Warning: Permanently added '[localhost]:32954' (ECDSA) to the list of known hosts.
2025/06/24 03:33:26 fuzzer started
2025/06/24 03:33:27 dialing manager at localhost:37113
syzkaller login: [  100.891927] cgroup: Unknown subsys name 'net'
[  101.045543] cgroup: Unknown subsys name 'cpuset'
[  101.086213] cgroup: Unknown subsys name 'rlimit'
2025/06/24 03:33:44 syscalls: 202
2025/06/24 03:33:44 code coverage: enabled
2025/06/24 03:33:44 comparison tracing: enabled
2025/06/24 03:33:44 extra coverage: enabled
2025/06/24 03:33:44 setuid sandbox: enabled
2025/06/24 03:33:44 namespace sandbox: enabled
2025/06/24 03:33:44 Android sandbox: enabled
2025/06/24 03:33:44 fault injection: enabled
2025/06/24 03:33:44 leak checking: enabled
2025/06/24 03:33:44 net packet injection: enabled
2025/06/24 03:33:44 net device setup: enabled
2025/06/24 03:33:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/24 03:33:44 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/24 03:33:44 USB emulation: enabled
2025/06/24 03:33:44 hci packet injection: enabled
2025/06/24 03:33:44 wifi device emulation: enabled
2025/06/24 03:33:44 802.15.4 emulation: enabled
2025/06/24 03:33:44 fetching corpus: 0, signal 0/0 (executing program)
2025/06/24 03:33:46 starting 8 fuzzer processes
03:33:46 executing program 0:
r0 = fork()
r1 = getpgid(r0)
sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x80000001)
ptrace$peekuser(0x3, r1, 0x1000)
r2 = getpid()
ptrace$getregs(0xe, r2, 0x8, &(0x7f0000000040)=""/225)
r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x6c, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0x1}, @enter_looper, @free_buffer={0x40086303, r3}, @enter_looper, @register_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/207, 0xcf, 0x1, 0x3c}, @fda={0x66646185, 0x3, 0x0, 0xd}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}], 0x9b, 0x0, &(0x7f0000000380)="1cb871f8b82eba799fb5a4d60fa4ab00117859521be848bcba04eec5adabf8a341c14b25a869009907f4141bc0efb8455a2ae6ea3cec852a48d8354b6ab1d7371d7077387deea0ce2a4a2a74162642b863101d914787a81d5f92b6b8419f5147dc8147bca8aa5934e9007849e67e45197cf330e9f0348ed7e09cde8a7feff20efd68df290cbd47f60725bd87ca7228b76c65e4bcebcccd684c3181"})
getpgid(r1)
sched_getscheduler(r2)
syz_open_procfs$userns(r1, &(0x7f0000000480))
socket$nl_generic(0x10, 0x3, 0x10)
ptrace$peekuser(0x3, r0, 0x4)
ptrace$setsig(0x4203, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x1e, 0x400, 0x808})
capset(&(0x7f0000000540)={0x20080522, r2}, &(0x7f0000000580)={0x1, 0x80000000, 0xf1d3, 0x4, 0x5, 0x3b00})
syz_open_procfs$namespace(r2, &(0x7f00000005c0)='ns/time_for_children\x00')
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x480200, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000640)='ns/net\x00')
ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000740)={&(0x7f0000000680)="931cb8ef93545a821adac4bced25c692bafae68720f821d22802269b097a78cc272c0077dd758424b5335463cfd489736d8141645443744c71cc1c730ef9380114c1f92a9d9e6e63802e54da23e62118667ba7bf0a0fcd0b68aabb586b8072553cf12f8d1ea6d5f86239912d9d717ba40c97b31ab78b1595029cc3ce9f0cb265adc3e07d3cb328ca6481d13ed96b5ed6b810192cbadf1f555a5c4ffbba8cf921182c64e81ea305445f9da82adb766221e23c1960677a3357635a39", 0xbb})
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xe8, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4a}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x13}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x13}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x80)

03:33:46 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4b}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x5c}}, 0x41)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0xcd}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x6}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r1, {0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/dev\x00')
accept(r5, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000380)=0x80)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000400)={0x3, 0x1, "d00a0a", 0x6, 0x5})
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r6)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000004)
r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x1800000}}, './file0\x00'})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x101, 0x0, &(0x7f0000000640)="bde00b8da4ab6a59d4a8c7a3461b32cb08be0b97b88ebbd01d2939abfb4f71a0c25b95e120cf72", 0x2, 0x0, 0x0, {0x1}}, 0x7)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_RESP(r9, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
rt_sigtimedwait(&(0x7f00000007c0)={[0x7fff]}, &(0x7f0000000800), &(0x7f0000000880), 0x8)
clock_nanosleep(0x4, 0x1, &(0x7f0000000900), &(0x7f0000000940))

03:33:46 executing program 2:
r0 = memfd_secret(0x80000)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x39}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4d8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffc1}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8001}, 0x40001)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x2}}, './file0\x00'})
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc880}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x80800, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x4054084)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r5=>r0, {0x5}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x8004040)
syz_open_procfs$userns(0x0, &(0x7f0000000740))
r7 = accept(r2, &(0x7f0000000780)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000800)=0x80)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2)
sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r8, 0x114, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8090)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r4, 0x300, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x20)
ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f0000000ac0)={0x3, 0x200, 0x3})
accept(r5, &(0x7f0000000b00)=@nl=@unspec, &(0x7f0000000b80)=0x80)

[  119.594228] audit: type=1400 audit(1750736026.213:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:33:46 executing program 3:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
rt_sigtimedwait(&(0x7f0000000000)={[0x7]}, &(0x7f0000000040), &(0x7f0000000100)={r0, r1+10000000}, 0x8)
futex(&(0x7f0000000140)=0x2, 0x1, 0x2, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0), 0x1)
r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r3 = accept(0xffffffffffffffff, &(0x7f0000000200)=@ethernet={0x0, @link_local}, &(0x7f0000000280)=0x80)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', <r4=>0x0, 0x4, 0x6, 0x5, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast1, 0x700, 0x1, 0x64e, 0xff}})
