Warning: Permanently added '[localhost]:51533' (ECDSA) to the list of known hosts.
2025/05/25 14:27:09 fuzzer started
2025/05/25 14:27:10 dialing manager at localhost:46087
syzkaller login: [   93.271732] cgroup: Unknown subsys name 'net'
[   93.437776] cgroup: Unknown subsys name 'cpuset'
[   93.486867] cgroup: Unknown subsys name 'rlimit'
2025/05/25 14:27:25 syscalls: 209
2025/05/25 14:27:25 code coverage: enabled
2025/05/25 14:27:25 comparison tracing: enabled
2025/05/25 14:27:25 extra coverage: enabled
2025/05/25 14:27:25 setuid sandbox: enabled
2025/05/25 14:27:25 namespace sandbox: enabled
2025/05/25 14:27:25 Android sandbox: enabled
2025/05/25 14:27:25 fault injection: enabled
2025/05/25 14:27:25 leak checking: enabled
2025/05/25 14:27:25 net packet injection: enabled
2025/05/25 14:27:25 net device setup: enabled
2025/05/25 14:27:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/25 14:27:25 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/25 14:27:25 USB emulation: enabled
2025/05/25 14:27:25 hci packet injection: enabled
2025/05/25 14:27:25 wifi device emulation: enabled
2025/05/25 14:27:25 802.15.4 emulation: enabled
2025/05/25 14:27:25 fetching corpus: 0, signal 0/0 (executing program)
2025/05/25 14:27:26 starting 8 fuzzer processes
14:27:26 executing program 0:
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1ff, 0x40080)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x400000c, 0x810, r0, 0x8001)
r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x3c, 0x40, 0x6, 0x24, 0x0, 0x6, 0x100, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x1000, 0x800}, 0x8020, 0x7, 0x0, 0x0, 0x0, 0xaa1, 0xfff9, 0x0, 0xfffffffb, 0x0, 0x3}, 0xffffffffffffffff, 0x4, r0, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='/dev/vcsu#\x00')
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x2, r0, 0x98, 0x80000})
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
socketpair(0x1d, 0x3, 0x400, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r4, 0x784, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24001801}, 0x4000000)
pidfd_open(0x0, 0x0)
r5 = syz_io_uring_complete(0x0)
ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f0000000340))
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000380)={0x0, 0x0, r3, 0x9})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20004050)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x14, 0x0, &(0x7f00000004c0)=[@acquire_done={0x40106309, 0x2}], 0xc0, 0x0, &(0x7f0000000500)="d01573fcd8281abc5d0288867b0d226eaf088c03a92f07a6cda87cec45e2b85b5e140b29370ccb9ddfed66e75b051056dcc27201875b0483948014a6e20f20339a071fdcb7ecc09fa7541678e66e32baf5e9388d98a8e4da93a2175dfe3cd3ba0bbed438f0f2baa2ee8b5425530cd755b8d23ccb63c3fb767469914d3cb9f1e54f7fc0bcd896f4d8dcc5e4bbe8dd3aff8823df50ac952861d4e8c8db20b2162aa404d7cfb2f7e9cdb48752cf9c124b045c50cab3d7b0fa5e0afd60cd76320e61"})
r6 = pidfd_getfd(r0, r2, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c855}, 0x28000011)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20}, 0x801)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x74, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x24008004)
socketpair(0x1d, 0x800, 0xffff0001, &(0x7f0000000a40))

14:27:26 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x96d523a6fb7d4cc1}, 0x40d1)
ptrace$getsig(0x4202, 0x0, 0x8, &(0x7f0000000140))
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40043}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "23f96d53fa262ee859fdf772b9c713f2"}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000004)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008004)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10008040}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan3\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xc1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c080}, 0x80000)
sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1d}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}]}, 0x34}, 0x1, 0x0, 0x0, 0x40444}, 0x200000c4)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000740)={'mangle\x00', 0x2, [{}, {}]}, 0x48)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x1f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x4d}]}, 0x24}, 0x1, 0x0, 0x0, 0x2800}, 0x8)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010800}, 0x20000000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, r1, 0x100, 0x86e, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x19}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080)
shmget(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)

14:27:26 executing program 2:
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000080)='posixacl\x00', &(0x7f00000000c0)="19b49ba754e8c99898799b7b7707726e54113e4eb88cf02083ab20ecf8d350e45d64c448d8848e5f928db2a81d77ea4379d4034ab0eb1dba9fa8ea81f92b48d404fe73aff0700f58d4841e57171876a4da9b4e723759e2a0856ec0c5e7f0cd889d046653dbb779ca28d7b0752505331aba8065733b5db0e9b6581382907d346a8e2f11519a3c778fd267111b1231d779b873700c6719c2f21a15b1bf", 0x9c)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x7fff, &(0x7f0000000200), 0x8)
r0 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x0)
r1 = fsmount(r0, 0x0, 0x85)
fsmount(r1, 0x1, 0x0)
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='rpc_pipefs\x00', &(0x7f0000000300)='$)\x00', 0x0)
r3 = syz_io_uring_complete(0x0)
sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x3, @remote, 0x7}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000380)="88d4f12b996eb54c84d2288c37cecffa8ae339c847c616c8daefd01f13c37cec050c3d5e557cb1e7ec5a7d7f01a9b5ed64309cd05d671129322ca4fa38a735eb2677f4b249efe39c3c2cf5e6d333945e66a88292cad171", 0x57}, {&(0x7f0000000400)="c087473c5570635058b35df356", 0xd}, {&(0x7f0000000440)="c174627beae8ef342a1c7311ecf67321af4bb39f0c900ad355cf8bc5d7b5f04054885293736a8a0fcc23eefaed88a69c1448c91ff3d753b68eafe18f9b92c652f73a08f8140953eed32f119f07d5e5099377f32fda22d114162128758da44e25e7d1a5e7df4ffcc619a31981203db090910a4ff62ad8dda86f70b42d2085032db81fc9bfac59de5c2e94c9ad97bbc565386185a4b89f61f1a2adfd114392e86eb1461f2eb9897f8c931aba57a0dedb4aab10f5c5c0b8a069d96c1cfb01684b912391aebdf6c17c21c6a7a78d18ca9b8702d168ca414e66ffac13d7cfd6663a71", 0xe0}], 0x3, &(0x7f0000000580)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hopopts={{0x98, 0x29, 0x36, {0x8, 0xf, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x8001}, @pad1, @generic={0x42, 0x71, "7264f6f4184ed251dea5c85a68548fb2e472d3be6c0e8b4235eab6c792c194e6a5964092fecb983dbf594d75b95794303fcb5e9b423b85f2282215a7090b104fa57a09a92f66391f2d15fa2ac1d8a392767f87e6706409e560e919bf495616fa90b622f43883d4d50a9e9a3dffe4b84676"}]}}}, @dstopts_2292={{0xb0, 0x29, 0x4, {0x2e, 0x12, '\x00', [@pad1, @ra, @calipso={0x7, 0x38, {0x2, 0xc, 0x0, 0x1ff, [0x0, 0x6, 0x2, 0x2, 0x2f68, 0x3]}}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x50, {0x3, 0x12, 0x3f, 0x6, [0x1, 0xfffffffffffffff7, 0x9f, 0x0, 0x400, 0x1, 0x1f, 0x6, 0x1000000000000000]}}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xf8}]}}}, @hopopts={{0xc8, 0x29, 0x36, {0x3c, 0x15, '\x00', [@pad1, @generic={0x3f, 0x6a, "34ee51fc0055ac27cd8f8db4b5e5d3905b9a5f37ef09dee8a94613e9f436bccc8ddb826609f37de22ca2f58aa1af3e6764d32ac443c4cd50c399a633b4c992578cfbea6dfa871a9613837fdb0a834d060d6167771b9b817cf74de08ce1f8a1ca9a9d462cc78d525f9ae2"}, @ra, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x30, {0x3, 0xa, 0xc2, 0xa90, [0x1, 0x48f, 0x7, 0x2, 0xab68]}}]}}}], 0x248}}], 0x1, 0x4040000)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000840)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
r4 = fsopen(&(0x7f0000000880)='udf\x00', 0x0)
r5 = syz_open_dev$rtc(&(0x7f0000000900), 0x1, 0x228080)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000008c0)=')+:.]))-#.O}.,\xfc%\x00', 0x0, r5)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000940)=')+:.]))-#.O}.,\xfc%\x00', 0x0, 0xffffffffffffffff)

14:27:26 executing program 3:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0)
clone3(&(0x7f0000000200)={0x108000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=<r1=>0x0, {0x18}, &(0x7f0000000100)=""/125, 0x7d, &(0x7f0000000180)=""/5, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58)
r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r0, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x5})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x804}, 0x2000a004)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x32}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000805}, 0x20008000)
r4 = syz_open_dev$vcsu(&(0x7f0000000540), 0x3, 0x10000)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r3)
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0xf942a14d40e52c5}, 0x96fb504ed446c828)
r6 = syz_open_dev$vcsu(&(0x7f0000000700), 0x1627, 0x511102)
ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0)
socketpair(0x15, 0x4, 0x5, &(0x7f0000000740)={<r7=>0xffffffffffffffff})
sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040005}, 0x20008004)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240080b0}, 0x40000)
r9 = syz_open_dev$vcsu(&(0x7f0000000980), 0x9, 0x8000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000000b80)={&(0x7f00000009c0), 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x40011)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000c00)=0x1c, 0x80000)

[  109.532681] audit: type=1400 audit(1748183246.910:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
14:27:26 executing program 4:
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='\'*\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2})
r0 = fsmount(0xffffffffffffffff, 0x1, 0x0)
epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}], 0x2, 0x3094, &(0x7f0000000100)={[0x5]}, 0x8)
epoll_pwait2(r0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f00000001c0), &(0x7f0000000200), 0x8)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x3, 0x6, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
r2 = fsmount(r0, 0x1, 0x70)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000300)={r3, 0x6, 0x101})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0, <r5=>0x0})
r6 = fsmount(r2, 0x0, 0x1)
kcmp$KCMP_EPOLL_TFD(r5, r4, 0x7, 0xffffffffffffffff, &(0x7f00000003c0)={r6, r0, 0x3})
r7 = getpid()
kcmp$KCMP_EPOLL_TFD(r7, r4, 0x7, r2, &(0x7f0000000400)={r2, r2, 0x93})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000440)={0x0, 0x1, 0x6, @random="b20a95a91dcb"}, 0x10)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000480)={0x2000})
r8 = syz_open_dev$vcsu(&(0x7f00000004c0), 0x3, 0xa0000)
getsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000500), &(0x7f0000000540)=0x4)

14:27:26 executing program 5:
