Warning: Permanently added '[localhost]:46455' (ECDSA) to the list of known hosts. 2025/06/04 07:00:15 fuzzer started 2025/06/04 07:00:15 dialing manager at localhost:39055 syzkaller login: [ 92.045053] cgroup: Unknown subsys name 'net' [ 92.198388] cgroup: Unknown subsys name 'cpuset' [ 92.247698] cgroup: Unknown subsys name 'rlimit' 2025/06/04 07:00:31 syscalls: 223 2025/06/04 07:00:31 code coverage: enabled 2025/06/04 07:00:31 comparison tracing: enabled 2025/06/04 07:00:31 extra coverage: enabled 2025/06/04 07:00:31 setuid sandbox: enabled 2025/06/04 07:00:31 namespace sandbox: enabled 2025/06/04 07:00:31 Android sandbox: enabled 2025/06/04 07:00:31 fault injection: enabled 2025/06/04 07:00:31 leak checking: enabled 2025/06/04 07:00:31 net packet injection: enabled 2025/06/04 07:00:31 net device setup: enabled 2025/06/04 07:00:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/04 07:00:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/04 07:00:31 USB emulation: enabled 2025/06/04 07:00:31 hci packet injection: enabled 2025/06/04 07:00:31 wifi device emulation: enabled 2025/06/04 07:00:31 802.15.4 emulation: enabled 2025/06/04 07:00:31 fetching corpus: 0, signal 0/0 (executing program) 2025/06/04 07:00:33 starting 8 fuzzer processes 07:00:33 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2c100) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0xd4c9, {{0xa, 0x4e21, 0x8001, @loopback, 0x4cbb}}, 0x1, 0x1, [{{0xa, 0x4e22, 0x7f, @local, 0x3ff}}]}, 0x110) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000200), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', r1, 0x4, 0x5, 0x20, 0x31, 0x20, @private0, @remote, 0x7, 0x7800, 0x3, 0x401}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x3b}, @private2, @local, 0x9, 0x107e, 0x5230, 0x900, 0x4, 0x180008, r2}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x5}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x15}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}]}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x840}, 0x894) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00'}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r5 = accept$inet6(r4, &(0x7f00000007c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000800)=0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x24000854) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048050}, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000a80)={{{@in=@broadcast, @in6=@empty}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000000b80)=0xe8) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000bc0)={'nat\x00', 0x0, [0x8000, 0x8, 0x0, 0x3ff, 0x100]}, &(0x7f0000000c40)=0x54) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000d00)={'ip6tnl0\x00', &(0x7f0000000c80)={'syztnl1\x00', r2, 0x2f, 0x2, 0x3f, 0x1, 0x10, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7}}) getresuid(&(0x7f0000000d40), &(0x7f0000000d80), &(0x7f0000000dc0)) 07:00:33 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r1 = memfd_secret(0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xbb}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040d1}, 0x4040) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x84000280}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x11, 0x1, '&[H%}}&\x8d@)+&\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x23}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '(&/[^$#\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x7800, 0x1, 0x4, 0x7fff, {{0x24, 0x4, 0x1, 0x17, 0x90, 0x68, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@ssrr={0x89, 0x1b, 0x2a, [@broadcast, @empty, @loopback, @empty, @broadcast, @remote]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xb2, 0x0, 0x1, [0xffff]}, @cipso={0x86, 0x17, 0x0, [{0x2, 0x11, "055a6738bbc52450bebddd1668495d"}]}, @timestamp={0x44, 0x24, 0x45, 0x0, 0x4, [0xd411, 0x3ff, 0x1ff, 0x0, 0x0, 0x2, 0x6, 0x8]}, @cipso={0x86, 0x16, 0x3, [{0x0, 0x10, "852c7252f97982ef79aec292cc9f"}]}, @end]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in=@rand_addr=0x64010100, @in6=@local, 0x4e20, 0xce3, 0x4e20, 0x7, 0x2, 0xa0, 0x80, 0x2, r4, 0xee00}, {0x80, 0x8, 0xfffffffffffffffd, 0x0, 0x8, 0xf3, 0x7, 0xf3a}, {0x0, 0x1ff, 0x1, 0x272}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x2, 0x2}, {{@in=@broadcast, 0x4d5, 0x3c}, 0x2, @in6=@remote, 0x3507, 0x2, 0x3, 0xd3, 0x6, 0x9, 0x3}}, 0xe8) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000740)={{0xa, 0x4e23, 0x1, @remote, 0x400}, {0xa, 0x4e23, 0x1f, @rand_addr=' \x01\x00', 0x10001}, 0x7, [0x3, 0x20, 0x7f, 0xd46, 0x9, 0x4, 0x2, 0x6]}, 0x5c) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000007c0)={@multicast2, @local, r4}, 0xc) r5 = syz_open_dev$loop(&(0x7f0000000800), 0xfff, 0x6000) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000840)) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0xc140, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000940)={0x1d, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xca}, @pad1]}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x44008010}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x8c94d0b64732273}]}, 