clock_getres(0x0, &(0x7f0000000380))
r5 = syz_io_uring_setup(0x33a2, &(0x7f00000003c0)={0x0, 0x3048, 0x0, 0x1, 0x189}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000440)=<r6=>0x0, &(0x7f0000000480)=<r7=>0x0)
syz_io_uring_submit(0x0, r7, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)={0x0, 0x3938700}, 0x1, 0x1, 0x3}, 0x7)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000540)={'tunl0\x00', r4, 0x80, 0x10, 0x0, 0x3, {{0x26, 0x4, 0x3, 0x3, 0x98, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0xb, 0x38, [@rand_addr=0x64010101, @loopback]}, @timestamp_addr={0x44, 0xc, 0x1e, 0x1, 0x7, [{@multicast2, 0x7}]}, @timestamp={0x44, 0x24, 0xd5, 0x0, 0xb, [0x400, 0x800, 0x1, 0x8, 0xfffffffa, 0x6078, 0x985, 0x1f]}, @timestamp_addr={0x44, 0x2c, 0xd1, 0x1, 0x7, [{@loopback, 0x1}, {@empty, 0xfffffff9}, {@broadcast, 0x4}, {@multicast1, 0x2}, {@multicast1, 0x10001}]}, @timestamp={0x44, 0x10, 0x17, 0x0, 0xb, [0x0, 0x81, 0x7]}, @generic={0x86, 0xa, "e10094a557ea8eb3"}]}}}}})
syz_io_uring_setup(0x3eaf, &(0x7f0000000640)={0x0, 0x963f, 0x1, 0x2, 0x35f, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000006c0), &(0x7f0000000700)=<r8=>0x0)
syz_io_uring_submit(r6, r8, &(0x7f0000000740)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40000000, 0x1, {0x2}}, 0x80)
r9 = add_key$user(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x1}, &(0x7f0000000800)="c0dc2c2a8b07efcb602aed76b175c2a169deffbc69f91a0026da7b5fc836e22bd4bb2182c3b126593b04c3956304a6cda7564fa21933161bae4d744e8d5d67a30c853627b16b5d2374b7c018195640950cac3f80f6a2113ee1aa800a21a1ca7fa1daae431018ac03dfd3072113a4880fce1d66b507d51f", 0x77, 0xfffffffffffffffa)
r10 = add_key$user(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x0}, &(0x7f0000000900)="b925c69496edd2501b322e3279f2187c0ea52a05196bbe60672a2ce91fb7ce9a6352726caca95ffa46870b3483d9cb615a0df5af70d984ab4b7570113c4e0036e05fb4104ca703c4fcfd8436bef22d08b3c49600ec55e6b1a211f496096404597ea5759453126d53ccab468e267003de39b7afc5503da6d75c81557bcbda876ed25a26992cd385c9712572491341353656e6e9614fc4fd93280258fc10fae27b676a7cdcdc0ad3a4e8c9dff4dad1d804392f4ff51e00049a26113802dba252c2d77800c421a1d6872b1f00075beefd416a4f74fc38712d9557bd3fa2488477ee126d915051882d1a558ff5c3d75a4d6c", 0xf0, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000a00)={0x0, r9, r10}, &(0x7f0000000a40)=""/58, 0x3a, &(0x7f0000000b80)={&(0x7f0000000a80)={'xxhash64\x00'}, &(0x7f0000000ac0)="daec71cffc0978dd61d3a3307c3e7751ce5f3293be5103f52d073e390b06ad11154af6dd6b8884cadf3df847dc4cb3789bdbc4ad9ea78e8dee67a42cedfd6c454d912ce3a41d5c8458a845a62109442fcfc3a2cec513effd789afe3c3434b0d50d0bad9ac977fb00a719ef4917f1eba45ef3a9e2b884229b2595bebea41199eecb9d795d2da2731a42", 0x89})
clock_nanosleep(0x1, 0x1, &(0x7f0000000bc0)={0x0, 0x3938700}, &(0x7f0000000c00))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000c40)={{0x1, 0x1, 0x18, <r11=>r2}, './file0\x00'})
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c80)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937c, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0\x00'})
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000d00)={0x20b, 0xfffffff7, 0x6, 0x41, 0x5}, 0x14)

03:33:46 executing program 4:
kexec_load(0x400, 0x4, &(0x7f0000000280)=[{&(0x7f0000000000)="710c5bc533d2145473483d2106d06de9cde88d66d98e25acf6bc793cf7af0a19fa32548880830d92b4220b68e69e5aba4928af14722cf855bf864520f4156c13d3c3e3f7e36d7935e0243fc2968463d8e4ad85bed25514afb51a38975507306aa929c4deace11cc2bec2de50ee3da17c58637e6e9dd88ed7204b7f29b57ff8c096adc0c3025a6033a8a8eeee6e0d030bbeb6d5a156f01cbe2b8abce4fd9c9b2ae670f2b995e0ae8b587b88a5667619fa73370d1b310effed35a89a6d91e374fef314cd210f910209cfbcc7f08cee0c255e428c655791390f335bba739e7b31f49b8630c3d0c879bf7a8fc632ec4d6d", 0xef, 0x740000000000000, 0x5}, {&(0x7f0000000100)="c44f46ad9e9281d01a25036a3b4bf80b0d3a848ef8ee7dfbeb7ffacb7210b63f4ef0af0e27164dfbfdd8131ea2218e0b86822f271047dbb14a64bc9a351dc3d87b0d91", 0x43, 0xd61, 0x3ff}, {&(0x7f0000000180)="deae14853e0c2036df143e72d5eae2460fad44038099b5b8d44401ee1bbd188a47950119c29420921f0c154c2bc16c6feaef680f1fa5a37e4f781a50256fdb8e79716edfb2e008d5102ec33f6281a0df5e3016b3606b530b888867f6e7f926aadd7a7ad61c43abf720892e7a7c5706ac", 0x70, 0x9, 0x800}, {&(0x7f0000000200)="eb34a0bb728a82582e4eab0e9e0e6f02c4f4f9dfd4081b290a0b4335b51be9c5c2febd662b73ef1a99e56102a024ed2da697afefc5e360647d6c6b53430429297f9446d610ce83f1b5e83dec0f0abf8d7d", 0x51, 0x80000000, 0x1}], 0x30000)
sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x60000000)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080c0}, 0x408c4)
syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket(0x23, 0x80000, 0x8)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000300}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
recvmsg(r3, 0xfffffffffffffffc, 0x0)
write$bt_hci(r1, &(0x7f0000000640)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x3}}}, 0x5)
kexec_load(0x401, 0x8, &(0x7f0000001b80)=[{&(0x7f0000000680)="56f0a179888f1fd275fcd1b921ddd21a8d4bdb85b85a5dd06ec6f3ebc382d00141af13539f46377c64de5c26abc8cf8b12e378bc4bcb2fb4775416d7fd2f734e96be72ec676d2b89a9204d86f692e7791fa14053449932858175fba92083057dc9f4b1460ef82c3fdceae56fd4e9f01371217aebbda32d89689a5993ae5ff2f57aef1c555ccb4796a0fa54cf5d27c5eb62e6255d3c6f9d13", 0x98, 0x5, 0x9506}, {&(0x7f0000000740)="ac9b85e92af7de97499d12ea172383f30cd34b7132ce1b71b80d95055e8427d2d2c82d1b9e79798dd3a59243144b9ebdc0acbb7dd29b6b5c5e9fe4b4abc437b9b0988e19fa190e825f7d8200f195c24a0601c01864420ca6ddbc38e0591f81b8bd0bbf3d70bcc430cad642ffac39160d860f90e692d36d5976eff41e56059fe7c526d5ea13eb2188a007b65768543d3f76f5632a95a114334ae2c4456d21c06eaeb91ea5c19f7082f9b5c54ef6feff5e99", 0xb1, 0x1, 0x80000000}, {&(0x7f0000000800)="ea5155ec827c49b196eefb05ecf8072de48ababafcf5fb3e395610a86d9e6489391d8699bb28b6d3571f3f5f888419058935126ba8abb610861776b8e9a6dfaa036151fdde51fd9b84f838defbd736ed54fc09410f86eabd", 0x58, 0x200, 