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2080881}, 0x24005840)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1080220a}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x30}}, 0x18000)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r0, 0x6dac5fb8a9e1efd0, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000)
accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x881)
r2 = fsmount(0xffffffffffffffff, 0x0, 0xa)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000006c0)=@req3={0x6, 0x6d6a, 0xfffffffd, 0x1, 0x4, 0xffff, 0x80}, 0x1c)
r3 = pidfd_getfd(r2, r2, 0x0)
accept$packet(r2, &(0x7f0000000700)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14)
connect$packet(r3, &(0x7f0000000780)={0x11, 0x19, r4, 0x1, 0xe0, 0x6, @remote}, 0x14)
sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004811}, 0x4)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xf8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x80}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000881)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x28}}, 0x40001)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b80), r3)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, r6, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x74}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000)

14:27:27 executing program 7:
r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xd0, 0x0, &(0x7f0000000340)=[@enter_looper, @decrefs={0x40046307, 0x2}, @acquire_done={0x40106309, 0x2}, @request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0xb}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/196, 0xc4, 0x0, 0x16}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/102, 0x66, 0x2, 0x4}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}, @decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x1, 0x26}, @fd}, &(0x7f0000000300)={0x0, 0x18, 0x38}}, 0x400}], 0x26, 0x0, &(0x7f0000000440)="0d6e1308bcabc12cd2bc56f338804bf913fb99993db18d5dae60577426f598c81f75669c12e0"})
accept4$packet(r0, &(0x7f00000004c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000500)=0x14, 0x1000)
bind$packet(r0, &(0x7f0000000540)={0x11, 0xf5, r1, 0x1, 0x3, 0x6, @local}, 0x14)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x9)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x98, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x44891}, 0xc840)
shmget$private(0x0, 0x4000, 0x5, &(0x7f0000ffa000/0x4000)=nil)
semctl$SEM_INFO(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000700)=""/4096)
semctl$SEM_STAT(0xffffffffffffffff, 0x2, 0x12, &(0x7f0000001700)=""/122)
r3 = syz_open_dev$vcsu(&(0x7f0000001780), 0xffff, 0x40)
epoll_wait(r3, &(0x7f00000017c0)=[{}, {}, {}], 0x3, 0x0)
r4 = shmget(0x1, 0x7000, 0x40, &(0x7f0000ff9000/0x7000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000001800)=""/119)
semctl$SETVAL(0xffffffffffffffff, 0x3, 0x10, &(0x7f0000001880)=0x9)
r5 = getpid()
pidfd_open(r5, 0x0)
connect$bt_l2cap(r2, &(0x7f00000018c0)={0x1f, 0x5, @any, 0xfffd, 0x2}, 0xe)
r6 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
accept4$packet(r6, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001940)=0x14, 0x800)
connect$packet(r3, &(0x7f0000001980)={0x11, 0x1b, r1, 0x1, 0x3, 0x6, @broadcast}, 0x14)

14:27:27 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c80}, 0x80)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, <r5=>0x0})
r6 = getpid()
r7 = fsopen(&(0x7f0000000400)='ocfs2\x00', 0x1)
r8 = epoll_create(0x54ca094d)
r9 = syz_open_dev$rtc(&(0x7f0000000440), 0x6, 0x40000)
kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000480)={r8, r9, 0x5})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3)
sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x10}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7f}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0xc000804)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2)
sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, r10, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x28}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4d}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xffffffffffff0383}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000071}, 0x2400c850)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000007c0))
ioctl$RTC_UIE_ON(r9, 0x7003)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000840)=""/91)

[  111.096948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  111.104606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  111.107779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  111.119999] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  111.125072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  111.181056] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  111.187743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  111.202812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  111.209097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  111.222439] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  111.230942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  111.240675] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.242804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  111.256552] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  111.263537] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  111.322746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  