Warning: Permanently added '[localhost]:48305' (ECDSA) to the list of known hosts.
2025/06/26 23:43:29 fuzzer started
2025/06/26 23:43:29 dialing manager at localhost:45637
syzkaller login: [   95.248944] cgroup: Unknown subsys name 'net'
[   95.397164] cgroup: Unknown subsys name 'cpuset'
[   95.447012] cgroup: Unknown subsys name 'rlimit'
2025/06/26 23:43:44 syscalls: 201
2025/06/26 23:43:44 code coverage: enabled
2025/06/26 23:43:44 comparison tracing: enabled
2025/06/26 23:43:44 extra coverage: enabled
2025/06/26 23:43:44 setuid sandbox: enabled
2025/06/26 23:43:44 namespace sandbox: enabled
2025/06/26 23:43:44 Android sandbox: enabled
2025/06/26 23:43:44 fault injection: enabled
2025/06/26 23:43:44 leak checking: enabled
2025/06/26 23:43:44 net packet injection: enabled
2025/06/26 23:43:44 net device setup: enabled
2025/06/26 23:43:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/26 23:43:44 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/26 23:43:44 USB emulation: enabled
2025/06/26 23:43:44 hci packet injection: enabled
2025/06/26 23:43:44 wifi device emulation: enabled
2025/06/26 23:43:44 802.15.4 emulation: enabled
2025/06/26 23:43:44 fetching corpus: 0, signal 0/0 (executing program)
2025/06/26 23:43:45 starting 8 fuzzer processes
23:43:45 executing program 0:
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10001)
ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x5, 0x565, 0x4, 0x4})
ioctl$TIOCGPTPEER(r0, 0x5441, 0x200)
ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f0000000080)={@lba=0x2, 0x2, 0x15, &(0x7f0000000040)=""/21})
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$CDROM_NEXT_WRITABLE(r1, 0x5394, &(0x7f0000000100))
ioctl$CDROMEJECT(r1, 0x5309)
ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000140)={0x5, 0x1, 0xb, 0x2, @msf={0x40, 0x7, 0x80}, 0x5})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000180)={0x7fffffff, 0xfffffffe, 0x0, 0x5, 0x4})
ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f00000001c0)={0x1, 0xa, 0xa, 0x3, @msf={0x5, 0x3f}, 0xc2})
r3 = io_uring_setup(0x213e, &(0x7f0000000200)={0x0, 0xae7d, 0x20, 0x3, 0x353})
syz_io_uring_setup(0x35b7, &(0x7f0000000280)={0x0, 0xf87b, 0x8, 0x0, 0x2ad, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340))
ioctl$CDROMSEEK(r1, 0x5316, &(0x7f0000000380)={0x2, 0x5, 0x0, 0x20, 0x3, 0x2})
ioctl$CDROMREADAUDIO(r1, 0x530e, &(0x7f0000000400)={@lba=0x80000000, 0x1, 0x39, &(0x7f00000003c0)=""/57})
ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000440)={0x20, 0x5, 0x3, 0x80, 0xfb, 0xff})
ioctl$TIOCCBRK(r1, 0x5428)
ioctl$TCGETS(r0, 0x5401, &(0x7f0000000480))
ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f00000004c0)={0x1, 0x5, 0x1, 0x3f, 0x8, 0x2a})
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x4}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000)

23:43:45 executing program 3:
rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x18, 0x5})
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x40140, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x23, 0x73, {0x73, 0x10, "c64bdbc58190c24a5f03cb9207a035da0e984e470eea16ed8d2d190592c3fca4cce8233f9610e6c3331bc45a2d6949f7ee3973a186ed2730faa480908e9fdc326c7afa0f947d1fc0152abf03951c4306f4840255e0942a669dfb6ca0831a48d46396190a3348e3628172fcd71f15f1d8ec"}}, &(0x7f0000000140)={0x0, 0x3, 0xac, @string={0xac, 0x3, "58fa71dd4fc45689fde0e9b3139e9e08ee6d4a382b08cb13bc76a647cce80bdcb90025c46fc1cd98e3e9e1990494f7a133f98d73b8910a2b161a04dfa3099075cf32d80d3cc746e96f7de31bc37b26135f3b788869e33bfde12be442bb8666e506c4b238bd73f14dd84a348dcd97379306712a6756c7e019682ec4060720e88ef7da9715eed169d1606ad5a9a191bc55057518f8b1ec33bcf541c9957a948808cab2666569a345689541"}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000240)={0x0, 0x18, 0x6b, "0d63294a2bc380954bac96af940c3e0c8f57677b3612bcd475314114df9d287af7c164f863b1f478ca07bdb303d371645e3d718a2c98ec763d6acca7e52cb0e2b88261defbacb8d05f2a2dee65524109c66a046a0b25eaa4e67e2892ea28855dc3900036ab14d08bdf1ff3"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x0, 0xe0, {0xde, "bb4487d4bf26cc7373da2430c51db23af77217ae709fe84aa7e4ab37d0602b079176b0c9c8a89a44686a2dee74d794d0cf477e58a96e015b3a89ed69a4cd1b2c285f3cf985ecb8e02964a9d60d82be12d781cf790121a508f17e34b5299e107fef20c862d4ba1e2e1c3398554d3568a55d55fd626db47f544559d99cabf8ed31ae4813391b5493d046600adb06112f26d6d507a52107553e3c9423dec125cea7ad89d699a8e4fbd18afaf5f75d738d67da1e3c5956ae8f34e488b0d32933853a1467c17f95db1299384b09d973a7d78c2af7fac1ebbf73de5c4e4a023b43"}}, &(0x7f0000000440)={0x20, 0x1, 0x1, 0xfa}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0xff}})
r1 = socket(0x21, 0x0, 0x6)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14)
ioctl$CDROM_CHANGER_NSLOTS(r0, 0x5328)
rt_sigqueueinfo(0x0, 0x5, &(0x7f0000000580)={0x1f, 0x800, 0x2})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600)={0x0, <r2=>0x0})
