Warning: Permanently added '[localhost]:9525' (ECDSA) to the list of known hosts. 2024/10/20 12:50:38 fuzzer started 2024/10/20 12:50:39 dialing manager at localhost:45639 syzkaller login: [ 68.344621] cgroup: Unknown subsys name 'net' [ 68.434629] cgroup: Unknown subsys name 'cpuset' [ 68.448534] cgroup: Unknown subsys name 'rlimit' 2024/10/20 12:50:56 syscalls: 201 2024/10/20 12:50:56 code coverage: enabled 2024/10/20 12:50:56 comparison tracing: enabled 2024/10/20 12:50:56 extra coverage: enabled 2024/10/20 12:50:56 setuid sandbox: enabled 2024/10/20 12:50:56 namespace sandbox: enabled 2024/10/20 12:50:56 Android sandbox: enabled 2024/10/20 12:50:56 fault injection: enabled 2024/10/20 12:50:56 leak checking: enabled 2024/10/20 12:50:56 net packet injection: enabled 2024/10/20 12:50:56 net device setup: enabled 2024/10/20 12:50:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/20 12:50:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/20 12:50:56 USB emulation: enabled 2024/10/20 12:50:56 hci packet injection: enabled 2024/10/20 12:50:56 wifi device emulation: enabled 2024/10/20 12:50:56 802.15.4 emulation: enabled 2024/10/20 12:50:56 fetching corpus: 0, signal 0/0 (executing program) 2024/10/20 12:50:57 starting 8 fuzzer processes 12:50:57 executing program 3: ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000080)=0x7) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f00000000c0)=0x10000) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4009}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb08c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}]}, 0x44}, 0x1, 0x0, 0x0, 0x6b932d5510dabc89}, 0x0) socketpair(0xf, 0x0, 0x7, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffff, 0x47}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008880}, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000500)={0x0, @llc={0x1a, 0x20, 0x1, 0x9, 0x6, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, @nl=@unspec, @phonet={0x23, 0x40, 0x5, 0x2}, 0x1, 0x0, 0x0, 0x0, 0x9f, &(0x7f00000004c0)='nr0\x00', 0x0, 0x7260, 0x4984}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r1) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000800)={&(0x7f0000000680), 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf4ae}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000840)) openat$cgroup_subtree(r4, &(0x7f0000000880), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000900)={0x0, 0x80, 0x8, 0x0, 0x4d, 0x1, 0x0, 0xc9, 0x10000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000008c0), 0xa}, 0x10, 0x7, 0x1f, 0x1, 0x0, 0x8, 0xefa5, 0x0, 0x7, 0x0, 0xffffffffffffff83}, r4, 0xe, 0xffffffffffffffff, 0x3) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000980), &(0x7f00000009c0)=0x14) ioctl$sock_ifreq(r3, 0x8916, &(0x7f0000000a00)={'veth1_to_batadv\x00', @ifru_hwaddr=@link_local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r6) 12:50:57 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x181980, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x144, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x66}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="11d2a33beb3e3b0416"}, @NL80211_ATTR_IE={0x6e, 0x2a, [@challenge={0x10, 0x1, 0x35}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @peer_mgmt={0x75, 0x18, {0x1, 0x4, @val=0x1ff, @val=0x22, @val="aaae9ac0d9b08e8febff37dc2824c66e"}}, @prep={0x83, 0x25, @ext={{}, 0x7f, 0x3, @device_b, 0x200, @device_a, 0x6, 0x40, @device_a, 0x800}}, @mic={0x8c, 0x10, {0xa70, "f2d068aae550", @short="f6cb989d5cca9171"}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}, @NL80211_ATTR_IE={0x76, 0x2a, [@mesh_chsw={0x76, 0x6, {0x7, 0x20, 0x30, 0x4}}, @measure_req={0x26, 0x2c, {0x4, 0x5, 0x44, "edbdbe4affc81b893f78ef69043c8f9ba86907814c7a4a6dc3be13fb9cb9bb8633837ddf9f38a02139"}}, @ht={0x2d, 0x1a, {0x42, 0x0, 0x2, 0x0, {0x5, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x80, 0x3f}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x7}}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0x81, 0xcb, @device_a, 0x1, 0x7, 0x7}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e714862b732d"}]}, 0x144}, 0x1, 0x0, 0x0, 0xc004805}, 0x8001) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000340)={0x1000, 0x2, 0x8, {0x1, 0x81}, 0x1, 0x1}) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x20000801) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000500)={0xff, 0xaf, 0x0, 'queue1\x00', 0xfffffff8}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb0, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20}, 0x60000007) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r1, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000005}, 0x24020801) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a00), 0x30800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000a40)={0x1000, 0x81, 0xfffffffe, 0x2, 0x80, 0x1ff}) openat$cgroup(r0, &(0x7f0000000ac0)='syz0\x00', 0x200002, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000c40)={&(0x7f0000000b00), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xb4, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0xa0, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @private0, 0xfffffffc}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6190770c5785dfdf80f008bfc971c0f7b40dcd8a80ba4ffafe4441a6a67a65a4"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000016c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001680)={&(0x7f0000000f00)={0x76c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x704, 