Warning: Permanently added '[localhost]:19850' (ECDSA) to the list of known hosts.
2024/10/24 00:06:02 fuzzer started
2024/10/24 00:06:03 dialing manager at localhost:45639
syzkaller login: [   84.294608] cgroup: Unknown subsys name 'net'
[   84.428549] cgroup: Unknown subsys name 'cpuset'
[   84.461122] cgroup: Unknown subsys name 'rlimit'
2024/10/24 00:06:26 syscalls: 202
2024/10/24 00:06:26 code coverage: enabled
2024/10/24 00:06:26 comparison tracing: enabled
2024/10/24 00:06:26 extra coverage: enabled
2024/10/24 00:06:26 setuid sandbox: enabled
2024/10/24 00:06:26 namespace sandbox: enabled
2024/10/24 00:06:26 Android sandbox: enabled
2024/10/24 00:06:26 fault injection: enabled
2024/10/24 00:06:26 leak checking: enabled
2024/10/24 00:06:26 net packet injection: enabled
2024/10/24 00:06:26 net device setup: enabled
2024/10/24 00:06:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/10/24 00:06:26 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/10/24 00:06:26 USB emulation: enabled
2024/10/24 00:06:26 hci packet injection: enabled
2024/10/24 00:06:26 wifi device emulation: enabled
2024/10/24 00:06:26 802.15.4 emulation: enabled
2024/10/24 00:06:26 fetching corpus: 0, signal 0/0 (executing program)
2024/10/24 00:06:28 starting 8 fuzzer processes
00:06:28 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x9)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8)
ioctl$RTC_PIE_OFF(r0, 0x7006)
r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x2, 0x4000)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb8, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x36e9c40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9c}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x1)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4800)
r3 = syz_open_dev$vcsn(&(0x7f0000000440), 0x4, 0x2000)
r4 = syz_open_dev$hiddev(&(0x7f0000000480), 0x3989, 0xb878a99e83c0d1b0)
ioctl$HIDIOCGFLAG(r4, 0x8004480e, &(0x7f00000004c0))
ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000500))
r5 = syz_open_dev$vcsn(&(0x7f0000000540), 0x4, 0x80400)
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r0)
r6 = syz_open_dev$vcsu(&(0x7f0000000580), 0x40000000000000, 0x8001)
ioctl$KDSKBMETA(r6, 0x4b63, &(0x7f00000005c0)=0x4)
ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000600)=0x9)
ioctl$TCXONC(r3, 0x540a, 0x2)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000640))

00:06:28 executing program 1:
clock_gettime(0x0, &(0x7f0000000000))
clock_settime(0x2, &(0x7f0000000040)={0x0, 0x989680})
mq_timedsend(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x9a, 0x0)
clock_getres(0x0, &(0x7f00000000c0))
clock_getres(0x3, &(0x7f0000000100))
r0 = mq_open(&(0x7f0000000140)='\x00', 0x800, 0xa2, &(0x7f0000000180)={0x1, 0x0, 0x7e4a1912, 0x3})
mq_timedreceive(r0, &(0x7f00000001c0)=""/6, 0x6, 0x35, 0x0)
r1 = mq_open(&(0x7f0000000200)='\x00', 0x80, 0xa2, &(0x7f0000000240)={0x7, 0x6, 0x8096, 0x1})
mq_timedreceive(r1, &(0x7f0000000280)=""/9, 0x9, 0x80000001, &(0x7f00000002c0))
clock_settime(0x7, &(0x7f0000000300)={0x0, 0x3938700})
syz_open_dev$usbmon(&(0x7f0000000340), 0x100, 0x200182)
clock_gettime(0x6, &(0x7f0000000380))
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000003c0))
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0)
mq_timedsend(r2, &(0x7f0000000440)="fd6b3c5abeed76f7bf2c6dcecabf8f2d68f2f938d5ff07d606e381d77e0d4a772b2589c3fdc1ba86a90f5450198d5444f9dfbecea1608cd5e42861115c7a115fa2e6906a7f3644b7866bbe185864e54ea33ddc9236894fa66fb141bee3fc4e4b7d17ce399eeb8d4afb973aadf2ef69bced98cbdf21c88abdfeaf", 0x7a, 0x2, &(0x7f00000004c0))
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x600, 0x0)
ioctl$KDSETLED(r3, 0x4b32, 0x13)
r4 = semget$private(0x0, 0x3, 0x28)
semctl$GETZCNT(r4, 0x2, 0xf, &(0x7f0000000540)=""/203)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000640))

00:06:28 executing program 2:
semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000000)=""/211)
semop(0x0, &(0x7f0000000100)=[{0x3, 0x3, 0x1000}, {0x4, 0x1}, {0x1, 0x4d2, 0x1000}, {0x3, 0x4, 0x800}, {0x0, 0xffaa, 0x800}, {0x2, 0xbce}, {0x1, 0xf1cd}, {0x4, 0x6}, {0x0, 0x7, 0x1800}], 0x9)
r0 = semget$private(0x0, 0x5, 0x0)
semop(r0, &(0x7f0000000140)=[{0x1, 0x2}, {0x4, 0x9, 0x800}, {0x1, 0x2}, {0x1}, {0x0, 0x0, 0x800}], 0x5)
semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000000180)=""/4096)
ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000001180))
semctl$GETNCNT(0xffffffffffffffff, 0x2, 0xe, &(0x7f00000011c0)=""/167)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000001280)=""/4096)
semop(r0, &(0x7f0000002280)=[{0x3, 0x3, 0x800}], 0x1)
r1 = semget$private(0x0, 0x4, 0x10)
semctl$GETPID(r1, 0x3, 0xb, &(0x7f00000022c0)=""/24)
r2 = semget$private(0x0, 0x2, 0x1)
semop(r2, &(0x7f0000002300)=[{0x4, 0x9, 0x800}, {0x4, 0x8c9e, 0x1000}], 0x2)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x40, 0x1, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x77}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040060}, 0x20040004)
semop(r0, &(0x7f0000002440)=[{0x1, 0x1, 0x3800}, {0x4, 0x4, 0xd041b845cb88021a}, {0x4, 0x8000, 0x1000}, {0x2, 0x2, 0x1000}, {0x4, 0x8, 0x1000}, {0x4, 0x8000, 0x1800}, {0x1, 0xee, 0x800}], 0x7)
semop(r0, &(0x7f0000002480)=[{0xb0c1282c7cf6eabb, 0x1c, 0x1800}, {0x2, 0x1f}, {0x0, 0x80, 0x1000}], 0x3)
semctl$IPC_INFO(r2, 0x4, 0x3, &(0x7f00000024c0)=""/126)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000002600)={&(0x7f0000002540), 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x3c, 0x1, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000080)
ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000002640)=0x2)