0x38}, 0x1, 0x0, 0x0, 0x64004004}, 0x4008010) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000a80)={{0xa, 0x4e20, 0x80a6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}, {0xa, 0x4e21, 0x6, @private1, 0x2}, 0xf63, [0x80, 0x9, 0x12a, 0xffff0001, 0x9, 0xbee, 0xfffffffd, 0x5]}, 0x5c) 07:00:33 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r2 = socket(0x0, 0x80000, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x8000, 0x20, 0xffffffff, 0xff, {{0xd, 0x4, 0x2, 0x5, 0x34, 0x64, 0x0, 0x5, 0x2f, 0x0, @multicast1, @loopback, {[@rr={0x7, 0xf, 0xcf, [@local, @rand_addr=0x64010100, @remote]}, @lsrr={0x83, 0x7, 0x2e, [@dev={0xac, 0x14, 0x14, 0x29}]}, @ssrr={0x89, 0x7, 0xc0, [@rand_addr=0x64010102]}]}}}}}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x130, r1, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xbbc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x50f6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8c}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa80}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x633}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x400c081) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x24000025) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xf0, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "50c0b885e45c2c8bb0180215b3e8befb7c6fbe92209e6372adec389b4e9914e963919769811a425e58b2693d2771b92d89a9b8d193d5dd38ccb2ccd76e2b6d8ca72170e8a3aed3a8bae0c78194108527a48d049fa904cf0e36895db0913c3b21b114e719dcd0e4b339c3bde4ecee2645d7b974f83c5fa13e2efc08d9012c3a31c5e4fe414f50c31af7c4cc7cc70ae04cac368c4d8ab1e35ac6f1527788f2c6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004}, 0x4044080) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000d00)={{0x3f, 0x8}, 'port0\x00', 0x3a, 0x140000, 0xfffffffb, 0x400, 0x2, 0x1, 0x7ff, 0x0, 0x5}) sched_setattr(0xffffffffffffffff, &(0x7f0000000dc0)={0x38, 0x0, 0x0, 0x0, 0xfffffffd, 0x1013, 0x6, 0xfffffffffffffff9, 0xff, 0x2a}, 0x0) socket(0x27, 0x6, 0x2) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000e40)) 07:00:33 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000040)) r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x6b00000000000000, 0x2c400) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3ff) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0xfffffff9, {{0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x2, [{}, {}]}, 0x48) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x5) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x1, 0x22082) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x5, 0x6, 0x22, @local, @mcast1, 0x40, 0x700, 0x7, 0x3}}) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x16, r2, 0x1, 0x7f, 0x6, @remote}, 0x14) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xbc, 0x14, 0x400, 0x70bd25, 0x25dfdbff, {0x29, 0x3f}, [@INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "5c3dcfb1acd3b19c8d606a7794dcaea56edc828d43e07b17e5eef40e7ef8cf21ff06a3a9bd6193d6da97a14508485b095eb037aba0bf5c8af185eb305fd6b322735c11baa7ea94fcc11eeaa11b41da3b534fd69e292580955066f335a0e34cda07d0042a21ab8f1b168146204c0db36f1d6da6e33b17fcd24930c1b80b79837d1a92e03359efbd39eb4bbef7aaac9e7e23c242fa243e41e0f73f194789174b7c3f"}]}, 0xbc}}, 0x80) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x5801}, 0x40001) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000700)) r5 = syz_open_dev$vcsn(&(0x7f00000007c0), 0x2, 0x32000) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x5) 07:00:33 executing program 4: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/cgroup\x00') setgid(0xee01) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2}) wait4(r0, &(0x7f0000000180), 0x40000000, &(0x7f00000001c0)) clock_getres(0x4, &(0x7f0000000280)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000002c0)) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800) process_vm_readv(0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4, 0x4}, {&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/199, 0xc7}], 0x4, &(0x7f0000002940)=[{&(0x7f0000001600)=""/225, 0xe1}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/142, 0x8e}, {&(0x7f00000027c0)=""/64, 0x40}, {&(0x7f0000002800)=""/28, 0x1c}, {&(0x7f0000002840)=""/216, 0xd8}], 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002a40)={'syztnl1\x00', &(0x7f00000029c0)={'ip_vti0\x00', 0x0, 0x8000, 0x700, 0xda, 0x8, {{0x15, 0x4, 0x0, 0x5, 0x54, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x3c, 0x55, 0x3, 0x0, [{@multicast1, 0x3}, {@local, 0x7f}, {@remote, 0x7}, {@rand_addr=0x64010102, 0x6}, {@local}, {@multicast1, 0x2}, {@local, 0x4}]}, @generic={0x83, 0x3, "bf"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000002b00)={'syztnl2\x00', &(0x7f0000002a80)={'sit0\x00', r1, 