Warning: Permanently added '[localhost]:26625' (ECDSA) to the list of known hosts. 2025/06/02 23:40:03 fuzzer started 2025/06/02 23:40:03 dialing manager at localhost:34361 syzkaller login: [ 99.056682] cgroup: Unknown subsys name 'net' [ 99.208603] cgroup: Unknown subsys name 'cpuset' [ 99.261675] cgroup: Unknown subsys name 'rlimit' 2025/06/02 23:40:24 syscalls: 204 2025/06/02 23:40:24 code coverage: enabled 2025/06/02 23:40:24 comparison tracing: enabled 2025/06/02 23:40:24 extra coverage: enabled 2025/06/02 23:40:24 setuid sandbox: enabled 2025/06/02 23:40:24 namespace sandbox: enabled 2025/06/02 23:40:24 Android sandbox: enabled 2025/06/02 23:40:24 fault injection: enabled 2025/06/02 23:40:24 leak checking: enabled 2025/06/02 23:40:24 net packet injection: enabled 2025/06/02 23:40:24 net device setup: enabled 2025/06/02 23:40:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/02 23:40:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/02 23:40:24 USB emulation: enabled 2025/06/02 23:40:24 hci packet injection: enabled 2025/06/02 23:40:24 wifi device emulation: enabled 2025/06/02 23:40:24 802.15.4 emulation: enabled 2025/06/02 23:40:24 fetching corpus: 0, signal 0/0 (executing program) 2025/06/02 23:40:26 starting 8 fuzzer processes 23:40:26 executing program 0: ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x8) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8703, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='memory.low\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x64482, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x6) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000180)={0x89, ""/137}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x6951c5b2a86f47ca, 0x0) recvmmsg$unix(r3, &(0x7f0000008400)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/218, 0xda}, {&(0x7f0000001400)=""/92, 0x5c}], 0x3, &(0x7f00000014c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001500), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001580)=""/119, 0x77}, {&(0x7f0000001600)=""/255, 0xff}, {&(0x7f0000001700)=""/229, 0xe5}, {&(0x7f0000001800)=""/88, 0x58}], 0x4, &(0x7f00000018c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001980)=""/42, 0x2a}, {&(0x7f00000019c0)=""/236, 0xec}, {&(0x7f0000001ac0)=""/106, 0x6a}, {&(0x7f0000001b40)=""/119, 0x77}], 0x4, &(0x7f0000001c00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000001c40)=@abs, 0x6e, &(0x7f0000004e80)=[{&(0x7f0000001cc0)=""/131, 0x83}, {&(0x7f0000001d80)=""/185, 0xb9}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/12, 0xc}], 0x6, &(0x7f0000004f00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000008300)=[{&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/240, 0xf0}, {&(0x7f0000006040)=""/188, 0xbc}, {&(0x7f0000006100)=""/157, 0x9d}, {&(0x7f00000061c0)=""/4096, 0x1000}, {&(0x7f00000071c0)=""/33, 0x21}, {&(0x7f0000007200)=""/249, 0xf9}, {&(0x7f0000007300)=""/4096, 0x1000}], 0x8, &(0x7f0000008380)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}}], 0x5, 0x61, &(0x7f0000008540)) mknodat(r3, &(0x7f0000008580)='./file0\x00', 0x8000, 0xff) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f00000085c0)={0xee, ""/238}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000086c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000008700)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000008740)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000008780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f00000087c0)={{0x1, 0x1, 0x18, r7, {0xffff}}, './file0\x00'}) ioctl$SG_SET_KEEP_ORPHAN(r9, 0x2287, &(0x7f0000008800)=0xff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r10) 23:40:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040890}, 0x4000004) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040090) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x58}}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x24000800) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4051) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3d}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3d0a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x7c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "6416747ea1eebb2a3a72e06047b1de092dca5dad207942a1092171ce52fb2ff5"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x81}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "98ce71fc91ecc9e477dbff6cdbca04aace63926d67f86a0a37578deb468b8462"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80000000}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x24008810) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0406618, &(0x7f0000000880)={@desc={0x1, 0x0, @desc2}}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000008c0), 0x42000, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r7, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r5) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xe7ce5c354d9eb52d) 23:40:26 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffffc) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x6, &(0x7f0000000040)={r0, r1+10000000}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x24c2, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_settime(0x2, &(0x7f0000000100)={r3, r4+10000000}) r5 