Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:1820' (ECDSA) to the list of known hosts. 2025/04/23 12:27:44 fuzzer started 2025/04/23 12:27:45 dialing manager at localhost:42253 syzkaller login: [ 111.993987] cgroup: Unknown subsys name 'net' [ 112.091874] cgroup: Unknown subsys name 'cpuset' [ 112.139056] cgroup: Unknown subsys name 'rlimit' 2025/04/23 12:28:06 syscalls: 208 2025/04/23 12:28:06 code coverage: enabled 2025/04/23 12:28:06 comparison tracing: enabled 2025/04/23 12:28:06 extra coverage: enabled 2025/04/23 12:28:06 setuid sandbox: enabled 2025/04/23 12:28:06 namespace sandbox: enabled 2025/04/23 12:28:06 Android sandbox: enabled 2025/04/23 12:28:06 fault injection: enabled 2025/04/23 12:28:06 leak checking: enabled 2025/04/23 12:28:06 net packet injection: enabled 2025/04/23 12:28:06 net device setup: enabled 2025/04/23 12:28:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/23 12:28:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/23 12:28:06 USB emulation: enabled 2025/04/23 12:28:06 hci packet injection: enabled 2025/04/23 12:28:06 wifi device emulation: enabled 2025/04/23 12:28:06 802.15.4 emulation: enabled 2025/04/23 12:28:06 fetching corpus: 0, signal 0/0 (executing program) 2025/04/23 12:28:08 starting 8 fuzzer processes 12:28:08 executing program 0: ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'vlan0\x00', {0xa}, 0x8}) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'vlan0', 0x32, 0x32}, 0x8) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000080)={'geneve0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x8, 'syz_tun\x00', {'batadv_slave_1\x00'}, 0x9}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, &(0x7f00000001c0)=0x80, 0x800) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000200)='wg1\x00', 0x4) r1 = memfd_secret(0x0) r2 = openat$incfs(r1, &(0x7f0000000240)='.pending_reads\x00', 0x2000, 0x80) ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f0000000280)) ioctl$CDROMPLAYBLK(r2, 0x5317, &(0x7f00000002c0)={0x72, 0x7f}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000880) syz_io_uring_setup(0x4bb, &(0x7f0000000400)={0x0, 0xf0ea, 0x10, 0x1, 0x2e0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) r4 = io_uring_setup(0x7b4, &(0x7f0000000500)={0x0, 0xc572, 0x1, 0x0, 0x165, 0x0, r2}) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r2, 0x10000, {0x0, r2}, 0x0, 0x2, 0x1, {0x0, 0x0, r4}}, 0x80000000) connect$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x9, @none, 0x1}, 0xe) r5 = io_uring_setup(0x1123, &(0x7f0000000600)={0x0, 0xa2c9, 0x0, 0x1, 0x204, 0x0, r4}) io_uring_setup(0x4ee7, &(0x7f0000000680)={0x0, 0x8b70, 0x1, 0x0, 0x83, 0x0, r5}) r6 = accept$packet(r1, 0x0, &(0x7f0000000700)) recvmmsg(r6, &(0x7f0000000bc0)=[{{&(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/36, 0x24}, {&(0x7f0000000800)=""/117, 0x75}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f0000000940)=""/67, 0x43}, {&(0x7f00000009c0)=""/100, 0x64}], 0x5, &(0x7f0000000ac0)=""/202, 0xca}, 0x6}], 0x1, 0x40000141, &(0x7f0000000c00)={0x0, 0x3938700}) 12:28:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x40, 0x65, 0x62, 0x9}]}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x14, &(0x7f0000000140)={&(0x7f00000000c0)="3f92b5d69302ec3e6dbd8c1a66bee46e78851c80b64f8c45c8aeec67d798bb085998ee3581287436fa90ff065e83e6c2e49a58dcf478bbf42719b8d1956d372bc75c50be2e3e62591e6bf73a13a6065803b6dc2a9dd5333fe1ab32823d87ca96019d3f50eca7e48ecdab728884942c82faaccc1568f265387c5082fb6f0f07bf", 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getrusage(0xffffffffffffffff, &(0x7f0000000300)) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f00000003c0)=""/78) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000440)="952952b9af07350837605056e9569831d7fe86dd788192db0ec0be619b49882036796b488ecfca32a586ab5291d554c853465f634aa90abb8981d52d5bb048dce6a4681684c14c3018b72e14868e28e2a0e68dcb4f44aa128efea83326ba3362374f032eede563e4a66a8e5bc24f06983f4b7649a0c36298a954") ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000004c0)={'wg2\x00', {0x2, 0x0, @private}}) r2 = msgget$private(0x0, 0x401) msgrcv(r2, &(0x7f0000000500)={0x0, ""/100}, 0x6c, 0x2, 0x2800) r3 = msgget$private(0x0, 0x90) msgrcv(r3, &(0x7f0000000580)={0x0, ""/237}, 0xf5, 0x0, 0x2800) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)="94a05065a6df7235691fdfdf115363c1f6a5a49cda9265726e7f5ab987df274695afb557ccda5e2e5e75790dd506919c", 0x30}, {&(0x7f00000006c0)="815d70266ebc32b6083d858abb3c7ef4b94288504d87bb356d61705c6a805844e7f96b30d64ea5b1723837794de8dc2958494c23ef10617d483770fbb4351523d5d7b96f5ed6325071", 0x49}, {&(0x7f0000000740)="8cfb9287fdf2e0ed4c5bdc0fcf8062034c9094798471f56b6cae609a3950c27ed47943544a6e9bf3cd0d05fc8ba3a769291ac0c53b58620a111c24c1f51a139d33ba864454446fd41ba4bf0a54fbcb1e42a3e3d494e17895730f3f2ac7d7667314fd526300d63d8b383c462706a6d0fb44b616e104c67cda1169c497da64f9e4e6d78609f56d2346e50f6005c4a4d78fccfe3f13d8e93b0bf53015ecf54803b99b3e4727a00be9992485a1cae1faf84032c623a434ff08132ee2458559fe596138b5d3159a96", 0xc6}], 