Warning: Permanently added '[localhost]:57225' (ECDSA) to the list of known hosts.
2025/04/26 06:03:19 fuzzer started
2025/04/26 06:03:20 dialing manager at localhost:46629
syzkaller login: [   98.693665] cgroup: Unknown subsys name 'net'
[   98.870285] cgroup: Unknown subsys name 'cpuset'
[   98.925613] cgroup: Unknown subsys name 'rlimit'
2025/04/26 06:03:37 syscalls: 200
2025/04/26 06:03:37 code coverage: enabled
2025/04/26 06:03:37 comparison tracing: enabled
2025/04/26 06:03:37 extra coverage: enabled
2025/04/26 06:03:37 setuid sandbox: enabled
2025/04/26 06:03:37 namespace sandbox: enabled
2025/04/26 06:03:37 Android sandbox: enabled
2025/04/26 06:03:37 fault injection: enabled
2025/04/26 06:03:37 leak checking: enabled
2025/04/26 06:03:37 net packet injection: enabled
2025/04/26 06:03:37 net device setup: enabled
2025/04/26 06:03:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/26 06:03:37 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/26 06:03:37 USB emulation: enabled
2025/04/26 06:03:37 hci packet injection: enabled
2025/04/26 06:03:37 wifi device emulation: enabled
2025/04/26 06:03:37 802.15.4 emulation: enabled
2025/04/26 06:03:37 fetching corpus: 0, signal 0/0 (executing program)
2025/04/26 06:03:39 starting 8 fuzzer processes
06:03:39 executing program 0:
kexec_load(0x8000, 0x5, &(0x7f0000000300)=[{&(0x7f0000000000)="5f86ed2a0f2513e832c2dcc8a0857503d1d42eccdd8d97c05bd0f5eb72f2c6f7af513b492af95998fd15631bf457754054eabbbb6f3606148d428ecea0c33c6095d8a89f1e9872", 0x47, 0x80, 0x4}, {&(0x7f0000000080)="70dabcce564879686eecd83e4fd0e55f2d513155a012748338aea5c0342e40886e7cb9415b5b1d81b384b5bde7f7cf0263b986ad31bced243e15f909992cb1e8acc56a22f7d4e28647d8946eadaf7ce1d8", 0x51, 0x6, 0xffffffff7fffffff}, {&(0x7f0000000100)="a415465453a2af73e94b6900eef6b0f3ac957b7fe8a4aea43c8a3570587d7cee9ca6fdd136a46d9c720f465a8954ed2709b5a2cc501a036f5f6eee3f77005b032ec49f81a7d016a2857790f8f4e7659fa48fa0590b05f373587e", 0x5a, 0x6}, {&(0x7f0000000180)="cd95b3409c60efc79a15625f3ce408b53240851316ce4e0f41bf6d12d1047f21800a275323d8f8a26583e9828537a9bdea6458e137bce07a8f76496a9d75f70f76ada692d00b55e139c2298e0aafd65ac2cd5481b7a3c6e03ed23f0b40ed45a1653c76c849adcafb4a7205ac9284d55c9b43e4d16815be9eb2a1890b75ca170823f59c7907db252f1410f1e87363687197e56427f95441ebd9c4", 0x9a, 0x8, 0x4}, {&(0x7f0000000240)="6bd021e667292b1a3e1e6f4c2ebbcc5ee2e8725239426e455734cc6954b7ef884727b19eb9fc856b7265d42c6933389dcdb7d00f0eec18fe5b13d61192b7e6f1896102760096d7a2e7fa285de6f33229122fd7533da9d4d39d3eb5d439cbc181abfe60e1402148df6d9f954ca877d79f7b1d6ff29c3d971b33e42c8b065df22d1bca17c7d4f6151c205fa63aa0d4de0a26bb81fb953685fa92f6378e470f5dc67e1b6667b9866e7d86a7b9ec3f4d2b07d4dd2910", 0xb4, 0xaa0, 0x2}], 0x80000)
kexec_load(0x2, 0x7, &(0x7f0000001780)=[{&(0x7f00000003c0)="cd3d8902b4b706e13bb3a61117ea6ae4a80ec8ab964651c0227e7dbe077905abce26e4cdca6f6681cca542b9b0ea0054", 0x30, 0x70, 0x1}, {&(0x7f0000000400)="669dce1d759ffe626ed6a6e55c9a798dcee13f811ccadf41549cfcf5f389f0b98e92cce891e054628665c1ef8d6a39b7b3b10ccd0c7a674df1e706552df37b2c0ff2e0ae0726955d1b15dd2cf68aa99b46315d321809dfcb00d32453bb42ed5911c40032d9297b4f7ee71e1a16110c32beb7bd3128cf0a97fb51e0646c4ee89cea744b32a41b251bf5989597c4f17548c01765d7fe0d2021a024d7de0697eaabe7c5edc49412edfcac6b4072bd20744f9f7fea8cf69b773f7266dc9b2e803ee8d5c1571596be94d6899acd3de4fb6b652cd554a5352c6838a08967735d64fc7c434b1b", 0xe3, 0xfa5, 0x20000000000000}, {&(0x7f0000000500)="da7bc6068c98f48c7c7b9d7c7e3f810cf5c617e2e41144331fb913c4e4592fe77ce870e971681a682abab835bd71a04a553fba7c81cb6011c70cfbace556089aa80dc1f464546ed92558fe011f1cdbaa600ff8542b2d3303c5ea9cd7df4c88a64b7e290cfd8646301c4a66d6d7561290401a8a5b190d6e197b8788ab4211004c47598ac7344c0353917fea3e7665f7558be8f9df1983144f3b77435f7a53d165d594a79225b2cc3b7c91ec4e5c3cf2417806d6615eca74f7741dbb6c2476a94699c2f5f42d1ef44aad12536c1cc6761f65a9668d137c098110805a0b4445c8ef72dfae8669cd9eb6ee9d8a360c390bdf7a60b728fd6e2684fa6a94f3438ba111998055abf494ff39e43f2f7974024b9f50b7a4d60c2b4f1a578723ed29bf85c9bb48dd336ae04ba90c0a13184514266c717e9d28f053a3ce0f3bd1a3a0a119ae1300d501ce41eedf8f851475b291252e7e75d7305be620141bde09e901736ddbe10520c98e1e5fa77423937f3e7d1aa61cea7d8b7bd32d2c8cb6c4f3a4b99694ac0bf9ccb0b60a640d05774239d4dee8de28aded4d9a0ef3e0fbb8a2f12872c461055047d0018a697d2ff2706f6c337f6dfc2a04ad3b8ff832073a88958e9a255981e6a16131eec7b3b60b157de876db20c33e4472153c0f61bf1e852bd483a74835b4fe89655d6dee5e68f6f6b891fa938e05c97b0162357be013d3f6239ee2de8780d8c82246048a925440da087965a6ac6d52575fd571f704b47e18f4edd896ec2fe4497207eb48d7c50bc3eb169b5f7addb4bd04ae898d087578451a69cba29de6d5c979ba162b74374ee7ebbd7e9d563be39189a086551cbac9954a0dffa9457c63c94f729c90b95b8728828063a1f9e704dbd2517f6087e777d86d64978e8dd4eef4953b57e645ec82654403ecd367877b9711c8d17108b25d98426f87f59f1d1241bc73334bdffcd7beccd2d2d3595a7c74040450541906d2bcf8137efe9609278af46cab4398de12dfa81edb3fe3ddffafd04b6a4f3c624d277d35be35ab8b72907568cd8e4bfd95eb23290f904114ce829db598e532bee24ac71e668e3b212b7c473cdfc7682e6f10e96516e9b5e8dea23d19ba2245fe79b6834f12289ba09b704caa83834a71d1448e135281fc7a436153f4186ba3e309508cda897b0e0046815bbb9d26183e81b251fae32b59c5e444effdb581c0677bd988fd57fef3012f7891c384c585952ecce1e95eb74e1b898f196aca23b3a78446ae4c3bab7e2c52e5267c5e8974a02d8cfedad5152cb5c44197644a93b8e98c247ef316eca96855bc85f15756857e64efbe70eefccdd078f962d18f1254c9fd4b2ca7b4d8f423e89ad4ab7973e799444fd79e30697b2284fab820f962088b83cb753ccbe639b08eb5ba34586fc77e9c22056614e6e298d90c9f6949c847eeefbd5de88b14e089e5cf0c0632c8d7a22d4f7d478b62b83fce670b406ee601f0c4feab0ebe98cf564a109105cd712d5b7c622d5f70d666e012b0ad5b0b42a2d09da6c8365b8836fb03a8bec0e376d39ad9c1e1866e1780d77b47e491377d3aeb35a55133d86bac328e068af48747d500428452eda3036b45598f4d02bb897a04ad22b9b97f4be73264fc9704b3a2e9bf6b705d49acb58833e95693af0966feece547f5c97c73fc017f3dfcae90becb06d078e1fc916c278cfadf5c0b4674104f13aefdbd1a33793099c86cff61486ddcf180cb8f48adbff9ffbbeb540b005b5e71b2b46e2dbd3e6a161a3510073e4e8af0c8cf610f326db4479f7e8ba561212517de918c5bb403f5da9680d2b429c51eadbb9030bbe46e5cfde9d35c5a4ccea95f2663fc46216cdfcac3d3b78407c514cf6c1c864ea275cf061a5bfb540ad47a82f998eb941b61d97088197aea574038bbc0d0d7c69d9d057da15e56a61534b6e4a1e04815a938ac54c384c4589fabaafc1f0a681d8d548ad5cc204516cd454fb7c5d365163ea307b6a539d08606fa4c483c350c3b7cc52a93b8f1af705785f20ff74ae6c4bab6cfb5451231d621a4809f3641d8f5d638e0466e3bb12f502546e0587538fb846e57058ba3e1d1cc093f1bf4975b75684f02c0b232362315eff223a0cc073ac7da11de25374add7fa188ea6