111.337363] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  111.347075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  111.357137] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  111.360645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  111.385409] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  111.387346] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  111.407819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  111.410140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  111.411675] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  111.419488] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  111.427850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  111.439082] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  111.442965] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  111.448668] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  111.457456] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  111.459137] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  111.471911] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  111.489603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  111.503758] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  111.504744] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  111.513979] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  111.517876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  111.580582] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  111.582423] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  113.180967] Bluetooth: hci0: command tx timeout
[  113.308260] Bluetooth: hci2: command tx timeout
[  113.310016] Bluetooth: hci1: command tx timeout
[  113.563342] Bluetooth: hci3: command tx timeout
[  113.691275] Bluetooth: hci7: command tx timeout
[  113.694238] Bluetooth: hci5: command tx timeout
[  113.694765] Bluetooth: hci6: command tx timeout
[  113.755245] Bluetooth: hci4: command tx timeout
[  115.227342] Bluetooth: hci0: command tx timeout
[  115.356211] Bluetooth: hci1: command tx timeout
[  115.357005] Bluetooth: hci2: command tx timeout
[  115.611298] Bluetooth: hci3: command tx timeout
[  115.739743] Bluetooth: hci6: command tx timeout
[  115.740774] Bluetooth: hci5: command tx timeout
[  115.741081] Bluetooth: hci7: command tx timeout
[  115.804235] Bluetooth: hci4: command tx timeout
[  117.276225] Bluetooth: hci0: command tx timeout
[  117.404320] Bluetooth: hci2: command tx timeout
[  117.404492] Bluetooth: hci1: command tx timeout
[  117.659322] Bluetooth: hci3: command tx timeout
[  117.788256] Bluetooth: hci7: command tx timeout
[  117.788287] Bluetooth: hci6: command tx timeout
[  117.788755] Bluetooth: hci5: command tx timeout
[  117.851264] Bluetooth: hci4: command tx timeout
[  119.324209] Bluetooth: hci0: command tx timeout
[  119.451336] Bluetooth: hci2: command tx timeout
[  119.454208] Bluetooth: hci1: command tx timeout
[  119.708408] Bluetooth: hci3: command tx timeout
[  119.835436] Bluetooth: hci6: command tx timeout
[  119.836833] Bluetooth: hci7: command tx timeout
[  119.837271] Bluetooth: hci5: command tx timeout
[  119.900281] Bluetooth: hci4: command tx timeout
[  173.096813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  173.100327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  173.103043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  173.109737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  173.113143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  173.262362] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  173.273556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  173.280374] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  173.294486] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  173.296556] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  173.304312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  173.306888] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  173.311371] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  173.329418] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  173.332942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  173.363679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  173.372720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  173.375585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  173.386122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  173.387808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  173.390018] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  173.392691] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  173.397660] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  173.400651] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  173.401859] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  173.402129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  173.406332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  173.410376] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  173.414747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  173.429035] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  173.432068] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  173.434008] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  173.434199] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  173.436673] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  173.438074] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  173.441868] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  173.443677] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  173.449976] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  173.454501] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  173.456879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  175.195503] Bluetooth: hci0: command tx timeout
