Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:13087' (ECDSA) to the list of known hosts. 2025/01/22 10:48:48 fuzzer started 2025/01/22 10:48:49 dialing manager at localhost:44689 syzkaller login: [ 79.185531] cgroup: Unknown subsys name 'net' [ 79.327647] cgroup: Unknown subsys name 'cpuset' [ 79.372814] cgroup: Unknown subsys name 'rlimit' [ 84.534602] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 94.586384] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 10:49:05 syscalls: 213 2025/01/22 10:49:05 code coverage: enabled 2025/01/22 10:49:05 comparison tracing: enabled 2025/01/22 10:49:05 extra coverage: enabled 2025/01/22 10:49:05 setuid sandbox: enabled 2025/01/22 10:49:05 namespace sandbox: enabled 2025/01/22 10:49:05 Android sandbox: enabled 2025/01/22 10:49:05 fault injection: enabled 2025/01/22 10:49:05 leak checking: enabled 2025/01/22 10:49:05 net packet injection: enabled 2025/01/22 10:49:05 net device setup: enabled 2025/01/22 10:49:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 10:49:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 10:49:05 USB emulation: enabled 2025/01/22 10:49:05 hci packet injection: enabled 2025/01/22 10:49:05 wifi device emulation: enabled 2025/01/22 10:49:05 802.15.4 emulation: enabled 2025/01/22 10:49:05 fetching corpus: 0, signal 0/0 (executing program) 2025/01/22 10:49:07 starting 8 fuzzer processes 10:49:08 executing program 3: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x80000000) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@timestamp], 0x1) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f00000000c0)={'\x00', 0x2, 0x2, 0x1000}) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/11}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000200)) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000240)={0x25, 0x6, 0x9, 0x1, 0xfff}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000280)={0x80000001, 0xfffff001, 0x1ff, 0x4, 0x4, "f37e8518d5d91b156e9ef8613405b45f52942b", 0x8, 0x800}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETS(r2, 0x5401, &(0x7f00000002c0)) ioctl$KDSKBLED(r1, 0x4b65, 0x8001) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000300)) ioctl$TCXONC(r0, 0x540a, 0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000003c0)=r5) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000400)={r4, 0x1, r3, 0x4}) 10:49:08 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000080)={0x4cc, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_EEE_MODES_OURS={0x4a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x140, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',\xd8(\xb0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '*^@[*^!&]-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xf6, 0x5, "9544afb015604d7942fbc478da8469f6cb2be001630a9021f3cfdc4bb1e955b3173f13398e5aba1dbd96318b3ac479fb2618aed4b59ed6e2ba8a0de3f156b1ab15514ee6e42641a977ea3f2d222a1760ca290afb5d779b0e8ac2dd733fcf2fe4f69cdab4b9598880c25c334742f00694ce584ad9825c7866106cd2c49304328cbf708b016d7ee552770a9d5efbb51b724500c5ba5a6c91e3e277c9c97e9c455c50a22158a1191d25b54028139f422bcaa6f9f153d5a9105d55b2324bf891856f5dc6db999d572ba5687e629c08e77be753bd5e72dbda753393a5dcb92a3e3448e38e3f427db79383364dcaa59c8006ddae31"}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x38}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdea3}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7b4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6d}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x58, 0x4, "573bdf873659f1c64bb91c0a4f9f79bc3445ae56727d5daaf475e42c96be1ffce75a290075a352c59af52dbcf91506e6edf44d41d0dd0af91a1d03cc3b60ab009bd11293ff101a5759611f9f1361080fc6a91dac"}, @ETHTOOL_A_BITSET_VALUE={0xd7, 0x4, "df6cb326203373822e7b1cf588ee54c50c4aa239f0d4dd09ae99d799a176240c985cd06bd03027ee5aa3abae41a2784a9edfbeae468bd987f5801b48a583d858883160c36aae7045b37ff44048554dd6e2db9570bd73a7b0ce6ae7f6bc8ecefa6be3dab38322e7bc3c58a4e56f7f80f72e94f6d01e36f3bd77bfc3817a7f02b932846cebbd129468da6a50d47796757febf319a77e6a0a7fdab96219cfc427af2290f8d979106db30bd45a4b53b79d8634356f3cdf521dd5d725e486fb121eedd2392f04dfa1cfd387da2119764ffeca1ef48a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x3b, 0x5, "4c596162936982f5dbc828249a696cf6f779ffcf0688bac50f47dce39e599ad719b2234aafd3b46229248a5147e7d87f0811150b4bc192"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$sock_ifreq(r1, 0x891c, &(0x7f0000000600)={'wlan1\x00', @ifru_map}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000640)={0x6, 0x465, 0x1, 0x6, 0x6}, 0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x29, 0x5, "a826332045ad79fc3859e8d0c7019b60f49bf74d97d97a32a1257e6b3de2c2babb23a301e5"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000840), r1) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1a4, r4, 0x300, 0x70bd26, 0xffff0001, {}, [{{0x8, 0x1, r0}, {0x188, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xdfc}}, {0x8, 0x6, r0}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0xfc, 0x1, 0x428}, {0xa1f, 0x80, 0x7, 0x7}, {0xc3f, 0xf7, 0x7, 0x101}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}]}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_io_uring_setup(0xe25, &(0x7f0000000ac0)={0x0, 0x8e91, 0x2, 0x3, 0x190, 0x0, r2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x40, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000c00)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000c40)=[@sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp, @sack_perm, @mss={0x2, 0x7fffffff}], 0x8) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000c80), 0x80000, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x0, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) getsockopt$inet6_tcp_buf(r7, 