f8c8a84597303abae7e7fa3c027daae6fbbe54eb89ac371cd91d5e22bdf8614d54f808929847cee3d670fe409f2c26ad9634408b00857f7d2954cd042e513f936c49366c144f0d982e4cc198c9248e045a8e76d87520385c04fb36b1b88719c8860acd277b43be60ff16343314630f618a85beca72682d58aa8911f7db8620662e96baacde807135f04f3ab5a8f70a8a72dc900ece49e9a66d1edb74428c1b1e424433b7d1eb6b86301451329d698f2117290947177c9d35179d42544f15eb4f17db9fe4592311699d749ae100dd925f16a1a44a108c7e7d063c2f8055167ca3246193b67cac7e6528e5e6a4cd0b761d5ad17a65d9bb4ff57b7e6d80cd45a6280e978bdc3fbc46872d540b0dc6c86d0e03908fd815af240a85d0e3e6fc7f8538f6c4c52764594a2ced9d84af37af234119369b4025a1e445a3cc95851e5e3433669acf1c7aa0712e326a14d2ca057c5ada5f151a42b5b0a0f92eb0b67168310afa7b81adb3c9aa3034cf4148c41a04f2e14bb60d66c8ed167e2a58c0850f3ec864864405b04246ca9e703dded2617886a5f2f8d16adb3cae71788fa706f5fdcc52e7c6c76bbebb9f66226f88bbfaabb49cfb95e9d578f3ed1deec9d54629159c2e9382e3277f56a32a81fea5afad6ff9439926237f2e6f59b5d30e85aba09f8305a87a7982bde9307157a8f3e55082d9e985d57df6e816d20231564659819f397e1e8936b882f6cf006273d5dfee452ad66ae327392b0097aa3ab62555c0cbd12b82edf3662a0617b5a8d5f64b6a750c8c868d1c0cd4b2046afaba4533296e6cc6c09d203051ad177905fde474408840f3ea374cbd9882d492d0420eeb58bc652382a4ac4a7d70a898f36ac3342c4f3cb94f571b49ead6834d92e20f31355769eaf9ee5e4525bcb3876c6ae7ecbbbcc4fcb501548b2fbf701f6b845c3011f4e4cfdc5f0d1078635afb430158db84fa585ad9c04bf7941ab08aacd4281fc5c321bf6a23013d83e9f2f35221de38458aa021ed6e054b44c7f13c3c79ca2bc0139e8ffe4604b3e0645f98e088a78ca63b126fa5a748c36c64465f5cdbeb70006ec52e2d4da769526e46e66363e3bfd8b2b6528765a0b345b81e5c52c6b2ebcb3d6d06665f4c5a5a949e1c451bc6f2f82fd272cfccfe8fd4971c43e5293b0cc81da97e104cf9c87b39daea41af7740a946b94e313666eb70571885d696bb3a2a6886e88fb676f9042fb038adde18d75856b005b35aba5b6e8806798cda6732b95546018e66cb749417c410c23219be64766090863a13f0397b50801ce1894620ef135fcbd18bf50c4de1ea343e4e51ac7cdf33e4f6a1c2d1195c89ac0982b11c8fe4c3ec777405a1d44f8fdbe5a83214c8a47d756789da1aaa581d4c12b6dd770dff2665e32e47821f56716a0b5c2b9456b98178dfb0dfe09ee5d828978fad8a628e0a366d13077efbda78ced587d62bc50bc0c41713206d4f8c35b038aa1cc564d149e56a8d2009f8d2a04af866605bb470f63c99ce7ab9b45a711acac777928b257afd495fbc69150873ecd91e8b8fa1f72f439e43e1df4d3c0c3097f908efd2b4d7c777fee9d24f578af9ac76a97f453ef1cbb6ffa1f99bd9fafec333d993397232e3a6c0d461764daf5f7325c1a7b5e1dc8eaa6390269882cecb1775431cd14d313da67a659d40f4667e0165c9ce61e2fd97088f2487e0e0c22c3329971e119051d891311f4379b25fe46f3daf004949342af7c16eec2511d261db26dd897eb3ae5bc3bcbf86de21b488340f728a4c0ab437ca7e4e06f23eb1f5c64b7e20792695d085e029434b8a28d971631497d2cd57ca7264a7123f86775ce6e55d995d7465e3c544a70a5032de578e70ffa77586beb7eaa5d1e80b251f2a05143673ea447f4c315dbedf195d4b09c2576da2a4eacb22460cbc20bf74554fd8591efa54c0246ceb07965026339f702457d1bb96353c3d783b44a1f09bba51bc9831d6dc5ba54118014a4697b81f16b5b62c0975bc420fe226a56b7dca22d88a7feddf413402198872eeda0182d46e42681e89d61f8e679481faccb5c6db0d393b8032554a72b41df1935438198ea0351a81fdce1743bc92ecafa749e33f2a4b91e704564ad7aae67c5586a035e4148b899b53fa1f39e86fb3e62ad75e4ea6117a3051ad9bc685c3bf7a9bf8dc62f03427f7eb0fbd0b8c7258c142afc536225c327fa48c96a9cf3e88067b61bf526cf528fa264dcaf9dd7d9f5f41527d8ef11e6bf7fda6abfca1d63237e14e7c9f2a8630b88d2d6bcd4f0d114e4db4e175d2996fd1d020bf2138354d8bb7fb28333ad7ae74d3f615843b801b64e5ec5be3d82a312d369ce01a96ba98453d84a0d6a2c81cf3f657d2883f1f82cb0e9108c2e9de2d48a73ef0a98b5fae8fba73f1a70be7160f8fd66077a05d6a422c160dc37c674b47f14eade706567e643a1440c07773d2bad561571639a3cfeb2f2e230841d41ebdbb70010afa7d675e25e4f942a2401d49acf622d9821e7692fe097f00fb89dea66ca12b4cd052d551272f4ddc500bdb48a2449b32cf14e8376b8cbb08a629db36198b61959cbd919c3b04ffb9a5600b42b8fdc0b19190ad642b9d34213d93d2b278d9fc26cd8a2d263d730705c30080e633f85ad3b71024392a1ff0725565f46131a3b34c533f366489d7edbaf735ae07b49d7879939cec6fbb3e62752a103547d2586c0959703715c518cab3625919e892cd5b98054c8c80506293caebc6fe90ee4ac71eb98cce61d45bdc0295313bcffd920a12ef981bcf3f3ed9317f650600545ffadd62a7f3ba786fa58de7c43906de267adb5f31ab2054d5dea27d1fa5b9872106983e3afe0682e74d49ce07f0183367b200fd1112d2cbe017c1cd223dfc8ad0f83c51f4fd509480dddd435398587c7c2f92d1624d9216fdfa4b058b9c0d9dfcc75f50b0a84c7f750b5b4dc0abc8f420df1e28896d38e62e342a0547571f9903c56ba80de62414618158bcc72f36ac8803d4968170580d9bc1ad173d40e293dfced097769ac0320682f0b67d5def60febf3fbeabf079045f1e001739a542944b3747b81ba367c16a90cf7a431a5b959d523976f8df88683297bbc1de41178f3eb9fd6e37747dcedd01be412c8f8bbe4a08061bdadb1c16c5d1ae9bf5031bf0acb332583d13d3ca676204192dd9ea0669e4366d7e0cd996c4438da828e16f93be411195e786e8a505ac716a9a139c0159b945b7b105fca78baa2717eb50974724114d609ba0dd46bd9713b8d321cdd2fb589899bc472966a2444a349eab99972a5325f95fd687b657be71bed836717ee512f0f310abd76aa28d5d2f5c7e5748f53bc99b9fd7832ddf60e67a1280f405cbdd578a2ea0e43d83627cd28b6d8bd7d7d4e4276bd2a7774b6821b8f285e3273f028de58fbdf64ced1f291a81a3677ac2845bfd50482b8e0408b370127c6e30550cd8d8658fcf05059bce535d05832581c41fc3941f0d0b6f485acc42b4751fda02711d92709e9dcf4f5724458db13f71866b35423f54e3f470d8e44a0cb7b9692656df449ccf122cec8c144e75bc3262633da69483c1e26187b5e6b201743cff56465e2267d74b48c09848692af1d6c87872d27612da48839e3f5853bb5e29414700e58c6", 0x1000, 0x30000000000, 0x1}, {&(0x7f0000001500)="b308d76bf891c203c0e6d9579c01205a26794803b5d84fa3b915491cda2858d413be1172ebea7ec4b652f74a1bf0b0638eaae62a37335a12e18a81f1bd50e083f4c777f45750b60a5d07ae3ea08077ab656750de99561966dad450013efee8e633e8dcc3d7b58485ce9b65a979849e0bcd56a892e49b22e0e0ac722156205c0b4e6ce899420865e4885828", 0x8b, 0x6, 0x5}, {&(0x7f00000015c0)="d1c5f980d255844deaaa9f7a852a2a510bff5d47234feafeeb1451735cb43a402049802899c9102f0b0de7272ac6e39a2fc56df2e9a0b5984abda36762cec048a1d598427d990a2f6ecc48dc29036a45cf711b4c7e4e94beede944dad8239901a323a346b6fabfaec839f3df96025477e24084452a8e9fff20436294d671d83dc99d854ffdd39380123ab99e", 0x8c, 0x7, 0x6}, {&(0x7f0000001680)="75bcb350231ddceba58cef436b5b6cbd5c04876c48b8bb9611a595a014a65e2172d9691fb93a0d5f7b955a5447c148b045b2", 0x32, 0x100, 0x200}, {&(0x7f00000016c0)="2ef7173ea5536d008b577b9681da39cd4137c4cbcfda6fdaaa898209bcb37e14f5d4ad397b2c72782f330c3f30e6b89e02d7dc673eb6377f0eed5421df05c87575c9039a5aeaf9fb449da8777e9afc1343abea55f515947bcc584ba8ee7dcf61fc99933f241a163d5715fb3d4b1cf9d1da46f7e4583285b4ce4e9ac48ace96ab567fa570e612df5e3a41b574289145", 0x8f, 0x8, 0x8000}], 0x150000)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004800)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001980)={'security\x00', 0xb9, "7e96020c218e4c073bfefe8d72f624329e227e56412e9f5d49d1a0d950886584a493b9f74b9d7b1590496441b529b0903eecc541a972e19dcae930cfe2abf5060ec9ed8b1304fa79035e97ea9c242dd27d28838d3abb7ed0662f49673f2c46d80d50e6e9c1a5231e04b05ba9b1e05e329f7e8013390e21f81f9a1f100192e7dab0b65cac04bdca459d2b6c4b057cd866227c21e06d24786dcf8e36835b36a722be5779c8cf6c190f1c8156f6fa2b9b1064eb5e9889d8c4128f"}, &(0x7f0000001a80)=0xdd)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/class/tty', 0x66200, 0x106)
