[ OK ] Finished Update UTMP about System Runlevel Changes. [ 85.299490] audit: type=1400 audit(1748411718.638:6): avc: denied { checkpoint_restore } for pid=219 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:28382' (ECDSA) to the list of known hosts. 2025/05/28 05:55:26 fuzzer started 2025/05/28 05:55:27 dialing manager at localhost:36005 syzkaller login: [ 94.414947] cgroup: Unknown subsys name 'net' [ 94.549658] cgroup: Unknown subsys name 'cpuset' [ 94.596269] cgroup: Unknown subsys name 'rlimit' 2025/05/28 05:55:43 syscalls: 200 2025/05/28 05:55:43 code coverage: enabled 2025/05/28 05:55:43 comparison tracing: enabled 2025/05/28 05:55:43 extra coverage: enabled 2025/05/28 05:55:43 setuid sandbox: enabled 2025/05/28 05:55:43 namespace sandbox: enabled 2025/05/28 05:55:43 Android sandbox: enabled 2025/05/28 05:55:43 fault injection: enabled 2025/05/28 05:55:43 leak checking: enabled 2025/05/28 05:55:43 net packet injection: enabled 2025/05/28 05:55:43 net device setup: enabled 2025/05/28 05:55:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/28 05:55:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/28 05:55:43 USB emulation: enabled 2025/05/28 05:55:43 hci packet injection: enabled 2025/05/28 05:55:43 wifi device emulation: enabled 2025/05/28 05:55:43 802.15.4 emulation: enabled 2025/05/28 05:55:43 fetching corpus: 0, signal 0/0 (executing program) 2025/05/28 05:55:45 starting 8 fuzzer processes 05:55:45 executing program 0: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @remote}, 0x10) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x1f, 0x0, 0xffffff09, 0x5, 0x1}, 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x3}, 0x4) pselect6(0x40, &(0x7f0000000100)={0x5, 0x5, 0x0, 0x9, 0x517f, 0x6, 0x2, 0x5}, &(0x7f0000000140)={0x509a28dd, 0x6, 0x5, 0x3, 0x4, 0xfffffffffffffffa, 0x7, 0x800}, &(0x7f0000000180)={0x2, 0x1800000000000000, 0x0, 0xffff, 0x1, 0x5af, 0x4, 0x800}, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x80000000]}, 0x8}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4007, @fd=r0, 0x401, 0x6, 0x2, 0x4, 0x0, {0x0, r2}}, 0x1f) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8020, 0x8, 0x7, 0x81, {{0x9, 0x4, 0x2, 0x8, 0x24, 0x66, 0x0, 0x0, 0x4, 0x0, @local, @local, {[@cipso={0x86, 0xf, 0x0, [{0x7, 0x2}, {0x7, 0x7, "f7b7964283"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000380)={'gretap0\x00', r3, 0x20, 0x80, 0x400, 0x5, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x66, 0x0, 0x40, 0x0, 0x0, @multicast2, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000400)={0x5, 0xfffffffe, 0x1, 'queue0\x00', 0xd9}) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000580)={{r5, r6+60000000}, {r7, r8+10000000}}, &(0x7f00000005c0)) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4015}, 0x4008001) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000700)=""/13, &(0x7f0000000740)=0xd) r9 = syz_io_uring_complete(0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r9, 0xc058534b, &(0x7f0000000780)={0x3, 0x1c5a, 0xff, 0x8b, 0x2, 0x3}) 05:55:45 executing program 1: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x7, 0x8, 0xdc2a, 0x9, 0x9, 0x6896e9e4, 0xf43}, 0x1c) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=""/96, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000100)={0x1, @link_key_neg_reply={{0x40c, 0x6}}}, 0xa) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x80000) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x400) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000280)={0xc2, "c65d7e"}, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x10, 0x7800, 0x10000, 0x4, {{0x19, 0x4, 0x3, 0x5, 0x64, 0x64, 0x0, 0x6, 0x29, 0x0, @broadcast, @empty, {[@end, @end, @rr={0x7, 0x1b, 0xf2, [@remote, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x25, 0x3, 0x5, [{@broadcast, 0x3}, {@remote}, {@remote, 0x206}, {@broadcast, 0xfff}, {@multicast2, 0x7ff}]}]}}}}}) sendmsg$nl_xfrm(r3, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200882e0}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@delpolicy={0x288, 0x14, 0x200, 0x70bd2c, 0x25dfdbfc, {{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4e22, 0x9, 0x4e22, 0x0, 0x2, 0x80, 0x0, 0x1d, 0x0, 0xee01}, 0x6e6bb9, 0x3}, [@algo_crypt={0x147, 0x2, {{'rfc3686(ecb(cast6))\x00'}, 0x7f8, "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"}}, @algo_comp={0xbe, 0x3, {{'lzjh\x00'}, 0x3b0, "0effd047b5a63137f5e7d49cc9eeeaa3f8995039ab44755f55e8316393fdc81a3c8ce6bcbded8c5430fe702da1d37b7e73dc550ce89ba774dc6f2012002b55eb61d70e226ab57bf515d0b9d088b5dfcca3b371f6c4a3787e807c072725c0feeb0694d3b9b778d66fc7338d833c0b843a3ed4c0b2b24e"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e20, @in=@multicast1}}, @policy_type={0xa, 0x10, {0x1}}, @XFRMA_IF_ID={0x8, 0x1f, r6}]}, 0x288}, 0x1, 0x0, 0x0, 0x8000}, 0x10) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000740), &(0x7f0000000780)=0x6) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, r7, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x894) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000940), &(0x7f0000000980)=0x6) syz_io_uring_submit(r4, 0x0, &(0x7f0000000a00)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x38e8, &(0x7f00000009c0)=[r1, 0xffffffffffffffff], 0x2, 0x0, 0x1}, 0x5) 05:55:45 executing program 2: r0 = socket$packet(0x11, 