0x6, 0xb, &(0x7f0000000d40)=""/4096, &(0x7f0000001d40)=0x1000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001d80)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001dc0)={@mcast2}, &(0x7f0000001e00)=0x14) [ 97.873008] audit: type=1400 audit(1737542948.169:7): avc: denied { execmem } for pid=273 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:49:08 executing program 2: ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000040)) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x810, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2665, &(0x7f0000000080)={0x0, 0x63f4, 0x10, 0x0, 0x2a4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x2, 0x2004, @fd_index=0x2, 0x7f, &(0x7f00000002c0)=[{&(0x7f0000000180)="a8fdaa746ed769b0abdf980c592ab0dfd8900b3594cb7616b489fc41be4b07231ebe0c763660868dddb1e8c6861f658a482277b9a44d9320749110448fb4477e1786586b571e80f01623a2c35d6a630ee94795f24b5e3b1bab043b73dbcb244e90e83dab2f9cca92c5873b2af77468901c97025f1b2a8da7fbadf6246c56b747a346a97f6d", 0x85}, {&(0x7f0000000240)="8042c0fd96ecfb74d87762795f9118f6468a3591ed5be8023d05be0db8ded882457a119593ba7d878856967f253ceb7f0dd5e9cbfa785edee18fd05dca68fae12b5de554d6f8de39b0d04c10ec7d", 0x4e}], 0x2, 0x16}, 0x43291a75) syz_io_uring_setup(0x146d, &(0x7f0000000340)={0x0, 0x4c34, 0x20, 0x2, 0xb, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000840)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd_index=0x6, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000440)="509c0a84916d3b6e1f8ab5b0332ecb38bfdd019b49a766759433faffca1c634d84d2f3f16467a461c2f41a949f5694961dba5e40c5cbd86bda30f199f3b166bb40e78f43d424553c9179496992e4748bc61f45000a78b19c3c704fe9325ac04d927edcaf9263721c7a0253d7b9b98b28727a37eeaae012ca20bf8b757a027b0f323988cf161944edd0cba38949bff68a3f2a24e14c415c76b59c833086cac37aee53ffe93d69d66b5886f288b470718a23678a06028ae3e51cd9832c97131426e0864d43f763a9149150867f7bece847aea22baa7bb8a4", 0xd7}, {&(0x7f0000000540)="6fa3fd01c5419ea305fd9d634ef1be9bda8131e59ce60112665bae44e999ea9ac6077b39319bffee01fba46c528a2099499f14b422188bd9994c42dc755f8ddd962be693b4581671c5c721680df1beb6abb3a418af", 0x55}, {&(0x7f00000005c0)="e2378019af2279494c85ebbed784ac405c219d302ee7", 0x16}, {&(0x7f0000000600)="e3e452ec81674422031e9f48a4cc79b7f4992eaf07514d5b6ff87ee041b9d473ae045ce768483f75011be81bb9c0c1abd24587e8d9a8b53b358496dc87a2982104d50c1a7156bd6e19bd7101472bd589b041289879cfb93cb97507bee4ff0c330356c3b64287c33dcae4b5c7b54ce75750521c6b53b5814ddfddfb691d95ec25941914d4212468146115259a95fc4b625c33333c2eef180e8949c44a6c22070121e5cc881bb2834024aad9abf9a5e6ad779c52c122452bc5b29602a285396b95ed6aa818a8", 0xc5}, {&(0x7f0000000700)="c708b9daf6822a0bbb75600544438ff18550da4a27931a37d1f0e3f9f749539396c754fb17b963b79709b538bd743fa53b62955b4c3e0d55ae4ed612e6ed9b8b9fc348783826bea1ae8fe5293d1d72c8b4705a0e672e812aea2364676fe452e9a4165ef47575b3d33dcb68aa6c3a3c31da68c049deadda554b29da1d059407f601005d01b6b7933115b63bc75b59e600433d13ae92c0743f1b94b6b45e9914b9463226a4fb554ff5655e161048c16473cf2e56d242b79fbf110ade45de", 0xbd}], 0x5}, 0x7) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000009c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/249, 0xf9, 0x0, &(0x7f0000000980)=""/9, 0x9}, &(0x7f0000000a00)=0x40) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBLED(r5, 0x4b65, 0x1a) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x11, r1, 0x0) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000ac0)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000b00)=[@window={0x3, 0x400, 0x40}, @timestamp, @mss={0x2, 0x2}, @mss={0x2, 0x1}, @sack_perm, @window={0x3, 0x7, 0x45}, @window={0x3, 0x1, 0x6}], 0x7) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b40), 0x202100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000b80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000c00)=r7) ioctl$KDFONTOP_COPY(r5, 0x4b72, &(0x7f0000001040)={0x3, 0x0, 0x6, 0x11, 0x13c, &(0x7f0000000c40)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001080)) 10:49:08 executing program 5: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r0, 0x4, 0xd3, 0xb, 0xe9, 0x7f1bdccc63b3697d, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0xff}, 0x7800, 0x8000, 0xfff, 0x6}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={""/10, ""/2, @local}, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'sit0\x00', r0, 0x29, 0x9, 0x2, 0x5, 0x11, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7, 0x10, 0x7, 0x7fff}}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={0x0, @qipcrtr={0x2a, 0x7, 0x4001}, @xdp={0x2c, 0xc, r0, 0x27}, @isdn={0x22, 0x7f, 0x6, 0x3, 0x1}, 0x5, 0x0, 0x0, 0x0, 0xff, &(0x7f00000003c0)='bond_slave_0\x00', 0x8, 0x6, 0xf57}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6gre0\x00', r0, 0x4, 0x8, 0x1, 0x0, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x20, 0x7800, 0x1000, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r0, 0x2f, 0x4, 0x80, 0x7fffffff, 0x8, @empty, @local, 0x7, 0x20, 0x5, 0x3}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x198, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40001}, 0x4014) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000940)={0x0, @rand_addr, @broadcast}, &(0x7f0000000980)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'syztnl1\x00', r3, 0x29, 0x6, 0x3, 0x0, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8000, 0x0, 0x7fff}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xd4, 0x0, 0x400, 0x70bd2a, 0xffff8000, {}, [{{0x8, 0x1, r8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000d00)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r3}, 0x14) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000d40)={@dev={0xfe, 0x80, '\x00', 