perf_event_open(&(0x7f0000001ac0)={0x2, 0x80, 0x1, 0x0, 0x18, 0x40, 0x0, 0x9, 0x400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xf742, 0x4, @perf_config_ext={0xfffffffffffffc00, 0x2}, 0x80, 0x6, 0x6, 0x3, 0x8, 0x6259, 0x0, 0x0, 0x8, 0x0, 0x80000000}, 0x0, 0x0, r0, 0x3)
r1 = perf_event_open(&(0x7f0000001bc0)={0x1, 0x80, 0x3, 0x40, 0x40, 0x3, 0x0, 0x9, 0x2001, 0xd, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000001b80)}, 0x0, 0x100000000, 0xe0e5, 0x3, 0x4, 0xef4, 0x9, 0x0, 0x3f, 0x0, 0xc3df}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000001c40)='security\x00')
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001d00)={'erspan0\x00', &(0x7f0000001c80)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0x7, 0x6, {{0x14, 0x4, 0x1, 0x2, 0x50, 0x68, 0x0, 0x80, 0x29, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x27, 0x51, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x34}, @multicast2, @broadcast, @loopback, @rand_addr=0x64010102]}, @generic={0x45, 0xf, "6e9adb305b801bde8733de051d"}, @noop]}}}}})
r3 = epoll_create(0xfffffffe)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001d40))
r4 = syz_open_dev$vcsu(&(0x7f0000001d80), 0x101, 0x8002)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001dc0)='/sys/class/misc', 0x400000, 0x8)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e00)='/sys/class/msr', 0x80002, 0x5b)
r6 = socket(0xb, 0x800, 0x48)
setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000009080), 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000009180)=@IORING_OP_WRITEV={0x2, 0x5, 0x2000, @fd, 0x10000, &(0x7f0000009140)=[{&(0x7f00000090c0)="f01936b507db54f9c892f05b1e07b463ea441b263088526c33b1ee7657", 0x1d}, {&(0x7f0000009100)="09e914026b62844f1ab721b179c8667d18f4e66c105d926854eabe0ddd22cb85a683f04e61debd62f376", 0x2a}], 0x2, 0xc, 0x0, {0x2}}, 0x9)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000092c0)={&(0x7f00000091c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000009280)={&(0x7f0000009240)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x48045)

06:03:39 executing program 1:
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x4011)
r0 = eventfd2(0x2, 0x800)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000240)=r0, 0x1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2800}, 0x8000)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}]}, 0x48}}, 0x20090)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000700), 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xf0, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x11}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4f2c}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4008081}, 0x8000080)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x9c, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa3f3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x60000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200088c1}, 0x40)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xc4, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa93}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe1e}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44000}, 0x24000000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r4, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000f40)={&(0x7f0000000e80), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}}, 0x40000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r4, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000014)

06:03:39 executing program 2:
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @broadcast}, 0xc)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000040)=0xe10, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', <r1=>0x0, 0x4, 0x0, 0x81, 0x0, 0xf, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x10, 0x1, 0xfff}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'sit0\x00', r1, 0x29, 0x7, 0x2, 0x2, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x40}, 0x700, 0x0, 0x100, 0x80000001}})
sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xe1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24}, 0x4911)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x90)
setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000400)=0x5, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', r1, 0x20, 0x40, 0x6d2e1c59, 0x40, {{0x17, 0x4, 0x3, 0x0, 0x5c, 0x66, 0x0, 0x3f, 0x29, 0x0, @broadcast, @multicast2, {[@noop, @ssrr={0x89, 0xb, 0x78, [@broadcast, @multicast1]}, @timestamp={0x44, 0x14, 0x92, 0x0, 0x3, [0x8, 0x2, 0x1, 0x5]}, @end, @noop, @noop, @lsrr={0x83, 0xf, 0x32, [@dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x43}]}, @end, @timestamp_prespec={0x44, 0x14, 0x87, 0x3, 0x0, [{@multicast2, 0x7}, {@local, 0x4}]}]}}}}})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan3\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xfffffffffffe0006}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x240488c0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x38}}, 0x20040050)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$inet(r6, &(0x7f00000007c0)={0x2, 0x0, @private}, &(0x7f0000000800)=0x10, 0x800)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x1, 0x9fe, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, 0x7800, 0x20, 0x8, 0x6}})
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20008804)

06:03:39 executing program 3:
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x8a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x9000)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3f}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14010}, 0x0)
clock_gettime(0x2, &(0x7f0000000240))
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c085)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/oops_count', 0x1483, 0x12c)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
getsockname$inet(r1, &(0x7f0000000a40)={0x2, 0x0, @private}, &(0x7f0000000a80)=0x10)