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000680)={r2, 0x1, 0x101})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000006c0)=""/169)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000780))
r4 = syz_io_uring_complete(0x0)
ioctl$CDROMPLAYMSF(r4, 0x5303, &(0x7f0000000800)={0x4, 0xaf, 0x84, 0x4, 0x3, 0x46})
ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000840)=0x6)
syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000880)=0x1, 0x0, 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000008c0))
ioctl$TIOCMIWAIT(r0, 0x545c, 0x0)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000ac0)="57edd20726b2e316ccd608a77a0d83d18e754cd1f255f1cc0f01ba398f50998121090d2b596a3bf5aee69fed602c26337356685238f0662b8ee374c33078a84236b828a13e6da457fbc37626d21ef50b5790c38bde37558f5620dd8c9f6d958d3cdcac95ed7c84ebe1c2985bfd321117f1ff7675dd1a341fa891188b58ea7382436418b322e3d387c5f776ee3bc3cb1d3f1c6523136527f255f4a0ce2d2e38eac1a5566190f5adc55e0cf8d8eec233644518105f2e87d54705edea6d", 0xbc)

23:43:45 executing program 2:
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309)
ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000180))
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}]}, 0x48}, 0x1, 0x0, 0x0, 0xa04cf2db92d786}, 0x8)
sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044046}, 0x4005010)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x40040)
waitid(0x0, 0xffffffffffffffff, &(0x7f0000000580), 0x8, &(0x7f0000000600))
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCMIWAIT(r4, 0x545c, 0x0)
r5 = socket(0x25, 0xa, 0x81)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, r3, 0xd7c53dfd604f0a6d, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x48}}, 0x1)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r5)
sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xb4, r6, 0x500, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf940}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x4008000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
wait4(0x0, &(0x7f00000009c0), 0x1000000, &(0x7f0000000a00))

[  110.736378] audit: type=1400 audit(1750981425.269:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:43:45 executing program 4:
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0)
getpid()
r0 = syz_io_uring_complete(0x0)
ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000080)={0x4, 0x7})
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x10080, 0x0)
ioctl$CDROMRESUME(r1, 0x5302)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@fscache}, {@cache_none}], [{@smackfsdef={'smackfsdef', 0x3d, '}'}}, {@fowner_gt}, {@measure}, {@obj_type={'obj_type', 0x3d, '/dev/cdrom\x00'}}, {@obj_role={'obj_role', 0x3d, '\\$'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})
r2 = syz_io_uring_complete(0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x20, 0x1, 0x8, 0x40, {{0xf, 0x4, 0x1, 0x7, 0x3c, 0x68, 0x0, 0x40, 0x4, 0x0, @multicast1, @private=0xa010101, {[@cipso={0x86, 0x23, 0x3, [{0x5, 0x10, "3e4bc0494d2ad776f0b7c7f6c3f7"}, {0x7, 0xd, "807bb6d435c4275d719b74"}]}, @end, @lsrr={0x83, 0x3, 0xb7}]}}}}})
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)
setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000300)=0x5, 0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000400)={'erspan0\x00', r4, 0x80, 0x7800, 0x8, 0x2000, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x66, 0x0, 0x0, 0x2b, 0x0, @broadcast, @multicast1, {[@end]}}}}})
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000800)
sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xc0, 0x0, 0xa00, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0xa}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x982}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x24040000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x6, 0x3, 0x0, 0x2}, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000780)={0x3, &(0x7f0000000740)=[{0x100, 0x0, 0x8, 0x832}, {0x1, 0x7f, 0xff}, {0x0, 0x40, 0x20, 0x200}]})

23:43:45 executing program 5:
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040801}, 0x0)
r0 = syz_io_uring_complete(0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0, <r2=>0x0, <r3=>0x0})
ioctl$CDROM_DEBUG(r0, 0x5330, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000400)={"1fc069fccc4afd9796e22e396ad8975c", r3, <r4=>r2, {0xca20, 0x6}, {0x100000001, 0x8}, 0x8, [0x3ff, 0x2, 0x4, 0x100, 0x3, 0x2, 0x100000000, 0x9, 0xc1b7, 0x10001, 0x7, 0x100, 0xffffffff, 0x6055, 0x9, 0x7]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000500)={"91042b42a22787225b235eae84722e7a", r4, r1, {0x6, 0x2}, {0x7fffffff, 0x81}, 0x0, [0x0, 0x7ff, 0x7d9, 0x9f9, 0x5, 0x8001, 0x8, 0x7ff, 0x100, 0xfff, 0x0, 0x4, 0x2, 0x2, 0x7ff, 0xfffffffffffffffb]})
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000600))
