Warning: Permanently added '[localhost]:8632' (ECDSA) to the list of known hosts. 2025/06/03 09:27:45 fuzzer started 2025/06/03 09:27:46 dialing manager at localhost:34361 syzkaller login: [ 106.052001] cgroup: Unknown subsys name 'net' [ 106.229856] cgroup: Unknown subsys name 'cpuset' [ 106.278585] cgroup: Unknown subsys name 'rlimit' 2025/06/03 09:28:08 syscalls: 215 2025/06/03 09:28:08 code coverage: enabled 2025/06/03 09:28:08 comparison tracing: enabled 2025/06/03 09:28:08 extra coverage: enabled 2025/06/03 09:28:08 setuid sandbox: enabled 2025/06/03 09:28:08 namespace sandbox: enabled 2025/06/03 09:28:08 Android sandbox: enabled 2025/06/03 09:28:08 fault injection: enabled 2025/06/03 09:28:08 leak checking: enabled 2025/06/03 09:28:08 net packet injection: enabled 2025/06/03 09:28:08 net device setup: enabled 2025/06/03 09:28:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/03 09:28:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/03 09:28:08 USB emulation: enabled 2025/06/03 09:28:08 hci packet injection: enabled 2025/06/03 09:28:08 wifi device emulation: enabled 2025/06/03 09:28:08 802.15.4 emulation: enabled 2025/06/03 09:28:08 fetching corpus: 0, signal 0/0 (executing program) 2025/06/03 09:28:10 starting 8 fuzzer processes 09:28:10 executing program 0: r0 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, @in6=@remote, 0x4e24, 0x234f, 0x4e21, 0x1000, 0x2, 0x80, 0x80, 0x0, 0x0, r0}, {0x3f, 0x100, 0x0, 0x7, 0x800, 0x4, 0x47b7, 0xfffffffffffffffa}, {0x7, 0x4, 0x7, 0x100}, 0x929e, 0x6e6bb2, 0x2, 0x1}, {{@in6=@local, 0x4d2, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3506, 0x4, 0x1, 0x2, 0x7fffffff, 0xff, 0x2fe}}, 0xe8) socket$inet6(0xa, 0x800, 0x101) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r2 = getegid() semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)={{0x1, r0, r1, r0, r2, 0x91, 0x100}, 0x1, 0xace9, 0x0, 0x0, 0x0, 0x0, 0xf1d8}) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) syz_io_uring_setup(0x4417, &(0x7f0000000280)={0x0, 0x5197, 0x2, 0x1, 0x2b3, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r5 = syz_io_uring_setup(0x4639, &(0x7f0000000380)={0x0, 0xb0ac, 0x0, 0x2, 0x141, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_setup(0x1638, &(0x7f0000000480)={0x0, 0xd588, 0x0, 0x3, 0x196, 0x0, r5}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x4e20, 0x3f, 0x4e21, 0x101, 0x2, 0x0, 0x0, 0x3b, 0x0, r0}, {0x7, 0x400, 0xe8e, 0xaef2, 0x3, 0x3, 0x6, 0x5}, {0x8001, 0xfff, 0x8, 0x101}, 0x7, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0xff}, 0x2, @in=@multicast1, 0x0, 0x2, 0x2, 0x3, 0x8, 0x1, 0xfffffff9}}, 0xe8) r6 = syz_io_uring_setup(0x17ad, &(0x7f0000000600)={0x0, 0x6eac, 0x8, 0x3, 0x12f}, &(0x7f0000d00000/0x3000)=nil, &(0x7f0000dde000/0x2000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@local, @in6=@remote}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000800)=0xe8) syz_io_uring_setup(0x6b22, &(0x7f0000000840)={0x0, 0xe30c, 0x20, 0x3, 0x26e, 0x0, r6}, &(0x7f0000fb3000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000940)={@empty, 0x4, 0x2, 0x0, 0xa, 0x31, 0x7fff}, &(0x7f0000000980)=0x20) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x20db, &(0x7f00000009c0)={0x0, 0x62a1, 0x10, 0x3, 0x3de}, &(0x7f0000cb2000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)) r8 = syz_io_uring_complete(r7) ioctl$CDROM_SELECT_SPEED(r3, 0x5322, 0x1ff) ioctl$CDROMMULTISESSION(r8, 0x5310, &(0x7f0000000ac0)={@lba=0x2, 0x0, 0x2}) 09:28:10 executing program 1: ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000000)={0x20, 0x2, 0x1, 0x2, 0x3, 0x14}) inotify_init() connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @loopback, 0x8}, 0x1c) geteuid() r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4403, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f00000000c0)=@lsk={0x2, 0x1, "2b8ddc0aa2"}) r1 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0x4e23, 0x5, 0x4e22, 0x1000, 0xa, 0xa0, 0x80, 0x6, 0x0, r1}, {0x400, 0x6, 0x1, 0x5, 0xc42, 0x0, 0x8, 0x9}, {0xfffffffffffffff9, 0x2, 0x0, 0x2}, 0x8001, 0x6e6bb9, 0x1, 0x0, 0x3}, {{@in=@multicast1, 0x4d2, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3506, 0x0, 0x3, 0x1, 0x5, 0x2, 0x1000}}, 0xe8) r2 = accept4(r0, &(0x7f0000000440)=@isdn, &(0x7f00000004c0)=0x80, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private2}}, &(0x7f0000000600)=0xe8) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000640)={@private1={0xfc, 0x1, '\x00', 0x1}, r3}, 0x14) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x80, 0x4e21, 0x7, 0x0, 0x80, 0x80, 0x6, 0x0, r4}, {0x2, 0x49, 0xe87a, 0x4, 0x8, 0x7, 0x1f, 0x9}, {0x7, 0x10001, 0x1f, 0x80}, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@loopback, 0x4d5, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504, 0x1, 0x3, 0x2, 0x1, 0x8, 0x74}}, 0xe8) pipe2(&(0x7f0000000780)={0xffffffffffffffff}, 0x84000) ioctl$CDROM_CLEAR_OPTIONS(r5, 0x5321, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f00000008c0)=0xe8) r7 = syz_open_dev$vcsu(&(0x7f0000000900), 0x1, 0x400) getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000940), &(0x7f0000000980)=0x4) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000a00)={0x0, @hci={0x1f, 0x3, 0x4}, @xdp={0x2c, 0x8, r6, 0x38}, @l2={0x1f, 0x80, @none, 0x2, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000009c0)='geneve1\x00', 0x325, 0x6, 0x1}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000a80)={0x42, "9eeec7"}, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000ac0)={{{@in=@remote, @in=@initdev}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000bc0)=0xe8) 