0x8, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "668ff32f6f183eb621e6d902281aacede240b37c3294a3df8a012e3c3fcdf9b5"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7c6e91d4bd657c7a0949a29381a670ebdc43e4bfab906bf6749184171d92be0"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "dd73fe49e425370fc4f4e15b0fd64e6f841dfb7d2bb81f51e8cefd08e95b5e3e"}]}, {0x4}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}, {0x5f8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3c0, 0x9, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4a3b09eb79f730ee2a1eaa3256045559191a88f44364669df19f2bdc314edec3"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @remote, 0x7}}, @WGPEER_A_ALLOWEDIPS={0x1cc, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0xc0}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a51cc0580f57e0a98af57a0a25ced32e17082704f1c5edb4341f9ba61f80a88e"}]}]}, @WGDEVICE_A_PEERS={0x4}]}, 0x76c}, 0x1, 0x0, 0x0, 0x40}, 0x14) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x34, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x10, 0x3f6, 0x100, 0x70bd2c, 0x25dfdbfd, "", ["", "", ""]}, 0x10}}, 0x40010) 12:50:57 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, 0xffffffffffffffff, 0x10000000) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x5) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0xea1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x74}}, 0x48040) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'netdevsim0\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x78}, 0x1, 0x0, 0x0, 0x40d0}, 0x44004) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom0\x00', 0x800, 0x0) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000340)={r2, 0x1, 0x8001}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2b, 0x21}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}]}, 0xc4}}, 0x40000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0xedb239c15f297882}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r5 = io_uring_setup(0x80000000, &(0x7f00000006c0)={0x0, 0x783b, 0x0, 0x0, 0x154, 0x0, r3}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1c, 0x11, r5, 0x10000000) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000740)={r2, 0x1, 0x5}) openat$cgroup_ro(r3, &(0x7f0000000780)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x20010, r6, 0x8000000) 12:50:57 executing program 2: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0x0, 0x1, 0x20, 0x3, 0x3}, 0x0, 0x1, 0x1d}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/175, 0xaf, 0x1, &(0x7f00000001c0)=""/90, 0x5a}, &(0x7f0000000280)=0x40) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x0, 0x7ff, 0x3f, 0x0, 0x6}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x1ff) r1 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x3, 0x30f2c0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0xa, 0x1, 0xf291}) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x3f7, 0x800, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}}, 0x54000) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = syz_open_dev$vcsn(&(0x7f0000000540), 0x7fff, 0x61689e628526bee0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0xd00, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0xc880) openat$cgroup_type(r1, &(0x7f0000000680), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000006c0)={{0xffffffffffffffff, 0x2, 0x8, 0x2, 0x4}, 0x867, 0x93, 0x3ff}) r3 = syz_open_dev$vcsn(&(0x7f0000000740), 0x800000, 0x402000) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8015}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x84, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd3}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x2000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, 0xffffffffffffffff, 0x8000000) inotify_add_watch(r2, &(0x7f0000000a00)='./file0\x00', 0x40000840) 12:50:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000025c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000026c0)={&(0x7f0000002600), 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x38, 0x0, 0x104, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfe}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}]}, 0x38}, 0x1, 0x0, 0x0, 0x3}, 0x4044011) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x20, 0x3fa, 0x200, 0x70bd27, 0x25dfdbfe, {0x1, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x8014}, 0x24004804) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x46}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000005}, 0x44800) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20080}, 0x4080) recvmsg(r0, &(0x7f0000005fc0)={&(0x7f0000002a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000002ac0)=""/190, 0xbe}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/200, 0xc8}, {&(0x7f0000003c80)=""/193, 0xc1}, {&(0x7f0000003d80)=""/233, 0xe9}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/4096, 0x1000}], 0x7, &(0x7f0000005f00)=""/170, 0xaa}, 0x2000) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000006180)={&(0x7f0000006000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006140)={&(0x7f0000006040)={0xc8, 0x0, 0xaf9e5f0e7a409fd6, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x6e3494bb87cc2228}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x7}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x40, 0x1c}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20040011}, 0x800) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000061c0), 0x80000, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000063c0)={&(0x7f0000006200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006380)={&(0x7f0000006240)={0x138, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1a, 