port0\x00', 0x1, 0x0, 0x5, 0x9, 0x6b1, 0x50ee, 0x4, 0x0, 0x5, 0xad})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000000c0)={0xffffa010, 0x6, 0x0, 'queue0\x00', 0x4})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000180)={{0xfa, 0x4}, 'port1\x00', 0x4, 0x80000, 0x200, 0x5, 0x0, 0x8001, 0x3, 0x0, 0x0, 0x68})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000240)={0x3, 0x46, 0x2, {0x9, 0x1f}, 0xfff, 0xffffffff})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x800)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000300)={0x3, 0x4, 0x7437, 0x270b, 0x1cee00, 0xc0b})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)={0x9, 0x81, 0x2})
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000400), 0x41, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000440)={{0x86, 0x1}, {0xb4, 0x4}, 0x2, 0x6, 0x5})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000004c0)={{0x1, 0x5}, {0x6, 0x9d}, 0xffff7fff, 0x0, 0x2})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000540)={0x9, 0x9a2a})
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000005c0))
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000600)={0x9, 0x1, 'client1\x00', 0xffffffff80000004, "0122d824aeced6bf", "d79f8ad69cb333b263a41883e4efcc13485a0746c93dd4a59a20e9a47341283c", 0x5, 0x1})
r2 = syz_open_dev$vcsu(&(0x7f00000006c0), 0xc0e, 0x100c0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000700)={{0x8, 0x2}, 'port1\x00', 0x49, 0x160409, 0x5, 0x4, 0x142f, 0x400000, 0x48c, 0x0, 0x1, 0x5})
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000007c0), 0x90200, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000800)={{0x2b}, 0x0, 0x0, 0x4, {0x1f, 0xc2}, 0x1, 0x2f06})
openat$hpet(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000008c0), 0x40080, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000900)={0x567f, 0x2, 'client1\x00', 0x0, "9e7b85395d47beb2", "3c2cbccda622f12e834110ee17f0cf498a9dcaf8226c6fcb8e031c60772a8113", 0xff, 0xae})

02:47:50 executing program 1:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x110, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x8810)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x2800, 0x0)
mount_setattr(r2, &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f00000002c0)={0x0, 0x1, 0x120000}, 0x20)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xec, r3, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc70}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6d}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x44)
write$P9_RRENAME(r2, &(0x7f0000000500)={0x7, 0x15, 0x2}, 0x7)
write$P9_RCLUNK(r2, &(0x7f0000000540)={0x7, 0x79, 0x1}, 0x7)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)={0x2b8, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x10000, @private2, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xafd, @private2, 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x1000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffff, @mcast1, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ab}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffc0}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd7, 0x3, "826f993b5c56997a094c6513b91b980f5517064991793ea4d9fc5f659991ca7b9bd81a119d135a3e728b0ac95037abb64d5da6214b19a2b7170bd71491b2c8e2628974ef3fb724429b7e0d41edbc970b22d5b964d837edafb722d1046ec6221d43e0042435dfc6615eb431e34982c889e3a4fa2cb0d3c88a6fc99b2f97d5d4e64f52cfd4854523e7bd6918e7a18ffaebb9b8f8147eff11e49f8467f7e1c487f26a9f8b809872de4298d3e6e977c09bb161cd1daece1bfbc082e542f351610f8ff00927e062b224de7c96121e6f1c17dd7ff2f6"}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x8800}, 0x10)
socket$inet6(0xa, 0x1, 0x800)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040080}, 0x4001)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000a40)={0x0, <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1d}, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0x19}}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fffffff, 0x71}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000000)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000bc0)={0x6, 0x5, 0x4})
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r2)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000e80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c80)={0x1c0, r5, 0x106, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xef0a49d}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7d1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa71}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x467}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa1}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaf1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_MON={0x4}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4001}, 0x50)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000ec0), 0x101800, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f0000000f00)={0x400, 0x1, 0x1, 'queue0\x00', 0x322})