09:28:10 executing program 2: r0 = socket(0x9, 0x800, 0x7ff) accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80800) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/3, 0x3}, {&(0x7f00000000c0)=""/40, 0x28}, {&(0x7f0000000100)=""/197, 0xc5}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000340)=""/234, 0xea}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f0000000540)=""/91, 0x5b}, {&(0x7f00000005c0)=""/199, 0xc7}], 0x9, &(0x7f0000000780)=""/122, 0x7a}, 0x10000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000880)={'vxcan0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=@getpolicy={0x84, 0x15, 0x8, 0x70bd2b, 0x25dfdbfe, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4e22, 0x3, 0x4e21, 0x0, 0x8, 0x20, 0xa0, 0x33, 0x0, 0xee01}, 0x6e6bb9}, [@user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@local, 0x0, 0x2}}, @XFRMA_IF_ID={0x8, 0x1f, r1}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r2 = accept4(r0, &(0x7f0000000a00)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000a80)=0x80, 0x800) r3 = socket$inet6(0xa, 0x1, 0x1) setsockopt$inet6_buf(r3, 0x29, 0x3d, &(0x7f0000000c40)="c6f93e9ec1fad53eac705a58c6a5e08b8eeb", 0x12) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000c80)={0x3, 0x1, 0x9, 0x101, 0x3f}, 0xc) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f0000000cc0)={0x3, 0x7}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r4, &(0x7f0000000d00)=""/4096, 0x1000, 0x2, &(0x7f0000001d00)={0xa, 0x4e23, 0xffff, @private0, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0xa, 0xcc64) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000001d40)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000001d80)=0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000001dc0)={@local, r6}, 0x14) pipe2(&(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$inet6(r7, &(0x7f0000001e40)={0xa, 0x4e23, 0x9b2a, @mcast1, 0x9}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000001e80)={0x8, {{0xa, 0x4e20, 0x5, @loopback, 0x5}}}, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000001f40)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) getpeername$inet6(0xffffffffffffffff, &(0x7f0000002000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000002040)=0x1c) 09:28:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x20, 0x2, 0x2, 0x3, 0xfe00, 0xfff9}, 0x20) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in6=@private2, 0x4e23, 0x0, 0x4e20, 0x1ff, 0xa, 0x80, 0xb0, 0xb7, 0x0, 0xee01}, {0x8, 0x3, 0x1, 0x1000, 0x1, 0x2c1b1800, 0x100, 0x20}, {0x812a00000000, 0x80000000, 0x1, 0x597}, 0x3, 0x6e6bc0, 0x0, 0x0, 0x1, 0x2}, {{@in=@multicast2, 0x4d2}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x3502, 0x1, 0xe57701805208b699, 0x33, 0x401, 0x8, 0x8}}, 0xe8) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x10000004, 0x7, 0x7ff, 0x7fff, 0xb5, 0x1, 0x6, 0x6}, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0xfffffffffffffffd, &(0x7f0000000240)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000280)={{0xa, 0x4e23, 0x7, @local, 0x800}, {0xa, 0x4e24, 0x9, @empty, 0x8}, 0x3, [0x7fff, 0x6, 0x2, 0x6, 0x80000001, 0xe4ca, 0x6, 0x2]}, 0x5c) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast2, @in=@private=0xa010102, 0x4e23, 0x5, 0x4e24, 0x0, 0x2, 0x80, 0xa0, 0x3c, 0x0, r1}, {0x21f, 0xffffffffffffff56, 0x80000001, 0xfffffffffffff000, 0x1, 0x200, 0x0, 0x7ff}, {0x5, 0x1, 0x200, 0x4}, 0xf7c8, 0x0, 0x0, 0x1, 0x2, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x6c}, 0x2, @in6=@private0, 0x3503, 0xc, 0x2, 0x5, 0x7, 0xf4b, 0x6a15}}, 0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e22, 0x9, @remote, 0x4}, {0xa, 0x4e20, 0xfffffff7, @dev={0xfe, 0x80, '\x00', 0x27}, 0x3}, 0x2, [0x8001, 0x2acf, 0x5, 0x9, 0x5, 0x24ec, 0x9, 0x10001]}, 0x5c) r2 = syz_open_dev$vcsu(&(0x7f00000004c0), 0x9, 0x88300) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8016800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x14040810}, 0x0) ioctl$CDROM_SELECT_SPEED(r2, 0x5322, 0x9) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000640)={'security\x00', 0x4a, "601b0e36a3557f46585f7f4c87c8df63cbd80b62fbfee94ce7811a946f6d4f19661f678af5f10cf5ae73888b0a3092544b36bcece9e43247c50fa83f862189a27b49213591f86355c883"}, &(0x7f00000006c0)=0x6e) r4 = gettid() sched_setattr(r4, &(0x7f0000000700)={0x38, 0x1, 0x3e, 0x4, 0x1, 0x8, 0x7fff, 0x101, 0x8, 0x7ff}, 0x0) pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x80800) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) [ 130.069867] audit: type=1400 audit(1748942890.253:7): avc: denied { execmem } for pid=277 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:28:10 executing program 4: recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/95, 0x5f, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @private1, 0x80000000}, 0x1c) r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@xdp, &(0x7f0000000140)=0x80) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) getsockname$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000280)=0x1c) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x9, 0x1}, 0xc) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f0000000340)={0x8, 0x7f, 0x7e, 0x3d, 0x3f, 0x1}) r3 = syz_io_uring_complete(0x0) recvmsg(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)=""/36, 0x24}], 0x1, &(0x7f0000000e40)=""/39, 0x27}, 0x1) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000ec0)={0x3b, 0x24, '\x00', [@hao={0xc9, 0x10, @local}, @generic={0x32, 