[  175.387557] Bluetooth: hci1: command tx timeout
[  175.451484] Bluetooth: hci2: command tx timeout
[  175.579278] Bluetooth: hci7: command tx timeout
[  175.579844] Bluetooth: hci3: command tx timeout
[  175.579964] Bluetooth: hci5: command tx timeout
[  175.643810] Bluetooth: hci4: command tx timeout
[  175.645365] Bluetooth: hci6: command tx timeout
[  177.243274] Bluetooth: hci0: command tx timeout
[  177.435224] Bluetooth: hci1: command tx timeout
[  177.499440] Bluetooth: hci2: command tx timeout
[  177.627614] Bluetooth: hci5: command tx timeout
[  177.627838] Bluetooth: hci7: command tx timeout
[  177.628700] Bluetooth: hci3: command tx timeout
[  177.692588] Bluetooth: hci6: command tx timeout
[  177.692900] Bluetooth: hci4: command tx timeout
[  179.291399] Bluetooth: hci0: command tx timeout
[  179.483220] Bluetooth: hci1: command tx timeout
[  179.547230] Bluetooth: hci2: command tx timeout
[  179.675307] Bluetooth: hci5: command tx timeout
[  179.675765] Bluetooth: hci3: command tx timeout
[  179.676223] Bluetooth: hci7: command tx timeout
[  179.739296] Bluetooth: hci4: command tx timeout
[  179.740258] Bluetooth: hci6: command tx timeout
[  181.341304] Bluetooth: hci0: command tx timeout
[  181.531239] Bluetooth: hci1: command tx timeout
[  181.595537] Bluetooth: hci2: command tx timeout
[  181.723390] Bluetooth: hci7: command tx timeout
[  181.723460] Bluetooth: hci3: command tx timeout
[  181.723884] Bluetooth: hci5: command tx timeout
[  181.787359] Bluetooth: hci4: command tx timeout
[  181.787801] Bluetooth: hci6: command tx timeout
[  235.431693] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  235.439912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  235.441671] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  235.446418] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  235.451115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  235.512862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  235.514918] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  235.517205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  235.523239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  235.527078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  235.579710] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  235.582599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  235.586956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  235.603974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  235.613678] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  235.722737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  235.727774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  235.729564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  235.749383] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  235.754115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  235.755633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  235.760558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  235.763905] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  235.791602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  235.794940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  235.797980] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  235.801516] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  235.802531] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  235.814521] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  235.815922] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  235.817499] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  235.826294] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  235.827953] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  235.833108] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  235.836796] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  235.895858] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  235.906471] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  235.922562] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  235.998666] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  236.022392] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  237.532544] Bluetooth: hci0: command tx timeout
[  237.596485] Bluetooth: hci1: command tx timeout
[  237.659614] Bluetooth: hci2: command tx timeout
[  237.787257] Bluetooth: hci4: command tx timeout
[  237.915282] Bluetooth: hci3: command tx timeout
[  237.915321] Bluetooth: hci6: command tx timeout
[  237.981214] Bluetooth: hci5: command tx timeout
[  238.171401] Bluetooth: hci7: command tx timeout
[  239.582196] Bluetooth: hci0: command tx timeout
[  239.645398] Bluetooth: hci1: command tx timeout
[  239.707242] Bluetooth: hci2: command tx timeout
[  239.835490] Bluetooth: hci4: command tx timeout
[  239.963263] Bluetooth: hci6: command tx timeout