02:47:50 executing program 2:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x204800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000040)={'erspan0\x00', <r1=>0x0, 0xe1, 0x8000, 0x9210, 0x400, {{0x2b, 0x4, 0x0, 0x2, 0xac, 0x65, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @local, {[@lsrr={0x83, 0x2b, 0x3c, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @rand_addr=0x1]}, @timestamp_addr={0x44, 0x4c, 0x36, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x943}, {@loopback, 0x2}, {@multicast2, 0x200}, {@multicast2, 0x8}, {@loopback, 0x9}, {@remote}, {@multicast1, 0xe97a}, {@multicast2, 0x80}, {@local, 0x800}]}, @ssrr={0x89, 0x1f, 0x7e, [@rand_addr=0x64010101, @multicast1, @empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x22}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x28}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0xc3456774c7d05dde}, 0x4000000)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x23c, 0x0, 0x20, 0x70bd29, 0x335, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x22}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff33eb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x42ac}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000880)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x104, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd78d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f6f6c0d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x66}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0xc0)
r2 = syz_open_dev$vcsu(&(0x7f00000008c0), 0x3, 0x800)
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x148, 0x0, 0x508, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4de}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x143}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff46d7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x4}]}, 0x148}, 0x1, 0x0, 0x0, 0x40800}, 0x40000)
write$P9_RATTACH(r2, &(0x7f0000000b40)={0x14, 0x69, 0x1, {0x8, 0x0, 0x5}}, 0x14)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40820}, 0x4004010)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000c80)={{0x80, 0xb5}, 'port1\x00', 0x2, 0x40000, 0x3, 0x401, 0x81, 0x10001, 0x7, 0x0, 0x0, 0x8})
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000d40)={{0x28, 0x81}, {0x80, 0xff}, 0x7ff, 0x4, 0x3})
write$P9_RREMOVE(r0, &(0x7f0000000dc0)={0x7, 0x7b, 0x2}, 0x7)
r3 = syz_open_dev$vcsn(&(0x7f0000000e00), 0x2, 0x12881)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x140, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x600}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4613}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd8b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000001040)={r1, 0x1, 0x6, @remote}, 0x10)
syz_io_uring_setup(0x294b, &(0x7f0000001080)={0x0, 0xf78d, 0x0, 0x3, 0x3a7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001100), &(0x7f0000001140))
openat$cgroup_int(r2, &(0x7f0000001180)='memory.swap.max\x00', 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f00000011c0)={'tunl0\x00', r1, 0x80, 0x7800, 0x96, 0x2, {{0xe, 0x4, 0x0, 0x7, 0x38, 0x66, 0x0, 0x10, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0xe1, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast2}, {@empty, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}}})

02:47:50 executing program 3:
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, 0x0)
sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0)
mmap$binder(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x20)
mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000005, 0x100010, 0xffffffffffffffff, 0x8000000)
r0 = syz_io_uring_setup(0x2, &(0x7f0000000000)={0x0, 0x4517, 0x1, 0x0, 0x389}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0)
r2 = syz_io_uring_setup(0x6b6, &(0x7f0000000140)={0x0, 0x798a, 0x2, 0x1, 0x15e, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
syz_io_uring_setup(0x3d63, &(0x7f0000000240)={0x0, 0xfd96, 0x1, 0x1, 0x88, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300))
r3 = syz_open_dev$vcsn(&(0x7f0000000340), 0x62d, 0xc000)
io_uring_setup(0x41f0, &(0x7f0000000380)={0x0, 0x2, 0x25, 0x0, 0x26d, 0x0, r3})
r4 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x40, 0x6, 0xca, 0x1, 0x0, 0x10000, 0x94300, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x1, 0x1ff}, 0x1404, 0x4, 0xfffffffa, 0x2, 0x7, 0x7, 0x0, 0x0, 0x525, 0x0, 0x9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x1f, 0x8, 0x0, 0x29, 0x0, 0x5, 0x40010, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000400), 0x6}, 0x14980, 0x3f, 0x4, 0x5, 0x0, 0x80000000, 0x2, 0x0, 0x7, 0x0, 0x81}, 0xffffffffffffffff, 0x9, r4, 0xf)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000540))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xff)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder1\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0xb2)
write$P9_RRENAME(r1, &(0x7f00000005c0)={0x7, 0x15, 0x2}, 0x7)
sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x8000000)

[   89.710144] audit: type=1400 audit(1738205270.535:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
02:47:50 executing program 7:
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'tunl0\x00', <r0=>0x0, 0x8000, 0x0, 0x7fffffff, 0x2, {{0x19, 0x4, 0x3, 0x3, 0x64, 0x67, 0x0, 0x9, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@generic={0x94, 0xd, "3cb728508cda8bc288ec6b"}, @end, @noop, @rr={0x7, 0xf, 0x39, [@private=0xa010100, @rand_addr=0x64010101, @private=0xa010102]}, @timestamp_addr={0x44, 0x24, 0xaf, 0x1, 0x7, [{@loopback, 0x6}, {@multicast1, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}]}, @generic={0x7, 0xd, "71690fc8d9977ed7837ea5"}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6gre0\x00', <r1=>r0, 0x4, 0xe, 0x40, 0x3, 0x0, @loopback, @private2, 0x40, 0x80, 0x8, 0xc647}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000200)={'syztnl0\x00', r1, 0x7800, 0x1, 0x2, 0xb0a, {{0x1b, 0x4, 0x2, 0x8, 0x6c, 0x65, 0x0, 0xdc, 0x4, 0x0, @rand_addr=0x5cd8, @local, {[@end, @lsrr={0x83, 0x7, 0xb2, [@rand_addr=0x64010100]}, @lsrr={0x83, 0xb, 0xf3, [@loopback, @empty]}, @timestamp={0x44, 0x28, 0x13, 0x0, 0xe, [0x2, 0xffffffff, 0xfffffff7, 0x526, 0x879, 0x20, 0x0, 0x5, 0xffffffff]}, @ssrr={0x89, 0x1b, 0xbd, [@empty, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}})