0x6}, {&(0x7f0000000880)="7f2017115b48a1ab373f3954b529ac90825c0563cb3f8f5130beac406c7b3ca8cbd35393f4a0fe67634927611e48afda4eb7b374c0672b078c9bea64d5becc0f56a25d58f2c1fab540bda82b671fb65ed041beb46fdb1e9ba505c9e92fd91028e327c809767fce8f4db77a0fb3adffdefd663d0800d45eec0bc48f10c97746d2be116518e737ba9da64b8658db5c57793d8009d9e9563fd6861ed2d496352ee50d3fabb2b3bd195bb6c1f4c7b14441af044c4af245014ea5332f8392c2e6e165c4c486511dceccf339cd19008d345e96eb9c056a15912bc7f6b0a3aeaa8298623b932f2f2857cafc83d8652b795cfb1d62577b6479a97eecf30475c93ee27915f977fe2ebb325e4105b2c9e43ed092991172159101779dfe777ed6d94f09f90ab84747674af09dcbc0cdd2992048617233305e465112080e0214f5c3e70773a6b8e6015187ab7f4e8b7fa8beb047f19b2bc85a6beef7207fdc1390715982bd30d75d156447b3ef6a3a63c675a4adacab93408568ee2a2b93c60667129dcda819ec7fc5bb8b00c5f3af55ca91d1e1dc88df64ee2151c791da1e5f09911719cd143d6e4adf1be90278ec93a4e1647dc7025267b59aa7d2141ffa9d861b9d9b572dd08cec52a99c6aa3e272a679f6ed7c8279f80e6915633cedb4a87cd21e33f6fd076d96ba2f63882ac7554a06236eb105f361fb12c2cbb32d21dcc3b68165de776713ed69607e9677f421e80084f8de6e1137b0553f639ffda58eebe76bd88cbb50e4ca34d1610022177c080becbbb2a4c0c8ce5ede02da43ab6bd033eb1e26b36fceb4567f300de044ef68f2cc2817fa907680b8c40b0c038e07231fbc9bf970bb42dab6b390a357be1568469b05133f8cddc1e1a4d6041f29e6a432f1e155777ee6d37a08ec928edcee68865b4ca7f6d1a0f48622b608528f99baa04f9df1332b3dbde1e34b7cd298c78a70b1ce789d56fc22b9bb3a84a87eb57dd3bb74a5ab291b702b1a756262d775ac3ac99d7a54930e94ec270789766772826ff13cbf3b94df10f5a1d000e2393a00582e76ac347e11467f106e3a0f48992ae03b5253bf449f13afd0dc2769ef15a374fac215e3c3b105336bae23c9a777b4abe7655ea3329888ce230b57d9cabe8f781bc96f7757554edfc6fc29f7d3ba2ab38e841dee38f0f7f7b6a9ff5d1c10964a90e63c880aea332d00fe1c01e4bab8a7d5453e10718ea43bea224c12b557ec62ef4f350ae3d1d3dc2e518e1ad695efb750940fcc87d4450bd141a2c5edfb80c47a525389a7dc2d258c11fb94a2d2b14f8ecff260ddd2f17c31a20493d138586ae840391cfc86a8abd904cb59e52938e3f36efe50fa6b616a6daba5be0b442b2181672039ebaf835f56450829683f88490771b666d458ca1fedecfb39cb32035451cec49e9f830162bd32aa1f4142cc1872fb8aeaa2c8f0626812e726a3ec7b8e5e0354a526fa3aba81e4fb22077531411052f0e66fb004aed0d552063c4df1aa9864e8d89b41029e3160f90c814790adac12c776e4ed0f7e434f26f04c1dc14e21408a104f3302bac36ad72039e0c718af6f5ea39bf85493ac96751023ccbb3da0b3b44f4822e4e49f8a20f1a0a03e583a7b0a85efad06a53d2e74a696dfa0db720239d0945633240eac854d30be2f6ce3a105c3575c33ad5599f140840bc57e78a6ca83d75d8bb5873ea5929bf5571506e1b1f45ed63c5c3c7c5c896e4e6fd3e806ae8b2dbc4d054071cbcea5af771c03d6df9e1fbf2a8c4ce9d3e518d1c5e496af688706c9dfecd5f63e8ad286d352f24201f0dc5d64e5ae390443e7ccb27de7ea98e0e6c582ac9cedbb66dc20c0360303ae7ec097265430e347d297b3affade8aa783f4049d2bb6594bba79bebde2e6579f7cb7ac37a36e31433247829fbf24584645872b6d1fed7d5e6e8976fefda074ffceb063e2d396ead4c636dd55c2dbc5522154a12bbf42d0601c88d777a2a2fe57e7e8d1f007f0f663ebaf2f195a21a9f362da3e8dcda167254760c1922e6090f171c18c4deace0d09a25ec708c0531f2910ae8b8a33ab729bd6fa3cb39ac4b6b63c127c9876d8d3505bea885747643bec95c632b26aaeca96321e5e05bf68f8d2366073c81e47e236b8ca2674f16e565f877b4de5b69d477e76b8ca2054b389104559f845108fda8910c32bf0bb932b5ffe7684093de97993ea6c1fafa5ece53a934c482fef5742acc6aa0841419e233c9a2e43f67d9a390daf111ffdb76b94f07bdcbf238a18b29217ec7c130eb0abf63f00b90ef4d519518574149b11baaf42e80e788ed632d5a4015b05055c00f41925c9ea1e64b8910ddb3c671e6514cbabc2d25950fc9595d79c69798110068bd7f228ea6f2168e903e53240ddc56ce920d850e9bcd01cc8577264220fb46eeaa140a4c3471154a52e438225e0b82fb1c2c508021f36ca2083bea3b67a534e7806ff5ef6603701f9c4f0fb28e092c36ec0db42cdd7f09922702c12bf3a78c2a1c9678c9397d6cbcc306776fa9357937319b7e3aefa3b508f8702827d4898fa7e0ce7a3e5aecc4e346d25061a40f79d4520bed4b3e145b945030138dcf398ac9a716850994d706122105276222445187ec25c5a58cf42666e1f2581d7039366d31bf744bbacf981573d659dc0cf0550b29bd29c649ebd2eda5c3851279282fc539029ad91242bc4ed3b81221b3c0860ae72dabdf03e4f47ff64a58eec61fdf0bb4fa0c66f850755e14f505b275c6767a5088e9f608dde53ab1c4b68d2ff011eb32ea803bd09aa4e7b37e1e9621faf286eb951a48797defc296b6421d7e7bb7d82d3176734c261072b3d0b951b581d52a560eed04ffe502e65e474201582023cb6d19b19cf9a7957be69d1eda5ee9a09b3128af4da7d65e4d46e8e2f7fbae677bc83c8436de1a6adeb65823f35180d4fb1ba1f633b5b869f9f8f57ad5e62a43289dae6f1871e8f0f507822603e9c5c917fd0d1db18b8945298dbdb78eb14939b78053eaa3f0e6d8ae4e4d8efa22bb71d771975ef8acc3bd30a6700908e7b6230b0b01257a6a28836c1c4c95800cc7e6737e7dc72dd807c6d70b4e689645cda2c9c49a11eb36dd88955af75c48ca3cc91e1372b5feafa9db9e8f83ccc6f350c135ee40848ad5563f7a530915f03e4bab1619b3d2191943c7ff37d93e6eebf1fa34294823bc2eb4f6f0904a8cc403dfc862944a671b83057f6dec7a785172b5ea8299888d940706639324a16b5fddbefeb5c8e2185d6a0b742af31cef3fc595d84aaf4b74e3bebd20b1218f0b30f37ea9839828cca62a4acc731a90938b988668655b01915c3735d7f63908b808ef02513f3651cb3c977b7b1807c8ae19ab75efd5ae65d6473ef836183ff51d50b43a707b530e8eca57b5efc12e66755383b26362a5ebc5b9d561b7041306e1bd18519a8506e85c538eb5ccd39c3fda54c997819d99f3876bf4de29e7ec22a08aea97559eff9a3f9eef6d347a87a304cc8200aa0add87ce70be37bf5f64e96fc9b7486bfaf31816de66b833e54dd81b8f185e00e418b49ce45bc5829bb759fae22f71fce161c51727912334fd4ae93942d3d2db7d6ca0b15f6bf8639462e23cee17f9304b1b837e9671ec411567db2e8b4fff9a21a0592de8e80ef327a911a3112ac81cb3dfb983ee519e8fc77773ac89bcab56d6c50eac18dc4abd7043c3f2491d6da0ce64481681414a2c264d8b0a103902cdce48f7eec4e42cf751b526a2fcf34c01210e4db38e2d9d358cf112fd190f2ba648b7d7356ce4b294a6295269c6e458ad7f149c1f7b724f5baff98decc7d75b8a382375f0ce3c7fbac465c233b42a82af7e9aa7b502f54a07a79593b151c4244ed5e2da4e3075b80b82b806ad277803d81b923c806b347b7865df7df2578fea5366fc18827106fa145031e36828470ec18f61dfd264fc12ac8dea1ff030bfd23bc17b73a04e0529b88fe49732037facf0eef012af51094796f3282fb9203ed92f2e9b900e53eca166941e7ddb5cc6fb05b3e57262473ca00e2af0d7708f03250c45fc0365a2a3589f1001f437a059751dfb213c1a2f2e5bb8a9fabc15650f07e04a46f1dc2d97a4dd40c7a8dae7cf27c896b0614558d05857fa7ea4567882cb96a06c8331723b5e4e671c0c53e087b8bf3e61848d6fb7a135af46bcedf25d4cbe0880a5f856b14a4594a8b196cbca389ac089feb28849b797b28d03dbef2a1a684de470fef3fb3b5237acb2f4758c449fa1d4719495e6658929f92d6a20d9eb667df757f655ccfb7f8b6cb12b0ab91a6f6a4f487c1126c3cdb0900c4821bfd89c5b72e94bd733160a88b09aaadad805612b6bbb128fab39944022e963c40429a7de76be936d88c8970bec87f960689ad41236a27e750c2096b47c39fce3aad7ef1e687266ce1cbf4bb574fbb9a00100066e0b033b06c5d845da094b371b8324f27aabd29b862791e01b8c27aa3d5e3f42fbcdb5884e09e8ca452bf6342ad7595978ffee4a2d57c37ff10c11b58130af8f7659e0718310bb15c5eab896108bee8f844d0d9d59aa751179733905fb5ffe0b224097373990dd60831fb2c1cfde97f6e3b868c396b541195ce93000df2b3b3b669b97ff2c9130b8534a99cc03a1328d477919ee79588b0ba27c52f44e89875a8b1a16d368a5289b791949790266434292d03016b890e1883372d3c062b45f47270337fc41113acda01c61fc7eff16eb5405a9eb8847a6cc5c46c010ebc7ec354a1af719d7d9012e6679deef795acbf1c03ac923756f2080c897d45243e27c5750fe3ae752e0b94d25d5652c79824cc181e1bb5130308e582a714b4eb6b88413f29d4b2394cdbe85084b4557d9068d6dee9bcc0974ff708ce8b2f7530b25ed0d3eeb622586dd65fe70c88ca0c8a63ce57b79bf9314dbbfdb27ba1268ef95a9e9a0b0672cbba5531