0x14}}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x20040010) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000006400), 0x640100, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000006440)={0x5, 0x3, 0x1, 'queue1\x00', 0x1f}) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000006640)={&(0x7f0000006500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006600)={&(0x7f0000006540)={0xac, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xda7}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3c}}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xab}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004014}, 0x4008000) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000006b40)={&(0x7f0000006680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000006b00)={&(0x7f00000066c0)={0x434, 0x3f3, 0x30, 0x70bd2b, 0x25dfdbfb, {0x5, 0x2, 0x2, [0x1283, 0x8001, 0x0, 0xa42, 0x2f3a, 0x6, 0x6b, 0x6, 0x8000, 0xff, 0x1, 0x8001, 0xfffffffb, 0x3, 0x5, 0x7, 0x5, 0x81, 0x6, 0x1000, 0x6, 0x3, 0x8ae, 0x1f, 0x9, 0x7fffffff, 0x3fc1, 0xfff, 0x2, 0x6, 0x7fffffff, 0xffff, 0x0, 0x7, 0x1, 0x2, 0x6, 0x9, 0x1, 0x1f, 0x100, 0x1, 0xffff, 0x6, 0x9, 0x9, 0x5, 0x0, 0xffff7fff, 0x2, 0x3ce, 0x61, 0x10001, 0x9e6, 0x9, 0xb174, 0x7fff, 0xbcb, 0x2, 0x5, 0x80, 0xeb45, 0x8, 0x200], [0x66, 0x6, 0x6, 0x0, 0x3, 0x2, 0xf7, 0x2, 0xf34, 0xfff, 0x20, 0x40c, 0x6a85, 0x7, 0x1, 0x6, 0x7, 0x80000000, 0x8a, 0x101, 0x6fb, 0xfffffffc, 0x1, 0x80, 0x9, 0x1, 0x3ff, 0x81, 0xffffffff, 0x1f, 0x5, 0x7fffffff, 0x9, 0x2, 0x4, 0x200, 0x1, 0x1000, 0xfc0, 0x7fffffff, 0xb8, 0x5, 0x2, 0x4, 0x3, 0x100, 0x100, 0x5, 0x0, 0x92, 0x0, 0x8, 0x71bd, 0x9, 0x7ff, 0x5, 0xbb8d, 0x6, 0x9, 0x7, 0x8, 0x8, 0xfff, 0x3], [0x1, 0x80, 0x342a, 0x401, 0x80000001, 0xfff, 0x2, 0x200, 0x2, 0x34, 0x9, 0x4, 0x3, 0x1, 0x6, 0x1, 0x20000000, 0x101, 0x101, 0x401, 0x80, 0x5, 0x3, 0x400, 0x79c4, 0xfbe, 0x3, 0x8, 0x200, 0x7, 0x8, 0x3, 0x3, 0x2, 0x6ee5, 0x1, 0x400, 0x7ff, 0x1, 0x6, 0x5, 0x0, 0x9, 0x4, 0x4, 0xffff7fff, 0x2, 0x3, 0x9, 0xc8f1, 0x1, 0x5, 0x1, 0x5, 0x40, 0x8, 0x4, 0xf8, 0x2, 0x6, 0x9, 0x1, 0x0, 0x8], [0x3, 0x80, 0x4a, 0x0, 0x80000001, 0x6, 0x4, 0x7, 0x33, 0x6, 0x4a6426ab, 0x2, 0x100, 0x5, 0x7, 0xfffffc01, 0x20, 0xbac, 0xffffffc6, 0x1f, 0x2, 0x4, 0x2, 0xfffffffa, 0x7, 0x1f, 0x75, 0xb1, 0xf9ce, 0x6, 0x5, 0x9, 0x5bc, 0x6, 0x7, 0x80, 0xfffffe00, 0x81, 0x6, 0x0, 0x8000, 0xfa, 0x7, 0xec761bf9, 0x9a72, 0xbdf0, 0x9, 0x20, 0x8, 0x7fffffff, 0x2b, 0x4, 0x1000, 0xff, 0xd60, 0x69c, 0x4, 0x7, 0xf39f, 0x5, 0x8000, 0x8, 0x6, 0x60], 0x13, ['-]/@-),\x00', '&,\x00', 'nq\x00', '(/\x00', '*\x00']}, ["", "", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x40010}, 0x50000) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000006b80)) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000006d00)={&(0x7f0000006bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000006cc0)={&(0x7f0000006c00)={0x88, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a, 0x30}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x226}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004010}, 0x40010) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000006d40)={'wg1\x00', 0x0}) r6 = openat$cgroup_ro(r2, &(0x7f0000006dc0)='cpuset.effective_mems\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000006d80), r6) sendmsg$nl_xfrm(r2, &(0x7f0000007040)={&(0x7f0000006e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000007000)={&(0x7f0000006e40)=@newae={0x1a4, 0x1e, 0x400, 0x70bd25, 0x25dfdbfe, {{@in=@multicast2, 0x4d6, 0x2, 0x2b}, @in=@loopback, 0x6cb}, [@offload={0xc, 0x1c, {r5, 0x2}}, @sec_ctx={0x1a, 0x8, {0x16, 0x8, 0x1, 0x20, 0xe, "4e38456725bb32b3eeee086e39ba"}}, @lastused={0xc, 0xf, 0xe85}, @encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e24, @in=@dev={0xac, 0x14, 0x14, 0x23}}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd2c}}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd29}}, @tfcpad={0x8, 0x16, 0x7fffffff}, @algo_crypt={0xe9, 0x2, {{'xchacha12\x00'}, 0x508, "4c24746e72c6278dc09bd8c7793b9ed8e6c10de94fcccb2ed3e9da9bbfad750ba5abdd49c359dc3f752bf962b25015d8413a50f2d55a857b515cca061113b6290fa460515634c037137dcbe772a1e6cabd8c1e7dec9fb8f39a1967c3ad61607108091ace22f0e88f5dff88cc5fdf30ce5ebc44af2e959ff310659a5c619ca40192ef616fce083d243252294385d0b98c80fa7147f6835deebb2a251269bc77a53e"}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 12:50:57 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getsa={0x28, 0x12, 0x400, 0x70bd2d, 0x25dfdbfe, {@in6=@empty, 0x4d5, 0x2, 0x306a44024d1bc259}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40048010}, 0x40040) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x71}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x91) r1 = openat$cgroup_int(r0, &(0x7f0000000500)='memory.swap.high\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000540)=[r1, r0], 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x110, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0x64, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1a, 0x36, 0x5, 0x1, 0x2, 0x4, 0x36, 0x12, 0x18, 0x9, 0x5, 0x4, 0x12, 0x48, 0x9, 0x3, 0x6c, 0x3, 0x1, 0x1, 0x1b, 0xb]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x7}, {0x7}, {0x0, 0x8}, {0x5, 0x8}, {0x1, 0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x7, 0x8}, {0x6, 0xa}, {0x0, 0x6}, {0x2, 0x6}, {0x0, 0x8}, {0x7}, {0x5, 0x4}, {0x3, 0x15}, {0x5, 0xa}, {0x1}, {0x6, 0x6}, {0x4, 0x2}, {0x5, 0x1}, {0x3, 0x2}, {0x2, 0x8}, {0x0, 0x5}, {0x5}, {0x7, 0x8}, {0x1, 0x6}, {0x3, 0x9}, {0x2, 0x8}, {0x7, 0x9}, {0x1, 0x7}, {0x0, 