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000340)={0x104, @tick=0x4, 0x1, {0x42, 0x17}, 0x3, 0x2, 0xff})
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000380)=0x3, 0x4)
r3 = socket$inet(0x2, 0x80000, 0x5)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@empty}}}, &(0x7f00000004c0)=0xe8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'erspan0\x00', r4, 0x80, 0x8, 0x9, 0x4, {{0xe, 0x4, 0x1, 0xf, 0x38, 0x66, 0x0, 0x7f, 0x4, 0x0, @private=0xa010100, @multicast2, {[@lsrr={0x83, 0x1f, 0x28, [@empty, @broadcast, @remote, @broadcast, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x26}]}, @timestamp_prespec={0x44, 0x4, 0x4f, 0x3, 0x6}]}}}}})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000005c0)={0x10001, 0x7, 0x0, 'queue0\x00', 0x3})
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000680)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000780)=0xe8)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'syztnl2\x00', &(0x7f00000007c0)={'erspan0\x00', r5, 0x20, 0x7800, 0x20, 0x800, {{0x1a, 0x4, 0x3, 0x3, 0x68, 0x67, 0x0, 0x7, 0x2f, 0x0, @broadcast, @loopback, {[@ra={0x94, 0x4}, @generic={0x89, 0xd, "837260872cc2fa2b694b22"}, @timestamp_prespec={0x44, 0xc, 0xcd, 0x3, 0x2, [{@remote, 0x9}]}, @noop, @lsrr={0x83, 0x1f, 0x2c, [@multicast2, @loopback, @remote, @multicast2, @rand_addr=0x64010101, @remote, @multicast1]}, @noop, @timestamp_addr={0x44, 0x14, 0x4e, 0x1, 0x3, [{@loopback, 0x9}, {@broadcast, 0x81}]}]}}}}})
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = syz_open_dev$vcsu(&(0x7f00000008c0), 0x9, 0xa002)
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000900)={{{@in=@loopback, @in=@initdev}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000a00)=0xe8)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan0\x00'})
write$tcp_mem(r2, &(0x7f0000000a80)={0xd4e0000000, 0x20, 0x2b0000000000, 0x20, 0xffffffff}, 0x48)
accept$packet(r6, &(0x7f0000000b00)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b40)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000c00)={'erspan0\x00', &(0x7f0000000b80)={'gretap0\x00', r8, 0x80, 0x8, 0x6, 0x8001, {{0x13, 0x4, 0x1, 0x5, 0x4c, 0x66, 0x0, 0x40, 0x0, 0x0, @multicast1, @rand_addr=0x64010101, {[@generic={0x94, 0xf, "a12bbabaed4621addaf519c079"}, @end, @lsrr={0x83, 0xb, 0xae, [@multicast1, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x1a, 0x3, 0x7, [{@loopback, 0x8}]}, @generic={0x88, 0xf, "896829977cd0abc15de9ca724f"}]}}}}})

02:47:50 executing program 5:
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4fa, 0x204100)
write$P9_RLCREATE(r0, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x4, 0x1, 0x1}, 0x2}}, 0x18)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080))
r1 = socket$inet(0x2, 0x3, 0x9e)
setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000000c0)=0x6, 0x4)
r2 = syz_io_uring_setup(0x774a, &(0x7f0000000100)={0x0, 0xeaf4, 0x1, 0x0, 0x94, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x20010, r2, 0x10000000)
socket$inet(0x2, 0x5, 0x3)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000000240), 0x6, 0x60000)
ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x11fad2)
write$P9_RUNLINKAT(r0, &(0x7f0000000280)={0x7, 0x4d, 0x2}, 0x7)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40841)
r7 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x5, 0x0)
write$P9_RSETATTR(r7, &(0x7f0000000400)={0x7, 0x1b, 0x1}, 0x7)
read$usbmon(r6, &(0x7f0000000440)=""/90, 0x5a)
r8 = socket$packet(0x11, 0x2, 0x300)
syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r8, 0x5229, {}, 0x3, 0x1, 0x0, {0x0, 0x0, r5}}, 0x6)

02:47:50 executing program 4:
write$9p(0xffffffffffffffff, &(0x7f0000000000)="4b153ae65afb4c987567bbf46b00e49c6d2561496094fc882189311b2061b747236677ec9ddb49e16b307dbe28807369c9109928000b7a7c8ed4fb3b4cc4a9d07465", 0x42)
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x339301, 0x0)
write$P9_RLOCK(r0, &(0x7f00000000c0)={0x8, 0x35, 0x1, 0x2}, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100)="4b909f65f1ab966f2b77d3a0cd221876af0c53e9a228d168fdf6150d5f101fdd25b8a2b1d1302ad59683f833792d11972dcf4318ea958f5e6e24c0290524c6be90f9f4d5f53d9b7b36004333a0330a1164eeff88b5c8a193997d23dff13744c6253c9fac9d6c332f3d76322ab6b550537b8b51e5d337f46e3c164e59ddc2565b213e4d8094ba94546644e4e23016", 0x8e, r0}, 0x68)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000280)={0x8, 0x35, 0x1}, 0x8)
r2 = accept$packet(r0, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000340)={0x0, 0x1, 0x6}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xc0, 0x0, 0x302, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20}, 0x40080cc)
io_uring_setup(0x7666, &(0x7f0000000500)={0x0, 0x1049, 0x10, 0x3, 0xc6, 0x0, r1})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', r3, 0x8000, 0x8, 0x20, 0x3, {{0x7, 0x4, 0x1, 0x7, 0x1c, 0x64, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2, {[@ssrr={0x89, 0x7, 0xaa, [@rand_addr=0x64010101]}]}}}}})
syz_io_uring_setup(0xb9a, &(0x7f0000000600)={0x0, 0x2485, 0x35, 0x2, 0xb9, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0))
r5 = syz_open_dev$vcsu(&(0x7f0000000700), 0x4, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x84, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040040}, 0x0)
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000900), 0x460880, 0x0)
write$P9_RFLUSH(r7, &(0x7f0000000940)={0x7, 0x6d, 0x1}, 0x7)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0)