f0c3588ae14f3404852142cc4deee7e2e383bfa9a80e7973eb744fdb193ef0d3b88013fa893aab1db97f9cd1a3a7aefa7d45fae7a53bc6060eecc0679962a8e2a426f5a45419b478fdb21027d94a2fabd442aa015433af103cc8182c8506028a415475eb2fa7d2cad3ba7f23bf77c73726a5310d788b39ec8bfc59a4fd1fdc0d0b589b0f0fac73e6a3c92015ce6c3489c9b17a4e99893ca264118a6ea5a393cd110d4d006121c8ed7da4a4a121a68fb41fdb07040048ef3682d3d044afc79c4ce8b13d50f52d060528aa130a8bc5d54ca619034a5b073ea9fa4810a4115959634f912afeb0dd3050b75a152204236192b636c822ca1c8bcaaf08ea4c668ed2199e472e12dec14982485835bed545d957eab33dfb60c54464c0607ac7aceb7b8b34a2e601571ea31102e959f2b19576efe3799c6b0d9432a2835886b502af590a5828cf5bf06324be4bdfc6950241b4c079d8b7555a54fa669d072584c1e72137ddcf6fc6fe3db31e4bc3545297d9179858d45482dde25a89348c3971ecd3834c6cd041f1488bb30e641d9b413985d09735d087e0f7a7211b97453756a020f5eb1b5e480a74fdbe65cf6812f6f7b3bc16053e49542ca7153a5eb12368b2355369b5e6facff4f2b6a476dd7289c92a33621155b34b0d73f05aa6d81cb0871cd8bcb44407fae008c65aada7db48fa036165eccdd74e3dd8a2a65f9b088a5110b734ef0d898fbbeee9a3e9cbbdfd4f6e7454c0b2fb197e660388ab1c0b6e0bb02d29db9e08bb8cc89b224e7d211117a4f34917641816b3b5ef76ffb80cb15f88f55dfc6b43a8f670638a5a1e51b703bead0c85fa4e5d544a02beca515292", 0x1000, 0x5, 0x10001}, {&(0x7f0000001880)="e0d37272a8c904bb9d7817d578b09e929a9f6d9088accf186bcedebd89001408d15edc199acd009266b8e72c0e91c2fb248434a4e26875be2a75dbfaab201fcea86c10a1cfcbc92dc5609d3e240efb2de89497fdfa3efd6a7b2a78fbfe71e8f5ddd4e3e0796d790ee7f4725b2ede42a1d08170a8a6383ebbac64c2f781599324c7edea1cbca5a1", 0x87, 0xffffffff}, {&(0x7f0000001940)="8dd173723ace387005c6204a043c2a31e0c4d710f71289d7aa256c77b90f6dc4ecba5c06fe03f146846c2b32be279634e0fdd442dee964c2ca72956b5f21336a700742db4262c8f4e405a6d114db10d4c11aab93c48e0ec5813a1293446bb846d5d74b53b40d2d1f9dcc4a17ff1027d729af5d58c1cec35de9f319e001a7805eed34fea7a29ecf367989b387eb8c510307779049b4d7dc72ef2c836c8e86608c73a4252961c1a84a50ccdda2c1ba867658a2e14d7580d030f412bd27f42c2ef7c207a9999d8c5edaf14259be813b2c71159296d2bffd075b5687a6752e4fc0b663c6d94a50d83cfe0f3c425f", 0xec, 0xffffffffffffc0f8, 0x8}, {&(0x7f0000001a40)="5b1d8d0a12a7c000b639069f42817a937e2e0d34a8a4d7b2bc8ffadf854024d16e6cee60844a7abd0bc7067b8e4f9c49ea42d898f84eccb2b949106437de13034e6faeb30d9db1184ad9c96c88251f3c46a71c36ccd6f410b391a0a0978b6542da9f2d218cf50ab91d5449fcae2523dd5042ba26ba2a98fd4fce8b9422257867226e1bd805538afc617c5b8cf80b41960213bf2551374c62bfb8528526f0896b949decd9f86474fb8d5dce4cd57a86a2be45891e397f2a1f77bf16f34d0f972ef4540adee8fd26b4b10e255f88749a9dfb679fd7c1c7c24611", 0xd9, 0x7782, 0x9}, {&(0x7f0000001b40)="a09e", 0x2, 0x6, 0x4}], 0x2)
syz_genetlink_get_family_id$ipvs(&(0x7f0000001c80), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000001d00), r1)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001dc0)={'ip6_vti0\x00', &(0x7f0000001d40)={'ip6gre0\x00', <r5=>0x0, 0x2f, 0x0, 0x6, 0x2, 0x1, @remote, @loopback, 0x1, 0x80, 0x1, 0x8}})
sendmsg$FOU_CMD_GET(r1, &(0x7f0000001ec0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x5c, r4, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x5c}, 0x1, 0x0, 0x0, 0x573caf35d3e9b3f3}, 0x40000c4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001f00)='fdinfo/4\x00')
sendmsg$FOU_CMD_GET(r1, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000002040)={0x7fff, 0x89, 0x1000, 0x8, 0x3}, 0x14)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0xbcd7f3e489f8d6b3}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x54, r0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20015}, 0x40004)

03:33:46 executing program 5:
r0 = memfd_secret(0x80000)
ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000000)={0x2, 0x1, 0x9})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001440)={{0x1, 0x1, 0x18, <r1=>r0, {0x644c, 0x7}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001480)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file0\x00'})
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000014c0)={0x8, [0x4c, 0x8], 0x6}, 0x10)
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000001500)={0xc80d}, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'erspan0\x00'})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001580)='environ\x00')
ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000015c0)={0xffffffffffffffff, 0x7, "e9bd74", 0x20, 0x7})
read$hiddev(r2, &(0x7f0000001600)=""/16, 0x10)
ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000001640))
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000001680)={0x9, [0x8, 0xad4], 0x1000}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000016c0)={{0x1, 0x1, 0x18, <r4=>r2, {0x7fffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000001700)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'wpan3\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0xc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x20, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f94f37c2e245c5404be492b47eec64f7"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r6 = memfd_secret(0x0)
ioctl$HIDIOCGFLAG(r6, 0x8004480e, &(0x7f00000018c0))
r7 = syz_open_dev$hiddev(&(0x7f0000001900), 0x7, 0x8200)
ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f0000001940)={0x1, 0x100, 0xa9, 0x1, 0x1, 0xfffff000})

03:33:46 executing program 6:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x12, 0xffffffffffffffff, 0x8000000)
ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x9763f)
mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x100010, 0xffffffffffffffff, 0x8000000)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x10000000)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x11c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0xc}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x24}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3c}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x401}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8080}, 0x40840)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000280))