0x97327e384d41f184, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1, 0x3f, 0x3, 0x0, 0x9, 0x4, 0x3}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000080)={{0x1f, 0x3}, {0x1, 0x6}, 0x3616, 0x0, 0x3}) r3 = accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14, 0x800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000180)={{0x1, 0x40}, 'port0\x00', 0xfd, 0x4, 0x87, 0x20, 0x9, 0x0, 0x101, 0x0, 0x1, 0x8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) socket$packet(0x11, 0x3, 0x300) r5 = syz_io_uring_complete(0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000340)={{0x6, 0x28}, 'port0\x00', 0x40, 0x1000, 0x5, 0xfe5, 0x7, 0x8001, 0x1000, 0x0, 0x4, 0x1c}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x5, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4c045}, 0x840) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000500)={{0xf4, 0x40}, 'port1\x00', 0x42, 0x20, 0x8000, 0x3ff, 0x6, 0x2, 0x8000, 0x0, 0x4, 0x4}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f00000005c0)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f0000000600)={0xfffffffb, 0x8, 0x1, 'queue1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xf8, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x846}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc002}, 0x400c001) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8007}, 0x20040000) [ 112.456786] audit: type=1400 audit(1748411745.795:7): avc: denied { execmem } for pid=270 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:55:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc018}, 0x4000000) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x2, &(0x7f0000000180)=[r1], 0x1, 0x0, 0x0, {0x0, r2}}, 0xe7b4) r3 = pidfd_getfd(r1, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x90000000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000240)) r4 = accept4$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14, 0x80800) setsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000300)=0x9, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000340)) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000380)='cdg\x00', 0x4) r5 = syz_io_uring_complete(0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) pidfd_getfd(r1, r5, 0x0) accept4$packet(r5, 0x0, &(0x7f00000003c0), 0x800) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000400)) 05:55:45 executing program 4: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x303}, "5af7781dbd87c502", "f74c581a1ddd30cd03caa397de132071", "8027984a", "b623334303cbdb72"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}}, 0x0, 0x0, 0x42, 0x0, "414202a4611dc8c0a672832c12a1905808da7c0be4a81d5d709ee3d396c4a3b32e5a3ca8dc4337d13657c0b877333deec4fbe1b49889d7d9b0db06f9754a78e33deb344046d6906c8bc935a6f3f40351"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000200)) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000240)=0x1, 0x4) r1 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x6, 0x6, 0x7, 0x4, "ddecae799c659066a1a4d8309d9c3dd2baf7a55a2ec7c53a53ff161156b44f1e10097a5658be702c6250f69853e20dfbce92747ba3e8274a2b28007b7acd85eb", "3a1db976b237ef9f74bdb363ace670fd62bd80616052a598a2bdd26fc92431af", [0x3, 0xfffffffffffffe87]}) r2 = pidfd_getfd(r0, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000340)) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r2) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r3, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000780)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/160, 0xa0, 0x0, &(0x7f0000000680)=""/196, 0xc4}, &(0x7f00000007c0)=0x40) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xfd79) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000800), 0x80102, 0x0) process_madvise(r4, &(0x7f0000000bc0)=[{&(0x7f0000000840)="84ea023abfb834a6d0070397ffcf797a0facf94279580e15de4a29538261116ad654e90762c457e1ae415f88198aa4fe78c9b0fd90a40d6067b4fab3b209d098d356f29a35f02c50ea336f919fbd1d3ee3ef02b929", 0x55}, {&(0x7f00000008c0)="00294aed1408141105ccefa8061250fe7cd623f4bff172591d336fab08a4aad2dd83dbe9250b7e637625e77b3c3d1d536fc68d25aad06315b6e91669a6a811dcbd610949c22e9cbe318f7b6de5475a8ce1b5a95dba1c390844fad799152a296e092f6479e994b24c75eabffd12c5bc21e44813f7ce49e4b612d372aa38570b3d9bcacbb92788ff843f25dab299172848f80d5b46e4d89daee07265e4cc94ebcaf88d1d8ce37f56dcb57b7d70b1e0cea2c50710d7944652490aad3d8d098cbf6d5ff9d460d2e78edbfe57d0b6808e936b227014d7e3944f033ca687ee3eb2a2449027de", 0xe3}, {&(0x7f00000009c0)="2c49d7a9674d3b635f0406c2e3c179ec5ccfaee4ada7e9530036ca408c2e01cc206e357c43e4c6255e52587ccc33145f343c128146bd2df29aa538b6f3dc6b722961f992f0220fb58b1bd040415b4a855e24fb19e2baea05624e03398b53f6919935393f45a35fe6105c138a0483095db341148edc4b8c2c9ffd6cd3aac05d09", 0x80}, {&(0x7f0000000a40)="5fee6b56e87388e4ec12", 0xa}, {&(0x7f0000000a80)="140f8a5ff3a32e147217cf7b04556d4da8381af0718a31d9fc8579b4b7d8ca0b774c", 0x22}, {&(0x7f0000000ac0)="044464526c6f2ab4d6f09414bd096ea3e7f1dd2d7c4b9ee0ee9b7cc6e7600ab2fff5008ec0f5045e267e5b942ada004d0ac16d77ad311fab12e672e9c8816fa9124e5cfbd791c261f9714040d2a04de97b064d10a940a604e043a5277e8de01751c5bb867203c94d2c746941e1b9b11e6c5f1efad13dced88bfd7b462f1a2fbebc3cd53a3d9d82cf4f9426c90a91fc88a88185d449e6973f0c671071a12aa99080c71c16f2cfcbf3f3", 0xa9}, {&(0x7f0000000b80)="317aeeb318aa17554d8272cb2b1013d07d243cf86e341fc910855e7819", 0x1d}], 0x7, 0x2, 0x0) 05:55:45 executing