0x3, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x919}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}], 0x38}, 0x4000) r4 = memfd_secret(0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000900)={0x0, 0x7fffffff, 0x5306}) r5 = accept4(r4, &(0x7f0000000940)=@ethernet={0x0, @dev}, &(0x7f00000009c0)=0x80, 0x400) sendmsg$802154_raw(r5, &(0x7f0000000b40)={&(0x7f0000000a00)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000b00)={&(0x7f0000000a40)="851fb5193e1eb4b9b72df851fd60acc924b14fbc2eb2c09e4d3957671cbe9357725db97e896575e2578d6e483b221f0b2b1958d5a8e97f46bf922feca3c47027230bfe7ff055cc83917dfe7dd809842b69207ab6de285beb52ebbc3fc4f3e00d806f6d012edaa76eb080e2a18cc208879a66afc71bf9daad68d9f2466d88f7f3185e83fccd185c7be490eb1c90d77908b86d21e9920da90aa64f3c0f2804b116e49c8de908674d90a03a59085bb799edc54afd", 0xb3}, 0x1, 0x0, 0x0, 0x5}, 0x30000000) bind$802154_raw(r0, &(0x7f0000000b80)={0x24, @short}, 0x14) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000bc0), &(0x7f0000000c00)=0x10) 12:28:08 executing program 2: syz_open_procfs$userns(0x0, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@ieee802154, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/198, 0xc6}, {&(0x7f00000001c0)=""/144, 0x90}], 0x2, &(0x7f00000002c0)=""/133, 0x85}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4(r0, &(0x7f00000003c0)=@tipc=@name, &(0x7f0000000440)=0x80, 0x80000) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000480)) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000600)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000640)=0x28) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000804) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x120, 0x0, 0x6, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe3b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd728}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x17}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000980)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd_index=0x7, 0xfff, 0x6, 0x80, 0x1, 0x0, {0x3}}, 0x5) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000a00), 0x4) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000a40)={0x0, 0x6da6a1b2}, 0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x14000000) r5 = memfd_secret(0x80000) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000bc0), &(0x7f0000000c40)=0x68) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000cc0)={0x4, 0xdf05, "388d18", 0x1, 0x81}) [ 134.664018] audit: type=1400 audit(1745411288.126:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:28:08 executing program 4: openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x58e}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3684}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044000}, 0x50) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x805}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048045}, 0x44) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x100, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1a, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x2c004046}, 0x40) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vxcan1\x00'}) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000580)={0x24, @short}, 0x14) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r1, 0x2c, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2138}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004054) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl1\x00', r3, 0x4, 0x14, 0x7f, 0x6, 0x8, @mcast1, @mcast1, 0x8000, 0x40, 0x3, 0x1e}}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xd0, r1, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}]}, 0xd0}, 0x1, 0x0, 0x0, 0x811}, 0x0) perf_event_open$cgroup(&(0x7f0000000980)={0x1, 0x80, 0x7e, 0x0, 0x4, 0x40, 0x0, 0x1, 0x40c00, 0xd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x2}, 0x10400, 0x80, 0x7b, 0x6, 0x5, 0xfff, 0x3, 0x0, 0x7, 0x0, 0x7}, r4, 0xb, r4, 0x2) r5 = accept4$bt_l2cap(r4, 0x0, &(0x7f0000000ac0), 0x800) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000b00)) io_uring_setup(0x40f3, &(0x7f0000000b40)={0x0, 0x6002, 0x20, 0x2, 0x393}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000000bc0)={'bond_slave_1\x00'}) sendto(r6, &(0x7f0000000c00)="0d05070bbe48be775081b8d9d89b88b2078e1e2d7b7c6bdc1c1238ab36d958a3d62be874953f95ab1c0cca68e0e08754ec02b0fae481de4836ab27e2e338fc36dad22dde786f68a6d7bb5a2627520ce8446b621629ccd7bc7141c9b2d430c4363fb3eae928aa5a0417b84e228838d02f09acb97c4103456bc464f3f3fdab7d1fdb53e2f07a9ba04d9c8c05880a318aa7fea2475d", 0x94, 0x40800, 0x0, 0x0) 12:28:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2400c050) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) read$char_usb(0xffffffffffffffff, &(0x7f0000000240)=""/106, 0x6a) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.kill\x00', 0x0, 0x0) io_uring_setup(0x97f, &(0x7f0000000300)={0x0, 0x44b5, 0x1, 0x2, 0x28a, 0x0, r2}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x8}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x51}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x4028800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x8000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8054}, 