0xf3, "64df149d48f5865fc79b14779e69427b59129ec3490007cae2e73108d4fc27d5a43cf49c2077132243aac236919feb32ce4fb7f9430ba16f6d069ddc21bb7a0a38ace02a3398da499ac488cc0ad9cfbfdd3cbf06f77520f1be912911dc0fdb92d752cf582ddd176e31269410fd63ae156ebb3d675c5051f7de1197510b2f42fcd19f29fc1f9c01716fa865d276dc985b58db7f8322dcde2d7024ff350748a9a01c537e18ed6c40b6527307b2a805a8196adff8997c77f808c6a8be060b7b62d05a97f2107b2088264298d92b5092ae6b9090ed93936888338291f5254b829f68266d15ff2eb32ebe1782bfa35d3f621bbdecba"}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x31}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x8}]}, 0x130) syz_io_uring_complete(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001000)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000001100)=0xe8) perf_event_open(&(0x7f0000001140)={0x4, 0x80, 0xff, 0x0, 0x8, 0x0, 0x0, 0x7, 0x80000, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x3f, 0x3}, 0x260, 0x4, 0xc0ec, 0x6, 0x3a, 0x40, 0x8, 0x0, 0x80000001, 0x0, 0x3}, 0xffffffffffffffff, 0x4, r2, 0x1a) ioctl$CDROMEJECT_SW(r2, 0x530f, 0x1) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000011c0)={0x3b, 0xb, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x8, 0x9, [0x48000000, 0x1bb3, 0x6, 0x7f, 0x100000001, 0xffffffffffffffff, 0x2, 0x5]}}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}]}, 0x68) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000001240)={'HL\x00'}, &(0x7f0000001280)=0x1e) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000012c0)={0x7f, {{0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x12}, 0x20}}, 0x1, 0x1, [{{0xa, 0x4e24, 0x1ff, @mcast2}}]}, 0x110) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001640)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0xffff, 0x4e23, 0x4, 0xa, 0x180, 0x0, 0x33, 0x0, r4}, {0xffffffff7fffffff, 0x0, 0xe, 0x1, 0x8, 0x7, 0x6, 0x2}, {0x7, 0x3, 0x5, 0xfffffffffffff001}, 0xda1d, 0x6e6bb3, 0x3, 0x0, 0x3, 0x2}, {{@in6=@empty, 0x4d2, 0x6c}, 0xa, @in=@loopback, 0x3503, 0x3, 0x2, 0x9, 0x2, 0xa5, 0x9}}, 0xe8) 09:28:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x21, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @pad1, @jumbo={0xc2, 0x4, 0x7}]}, 0x18) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote, 0x24, r1}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000100)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x5, 0x0, 0x3f, 0x1, 0xa653}, 0xc) r2 = accept4$inet6(r0, &(0x7f0000001440)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001480)=0x1c, 0x80000) r3 = accept$inet6(r2, &(0x7f00000014c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001500)=0x1c) sendmsg$inet6(r3, &(0x7f00000018c0)={&(0x7f0000001540)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}, 0xac}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000001580)="33d9650784d16fbc86f2eca04115ed34646cf3155e02d102da14b204d320edbe4122cfb4858da9a22cc931f9408d39fa92b03768ca8676fb44dc26e9ae13b5db5a966306ceb75492c52ee4a447de7ce4d54a3267f69ce1d114ba94f0d430df3427f487", 0x63}, {&(0x7f0000001600)="f94537f347f6c302ff9a3e55d834e50037ade8521be4917297a2a2226f179b46901c08c50ffa112791e4877d02c2ac5cdee2a6c96ce84c1d5e029ebdb25d60ad9eeedb64434f821a26b8cddda76ad9c08e426aa2d87616255936e8500018970ff307682008b941cf7069d111dcdacf952f3cb1da34ccc41deefb71eb317f2a727b1f779a5a", 0x85}], 0x2, &(0x7f0000001700)=[@dontfrag={{0x14, 0x29, 0x3e, 0xff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3f}}, @hopopts={{0x140, 0x29, 0x36, {0x65, 0x24, '\x00', [@generic={0x1, 0xea, "0ce5c9f1db9f62f52d59b12a4985d7987b89b739719ee44394f86d2c9ef021cdc00a480cd54a6cadda616b37d92d3d0cca561d26b43077eb1c54f4d53b1e4c94b94d41f62176572337dd0fd7588bc43fd91ad6b60ef6b848187ac72106c74f5721fab24eb5f299067638be5c9b2d84b83825060639cd45bbf82b6fad2a3076fb38ae66e6a48da51bbc45ca2422705c8cb52fe74ceffb76c731295990a4388f1b4199a7752a6f94461a3e0c22ef846b4cbc00699e7f33c6a12691ab5ee456f31d90b208c4ae59ff3a73d502cf27f581b3517e7e3b60971acc0a19d6a34be2d513da9357d9d7075470bbf1"}, @enc_lim={0x4, 0x1, 0xff}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x81, 0x4c, [0x3f, 0x9, 0x2000, 0x6, 0x0]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x10001}}], 0x188}, 0x80) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900)={0xa, 0x4e24, 0x6, @local, 0x5}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000001940)="8438", 0x2}], 0x1, &(0x7f00000019c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x10000}}, @hoplimit={{0x14, 0x29, 0x34, 0x7fffffff}}], 0x30}, 0x4008010) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000001a40)=0x7, 0x4) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001a80)={@rand_addr=' \x01\x00', r1}, 0x14) r4 = accept(r2, &(0x7f0000001d80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001e00)=0x80) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000001e40)={@empty, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x1, 0x5, 0x1, 0x500, 0x4, 0x4000000, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002640)={'vxcan1\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002680)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000002780)=0xe8) sendmsg$inet6(r6, &(0x7f0000002880)={&(0x7f0000001ec0)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000001f00)="2ffb51159c969c76a23c83e25474410c718f479d2c9f62bb1839a40115aa2954b35da65e8f962b6cee9f25943ba8123e2960ad7969c7c09a7c7943d618802743fe8731d08ef267cfdb7cd3cc3794a9ca62dabfd64dce867e28610015234e113088d4935469", 0x65}, {&(0x7f0000001f80)="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", 0xfb}, {&(0x7f0000002080)="ba213208a9eb342ff5998d79b64f1f6a90daf3910a16fd07141604abb819fec8244b19efb23b5183b979568c07e21092df7a47b116bf9e2ed5802767cf0ea085980b47ada79a4c841b40b86ccec937356418d61e29a43cda9c6340d03e82e46865da5b1f457d8860eed60d9a03369f850d7777a5d88ad802cc2cb530da65305dcea95fd0942989b9eadfc895fd2a4e308c1c36fa8b03b3a747f8", 