0x3a}, r8}, 0x14) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000e00)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000f00)=0xe8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xa4, r11, 0x24, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x854}, 0x884) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000001080)={@mcast2, r3}, 0x14) 10:49:08 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000080)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x52, 0x40, 0x4, 0x4, 0x20, @dev={0xfe, 0x80, '\x00', 0x2d}, @local, 0x40, 0x700, 0x1, 0x3af}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x5, 0x3, 0x9, @dev={0xfe, 0x80, '\x00', 0x2e}, @mcast2, 0x40, 0x80, 0x943a, 0x6}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000500)={@rand_addr, 0x0}, &(0x7f0000000540)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000580)={0x3b8, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3f, 0x6, 0x4, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5a}}}]}}]}, 0x3b8}}, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f00000009c0)="8931d2c3ecde03cee0d3909f6086cbea985d85e78803ce726bf2a16f666da22765bb8603fd8aec", 0x27, 0x20000001, &(0x7f0000000a00)={0x11, 0x2, r4, 0x1, 0x8}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000a40)={@private2, r1}, 0x14) epoll_create1(0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000a80)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r6 = socket(0x2, 0x80000, 0x3) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000b00)={@loopback, 0x0}, &(0x7f0000000b40)=0x14) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20084000}, 0x4000) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = accept(r6, &(0x7f0000000c80)=@in6, &(0x7f0000000d00)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6gre0\x00', r3, 0x4, 0x1f, 0x74, 0x9, 0x18, @local, @private0, 0x1, 0x700, 0x7, 0x9}}) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000e40)={0x0, @can={0x1d, r9}, @generic={0x10, "9161364f48bf2757b635bbf8782c"}, @in={0x2, 0x4e24, @loopback}, 0x401, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000e00)='team_slave_0\x00', 0x9, 0x6, 0x3f}) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000ec0)={0x20, "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"}) 10:49:08 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000080)=0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0xf5, 0x1d, 0x0, @loopback, @local, 0x60, 0x1, 0x400, 0x401}}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, @sco={0x1f, @none}, @vsock={0x28, 0x0, 0xffffffff, @host}, @xdp={0x2c, 0x1, r2, 0x1c}, 0x1ff, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)='veth1\x00', 0x4, 0x1, 0xda5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'team_slave_1\x00', 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x3}, 0x2) r5 = accept(r1, &(0x7f00000002c0)=@phonet, &(0x7f0000000340)=0x80) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000380)="338b5d9b22fbc0ddf4ee03345455a31c", 0x10) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000003c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x69, r2}) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), r5) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r6, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', r3, 0x4, 0xab, 0x20, 0x3, 0x13, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x700, 0x1, 0x1, 0xffffffe1}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000640)={0x2d8, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r4}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x44090}, 0x20040000) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000009c0)={0xde, 0x20, 0x2722, 0xfffd, 0xb, "db14e58d409dbbda"}) socket(0x1d, 0x1, 0xfffffffe) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @local, @broadcast}, &(0x7f0000000b00)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b40)={'ip6tnl0\x00', r8, 0x2f, 0x7, 0x1f, 0xfffffffc, 0x23, @remote, @local, 0x40, 0x700, 0x4b41, 0x1f}}) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000c40), r5) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x5c, r9, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4840}, 0x800) 10:49:08 executing program 7: read$ptp(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000001000)) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000001040)) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x88674803e0e4778e}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x78, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8001}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xbe}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c000}, 0x8) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000011c0), 0x40, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000001200)={0xfffffffd, 0x4}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001240), 0x22000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001280)={@initdev, 0x0}, &(0x7f00000012c0)=0x14) pipe2(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001340), 0x400, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000001380)={{0x9, 0x5ec}, {0x4, 0x100}, 0x423a2046}) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0xb4, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x1) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f0000001540)) ioctl$TIOCSBRK(r0, 0x5427) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), r3) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000001680)={'sit0\x00', &(0x7f0000001600)={'ip6_vti0\x00', r1, 0x4, 0x81, 0xd7, 0x8d, 0x9, @mcast2, @mcast1, 0x80, 0x20, 0x1000, 0x3}}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f00000017c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f00000016c0)={0x9c, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10:49:08 