r5 = syz_io_uring_complete(0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000740)={0x8, 0x0, &(0x7f0000000640)=[@increfs], 0x99, 0x0, &(0x7f0000000680)="e348826b7efe5d6eb2580077fb1dba6110405c85ff692648d95df8a9758b0fd84ae8e75c34141ddff8e7c704fb112d869f6c1e80e95e1e1ce7558b395f3af69af6c5d211927f45ed8d285f687818c3fdd888fb18b73746c73e9164ecd1d62bb2aaf6c737769590b97a4a3c3abaff59d0890ac313d22fd2e52d61148ea82c3be460f5ea5750b9d52f2132830a7f74dc2a4e620b950134aed352"})
r6 = syz_genetlink_get_family_id$smc(&(0x7f00000007c0), r0)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40000)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}}, 0x2004c8c4)
syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10814}, 0x8000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x200000c8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00))
r8 = io_uring_setup(0x884, &(0x7f0000000c40)={0x0, 0x4e17, 0x1, 0x0, 0x38c})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000f, 0x10010, r8, 0x8000000)

23:43:45 executing program 6:
r0 = socket(0xb, 0x80000, 0xffffffff)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x40)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x94000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, r1, 0x70d, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffff800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x87}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8004}, 0x4004014)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa0, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000800}, 0x40855)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x842)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400a4071}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x160, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xb7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc40}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x32}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff7fff}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb5d}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r2)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1004c000}, 0x804)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4081)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000c00)={0x73622a85, 0xa, 0x2})
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8420000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000e40)={&(0x7f0000000d80), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}}, 0x20004002)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x9)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000f80)={'wpan4\x00'})

23:43:45 executing program 7:
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c015}, 0x154)
prctl$PR_GET_FP_MODE(0x2e)
r0 = geteuid()
r1 = syz_io_uring_complete(0x0)
r2 = getegid()
r3 = geteuid()
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4010080, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x401}}, {@loose}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@noextend}], [{@uid_eq={'uid', 0x3d, r3}}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x63, 0x65, 0x35, 0x32, 0x38, 0x33, 0x34], 0x2d, [0x37, 0x37, 0x36, 0x38], 0x2d, [0x39, 0x30, 0x39, 0x29], 0x2d, [0x32, 0x39, 0x62, 0x33], 0x2d, [0x38, 0x64, 0x34, 0x35, 0x39, 0x37, 0x66, 0x65]}}}, {@subj_user}, {@uid_lt={'uid<', r0}}, {@obj_role={'obj_role', 0x3d, '@.=%@[-+-\'}]8-\xd0'}}, {@fowner_gt={'fowner>', r0}}, {@dont_hash}]}})
ioctl$CDROMMULTISESSION(r1, 0x5310, &(0x7f0000000640)={@lba=0x3, 0x0, 0x3})
prctl$PR_GET_FP_MODE(0x2e)
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf4, 0x0, 0x100, 0x6, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40000000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000880), r1)
sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4008000)
r6 = io_uring_setup(0x7ac0, &(0x7f0000000980)={0x0, 0xafc6, 0x0, 0x2, 0x36, 0x0, r1})
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x1000000, 0x10010, r6, 0x8000000)
syz_io_uring_submit(r7, 0x0, &(0x7f0000000ac0)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r1, 0x0, &(0x7f0000000a00)="6af7fbbf405a9ad4efa3515e38547afc34806241e10533dc1325e94506eb64d50b2dde7d4721d8643c35746d74da68ff6b9807874c4ea64c809392162c2cf7b1fc38bc459e964924b4b15b886a994b2c38dfaedcab74726624c79b6092507b4ed0d19b757379b4fcdc19baac23cadb203d1edf820ea248336e3a75242bcb1f9031733d4ef82d5c81de456007c1d60e0ad50856d3d0a5e30c8f87095c4e37236aae9ccc73e6d9a73c73", 0xa9, 0x20008000}, 0x0)
r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b00), 0x448e00, 0x0)
ioctl$CDROMMULTISESSION(r8, 0x5310, &(0x7f0000000b40)={@msf={0x80}, 0x0, 0x1})
r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000bc0), r1)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x84, r9, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008044)

23:43:45 executing program 1:
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@seclabel}, {@subj_role={'subj_role', 0x3d, ')\'\xd8,,*]'}}, {@smackfshat={'smackfshat', 0x3d, '^/'}}, {@subj_user={'subj_user', 0x3d, '-*-/'}}]}})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x0, 0x7, 0xff, 0x5a}, {0x9, 0x80, 0x57, 0xfffffe00}, {0x6, 0x7, 0x8, 0x200}, {0x800, 0x3, 0x5, 0x5}, {0x400, 0x0, 0xec, 0x52326f89}, {0x3f, 0x9, 0x1f, 0x8}]})
r1 = io_uring_setup(0x69dc, &(0x7f0000000180)={0x0, 0xb65, 0x5, 0x3, 0x318})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000200)={0x0, 0x3, r1, 0xf311})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000280)={0x0, 0x2, r3, 0x81, 0x80000})
ioctl$DVD_AUTH(r2, 0x5390, &(0x7f00000002c0)=@lsa)
ioctl$CDROMRESUME(r2, 0x5302)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)={<r4=>0x0})
r5 = syz_io_uring_setup(0x507, &(0x7f0000000380)={0x0, 0xb8f7, 0xf, 0x2, 0x36c, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000400), &(0x7f0000000440))
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000480)={r4, 0x2, r5, 0x9})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000500)={0x6, &(0x7f00000004c0)=[{0x5, 0x0, 0x9a, 0x22f5}, {0x4, 0xc8, 0x7, 0x5}, {0xd716, 0x40, 0x7, 0x33c}, {0x100, 0x9, 0x0, 0x3}, {0x400, 0x8d, 0x6a, 0x5b1}, {0x5, 0x38, 0x7f, 0x7}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000540)={r4, 0xae53, 0x78})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000580)={"ca1feea6e083bdd678d0e57aed6737a6", 0x0, 0x0, {0x9, 0x9}, {0x3, 0x4}, 0x8, [0x8, 0x0, 0x401, 0xfbe9, 0x2, 0x808, 0x7fff, 0x5, 0xff, 0x0, 0x5, 0x4, 0xfff, 0x8, 0x7, 0x6]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000680)={0x0, ""/256, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000880)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}], 0x6, "826587d59cefe8"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000001880)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}], 0x7, "0576d5bafae046"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000002880)={0xa2b, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r10=>0x0}], 0x3f, "cd13895825554a"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000088480)={0x1, [{}, {}, {r7}, {0x0, r8}, {0x0, r9}, {r10}], 0x3f, "ecee8fef7e09ff"})

[  112.053519] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.056544] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.064510] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.067545] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.071135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.075356] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.084884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.089888] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.090065] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.106597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.179423] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.184520] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.189784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.197974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.202561] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.220709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.243929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.265982] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.268030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.293809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.296015] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.304825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  112.307734] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.328993] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  112.339059] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  112.389315] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.408832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  112.426917] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  112.439211] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  112.461726] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  112.469828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.471886] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  112.500582] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  112.520529] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  112.554805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  112.674548] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  112.715892] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  112.725785] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  112.755838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  112.787092] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  114.192948] Bluetooth: hci1: command tx timeout
[  114.193146] Bluetooth: hci0: command tx timeout
[  114.257782] Bluetooth: hci2: command tx timeout
[  114.384478] Bluetooth: hci3: command tx timeout
[  114.451620] Bluetooth: hci4: command tx timeout