0x240441c1) ioctl$CDROM_DEBUG(r2, 0x5330, 0x1) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x74}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbb2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040800) socketpair(0x2, 0x80000, 0x8000, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xfc, r5, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb38b}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffe1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xe38ed8d423ddd147}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}]}, 0xfc}, 0x1, 0x0, 0x0, 0x480}, 0x10) 12:28:08 executing program 5: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000140)={&(0x7f0000000040)="2548760123a469fd9ab3078af7ac00de37c532993260d1aaf557b268b49c67f693e08b42775b44bd2dc3540068951f015027e92b8945b0ef6f9a0f4ddd24a1a5638c421fdaf42b3c7c78154aaa7887503d7ab78d3e6ae9a936e0e0406e2b0b637b71932f51337dca970b4f6026092603c45c5ca016d82b4178f89a695bb1c2bfabf218d9db9c429aaec4c854396c2dd6c0cefd5cc8a550d50237fc2c5162d030ec0bdbad37d9e513b5f4433441e671b0080b76ed59406d0677ab093c93a2400a71cd23e235c8e5d724fe3c45a6a6296f6e2a8707df94faad171dc8e1f861421303523371cf8690773182aafc85c9a34f01a616bfce", 0xf5}, 0x1, 0x0, 0x0, 0x4088840}, 0x4000000) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) r0 = socket$packet(0x11, 0x3, 0x300) sendto(r0, &(0x7f0000000240)="b724d25bd909645bb162b2147220244a746434054afee4bac4f1df7cae50a22963ec7f68fed3b84ccaad775ea471f71ce0c644890e63e0abb471e3dd6e9023e08010727465ed87e3c07d090a7e5513378e7729e50a6b1d508b83098b9ab0be873886bcb9de39145da1cd040f2632bb5f1bb363c6d35f0d2184aedde1809b29a48f8098453ba9f7d2a9fd57b4b25f2fe5a6e2a9fcb02432f7dc12e894cee33675a8a58eaaa93ae04f65b5486ac9cd73bd04eca749aeb159c4168615ff156d8ebed0904d64e3389d35672db000026c5dbc1418", 0xd2, 0x1, &(0x7f0000000340)=@isdn={0x22, 0x3d, 0x80, 0x16}, 0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg1\x00'}) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000400)={0x7, 0x7, 0x1}, &(0x7f0000000440)=0x28) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.empty_time\x00', 0x0, 0x0) sendto(r1, &(0x7f00000004c0)="89cc9845905ef9fd629e9bd14ce4e545c872daeea20d68d152ff", 0x1a, 0x10, &(0x7f0000000500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x101, @private2, 0x9}}, 0x80) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000580)="ae0a7591d6b617ae88ad82f9dad240a230bd09430264ee4c0c8bffa41623b0e978b9748fddf95e7dbdd962f3420382c0d4dc65aaf0777b444591a3e267c07e6a47ebd58e142d0981d7f6a4348b01496feeff865cfb12b26762e59e7ac9ac3e843ec84b532aaa62f1e6741c65c78b05152c38cdcf4c98f4e8b97b9a7ad0a02b01f05d8c7dc0cc4d1e282e438effce4edbabb9dc037078") ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000640)={0x7, 'veth1_to_team\x00', {0xffff}, 0x36}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socketpair(0xf, 0x4, 0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000800), &(0x7f0000000840)=0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000880)={'veth0_virt_wifi\x00'}) getsockname(r0, &(0x7f00000008c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000940)=0x80) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xc8, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe01}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000044}, 0x684c9d3abbb81f85) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000b40)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000b80)=0x28) openat$cgroup_freezer_state(r2, &(0x7f0000000bc0), 0x2, 0x0) 12:28:08 executing program 6: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x184, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fff}, @CTA_EXPECT_NAT={0x18, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_TUPLE={0xc4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x400}, @CTA_EXPECT_MASTER={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) r1 = socket(0x30, 0x6, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x7fffffff}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x4000) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f0000000400)="fc3ca7c9a9a7122b01ed56bceb763250f5e97a42571dc5eb04ae6347abbb77dc6edd78906718ec09399c0ea8b8764127116277f81d8fbe84ea256a774eeea525adfd4189182f6ea4e8c995459dae17e14738546b236998f7309741060143c0ba258c7b850067b527d80f03c99c008c797e385194b7b09f531bfd1ad61f5e555c9231051d2e9dafa4d56e570d9846fb2672d3ed65540c501eb3cc035ec8262b53c87c2f628a37") r3 = syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x100000000, 0x3, &(0x7f0000000800)=[{&(0x7f0000000540)="7a537b8be95e0306c1d6337aa8104eac3ade2c465ae5315019f7a84abbf02fa6be3d008be642909126a26234f10f0c5f98ec132b226f4c6578929d9eef34857ee70e34f85b9cb0736213aa1bf2f67fb8a84e05fb7071bf35d6a8b58eb1698a198c4e54465fc776cfc5227e8c0e6b1a6f4718b632e607feccbfd7299420b74767fe68dc5288bb52cb88084867407f4e99e3e266cdd6574792ed69eb111ca2b927f7c573f9712dfc791374b8a690d370aba667aaa650108d0869926464401aaae1ca1b39068baac32288eb", 0xca, 