00:06:28 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x38801)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x19, 0xd, "69bb373bee806140e1bd12cb8645fbebf079966ef9cdcb178e0ad872fa1c63427aaabb01fff31008d939ff7d07d2694c690522b956e73bd4f0c2847a8226bfbd", "3eb5d69420443018a83b001538a0e96462f3ef1e340df4e20cfc259eefbc100fe44d43f52a878bd8ea2c4c924618f32a2d6c67d91e88f0aef7dbbde2bd83419a", "8ca74317ce0a4c4463bcbe1bea21843bc04694df761213ccea260514b007e0ff", [0xfffffffffffffe00, 0x3f]})
r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x88242)
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x741884, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x1, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8091}, 0x10)
ioctl$KDSETLED(r1, 0x4b32, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f00000002c0))
sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xcf5e8571e8368f33}, 0x41)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x7f)
r3 = syz_open_dev$vcsn(&(0x7f0000000400), 0x8001, 0x10000)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xc4, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff77}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x63b}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2c5f7bce8a856a8e}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f82}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x44)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x20000, 0x0)
ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000640))
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000680)="ba2834648f7076bb4a7d970a9e23da73155c4854da83e04d248e8237460860b0abae8f94462c58f4b1f39c901983625c76138082107fd02652a462536a400bb3d6e8b326baebaaa6b0f74089cd15d83b31102947de05d4304eab45a5a57d372a33aa7b5b20e8a6abc2cc25786edb884f55bd7ec748970aae805c20cc61bf42fc836d36d0bf5ee9310465c4ae92b2013f634cae9bf122c7a2c60389e388d01dd3756a14bef7d4699f64a5faddba159290f5d3b6ee6e02c1a8c11c1ac7e7d69721c8e2428fb21e7ca312c0fe08d808a50f50fb858cd278d767e318cce3afde1a83d119c4990e903322")
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x8d)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x58)
mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000c, 0x20010, r1, 0x0)

[  108.469237] audit: type=1400 audit(1729728388.301:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
00:06:28 executing program 4:
ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000000))
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040))
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000080))
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0xe5, 0x4000c0)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0xe02)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
r2 = semget$private(0x0, 0x1, 0x6)
semop(r2, &(0x7f0000000140)=[{0x3, 0xb6d2, 0x800}, {0x4, 0x2}, {0x4, 0x1, 0x1800}, {0x0, 0x3, 0x1000}, {0x2, 0x5, 0x1000}], 0x5)
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x3, 0x1, 0xa, 0x1, 0x5f, &(0x7f0000000180)})
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, 0x17, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x90}, 0x1)
ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000780))
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000880), 0x18000, 0x0)
mq_getsetattr(r3, &(0x7f00000008c0)={0x5, 0x10000, 0x2, 0x19}, &(0x7f0000000900))
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000940))
r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x5, 0x0)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000009c0)=0x7fffffff)
sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x9c, 0x3, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x100000001}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x81}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x81}, 0x40)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xc8, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x4040040)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000d40), 0x400840, 0x0)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x98, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4b9}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x98}}, 0x10)

00:06:28 executing program 5:
ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000))
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x9, 0x7f, 0x0, 0x400}, {0x7, 0x4, 0x3f, 0xfb88}, {0x9, 0x2, 0xa8, 0xfffffffd}]})
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)=0x1)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000100)={0x9, "fef105a2e6de2f1ac9ee5d78a17b04591847807c0fbb3c6ffe3cc6e3d50aec2f7fb257159cd661432bd99920ba914e824dbacfb0e9d436721bcf5fc7cb6cc849"})
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000180)="6e3ea3dcc715015803abc8d44576a58579b130520140c228e5f1840625b393d09fc503f7e30a9db505aab8b47076c4759da218db2e0f512aeae7defeba87dd48fbb9a213069c32f307ad479b55ef10e9121d7b61111993a23e536810c827d1bef3cecf75b4d0a54eff69e74a7b9b4a48bcdc08914c158e3b9874a2b08590a9b94960af0b7bfcae49eb49c94da66ae4bc0b0500051c3480b2d7da5a15e4aaf23a1e5c5d6ca614a27abadedfc5eea01893afacd22d3d9b878de85d133fa20fdfb1aed82b34a7849092e535427a76478162")
sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x10, 0xa, 0x8a20b9ff54b7155e, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
r0 = syz_open_dev$vcsn(&(0x7f0000000380), 0x5, 0x105040)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x1, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8011}, 0x40)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x10001, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000500), 0x2, 0x100000)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4da}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x40)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