[  114.577824] Bluetooth: hci5: command tx timeout
[  114.641679] Bluetooth: hci6: command tx timeout
[  114.961529] Bluetooth: hci7: command tx timeout
[  116.240391] Bluetooth: hci1: command tx timeout
[  116.241981] Bluetooth: hci0: command tx timeout
[  116.305352] Bluetooth: hci2: command tx timeout
[  116.433531] Bluetooth: hci3: command tx timeout
[  116.499327] Bluetooth: hci4: command tx timeout
[  116.625584] Bluetooth: hci5: command tx timeout
[  116.689352] Bluetooth: hci6: command tx timeout
[  117.009351] Bluetooth: hci7: command tx timeout
[  118.289690] Bluetooth: hci0: command tx timeout
[  118.290167] Bluetooth: hci1: command tx timeout
[  118.352330] Bluetooth: hci2: command tx timeout
[  118.480470] Bluetooth: hci3: command tx timeout
[  118.544601] Bluetooth: hci4: command tx timeout
[  118.672566] Bluetooth: hci5: command tx timeout
[  118.736642] Bluetooth: hci6: command tx timeout
[  119.056462] Bluetooth: hci7: command tx timeout
[  120.336347] Bluetooth: hci1: command tx timeout
[  120.336805] Bluetooth: hci0: command tx timeout
[  120.400331] Bluetooth: hci2: command tx timeout
[  120.529652] Bluetooth: hci3: command tx timeout
[  120.592316] Bluetooth: hci4: command tx timeout
[  120.720326] Bluetooth: hci5: command tx timeout
[  120.784545] Bluetooth: hci6: command tx timeout
[  121.104318] Bluetooth: hci7: command tx timeout
[  174.368577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  174.371555] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  174.374554] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  174.382213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  174.391712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  174.517367] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  174.525414] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  174.529712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  174.536393] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  174.540498] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  174.557947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  174.571567] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  174.576868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  174.591832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  174.600842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  174.662143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  174.669430] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  174.674190] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  174.682975] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  174.692057] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  174.706674] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  174.709364] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  174.713602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  174.721607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  174.724808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  174.731048] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  174.777596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  174.778609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  174.789681] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  174.796098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  174.845907] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  174.857832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  174.860730] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  174.863400] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  174.873407] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  174.878399] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  174.880847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  174.887635] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  174.953337] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  174.976855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  176.465581] Bluetooth: hci0: command tx timeout
[  176.592347] Bluetooth: hci1: command tx timeout
[  176.658322] Bluetooth: hci2: command tx timeout
[  176.848355] Bluetooth: hci5: command tx timeout
[  176.848632] Bluetooth: hci4: command tx timeout
[  176.976417] Bluetooth: hci7: command tx timeout
[  176.976446] Bluetooth: hci3: command tx timeout
[  177.041335] Bluetooth: hci6: command tx timeout
[  178.513373] Bluetooth: hci0: command tx timeout
[  178.642142] Bluetooth: hci1: command tx timeout
[  178.705372] Bluetooth: hci2: command tx timeout
[  178.896608] Bluetooth: hci4: command tx timeout
[  178.897448] Bluetooth: hci5: command tx timeout
[  179.024428] Bluetooth: hci7: command tx timeout
[  179.025361] Bluetooth: hci3: command tx timeout
[  179.090307] Bluetooth: hci6: command tx timeout
[  180.560451] Bluetooth: hci0: command tx timeout