program 5: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x10000, 0x9, 0x5, 0x1ff, 0xff}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2, 0x9, 0x1, 0x0, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x80, 0x40, 0x1, 0x5}}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) r3 = socket(0x1a, 0x80000, 0xff) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000200)="d2823396ec4f8774a9fcd6940cdfa3cb", 0x10) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000240)=@gcm_256={{0x303}, "7421f7ff69215dc7", "2e7748f606bc0dfd1dbe93b6eed23517495b6048f43f9f1aec696fe182c43d1e", "2ad28d86", "6099131b58cd2a89"}, 0x38) getsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r1, 0x2f, 0x82, 0xb7, 0x9, 0x50, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x8, 0x20, 0xe3}}) r4 = pidfd_getfd(r2, r3, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r3) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xad8831d7f3fd65e5}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x8c, r5, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10000000}, 0x1) setsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000580)=0x1f, 0x4) r6 = pidfd_getfd(r2, r2, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f00000005c0)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000600)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000640)=0x8, 0x4) 05:55:45 executing program 6: sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xe10c8aef785c81f4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4082}, 0xc080) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x0, 0x4a7, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48005}, 0x60080) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket(0xa, 0x800, 0x8bc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x108, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40011) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x40, 0x700, 0x8, 0xff, {{0x9, 0x4, 0x3, 0x5, 0x24, 0x64, 0x0, 0x8, 0xa2bb512524039925, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@generic={0xd0, 0xd, "801601e9b07b994a54893b"}]}}}}}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x81, 0x5, 0x1, 0xfffffffb}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}}, 0x4000) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000005c0)={0x6, &(0x7f0000000580)=[{0x9227, 0x23, 0x6, 0xab}, {0x2, 0x1, 0x0, 0x10000}, {0x8, 0x7, 0x2, 0x800}, {0x6, 0x3f, 0x4, 0xea}, {0x8, 0x40, 0x9, 0x7}, {0x81, 0xff, 0x3, 0x9}]}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x180, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xa}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0xd}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2b}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xf}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7fea}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4048055}, 0x8000) r5 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000840)={0x1, 0x2, {0x2, 0x1, 0x1, 0x3, 0x4}, 0x3}) r6 = socket(0x11, 0x5, 0x48ca) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000008c0)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000900)=0x3a73dc97af1e472b, 0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000940), &(0x7f0000000980)=0xc) 05:55:46 executing program 7: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = socket(0xa, 0x6, 0x1) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3c, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbbf}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x99}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040001}, 0x20004805) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0xfffffffffffffffe, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd8, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff8001}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x29}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24040000}, 0x2080) r3 = accept4$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14, 0x80800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7800, 0x7, 0x7ff, 0x1f, {{0x23, 0x4, 0x2, 0x0, 0x8c, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0x47, [@rand_addr=0x64010101, @remote]}, @timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3dfc172c}]}, @generic={0x82, 0x9, "2c8a7f3e433bd3"}, @timestamp_prespec={0x44, 0x14, 0x7d, 0x3, 0xd, [{@empty, 0x4}, {@empty}]}, @rr={0x7, 0x23, 0x71, [@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010101, @remote, @loopback, @private=0xa010102, @remote, @rand_addr=0x64010101, @broadcast]}, @ssrr={0x89, 0x1b, 0x51, [@multicast2, @rand_addr=0x64010102, @multicast2, @rand_addr=0x64010102, @multicast2, @multicast2]}, @end]}}}}}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000600)={r4, 0x1, 0x6}, 0x10) r5 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x120, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x875a}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = pidfd_getfd(r5, r3, 0x0) accept$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000880)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', r7, 0x2f, 0x0, 0x2, 0x1, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7, 0x8000, 0x8000, 0x5}}) r8 = pidfd_getfd(r6, r6, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r2, 0x800, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4884}, 