[ 91.595280] audit: type=1400 audit(1750426041.457:6): avc: denied { checkpoint_restore } for pid=222 comm="agetty" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:19500' (ECDSA) to the list of known hosts. 2025/06/20 13:27:28 fuzzer started 2025/06/20 13:27:28 dialing manager at localhost:40967 syzkaller login: [ 98.876248] cgroup: Unknown subsys name 'net' [ 98.969191] cgroup: Unknown subsys name 'cpuset' [ 98.998997] cgroup: Unknown subsys name 'rlimit' 2025/06/20 13:27:49 syscalls: 201 2025/06/20 13:27:49 code coverage: enabled 2025/06/20 13:27:49 comparison tracing: enabled 2025/06/20 13:27:49 extra coverage: enabled 2025/06/20 13:27:49 setuid sandbox: enabled 2025/06/20 13:27:49 namespace sandbox: enabled 2025/06/20 13:27:49 Android sandbox: enabled 2025/06/20 13:27:49 fault injection: enabled 2025/06/20 13:27:49 leak checking: enabled 2025/06/20 13:27:49 net packet injection: enabled 2025/06/20 13:27:49 net device setup: enabled 2025/06/20 13:27:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/20 13:27:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/20 13:27:49 USB emulation: enabled 2025/06/20 13:27:49 hci packet injection: enabled 2025/06/20 13:27:49 wifi device emulation: enabled 2025/06/20 13:27:49 802.15.4 emulation: enabled 2025/06/20 13:27:49 fetching corpus: 0, signal 0/0 (executing program) 2025/06/20 13:27:51 starting 8 fuzzer processes 13:27:51 executing program 0: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "4e11d120478fd12e", "a332ea1821de86a7f99e2b5ad3bf3f60", "bd1ae36e", "1bc9aaba80d62076"}, 0x28) r0 = socket(0x28, 0x6, 0x10000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @sack_perm, @sack_perm, @mss={0x2, 0x1}, @timestamp], 0x5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x6, 0x400}, @sack_perm, @timestamp], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000180)=0x101, 0x4) r2 = socket(0x27, 0x800, 0x7ff) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000280), &(0x7f00000002c0)) r3 = accept(r0, &(0x7f00000003c0)=@ethernet={0x0, @multicast}, &(0x7f0000000440)=0x80) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000480)=@ccm_128={{0x303}, "71cc2441bf5e0ffd", "77ce9ccfe93b089f2e7074e1c131ff16", "60e9380b", "e08b88472a54914e"}, 0x28) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000004c0)=0x4, 0x4) r4 = accept(r3, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000580)=0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000005c0)=@gcm_128={{0x304}, "2445a4dfaeb1ba42", "29515dcbb07b09020eb5a96e0b99e1e4", ':*\b6', "482ef0a1c2aac379"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x2, 0x4) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000640)=0x7, 0x4) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f00000006c0)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x4}, @ethernet={0x306, @remote}, @phonet={0x23, 0x0, 0x3, 0x9}, 0xf000, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000680), 0x3, 0x1, 0x200}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x24, 0x9, 0x4, @remote, @loopback, 0x8, 0x1, 0x336, 0x8da}}) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x2604c014) socketpair(0x27, 0x80000, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000940)=[@sack_perm, @mss={0x2, 0x6}, @window={0x3, 0x8, 0xd53a}, @timestamp, @timestamp, @timestamp, @window={0x3, 0x8, 0x1}, @timestamp, @timestamp, @sack_perm], 0xa) 13:27:51 executing program 3: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x1000) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) getpeername(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000180)=0x80) accept4(r1, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000240)=0x80, 0x180000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = eventfd(0x6) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socketpair(0x11, 0x1, 0x1000, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0x100, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000804}, 0x4044004) r6 = socket(0x1e, 0x6, 0x4) accept$packet(r6, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d40)=0x14) getsockname(r5, &(0x7f0000000d80)=@sco={0x1f, @fixed}, &(0x7f0000000e00)=0x80) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) accept$packet(r6, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000e80)=0x14) lstat(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x6b5700, 0x2, &(0x7f0000001040)=[{&(0x7f0000000f40)="c0b09e587fda45f2e38b58ae240d", 0xe}, {&(0x7f0000000f80)="55e310619eae8a201fe5e3fc80081bbb8091290b6043102cdd1b52895069d7a1c9b3fb4ad787fd4b409cffe30b63403a0e69b922546268708672404cae7f6c5eb515bc36997fa7c1f7d5f1a4a923d705f4917b1fb351653b760e41dcea27c7df19eafedb977dbd78cee6b24900d021604bdf37e427cce2b8c3fbe315ba17e64411807b758c5a6e", 0x87, 0x401}], 0x1002, &(0x7f0000001140)={[{@session={'session', 0x3d, 0x57}}, {@uid={'uid', 0x3d, r7}}, {@cruft}, {@nojoliet}, {@check_strict}, {@utf8}], [{@fsmagic={'fsmagic', 0x3d, 0x8000}}, {@obj_role={'obj_role', 0x3d, '&&@[---//%'}}, {@obj_role={'obj_role', 0x3d, ':)+!