0x29, 0x6, 0x9c, 0x800, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7, 0x40, 0x101, 0x9}}) sendto$packet(0xffffffffffffffff, &(0x7f0000002b40)="c0160944b748832cc47175a018c86a8fa6b9d131bbb9fe94cbd19c934224f132eb9fc0b0b3a6a05557b4761173500e9a4c94", 0x32, 0x40, &(0x7f0000002b80)={0x11, 0x1c, 0x0, 0x1, 0xfb, 0x6, @local}, 0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002bc0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000002cc0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000002d00)={@mcast2, 0x2a, r2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002d40)={'batadv0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002d80)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f0000002e80)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002ec0)={{{@in6=@local, @in6=@empty, 0x4e21, 0x61f, 0x4e21, 0x7, 0x2, 0xa0, 0xc0, 0x33, r3, r4}, {0x0, 0x81, 0x1, 0x7, 0xffffffffffffffff, 0x7, 0xfffffffffffffffb, 0x6}, {0x9, 0x3, 0x1000, 0x100000001}, 0xfffffff9, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0x6c}, 0xa, @in6=@mcast2, 0x3501, 0x0, 0x2, 0x6, 0x10000, 0xffffffff, 0x8cf}}, 0xe8) [ 109.843294] audit: type=1400 audit(1749020433.696:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:00:33 executing program 6: socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x444081, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r2) r3 = syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x200002) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f00000003c0)=0xe8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/partitions\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000440), 0xffffffffffffffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\x16-:\'-\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r1, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x1) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r6, 0x202, 0x70bd29, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044040}, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'syztnl1\x00', r4, 0x29, 0x3, 0x8, 0x6, 0x0, @empty, @loopback, 0x8000, 0x42ed0809350bb18e, 0x8, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r7}, 0x14) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000880)={0x5, {{0xa, 0x4e22, 0x4, @empty, 0x8}}}, 0x88) 07:00:33 executing program 5: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x20, 0x10, 0xfffffff8, 0x40, {{0x3c, 0x4, 0x1, 0x9, 0xf0, 0x68, 0x0, 0x81, 0x2b, 0x0, @remote, @private=0xa010102, {[@cipso={0x86, 0x5c, 0x1, [{0x6, 0xf, "c99cc68018209c3c7249138e92"}, {0x0, 0xe, "bed3a1afdb0564fd54a715e1"}, {0x1, 0x5, "014c6d"}, {0x0, 0x11, "32bc461fc939fd3b04883ce3603d3b"}, {0x7, 0xb, "c76f0e6ea91b686539"}, {0x5, 0xf, "0ee1675214f6ed7f78d0213904"}, {0x0, 0x4, '\v!'}, {0x7, 0x5, "d55bf8"}]}, @timestamp_prespec={0x44, 0x24, 0xd9, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x2}, {@private=0xa010102, 0x8}, {@loopback, 0x80}, {@local, 0x1000}]}, @cipso={0x86, 0x28, 0x3, [{0x5, 0x3, '4'}, {0x7, 0x4, "b275"}, {0x0, 0x8, "2b3a65bab97f"}, {0x6, 0x9, "786031452cd8ae"}, {0x0, 0xa, "22096668de0d4bde"}]}, @ssrr={0x89, 0xf, 0x67, [@loopback, @empty, @multicast1]}, @ssrr={0x89, 0x7, 0x9f, [@loopback]}, @ssrr={0x89, 0x1b, 0xfd, [@remote, @multicast2, @multicast2, @local, @remote, @local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0xff, 0xf01, 0x1, @mcast1, @empty, 0x1, 0x7, 0x40, 0x100}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={0x0, @hci={0x1f, 0x1, 0x1}, @isdn={0x22, 0x7, 0x2, 0x8}, @xdp={0x2c, 0xc, 0x0, 0x14}, 0x8, 0x0, 0x0, 0x0, 0x200, &(0x7f0000000440)='syzkaller0\x00', 0x1f, 0x1, 0x5}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x2f, 0x81, 0x4, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, 0x1, 0x8, 0x40, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x29, 0x15, 0x1, 0xf15d, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x21}, 0x1, 0x20, 0x5ce3, 0x2ca5}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f0000000780)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x1, 0x8, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x8, 0x273a3591, 0x5}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001240)={&(0x7f0000000880)={0x9a0, r0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8000, 0x1, 0x1, 0x5}, {0x200, 0x81, 0x4, 0xffffffff}, {0x3, 0x1f, 0xa4, 0x2}, {0x3ac, 0xff, 0x9}, {0xbc, 0x6, 0x7b}, {0x3, 0x8, 0x0, 0x100}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ad}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x3f, 0x6, 0x2}, {0x9, 0x3b, 0x3f, 0x7fffffff}, {0x4, 0x8, 0xff, 0xfffffff8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x3, 0x50, 0x4}, {0x0, 0x3f, 0x58, 0xbb6a}, {0x3, 0x1f, 0x80, 0xfffeffff}, {0x5, 0x7, 0x3, 0x9}, {0x9, 0x7, 0x64, 0x3}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6160}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r5}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x98c}}, {0x8, 0x7, 