0x9a}, {&(0x7f0000002140)="79cd51ba75ff8a20c99a5eeebb1bf671cd65742cddbb841fc81b803555414735fccdefe534fad098fa675613e735affc182b8bd7a9b4ccc92ae3cffe7f06f77ca78d41a52a633e34d03c7c6de58b3cf8924d44e34aa1705c423f2019ed4246c6cb30afc80d9550c98e40c59a3c55bab8ef69a455d25ad70abe965d83a9f733d745e54bd67f79192645be0f463e76b12522e0be63a0c55cc5cbbb78c7b701875c96d57861baf71b7e4e5348f9375ae63e1cdc2704c06c47c2cae95eb5a3144bc037a34b319ff40f", 0xc7}, {&(0x7f0000002240)="a662459db0626200f15eca07cf96c72e9afc01743420d511f485b6967bb513b28c5f17f70dc5a8f7e16bb585cc059a0baad19a4b2ef1f6b126fbed1800f2e5fd1647cbcf25a6a927a46ad73303af4b8b78d1a8083286c255e0581d07d2d9ab976dd8472945f0de733e1810df83d1e0a90528e132f4656d663b7c4628791e3b8b852e6705f87f60a22793fe3dfcad27c95adad43f43fb8b9c29de9492ebb802a222f5d147d1bb632a06046e72bbaca6acb543e837dcc6", 0xb6}, {&(0x7f0000002300)="f28af530aeb54c65575e394cdc1a8c21f6d012b0c60ed3f8d960cbdf5681beeb828155ae974d7f7abfbd6830216fe840d22ea130e702db1f0e6c531db17fb6974837c81533f6fadef8421cca9ae0a133252531ff255c18cbbc66f056c9602b253d78baba0be74be713528d7c163167f06fcd67ad3b5442870c867ec61b662e90ecb2622c67521f26eb8a0619f8292c153ed10b42a42ebf9a79889c0ea88a128c7ec6f6798037ab794fdf420b6825476358d0c2df5cb2ad64998d7703aa213b41e877e073ad5b9a94e5f0762f1eb49df258b341b4", 0xd4}, {&(0x7f0000002400)="d27e560ccc724db15c9c92885dc54886b716f5cbb1106000c8069919b1b3d482d87736187dcd89520f3bff3f0ab614fdbf9c789833f5f1fe037da657be5b92844be45e55b5f3695c324b5a0e4680028a40dd659cc372a3c6a13523f2b2f1d76e986702042ffb511fb14d687f6abe28c8755c64260b0d1a230c6aa20fd2d4c9547d88ef76f410802b78b39f3e5744e46b5e0933181679aa1f8ec502d57f85c660139f15d9ea12eca9c9aa66e8e6fb8f9c3bbf676dbce2f88d335059fa25f750b1d4c9ffd6c7509b755eb533e06b525bd422e01738fe70a97c705786968d41aed2a77ac3", 0xe3}], 0x7, &(0x7f00000027c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffb}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}, r5}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r7}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r8}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0xc0}, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000028c0), &(0x7f0000002900)=0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000002940)={{0xa, 0x4e24, 0x6, @remote, 0x3f}, {0xa, 0x4e22, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x5, [0x5, 0x0, 0x1000, 0x81, 0xfffff800, 0x8, 0x3, 0x3]}, 0x5c) 09:28:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4810) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x90, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x22}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x6c, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb51}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r3 = accept4(r0, &(0x7f0000000d00)=@x25, &(0x7f0000000d80)=0x80, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xd4, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcf7}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x84e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd69f403eefb44272, 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0x8c, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6db2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000000}, 0x48880) r5 = accept4(r3, &(0x7f0000001140)=@in={0x2, 0x0, @private}, &(0x7f00000011c0)=0x80, 0x80800) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000001240), r0) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x54, r6, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40080) getgid() sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x3c, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x18}}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001640)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xcc, r7, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2f, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x14}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x37, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc091}, 0x844) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x78, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48c5}, 0x20000080) 09:28:10 executing program 6: ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f0000000000)={0x3f, 0x81, 0x0, 0x7}) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000040)={0x7, 0x7f, 0x0, 0x20, 0x7, 0x5}) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f0000000080)={0x6, 0x3f}) r0 = socket$inet6(0xa, 0x7, 0x4) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x4e20, 0x0, 0x4e20, 0xff, 0xa, 0x20, 0x0, 0x2b, 0x0, 0xee01}, {0x8, 0x8001, 0x3, 0x2, 0x400, 0x8000, 0x1, 0x8}, {0xdf, 0x0, 0x10001}, 0x45, 0x0, 0x1, 0x0, 0x2}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0xa, @in=@local, 0x34ff, 0x1, 0x3, 0x1, 0x6, 0xfffffffc, 0x2000}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)=@newsa={0x25c, 0x10, 0x800, 0x70bd25, 0x25dfdbfd, {{@in=@rand_addr=0x64010100, @in6=@loopback, 0x4e24, 0x7, 0x4e24, 0x0, 0x8, 0x80, 0x80, 0x4, r1, r2}, {@in=@empty, 0x4d5, 0xff}, @in6=@mcast1, {0x4, 0x6, 0x8, 0xd3e0, 0xd2f, 0x6, 0x2, 0x4}, {0x3ff, 0x13, 0x1, 0x9}, {0x5, 0x4, 0x101}, 0x70bd26, 0x34ff, 0x2, 0x3, 0x20}, [@algo_aead={0xce, 0x12, {{'pcrypt(aegis256-aesni)\x00'}, 0x410, 0x0, "22c55473687a89b4d7e5c863b0129bdb12c9800fd8202867cd272654e09997faff33e16d7ffba469873f24cf8c76145435a620c94888fe6e8aaa18be7bc94d0f20dc38d3eacd87cf7ba583a73df163b457735a4b74f985bceaa5921dbfc28addfaa878681ae866d999a01c25952bfbf1fb101b668180b8c6061f87cd47458230d1d9"}}, @migrate={0x50, 