r3 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x6, 0x82001)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000700)={0xa1a, "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"})
ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0x3, 0x17, 0x6b, &(0x7f0000001140)})
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0xe, 0x1, '/dev/null\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5c2e847bf6de316c}, 0xddb8398b42425e53)
ioctl$VT_WAITACTIVE(r3, 0x5607)
r4 = syz_open_dev$vcsn(&(0x7f0000001680), 0x6, 0x2)
ioctl$TIOCCBRK(r4, 0x5428)

00:06:28 executing program 6:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x95b, 0x2000)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
r1 = semget$private(0x0, 0x2, 0x65)
r2 = semget$private(0x0, 0x2, 0x12)
semctl$GETVAL(r2, 0x4, 0xc, &(0x7f0000000040)=""/212)
semctl$GETVAL(r1, 0x0, 0xc, &(0x7f0000000140)=""/4096)
clock_settime(0x3, &(0x7f0000001140)={0x77359400})
r3 = semget$private(0x0, 0x3, 0x28)
semctl$GETVAL(r3, 0x1, 0xc, &(0x7f0000001180)=""/216)
r4 = semget$private(0x0, 0x0, 0x42)
semop(r4, &(0x7f0000001280), 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000001300), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r6, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000}]}, 0x38}, 0x1, 0x0, 0x0, 0x40044}, 0x4014)
semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001400)=""/42)
clock_gettime(0x5, &(0x7f0000001440))
semctl$IPC_RMID(r1, 0x0, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000001480), 0x9, 0x500)
ioctl$MON_IOCQ_RING_SIZE(r7, 0x9205)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x34, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9c98}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040010)

00:06:28 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000040)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000004)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x7, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4008800)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x20040080)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004010)
r3 = syz_open_dev$vcsn(&(0x7f0000000640), 0x8, 0x8000)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000680)={0x194, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_LABELS_MASK={0x18, 0x17, [0x400, 0x7, 0x200, 0x400, 0x2]}, @CTA_NAT_DST={0xf4, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x29}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}, @CTA_NAT_DST={0x3c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xe5d}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x194}}, 0x10)
sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x120, 0x17, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x120}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x0, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48814}, 0x0)
ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000bc0))
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x1, 0x2, 0x301, 0x0, 0x0, {0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x20000800)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
ioctl$KDSETLED(r3, 0x4b32, 0x3)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10050)
r4 = syz_open_dev$vcsu(&(0x7f0000000e00), 0x100, 0x40)
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000e40)={0xe0, 0x3, 0x9})

[  109.970534] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  109.973679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  109.979981] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  109.983010] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  109.985875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  109.987686] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  109.989629] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  109.992430] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  109.997823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  110.000235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  110.009312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  110.012631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  110.025449] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  110.028632] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  110.030861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  110.036647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  110.040758] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  110.043075] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  110.057790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  110.057809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  110.088459] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  110.090532] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  110.091716] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  110.094695] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  110.103520] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  110.104766] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  110.108325] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  110.109548] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  110.109690] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  110.112538] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  110.114611] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  110.115968] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  110.117557] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  110.119457] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  110.128506] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  