0x80}, {&(0x7f0000000640)="57f190cf97642ab8e6256cfe66466d189d7572da94ff674879967112abf8f57b6ba929ee57aaf7ed651e55a3cee16f40930b4638b0d0f0aae3fdb83c3cbb11ca50b5d00ac0a4f7bab54b0e7eaffdc218e4cb75a9e96ade48c38baf5b8d5ddc1a27b0935b280339bd71e263511955835ed0946b97e6630a2d2f8306c866342ba188f85f4f3daed1dcc1d85bb3ea1281993d699342", 0x94, 0x101}, {&(0x7f0000000700)="c8744f153e0d582a2b79e6913707b07a13431cad217f65339d0216520234d332871a6653fbae53f2249508fcbd597931627889630a7d20f0390095edff735fa59e2a1569e2eb6f5497d85fbd55f41a1c671e431884c8a1f520569b9d014ec262580c424b6903a2e0b2476fb4ecbbf4c5855ca64255331ae8c7d2cea1afbab19c155e4e5fd6caddfefd985e7910d87813efb9afa1f824aeefbf601fc674221f3fcf6de8becc5cdaf0617043c5e0178e5c9a106e5c82bbed385d539c9024a21b16f5f9e98bb8b9dafef6bbfcfb908f0d24b4882fe2a3e0f6e6604ffccfe632bdfe", 0xe0, 0x4}], 0x281899, &(0x7f0000000880)={[{@dmode={'dmode', 0x3d, 0x5}}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@block}], [{@subj_role={'subj_role', 0x3d, '-'}}, {@dont_hash}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000900)={@desc={0x1, 0x0, @desc3}}) name_to_handle_at(r0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=@FILEID_INO32_GEN={0x8, 0x1, {0x7fff, 0x7fff}}, &(0x7f0000000a00), 0x1000) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000a40)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname(r4, &(0x7f0000000a80)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000b00)=0x80) mknodat$null(r3, &(0x7f0000000b40)='./file0\x00', 0x8000, 0x103) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4801}, 0x20004040) r6 = accept4$bt_l2cap(r0, &(0x7f0000000e00)={0x1f, 0x0, @none}, &(0x7f0000000e40)=0xe, 0x80000) recvmmsg(r6, &(0x7f0000000e80), 0x0, 0x40, &(0x7f0000000ec0)) 12:28:08 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80, 0x80800) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x6, @none, 0x25ab, 0x2}, 0xe) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/181, &(0x7f00000001c0)=0xb5) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_proto_private(r2, 0x89eb, &(0x7f0000002800)="ea7695542eb4a99857aae241482807756b05da6eef946a834f19fda6fae957544a92860c57c6229b91fbc2b74b1c0bdd2936864d04b48939a19a83f03daece18035ee6ce48b3ca06f053d21ca39c3637ca572a71bdaaf38a35bf41737046f28b29b3e9ab4bef1b75ca96080752ae7fdb021542cbe25e56cc99a230259433e6633a863cf260568fbb25396d62d7e3e7305bbd634f8c69d0626bba23a2cbbc6dfa942a505b7b29fd3e6be4b235a49d3e18256d4d2c3d8a9e") openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000028c0), 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000029c0), &(0x7f0000002a00)=0x8) socketpair(0x28, 0x800, 0x8, &(0x7f0000002b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000002b40)={0x6, 'ip6gretap0\x00', {0x2835}, 0x4}) sendto(r4, &(0x7f0000002b80)="c6080cc7dcc3722d93d06b851f7286a919c43d640a2436a09c14a1ef6d6d2fd85ef6043361f575ea431921dfa4d1", 0x2e, 0x24000000, &(0x7f0000002bc0)=@nfc={0x27, 0x1, 0x0, 0x3}, 0x80) name_to_handle_at(0xffffffffffffffff, &(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)=@ceph_nfs_confh={0x10, 0x2, {0x80000001, 0x107}}, &(0x7f0000002cc0), 0x1400) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000002d00), 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000002d40)={0x2, 'veth1_to_bond\x00', {0xffff}, 0x7}) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000002d80)={'bridge0\x00'}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000002dc0), 0x2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000002e00)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x8, 0x0, 0x0, 0x8, 0x5}, 0x4a9c) openat$incfs(0xffffffffffffff9c, &(0x7f0000002e40)='.log\x00', 0x4000, 0x8) [ 136.171797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.187646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.190590] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.237732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.250520] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.279068] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.289457] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.291395] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.294578] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.296142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.303110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.304717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.315556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 136.317508] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 136.321543] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.322404] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.324867] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 136.334563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.337140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.338105] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 136.340589] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 136.343969] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 136.348460] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 136.357819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.358446] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 