write$P9_RFLUSH(r8, &(0x7f00000009c0)={0x7, 0x6d, 0x2}, 0x7)

02:47:50 executing program 6:
r0 = io_uring_setup(0x620b, &(0x7f0000000000)={0x0, 0xd4d, 0x2, 0x3, 0x25f})
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x110, r0, 0x10000000)
sched_rr_get_interval(0x0, &(0x7f0000000080))
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RLCREATE(r2, &(0x7f0000000100)={0x18, 0xf, 0x3ff, {{0x1, 0x2, 0x3}, 0x4}}, 0x18)
getuid()
syz_open_dev$usbmon(&(0x7f0000000140), 0x23, 0x101000)
socket$inet_udplite(0x2, 0x2, 0x88)
write$P9_RREAD(r2, &(0x7f0000000180)={0x8b, 0x75, 0x2, {0x80, "8abd8de6ccf9a1f8eedfde894bf842a7dc35199283e665c22279e0c562806b287a6e049fb5d8e7014e59b2af5ff35c2672e4fe741275fa47017fc3167c064f7bc7e93acd21c3370be7a23611350372cc4ae49b5a54c9169316a448d4543fffa685dc50213cbcf70bb042bf16f3248f4be81c77257ec971a5b9ad72a208ddbbd5"}}, 0x8b)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000240)=0x1, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000280)=0x1, 0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8)
write$P9_RXATTRCREATE(r2, &(0x7f0000000400)={0x7, 0x21, 0x1}, 0x7)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000440)={'syztnl0\x00', <r6=>r5, 0x20, 0x40, 0x1, 0x9, {{0x15, 0x4, 0x3, 0x6, 0x54, 0x67, 0x0, 0x9, 0x29, 0x0, @broadcast, @multicast2, {[@noop, @lsrr={0x83, 0x13, 0x9c, [@multicast2, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010101, @remote]}, @cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x5, 0x12, "9cc1390f308b5bb9bad8075eb60bb8b4"}, {0x1, 0xf, "95f6b7ce14f7518fbe1060ae92"}, {0x0, 0x5, "e28895"}]}]}}}}})
write$P9_RXATTRCREATE(r2, &(0x7f0000000500)={0x7, 0x21, 0x1}, 0x7)
write$P9_RREMOVE(r2, &(0x7f0000000540)={0x7, 0x7b, 0x2}, 0x7)
write$P9_RSETATTR(r2, &(0x7f0000000580)={0x7, 0x1b, 0x1}, 0x7)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f00000005c0)={'ip_vti0\x00', r6, 0x8, 0x7800, 0x1000, 0xfffffff9, {{0x25, 0x4, 0x2, 0x4, 0x94, 0x64, 0x0, 0xbd, 0x29, 0x0, @multicast1, @local, {[@lsrr={0x83, 0x1f, 0x1b, [@local, @multicast1, @remote, @broadcast, @broadcast, @local, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0x64, 0x3, 0x3, [{@broadcast, 0xfffffffb}, {@empty, 0x9}, {@rand_addr=0x64010101, 0x2}, {@rand_addr=0x64010101, 0x1ff}, {@broadcast, 0x4}, {@empty, 0x6}]}, @timestamp={0x44, 0x8, 0xc6, 0x0, 0x7, [0x7]}, @ssrr={0x89, 0x17, 0x3d, [@local, @dev={0xac, 0x14, 0x14, 0x42}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @noop, @ssrr={0x89, 0xb, 0x95, [@loopback, @broadcast]}]}}}}})

[   91.013690] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   91.019737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   91.024707] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   91.031954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   91.037672] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   91.043594] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   91.065077] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   91.084795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   91.086835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   91.093685] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   91.096630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   91.099633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   91.106850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   91.114897] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   91.119509] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   91.126075] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   91.127884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   91.135536] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   91.148748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   91.168778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   91.171421] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   91.184599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   91.190595] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   91.194033] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   91.218556] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   91.231755] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   91.245762] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   91.262663] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   91.267463] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   91.269758] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   91.295862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   91.303525] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   91.312698] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   91.337044] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   91.342837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   91.351773] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   91.355209] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   91.358750] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   91.362065] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   91.366816] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   91.372944] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   91.377180] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   91.386874] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   91.392807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   91.395991] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   91.398240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   91.401184] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   91.401529] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   93.098738] Bluetooth: hci0: command tx timeout