110.130577] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  110.134292] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  110.136867] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  110.142781] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  110.145248] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  110.151309] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  110.161088] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  110.163407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  110.180799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  110.186526] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  110.206527] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  110.213721] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  110.218515] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.059448] Bluetooth: hci0: command tx timeout
[  112.111727] Bluetooth: hci2: command tx timeout
[  112.113323] Bluetooth: hci1: command tx timeout
[  112.175134] Bluetooth: hci6: command tx timeout
[  112.238463] Bluetooth: hci7: command tx timeout
[  112.238508] Bluetooth: hci3: command tx timeout
[  112.238688] Bluetooth: hci4: command tx timeout
[  112.302253] Bluetooth: hci5: command tx timeout
[  114.094381] Bluetooth: hci0: command tx timeout
[  114.157314] Bluetooth: hci1: command tx timeout
[  114.157821] Bluetooth: hci2: command tx timeout
[  114.221492] Bluetooth: hci6: command tx timeout
[  114.287208] Bluetooth: hci4: command tx timeout
[  114.287795] Bluetooth: hci3: command tx timeout
[  114.288380] Bluetooth: hci7: command tx timeout
[  114.351408] Bluetooth: hci5: command tx timeout
[  116.142540] Bluetooth: hci0: command tx timeout
[  116.207219] Bluetooth: hci1: command tx timeout
[  116.207717] Bluetooth: hci2: command tx timeout
[  116.270260] Bluetooth: hci6: command tx timeout
[  116.334266] Bluetooth: hci4: command tx timeout
[  116.334758] Bluetooth: hci7: command tx timeout
[  116.335302] Bluetooth: hci3: command tx timeout
[  116.398248] Bluetooth: hci5: command tx timeout
[  118.189285] Bluetooth: hci0: command tx timeout
[  118.254275] Bluetooth: hci2: command tx timeout
[  118.254770] Bluetooth: hci1: command tx timeout
[  118.317211] Bluetooth: hci6: command tx timeout
[  118.383188] Bluetooth: hci7: command tx timeout
[  118.383701] Bluetooth: hci3: command tx timeout
[  118.384283] Bluetooth: hci4: command tx timeout
[  118.446293] Bluetooth: hci5: command tx timeout
[  172.471653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  172.506325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  172.507336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  172.509661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  172.510899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  172.512290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  172.517347] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  172.519391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  172.520635] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  172.526263] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  172.526995] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  172.534836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  172.607764] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  172.610699] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  172.615024] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  172.622974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  172.625406] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  172.627245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  172.636918] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  172.646609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  172.657891] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  172.684584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  172.687442] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  172.688778] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  172.690867] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  172.695955] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  172.697490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  172.704503] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  172.707545] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  172.708722] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  172.709791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  172.714894] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  172.716266] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  172.720857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  172.724941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  172.729336] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  172.735001] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  172.741616] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  172.743452] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  172.748560] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  172.749593] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  172.750374] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  172.751501] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  172.767605] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  172.775600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  172.790671] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  172.822920] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  172.828422] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  174.573290] Bluetooth: hci1: command tx timeout