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x757, 0xa00, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0xfb, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0xdc}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x3, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x20, 0x1, 0x8, 0x10, 0x3}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2009}}, {0xe5, &(0x7f0000000240)=@string={0xe5, 0x3, "09fb15a77c9fdfa7a58eb7cb9e71c2e467d5406336676595719333e58d770c6b5ab060a35c1e227b53bbc5382cc2ed418d39d8489935fde749e54e297100c78f0facd489cb3049d7fccfb16ea3c7a2d86ffac35ed606508a83e0fe88ae2c7004e019422535748120a3d214f47b2efc67ac6dcae2502890372f268e82740bcd6b587cf24d42162fa258ae9ff96d557f43212a6a128b59848b950fccca71d76f31db967bbbd1c32b7be6227f64546fe862dda3fe6c352f6fea8e9c8d795b63f28468f39e3874f035c6767175c87ec81e1d6c730d6861941de495b421ef7ecc0472146b7d"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000600)={0x24, &(0x7f0000000380)={0x40, 0x4, 0xf8, {0xf8, 0x22, "1cf5afdbc013507f9d3e424f04f9dac636fb80e04d2761cbafdc2c39d0c7e645b2889c6fec2d0c2dafb66bcd21abd41197f8e35e1df22cbc7acc6537d074f7be1080126fc26a79c5108a0145084f21b28d7a587b2e21ca318d543ad28ce81992110b77528345c70ef818d4dc50d50b102676a144188789742b48fb07ee1b7900604efc676c6b354bf02936c30a9cb8e3fbbb4264e7a439886b00acc17f43346988fed2f9ff2511586fd3e31d69caa2ea92df32c8baf30db2e4235adaec5639d77a83b265a8d57995a730843f2905c5082b2ead8006947f32210b2422d70bf8e67055fdfb9453464501b245fedfe159d4ce010e59c222"}}, &(0x7f0000000480)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "b80f9967194594f97a2abab43a9576dfd2909e9764fae82e927e8a39ed879506c156c96e446912db01d5bcd95b5c0115cf1ff1fa31de6456b60817e6d18bfe8b04d0c50687e36a40bcf82312ae2e0adbb5cdc20816fb3a13399f2fb15a1840a7ff9c9735fdb833ccb8a10e14e35b345d36e83365b972b9b0060a4fe338d0dd7faa1db40c7276bce73477fe15008097a2ac6791789723dca2b72da598f73931b66f9c5335eee0e30428b310153a50fb0f5896090f65b260faa2aa6ec8d8fb4842dee0c7a0a93a1c6313c743a13a23e903741c128bad589a2784799c50a8910edcf1090b56ee99635dd40e89088a008d63a11524"}}, &(0x7f0000000580)={0x0, 0x22, 0x10, {[@main=@item_012={0x1, 0x0, 0x8, 'E'}, @global=@item_4={0x3, 0x1, 0xa, "1e258d94"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0x6, "f85483d0"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x1, 0x0, 0xb, '^'}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0x136}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000640)={0x60, 0x11, 0xe7, "16180dc48d6023b78f240bab15d34cefaf4f985a90abf9765e6bf9391319df03dac4bf876e2dfdce7918420f289c33177c93ef3baba155f1c5a36b591a0527a4ba90cde6cf73215e508818364c6422a76aa9823b77bebebd05c369395f33497e42a38e8bcd9c41af9b20702ab37de7717cc1f1cf2492b3ecd8c71fdc617b9b50b8cc821ff0f18f9612ecfc550294f0aee841d1c8d2e68ec1ef51a9dbc745784812738bac4fe2e4498ed70de80cacd1abe6316fa7633c390bdbff928b225111333f794c13a4c3a16da2e5adf62623f17324b654a7377d899605fff580647d5e9f2a08a8042ed606"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x18}, &(0x7f00000007c0)={0x20, 0x1, 0x23, "21905d1cbb2d2a412dae8bb52291e9473cc64ceb987a2555ac8eed961dffba1b890c39"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x7}}) clock_gettime(0x5, &(0x7f0000000880)) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040851}, 0x40) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a40), 0x800) getuid() clock_settime(0x2, &(0x7f0000000a80)={0x77359400}) clock_gettime(0x3, &(0x7f0000000ac0)) clock_gettime(0x5, &(0x7f0000000b00)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) clock_gettime(0x2, &(0x7f0000000b40)) 23:40:26 executing program 3: keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000000)='logon\x00', &(0x7f0000000040)='!\x00') keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, 0x0, &(0x7f0000000080)='!\x00') r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x7, 0x80, r1) r2 = add_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="4d1459ccbebf3f39dbe62ec007f77f51571461af01cddbc160ce4c2794400406f27f7081094f465620e2f84775a5941ce2fe772b7539e2c464f281a621b39b1147d8783a", 0x44, r0) r3 = add_key(&(0x7f00000002c0)='blacklist\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r1) r4 = add_key(&(0x7f0000000340)='syzkaller\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="a5a830dfa4474ea43f7aa1dad334ecbb94b1daaa6202164d1b7f7afeb03369351b0103e3b40d220cccc50b4a536cbad5c1785a9bd5446a51a93145e57ce8b4666bb4eb6d54b305a834fb290c473ac7fdc821d0952776", 0x56, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='setgroups\x00') r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$negate(0xd, r6, 0x3ff, r3) renameat2(r5, &(0x7f0000000500)='./file0\x00', r5, &(0x7f0000000540)='./file0\x00', 0x5) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000580)='dns_resolver\x00', &(0x7f00000005c0)=':.