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xb6e5e5c0b9a6e41b}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1d, 0x3f}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffff7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r4=>r0, {0xb9, 0xff000000}}, './file0\x00'})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8180000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r5, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048080}, 0x18000)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000780)={&(0x7f0000000600), 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xfc, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x65}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x26a0}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xf}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff80}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc000}, 0x84)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa0, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2f3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xa0}}, 0x4000000)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$FOU_CMD_GET(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

03:33:46 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x8864}, 0x800)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:syslogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40800}, 0x885)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan3\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000780)={&(0x7f0000000340), 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x314, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x128, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "eff075bcdf4d2feebb8a9f6e86db86c1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "bc413a3376f1148c58dcadba6e8d22eb"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3d3d8ecffc3aff2266596b1d453f7746"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2a}, @NL802154_KEY_ATTR_ID={0x88, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd6f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7bf3081c7fb3ec1ebb938920ecb43133"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9fdbbec9ba424593090d3ae15d5bd0359ef1258fd2bbb53a7ea08a5aea3ea4b3"}]}, @NL802154_ATTR_SEC_KEY={0xb4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8187a98a5d8c2ed1ecba8d3ebe86596f38c52580fa99accbcb3bd6d81193eb0f"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7d562e5cc3450c3b3fdfdbfd663fa47d"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "80be95ac3c8dc887bf18d5a1e67d7545"}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2000000000000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffa}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0xc0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "092bd5a2261a7faffe521a9d20f19f305b4d273429e2705523342871761332b6"}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a6e1325ded6be17bcc81965110643c00d0e0b27edd1317f5835c550a9730e663"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1302a3ac63fd9122e171491e9e19ec2d"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fca375313d6ae1e75060e95f5792243bec4ea2d4a51aad1054e5bf8d2c3bd0f3"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x314}, 0x1, 0x0, 0x0, 0x4004005}, 0x4000000)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
epoll_create1(0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000900), r0)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r5, 0x300, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x4004000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), r6)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r7)
sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r8, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x79}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x40}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x3000c0c0}, 0x44840)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000c40)={'wpan1\x00'})

[  121.169067] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  121.177548] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  121.182403] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  121.195583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  121.204017] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  121.254022] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  121.258962] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  121.261298] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  121.272455] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  121.277472] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  121.321154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  121.326048] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  121.330815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  121.332898] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  121.335491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  121.342982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  121.346346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  121.348092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  121.353169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  121.361555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  121.362161] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  121.373915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  121.387364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  121.389437] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  121.395355] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  121.471811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  121.494356] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  121.499265] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  121.513076] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  121.517058] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  121.521199] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  121.523482] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  121.536303] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  121.536998] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  121.544787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  121.555029] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  121.560274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  121.573796] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  121.592202] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  121.597628] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  123.247223] Bluetooth: hci0: command tx timeout
[  123.374822] Bluetooth: hci1: command tx timeout
[  123.437781] Bluetooth: hci3: command tx timeout
[  123.502153] Bluetooth: hci4: command tx timeout
[  123.504140] Bluetooth: hci2: command tx timeout
[  123.694157] Bluetooth: hci5: command tx timeout
[  123.695521] Bluetooth: hci6: command tx timeout
[  123.696756] Bluetooth: hci7: command tx timeout
[  125.294401] Bluetooth: hci0: command tx timeout