[  174.574447] Bluetooth: hci0: command tx timeout
[  174.701377] Bluetooth: hci2: command tx timeout
[  174.766221] Bluetooth: hci3: command tx timeout
[  174.829231] Bluetooth: hci6: command tx timeout
[  174.893289] Bluetooth: hci7: command tx timeout
[  174.894863] Bluetooth: hci4: command tx timeout
[  174.895240] Bluetooth: hci5: command tx timeout
[  176.622313] Bluetooth: hci0: command tx timeout
[  176.622841] Bluetooth: hci1: command tx timeout
[  176.750287] Bluetooth: hci2: command tx timeout
[  176.813317] Bluetooth: hci3: command tx timeout
[  176.878233] Bluetooth: hci6: command tx timeout
[  176.941616] Bluetooth: hci4: command tx timeout
[  176.941681] Bluetooth: hci5: command tx timeout
[  176.942099] Bluetooth: hci7: command tx timeout
[  178.669284] Bluetooth: hci0: command tx timeout
[  178.669314] Bluetooth: hci1: command tx timeout
[  178.797329] Bluetooth: hci2: command tx timeout
[  178.861272] Bluetooth: hci3: command tx timeout
[  178.925247] Bluetooth: hci6: command tx timeout
[  178.958420] hrtimer: interrupt took 4250599 ns
[  178.989254] Bluetooth: hci7: command tx timeout
[  178.989734] Bluetooth: hci4: command tx timeout
[  178.990231] Bluetooth: hci5: command tx timeout
[  180.717458] Bluetooth: hci1: command tx timeout
[  180.718013] Bluetooth: hci0: command tx timeout
[  180.845607] Bluetooth: hci2: command tx timeout
[  180.909751] Bluetooth: hci3: command tx timeout
[  180.973226] Bluetooth: hci6: command tx timeout
[  181.037316] Bluetooth: hci5: command tx timeout
[  181.037436] Bluetooth: hci4: command tx timeout
[  181.037872] Bluetooth: hci7: command tx timeout
[  235.009207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  235.011522] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  235.012591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  235.015592] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  235.017252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  235.018431] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  235.073065] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  235.075435] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  235.076846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  235.079445] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  235.081995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  235.083528] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  235.085442] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  235.091800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  235.093046] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  235.137852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  235.148911] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  235.152052] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  235.156210] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  235.158433] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  235.164324] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  235.169866] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  235.171517] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  235.185420] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  235.191554] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  235.192354] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  235.194826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  235.197218] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  235.198690] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  235.199927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  235.203773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  235.205520] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  235.206690] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  235.207770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  235.252185] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  235.257381] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  235.267908] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  235.294029] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  235.306286] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  235.314466] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  235.318711] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  235.324301] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  235.328939] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  235.338835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  235.374549] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  235.418468] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  235.433385] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  235.452069] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  237.103497] Bluetooth: hci1: command tx timeout
[  237.105500] Bluetooth: hci0: command tx timeout
[  237.229375] Bluetooth: hci4: command tx timeout
[  237.230403] Bluetooth: hci2: command tx timeout
[  237.230443] Bluetooth: hci5: command tx timeout
[  237.297379] Bluetooth: hci3: command tx timeout
[  237.421282] Bluetooth: hci6: command tx timeout
[  237.549490] Bluetooth: hci7: command tx timeout
[  239.149386] Bluetooth: hci1: command tx timeout
[  239.149402] Bluetooth: hci0: command tx timeout
[  239.278094] Bluetooth: hci4: command tx timeout
[  239.278364] Bluetooth: hci2: command tx timeout
[  239.279488] Bluetooth: hci5: command tx timeout
[  239.341264] Bluetooth: hci3: command tx timeout
[  239.469542] Bluetooth: hci6: command tx timeout
[  239.601182] Bluetooth: hci7: command tx timeout
[  241.197351] Bluetooth: hci0: command tx timeout
[  241.197865] Bluetooth: hci1: command tx timeout