[   93.227340] Bluetooth: hci1: command tx timeout
[   93.227423] Bluetooth: hci2: command tx timeout
[   93.291126] Bluetooth: hci3: command tx timeout
[   93.354475] Bluetooth: hci4: command tx timeout
[   93.418538] Bluetooth: hci5: command tx timeout
[   93.483511] Bluetooth: hci6: command tx timeout
[   93.483528] Bluetooth: hci7: command tx timeout
[   95.146432] Bluetooth: hci0: command tx timeout
[   95.275363] Bluetooth: hci1: command tx timeout
[   95.275386] Bluetooth: hci2: command tx timeout
[   95.338433] Bluetooth: hci3: command tx timeout
[   95.404210] Bluetooth: hci4: command tx timeout
[   95.468304] Bluetooth: hci5: command tx timeout
[   95.530337] Bluetooth: hci7: command tx timeout
[   95.530394] Bluetooth: hci6: command tx timeout
[   97.194426] Bluetooth: hci0: command tx timeout
[   97.322440] Bluetooth: hci2: command tx timeout
[   97.322466] Bluetooth: hci1: command tx timeout
[   97.387386] Bluetooth: hci3: command tx timeout
[   97.450395] Bluetooth: hci4: command tx timeout
[   97.514606] Bluetooth: hci5: command tx timeout
[   97.578542] Bluetooth: hci7: command tx timeout
[   97.578620] Bluetooth: hci6: command tx timeout
[   99.243344] Bluetooth: hci0: command tx timeout
[   99.370556] Bluetooth: hci1: command tx timeout
[   99.371406] Bluetooth: hci2: command tx timeout
[   99.435442] Bluetooth: hci3: command tx timeout
[   99.499555] Bluetooth: hci4: command tx timeout
[   99.564278] Bluetooth: hci5: command tx timeout
[   99.626394] Bluetooth: hci6: command tx timeout
[   99.629280] Bluetooth: hci7: command tx timeout
[  151.640098] syz-executor.3 (281) used greatest stack depth: 23392 bytes left
[  153.832031] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  153.836792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  153.839030] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  153.844134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  153.847788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  153.850677] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  153.999203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  154.010775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  154.015587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  154.023984] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  154.031429] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  154.033433] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  154.047656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  154.051512] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  154.053088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  154.065873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  154.069924] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  154.072483] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  154.180053] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  154.181061] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  154.211642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  154.212677] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  154.215009] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  154.216111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  154.235806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  154.238138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  154.250104] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  154.250867] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  154.252098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  154.252978] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  154.296456] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  154.307333] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  154.312867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  154.325792] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  154.334499] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  154.341053] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  154.453004] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  154.467727] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  154.476280] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  154.504112] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  154.526336] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  154.536588] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  154.788020] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  154.791647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  154.793770] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  154.814443] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  154.816529] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  154.817830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  155.882341] Bluetooth: hci0: command tx timeout
[  156.074503] Bluetooth: hci1: command tx timeout
[  156.138529] Bluetooth: hci2: command tx timeout
[  156.331349] Bluetooth: hci4: command tx timeout
[  156.332288] Bluetooth: hci3: command tx timeout
[  156.458414] Bluetooth: hci5: command tx timeout
[  156.587374] Bluetooth: hci7: command tx timeout
[  156.908394] Bluetooth: hci6: command tx timeout
[  157.930565] Bluetooth: hci0: command tx timeout
[  158.122776] Bluetooth: hci1: command tx timeout
[  158.188380] Bluetooth: hci2: command tx timeout
[  158.378529] Bluetooth: hci4: command tx timeout
[  158.378898] Bluetooth: hci3: command tx timeout