[  125.422741] Bluetooth: hci1: command tx timeout
[  125.485726] Bluetooth: hci3: command tx timeout
[  125.550705] Bluetooth: hci4: command tx timeout
[  125.551141] Bluetooth: hci2: command tx timeout
[  125.741758] Bluetooth: hci6: command tx timeout
[  125.742205] Bluetooth: hci7: command tx timeout
[  125.742732] Bluetooth: hci5: command tx timeout
[  127.351022] Bluetooth: hci0: command tx timeout
[  127.469769] Bluetooth: hci1: command tx timeout
[  127.533811] Bluetooth: hci3: command tx timeout
[  127.598128] Bluetooth: hci2: command tx timeout
[  127.599858] Bluetooth: hci4: command tx timeout
[  127.789868] Bluetooth: hci5: command tx timeout
[  127.791219] Bluetooth: hci7: command tx timeout
[  127.792110] Bluetooth: hci6: command tx timeout
[  129.390695] Bluetooth: hci0: command tx timeout
[  129.517767] Bluetooth: hci1: command tx timeout
[  129.581713] Bluetooth: hci3: command tx timeout
[  129.646891] Bluetooth: hci2: command tx timeout
[  129.647440] Bluetooth: hci4: command tx timeout
[  129.837773] Bluetooth: hci7: command tx timeout
[  129.838255] Bluetooth: hci6: command tx timeout
[  129.838721] Bluetooth: hci5: command tx timeout
[  181.293078] syz-executor.5 (283) used greatest stack depth: 24784 bytes left
[  183.862026] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  183.864400] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  183.866262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  183.871707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  183.874200] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  183.993496] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  183.996170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  184.000939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  184.010234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  184.020950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  184.025049] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  184.052949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  184.054482] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  184.056821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  184.066044] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  184.076083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  184.080313] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  184.081499] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  184.084056] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  184.085036] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  184.088743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  184.097495] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  184.100034] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  184.104202] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  184.105743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  184.117383] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  184.127142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  184.130013] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  184.135003] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  184.146836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  184.148667] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  184.154017] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  184.170334] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  184.183215] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  184.191257] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  184.197973] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  184.204440] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  184.210960] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  184.234015] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  184.253027] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  185.901898] Bluetooth: hci0: command tx timeout
[  186.093999] Bluetooth: hci1: command tx timeout
[  186.158517] Bluetooth: hci2: command tx timeout
[  186.221808] Bluetooth: hci4: command tx timeout
[  186.285880] Bluetooth: hci7: command tx timeout
[  186.286859] Bluetooth: hci5: command tx timeout
[  186.286899] Bluetooth: hci3: command tx timeout
[  186.349886] Bluetooth: hci6: command tx timeout
[  187.949720] Bluetooth: hci0: command tx timeout
[  188.141759] Bluetooth: hci1: command tx timeout
[  188.208852] Bluetooth: hci2: command tx timeout
[  188.269761] Bluetooth: hci4: command tx timeout
[  188.333719] Bluetooth: hci3: command tx timeout
[  188.334960] Bluetooth: hci7: command tx timeout
[  188.335383] Bluetooth: hci5: command tx timeout
[  188.397961] Bluetooth: hci6: command tx timeout
[  189.997913] Bluetooth: hci0: command tx timeout
[  190.189892] Bluetooth: hci1: command tx timeout
[  190.253718] Bluetooth: hci2: command tx timeout
[  190.317750] Bluetooth: hci4: command tx timeout
[  190.382109] Bluetooth: hci5: command tx timeout
[  190.382256] Bluetooth: hci7: command tx timeout
[  190.382594] Bluetooth: hci3: command tx timeout
[  190.446151] Bluetooth: hci6: command tx timeout
[  192.045855] Bluetooth: hci0: command tx timeout
[  192.238763] Bluetooth: hci1: command tx timeout
[  192.303062] Bluetooth: hci2: command tx timeout
[  192.365954] Bluetooth: hci4: command tx timeout
[  192.429785] Bluetooth: hci5: command tx timeout
[  192.430250] Bluetooth: hci7: command tx timeout
[  192.431755] Bluetooth: hci3: command tx timeout
[  192.494760] Bluetooth: hci6: command tx timeout
[  246.137918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  246.141427] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  246.145323] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  246.152516] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  246.157833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  246.203570] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  246.207393] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  246.214217] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  246.218609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  246.221445] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  246.223804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  246.226360] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  246.228403] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  246.239595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  246.245874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  