clock_gettime(0x4, &(0x7f0000000ac0))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf04e3bf0570832d7}, 0x4)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000d80)={&(0x7f0000000c40), 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x88, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x120, 0x0, 0x300, 0x70bd2a, 0x6, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff80}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x92}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x741f3479}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x58, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x10}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40)
shmget(0x2, 0x4000, 0x80, &(0x7f0000ffb000/0x4000)=nil)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000001100)={0x40000000})
recvmmsg(r1, &(0x7f00000027c0)=[{{&(0x7f0000001140)=@generic, 0x80, &(0x7f00000023c0)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/203, 0xcb}, {&(0x7f00000022c0)=""/113, 0x71}, {&(0x7f0000002340)=""/79, 0x4f}], 0x4, &(0x7f0000002400)=""/135, 0x87}, 0x6}, {{&(0x7f00000024c0)=@pppoe, 0x80, &(0x7f0000002700)=[{&(0x7f0000002540)=""/177, 0xb1}, {&(0x7f0000002600)=""/211, 0xd3}], 0x2, &(0x7f0000002740)=""/81, 0x51}, 0x3f5}], 0x2, 0x21, 0x0)
clock_gettime(0x0, &(0x7f0000002900)={<r4=>0x0, <r5=>0x0})
pselect6(0x40, &(0x7f0000002840)={0x81, 0x50, 0x3ff, 0x3, 0x5, 0x100000000, 0x7ec, 0x10001}, &(0x7f0000002880)={0xa61b, 0x9, 0xffffffffffffff7f, 0x10000, 0x2cb4, 0x80000001, 0x4, 0x3}, &(0x7f00000028c0)={0x0, 0x8, 0x6, 0xfffffffffffffffe, 0x0, 0x4, 0xb81, 0xfffffffffffffffc}, &(0x7f0000002940)={r4, r5+60000000}, &(0x7f00000029c0)={&(0x7f0000002980)={[0x3]}, 0x8})

06:03:39 executing program 4:
r0 = syz_io_uring_setup(0x5ade, &(0x7f0000000000)={0x0, 0xc54f, 0x1, 0x3, 0x152}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
r2 = syz_io_uring_setup(0x2ce8, &(0x7f0000000100)={0x0, 0x2a3f, 0x10, 0x2, 0x313}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r3=>0x0)
r4 = epoll_create(0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, r4, &(0x7f0000000200)={0x10}, 0xffffffffffffffff, 0x3, 0x0, 0x0, {0x0, r5}}, 0x8bf)
io_uring_setup(0x66bd, &(0x7f0000000280)={0x0, 0x4e83, 0x4, 0x0, 0x277, 0x0, r0})
r6 = io_uring_setup(0x4a2b, &(0x7f0000000300)={0x0, 0x8670, 0x1, 0x3, 0x223, 0x0, r2})
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
r7 = epoll_create(0x8000)
epoll_pwait(r7, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x5, 0x9, &(0x7f00000003c0)={[0x5]}, 0x8)
r8 = syz_open_dev$vcsu(&(0x7f0000000400), 0x2, 0x208900)
r9 = shmget(0x0, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil)
shmat(r9, &(0x7f0000ffb000/0x2000)=nil, 0x0)
syz_io_uring_setup(0xd36, &(0x7f0000000440)={0x0, 0x936c, 0x8, 0x3, 0x4d}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
memfd_create(&(0x7f0000000540)='%{]\xed.\'.@\'**{}\xb9-::\x00', 0x4)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000580)=r8, 0x1)
r10 = getpgid(0xffffffffffffffff)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r10, 0x7, r0, &(0x7f00000005c0)={r4, r6})
sendmsg$IPVS_CMD_SET_SERVICE(r8, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x51}, 0x8000)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000740)=r8, 0x1)

[  117.887071] audit: type=1400 audit(1745647419.853:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
06:03:39 executing program 5:
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000001080)={'nat\x00', 0x0, 0x6, 0x1000, [0x8, 0xffffc00000000000, 0x8, 0x0, 0x0, 0x3], 0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/4096}, &(0x7f0000001100)=0x78)
r0 = io_uring_setup(0x3ace, &(0x7f0000001140)={0x0, 0x5fb9, 0x1, 0x2, 0x388})
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000011c0)={0x2, 0x0, @multicast1}, &(0x7f0000001200)=0x10, 0xc00)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000001240)={0x4, {{0x2, 0x4e23, @private=0xa010100}}, 0x1, 0x7, [{{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e24, @multicast1}}]}, 0x410)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x43567fc440f0dd1c}, 0xc, &(0x7f0000001880)={&(0x7f00000016c0)={0x18c, 0x0, 0x1a26, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd0}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x1a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb62}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x60c2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x56}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2404c004)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001900)='/sys/bus/clocksource', 0x391000, 0x80)
io_uring_enter(r3, 0x1a30, 0x38d9, 0x0, &(0x7f0000001940)={[0x40]}, 0x8)
io_uring_enter(r0, 0x681b, 0x8d0c, 0x3, &(0x7f0000001980)={[0x3]}, 0x8)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r4 = syz_io_uring_setup(0x352e, &(0x7f00000019c0)={0x0, 0xafcf, 0x10, 0x1, 0x1e0, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001a40), &(0x7f0000001a80))
io_uring_setup(0x558b, &(0x7f0000001ac0)={0x0, 0xa7fe, 0x10, 0x1, 0x33c, 0x0, r4})
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000001b40)=0x7, 0x4)
setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000001b80)=0x6, 0x4)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000001bc0)={@local, @multicast2}, 0xc)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffbff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
io_uring_setup(0x1eb, &(0x7f0000001d40)={0x0, 0x6c6, 0x20, 0x1, 0x192, 0x0, r0})

06:03:39 executing program 6:
r0 = syz_io_uring_setup(0x689f, &(0x7f0000000000)={0x0, 0xc27d, 0x8, 0x3, 0x12}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0))
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x20, 0x400, 0x0, {0x0, r2}}, 0x4)
shmget(0x1, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil)
shmget(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x13c, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x617e}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4040}, 0x800)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_io_uring_setup(0x1065, &(0x7f00000004c0)={0x0, 0xe650, 0x2, 0x2, 0xef, 0x0, r0}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580))
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6)
r7 = io_uring_setup(0x3b2f, &(0x7f00000005c0)={0x0, 0x122, 0x10, 0x3, 0x13})
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0xc2013, r7, 0x10000000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x12)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001700), r4)
sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000001840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0x84, r10, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa0000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9a9}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf885}]}]}, 0x84}}, 0x4002070)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r8)
sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x74, r12, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200b}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000)

06:03:39 executing program 7:
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8936, &(0x7f0000000040)={'veth0_to_batadv\x00', @ifru_hwaddr=@broadcast})
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe812}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000040)
r0 = socket$netlink(0x10, 0x3, 0xa)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x48010}, 0x22000085)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/libata', 0x191884, 0x110)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'sit0\x00', <r3=>0x0, 0x2f, 0x40, 0x80, 0x2, 0x20, @remote, @empty, 0x20, 0x20, 0x6, 0x1}})
r4 = accept4$inet(r2, &(0x7f00000004c0)={0x2, 0x0, @dev}, &(0x7f0000000500)=0x10, 0x800)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x140, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4c}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x28}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffa}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4040000}, 0x4001)
socketpair(0x2b, 0x5, 0x101, &(0x7f0000000740)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), r0)
sendmsg$GTP_CMD_GETPDP(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x68}}, 0x4000000)
accept4(r5, &(0x7f0000000900)=@rc={0x1f, @fixed}, &(0x7f0000000980)=0x80, 0x180000)
r8 = accept4(r4, &(0x7f0000001e00)=@ethernet={0x0, @local}, &(0x7f0000001e80)=0x80, 0x800)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001f00), r5)
sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x28, r9, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14)
accept4$inet(r2, &(0x7f0000002000)={0x2, 0x0, @loopback}, &(0x7f0000002040)=0x10, 0x80400)
recvmmsg(r6, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000002080)=""/83, 0x53}, {&(0x7f0000002100)=""/196, 0xc4}, {&(0x7f0000002200)=""/228, 0xe4}, {&(0x7f0000002300)=""/236, 0xec}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/74, 0x4a}, {&(0x7f0000003480)}], 0x7, &(0x7f0000003540)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000004540)=@un=@abs, 0x80, &(0x7f0000004700)=[{&(0x7f00000045c0)=""/33, 0x21}, {&(0x7f0000004600)=""/219, 0xdb}], 0x2, &(0x7f0000004740)=""/253, 0xfd}, 0x6506}, {{&(0x7f0000004840)=@hci, 0x80, &(0x7f0000004d80)=[{&(0x7f00000048c0)=""/224, 0xe0}, {&(0x7f00000049c0)=""/174, 0xae}, {&(0x7f0000004a80)=""/128, 0x80}, {&(0x7f0000004b00)=""/154, 0x9a}, {&(0x7f0000004bc0)=""/175, 0xaf}, {&(0x7f0000004c80)=""/29, 0x1d}, {&(0x7f0000004cc0)=""/120, 0x78}, {&(0x7f0000004d40)=""/46, 0x2e}], 0x8, &(0x7f0000004e00)=""/180, 0xb4}, 0x10000}, {{0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000004ec0)=""/246, 0xf6}, {&(0x7f0000004fc0)=""/255, 0xff}, {&(0x7f00000050c0)=""/195, 0xc3}, {&(0x7f00000051c0)=""/190, 0xbe}, {&(0x7f0000005280)=""/32, 0x20}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/234, 0xea}], 0x7}, 0x2}], 0x4, 0x2000, &(0x7f0000006540))

[  119.151117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.156462] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.161559] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.165916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.168349] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  119.340256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  119.349059] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  119.350995] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  119.361149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  119.369342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  119.378492] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  119.388515] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  119.391330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  119.421253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  119.425496] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  119.429482] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.436093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  119.444974] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  119.449108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  119.465321] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  119.470911] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  119.471715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  119.475579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  119.479436] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  119.482112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  119.483294] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  119.485460] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  119.487362] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  119.495387] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  119.498148] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  119.500071] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  119.503041] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  119.517387] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  119.521167] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  119.522205] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  119.522926] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  119.525404] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  119.530021] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  119.544215] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  119.546438] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  121.184224] Bluetooth: hci0: command tx timeout
[  121.438901] Bluetooth: hci1: command tx timeout
[  121.567546] Bluetooth: hci6: command tx timeout
[  121.567574] Bluetooth: hci2: command tx timeout
[  121.631707] Bluetooth: hci7: command tx timeout
[  121.631781] Bluetooth: hci4: command tx timeout
[  121.632538] Bluetooth: hci3: command tx timeout
[  121.634028] Bluetooth: hci5: command tx timeout
[  123.232297] Bluetooth: hci0: command tx timeout