0xa}, {0x0, 0x6}, {0x6, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x110}, 0x1, 0x0, 0x0, 0x40080}, 0x4800) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x6) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000007c0), 0x2000, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r3) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={&(0x7f0000000940), 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4de}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24000044}, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f0000000b40), 0x84040, 0x0) getuid() ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = getpid() ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000b80)={r4, 0x0, 0xfffffffc}) 12:50:58 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40015) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x302, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x881) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wg1\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd0, 0x12, 0x800, 0x70bd2c, 0x25dfdbfb, {0x1, 0x4, 0x9, 0x9, {0x4e20, 0x4e23, [0x4800, 0x6, 0x9, 0x6448], [0x101, 0x400, 0xfffffc01, 0x1c3], r7, [0xfffffff7, 0x2]}, 0x1, 0x2800}, [@INET_DIAG_REQ_BYTECODE={0x81, 0x1, "8161c1ce7fb512326883077b9c0f0c187e41d728cbcbb35ca2a5e7878af9f5bf6656deacaa9f082669adcd3f309c97eeac470071dda036e5e2fe128004d1555619756c0b3de81186e11f58d17998bb69fcbe24ad72b369931a46286b137ab0a688727255f6ef893568372f15d7ba36d59959522ad3c678c82ed95db318"}]}, 0xd0}}, 0x4000000) pselect6(0x40, &(0x7f0000000800)={0x10001, 0xfffffffffffffffb, 0x800000, 0x7d, 0xffffffffef269139, 0x7fffffff, 0x3, 0x7}, &(0x7f0000000840)={0x0, 0x8, 0x100000000, 0x3, 0x6, 0x38aa, 0x81, 0x8}, &(0x7f0000000880)={0x7fff, 0x1, 0xd1, 0x9, 0x280000000, 0xfffffffffffffff7, 0x6, 0x3}, &(0x7f00000008c0), &(0x7f0000000940)={&(0x7f0000000900)={[0x1]}, 0x8}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000980)=@gcm_128={{0x7}, "32345459e1815aaf", "02b71c1829b9a399ed5e76c7694db012", "3eb85b77", "dbb14c515b83810c"}, 0x28) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000040}, 0x800) 12:50:58 executing program 7: setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "d3d84662132702f3", "1a706d35f7613f8f5788a38e9a84def6", "85e7e876", "853b013eb95a7138"}, 0x28) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0xb0100) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004, 0x11, r0, 0x8000000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x4, 0x5, 0x53}) r1 = accept(r0, &(0x7f00000003c0)=@caif, &(0x7f0000000440)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/253, 0xfd, 0x1, &(0x7f0000000580)=""/202, 0xca}, &(0x7f00000006c0)=0x40) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000700)=[@mss={0x2, 0xfffffbff}, @window={0x3, 0x401, 0x20}, @mss={0x2, 0x7ff}, @window={0x3, 0x20, 0x3f}, @window={0x3, 0x101, 0x3}, @sack_perm], 0x6) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000740), 0x400200, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x0, 0x1, 0x20, @mcast2, @dev={0xfe, 0x80, '\x00', 0x39}, 0x40, 0x7800, 0x1, 0x9}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs2/custom1\x00', 0x801, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0xf7e) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, 0x0, 0x228, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x70}}, 0x200000c1) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000009c0), 0x400880) r4 = openat$cgroup(r0, &(0x7f0000000a00)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000a40)='cgroup.procs\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000a80)={0x1, 0x2, 0x9f, 0x3, 0x2}) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000ac0), 0x4) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x5) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000b00), 0x204000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f0000000b40)={{0x0, 0x1, 0x80, 0x1, 0x6}, 0x3, 0x6, 0xfffffffffffffffb}) [ 86.416796] audit: type=1400 audit(1729428658.063:7): avc: denied { execmem } for pid=279 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 87.737123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.748443] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.755776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.760683] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.765962] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.768317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.797517] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.799345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.805835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.807990] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.812119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.814705] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.816243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.818205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.819900] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.828357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.831772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.833955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.862498] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.871203] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.872874] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.876818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.878458] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.880625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.885823