[  158.508279] Bluetooth: hci5: command tx timeout
[  158.635402] Bluetooth: hci7: command tx timeout
[  158.954375] Bluetooth: hci6: command tx timeout
[  159.978400] Bluetooth: hci0: command tx timeout
[  160.171369] Bluetooth: hci1: command tx timeout
[  160.234372] Bluetooth: hci2: command tx timeout
[  160.426423] Bluetooth: hci3: command tx timeout
[  160.426530] Bluetooth: hci4: command tx timeout
[  160.556291] Bluetooth: hci5: command tx timeout
[  160.683388] Bluetooth: hci7: command tx timeout
[  161.003347] Bluetooth: hci6: command tx timeout
[  162.026338] Bluetooth: hci0: command tx timeout
[  162.218427] Bluetooth: hci1: command tx timeout
[  162.282335] Bluetooth: hci2: command tx timeout
[  162.476287] Bluetooth: hci3: command tx timeout
[  162.476777] Bluetooth: hci4: command tx timeout
[  162.603347] Bluetooth: hci5: command tx timeout
[  162.732496] Bluetooth: hci7: command tx timeout
[  163.051875] Bluetooth: hci6: command tx timeout
[  216.374518] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  216.381895] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  216.384100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  216.391775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  216.398428] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  216.400616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  216.439641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  216.445718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  216.448638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  216.458441] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  216.462696] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  216.465503] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  216.565592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  216.570304] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  216.573784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  216.583535] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  216.588199] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  216.591675] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  216.696026] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  216.701099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  216.703480] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  216.709145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  216.712642] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  216.716663] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  216.784337] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  216.789686] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  216.792983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  216.800990] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  216.804302] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  216.806629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  216.916843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  216.922740] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  216.965800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  216.988202] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  216.995020] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  217.004600] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  217.015471] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  217.022842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  217.032631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  217.045047] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  217.046950] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  217.054647] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  217.089690] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  217.090997] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  217.093574] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  217.152629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  217.165422] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  217.172754] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  218.475462] Bluetooth: hci0: command tx timeout
[  218.540291] Bluetooth: hci1: command tx timeout
[  218.668290] Bluetooth: hci2: command tx timeout
[  218.795309] Bluetooth: hci3: command tx timeout
[  218.923378] Bluetooth: hci4: command tx timeout
[  219.115309] Bluetooth: hci5: command tx timeout
[  219.179318] Bluetooth: hci6: command tx timeout
[  219.308296] Bluetooth: hci7: command tx timeout
[  220.522362] Bluetooth: hci0: command tx timeout
[  220.586369] Bluetooth: hci1: command tx timeout
[  220.714385] Bluetooth: hci2: command tx timeout
[  220.842308] Bluetooth: hci3: command tx timeout
[  220.971481] Bluetooth: hci4: command tx timeout
[  221.162313] Bluetooth: hci5: command tx timeout
[  221.226423] Bluetooth: hci6: command tx timeout
[  221.354406] Bluetooth: hci7: command tx timeout
[  222.571303] Bluetooth: hci0: command tx timeout
[  222.634572] Bluetooth: hci1: command tx timeout
[  222.764415] Bluetooth: hci2: command tx timeout
[  222.891365] Bluetooth: hci3: command tx timeout
[  223.018374] Bluetooth: hci4: command tx timeout
[  223.210331] Bluetooth: hci5: command tx timeout
[  223.274881] Bluetooth: hci6: command tx timeout
[  223.402306] Bluetooth: hci7: command tx timeout
[  224.619295] Bluetooth: hci0: command tx timeout
[  224.683311] Bluetooth: hci1: command tx timeout
[  224.811303] Bluetooth: hci2: command tx timeout
[  224.939301] Bluetooth: hci3: command tx timeout
[  225.067353] Bluetooth: hci4: command tx timeout