0x11, [{@in=@empty, @in=@loopback, @in=@loopback, @in=@multicast2, 0x6c, 0x3, 0x0, 0x0, 0xa, 0x2}]}, @policy_type={0xa, 0x10, {0x1}}, @lifetime_val={0x24, 0x9, {0x1000000000, 0x6, 0x1, 0x5}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e24, @in=@private=0xa010102}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000010) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)) set_thread_area(&(0x7f0000000680)={0x7, 0x0, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000006c0)={@private1, 0x2, 0x1, 0x1, 0xd, 0x2, 0x8001}, 0x20) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x4e22, 0x81000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040810) set_thread_area(&(0x7f0000000880)={0x20, 0x0, 0x1000}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000900), r3) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, r5, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000001) [ 131.544659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.552076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.555531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.560013] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.570073] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.614478] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.622549] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.625217] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.626503] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.630621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.630698] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.633243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.635159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.636565] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.638819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.645691] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.646536] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.648423] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.650480] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.651700] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.655245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.661610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.667703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.674091] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.677804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.696993] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.721279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.743104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.745806] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.755392] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.762269] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.782501] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.783665] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.790064] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.791353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.818710] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 131.842519] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 131.852403] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 131.873431] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 131.886278] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 133.632414] Bluetooth: hci0: command tx timeout [ 133.758910] Bluetooth: hci1: command tx timeout [ 133.759696] Bluetooth: hci4: command tx timeout [ 133.760389] Bluetooth: hci2: command tx timeout [ 133.822864] Bluetooth: hci5: command tx timeout [ 133.823814] Bluetooth: hci3: command tx timeout [ 133.886947] Bluetooth: hci6: command tx timeout [ 133.951093] Bluetooth: hci7: command tx timeout [ 135.678824] Bluetooth: hci0: command tx timeout [ 135.806902] Bluetooth: hci2: command tx timeout [ 135.807451] Bluetooth: hci4: command tx timeout [ 135.808161] Bluetooth: hci1: command tx timeout [ 135.871417] Bluetooth: hci3: command tx timeout [ 135.871472] Bluetooth: hci5: command tx timeout [ 135.935609] Bluetooth: hci6: command tx timeout [ 136.001803] Bluetooth: hci7: command tx timeout [ 137.728587] Bluetooth: hci0: command tx timeout [ 137.855271] Bluetooth: hci1: command tx timeout [ 137.855685] Bluetooth: hci2: command tx timeout [ 137.856065] Bluetooth: hci4: command tx timeout [ 137.918825] Bluetooth: hci5: command tx timeout [ 137.919324] Bluetooth: hci3: command tx timeout [ 137.984316] Bluetooth: hci6: command tx timeout [ 138.049015] Bluetooth: hci7: command tx timeout [ 139.776108] Bluetooth: hci0: command tx timeout [ 139.903692] Bluetooth: hci2: command tx timeout [ 139.905095] Bluetooth: hci1: command tx timeout [ 139.906421] Bluetooth: hci4: command tx timeout [ 139.967282] Bluetooth: hci3: command tx timeout [ 139.967517] Bluetooth: hci5: command tx timeout [ 140.031883] Bluetooth: hci6: command tx timeout [ 140.095302] Bluetooth: hci7: command tx timeout [ 