^\x00') r7 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000600)='id_resolver\x00', &(0x7f0000000640)={'syz', 0x2}, r7) keyctl$KEYCTL_MOVE(0x1e, r6, r4, r3, 0x1) r8 = add_key(&(0x7f0000000700)='asymmetric\x00', &(0x7f0000000740)={'syz', 0x3}, &(0x7f0000000780)="ece1d0b954e4152d7390d10d815ea0300cae08a0b531444055fcae2da78a5b3ac2e4311c04f765d6ef80045cc07c32b8d1b700690bb53e6a06ba895155f1acb507e43190f5943ac008c4435cfcacd628b06471559ee918f87773f00cfd6938c6286a4ebd7c9098abd7", 0x69, r4) keyctl$KEYCTL_MOVE(0x1e, r8, r4, r6, 0x0) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, r4) 23:40:26 executing program 4: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x1, 0x1}, {0x2}, @random="8636ce7a7dcb", @device_b, @device_a, {0x4, 0x81}}, {0xc, 0x1, 0x0, 0x0, 0x20}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xecd}, @device_b, @device_b, @from_mac=@device_b, {0x2, 0x20}}, {0x9, 0x1, 0x3, 0x1, 0x3f}}}, @a_msdu=[{@broadcast, @device_a, 0x35, "7193982926fa45eab242a4222c9577b43408204847d969398d0eff65de4fab1807760f353def21d828308f42b5a508b06b8751f1f8"}, {@device_b, @device_b, 0x3e, "9a43d2df08eb7c665c8ff9ede78daead46a580ef28bafd6ec849b3fe179742a37132097e23abc8adbfb0878af3517dc13195eae03feac50f74f8c19e576d"}, {@broadcast, @device_a, 0x7e, "358495d44b7e1cac28ea1ade9996a53bf521fd81a689a98f264085b841efda8f675f2022e8b1f87035025649cb4361cba6856dcb257b0f3dd47fa46ce93a14fcb364968b847e483b2a7e74df781c24ce1ba30710d0f2746149b68f60cfcf16a4547fe25ee8cb56e9e017812347ba950fdb9969a5a719ca0ee16e79af3a0b"}]}, 0x150) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x46b6e5359cd25ef4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:crond_exec_t:s0\x00'}]}, 0x70}}, 0x40011) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20008004) keyctl$get_persistent(0x16, 0xee01, 0xfffffffffffffffd) keyctl$search(0xa, 0x0, &(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x2}, 0xfffffffffffffff9) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x5) r5 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r1, 0x120, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048081}, 0x10) r6 = add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$clear(0x7, r6) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000008c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80100244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x20004000) [ 121.320471] audit: type=1400 audit(1748907626.525:7): avc: denied { execmem } for pid=282 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:40:26 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x1, 0xfffff8b8, 0xfff, 0x0, 0x5}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0xa40000, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe4f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}]}, 0x60}}, 0x4004090) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf6b1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0xffffffffffffffff, 0x2, 0x3ff, 0x1}}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1c000000}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c000}, 0x20008000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xf0, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4e}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffc}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xec76}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x8080) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x440080, 0x0) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='attr\x00') ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x100000001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000008c0)={'batadv_slave_1\x00'}) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r6, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040800) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000ac0)={@desc={0x1, 0x0, @desc4}}) 23:40:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x104, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x21}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x21}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf06d}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x104}, 0x1, 0x0, 0x0, 0xc010}, 0x40880) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd0, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf8e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x96cf}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x85}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2e}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000400)) r2 = socket(0x1, 0x800, 0x7) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa8, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x18}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xe4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xac, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x30}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r2) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r6, 0x402, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc1) socketpair(0x1a, 0x4, 0x90f4, &(0x7f0000000940)) r7 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, 0x0, r7, 0xfffffffffffffffe, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f0000000b00)) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000b40)) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xc0, r6, 0x8, 0x70bd2b, 