0x400}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1f, 0x3f, 0x6, 0x2}, {0x9, 0xff, 0x4e, 0x400}, {0x1, 0x2, 0x2, 0x7}, {0xfb7f, 0x1, 0x8}, {0xb2, 0xda, 0x1, 0x1}, {0x1, 0x2, 0x2, 0xe61c}, {0x9, 0x40}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4e8}}}]}}, {{0x8, 0x1, r7}, {0x90, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x98, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7ff, 0x7f, 0xff, 0x10000}, {0x548, 0xfd, 0x6f, 0x1f}, {0x3, 0x2, 0x81, 0x10001}, {0x4, 0x0, 0x6, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}]}, 0x9a0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000001340)={'syztnl2\x00', &(0x7f00000012c0)={'sit0\x00', r7, 0x29, 0x6, 0x9, 0xe7, 0x5a, @dev={0xfe, 0x80, '\x00', 0x2d}, @local, 0x7800, 0x10, 0x1, 0xe4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000013c0)={'ip_vti0\x00', &(0x7f0000001380)={'ip_vti0\x00', r10, 0x8000, 0x80, 0x69, 0x81, {{0x6, 0x4, 0x2, 0x18, 0x18, 0x67, 0x0, 0x3, 0x29, 0x0, @broadcast, @private=0xa010100, {[@end]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000001400)={@private1, 0x19, r4}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000001440), 0x4) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2000c0c1) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000015c0)={0x0, @can, @generic={0x26, "1d88bf3e09e0bbd29e79b0a999ce"}, @xdp={0x2c, 0x4, r7, 0x7}, 0x868d, 0x0, 0x0, 0x0, 0x3ff, &(0x7f0000001580)='veth1_virt_wifi\x00', 0x3343, 0x1, 0x7f}) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) getsockname(0xffffffffffffffff, &(0x7f0000001640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000016c0)=0x80) sendmsg$GTP_CMD_DELPDP(r11, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x0) 07:00:33 executing program 7: r0 = memfd_secret(0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r2 = memfd_secret(0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x401, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r3 = socket(0x18, 0x800, 0x7ff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff00}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5ac}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x521}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x14000000) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x11c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x97d9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8bb8}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1009044}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x4000) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4044064) r4 = socket$inet6(0xa, 0x80f, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000700)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000780)={0x9, 0x4, 0x0, 'queue1\x00', 0x1f}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000840), 0x80000, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb4, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2f31}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44810}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000a00)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r6, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20008001) r7 = syz_open_dev$vcsa(&(0x7f0000000bc0), 0x8, 0x0) ioctl$MON_IOCQ_URB_LEN(r7, 0x9201) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000c80)={&(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000c40)}) [ 111.322077] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.328055] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.331219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.339955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.347232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.373978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.385076] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.387998] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.404181] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.412087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.416186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.421016] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.427546] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.428888] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.432159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.434281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.447387] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.450573] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.458923] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.466814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.497375] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.501493] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.511483] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.528013] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.532046] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.540364] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.541988] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.557558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.557863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.566932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.593572] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.597345] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.601860] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.623383] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.626930] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.633323] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.642601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.656159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.685128] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.712278] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.407299] Bluetooth: hci0: command tx timeout [ 113.470934] Bluetooth: hci1: command tx timeout [ 113.536012] Bluetooth: hci3: command tx timeout [ 113.599077] Bluetooth: hci2: command tx timeout [ 113.664808] Bluetooth: hci5: command tx timeout [ 113.726750] Bluetooth: hci6: command tx timeout [ 113.791960] Bluetooth: hci7: command tx timeout [ 113.792610] Bluetooth: hci4: command tx timeout [ 115.455123] Bluetooth: hci0: command tx timeout [ 115.519516] Bluetooth: hci1: command tx timeout [ 115.582959] Bluetooth: hci3: command tx timeout [ 115.646886] Bluetooth: hci2: command tx timeout [ 115.710944] Bluetooth: hci5: command tx timeout [ 115.774847] Bluetooth: hci6: command tx timeout [ 115.839350] Bluetooth: hci4: command tx timeout [ 115.840388] Bluetooth: hci7: command tx timeout [ 117.504050] Bluetooth: hci0: command tx timeout [ 117.567117] Bluetooth: hci1: command tx timeout [ 117.631704] Bluetooth: hci3: command tx timeout [ 117.694736] Bluetooth: hci2: command tx timeout [ 117.759710] Bluetooth: hci5: command tx timeout [ 117.823119] Bluetooth: hci6: command tx timeout [ 117.886790] Bluetooth: hci4: command tx timeout [ 117.887437] Bluetooth: hci7: command tx timeout [ 119.550764] Bluetooth: hci0: command tx timeout [ 119.614946] Bluetooth: hci1: command tx timeout [ 119.679530] Bluetooth: hci3: command tx timeout [ 119.742982] Bluetooth: hci2: command tx timeout [ 119.806990] Bluetooth: hci5: command tx timeout [ 119.870769] Bluetooth: hci6: command tx timeout [ 119.935828] Bluetooth: hci4: command tx timeout [ 119.937215] Bluetooth: hci7: command tx timeout [ 173.395138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.399275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.402140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.412962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.425443] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.597146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.601015] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.626548] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.629248] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.636824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.641076] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.643463] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.645141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.648006] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.656886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.658520] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.662584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.666258] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.667927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.668364] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.685839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.689019] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.690947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.691386] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.697611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.703388] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.714479] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.717122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.735769] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.750029] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.761500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.768605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.771511] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.779568] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.794925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.800548] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.803698] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.840525] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.853269] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.873325] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.487176] Bluetooth: hci0: command tx