194.258641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.262188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.267031] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.273796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.276661] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.327380] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.329568] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.333701] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.337365] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.342403] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.395527] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.398490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.407887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.438963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.448584] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.473067] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.475611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.475845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.478916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.481224] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.481299] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.486682] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.486830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.489668] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.490948] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.495078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.499192] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.500840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.502800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.521618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.542778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.556049] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.568822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.573366] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 194.580222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.582482] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 194.586540] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 194.599016] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.638056] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.643574] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 196.351820] Bluetooth: hci0: command tx timeout [ 196.414871] Bluetooth: hci1: command tx timeout [ 196.478818] Bluetooth: hci2: command tx timeout [ 196.607393] Bluetooth: hci4: command tx timeout [ 196.608756] Bluetooth: hci6: command tx timeout [ 196.672223] Bluetooth: hci3: command tx timeout [ 196.673630] Bluetooth: hci5: command tx timeout [ 196.734822] Bluetooth: hci7: command tx timeout [ 198.398862] Bluetooth: hci0: command tx timeout [ 198.464024] Bluetooth: hci1: command tx timeout [ 198.527943] Bluetooth: hci2: command tx timeout [ 198.654907] Bluetooth: hci4: command tx timeout [ 198.655295] Bluetooth: hci6: command tx timeout [ 198.719433] Bluetooth: hci3: command tx timeout [ 198.719514] Bluetooth: hci5: command tx timeout [ 198.782973] Bluetooth: hci7: command tx timeout [ 200.447074] Bluetooth: hci0: command tx timeout [ 200.510855] Bluetooth: hci1: command tx timeout [ 200.575212] Bluetooth: hci2: command tx timeout [ 200.703296] Bluetooth: hci4: command tx timeout [ 200.704083] Bluetooth: hci6: command tx timeout [ 200.767781] Bluetooth: hci5: command tx timeout [ 200.768338] Bluetooth: hci3: command tx timeout [ 200.830846] Bluetooth: hci7: command tx timeout [ 202.495605] Bluetooth: hci0: command tx timeout [ 202.559027] Bluetooth: hci1: command tx timeout [ 202.622812] Bluetooth: hci2: command tx timeout [ 202.750859] Bluetooth: hci4: command tx timeout [ 202.751042] Bluetooth: hci6: command tx timeout [ 202.815026] Bluetooth: hci5: command tx timeout [ 202.816013] Bluetooth: hci3: command tx timeout [ 202.879000] Bluetooth: hci7: command tx timeout [ 256.916476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.922394] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.929045] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.938612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.945312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.005426] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.019049] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.021324] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.026250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.028223] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.034545] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.039101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.044154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.050705] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.053959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.211487] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.221470] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.225141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.277152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.279256] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.327373] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.343827] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.349412] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.351570] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.354028] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.359084] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.369363] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.369420] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.374959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.382458] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.396933] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.401477] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.401544] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.410951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.415832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.416167] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.417975] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.435066] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.439910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.451778] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 