246.368425] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  246.373298] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  246.376304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  246.377281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  246.380488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  246.381234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  246.399844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  246.400796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  246.401777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  246.403867] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  246.407141] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  246.419989] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  246.421438] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  246.425876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  246.428077] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  246.480756] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  246.494169] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  246.496512] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  246.504043] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  246.509228] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  246.570464] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  246.585947] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  246.594960] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  246.602786] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  246.611238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  248.237824] Bluetooth: hci0: command tx timeout
[  248.301778] Bluetooth: hci2: command tx timeout
[  248.303060] Bluetooth: hci1: command tx timeout
[  248.493977] Bluetooth: hci4: command tx timeout
[  248.495218] Bluetooth: hci3: command tx timeout
[  248.495261] Bluetooth: hci5: command tx timeout
[  248.558026] Bluetooth: hci6: command tx timeout
[  248.685799] Bluetooth: hci7: command tx timeout
[  250.287691] Bluetooth: hci0: command tx timeout
[  250.351732] Bluetooth: hci2: command tx timeout
[  250.351764] Bluetooth: hci1: command tx timeout
[  250.541767] Bluetooth: hci4: command tx timeout
[  250.542005] Bluetooth: hci3: command tx timeout
[  250.542320] Bluetooth: hci5: command tx timeout
[  250.605785] Bluetooth: hci6: command tx timeout
[  250.733734] Bluetooth: hci7: command tx timeout
[  252.334756] Bluetooth: hci0: command tx timeout
[  252.398162] Bluetooth: hci1: command tx timeout
[  252.399664] Bluetooth: hci2: command tx timeout
[  252.590298] Bluetooth: hci3: command tx timeout
[  252.591561] Bluetooth: hci4: command tx timeout
[  252.592066] Bluetooth: hci5: command tx timeout
[  252.654688] Bluetooth: hci6: command tx timeout
[  252.782921] Bluetooth: hci7: command tx timeout
[  254.382941] Bluetooth: hci0: command tx timeout
[  254.445741] Bluetooth: hci2: command tx timeout
[  254.446310] Bluetooth: hci1: command tx timeout
[  254.637941] Bluetooth: hci3: command tx timeout
[  254.640805] Bluetooth: hci4: command tx timeout
[  254.641214] Bluetooth: hci5: command tx timeout
[  254.701815] Bluetooth: hci6: command tx timeout
[  254.831938] Bluetooth: hci7: command tx timeout
[  308.430581] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  308.435243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  308.439889] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  308.448617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  308.453275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  308.455537] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  308.462145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  308.462333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  308.473608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  308.477984] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  308.559573] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  308.568615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  308.570918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  308.581763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  308.586132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  308.752463] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  308.769149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  308.771427] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  308.780222] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  308.780258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  308.783309] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  308.787162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  308.800372] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  308.803330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  308.805031] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  308.806231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  308.809803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  308.812347] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  308.813897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  308.824925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  308.833969] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  308.842885] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  308.883843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  308.890390] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  308.892342] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  308.896540] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  308.948427] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  308.989991] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  309.015828] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  309.020457] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  310.510734] Bluetooth: hci0: command tx timeout
[  310.575669] Bluetooth: hci1: command tx timeout
[  310.638706] Bluetooth: hci2: command tx timeout
[  310.893732] Bluetooth: hci4: command tx timeout
[  310.893836] Bluetooth: hci5: command tx timeout
[  310.958049] Bluetooth: hci3: command tx timeout
[  311.022109] Bluetooth: hci6: command tx timeout
[  311.149787] Bluetooth: hci7: command tx timeout
[  312.557699] Bluetooth: hci0: command tx timeout
[  312.624668] Bluetooth: hci1: command tx timeout
[  312.686712] Bluetooth: hci2: command tx timeout
[  312.942039] Bluetooth: hci4: command tx timeout
[  312.942191] Bluetooth: hci5: command tx timeout