0x3ff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd46f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4f}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x48004) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0xa000080}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb024}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x200}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x5}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2e}}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xee}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40040) 23:40:26 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/clocksource', 0x10000, 0x40) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x104, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x6015) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)) syz_usb_connect$uac1(0x3, 0xdb, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x81, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x0, 0x3, 0x5, 0x7f}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x5, 0x6}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0xff, "d868b8"}, @mixer_unit={0x8, 0x24, 0x4, 0x6, 0x56, "ce9aff"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x2, 0x1, "571bcb1421a638d634"}, @as_header={0x7, 0x24, 0x1, 0x9, 0xfb}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x80, 0x5, '/'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x4, 0x3, {0x7, 0x25, 0x1, 0x1, 0x5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2, 0x3, 0x6, 0x7f, "4c6b13cd4c"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x1, 0x80, 0xce, "aeba55d709"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1f, 0x2, 0x7, 0xf7, "479ef04f002a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x2d, 0x7, {0x7, 0x25, 0x1, 0x1, 0x9, 0x5}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0x8, 0xfc, 0xff, 0x20, 0x3}, 0xf7, &(0x7f0000000440)={0x5, 0xf, 0xf7, 0x1, [@generic={0xf2, 0x10, 0x1, "ff443b9738cca8250efa25a004d4ffdecd1587e703b01bf702f14230180c57d479afe8e265deec557ce9a4f73fc5fc30d73b8affff2310fae726d1b526e5a0c81974e082f93172ce3ac477eebe024765d56ef1c70e96ec42a23a36ca91aaa657151eb2c60f2c17189d6271d043cb9f7af3f023f34e17217de8f04cf0e736f84f78e9418867499d02a91752791b3fccded1251a6ed2ad5e46eb5b2897784df939697b2f0649b0bcba238e0d9e5b6fff250ca61ec831c2981eaa42f1c2e1de83914620649667c9bfef0daae479a96c66bdf83a29e13d5bbb0fab21230b5ccedf21b82db25b4ed6b9dc4ff3f9ce863996"}]}, 0x4, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1048}}, {0x62, &(0x7f0000000580)=@string={0x62, 0x3, "d060b25d53418400cb6fd3b836169c61a1f01a5fbc6e2be8b2cc5820abf6d49031798984b0256248bf81b9f8267b1820a5e748b3a34b84a4dc0941695d01a3442b49035022685f78c9f2ba8d13cf3badfec5888d994ee51d269537773c0405ec"}}, {0x17, &(0x7f0000000600)=@string={0x17, 0x3, "e5d9610912800d753503417a00864332e1cd8994a7"}}, {0x7c, &(0x7f0000000640)=@string={0x7c, 0x3, "c2a47f92c59e491fcca5d6a6eba81fdf123b8cff505d95c8f03e392b24f0efeef793d681bccb8e692b69491481db5fd54b358b372974184e9daba1c61bbe2bd73920dd4903120e6c730f4df150de980a5d3d162c927505825df4bebe22150f6ae37b381ece259a4674961de6a015fbdc6db025e043cb5504268f"}}]}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x94, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x31}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x170, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2f}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x19ae77cd80fc4712}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40044) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000cc0), r4) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d00)={0x1c8, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1c}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff000}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x45}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffa}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x800}, 0x4048800) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000f80)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001000), 0x20c0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080), r0) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r7, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x50d6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001180)={{{@in=@initdev, @in6=@initdev}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000001280)=0xe8) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000001300)) [ 122.887136] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.893750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.895549] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.897721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.906643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.908878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.911363] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.914463] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.920557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.922236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.928425] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.929954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.933191] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.936121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.938369] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.943909] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.954640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.959204] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.963086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.965501] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 