136.363430] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.371054] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.388014] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.392707] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.397101] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 136.398027] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 136.400805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.402894] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 136.404918] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 136.406301] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.409754] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 136.422195] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.425474] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 136.427196] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 136.445377] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.340804] Bluetooth: hci0: command tx timeout [ 138.341657] Bluetooth: hci2: command tx timeout [ 138.404398] Bluetooth: hci1: command tx timeout [ 138.470310] Bluetooth: hci4: command tx timeout [ 138.470448] Bluetooth: hci6: command tx timeout [ 138.471623] Bluetooth: hci7: command tx timeout [ 138.532342] Bluetooth: hci5: command tx timeout [ 138.533400] Bluetooth: hci3: command tx timeout [ 140.388327] Bluetooth: hci2: command tx timeout [ 140.390248] Bluetooth: hci0: command tx timeout [ 140.452420] Bluetooth: hci1: command tx timeout [ 140.516501] Bluetooth: hci7: command tx timeout [ 140.517088] Bluetooth: hci4: command tx timeout [ 140.518046] Bluetooth: hci6: command tx timeout [ 140.581412] Bluetooth: hci3: command tx timeout [ 140.581947] Bluetooth: hci5: command tx timeout [ 142.438278] Bluetooth: hci0: command tx timeout [ 142.438812] Bluetooth: hci2: command tx timeout [ 142.501285] Bluetooth: hci1: command tx timeout [ 142.564403] Bluetooth: hci6: command tx timeout [ 142.564956] Bluetooth: hci4: command tx timeout [ 142.565454] Bluetooth: hci7: command tx timeout [ 142.629311] Bluetooth: hci5: command tx timeout [ 142.629626] Bluetooth: hci3: command tx timeout [ 144.484334] Bluetooth: hci2: command tx timeout [ 144.484530] Bluetooth: hci0: command tx timeout [ 144.550285] Bluetooth: hci1: command tx timeout [ 144.613312] Bluetooth: hci6: command tx timeout [ 144.613408] Bluetooth: hci7: command tx timeout [ 144.613830] Bluetooth: hci4: command tx timeout [ 144.676597] Bluetooth: hci5: command tx timeout [ 144.677313] Bluetooth: hci3: command tx timeout [ 198.826934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.842587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.848823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.876832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.878412] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 198.878899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.880892] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.885613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.886653] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 198.887675] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.887889] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.892535] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.894780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.898442] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.908046] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.973891] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.986513] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.990227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.012636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.022948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.043386] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.049852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.050057] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 199.053855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.062872] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 199.072185] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 199.084956] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 199.088184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 199.090754] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 199.093710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.096730] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 199.099677] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.100285] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 199.106933] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 199.108621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 199.111929] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 199.112911] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 199.132387] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 199.145502] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 199.152867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.932337] Bluetooth: hci1: command tx timeout [ 200.932675] Bluetooth: hci0: command tx timeout [ 200.996639] Bluetooth: hci2: command tx timeout [ 201.124443] Bluetooth: hci3: command tx timeout [ 201.188453] Bluetooth: hci5: command tx timeout [ 201.189357] Bluetooth: hci7: command tx timeout [ 201.189375] Bluetooth: hci4: command tx timeout [ 201.252439] Bluetooth: hci6: command tx timeout [ 202.980378] Bluetooth: hci1: command tx timeout [ 202.982066] Bluetooth: hci0: command tx timeout [ 203.044293] Bluetooth: hci2: command tx timeout [ 203.173281] Bluetooth: hci3: command tx timeout [ 203.236782] Bluetooth: hci7: command tx timeout [ 203.238332] Bluetooth: hci4: command tx timeout [ 203.239731] Bluetooth: hci5: command tx timeout [ 203.300558] Bluetooth: hci6: command tx timeout [ 205.029265] Bluetooth: hci1: command tx timeout [ 205.030891] Bluetooth: hci0: command tx timeout [ 205.092588] Bluetooth: hci2: command tx timeout [ 205.220330] Bluetooth: hci3: command tx timeout [ 205.284884] Bluetooth: hci7: command tx timeout [ 205.286937] Bluetooth: hci5: command tx timeout [ 205.288001] Bluetooth: hci4: command tx timeout [ 205.348449] Bluetooth: hci6: command tx timeout [ 207.076333] Bluetooth: hci1: command tx timeout [ 207.076906] Bluetooth: hci0: command tx timeout [ 207.140359] Bluetooth: hci2: command tx timeout [ 207.268395] Bluetooth: hci3: command tx timeout [ 207.332432] Bluetooth: hci7: command tx timeout [ 207.332965] Bluetooth: hci5: command tx timeout [ 207.333468] Bluetooth: hci4: command tx timeout [ 207.396459] Bluetooth: hci6: command tx timeout [ 261.305169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.315456] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.334738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.375900] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.379106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.385480] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.391339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.394732] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.406546] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.412006] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.494420] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.499377] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.502664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.508744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 261.517073] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 261.519892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.524614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.530098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 261.555532] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 261.570590] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.636041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.691485] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.696650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.715492] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.730703] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 261.756928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.758911] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.762517] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.767582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.769848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.772022] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 261.773034] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.774747] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 261.790595] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 261.823574] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 261.825082] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 261.835771] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 261.882590] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 261.920929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 261.923557] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 263.460541] Bluetooth: hci1: command tx timeout [ 263.461306] Bluetooth: hci0: command tx timeout [ 263.589152] Bluetooth: hci2: command tx timeout [ 263.652857] Bluetooth: hci3: command tx timeout [ 263.844368] Bluetooth: hci4: command tx timeout [ 263.846069] Bluetooth: hci5: command tx timeout [ 263.972470] Bluetooth: hci7: command tx timeout [ 264.036987] Bluetooth: hci6: command tx timeout [ 265.508320] Bluetooth: hci1: command tx timeout [ 265.509773] Bluetooth: hci0: command tx timeout [ 265.637798] Bluetooth: hci2: command tx timeout [ 265.700327] Bluetooth: hci3: command tx timeout [ 265.894279] Bluetooth: hci4: command tx timeout [ 265.895775] Bluetooth: hci5: command tx timeout [ 266.022516] Bluetooth: hci7: command tx timeout [ 266.084588] Bluetooth: hci6: command tx timeout [ 267.558303] Bluetooth: hci1: command tx timeout [ 267.559958] Bluetooth: hci0: command tx timeout [ 267.685539] Bluetooth: hci2: command tx timeout [ 267.748377] Bluetooth: hci3: command tx timeout [ 267.942434] Bluetooth: hci4: command tx timeout [ 267.942711] Bluetooth: hci5: command tx timeout [ 268.068297] Bluetooth: hci7: command tx timeout [ 268.135262] Bluetooth: hci6: command tx timeout [ 269.604379] Bluetooth: hci0: command tx timeout [ 269.604981] Bluetooth: hci1: command tx timeout [ 269.733255] Bluetooth: hci2: command tx timeout [ 269.797308] Bluetooth: hci3: command tx timeout [ 269.988287] Bluetooth: hci5: command tx timeout [ 269.988890] Bluetooth: hci4: command tx timeout [ 270.116760] Bluetooth: hci7: command tx timeout [ 270.180456] Bluetooth: hci6: command tx timeout [ 324.082151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 324.086568] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 324.093813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 324.099554] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 324.103540] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 324.350780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.352128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 324.353984] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 324.355701] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 324.360074] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.361432] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.365524] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 324.369371] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.371667] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 324.375666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.379485] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.387786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.391535] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.401359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.406778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.472175] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.482944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.485792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.497857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.501017] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.552731] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 324.570405] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 324.576652] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 324.580038] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 324.582404] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 324.664554] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 324.675261] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 324.676647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 324.680407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 324.691504] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 325.165060] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 325.185746] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 325.212675] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 325.242761] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 325.252538] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 326.116482] Bluetooth: hci0: command tx timeout [ 326.436788] Bluetooth: hci2: command tx timeout [ 326.438463] Bluetooth: hci1: command tx timeout [ 326.438502] Bluetooth: hci3: command tx timeout [ 326.628315] Bluetooth: hci4: command tx timeout [ 326.756306] Bluetooth: hci5: command tx timeout [ 326.820323] Bluetooth: hci6: command tx timeout [ 327.398276] Bluetooth: hci7: command tx timeout [ 328.165101] Bluetooth: hci0: command tx timeout [ 328.484913] Bluetooth: hci2: command tx timeout [ 328.486597] Bluetooth: hci1: command tx timeout [ 328.488083] Bluetooth: hci3: command tx timeout [ 328.676310] Bluetooth: hci4: command tx timeout [ 328.804505] Bluetooth: hci5: command tx timeout [ 328.868295] Bluetooth: hci6: command tx timeout [ 329.444690] Bluetooth: hci7: command tx timeout [ 330.212309] Bluetooth: hci0: command tx timeout [ 330.532374] Bluetooth: hci1: command tx timeout [ 330.532926] Bluetooth: hci3: command tx timeout [ 330.533457] Bluetooth: hci2: command tx timeout [ 330.724295] Bluetooth: hci4: command tx timeout [ 330.852635] Bluetooth: hci5: command tx timeout [ 330.916727] Bluetooth: hci6: command tx timeout [ 331.492715] Bluetooth: hci7: command tx timeout [ 332.260954] Bluetooth: hci0: command tx timeout [ 332.581331] Bluetooth: hci2: command tx timeout [ 332.581894] Bluetooth: hci3: command tx timeout [ 332.582737] Bluetooth: hci1: command tx timeout [ 332.772515] Bluetooth: hci4: command tx timeout [ 332.900323] Bluetooth: hci5: command tx timeout [ 332.964544] Bluetooth: hci6: command tx timeout [ 333.540342] Bluetooth: hci7: command tx timeout [ 386.687707] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 386.701333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 386.708076] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 386.722386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 