0x40) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x81, @bearer=@udp='udp:syz1\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x24000041) [ 113.851375] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.858483] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.861329] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.864875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.869637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.875847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.879593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.882286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.890341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.905848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.964592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.969676] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.978326] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.980233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.984877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.987360] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.993331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.004729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.012720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.019328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.046759] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.058610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.064925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.098683] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.101646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.103713] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.108461] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.111765] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.114889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.117823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.129638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.131644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.135008] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.153347] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.154879] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.156301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.173764] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.190736] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.234693] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.255219] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.927172] Bluetooth: hci0: command tx timeout [ 115.990599] Bluetooth: hci1: command tx timeout [ 116.054418] Bluetooth: hci2: command tx timeout [ 116.118169] Bluetooth: hci3: command tx timeout [ 116.182369] Bluetooth: hci6: command tx timeout [ 116.247330] Bluetooth: hci5: command tx timeout [ 116.247976] Bluetooth: hci4: command tx timeout [ 116.311161] Bluetooth: hci7: command tx timeout [ 117.977106] Bluetooth: hci0: command tx timeout [ 118.038499] Bluetooth: hci1: command tx timeout [ 118.102302] Bluetooth: hci2: command tx timeout [ 118.167551] Bluetooth: hci3: command tx timeout [ 118.230830] Bluetooth: hci6: command tx timeout [ 118.296092] Bluetooth: hci5: command tx timeout [ 118.296578] Bluetooth: hci4: command tx timeout [ 118.358407] Bluetooth: hci7: command tx timeout [ 120.024099] Bluetooth: hci0: command tx timeout [ 120.088126] Bluetooth: hci1: command tx timeout [ 120.151454] Bluetooth: hci2: command tx timeout [ 120.215294] Bluetooth: hci3: command tx timeout [ 120.279177] Bluetooth: hci6: command tx timeout [ 120.343339] Bluetooth: hci4: command tx timeout [ 120.343780] Bluetooth: hci5: command tx timeout [ 120.407147] Bluetooth: hci7: command tx timeout [ 122.071203] Bluetooth: hci0: command tx timeout [ 122.134149] Bluetooth: hci1: command tx timeout [ 122.199529] Bluetooth: hci2: command tx timeout [ 122.262123] Bluetooth: hci3: command tx timeout [ 122.326189] Bluetooth: hci6: command tx timeout [ 122.390293] Bluetooth: hci5: command tx timeout [ 122.390736] Bluetooth: hci4: command tx timeout [ 122.455776] Bluetooth: hci7: command tx timeout [ 176.324930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.328696] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.332977] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.340505] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.345757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.523212] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.525786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.527780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.534578] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.535371] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.538569] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.547991] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.553867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.553876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.556872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.563198] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.565665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.566533] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.578188] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.579847