[  241.325273] Bluetooth: hci4: command tx timeout
[  241.325789] Bluetooth: hci2: command tx timeout
[  241.326598] Bluetooth: hci5: command tx timeout
[  241.389339] Bluetooth: hci3: command tx timeout
[  241.518197] Bluetooth: hci6: command tx timeout
[  241.645316] Bluetooth: hci7: command tx timeout
[  243.245351] Bluetooth: hci1: command tx timeout
[  243.245899] Bluetooth: hci0: command tx timeout
[  243.375753] Bluetooth: hci2: command tx timeout
[  243.376585] Bluetooth: hci5: command tx timeout
[  243.377087] Bluetooth: hci4: command tx timeout
[  243.439910] Bluetooth: hci3: command tx timeout
[  243.565352] Bluetooth: hci6: command tx timeout
[  243.707314] Bluetooth: hci7: command tx timeout
[  297.345944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  297.354798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  297.356380] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  297.358953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  297.360757] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  297.366013] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  297.402999] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  297.406015] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  297.411378] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  297.417997] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  297.420515] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  297.425664] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  297.472822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  297.483613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  297.487773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  297.492959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  297.500664] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  297.518604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  297.565740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  297.573789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  297.583894] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  297.585670] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  297.589327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  297.590351] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  297.598983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  297.614761] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  297.616675] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  297.621661] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  297.623325] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  297.625470] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  297.626468] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  297.628664] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  297.632369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  297.634651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  297.640392] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  297.643459] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  297.696529] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  297.699174] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  297.702225] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  297.706867] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  297.708900] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  297.712236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  297.755396] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  297.759748] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  297.763472] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  297.769435] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  297.779366] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  297.823880] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  299.373729] Bluetooth: hci0: command tx timeout
[  299.504207] Bluetooth: hci1: command tx timeout
[  299.565212] Bluetooth: hci2: command tx timeout
[  299.694346] Bluetooth: hci5: command tx timeout
[  299.758206] Bluetooth: hci7: command tx timeout
[  299.821989] Bluetooth: hci4: command tx timeout
[  299.824032] Bluetooth: hci3: command tx timeout
[  299.887616] Bluetooth: hci6: command tx timeout
[  301.424153] Bluetooth: hci0: command tx timeout
[  301.550183] Bluetooth: hci1: command tx timeout
[  301.615215] Bluetooth: hci2: command tx timeout
[  301.742204] Bluetooth: hci5: command tx timeout
[  301.806236] Bluetooth: hci7: command tx timeout
[  301.869316] Bluetooth: hci3: command tx timeout
[  301.870261] Bluetooth: hci4: command tx timeout
[  301.934266] Bluetooth: hci6: command tx timeout
[  303.471205] Bluetooth: hci0: command tx timeout
[  303.604405] Bluetooth: hci1: command tx timeout
[  303.662357] Bluetooth: hci2: command tx timeout
[  303.790200] Bluetooth: hci5: command tx timeout
[  303.854250] Bluetooth: hci7: command tx timeout
[  303.918208] Bluetooth: hci4: command tx timeout
[  303.918751] Bluetooth: hci3: command tx timeout
[  303.982173] Bluetooth: hci6: command tx timeout
[  305.519291] Bluetooth: hci0: command tx timeout
[  305.647148] Bluetooth: hci1: command tx timeout
[  305.709283] Bluetooth: hci2: command tx timeout
[  305.837202] Bluetooth: hci5: command tx timeout
[  305.901424] Bluetooth: hci7: command tx timeout
[  305.966688] Bluetooth: hci3: command tx timeout
[  305.968417] Bluetooth: hci4: command tx timeout
[  306.030243] Bluetooth: hci6: command tx timeout