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.888586] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.888812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.892004] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.930666] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.931421] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.932278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.975350] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.978036] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.980194] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.985204] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.986907] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.988203] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.990934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.995937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.998106] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.999200] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.017069] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.017936] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.025778] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.026522] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.027314] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.031788] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.033647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.827774] Bluetooth: hci0: command tx timeout [ 89.891005] Bluetooth: hci1: command tx timeout [ 89.891773] Bluetooth: hci2: command tx timeout [ 90.043648] Bluetooth: hci4: command tx timeout [ 90.081701] Bluetooth: hci7: command tx timeout [ 90.082332] Bluetooth: hci3: command tx timeout [ 90.083288] Bluetooth: hci6: command tx timeout [ 90.083978] Bluetooth: hci5: command tx timeout [ 91.874019] Bluetooth: hci0: command tx timeout [ 91.936826] Bluetooth: hci1: command tx timeout [ 91.937387] Bluetooth: hci2: command tx timeout [ 92.064789] Bluetooth: hci4: command tx timeout [ 92.128891] Bluetooth: hci6: command tx timeout [ 92.129405] Bluetooth: hci5: command tx timeout [ 92.130057] Bluetooth: hci3: command tx timeout [ 92.130661] Bluetooth: hci7: command tx timeout [ 93.921654] Bluetooth: hci0: command tx timeout [ 93.984830] Bluetooth: hci1: command tx timeout [ 93.985341] Bluetooth: hci2: command tx timeout [ 94.112710] Bluetooth: hci4: command tx timeout [ 94.176745] Bluetooth: hci5: command tx timeout [ 94.177246] Bluetooth: hci6: command tx timeout [ 94.177955] Bluetooth: hci7: command tx timeout [ 94.178433] Bluetooth: hci3: command tx timeout [ 95.969630] Bluetooth: hci0: command tx timeout [ 96.034122] Bluetooth: hci2: command tx timeout [ 96.034868] Bluetooth: hci1: command tx timeout [ 96.160662] Bluetooth: hci4: command tx timeout [ 96.224684] Bluetooth: hci6: command tx timeout [ 96.225183] Bluetooth: hci3: command tx timeout [ 96.226018] Bluetooth: hci7: command tx timeout [ 96.226492] Bluetooth: hci5: command tx timeout [ 150.703219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.704893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.706307] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.709185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.714738] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.715976] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.769246] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.772009] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.773747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.775723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.780208] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.782092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.786788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.789117] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.790287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.797085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.798669] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.799876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.905155] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.910930] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.912463] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.916939] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.919930] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.921799] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 150.929209] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.939884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.941964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.946763] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.950464] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.952945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.953368] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.958249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.959023] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.960849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.961501] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.972309] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.989871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.995441] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.017069] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.021713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.027897] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.041017] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.092324] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.103822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.115930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.119884] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.130601] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.191244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.737937] Bluetooth: hci0: command tx timeout [ 152.865630] Bluetooth: hci2: command tx timeout [ 152.865756] Bluetooth: hci1: command tx timeout [ 153.057394] Bluetooth: hci3: command tx timeout [ 153.120828] Bluetooth: hci7: command tx timeout [ 153.121470] Bluetooth: hci5: command tx timeout [ 153.185607] Bluetooth: hci4: command tx timeout [ 153.248623] Bluetooth: hci6: command tx timeout [ 154.784619] Bluetooth: hci0: command tx timeout [ 154.912703] Bluetooth: hci2: command tx timeout [ 154.912827] Bluetooth: hci1: command tx timeout [ 155.104650] Bluetooth: hci3: command tx timeout [ 155.168669] Bluetooth: hci7: command tx timeout [ 155.171579] Bluetooth: hci5: command tx timeout [ 155.233733] Bluetooth: hci4: command tx timeout [ 155.298643] Bluetooth: hci6: command tx timeout [ 156.835697] Bluetooth: hci0: command tx timeout [ 156.960661] Bluetooth: hci1: command tx timeout [ 156.961263] Bluetooth: hci2: command tx timeout [ 157.152779] Bluetooth: hci3: command tx timeout [ 157.217614] Bluetooth: hci5: command tx timeout [ 157.217643] Bluetooth: hci7: command tx timeout [ 157.280744] Bluetooth: hci4: command tx timeout [ 157.344726] Bluetooth: hci6: command tx timeout [ 158.880626] Bluetooth: hci0: command tx timeout [ 159.008708] Bluetooth: hci2: command tx timeout [ 159.008736] Bluetooth: hci1: command tx timeout [ 159.200796] Bluetooth: hci3: command tx timeout [ 159.264879] Bluetooth: hci5: command tx timeout [ 159.265888] Bluetooth: hci7: command tx timeout [ 159.329745] Bluetooth: hci4: command tx timeout [ 159.393607] Bluetooth: hci6: command tx timeout [ 213.272180] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.276965] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.278236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.281237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.282062] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.283408] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.295995] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.296908] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.299440] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.300347] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.305032] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.306015] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.371386] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.381844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.386110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.386969] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.403210] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.404625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.407335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.411095] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.413398] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.414336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.416393] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.418062] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.446958] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.449979] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.458918] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.464984] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.470012] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.474786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.516980] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.523142] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.524880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.526274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.529109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.530256] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.531981] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.533267] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.534202] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.556276] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.559107] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.560583] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.564030] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.566172] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.567589] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.568979] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.591593] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.594000] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.392655] Bluetooth: hci0: command tx timeout [ 215.392723] Bluetooth: hci1: command tx timeout [ 215.457390] Bluetooth: hci3: command tx timeout [ 215.457473] Bluetooth: hci2: command tx timeout [ 215.584873] Bluetooth: hci5: command tx timeout [ 215.585905] Bluetooth: hci4: command tx timeout [ 215.713673] Bluetooth: hci7: command tx timeout [ 215.713699] Bluetooth: hci6: command tx timeout [ 217.440676] Bluetooth: hci0: command tx timeout [ 217.440836] Bluetooth: hci1: command tx timeout [ 217.504676] Bluetooth: hci2: command tx timeout [ 217.504734] Bluetooth: hci3: command tx timeout [ 217.632775] Bluetooth: hci5: command tx timeout [ 217.632824] Bluetooth: hci4: command tx timeout [ 217.762722] Bluetooth: hci6: command tx