[  123.487088] Bluetooth: hci1: command tx timeout
[  123.616373] Bluetooth: hci6: command tx timeout
[  123.617544] Bluetooth: hci2: command tx timeout
[  123.679829] Bluetooth: hci7: command tx timeout
[  123.680524] Bluetooth: hci5: command tx timeout
[  123.682059] Bluetooth: hci3: command tx timeout
[  123.682714] Bluetooth: hci4: command tx timeout
[  125.279265] Bluetooth: hci0: command tx timeout
[  125.535351] Bluetooth: hci1: command tx timeout
[  125.663109] Bluetooth: hci2: command tx timeout
[  125.664194] Bluetooth: hci6: command tx timeout
[  125.727379] Bluetooth: hci3: command tx timeout
[  125.729182] Bluetooth: hci4: command tx timeout
[  125.729242] Bluetooth: hci5: command tx timeout
[  125.729977] Bluetooth: hci7: command tx timeout
[  127.326852] Bluetooth: hci0: command tx timeout
[  127.582832] Bluetooth: hci1: command tx timeout
[  127.710996] Bluetooth: hci2: command tx timeout
[  127.711467] Bluetooth: hci6: command tx timeout
[  127.774894] Bluetooth: hci3: command tx timeout
[  127.775348] Bluetooth: hci7: command tx timeout
[  127.775847] Bluetooth: hci5: command tx timeout
[  127.776279] Bluetooth: hci4: command tx timeout
[  179.337758] syz-executor.4 (287) used greatest stack depth: 24328 bytes left
[  181.744604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  181.747026] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.749998] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  181.752218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.754555] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  181.756722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.763426] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.764608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  181.766555] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  181.770077] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  181.819013] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  181.827044] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  181.832004] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  181.836902] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  181.840372] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  181.842886] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  181.847110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  181.850129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  181.851096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  181.862016] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  181.867519] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  181.870288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  181.872414] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  181.877252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  181.879559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  181.885106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  181.896929] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  181.900619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  181.928374] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  181.958315] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  181.968628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  181.977720] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  181.985211] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  181.995247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  182.009042] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  182.011972] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  182.014514] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  182.020277] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  182.023247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  182.024851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  183.839872] Bluetooth: hci1: command tx timeout
[  183.839904] Bluetooth: hci0: command tx timeout
[  183.966873] Bluetooth: hci4: command tx timeout
[  183.968303] Bluetooth: hci2: command tx timeout
[  184.030834] Bluetooth: hci3: command tx timeout
[  184.031705] Bluetooth: hci5: command tx timeout
[  184.094943] Bluetooth: hci7: command tx timeout
[  184.095026] Bluetooth: hci6: command tx timeout
[  185.886844] Bluetooth: hci0: command tx timeout
[  185.887965] Bluetooth: hci1: command tx timeout
[  186.015682] Bluetooth: hci4: command tx timeout
[  186.016344] Bluetooth: hci2: command tx timeout
[  186.079966] Bluetooth: hci5: command tx timeout
[  186.080450] Bluetooth: hci3: command tx timeout
[  186.143023] Bluetooth: hci6: command tx timeout
[  186.143505] Bluetooth: hci7: command tx timeout
[  187.935018] Bluetooth: hci1: command tx timeout
[  187.935369] Bluetooth: hci0: command tx timeout
[  188.062822] Bluetooth: hci2: command tx timeout
[  188.064061] Bluetooth: hci4: command tx timeout
[  188.127095] Bluetooth: hci5: command tx timeout
[  188.127570] Bluetooth: hci3: command tx timeout
[  188.190816] Bluetooth: hci6: command tx timeout
[  188.191840] Bluetooth: hci7: command tx timeout
[  189.983012] Bluetooth: hci0: command tx timeout
[  189.984099] Bluetooth: hci1: command tx timeout
[  190.111216] Bluetooth: hci4: command tx timeout
[  190.111695] Bluetooth: hci2: command tx timeout
[  190.174899] Bluetooth: hci3: command tx timeout
[  190.175368] Bluetooth: hci5: command tx timeout
[  190.240783] Bluetooth: hci7: command tx timeout
[  190.241227] Bluetooth: hci6: command tx timeout