[  180.688460] Bluetooth: hci1: command tx timeout
[  180.752366] Bluetooth: hci2: command tx timeout
[  180.945474] Bluetooth: hci5: command tx timeout
[  180.945612] Bluetooth: hci4: command tx timeout
[  181.072934] Bluetooth: hci7: command tx timeout
[  181.073544] Bluetooth: hci3: command tx timeout
[  181.137838] Bluetooth: hci6: command tx timeout
[  182.609552] Bluetooth: hci0: command tx timeout
[  182.738368] Bluetooth: hci1: command tx timeout
[  182.803348] Bluetooth: hci2: command tx timeout
[  182.992934] Bluetooth: hci4: command tx timeout
[  182.993329] Bluetooth: hci5: command tx timeout
[  183.120439] Bluetooth: hci7: command tx timeout
[  183.123293] Bluetooth: hci3: command tx timeout
[  183.184387] Bluetooth: hci6: command tx timeout
[  236.646665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  236.650076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  236.655127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  236.662863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  236.669972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  236.778502] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  236.784135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  236.785679] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  236.786764] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  236.794716] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  236.799182] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  236.807999] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  236.811600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  236.816101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  236.827777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  236.964745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  236.970738] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  236.974947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  236.985091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  236.991098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  237.055440] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  237.071150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  237.073722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  237.074804] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  237.095519] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  237.104108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  237.117416] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  237.120526] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  237.135437] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  237.160019] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  237.163064] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  237.167402] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  237.173988] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  237.174907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  237.183497] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  237.184366] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  237.185223] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  237.204677] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  237.207847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  237.278910] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  238.737364] Bluetooth: hci0: command tx timeout
[  238.865340] Bluetooth: hci1: command tx timeout
[  238.931330] Bluetooth: hci2: command tx timeout
[  239.058284] Bluetooth: hci3: command tx timeout
[  239.312348] Bluetooth: hci5: command tx timeout
[  239.376330] Bluetooth: hci4: command tx timeout
[  239.440441] Bluetooth: hci7: command tx timeout
[  239.440475] Bluetooth: hci6: command tx timeout
[  240.784659] Bluetooth: hci0: command tx timeout
[  240.912495] Bluetooth: hci1: command tx timeout
[  240.977508] Bluetooth: hci2: command tx timeout
[  241.106532] Bluetooth: hci3: command tx timeout
[  241.361283] Bluetooth: hci5: command tx timeout
[  241.424389] Bluetooth: hci4: command tx timeout
[  241.489380] Bluetooth: hci6: command tx timeout
[  241.489739] Bluetooth: hci7: command tx timeout
[  242.833359] Bluetooth: hci0: command tx timeout
[  242.961359] Bluetooth: hci1: command tx timeout
[  243.024521] Bluetooth: hci2: command tx timeout
[  243.153633] Bluetooth: hci3: command tx timeout
[  243.408490] Bluetooth: hci5: command tx timeout
[  243.472514] Bluetooth: hci4: command tx timeout
[  243.536533] Bluetooth: hci6: command tx timeout
[  243.536611] Bluetooth: hci7: command tx timeout
[  244.881355] Bluetooth: hci0: command tx timeout
[  245.010287] Bluetooth: hci1: command tx timeout
[  245.072597] Bluetooth: hci2: command tx timeout
[  245.200754] Bluetooth: hci3: command tx timeout
[  245.456621] Bluetooth: hci5: command tx timeout
[  245.520468] Bluetooth: hci4: command tx timeout