timeout [ 217.763035] Bluetooth: hci7: command tx timeout [ 219.488636] Bluetooth: hci1: command tx timeout [ 219.488711] Bluetooth: hci0: command tx timeout [ 219.553124] Bluetooth: hci3: command tx timeout [ 219.554744] Bluetooth: hci2: command tx timeout [ 219.680620] Bluetooth: hci5: command tx timeout [ 219.681111] Bluetooth: hci4: command tx timeout [ 219.808608] Bluetooth: hci7: command tx timeout [ 219.809612] Bluetooth: hci6: command tx timeout [ 221.536712] Bluetooth: hci1: command tx timeout [ 221.537621] Bluetooth: hci0: command tx timeout [ 221.601642] Bluetooth: hci2: command tx timeout [ 221.602118] Bluetooth: hci3: command tx timeout [ 221.729570] Bluetooth: hci4: command tx timeout [ 221.730097] Bluetooth: hci5: command tx timeout [ 221.857762] Bluetooth: hci6: command tx timeout [ 221.858291] Bluetooth: hci7: command tx timeout [ 275.462002] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.463865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.466177] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.468748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.470462] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.471709] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.568021] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.571983] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.573109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.577842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.580193] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.582676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.625410] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.629451] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.634869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.654064] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.656899] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.660969] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.703034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.718630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.725785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.731354] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.738773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.740588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.766777] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.768065] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.775122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.776384] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.781800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.783088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.792805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.803887] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.806067] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.807173] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.821815] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.824420] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.147887] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.153402] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.169561] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.193074] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.205748] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.238134] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.241321] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.252801] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.261234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.287766] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.307129] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.310779] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.600674] Bluetooth: hci0: command tx timeout [ 277.664623] Bluetooth: hci1: command tx timeout [ 277.728602] Bluetooth: hci2: command tx timeout [ 277.793674] Bluetooth: hci3: command tx timeout [ 277.856783] Bluetooth: hci4: command tx timeout [ 277.985666] Bluetooth: hci5: command tx timeout [ 278.369775] Bluetooth: hci7: command tx timeout [ 278.370881] Bluetooth: hci6: command tx timeout [ 279.649657] Bluetooth: hci0: command tx timeout [ 279.713636] Bluetooth: hci1: command tx timeout [ 279.778633] Bluetooth: hci2: command tx timeout [ 279.842090] Bluetooth: hci3: command tx timeout [ 279.905836] Bluetooth: hci4: command tx timeout [ 280.032681] Bluetooth: hci5: command tx timeout [ 280.416641] Bluetooth: hci7: command tx timeout [ 280.417180] Bluetooth: hci6: command tx timeout [ 281.697570] Bluetooth: hci0: command tx timeout [ 281.762694] Bluetooth: hci1: command tx timeout [ 281.825560] Bluetooth: hci2: command tx timeout [ 281.888595] Bluetooth: hci3: command tx timeout [ 281.953652] Bluetooth: hci4: command tx timeout [ 282.080649] Bluetooth: hci5: command tx timeout [ 282.486340] Bluetooth: hci6: command tx timeout [ 282.487232] Bluetooth: hci7: command tx timeout [ 283.745584] Bluetooth: hci0: command tx timeout [ 283.810761] Bluetooth: hci1: command tx timeout [ 283.873573] Bluetooth: hci2: command tx timeout [ 283.936665] Bluetooth: hci3: command tx timeout [ 284.000612] Bluetooth: hci4: command tx timeout [ 284.131861] Bluetooth: hci5: command tx timeout [ 284.512851] Bluetooth: hci7: command tx timeout [ 284.513380] Bluetooth: hci6: command tx timeout [ 