[  313.005843] Bluetooth: hci3: command tx timeout
[  313.069988] Bluetooth: hci6: command tx timeout
[  313.199015] Bluetooth: hci7: command tx timeout
[  314.605796] Bluetooth: hci0: command tx timeout
[  314.671925] Bluetooth: hci1: command tx timeout
[  314.735969] Bluetooth: hci2: command tx timeout
[  314.990715] Bluetooth: hci5: command tx timeout
[  314.991158] Bluetooth: hci4: command tx timeout
[  315.053706] Bluetooth: hci3: command tx timeout
[  315.117732] Bluetooth: hci6: command tx timeout
[  315.245695] Bluetooth: hci7: command tx timeout
[  316.654673] Bluetooth: hci0: command tx timeout
[  316.718690] Bluetooth: hci1: command tx timeout
[  316.782718] Bluetooth: hci2: command tx timeout
[  317.037751] Bluetooth: hci4: command tx timeout
[  317.037774] Bluetooth: hci5: command tx timeout
[  317.101702] Bluetooth: hci3: command tx timeout
[  317.165853] Bluetooth: hci6: command tx timeout
[  317.295918] Bluetooth: hci7: command tx timeout
[  369.176274] syz-executor.5 (7863) used greatest stack depth: 24544 bytes left
[  371.218399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  371.226277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  371.231454] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  371.239995] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  371.244560] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  371.332110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  371.335450] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  371.337884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  371.343890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  371.348843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  371.534223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  371.536973] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  371.552876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  371.560317] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  371.571947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  371.632320] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  371.661943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  371.664481] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  371.667058] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  371.668810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  371.671365] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  371.679040] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  371.683811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  371.695863] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  371.700437] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  371.702677] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  371.704362] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  371.708423] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  371.718709] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  371.726193] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  371.735494] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  371.746562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  371.748289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  371.761981] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  371.767903] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  371.935037] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  371.959976] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  371.972307] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  371.997581] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  372.001088] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  373.294021] Bluetooth: hci0: command tx timeout
[  373.423059] Bluetooth: hci1: command tx timeout
[  373.678056] Bluetooth: hci2: command tx timeout
[  373.741920] Bluetooth: hci7: command tx timeout
[  373.742992] Bluetooth: hci5: command tx timeout
[  373.934322] Bluetooth: hci4: command tx timeout
[  373.935721] Bluetooth: hci3: command tx timeout
[  374.061945] Bluetooth: hci6: command tx timeout
[  375.341800] Bluetooth: hci0: command tx timeout
[  375.470509] Bluetooth: hci1: command tx timeout
[  375.726527] Bluetooth: hci2: command tx timeout
[  375.790300] Bluetooth: hci5: command tx timeout
[  375.791238] Bluetooth: hci7: command tx timeout
[  375.983059] Bluetooth: hci3: command tx timeout
[  375.984280] Bluetooth: hci4: command tx timeout
[  376.109798] Bluetooth: hci6: command tx timeout
[  377.389817] Bluetooth: hci0: command tx timeout
[  377.517751] Bluetooth: hci1: command tx timeout
[  377.774071] Bluetooth: hci2: command tx timeout
[  377.837777] Bluetooth: hci5: command tx timeout
[  377.838556] Bluetooth: hci7: command tx timeout
[  378.031122] Bluetooth: hci3: command tx timeout
[  378.032137] Bluetooth: hci4: command tx timeout
[  378.158008] Bluetooth: hci6: command tx timeout
[  379.438956] Bluetooth: hci0: command tx timeout
[  379.566686] Bluetooth: hci1: command tx timeout
[  379.823899] Bluetooth: hci2: command tx timeout
[  379.886736] Bluetooth: hci7: command tx timeout
[  379.887200] Bluetooth: hci5: command tx timeout
[  380.078928] Bluetooth: hci3: command tx timeout
[  380.079413] Bluetooth: hci4: command tx timeout
[  380.206781] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
03:38:55  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000001 RCX=23c42bae1de9e4a1 RDX=ffffffff81353d19
RSI=000000002b6731b2 RDI=000000004c1ff99b RBP=ffff8880285a7420 RSP=ffff8880285a7358
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=ffff8880285a7410 R14=ffff88802b309b80 R15=ffff8880285a73c8
RIP=ffffffff81353d33 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe01a00a6f4 CR3=00000000294a8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fe01a01947000007fe01a018f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=7fffffffffffffff RBX=dffffc0000000000 RCX=ffffffff8161bb0e RDX=ffff888016815280
RSI=ffffffff8161bbb6 RDI=0000000000000006 RBP=00000063c7cf6018 RSP=ffff88806cf08f30
R8 =0000000000000001 R9 =0000000000000000 R10=00000063c7cf6018 R11=0000000000000001
R12=0000000000000046 R13=ffff88806cf280cc R14=0000000000000000 R15=ffff88806cf28080
RIP=ffffffff81738d98 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0d86402540 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe1900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0d8659d4a1 CR3=000000001d15c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff
XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000