/-.[$'}}, {@obj_user={'obj_user', 0x3d, 'sip\x00'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '\\'}}]}) lstat(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)) getsockopt$inet6_tcp_buf(r6, 0x6, 0xe, &(0x7f0000001300)=""/217, &(0x7f0000001400)=0xd9) 13:27:51 executing program 1: keyctl$unlink(0x9, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='sysv\x00', 0x1) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x5, 0x884800) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) syz_open_dev$hidraw(&(0x7f0000000100), 0x20, 0x408480) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000180)={0x0, 0x9, 0x3}) keyctl$negate(0xd, 0x0, 0x7162, 0xfffffffffffffffb) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fspick(r4, &(0x7f00000005c0)='./file1\x00', 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x89f8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r6 = accept(r5, &(0x7f0000000700)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000780)=0x80) syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r5) getpeername(r2, &(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000880)=0x80) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x4800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xcc, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_conf_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:auditd_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8040014}, 0x8000) 13:27:51 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'J+]%--/(/'}, {0x20, '$*-,/'}], 0xa, "27c7d6d2c9a370722ede4777f760730b07606537b9c0140aa97ca795877d3c85ea1b9a3885fa1e33b70a0c6c49b6448dee5cd499ae15ed57bdc6b17d71820c68a271994ed210b6243d00ed97599068768fdbd8c06e3f"}, 0x71) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000080)={0x9, 0x6, {0x6, @usage=0xfffffffffffffffc, 0x0, 0x3, 0x6, 0xfd, 0x8, 0x6, 0x40, @struct={0x4, 0xe83}, 0x1, 0x8e0, [0x1, 0x100000000, 0x2, 0x1, 0x5, 0xffff]}, {0x1, @usage=0x1, 0x0, 0x2, 0x3f, 0x6, 0x7fffffff, 0x48b8, 0x21, @struct={0x10001, 0x1}, 0x3, 0x6, [0xffff, 0x7, 0x1, 0x9135, 0x7fffffff, 0xfffffffffffeffff]}, {0x9, @usage=0x3d4, 0x0, 0x3, 0x20000, 0x4, 0xcb2, 0x8, 0x44, @struct={0x501, 0x800}, 0x5, 0x7, [0x6, 0x100, 0x0, 0x5, 0xc6]}, {0xfff, 0x3c12, 0xffffffffffffff08}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000480)={r0, 0x4, 0x1, [0xfff, 0x8, 0x1ff, 0x7f, 0x10000], [0x73, 0x6, 0x1, 0x9, 0x81, 0x400, 0x200, 0x1000, 0xd1e, 0x80000000, 0x8000000000, 0x100, 0x3ff, 0x9b54, 0x2, 0x7a, 0x1, 0x8001, 0x1925, 0x4, 0xdc, 0x4000000000, 0x7ff, 0x4, 0x0, 0xffff, 0x0, 0x939, 0x100, 0x4, 0x7f, 0x8, 0x644, 0xffffffffffffff59, 0x40, 0x7, 0x200, 0x2, 0x91d, 0x7, 0x80000000, 0x8bc3, 0x8, 0x0, 0x800, 0x3, 0x5, 0xb4, 0xfe5a, 0x1, 0x4, 0x8000, 0x4, 0x9, 0x7fff, 0x2, 0x3, 0x1, 0xc641, 0x0, 0xff, 0x5, 0x9, 0x100, 0x1, 0x8, 0x1, 0xffffffff, 0x0, 0x100000001, 0x1, 0xb10, 0x3, 0x1, 0x5, 0x1d90, 0x8, 0x200, 0x6, 0x26, 0x4, 0xee9, 0x2, 0x2, 0xfffffffffffffff7, 0x7ff, 0x80, 0x0, 0x7b, 0x6, 0x40, 0xfff, 0x4, 0xff, 0xeb7, 0x24, 0x2, 0x2, 0xd04, 0x3ff, 0x5, 0x1, 0x6, 0x80000000000000, 0x0, 0x0, 0xcb32, 0x7fff, 0x80000000, 0x101, 0x0, 0x4, 0x6, 0xfffffffffffffff7, 0x7, 0x6, 0x5df9, 0x0, 0x9, 0x8000, 0xffffffff]}) r1 = syz_open_dev$vcsn(&(0x7f00000008c0), 0x20e, 0x740) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000840}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x6c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008009}, 0x4008851) fspick(r1, &(0x7f0000000a40)='./file0\x00', 0x0) connect$packet(r1, &(0x7f0000000a80)={0x11, 0xd, 0x0, 0x1, 0xfd, 0x6, @remote}, 0x14) r2 = syz_open_dev$vcsn(&(0x7f0000000ac0), 0x3, 0x400) r3 = accept4(0xffffffffffffffff, &(0x7f0000000bc0)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000c40)=0x80, 0x80800) getsockname$unix(r3, &(0x7f0000000c80)=@abs, &(0x7f0000000d00)=0x6e) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d80)=0x14, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r4, @in_args={0x1}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40), 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000000ec0)='.