[  244.094494] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  244.105426] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  244.111077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  244.125363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  244.131134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  244.134065] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  244.138209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  244.159082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  244.175669] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  244.185587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  244.187637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  244.204994] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  244.214167] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  244.230319] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  244.237411] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  244.353726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  244.361283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  244.375150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  244.384563] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  244.393445] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  244.396387] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  244.404367] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  244.406569] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  244.415096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.416544] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  244.564515] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  244.574232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  244.599053] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  244.607634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  244.616037] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  244.619697] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  244.640642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  244.645307] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  244.647900] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  244.676065] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  244.694105] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  244.696000] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  244.703707] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  244.707074] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  244.728490] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  246.175969] Bluetooth: hci1: command tx timeout
[  246.239119] Bluetooth: hci0: command tx timeout
[  246.304518] Bluetooth: hci2: command tx timeout
[  246.558857] Bluetooth: hci4: command tx timeout
[  246.559665] Bluetooth: hci3: command tx timeout
[  246.751458] Bluetooth: hci5: command tx timeout
[  246.814817] Bluetooth: hci6: command tx timeout
[  246.878825] Bluetooth: hci7: command tx timeout
[  248.222978] Bluetooth: hci1: command tx timeout
[  248.287079] Bluetooth: hci0: command tx timeout
[  248.350820] Bluetooth: hci2: command tx timeout
[  248.607822] Bluetooth: hci4: command tx timeout
[  248.607846] Bluetooth: hci3: command tx timeout
[  248.799013] Bluetooth: hci5: command tx timeout
[  248.862844] Bluetooth: hci6: command tx timeout
[  248.926815] Bluetooth: hci7: command tx timeout
[  250.270828] Bluetooth: hci1: command tx timeout
[  250.335154] Bluetooth: hci0: command tx timeout
[  250.399094] Bluetooth: hci2: command tx timeout
[  250.654992] Bluetooth: hci4: command tx timeout
[  250.655128] Bluetooth: hci3: command tx timeout
[  250.846814] Bluetooth: hci5: command tx timeout
[  250.910946] Bluetooth: hci6: command tx timeout
[  250.974804] Bluetooth: hci7: command tx timeout
[  252.318953] Bluetooth: hci1: command tx timeout
[  252.383092] Bluetooth: hci0: command tx timeout
[  252.447944] Bluetooth: hci2: command tx timeout
[  252.703004] Bluetooth: hci3: command tx timeout
[  252.703260] Bluetooth: hci4: command tx timeout
[  252.895837] Bluetooth: hci5: command tx timeout
[  252.960082] Bluetooth: hci6: command tx timeout
[  253.024881] Bluetooth: hci7: command tx timeout
[  306.739449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  306.746209] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  306.760379] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  306.768210] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  306.772573] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  306.923690] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  306.926948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  306.929607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  306.935182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  306.938609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  306.997264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  307.015279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  307.019029] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  307.037542] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  307.044048] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  307.079242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  307.109472] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  307.113123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  307.141606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  307.166407] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  307.187664] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  307.193410] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  307.200456] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  307.207687] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.213616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  307.230580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  307.232384] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  307.239375] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  307.247181] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  307.278935] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  307.286280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  307.287312] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  307.315912] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  307.316066] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  307.326144] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  307.352667] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  307.359511] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  307.368848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  307.411642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  307.428400] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  308.831343] Bluetooth: hci0: command tx timeout
[  308.958999] Bluetooth: hci1: command tx timeout
[  309.152173] Bluetooth: hci2: command tx timeout
[  309.278827] Bluetooth: hci3: command tx timeout
[  309.344048] Bluetooth: hci4: command tx timeout
[  309.407940] Bluetooth: hci5: command tx timeout
[  309.470910] Bluetooth: hci6: command tx timeout
[  309.536026] Bluetooth: hci7: command tx timeout
[  310.879179] Bluetooth: hci0: command tx timeout
[  311.008771] Bluetooth: hci1: command tx timeout