[  245.584341] Bluetooth: hci7: command tx timeout
[  245.584360] Bluetooth: hci6: command tx timeout
[  298.979392] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  298.982715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  298.986680] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  299.000490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  299.004951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  299.242042] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  299.245823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  299.251013] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  299.260764] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  299.267215] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  299.405615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  299.414602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  299.421539] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  299.424950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  299.432710] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  299.435761] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  299.441693] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  299.447298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  299.455515] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  299.460969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  299.490867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  299.503210] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  299.509812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  299.528750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  299.536487] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  299.601637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  299.618858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  299.673569] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  299.680694] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  299.684590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  299.707144] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  299.752546] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  299.759833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  299.763857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  299.768833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  299.792736] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  299.802491] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  299.836068] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  299.903548] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  300.012781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  301.072541] Bluetooth: hci0: command tx timeout
[  301.328922] Bluetooth: hci1: command tx timeout
[  301.520387] Bluetooth: hci3: command tx timeout
[  301.584787] Bluetooth: hci2: command tx timeout
[  301.587513] Bluetooth: hci4: command tx timeout
[  301.776716] Bluetooth: hci5: command tx timeout
[  301.968556] Bluetooth: hci6: command tx timeout
[  302.224447] Bluetooth: hci7: command tx timeout
[  303.121586] Bluetooth: hci0: command tx timeout
[  303.377273] Bluetooth: hci1: command tx timeout
[  303.570335] Bluetooth: hci3: command tx timeout
[  303.632491] Bluetooth: hci2: command tx timeout
[  303.633386] Bluetooth: hci4: command tx timeout
[  303.824829] Bluetooth: hci5: command tx timeout
[  304.017306] Bluetooth: hci6: command tx timeout
[  304.272435] Bluetooth: hci7: command tx timeout
[  305.169418] Bluetooth: hci0: command tx timeout
[  305.425333] Bluetooth: hci1: command tx timeout
[  305.617741] Bluetooth: hci3: command tx timeout
[  305.681391] Bluetooth: hci4: command tx timeout
[  305.681867] Bluetooth: hci2: command tx timeout
[  305.873597] Bluetooth: hci5: command tx timeout
[  306.067017] Bluetooth: hci6: command tx timeout
[  306.320740] Bluetooth: hci7: command tx timeout
[  307.216396] Bluetooth: hci0: command tx timeout
[  307.472713] Bluetooth: hci1: command tx timeout
[  307.664557] Bluetooth: hci3: command tx timeout
[  307.729478] Bluetooth: hci4: command tx timeout
[  307.729972] Bluetooth: hci2: command tx timeout
[  307.921352] Bluetooth: hci5: command tx timeout
[  308.115321] Bluetooth: hci6: command tx timeout
[  308.369626] Bluetooth: hci7: command tx timeout