timeout [ 175.743018] Bluetooth: hci5: command tx timeout [ 175.806724] Bluetooth: hci3: command tx timeout [ 175.807407] Bluetooth: hci1: command tx timeout [ 175.870827] Bluetooth: hci4: command tx timeout [ 175.871483] Bluetooth: hci2: command tx timeout [ 175.934744] Bluetooth: hci6: command tx timeout [ 175.999060] Bluetooth: hci7: command tx timeout [ 177.534736] Bluetooth: hci0: command tx timeout [ 177.790738] Bluetooth: hci5: command tx timeout [ 177.855926] Bluetooth: hci3: command tx timeout [ 177.856368] Bluetooth: hci1: command tx timeout [ 177.919762] Bluetooth: hci2: command tx timeout [ 177.920199] Bluetooth: hci4: command tx timeout [ 177.983777] Bluetooth: hci6: command tx timeout [ 178.046835] Bluetooth: hci7: command tx timeout [ 179.583704] Bluetooth: hci0: command tx timeout [ 179.839694] Bluetooth: hci5: command tx timeout [ 179.904015] Bluetooth: hci1: command tx timeout [ 179.904449] Bluetooth: hci3: command tx timeout [ 179.967910] Bluetooth: hci4: command tx timeout [ 179.968337] Bluetooth: hci2: command tx timeout [ 180.031913] Bluetooth: hci6: command tx timeout [ 180.095799] Bluetooth: hci7: command tx timeout [ 181.631809] Bluetooth: hci0: command tx timeout [ 181.887971] Bluetooth: hci5: command tx timeout [ 181.951728] Bluetooth: hci3: command tx timeout [ 181.952161] Bluetooth: hci1: command tx timeout [ 182.016945] Bluetooth: hci2: command tx timeout [ 182.017390] Bluetooth: hci4: command tx timeout [ 182.079914] Bluetooth: hci6: command tx timeout [ 182.143895] Bluetooth: hci7: command tx timeout [ 236.183296] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.186253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.188754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.194777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.198816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.402367] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.404312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.405961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.411139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.414882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.436912] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.443407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.447824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.478537] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.485002] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.511100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.516976] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.523437] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.527500] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.539176] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.542666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.545136] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.548528] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.561203] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.563337] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.563600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.566060] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.570253] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.575512] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.583943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.646427] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.650102] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.652382] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.659234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.662540] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.722856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.726722] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.729417] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.735867] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.739538] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.272751] Bluetooth: hci0: command tx timeout [ 238.526767] Bluetooth: hci1: command tx timeout [ 238.591716] Bluetooth: hci2: command tx timeout [ 238.654846] Bluetooth: hci4: command tx timeout [ 238.654874] Bluetooth: hci3: command tx timeout [ 238.655751] Bluetooth: hci5: command tx timeout [ 238.718705] Bluetooth: hci6: command tx timeout [ 238.846693] Bluetooth: hci7: command tx timeout [ 240.318877] Bluetooth: hci0: command tx timeout [ 240.574889] Bluetooth: hci1: command tx timeout [ 240.638922] Bluetooth: hci2: command tx timeout [ 240.702969] Bluetooth: hci3: command tx timeout [ 240.703122] Bluetooth: hci5: command tx timeout [ 240.703776] Bluetooth: hci4: command tx timeout [ 240.766693] Bluetooth: hci6: command tx timeout [ 240.894932] Bluetooth: hci7: command tx timeout [ 242.366723] Bluetooth: hci0: command tx timeout [ 242.623849] Bluetooth: hci1: command tx timeout [ 242.686688] Bluetooth: hci2: command tx timeout [ 