executing program 6: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00', 0x0}) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6880}, @ETHTOOL_A_EEE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x440}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x118}, 0x1, 0x0, 0x0, 0x11}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x305, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x470080, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6tnl0\x00', r0, 0x29, 0x2, 0x80, 0x2, 0x30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x8, 0x40, 0x4, 0x6}}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000004c0)=r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000b80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff8001}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x54, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffff8000}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10c00363}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6b746a73}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x150b01c6}, @NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_NEWSETELEM={0x3f4, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x39c, 0x3, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0xf8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xdb, 0x1, "5551c7d5bbbd27a1f80679cd0538df9d8fbc815982cfeaed1eb2ee0b3aa743611e1659de8870be749abbd5e84c0238f6fa0f8c6d7172f4a085074491bd051467e0a737d7a03d775b7e35c7239c5e78fb01383b7f82ab23d9ebf0c624d92b0436ce2a69ffc02081f2de479ec09aa57ccaecdd5c85727bbf79601583cdb7494d3cb3a3ee6efa79032c9b31947ef4dc264ac7323160b13f22ea0cefdee38adeef54478bfbb9b5d4144a6274cfd6d9bfc0b45e00462f44adba84ac9a0bd4be631b4c4b19e517c829bd503e901875d4661f1eeb50c723d918f3"}]}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x28c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4dcc}, @NFTA_SET_ELEM_KEY_END={0x1dc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "06b3c1f1e62738bdcc"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "07ed4b319c03d67aa41dce7709441e14a618fa4fd28100b40f27f6fc74b6b681a1977c884bac33dc487d4d5d6848702d6cec5793dfee237f7a367a3dd2919efbbfa4a9d8bec280b76703ccc69c3fe6ef02c72b3f20956852d381587f66ca1a297fc2d9e99690cd97c0f1f6c754d9c3d3575d691c2698b56d13702b7129e3cb995c3f0803dc1effa4bce5058a39d083838578b14ae3cab529a640be1260cbe5a687b11a25463976d4ff1179387e7d1d903d95c07998c01f3f4a960e2072db6f923c27d909bb9557b5d365b7fba951d88c16b1e4418dfeb171cc7941dd97961638"}, @NFTA_DATA_VALUE={0x9a, 0x1, "86238a300383ea5d01b584a3ee4b5fd3e04129515e27e78a85a7cc8f959f9f03341453474ceb55f00876c4e433840393343cbca34572fed7278569d1ef50a19956bb7137c9ee02ee84bcb980340b44cd05b6ac326b6c105753aad4af4e75a939ccacef39ab15f9a87aeafef79aa3e74a2ff12a5ca352cde1d1a4f5162e0ce6576c09904adcd6b52deeb687f7bedb21d2104f43e4cae1"}]}, @NFTA_SET_ELEM_USERDATA={0x4a, 0x6, 0x1, 0x0, "8f98768e94620ab9c8a3663fd809f4e039a372207c5f659fbd9e3bccd2b465edd239afa2a96d5a43f549da83aefbe158779a281322fc86285c60a86e2dea08059379d4135ee0"}, @NFTA_SET_ELEM_KEY_END={0x14, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x40, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "fd305b72157a9a89ca7f6eaf0ceb9f97bea66931ba603b7dbebf991a8350c9f47e273914b9ec531dcc22bdc291b2924cf556"}, @NFTA_DATA_VALUE={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x5dc}, 0x1, 0x0, 0x0, 0x24090}, 0x400c4) r6 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x8) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, &(0x7f0000000bc0)={0x1, 0x101, 0x1}) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000c00)={0x6, 0x3, 0x140c, 0x400, 0xd, "42fca586ada002f812d4fa55240d31fb29d324"}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000c40)={@dev={0xfe, 0x80, '\x00', 0x2f}, r4}, 0x14) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000cc0), 0x202000, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, 0x0, 0xde1ba2bbc4108559, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_O_TEI={0x8}]}, 0x48}}, 0x20000040) pipe2(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000e80), r1) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x40, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000081c}, 0x10) [ 99.372551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.374107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.375703] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.378157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.379756] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.384999] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.430532] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.436185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.437652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.439835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.445513] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.452135] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.508770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.512112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.515793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.518783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.520552] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.521762] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.527449] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.529725] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.531066] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.537175] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.538785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 