[  225.259317] Bluetooth: hci5: command tx timeout
[  225.323426] Bluetooth: hci6: command tx timeout
[  225.451309] Bluetooth: hci7: command tx timeout
[  278.391982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  278.396587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  278.399668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  278.413054] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  278.417601] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  278.421717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  278.650764] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  278.657335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  278.666480] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  278.671028] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  278.674166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  278.677599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  278.684520] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  278.686965] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  278.689833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  278.689845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  278.709986] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  278.712344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  278.720831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  278.724654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  278.726141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  278.740523] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  278.745891] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  278.749428] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  278.816055] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  278.821624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  278.827108] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  278.829166] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  278.831610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  278.839387] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  278.847778] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  278.850093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  278.852881] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  278.854513] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  278.856801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  278.862807] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  278.867056] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  278.868918] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  278.883761] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  278.898649] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  278.913967] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  278.932053] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  278.939808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  278.950860] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  278.961381] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  278.961486] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  278.972608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  278.985759] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  280.490568] Bluetooth: hci0: command tx timeout
[  280.746749] Bluetooth: hci2: command tx timeout
[  280.810738] Bluetooth: hci3: command tx timeout
[  280.811987] Bluetooth: hci1: command tx timeout
[  280.938607] Bluetooth: hci4: command tx timeout
[  281.066707] Bluetooth: hci7: command tx timeout
[  281.067943] Bluetooth: hci6: command tx timeout
[  281.130676] Bluetooth: hci5: command tx timeout
[  282.538343] Bluetooth: hci0: command tx timeout
[  282.794349] Bluetooth: hci2: command tx timeout
[  282.858362] Bluetooth: hci3: command tx timeout
[  282.858867] Bluetooth: hci1: command tx timeout
[  282.986623] Bluetooth: hci4: command tx timeout
[  283.115453] Bluetooth: hci6: command tx timeout
[  283.115903] Bluetooth: hci7: command tx timeout
[  283.179860] Bluetooth: hci5: command tx timeout
[  284.587491] Bluetooth: hci0: command tx timeout
[  284.842359] Bluetooth: hci2: command tx timeout
[  284.907382] Bluetooth: hci3: command tx timeout
[  284.907874] Bluetooth: hci1: command tx timeout
[  285.034578] Bluetooth: hci4: command tx timeout
[  285.163691] Bluetooth: hci7: command tx timeout
[  285.165362] Bluetooth: hci6: command tx timeout
[  285.227278] Bluetooth: hci5: command tx timeout
[  286.635278] Bluetooth: hci0: command tx timeout
[  286.891286] Bluetooth: hci2: command tx timeout
[  286.955605] Bluetooth: hci3: command tx timeout
[  286.956046] Bluetooth: hci1: command tx timeout
[  287.083361] Bluetooth: hci4: command tx timeout
[  287.211281] Bluetooth: hci7: command tx timeout
[  287.211741] Bluetooth: hci6: command tx timeout
[  287.274287] Bluetooth: hci5: command tx timeout