[  239.963335] Bluetooth: hci3: command tx timeout
[  240.027237] Bluetooth: hci5: command tx timeout
[  240.219233] Bluetooth: hci7: command tx timeout
[  241.627291] Bluetooth: hci0: command tx timeout
[  241.691646] Bluetooth: hci1: command tx timeout
[  241.755459] Bluetooth: hci2: command tx timeout
[  241.883350] Bluetooth: hci4: command tx timeout
[  242.011484] Bluetooth: hci3: command tx timeout
[  242.012297] Bluetooth: hci6: command tx timeout
[  242.075480] Bluetooth: hci5: command tx timeout
[  242.267655] Bluetooth: hci7: command tx timeout
[  243.676529] Bluetooth: hci0: command tx timeout
[  243.740325] Bluetooth: hci1: command tx timeout
[  243.804487] Bluetooth: hci2: command tx timeout
[  243.932447] Bluetooth: hci4: command tx timeout
[  244.060277] Bluetooth: hci6: command tx timeout
[  244.061037] Bluetooth: hci3: command tx timeout
[  244.123289] Bluetooth: hci5: command tx timeout
[  244.315347] Bluetooth: hci7: command tx timeout
[  297.963932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  297.974726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  297.979729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  297.984819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  297.990133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  297.994644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  298.002613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  298.009225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  298.014874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  298.017373] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  298.165466] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  298.186775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  298.193794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  298.217708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  298.227854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  298.300633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  298.310556] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  298.319021] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  298.333674] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  298.348817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  298.509766] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  298.516738] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  298.536088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  298.551614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  298.561002] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  298.983839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  299.001532] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  299.047772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  299.082031] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  299.143637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  299.310892] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  299.314989] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  299.316890] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  299.322978] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  299.346019] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  299.353320] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  299.360740] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  299.373707] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  299.488718] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  299.541907] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  300.059804] Bluetooth: hci0: command tx timeout
[  300.123542] Bluetooth: hci1: command tx timeout
[  300.315546] Bluetooth: hci2: command tx timeout
[  300.379523] Bluetooth: hci3: command tx timeout
[  300.827330] Bluetooth: hci4: command tx timeout
[  301.275332] Bluetooth: hci5: command tx timeout
[  301.532471] Bluetooth: hci7: command tx timeout
[  301.724241] Bluetooth: hci6: command tx timeout
[  302.108397] Bluetooth: hci0: command tx timeout
[  302.173294] Bluetooth: hci1: command tx timeout
[  302.364249] Bluetooth: hci2: command tx timeout
[  302.427236] Bluetooth: hci3: command tx timeout
[  302.876389] Bluetooth: hci4: command tx timeout
[  303.323538] Bluetooth: hci5: command tx timeout
[  303.580178] Bluetooth: hci7: command tx timeout
[  303.771581] Bluetooth: hci6: command tx timeout
[  304.157184] Bluetooth: hci0: command tx timeout
[  304.219635] Bluetooth: hci1: command tx timeout
[  304.411417] Bluetooth: hci2: command tx timeout
[  304.476290] Bluetooth: hci3: command tx timeout
[  304.924539] Bluetooth: hci4: command tx timeout
[  305.372822] Bluetooth: hci5: command tx timeout
[  305.628253] Bluetooth: hci7: command tx timeout
[  305.821185] Bluetooth: hci6: command tx timeout
[  306.203265] Bluetooth: hci0: command tx timeout
[  306.269901] Bluetooth: hci1: command tx timeout
[  306.459394] Bluetooth: hci2: command tx timeout
[  306.524251] Bluetooth: hci3: command tx timeout
[  306.972214] Bluetooth: hci4: command tx timeout
[  307.419801] Bluetooth: hci5: command tx timeout
[  307.675228] Bluetooth: hci7: command tx timeout
[  307.867250] Bluetooth: hci6: command tx timeout