99.540047] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.548239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.557122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.570200] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.582576] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.586186] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 99.593135] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.655820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.664267] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.667503] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.670352] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 99.679315] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 99.680508] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.694457] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 99.696976] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 99.705760] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 99.709439] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 99.710598] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 99.713188] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 99.722141] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 99.726093] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 99.727611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 99.730488] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 99.735368] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 99.747348] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 101.465528] Bluetooth: hci0: command tx timeout [ 101.552286] Bluetooth: hci1: command tx timeout [ 101.596588] Bluetooth: hci3: command tx timeout [ 101.597086] Bluetooth: hci2: command tx timeout [ 101.688036] Bluetooth: hci4: command tx timeout [ 101.723595] Bluetooth: hci5: command tx timeout [ 101.783971] Bluetooth: hci6: command tx timeout [ 101.784333] Bluetooth: hci7: command tx timeout [ 103.517000] Bluetooth: hci0: command tx timeout [ 103.592256] Bluetooth: hci1: command tx timeout [ 103.656702] Bluetooth: hci2: command tx timeout [ 103.656732] Bluetooth: hci3: command tx timeout [ 103.705239] Bluetooth: hci4: command tx timeout [ 103.768947] Bluetooth: hci5: command tx timeout [ 103.832992] Bluetooth: hci7: command tx timeout [ 103.833656] Bluetooth: hci6: command tx timeout [ 105.561807] Bluetooth: hci0: command tx timeout [ 105.625056] Bluetooth: hci1: command tx timeout [ 105.694010] Bluetooth: hci2: command tx timeout [ 105.694131] Bluetooth: hci3: command tx timeout [ 105.754884] Bluetooth: hci4: command tx timeout [ 105.842077] Bluetooth: hci5: command tx timeout [ 105.904321] Bluetooth: hci6: command tx timeout [ 105.904972] Bluetooth: hci7: command tx timeout [ 107.609649] Bluetooth: hci0: command tx timeout [ 107.672284] Bluetooth: hci1: command tx timeout [ 107.737108] Bluetooth: hci3: command tx timeout [ 107.738957] Bluetooth: hci2: command tx timeout [ 107.801053] Bluetooth: hci4: command tx timeout [ 107.864924] Bluetooth: hci5: command tx timeout [ 107.929009] Bluetooth: hci6: command tx timeout [ 107.929079] Bluetooth: hci7: command tx timeout [ 115.352973] hrtimer: interrupt took 7518865 ns [ 162.186600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.189380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.192236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.221132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.250269] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 162.253058] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.278010] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.287629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.289595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.301893] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.307750] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 162.308291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.347268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 162.358337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 162.361075] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 162.365010] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 162.365993] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 162.366522] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 162.420211] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.425211] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.427208] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.429728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.435960] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.440155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.441322] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 162.444271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.448095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 162.473155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.506670] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 162.508474] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 162.511058] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 162.514449] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 162.515583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 162.517960] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 162.519461] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 162.520621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 162.560875] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 162.561133] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 162.562143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 162.565991] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 162.571053] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 