122.967773] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 122.970671] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.971094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.972211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.977815] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 122.980195] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.988270] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 122.995830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 122.996124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.008904] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.025107] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.025703] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.050795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.054565] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.077025] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.086255] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.092727] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.104757] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.135688] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.149808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.009825] Bluetooth: hci4: command tx timeout [ 125.073585] Bluetooth: hci7: command tx timeout [ 125.074699] Bluetooth: hci0: command tx timeout [ 125.138849] Bluetooth: hci2: command tx timeout [ 125.139149] Bluetooth: hci1: command tx timeout [ 125.201525] Bluetooth: hci6: command tx timeout [ 125.202380] Bluetooth: hci3: command tx timeout [ 125.266843] Bluetooth: hci5: command tx timeout [ 127.058182] Bluetooth: hci4: command tx timeout [ 127.124351] Bluetooth: hci0: command tx timeout [ 127.124406] Bluetooth: hci7: command tx timeout [ 127.185677] Bluetooth: hci1: command tx timeout [ 127.186604] Bluetooth: hci2: command tx timeout [ 127.250341] Bluetooth: hci3: command tx timeout [ 127.250366] Bluetooth: hci6: command tx timeout [ 127.313416] Bluetooth: hci5: command tx timeout [ 129.107831] Bluetooth: hci4: command tx timeout [ 129.169411] Bluetooth: hci0: command tx timeout [ 129.170488] Bluetooth: hci7: command tx timeout [ 129.233463] Bluetooth: hci2: command tx timeout [ 129.233917] Bluetooth: hci1: command tx timeout [ 129.297559] Bluetooth: hci6: command tx timeout [ 129.300316] Bluetooth: hci3: command tx timeout [ 129.361390] Bluetooth: hci5: command tx timeout [ 131.153449] Bluetooth: hci4: command tx timeout [ 131.217508] Bluetooth: hci7: command tx timeout [ 131.217565] Bluetooth: hci0: command tx timeout [ 131.282350] Bluetooth: hci1: command tx timeout [ 131.282478] Bluetooth: hci2: command tx timeout [ 131.346406] Bluetooth: hci3: command tx timeout [ 131.346452] Bluetooth: hci6: command tx timeout [ 131.410505] Bluetooth: hci5: command tx timeout [ 182.857178] syz-executor.7 (297) used greatest stack depth: 25072 bytes left [ 184.886579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.890774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.892978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.897612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.902830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.905108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.910810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.916616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.922144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.930875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.151850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.160123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.176277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.179943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.181614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.185832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.201760] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.204531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.212433] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.214854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.230046] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.232783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.250251] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.300854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.304173] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.422035] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 185.426995] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 185.430752] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 185.435749] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 185.440731] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 