242.750771] Bluetooth: hci5: command tx timeout [ 242.751274] Bluetooth: hci3: command tx timeout [ 242.751743] Bluetooth: hci4: command tx timeout [ 242.815065] Bluetooth: hci6: command tx timeout [ 242.943044] Bluetooth: hci7: command tx timeout [ 244.414724] Bluetooth: hci0: command tx timeout [ 244.670852] Bluetooth: hci1: command tx timeout [ 244.734735] Bluetooth: hci2: command tx timeout [ 244.798744] Bluetooth: hci4: command tx timeout [ 244.799170] Bluetooth: hci3: command tx timeout [ 244.799579] Bluetooth: hci5: command tx timeout [ 244.863499] Bluetooth: hci6: command tx timeout [ 244.991234] Bluetooth: hci7: command tx timeout [ 298.445471] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.449455] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.455138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.465468] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.471109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.639157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.645160] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.648553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.655236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.659097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.784719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.787856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.790766] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.796212] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.803960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.808038] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.810350] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.816271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.825307] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.864292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.871183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.885179] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.906912] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.912998] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.916365] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.925435] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.936116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.964234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.015538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.073286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.075894] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.104717] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.165317] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.178223] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.217084] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.217450] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.230921] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.291767] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.437179] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.493167] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.542796] Bluetooth: hci0: command tx timeout [ 300.734716] Bluetooth: hci1: command tx timeout [ 300.926776] Bluetooth: hci3: command tx timeout [ 300.927509] Bluetooth: hci2: command tx timeout [ 301.054760] Bluetooth: hci5: command tx timeout [ 301.183776] Bluetooth: hci4: command tx timeout [ 301.374713] Bluetooth: hci6: command tx timeout [ 301.631709] Bluetooth: hci7: command tx timeout [ 302.590817] Bluetooth: hci0: command tx timeout [ 302.783049] Bluetooth: hci1: command tx timeout [ 302.975912] Bluetooth: hci3: command tx timeout [ 302.976824] Bluetooth: hci2: command tx timeout [ 303.102854] Bluetooth: hci5: command tx timeout [ 303.230752] Bluetooth: hci4: command tx timeout [ 303.424676] Bluetooth: hci6: command tx timeout [ 303.680681] Bluetooth: hci7: command tx timeout [ 304.638842] Bluetooth: hci0: command tx timeout [ 304.830838] Bluetooth: hci1: command tx timeout [ 305.022716] Bluetooth: hci3: command tx timeout [ 305.023180] Bluetooth: hci2: command tx timeout [ 305.151797] Bluetooth: hci5: command tx timeout [ 305.278847] Bluetooth: hci4: command tx timeout [ 305.470945] Bluetooth: hci6: command tx timeout [ 305.726872] Bluetooth: hci7: command tx timeout [ 306.686806] Bluetooth: hci0: command tx timeout [ 306.879163] Bluetooth: hci1: command tx timeout [ 307.072012] Bluetooth: hci2: command tx timeout [ 307.072963] Bluetooth: hci3: command tx timeout [ 307.199543] Bluetooth: hci5: command tx timeout [ 307.327695] Bluetooth: hci4: command tx timeout [ 307.519242] Bluetooth: hci6: command tx timeout [ 307.775781] Bluetooth: hci7: command tx timeout [ 