162.571680] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 162.577240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.622546] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 162.623199] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 162.684352] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 162.692174] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 162.708971] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 164.312088] Bluetooth: hci0: command tx timeout [ 164.376162] Bluetooth: hci1: command tx timeout [ 164.440015] Bluetooth: hci2: command tx timeout [ 164.568001] Bluetooth: hci5: command tx timeout [ 164.632960] Bluetooth: hci4: command tx timeout [ 164.695963] Bluetooth: hci6: command tx timeout [ 164.823963] Bluetooth: hci7: command tx timeout [ 164.824005] Bluetooth: hci3: command tx timeout [ 166.361097] Bluetooth: hci0: command tx timeout [ 166.424092] Bluetooth: hci1: command tx timeout [ 166.488927] Bluetooth: hci2: command tx timeout [ 166.629729] Bluetooth: hci5: command tx timeout [ 166.693880] Bluetooth: hci4: command tx timeout [ 166.787163] Bluetooth: hci6: command tx timeout [ 166.890942] Bluetooth: hci7: command tx timeout [ 166.891593] Bluetooth: hci3: command tx timeout [ 168.408038] Bluetooth: hci0: command tx timeout [ 168.473932] Bluetooth: hci1: command tx timeout [ 168.549006] Bluetooth: hci2: command tx timeout [ 168.683787] Bluetooth: hci5: command tx timeout [ 168.745794] Bluetooth: hci4: command tx timeout [ 168.791935] Bluetooth: hci6: command tx timeout [ 168.920101] Bluetooth: hci3: command tx timeout [ 168.920765] Bluetooth: hci7: command tx timeout [ 170.457881] Bluetooth: hci0: command tx timeout [ 170.521883] Bluetooth: hci1: command tx timeout [ 170.584043] Bluetooth: hci2: command tx timeout [ 170.711967] Bluetooth: hci5: command tx timeout [ 170.777970] Bluetooth: hci4: command tx timeout [ 170.839925] Bluetooth: hci6: command tx timeout [ 170.968939] Bluetooth: hci7: command tx timeout [ 170.968973] Bluetooth: hci3: command tx timeout [ 224.527742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.529153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.530416] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.539136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.540926] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 224.542055] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.675312] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.679118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.681047] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.683729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.692050] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.693226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.776568] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.783236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.787113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.791116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.792489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.794160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.796422] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.798389] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.800434] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.805084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 224.806392] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.808121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.814074] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 224.816056] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.881978] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 224.884284] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 224.884397] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.892757] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.895595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.895975] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.897466] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.900269] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 224.900624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.901586] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 224.902126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 224.926755] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.961070] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 224.979864] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 224.997248] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 225.007313] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 225.011159] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 225.012465] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 225.016163] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 225.019247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 225.026046] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 225.027380] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 226.584351] Bluetooth: hci0: command tx timeout [ 226.775935] Bluetooth: hci1: command tx timeout [ 227.032094] Bluetooth: hci2: command tx timeout [ 227.096056] Bluetooth: hci4: command tx timeout [ 227.098984] Bluetooth: hci5: command tx timeout [ 227.099234] Bluetooth: hci3: command tx timeout [ 227.164022] Bluetooth: hci7: command tx timeout [ 227.224924] Bluetooth: hci6: command tx timeout [ 228.631890] Bluetooth: hci0: command tx timeout [ 228.828332] Bluetooth: hci1: command tx timeout [ 229.121182] Bluetooth: hci2: command tx timeout [ 229.145904] Bluetooth: hci5: command tx timeout [ 229.146058] Bluetooth: hci4: command tx timeout [ 