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.615541] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.631673] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.654475] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.659277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.659483] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.671503] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.676276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.691581] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.693874] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.703335] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.703432] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.715308] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.727405] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.733377] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.743807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.745424] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.755293] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.757710] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.761852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.764327] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.390137] Bluetooth: hci0: command tx timeout [ 178.646198] Bluetooth: hci3: command tx timeout [ 178.710228] Bluetooth: hci2: command tx timeout [ 178.710277] Bluetooth: hci1: command tx timeout [ 178.774164] Bluetooth: hci4: command tx timeout [ 178.838201] Bluetooth: hci5: command tx timeout [ 178.838260] Bluetooth: hci6: command tx timeout [ 178.838863] Bluetooth: hci7: command tx timeout [ 180.438214] Bluetooth: hci0: command tx timeout [ 180.695451] Bluetooth: hci3: command tx timeout [ 180.758129] Bluetooth: hci1: command tx timeout [ 180.760248] Bluetooth: hci2: command tx timeout [ 180.822385] Bluetooth: hci4: command tx timeout [ 180.886292] Bluetooth: hci6: command tx timeout [ 180.886711] Bluetooth: hci7: command tx timeout [ 180.886752] Bluetooth: hci5: command tx timeout [ 182.486370] Bluetooth: hci0: command tx timeout [ 182.742247] Bluetooth: hci3: command tx timeout [ 182.806280] Bluetooth: hci2: command tx timeout [ 182.806762] Bluetooth: hci1: command tx timeout [ 182.871319] Bluetooth: hci4: command tx timeout [ 182.934784] Bluetooth: hci7: command tx timeout [ 182.935298] Bluetooth: hci6: command tx timeout [ 182.935364] Bluetooth: hci5: command tx timeout [ 184.535320] Bluetooth: hci0: command tx timeout [ 184.791261] Bluetooth: hci3: command tx timeout [ 184.854137] Bluetooth: hci2: command tx timeout [ 184.854575] Bluetooth: hci1: command tx timeout [ 184.919091] Bluetooth: hci4: command tx timeout [ 184.982423] Bluetooth: hci7: command tx timeout [ 184.982885] Bluetooth: hci5: command tx timeout [ 184.983100] Bluetooth: hci6: command tx timeout [ 238.665419] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.669033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.673598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.685439] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.696625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.708673] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.717798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.722831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.739416] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.746354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.827753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.834870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.845889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.850501] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.854520] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.872640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.892266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.905714] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.907460] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.926577] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.956595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.963839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.970364] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.974488] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.976036] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.990444] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.991748] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.995864] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.012542] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.020511] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.023672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.030482] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.031434] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.033728] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.041460] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.173891] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.187466] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.208214] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.214474] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.228761] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.791447] Bluetooth: hci1: command tx timeout [ 