259.008442] Bluetooth: hci0: command tx timeout [ 259.070837] Bluetooth: hci1: command tx timeout [ 259.135194] Bluetooth: hci2: command tx timeout [ 259.392243] Bluetooth: hci3: command tx timeout [ 259.455836] Bluetooth: hci4: command tx timeout [ 259.518940] Bluetooth: hci6: command tx timeout [ 259.520978] Bluetooth: hci7: command tx timeout [ 259.586467] Bluetooth: hci5: command tx timeout [ 261.055098] Bluetooth: hci0: command tx timeout [ 261.119068] Bluetooth: hci1: command tx timeout [ 261.183017] Bluetooth: hci2: command tx timeout [ 261.439123] Bluetooth: hci3: command tx timeout [ 261.504069] Bluetooth: hci4: command tx timeout [ 261.567169] Bluetooth: hci6: command tx timeout [ 261.568971] Bluetooth: hci7: command tx timeout [ 261.631009] Bluetooth: hci5: command tx timeout [ 263.102834] Bluetooth: hci0: command tx timeout [ 263.167687] Bluetooth: hci1: command tx timeout [ 263.230827] Bluetooth: hci2: command tx timeout [ 263.486824] Bluetooth: hci3: command tx timeout [ 263.552443] Bluetooth: hci4: command tx timeout [ 263.615099] Bluetooth: hci7: command tx timeout [ 263.616641] Bluetooth: hci6: command tx timeout [ 263.678826] Bluetooth: hci5: command tx timeout [ 265.151200] Bluetooth: hci0: command tx timeout [ 265.214836] Bluetooth: hci1: command tx timeout [ 265.278826] Bluetooth: hci2: command tx timeout [ 265.535191] Bluetooth: hci3: command tx timeout [ 265.598852] Bluetooth: hci4: command tx timeout [ 265.663183] Bluetooth: hci6: command tx timeout [ 265.665067] Bluetooth: hci7: command tx timeout [ 265.728780] Bluetooth: hci5: command tx timeout [ 319.705474] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.711399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.712839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.723365] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.726065] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.817244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.820354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.821917] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.830094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.836246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.957322] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.964696] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.971146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.980192] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.982812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.992600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.009067] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.023009] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.024778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.030883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.045412] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.048046] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.066374] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.073463] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.074473] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.077077] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.078625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.079470] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.085882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.089040] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.098586] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.109904] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.113478] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.157373] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.170106] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.223438] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 320.236970] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 320.239498] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 320.245301] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 320.251369] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 321.792187] Bluetooth: hci0: command tx timeout [ 321.919167] Bluetooth: hci1: command tx timeout [ 322.047083] Bluetooth: hci2: command tx timeout [ 322.111815] Bluetooth: hci3: command tx timeout [ 322.190994] Bluetooth: hci5: command tx timeout [ 322.239915] Bluetooth: hci4: command tx timeout [ 322.304862] Bluetooth: hci7: command tx timeout [ 322.305468] Bluetooth: hci6: command tx timeout [ 323.840141] Bluetooth: hci0: command tx timeout [ 323.967746] Bluetooth: hci1: command tx timeout [ 324.094794] Bluetooth: hci2: command tx timeout [ 324.158810] Bluetooth: hci3: command tx timeout [ 324.224086] Bluetooth: hci5: command tx timeout [ 324.286928] Bluetooth: hci4: command tx timeout [ 324.352122] Bluetooth: hci6: command tx timeout [ 324.353514] Bluetooth: hci7: command tx timeout [ 325.888193] Bluetooth: hci0: command tx timeout [ 326.014783] Bluetooth: hci1: command tx timeout [ 326.142832] Bluetooth: hci2: command tx timeout [ 326.206844] Bluetooth: hci3: command tx timeout [ 326.271274] Bluetooth: hci5: command tx timeout [ 326.335294] Bluetooth: hci4: command tx timeout [ 326.400149] Bluetooth: hci6: command tx timeout [ 326.401964] Bluetooth: hci7: command tx timeout [ 327.934938] Bluetooth: hci0: command tx timeout [ 328.064192] Bluetooth: hci1: command tx timeout [ 328.191787] Bluetooth: hci2: command tx timeout [ 328.254802] Bluetooth: hci3: command tx timeout [ 328.319791] Bluetooth: hci5: command tx timeout [ 328.382917] Bluetooth: hci4: command tx timeout [ 328.447809] Bluetooth: hci6: command tx timeout [ 328.448319] Bluetooth: hci7: command tx timeout [ 382.283133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.285025] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.292094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.303290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.320887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.382258] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.390755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.392169] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.399105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.401171] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.439736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.443015] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.458071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.462130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.464581] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.481315] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.487692] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.489904] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.493407] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.495807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.696546] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.702513] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.726537] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.730920] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.734199] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.841882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 382.847015] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 382.848616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 382.866890] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 382.874814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 383.030628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.032571] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.037663] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.039429] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 383.043138] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 383.047883] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 383.057110] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 383.121812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.127510] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 383.138251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 384.383846] Bluetooth: hci0: command tx timeout [ 384.447057] Bluetooth: hci1: command tx timeout [ 384.510817] Bluetooth: hci2: command tx timeout [ 384.639870] Bluetooth: hci3: command tx timeout [ 384.771479] Bluetooth: hci5: command tx timeout [ 385.023878] Bluetooth: hci6: command tx timeout [ 385.279946] Bluetooth: hci7: command tx timeout [ 385.280603] Bluetooth: hci4: command tx timeout [ 386.430839] Bluetooth: hci0: command tx timeout [ 386.494957] Bluetooth: hci1: command tx timeout [ 386.559652] Bluetooth: hci2: command tx timeout [ 386.686790] Bluetooth: hci3: command tx timeout [ 386.815083] Bluetooth: hci5: command tx timeout [ 387.071235] Bluetooth: hci6: command tx timeout [ 387.326905] Bluetooth: hci4: command tx timeout [ 387.327504] Bluetooth: hci7: command tx timeout [ 388.479092] Bluetooth: hci0: command tx timeout [ 388.542946] Bluetooth: hci1: command tx timeout [ 388.607114] Bluetooth: hci2: command tx timeout [ 388.734809] Bluetooth: hci3: command tx timeout [ 388.863862] Bluetooth: hci5: command tx timeout [ 389.119226] Bluetooth: hci6: command tx timeout [ 389.374858] Bluetooth: hci4: command tx timeout [ 389.375441] Bluetooth: hci7: command tx timeout [ 390.526962] Bluetooth: hci0: command tx timeout [ 390.591847] Bluetooth: hci1: command tx timeout [ 390.654822] Bluetooth: hci2: command tx timeout [ 390.782815] Bluetooth: hci3: command tx timeout [ 390.910792] Bluetooth: hci5: command tx timeout [ 391.167072] Bluetooth: hci6: command tx timeout [ 391.424051] Bluetooth: hci7: command tx timeout [ 391.424670] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 09:33:14 Registers: info registers vcpu 0 RAX=ffff888015110001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888015110001 RSI=ffff88801510ff58 RDI=ffff88806ce08a88 RBP=ffff88806ce08ad0 RSP=ffff88806ce08a08 R8 =ffffffff8679a1ca R9 =0000000000000000 R10=000000000003b6bd R11=0000000000000003 R12=ffff88806ce08ad8 R13=ffff88806ce08ac0 R14=ffff88801510ff58 R15=ffff88806ce08a78 RIP=ffffffff81354a7e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe6a0ef4260 CR3=0000000034a28000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000001 RBX=ffff888009747dc8 RCX=0000000000000001 RDX=ffff888009748000 RSI=ffff888009747d98 RDI=ffff8880097478d8 RBP=ffff888009740000 RSP=ffff888009747858 R8 =0000000000000001 R9 =ffff888009747908 R10=000000000003b6bd R11=0000000000011a09 R12=ffff888009747901 R13=ffff888009747910 R14=ffff888009747d98 R15=ffff8880097478c8 RIP=ffffffff8135553f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f708d5506f4 CR3=000000002d00a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f708d55f47000007f708d55ef20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000