[  359.425070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  359.429529] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  359.441193] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  359.452041] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  359.462964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  359.468613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  359.611864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  359.615527] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  359.617753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  359.625403] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  359.629763] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  359.631983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  359.676355] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  359.679754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  359.680955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  359.690187] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  359.691990] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  359.693056] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  359.803429] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  359.811873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  359.812860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  359.817740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  359.819488] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  359.820657] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  359.834286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  359.837501] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  359.839287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  359.839351] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  359.866709] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  359.868898] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  359.889705] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  359.896599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  359.898929] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  359.912196] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  359.916252] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  359.934472] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  360.009188] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  360.045652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  360.048267] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  360.049525] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  360.097931] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  360.099378] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  360.106324] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  360.106718] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  360.110360] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  360.114667] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  360.116210] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  360.118190] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  361.517339] Bluetooth: hci0: command tx timeout
[  361.709220] Bluetooth: hci1: command tx timeout
[  361.774942] Bluetooth: hci2: command tx timeout
[  361.901270] Bluetooth: hci4: command tx timeout
[  361.965591] Bluetooth: hci3: command tx timeout
[  362.223166] Bluetooth: hci7: command tx timeout
[  362.285263] Bluetooth: hci6: command tx timeout
[  362.285920] Bluetooth: hci5: command tx timeout
[  363.565918] Bluetooth: hci0: command tx timeout
[  363.757492] Bluetooth: hci1: command tx timeout
[  363.821741] Bluetooth: hci2: command tx timeout
[  363.950717] Bluetooth: hci4: command tx timeout
[  364.013298] Bluetooth: hci3: command tx timeout
[  364.269391] Bluetooth: hci7: command tx timeout
[  364.333558] Bluetooth: hci6: command tx timeout
[  364.334384] Bluetooth: hci5: command tx timeout
[  365.613387] Bluetooth: hci0: command tx timeout
[  365.805181] Bluetooth: hci1: command tx timeout
[  365.869179] Bluetooth: hci2: command tx timeout
[  365.997217] Bluetooth: hci4: command tx timeout
[  366.061375] Bluetooth: hci3: command tx timeout
[  366.317179] Bluetooth: hci7: command tx timeout
[  366.381316] Bluetooth: hci5: command tx timeout
[  366.381840] Bluetooth: hci6: command tx timeout
[  367.662265] Bluetooth: hci0: command tx timeout
[  367.855152] Bluetooth: hci1: command tx timeout
[  367.918168] Bluetooth: hci2: command tx timeout
[  368.046209] Bluetooth: hci4: command tx timeout
[  368.110335] Bluetooth: hci3: command tx timeout
[  368.365384] Bluetooth: hci7: command tx timeout
[  368.429202] Bluetooth: hci6: command tx timeout
[  368.430927] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
00:11:32  Registers:
info registers vcpu 0
RAX=0000000080010001 RBX=0000000000054a40 RCX=ffffffff8113ece8 RDX=ffff88800fbf0000
RSI=ffffffff8113ecf2 RDI=0000000000000005 RBP=ffff88806ce284c0 RSP=ffff88806ce09d30
R8 =0000000000000000 R9 =fffffbfff0b87b00 R10=0000000000000000 R11=0000000000000000
R12=ffffed100d9c5099 R13=ffffed100d9c5098 R14=0000000681f67605 R15=0000000000000000
RIP=ffffffff81517c37 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f05d6b2c020 CR3=0000000034cb0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000050d99c RBX=ffff88806cf00000 RCX=ffffffff8151fb8b RDX=0000000000000000
RSI=ffffffff8151fc47 RDI=ffff88806cf36380 RBP=0000000000000001 RSP=ffff88806cf099a8
R8 =0000000000000000 R9 =fffffbfff0fda9d4 R10=0000000000000001 R11=00000000000c2f81
R12=0000000000000000 R13=0000000000000000 R14=ffffffff85c69768 R15=ffff888012ff6e00
RIP=ffffffff81390f27 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe2800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcb434aff8 CR3=000000000d5be000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000