[  360.382971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  360.387067] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  360.389559] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  360.397364] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  360.401769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  360.406549] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  360.407409] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  360.423634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  360.434137] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  360.455204] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  360.607527] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  360.620965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  360.629611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  360.643759] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  360.653678] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  360.674134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  360.683431] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  360.695588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  360.702522] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  360.715682] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  360.727690] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  360.733745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  360.770689] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  360.776637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  360.795764] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  360.797779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  360.801119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  360.804017] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  360.823710] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  360.827415] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  360.892543] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  360.895763] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  360.897913] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  360.903885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  360.907946] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  361.112027] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  361.117956] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  361.128271] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  361.174336] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  361.203327] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  362.459343] Bluetooth: hci1: command tx timeout
[  362.523385] Bluetooth: hci0: command tx timeout
[  362.779267] Bluetooth: hci2: command tx timeout
[  362.843463] Bluetooth: hci3: command tx timeout
[  362.907489] Bluetooth: hci4: command tx timeout
[  362.971273] Bluetooth: hci6: command tx timeout
[  363.036278] Bluetooth: hci5: command tx timeout
[  363.419294] Bluetooth: hci7: command tx timeout
[  364.507292] Bluetooth: hci1: command tx timeout
[  364.571289] Bluetooth: hci0: command tx timeout
[  364.827239] Bluetooth: hci2: command tx timeout
[  364.891468] Bluetooth: hci3: command tx timeout
[  364.956359] Bluetooth: hci4: command tx timeout
[  365.019589] Bluetooth: hci6: command tx timeout
[  365.083469] Bluetooth: hci5: command tx timeout
[  365.467264] Bluetooth: hci7: command tx timeout
[  366.557297] Bluetooth: hci1: command tx timeout
[  366.619260] Bluetooth: hci0: command tx timeout
[  366.875535] Bluetooth: hci2: command tx timeout
[  366.939238] Bluetooth: hci3: command tx timeout
[  367.005280] Bluetooth: hci4: command tx timeout
[  367.067245] Bluetooth: hci6: command tx timeout
[  367.131396] Bluetooth: hci5: command tx timeout
[  367.515389] Bluetooth: hci7: command tx timeout
[  368.604433] Bluetooth: hci1: command tx timeout
[  368.667368] Bluetooth: hci0: command tx timeout
[  368.923302] Bluetooth: hci2: command tx timeout
[  368.987380] Bluetooth: hci3: command tx timeout
[  369.051477] Bluetooth: hci4: command tx timeout
[  369.115370] Bluetooth: hci6: command tx timeout
[  369.180421] Bluetooth: hci5: command tx timeout
[  369.563603] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
14:32:28  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffffffff81604230 RCX=ffff88806ce089cc RDX=0000000000000000
RSI=ffffffff85c1d1c0 RDI=ffff8880289dd67c RBP=ffff88806ce08b10 RSP=ffff88806ce08a78
R8 =ffffffff8687bc2a R9 =ffff88806ce08ab8 R10=000000000003b67d R11=0000000000025b01
R12=ffff88806ce08b40 R13=0000000000000000 R14=ffff8880289dd280 R15=ffff88800d9efb90
RIP=ffffffff812d9a0c RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f290a684260 CR3=00000000316ca000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=00000000006fe8bb RBX=000000000002d908 RCX=ffffffff81349c7d RDX=ffff8880096f3700
RSI=ffffffff81349cb7 RDI=0000000000000004 RBP=ffff88806cf23ac0 RSP=ffff88806cf08d30
R8 =0000000000000001 R9 =0000000000000000 R10=000000000002d908 R11=0000000000000001
R12=ffffed100d9e4759 R13=ffffed100d9e4758 R14=00000000006fe8bb R15=000000000002d908
RIP=ffffffff81349cba RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe0b00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8ca6e466f4 CR3=00000000157f0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000000000000000ff0000000000ff
XMM02=000000ff000000ff000000ff000000ff XMM03=ff00000000000000ff0000000000ff00
XMM04=000000000000000000ff000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000