240.791502] Bluetooth: hci0: command tx timeout [ 241.110416] Bluetooth: hci6: command tx timeout [ 241.174171] Bluetooth: hci2: command tx timeout [ 241.174236] Bluetooth: hci5: command tx timeout [ 241.174793] Bluetooth: hci3: command tx timeout [ 241.175475] Bluetooth: hci4: command tx timeout [ 241.366157] Bluetooth: hci7: command tx timeout [ 242.840093] Bluetooth: hci0: command tx timeout [ 242.840579] Bluetooth: hci1: command tx timeout [ 243.159337] Bluetooth: hci6: command tx timeout [ 243.223135] Bluetooth: hci2: command tx timeout [ 243.223618] Bluetooth: hci3: command tx timeout [ 243.224012] Bluetooth: hci5: command tx timeout [ 243.224815] Bluetooth: hci4: command tx timeout [ 243.414224] Bluetooth: hci7: command tx timeout [ 244.886143] Bluetooth: hci0: command tx timeout [ 244.886565] Bluetooth: hci1: command tx timeout [ 245.206241] Bluetooth: hci6: command tx timeout [ 245.270386] Bluetooth: hci4: command tx timeout [ 245.270822] Bluetooth: hci5: command tx timeout [ 245.271425] Bluetooth: hci3: command tx timeout [ 245.271851] Bluetooth: hci2: command tx timeout [ 245.463496] Bluetooth: hci7: command tx timeout [ 246.934142] Bluetooth: hci0: command tx timeout [ 246.934255] Bluetooth: hci1: command tx timeout [ 247.254171] Bluetooth: hci6: command tx timeout [ 247.318399] Bluetooth: hci2: command tx timeout [ 247.318713] Bluetooth: hci3: command tx timeout [ 247.318950] Bluetooth: hci5: command tx timeout [ 247.319720] Bluetooth: hci4: command tx timeout [ 247.511374] Bluetooth: hci7: command tx timeout [ 301.042709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.045933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.049701] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.061698] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.069622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.185806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.191707] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.196939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.225812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.244225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.250634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.255889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.263523] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.273992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.285575] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.295628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.306305] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.313354] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.323500] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.333549] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.346710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.362638] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.367583] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.372539] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.374238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.382476] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.384516] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.386222] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.387694] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.390706] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.392461] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.398756] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.400412] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.402667] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.411530] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.423741] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.433805] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.446025] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.450150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.454826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.127478] Bluetooth: hci0: command tx timeout [ 303.382233] Bluetooth: hci3: command tx timeout [ 303.383543] Bluetooth: hci1: command tx timeout [ 303.510500] Bluetooth: hci5: command tx timeout [ 303.511354] Bluetooth: hci2: command tx timeout [ 303.574241] Bluetooth: hci7: command tx timeout [ 303.575004] Bluetooth: hci4: command tx timeout [ 303.575845] Bluetooth: hci6: command tx timeout [ 305.174207] Bluetooth: hci0: command tx timeout [ 305.431146] Bluetooth: hci1: command tx timeout [ 305.431633] Bluetooth: hci3: command tx timeout [ 305.559230] Bluetooth: hci2: command tx timeout [ 305.559742] Bluetooth: hci5: command tx timeout [ 305.623516] Bluetooth: hci6: command tx timeout [ 305.624291] Bluetooth: hci4: command tx timeout [ 305.624723] Bluetooth: hci7: command tx timeout [ 307.223115] Bluetooth: hci0: command tx timeout [ 307.480117] Bluetooth: hci3: command tx timeout [ 307.480586] Bluetooth: hci1: command tx timeout [ 307.606150] Bluetooth: hci5: command tx timeout [ 307.606601] Bluetooth: hci2: command tx timeout [ 307.670180] Bluetooth: hci7: command tx timeout [ 307.670621] Bluetooth: hci4: command tx timeout [ 307.672165] Bluetooth: hci6: command tx timeout [ 309.271584] Bluetooth: hci0: command tx timeout [ 309.526153] Bluetooth: hci3: command tx timeout [ 309.526645] Bluetooth: hci1: command tx timeout [ 309.655125] Bluetooth: hci2: command tx timeout [ 309.655626] Bluetooth: hci5: command tx timeout [ 309.718173] Bluetooth: hci6: command tx timeout [ 309.718638] Bluetooth: hci4: command tx timeout [ 309.719089] Bluetooth: hci7: command tx timeout [ 363.712418] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.720881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.724322] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.731713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.737726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.739543] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.747470] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.756901] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.760355] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.760573] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.762931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.768483] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.771040] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.775806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.802501] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.903954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.908646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.911389] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.917753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.923647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.057688] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.073374] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.093651] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.111349] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.135328] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.444590] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.452326] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.453158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.456887] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.459992] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.465120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.468989] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.471970] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.474366] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 364.478972] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.481112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.519960] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.532741] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.535087] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.550870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.848134] Bluetooth: hci2: command tx timeout [ 365.910314] Bluetooth: hci1: command tx timeout [ 365.910959] Bluetooth: hci0: command tx timeout [ 365.975145] Bluetooth: hci3: command tx timeout [ 366.422304] Bluetooth: hci7: command tx timeout [ 366.551094] Bluetooth: hci6: command tx timeout [ 366.742235] Bluetooth: hci4: command tx timeout [ 366.807111] Bluetooth: hci5: command tx timeout [ 367.896276] Bluetooth: hci2: command tx timeout [ 367.958277] Bluetooth: hci0: command tx timeout [ 367.958764] Bluetooth: hci1: command tx timeout [ 368.022458] Bluetooth: hci3: command tx timeout [ 368.471149] Bluetooth: hci7: command tx timeout [ 368.599151] Bluetooth: hci6: command tx timeout [ 368.790289] Bluetooth: hci4: command tx timeout [ 368.855183] Bluetooth: hci5: command tx timeout [ 369.943151] Bluetooth: hci2: command tx timeout [ 370.007191] Bluetooth: hci1: command tx timeout [ 370.007811] Bluetooth: hci0: command tx timeout [ 370.071121] Bluetooth: hci3: command tx timeout [ 370.518150] Bluetooth: hci7: command tx timeout [ 370.646378] Bluetooth: hci6: command tx timeout [ 370.838141] Bluetooth: hci4: command tx timeout [ 370.903078] Bluetooth: hci5: command tx timeout [ 371.992088] Bluetooth: hci2: command tx timeout [ 372.054257] Bluetooth: hci0: command tx timeout [ 372.054722] Bluetooth: hci1: command tx timeout [ 372.119157] Bluetooth: hci3: command tx timeout [ 372.567252] Bluetooth: hci7: command tx timeout [ 372.695109] Bluetooth: hci6: command tx timeout [ 372.888392] Bluetooth: hci4: command tx timeout [ 372.950143] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 06:00:55 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff888036537648 RCX=ffff8880365374d4 RDX=0000000000000000 RSI=ffffffff81aef879 RDI=ffff888036537654 RBP=0000000000000001 RSP=ffff888036537560 R8 =ffffffff86875ebe R9 =ffff8880365375c0 R10=000000000003b6ad R11=0000000000024a7c R12=ffff888036537648 R13=0000000000000000 R14=ffff888034385280 R15=ffff88800ddfe5c0 RIP=ffffffff816047fe RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f78f9468540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe7d0c1c18 CR3=000000002d0f0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffff1100620cf1b RBX=000055cbf1dfe000 RCX=ffffffff84ad7fa1 RDX=ffff888028f1b700 RSI=ffffffff84ad7fdc RDI=0000000000000001 RBP=ffff888015963400 RSP=ffff888031067718 R8 =0000000000000001 R9 =ffff888031067e30 R10=0000000000000004 R11=0000000000000001 R12=0000000000000004 R13=0000000000000001 R14=dffffc0000000000 R15=ffff8880310678d0 RIP=ffffffff84ad7fe9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff10c207028 CR3=0000000034144000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000