[  311.198864] Bluetooth: hci2: command tx timeout
[  311.327285] Bluetooth: hci3: command tx timeout
[  311.390857] Bluetooth: hci4: command tx timeout
[  311.454793] Bluetooth: hci5: command tx timeout
[  311.518943] Bluetooth: hci6: command tx timeout
[  311.583180] Bluetooth: hci7: command tx timeout
[  312.926859] Bluetooth: hci0: command tx timeout
[  313.054910] Bluetooth: hci1: command tx timeout
[  313.246835] Bluetooth: hci2: command tx timeout
[  313.374794] Bluetooth: hci3: command tx timeout
[  313.439020] Bluetooth: hci4: command tx timeout
[  313.502994] Bluetooth: hci5: command tx timeout
[  313.566942] Bluetooth: hci6: command tx timeout
[  313.631029] Bluetooth: hci7: command tx timeout
[  314.974825] Bluetooth: hci0: command tx timeout
[  315.103934] Bluetooth: hci1: command tx timeout
[  315.295036] Bluetooth: hci2: command tx timeout
[  315.422835] Bluetooth: hci3: command tx timeout
[  315.486848] Bluetooth: hci4: command tx timeout
[  315.551011] Bluetooth: hci5: command tx timeout
[  315.615042] Bluetooth: hci6: command tx timeout
[  315.678802] Bluetooth: hci7: command tx timeout
[  369.084603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  369.094076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  369.098469] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  369.111864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  369.118986] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  369.279845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  369.286283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  369.289325] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  369.303604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  369.316901] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  369.369348] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  369.377198] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  369.384261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  369.394043] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  369.401994] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  369.434530] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  369.451485] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  369.459505] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  369.474350] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  369.487293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  369.535901] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  369.545870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  369.559048] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  369.560927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  369.564390] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  369.576214] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  369.595958] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  369.599635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  369.607389] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  369.620255] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  369.620437] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  369.635395] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  369.640570] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  369.651791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  369.654879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  369.655056] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  369.661565] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  369.668298] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  369.682209] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  369.689604] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  371.168045] Bluetooth: hci0: command tx timeout
[  371.359862] Bluetooth: hci1: command tx timeout
[  371.488095] Bluetooth: hci2: command tx timeout
[  371.614826] Bluetooth: hci3: command tx timeout
[  371.742846] Bluetooth: hci4: command tx timeout
[  371.806981] Bluetooth: hci6: command tx timeout
[  371.807433] Bluetooth: hci7: command tx timeout
[  371.808159] Bluetooth: hci5: command tx timeout
[  373.214856] Bluetooth: hci0: command tx timeout
[  373.407054] Bluetooth: hci1: command tx timeout
[  373.534974] Bluetooth: hci2: command tx timeout
[  373.662832] Bluetooth: hci3: command tx timeout
[  373.790820] Bluetooth: hci4: command tx timeout
[  373.856797] Bluetooth: hci5: command tx timeout
[  373.856857] Bluetooth: hci7: command tx timeout
[  373.857220] Bluetooth: hci6: command tx timeout
[  375.262851] Bluetooth: hci0: command tx timeout
[  375.456072] Bluetooth: hci1: command tx timeout
[  375.582855] Bluetooth: hci2: command tx timeout
[  375.712766] Bluetooth: hci3: command tx timeout
[  375.838827] Bluetooth: hci4: command tx timeout
[  375.902891] Bluetooth: hci6: command tx timeout
[  375.904630] Bluetooth: hci7: command tx timeout
[  375.904687] Bluetooth: hci5: command tx timeout
[  377.311055] Bluetooth: hci0: command tx timeout
[  377.503015] Bluetooth: hci1: command tx timeout
[  377.632764] Bluetooth: hci2: command tx timeout
[  377.758808] Bluetooth: hci3: command tx timeout
[  377.886863] Bluetooth: hci4: command tx timeout
[  377.950986] Bluetooth: hci5: command tx timeout
[  377.951832] Bluetooth: hci7: command tx timeout
[  377.951865] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
06:08:48  Registers:
info registers vcpu 0
RAX=7fffffffffffffff RBX=0000000000000000 RCX=ffffffff81612e78 RDX=ffff888015ef9bc0
RSI=ffffffff81612fa0 RDI=0000000000000005 RBP=ffff88806ce28080 RSP=ffff88806ce08f00
R8 =0000000000000000 R9 =fffffbfff0c81d82 R10=0000000000000000 R11=ffff88806ce37018
R12=0000000000000000 R13=ffff88806ce280c4 R14=ffff88806ce280f8 R15=ffff88806ce28080
RIP=ffffffff81613ec1 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1b9a89e028 CR3=000000002adcc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=0000000000000001 RCX=1f5d0b6ddf42c333 RDX=1ffff1100d9e115b
RSI=00000000402c56ce RDI=ffff88802ed3f780 RBP=ffff88806cf08ad0 RSP=ffff88806cf08a08
R8 =0000000000000004 R9 =0000000000000001 R10=0000000000000000 R11=000000000000031f
R12=ffff88806cf08ad8 R13=ffff88806cf08ac0 R14=ffff88802ed3f6f8 R15=ffff88806cf08a78
RIP=ffffffff81350924 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efeab8756f4 CR3=000000002aca4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007efeab88447000007efeab883f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000