[  361.510187] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  361.520151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  361.523903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  361.530790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  361.540182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  361.589519] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  361.594052] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  361.596921] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  361.620814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  361.625824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  361.842490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  361.856725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  361.869532] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  361.884905] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  361.893084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  361.899984] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  361.904918] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  361.913228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  361.943689] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  361.957014] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  361.980929] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  361.994781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  362.020887] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  362.075660] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  362.086200] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  362.092005] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  362.092961] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  362.096339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  362.105276] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  362.111173] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  362.122053] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  362.132107] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  362.183962] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  362.186207] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  362.200213] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  362.200699] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  362.214878] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  362.221655] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  362.307457] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  362.363904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.601969] Bluetooth: hci0: command tx timeout
[  363.665330] Bluetooth: hci1: command tx timeout
[  363.985360] Bluetooth: hci2: command tx timeout
[  364.048355] Bluetooth: hci3: command tx timeout
[  364.176382] Bluetooth: hci6: command tx timeout
[  364.304355] Bluetooth: hci4: command tx timeout
[  364.369342] Bluetooth: hci7: command tx timeout
[  364.561485] Bluetooth: hci5: command tx timeout
[  365.649371] Bluetooth: hci0: command tx timeout
[  365.712525] Bluetooth: hci1: command tx timeout
[  366.034304] Bluetooth: hci2: command tx timeout
[  366.096625] Bluetooth: hci3: command tx timeout
[  366.224811] Bluetooth: hci6: command tx timeout
[  366.352403] Bluetooth: hci4: command tx timeout
[  366.417073] Bluetooth: hci7: command tx timeout
[  366.609639] Bluetooth: hci5: command tx timeout
[  367.697330] Bluetooth: hci0: command tx timeout
[  367.761280] Bluetooth: hci1: command tx timeout
[  368.081484] Bluetooth: hci2: command tx timeout
[  368.145750] Bluetooth: hci3: command tx timeout
[  368.272687] Bluetooth: hci6: command tx timeout
[  368.400350] Bluetooth: hci4: command tx timeout
[  368.465876] Bluetooth: hci7: command tx timeout
[  368.656517] Bluetooth: hci5: command tx timeout
[  369.745222] Bluetooth: hci0: command tx timeout
[  369.808703] Bluetooth: hci1: command tx timeout
[  370.129979] Bluetooth: hci2: command tx timeout
[  370.192755] Bluetooth: hci3: command tx timeout
[  370.320416] Bluetooth: hci6: command tx timeout
[  370.450305] Bluetooth: hci4: command tx timeout
[  370.512338] Bluetooth: hci7: command tx timeout
[  370.704563] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
23:48:47  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=0000000000000001 RCX=dfb8078e475e76a4 RDX=0000000000000000
RSI=000000008301a466 RDI=ffff88806ce31850 RBP=ffff88806ce08a80 RSP=ffff88806ce089b8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=ffff88806ce08a70 R14=ffff88800a668000 R15=ffff88806ce08a28
RIP=ffffffff81353d45 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f8d4b1e9540 00000000 00000000
GS =0000 ffff8880e55f6000 00000000 00000000
LDT=0000 fffffe7400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc7354bcf0 CR3=000000002f98a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff88802664f630 RBX=0000000000000000 RCX=ffffffff819c0944 RDX=ffff888015a83700
RSI=ffffffff819c0af0 RDI=ffff88802664f630 RBP=dffffc0000000000 RSP=ffff88802664f5a8
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000001 R14=ffff888034c91780 R15=ffff88802664f630
RIP=ffffffff81a4a904 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e56f6000 00000000 00000000
LDT=0000 fffffe4000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4b13400260 CR3=00000000279ce000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000