361.040779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.049267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.056840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.064490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.067976] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.071175] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.075234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.092114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.098469] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.120211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.231978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.236124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.242543] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.249398] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.255135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.319074] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.328231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.361051] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.363920] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.371154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.377488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.385963] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.397228] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.420160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.424049] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.585259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.591440] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.595423] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.604934] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.637951] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.806145] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.812451] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 361.821938] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.828535] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 361.841126] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.854012] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.859765] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 361.903559] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 361.923422] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.015205] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.134806] Bluetooth: hci0: command tx timeout [ 363.200677] Bluetooth: hci1: command tx timeout [ 363.326887] Bluetooth: hci2: command tx timeout [ 363.519649] Bluetooth: hci4: command tx timeout [ 363.520372] Bluetooth: hci3: command tx timeout [ 363.710794] Bluetooth: hci5: command tx timeout [ 363.966957] Bluetooth: hci6: command tx timeout [ 364.158734] Bluetooth: hci7: command tx timeout [ 365.183165] Bluetooth: hci0: command tx timeout [ 365.246820] Bluetooth: hci1: command tx timeout [ 365.375040] Bluetooth: hci2: command tx timeout [ 365.566721] Bluetooth: hci3: command tx timeout [ 365.567711] Bluetooth: hci4: command tx timeout [ 365.759023] Bluetooth: hci5: command tx timeout [ 366.016108] Bluetooth: hci6: command tx timeout [ 366.206758] Bluetooth: hci7: command tx timeout [ 367.230806] Bluetooth: hci0: command tx timeout [ 367.294696] Bluetooth: hci1: command tx timeout [ 367.422707] Bluetooth: hci2: command tx timeout [ 367.615822] Bluetooth: hci4: command tx timeout [ 367.616128] Bluetooth: hci3: command tx timeout [ 367.808690] Bluetooth: hci5: command tx timeout [ 368.062900] Bluetooth: hci6: command tx timeout [ 368.255753] Bluetooth: hci7: command tx timeout [ 369.278881] Bluetooth: hci0: command tx timeout [ 369.342688] Bluetooth: hci1: command tx timeout [ 369.472690] Bluetooth: hci2: command tx timeout [ 369.663685] Bluetooth: hci3: command tx timeout [ 369.663715] Bluetooth: hci4: command tx timeout [ 369.854856] Bluetooth: hci5: command tx timeout [ 370.111818] Bluetooth: hci6: command tx timeout [ 370.302842] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 07:05:43 Registers: info registers vcpu 0 RAX=ffffffff8686cb95 RBX=0000000000000001 RCX=ffffffff8686cb94 RDX=ffff888028bf7b80 RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88806ce08a80 RSP=ffff88806ce089b8 R8 =ffffffff8686cb98 R9 =0000000000000001 R10=000000000003b6bd R11=000000000002328c R12=ffff88806ce08a88 R13=ffff88806ce08a70 R14=0000000000000008 R15=ffff88806ce08a28 RIP=ffffffff81354edd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f61fef71310 CR3=0000000028d3d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81353e1d RDI=fffffbfff0b839a8 RBP=ffffffff85c1cd40 RSP=ffff88806cf08990 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6bd R11=0000000000024a90 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf08a78 RIP=ffffffff8151b1d2 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f82cf5db540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f82cf78f478 CR3=0000000029bf2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=4700352e322e325f4342494c4700362e XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000006d69747465 XMM04=006d6f72667663657200796164666f65 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000