185.456506] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 185.458369] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 185.486403] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 185.493953] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 185.533728] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 185.543880] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 185.564509] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 185.566371] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 185.600895] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.626202] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 187.027425] Bluetooth: hci0: command tx timeout [ 187.028945] Bluetooth: hci1: command tx timeout [ 187.282411] Bluetooth: hci2: command tx timeout [ 187.283420] Bluetooth: hci3: command tx timeout [ 187.412473] Bluetooth: hci4: command tx timeout [ 187.537423] Bluetooth: hci6: command tx timeout [ 187.729537] Bluetooth: hci5: command tx timeout [ 187.793637] Bluetooth: hci7: command tx timeout [ 189.073615] Bluetooth: hci1: command tx timeout [ 189.074123] Bluetooth: hci0: command tx timeout [ 189.329438] Bluetooth: hci3: command tx timeout [ 189.329911] Bluetooth: hci2: command tx timeout [ 189.457645] Bluetooth: hci4: command tx timeout [ 189.585377] Bluetooth: hci6: command tx timeout [ 189.777634] Bluetooth: hci5: command tx timeout [ 189.842349] Bluetooth: hci7: command tx timeout [ 191.123344] Bluetooth: hci0: command tx timeout [ 191.123837] Bluetooth: hci1: command tx timeout [ 191.377745] Bluetooth: hci2: command tx timeout [ 191.378237] Bluetooth: hci3: command tx timeout [ 191.505627] Bluetooth: hci4: command tx timeout [ 191.633386] Bluetooth: hci6: command tx timeout [ 191.825423] Bluetooth: hci5: command tx timeout [ 191.889444] Bluetooth: hci7: command tx timeout [ 193.169405] Bluetooth: hci1: command tx timeout [ 193.169901] Bluetooth: hci0: command tx timeout [ 193.425457] Bluetooth: hci3: command tx timeout [ 193.425938] Bluetooth: hci2: command tx timeout [ 193.553499] Bluetooth: hci4: command tx timeout [ 193.682568] Bluetooth: hci6: command tx timeout [ 193.873712] Bluetooth: hci5: command tx timeout [ 193.937621] Bluetooth: hci7: command tx timeout [ 247.906159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.913209] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.917274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.930514] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.936918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.974641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.978650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.982404] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.992419] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.997056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.200376] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.210091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.235663] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.276870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.284957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.289740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.306890] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.316655] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.321199] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.355674] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.361090] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.366605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.372201] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.383892] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.391569] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.404549] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.408444] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.409899] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.417061] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 248.421522] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.423990] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 248.424669] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.446859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.460484] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.488588] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 248.518107] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.557492] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.560490] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 248.567240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 248.570067] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.001422] Bluetooth: hci0: command tx timeout [ 250.065436] Bluetooth: hci1: command tx timeout [ 250.449497] Bluetooth: hci2: command tx timeout [ 250.514405] Bluetooth: hci4: command tx timeout [ 250.515202] Bluetooth: hci3: command tx timeout [ 250.578410] Bluetooth: hci5: command tx timeout [ 250.642004] Bluetooth: hci7: command tx timeout [ 250.705441] Bluetooth: hci6: command tx timeout [ 252.050412] Bluetooth: hci0: command tx timeout [ 252.114575] Bluetooth: hci1: command tx timeout [ 252.498620] Bluetooth: hci2: command tx timeout [ 252.564348] Bluetooth: hci3: command tx timeout [ 252.564852] Bluetooth: hci4: command tx timeout [ 252.626695] Bluetooth: hci5: command tx timeout [ 252.690360] Bluetooth: hci7: command tx timeout [ 252.755324] Bluetooth: hci6: command tx timeout [ 254.098532] Bluetooth: hci0: command tx timeout [ 254.162343] Bluetooth: hci1: command tx timeout [ 254.546380] Bluetooth: hci2: command tx timeout [ 254.612399] Bluetooth: hci4: command tx timeout [ 254.612842] Bluetooth: hci3: command tx timeout [ 254.674388] Bluetooth: hci5: command tx timeout [ 254.738346] Bluetooth: hci7: command tx timeout [ 254.802525] Bluetooth: hci6: command tx timeout [ 256.146361] Bluetooth: hci0: command tx timeout [ 256.209725] Bluetooth: hci1: command tx timeout [ 256.593382] Bluetooth: hci2: command tx timeout [ 256.658680] Bluetooth: hci3: command tx timeout [ 256.659129] Bluetooth: hci4: command tx timeout [ 256.722373] Bluetooth: hci5: command tx timeout [ 256.785354] Bluetooth: hci7: command tx timeout [ 256.849509] Bluetooth: hci6: command tx timeout [ 310.440084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.445903] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.448428] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.459190] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.468124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.515781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.520775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.525924] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.532135] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.540922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.672170] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.677769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.682223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.696038] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.701690] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.705498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.705799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.709979] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.718675] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.732641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.754379] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.784366] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.786577] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 310.788860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.791026] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 310.794508] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 310.796032] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.808985] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.814203] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.816664] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 310.821926] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 310.827837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.849314] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.854229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.857325] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.863035] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.865690] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.902344] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.956898] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.982162] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.530897] Bluetooth: hci0: command tx timeout [ 312.594579] Bluetooth: hci1: command tx timeout [ 312.786339] Bluetooth: hci2: command tx timeout [ 312.849404] Bluetooth: hci3: command tx timeout [ 312.977779] Bluetooth: hci6: command tx timeout [ 312.978545] Bluetooth: hci5: command tx timeout [ 312.978552] Bluetooth: hci7: command tx timeout [ 313.105404] Bluetooth: hci4: command tx timeout [ 314.577412] Bluetooth: hci0: command tx timeout [ 314.644353] Bluetooth: hci1: command tx timeout [ 314.833382] Bluetooth: hci2: command tx timeout [ 314.897353] Bluetooth: hci3: command tx timeout [ 315.025673] Bluetooth: hci5: command tx timeout [ 315.026544] Bluetooth: hci7: command tx timeout [ 315.026967] Bluetooth: hci6: command tx timeout [ 315.153579] Bluetooth: hci4: command tx timeout [ 316.625652] Bluetooth: hci0: command tx timeout [ 316.689725] Bluetooth: hci1: command tx timeout [ 316.881677] Bluetooth: hci2: command tx timeout [ 316.945385] Bluetooth: hci3: command tx timeout [ 317.073715] Bluetooth: hci6: command tx timeout [ 317.073946] Bluetooth: hci7: command tx timeout [ 317.074191] Bluetooth: hci5: command tx timeout [ 317.201364] Bluetooth: hci4: command tx timeout [ 318.673597] Bluetooth: hci0: command tx timeout [ 318.738342] Bluetooth: hci1: command tx timeout [ 318.929502] Bluetooth: hci2: command tx timeout [ 318.993545] Bluetooth: hci3: command tx timeout [ 319.121408] Bluetooth: hci5: command tx timeout [ 319.122617] Bluetooth: hci7: command tx timeout [ 319.123073] Bluetooth: hci6: command tx timeout [ 319.249614] Bluetooth: hci4: command tx timeout [ 373.164000] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.167068] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.173715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.181405] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.188919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.428453] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.434209] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.439822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.449532] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.453999] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.526959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.546706] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.554020] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.555644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 373.572822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 373.582852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.596955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.603526] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.613896] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 373.619360] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.746727] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.750792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.752960] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.757771] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.761057] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.938612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 373.956202] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 373.960619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 373.978976] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 373.990781] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 373.992379] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 373.996997] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 374.018943] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 374.032045] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 374.040266] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.050662] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.052873] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 374.078985] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.110356] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.114408] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 375.250697] Bluetooth: hci0: command tx timeout [ 375.508382] Bluetooth: hci1: command tx timeout [ 375.698383] Bluetooth: hci3: command tx timeout [ 375.826490] Bluetooth: hci2: command tx timeout [ 375.828830] Bluetooth: hci4: command tx timeout [ 376.082391] Bluetooth: hci5: command tx timeout [ 376.145594] Bluetooth: hci7: command tx timeout [ 376.337444] Bluetooth: hci6: command tx timeout [ 377.297422] Bluetooth: hci0: command tx timeout [ 377.553413] Bluetooth: hci1: command tx timeout [ 377.745372] Bluetooth: hci3: command tx timeout [ 377.873423] Bluetooth: hci2: command tx timeout [ 377.873892] Bluetooth: hci4: command tx timeout [ 378.129852] Bluetooth: hci5: command tx timeout [ 378.193378] Bluetooth: hci7: command tx timeout [ 378.385732] Bluetooth: hci6: command tx timeout [ 379.345366] Bluetooth: hci0: command tx timeout [ 379.601725] Bluetooth: hci1: command tx timeout [ 379.793357] Bluetooth: hci3: command tx timeout [ 379.921505] Bluetooth: hci2: command tx timeout [ 379.921946] Bluetooth: hci4: command tx timeout [ 380.177580] Bluetooth: hci5: command tx timeout [ 380.241437] Bluetooth: hci7: command tx timeout [ 380.434408] Bluetooth: hci6: command tx timeout [ 381.393570] Bluetooth: hci0: command tx timeout [ 381.651311] Bluetooth: hci1: command tx timeout [ 381.841369] Bluetooth: hci3: command tx timeout [ 381.970384] Bluetooth: hci4: command tx timeout [ 381.970874] Bluetooth: hci2: command tx timeout [ 382.226588] Bluetooth: hci5: command tx timeout [ 382.289369] Bluetooth: hci7: command tx timeout [ 382.481339] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 23:45:32 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88802444f470 RCX=ffffffff84ad7a43 RDX=1ffff11004889e94 RSI=00007ffcf4868fff RDI=00007fa69c803fff RBP=ffff88802444f5c8 RSP=ffff88802444f158 R8 =0000000000000000 R9 =fffffbfff0c83f6a R10=0000000000000008 R11=0000000000000001 R12=0000000000000001 R13=00007ffcf4868fff R14=00007fa69c803fff R15=ffff88802444f5c8 RIP=ffffffff81738668 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558a1d05e080 CR3=000000002ed39000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88806cf36f00 RCX=ffffffff8182951e RDX=1ffffffff0b0558d RSI=ffffffff81615e71 RDI=ffffffff8582ac68 RBP=ffff88806cf08d98 RSP=ffff88806cf08d50 R8 =0000000000000000 R9 =fffffbfff0c83f6a R10=0000000000000000 R11=0000000000094da5 R12=ffff88806cf36f00 R13=0000000000000001 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff812e9864 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe2a8df8540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe2a8ec9710 CR3=000000002ae4f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000