229.146161] Bluetooth: hci3: command tx timeout [ 229.208524] Bluetooth: hci7: command tx timeout [ 229.272007] Bluetooth: hci6: command tx timeout [ 230.679983] Bluetooth: hci0: command tx timeout [ 230.872705] Bluetooth: hci1: command tx timeout [ 231.127929] Bluetooth: hci2: command tx timeout [ 231.191934] Bluetooth: hci3: command tx timeout [ 231.192038] Bluetooth: hci4: command tx timeout [ 231.192141] Bluetooth: hci5: command tx timeout [ 231.257096] Bluetooth: hci7: command tx timeout [ 231.321848] Bluetooth: hci6: command tx timeout [ 232.735581] Bluetooth: hci0: command tx timeout [ 232.921340] Bluetooth: hci1: command tx timeout [ 233.181421] Bluetooth: hci2: command tx timeout [ 233.249758] Bluetooth: hci5: command tx timeout [ 233.249898] Bluetooth: hci3: command tx timeout [ 233.250003] Bluetooth: hci4: command tx timeout [ 233.311017] Bluetooth: hci7: command tx timeout [ 233.390856] Bluetooth: hci6: command tx timeout [ 286.672287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.673963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.675184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 286.679640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 286.681169] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 286.698542] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 286.953890] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 286.956492] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 286.957703] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 286.978347] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 286.980125] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 286.983057] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.234279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.237775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.239050] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.241591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.243146] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 287.244258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.324325] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.325338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.341008] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.365198] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.366138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.384102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.387912] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.390363] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 287.391608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.417923] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.434217] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.434526] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.445503] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 287.447691] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 287.448473] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 287.450389] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 287.455051] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 287.462504] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 287.463399] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 287.468677] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 287.474344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.474743] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.477030] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 287.481001] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.486492] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.488582] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 287.491100] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 287.581158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.588248] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 287.591719] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.793075] Bluetooth: hci0: command tx timeout [ 289.048218] Bluetooth: hci1: command tx timeout [ 289.304848] Bluetooth: hci3: command tx timeout [ 289.496438] Bluetooth: hci4: command tx timeout [ 289.592937] Bluetooth: hci2: command tx timeout [ 289.593397] Bluetooth: hci7: command tx timeout [ 289.593613] Bluetooth: hci6: command tx timeout [ 289.660887] Bluetooth: hci5: command tx timeout [ 290.876192] Bluetooth: hci0: command tx timeout [ 291.101899] Bluetooth: hci1: command tx timeout [ 291.352060] Bluetooth: hci3: command tx timeout [ 291.544053] Bluetooth: hci4: command tx timeout [ 291.607948] Bluetooth: hci6: command tx timeout [ 291.608066] Bluetooth: hci7: command tx timeout [ 291.608134] Bluetooth: hci2: command tx timeout [ 291.671898] Bluetooth: hci5: command tx timeout [ 292.889835] Bluetooth: hci0: command tx timeout [ 293.143900] Bluetooth: hci1: command tx timeout [ 293.399962] Bluetooth: hci3: command tx timeout [ 293.592069] Bluetooth: hci4: command tx timeout [ 293.656904] Bluetooth: hci6: command tx timeout [ 293.656941] Bluetooth: hci2: command tx timeout [ 293.657027] Bluetooth: hci7: command tx timeout [ 293.721143] Bluetooth: hci5: command tx timeout [ 294.935939] Bluetooth: hci0: command tx timeout [ 295.192904] Bluetooth: hci1: command tx timeout [ 295.448838] Bluetooth: hci3: command tx timeout [ 295.650523] Bluetooth: hci4: command tx timeout [ 295.724844] Bluetooth: hci2: command tx timeout [ 295.724971] Bluetooth: hci7: command tx timeout [ 295.725082] Bluetooth: hci6: command tx timeout [ 295.770915] Bluetooth: hci5: command tx timeout [ 349.367275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.372642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.380577] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.388736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.398851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 