337.924435] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.936281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.953763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.959957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.962688] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.963835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.023037] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.025095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.026937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.029440] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.031167] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.032592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.165159] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.184862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.188677] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.194944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.197373] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.199833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.205265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.234801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.236039] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.242841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.244362] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.247083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.248634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.258876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.261734] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.262827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.266802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.267913] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.283317] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.285267] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.286962] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.289848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.292084] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.294988] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.297803] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.299751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.299809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.301691] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.309933] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.312836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.318865] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.342988] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.344352] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.345418] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.365030] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.387242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.000590] Bluetooth: hci0: command tx timeout [ 340.064555] Bluetooth: hci1: command tx timeout [ 340.320665] Bluetooth: hci7: command tx timeout [ 340.322343] Bluetooth: hci2: command tx timeout [ 340.323090] Bluetooth: hci3: command tx timeout [ 340.384895] Bluetooth: hci5: command tx timeout [ 340.452030] Bluetooth: hci6: command tx timeout [ 340.513765] Bluetooth: hci4: command tx timeout [ 342.048769] Bluetooth: hci0: command tx timeout [ 342.112736] Bluetooth: hci1: command tx timeout [ 342.369562] Bluetooth: hci7: command tx timeout [ 342.370079] Bluetooth: hci3: command tx timeout [ 342.370614] Bluetooth: hci2: command tx timeout [ 342.432727] Bluetooth: hci5: command tx timeout [ 342.497518] Bluetooth: hci6: command tx timeout [ 342.568516] Bluetooth: hci4: command tx timeout [ 344.096879] Bluetooth: hci0: command tx timeout [ 344.160764] Bluetooth: hci1: command tx timeout [ 344.416675] Bluetooth: hci3: command tx timeout [ 344.418122] Bluetooth: hci2: command tx timeout [ 344.420886] Bluetooth: hci7: command tx timeout [ 344.480546] Bluetooth: hci5: command tx timeout [ 344.544774] Bluetooth: hci6: command tx timeout [ 344.608675] Bluetooth: hci4: command tx timeout [ 346.144578] Bluetooth: hci0: command tx timeout [ 346.208845] Bluetooth: hci1: command tx timeout [ 346.464643] Bluetooth: hci2: command tx timeout [ 346.466040] Bluetooth: hci7: command tx timeout [ 346.467329] Bluetooth: hci3: command tx timeout [ 346.555591] Bluetooth: hci5: command tx timeout [ 346.592650] Bluetooth: hci6: command tx timeout [ 346.656567] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 12:56:08 Registers: info registers vcpu 0 RAX=00007fff9036d450 RBX=0000000000000000 RCX=0000000000000021 RDX=00007fff9036cfe0 RSI=0000000000000000 RDI=00007fff9036cd80 RBP=00007fff9036d450 RSP=00007fff9036cd38 R8 =00007fae78bff448 R9 =00000000effffef5 R10=0000000070000022 R11=0000000000000246 R12=00007fae790d4c58 R13=00007fff9036d020 R14=00007fae79108510 R15=00007fae78e258c6 RIP=00007fae7912fecd RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fae78bff438 CR3=00000000242e2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff000000000000000000000000000000 XMM01=24242424242424242424242424242424 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=00000000000000000000000000000000 XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88806cf00000 RCX=ffffffff812ff8be RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806cf36380 RBP=0000000000000001 RSP=ffff888035607608 R8 =0000000000000000 R9 =fffffbfff0c7e4e9 R10=ffffffff863f274f R11=00000000000c2f81 R12=ffffffff85ce51c0 R13=ffffffff818419dd R14=000000000003a6cc R15=ffffffff818e5a3f RIP=ffffffff81390f36 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2700000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffde3d01d20 CR3=0000000023daa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000