[  340.536831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  340.541879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  340.544415] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  340.552545] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  340.555657] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  340.558394] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  340.664355] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  340.669716] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  340.671971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  340.678826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  340.681833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  340.686857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  340.754884] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  340.762666] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  340.766978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  340.778666] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  340.790512] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  340.795399] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  340.811709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  340.826793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  340.834179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  340.843609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  340.850581] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  340.854605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  340.945649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  340.967843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  340.973796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  340.977720] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  340.981259] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  340.981836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  340.986708] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  341.010764] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  341.011785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  341.019039] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  341.030769] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  341.033062] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  341.065056] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  341.068474] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  341.070701] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  341.090534] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  341.098662] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  341.133898] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  341.145772] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  341.184422] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  341.186963] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  341.217928] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  341.235388] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  341.261774] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  342.634356] Bluetooth: hci0: command tx timeout
[  342.762354] Bluetooth: hci1: command tx timeout
[  342.827309] Bluetooth: hci2: command tx timeout
[  342.954360] Bluetooth: hci3: command tx timeout
[  343.147287] Bluetooth: hci5: command tx timeout
[  343.211343] Bluetooth: hci4: command tx timeout
[  343.275335] Bluetooth: hci6: command tx timeout
[  343.402625] Bluetooth: hci7: command tx timeout
[  344.682606] Bluetooth: hci0: command tx timeout
[  344.810638] Bluetooth: hci1: command tx timeout
[  344.874609] Bluetooth: hci2: command tx timeout
[  345.003526] Bluetooth: hci3: command tx timeout
[  345.194421] Bluetooth: hci5: command tx timeout
[  345.258355] Bluetooth: hci4: command tx timeout
[  345.322301] Bluetooth: hci6: command tx timeout
[  345.450613] Bluetooth: hci7: command tx timeout
[  346.730331] Bluetooth: hci0: command tx timeout
[  346.858287] Bluetooth: hci1: command tx timeout
[  346.922278] Bluetooth: hci2: command tx timeout
[  347.050261] Bluetooth: hci3: command tx timeout
[  347.242264] Bluetooth: hci5: command tx timeout
[  347.306615] Bluetooth: hci4: command tx timeout
[  347.370333] Bluetooth: hci6: command tx timeout
[  347.498292] Bluetooth: hci7: command tx timeout
[  348.778283] Bluetooth: hci0: command tx timeout
[  348.906301] Bluetooth: hci1: command tx timeout
[  348.970287] Bluetooth: hci2: command tx timeout
[  349.100237] Bluetooth: hci3: command tx timeout
[  349.290275] Bluetooth: hci5: command tx timeout
[  349.354290] Bluetooth: hci4: command tx timeout
[  349.419406] Bluetooth: hci6: command tx timeout
[  349.546314] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
02:52:58  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=1ffff11006a3fec5 RCX=ffffffff8150272e RDX=0000000000000000
RSI=0000000000000008 RDI=ffff88800d53260c RBP=ffffffff86405174 RSP=ffff8880351ff618
R8 =0000000000000001 R9 =fffffbfff0c8087a R10=ffffffff864043d7 R11=0000000000000001
R12=ffffffff85cfc440 R13=ffffffff81a2bd6e R14=ffff88800d531bc0 R15=ffffffff81aeeb8f
RIP=ffffffff815027b0 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f134bdb9540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd94ca17260 CR3=0000000015d98000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff
XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69
XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=0000000000000002 RCX=ffffffff813a9a88 RDX=0000000000003a9b
RSI=0000000000003a9a RDI=ffffffff86c4b660 RBP=ffff88806cf09ad0 RSP=ffff88806cf09a08
R8 =0000000000000000 R9 =ffff88806cf09ab8 R10=000000000003ab5c R11=0000000000008488
R12=ffff88806cf09ad8 R13=ffff88806cf09ac0 R14=ffff88806cf09ab9 R15=ffff88806cf09a78
RIP=ffffffff81349069 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555ec5f400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbd6b18b710 CR3=0000000031072000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ff00000000000000ff00000000000000
XMM02=0000000000000000ff00000000000000 XMM03=00000000000000000000ff0000000000
XMM04=00000000000000ff0000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000