349.399952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.570935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.611522] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.626015] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.632663] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.640620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.643319] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.650309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.655890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.668436] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 349.671616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 349.678012] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 349.681872] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 349.682214] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 349.683049] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.690426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 349.691662] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 349.703604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 349.704627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 349.707698] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.714920] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 349.717077] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 349.717577] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.731611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 349.738918] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 349.741040] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 349.744648] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 349.747945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 349.752583] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 349.754930] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 349.758117] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 349.759985] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 349.762704] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.777207] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 349.779258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.779930] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 349.785161] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 349.793909] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 349.794249] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 349.821264] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 349.830909] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 349.837815] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 349.840417] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 351.448106] Bluetooth: hci0: command tx timeout [ 351.706946] Bluetooth: hci2: command tx timeout [ 351.767890] Bluetooth: hci1: command tx timeout [ 351.831958] Bluetooth: hci3: command tx timeout [ 351.836565] Bluetooth: hci4: command tx timeout [ 351.836586] Bluetooth: hci5: command tx timeout [ 351.895896] Bluetooth: hci6: command tx timeout [ 351.896254] Bluetooth: hci7: command tx timeout [ 353.497267] Bluetooth: hci0: command tx timeout [ 353.752568] Bluetooth: hci2: command tx timeout [ 353.817832] Bluetooth: hci1: command tx timeout [ 353.879991] Bluetooth: hci3: command tx timeout [ 353.880098] Bluetooth: hci4: command tx timeout [ 353.881231] Bluetooth: hci5: command tx timeout [ 353.944185] Bluetooth: hci6: command tx timeout [ 353.944290] Bluetooth: hci7: command tx timeout [ 355.544036] Bluetooth: hci0: command tx timeout [ 355.821857] Bluetooth: hci2: command tx timeout [ 355.865886] Bluetooth: hci1: command tx timeout [ 355.927963] Bluetooth: hci5: command tx timeout [ 355.928765] Bluetooth: hci4: command tx timeout [ 355.930575] Bluetooth: hci3: command tx timeout [ 355.996877] Bluetooth: hci7: command tx timeout [ 355.996985] Bluetooth: hci6: command tx timeout [ 357.591913] Bluetooth: hci0: command tx timeout [ 357.849822] Bluetooth: hci2: command tx timeout [ 357.912921] Bluetooth: hci1: command tx timeout [ 357.975888] Bluetooth: hci3: command tx timeout [ 357.975937] Bluetooth: hci4: command tx timeout [ 357.976001] Bluetooth: hci5: command tx timeout [ 358.041865] Bluetooth: hci6: command tx timeout [ 358.041952] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 10:54:18 Registers: info registers vcpu 0 RAX=00007fdc9c2b2000 RBX=ffff88802475c000 RCX=00007fdc9c0b2000 RDX=ffff8880248bb780 RSI=ffffffff819d1a43 RDI=0000000000000007 RBP=000000002475c067 RSP=ffff88802e09f9f0 R8 =0000000000000001 R9 =ffff8880248bc1c8 R10=0000000000000000 R11=0000000000000001 R12=ffff8880225bf200 R13=dffffc0000000000 R14=000000002475c007 R15=00007fdc9c0e1fff RIP=ffffffff819d1a48 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdc9bc06540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdc9c0e0000 CR3=0000000028aca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff819e7e04 RDX=ffff888032c61bc0 RSI=ffffffff819e7e11 RDI=0000000000000005 RBP=ffffea000022c140 RSP=ffff888029be7aa8 R8 =00007fdf92932000 R9 =fffff94000045828 R10=0000000000000001 R11=0000000000000000 R12=ffffea000022c140 R13=0000000000008b05 R14=00000000000077cd R15=ffffea000022c158 RIP=ffffffff8171a2f8 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdf928a8540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2700000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdf9293ac70 CR3=000000001a61c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00712d3d534e4f4954504f5f45424f52 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000