386.726091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.932640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.934615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.936028] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.943380] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.945913] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.994948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.001575] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.015611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.038816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.042692] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.218823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.225729] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.234869] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 387.236881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 387.248043] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.258613] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 387.261587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.262523] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 387.264881] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 387.265904] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 387.278404] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.288903] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 387.290159] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 387.291080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.295629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.296179] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 387.316583] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 387.323768] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 387.328471] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 387.350958] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.357551] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 387.360261] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 387.361108] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 387.378080] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.383807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 388.772730] Bluetooth: hci0: command tx timeout [ 389.029552] Bluetooth: hci1: command tx timeout [ 389.092637] Bluetooth: hci2: command tx timeout [ 389.476402] Bluetooth: hci6: command tx timeout [ 389.477350] Bluetooth: hci7: command tx timeout [ 389.477965] Bluetooth: hci4: command tx timeout [ 389.478616] Bluetooth: hci3: command tx timeout [ 389.540560] Bluetooth: hci5: command tx timeout [ 390.820873] Bluetooth: hci0: command tx timeout [ 391.076535] Bluetooth: hci1: command tx timeout [ 391.140595] Bluetooth: hci2: command tx timeout [ 391.524454] Bluetooth: hci4: command tx timeout [ 391.524617] Bluetooth: hci3: command tx timeout [ 391.524989] Bluetooth: hci6: command tx timeout [ 391.525536] Bluetooth: hci7: command tx timeout [ 391.588306] Bluetooth: hci5: command tx timeout [ 392.869285] Bluetooth: hci0: command tx timeout [ 393.127240] Bluetooth: hci1: command tx timeout [ 393.188359] Bluetooth: hci2: command tx timeout [ 393.572550] Bluetooth: hci4: command tx timeout [ 393.573104] Bluetooth: hci3: command tx timeout [ 393.573908] Bluetooth: hci6: command tx timeout [ 393.574421] Bluetooth: hci7: command tx timeout [ 393.638592] Bluetooth: hci5: command tx timeout [ 394.917296] Bluetooth: hci0: command tx timeout [ 395.173330] Bluetooth: hci1: command tx timeout [ 395.237385] Bluetooth: hci2: command tx timeout [ 395.620815] Bluetooth: hci6: command tx timeout [ 395.620857] Bluetooth: hci7: command tx timeout [ 395.622186] Bluetooth: hci3: command tx timeout [ 395.622427] Bluetooth: hci4: command tx timeout [ 395.684682] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 12:33:14 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88802645f6f0 RCX=ffffffff81352d8e RDX=ffffed1004c8bed9 RSI=0000000000000070 RDI=ffff88802645f658 RBP=ffff88802645f658 RSP=ffff88802645f5e8 R8 =0000000000000001 R9 =ffffed1004c8bed8 R10=ffff88802645f6c7 R11=0000000000000000 R12=0000000000000070 R13=0000000000000000 R14=ffff888021c6d340 R15=ffff88802645f658 RIP=ffffffff81ae06a6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558b924400 00000000 00000000 GS =0000 ffff8880e564d000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555a57742008 CR3=000000003284e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000653 RBX=00007f305e271ad0 RCX=00007f305e205738 RDX=0000000000000001 RSI=0000000000000002 RDI=00007f305e235a4a RBP=00007ffd8e12da20 RSP=00007ffd8e12d920 R8 =0000000000000000 R9 =00007f305e219580 R10=00007f305e4d8a80 R11=00007f305e518510 R12=0000000000000001 R13=0000065300000001 R14=00007f305e219580 R15=00007f305e518510 RIP=00007f305e53273a RFL=00000216 [----AP-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f305e00e540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fba97e171f0 CR3=000000002fb40000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=315f315f4c53534e45504f00315f315f XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000