\x00', &(0x7f0000000f00), 0x2000) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) bind$unix(r3, &(0x7f0000001080)=@file={0x1, './file0\x00'}, 0x6e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001100)={0x0, 0xfd, 0x1, [0x20, 0x80, 0x2adc, 0x2, 0x1f], [0x2, 0x5, 0x4355a7d0, 0x25c, 0xc1b, 0x9, 0x1, 0x2, 0x6, 0x6, 0xd2, 0x2, 0x1, 0x67, 0xfffffffffffffff7, 0x5, 0x2, 0x20ba, 0x9, 0x3ff, 0x10001, 0x9, 0x3655, 0x5, 0x8000, 0x629, 0x5, 0x3, 0xfff, 0x7, 0x8, 0x8, 0x9, 0x7, 0x2, 0xd41a, 0x401, 0x4, 0x3, 0x6, 0x8, 0x4, 0x7, 0x3, 0xc9, 0x100, 0x1, 0x9, 0x4, 0x200, 0x9dd, 0x18, 0x80000001, 0x15, 0x3f, 0x80000001, 0xfffffffffffff179, 0x5, 0xe0, 0x7fff, 0x4, 0x2284, 0x6, 0x2, 0x1ff, 0x8, 0x9, 0x201, 0xa23, 0xaae, 0x3f, 0x7, 0x7ff, 0x0, 0xfff, 0x7fffffff, 0x2f5, 0x7, 0x1, 0x80000000, 0x100, 0x1, 0x6, 0xfffffffffffffff9, 0x8dd, 0x3, 0x770, 0x200, 0x568, 0x6, 0xffffffffffffffff, 0xcd7, 0x3, 0x101, 0x6, 0x10001, 0x5, 0x1f, 0x3, 0x200800000000000, 0xbd9, 0x7fffffff, 0xfffffffffffffffd, 0x7, 0x4, 0x9, 0x1, 0x4, 0x1, 0x101, 0x401, 0x5, 0x7, 0xb8f, 0x4bf, 0x1, 0x0, 0x101, 0x101, 0x0, 0x4]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000001540)={r7, 0x9, 0x1ff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40881}, 0x20004001) 13:27:51 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = accept(r0, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000080)=0x80) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r2, 0x29, 0x2, 0xff, 0x400, 0x34, @dev={0xfe, 0x80, '\x00', 0x3d}, @remote, 0x7810, 0x700, 0x2a9, 0x80ec}}) r3 = accept$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) getpeername$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) r4 = accept$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) getsockopt$packet_buf(r4, 0x107, 0x6, &(0x7f0000000500)=""/48, &(0x7f0000000540)=0x30) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000005c0)={0x0, @tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x1}}, @nfc={0x27, 0x1, 0x1, 0x2}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580)='vxcan1\x00', 0x6, 0x9}) getpeername(r4, &(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f00000006c0)=0x80) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000740)=0x2, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000780)={{0x1, 0x1, 0x18, r3, @in_args={0x4}}, './file0/file0\x00'}) getsockname$packet(r6, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x14) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000840)=0xfffffffffffffffd) getsockname(r6, &(0x7f0000000880)=@sco, &(0x7f0000000900)=0x80) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000940)=0x1, 0x4) accept$packet(r1, 0x0, &(0x7f0000000980)) r7 = socket$packet(0x11, 0x3, 0x300) getpeername(r7, &(0x7f00000009c0)=@ieee802154={0x24, @short}, &(0x7f0000000a40)=0x80) [ 121.513144] audit: type=1400 audit(1750426071.375:7): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:27:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x9, 0x541e, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0xffffffff, @bearer=@l2={'ib', 0x3a, 'macvlan0\x00'}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x931}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x804) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb0, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x727bfd56}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0xb0}}, 0xc0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xc8c0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000b80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x88c0}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r4, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40580c1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x2000c005) socketpair(0x35, 0x8000a, 0x6, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x68, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x101, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8001) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x17, 0x14}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x9}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4041}, 0x8001) 13:27:51 executing program 6: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @dev}, &(0x7f0000000080)=0x80, 0xc0000) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x7a, 0x1, 0x40, 0x6, @mcast1, @dev={0xfe, 0x80, '\x00', 0x31}, 0x20, 0x8, 0x0, 0x5679}}) accept4(r0, &(0x7f0000000180)=@can={0x1d, 0x0}, &(0x7f0000000200)=0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', r1, 0x4, 0x5, 0x7f, 0x4, 0x50, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8, 0x8000, 0x1}}) r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x1, 0x404000) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={0x0, @phonet={0x23, 0xf8, 0xb1, 0xf8}, @nfc={0x27, 0x0, 0x2, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x8000}, 0xa98, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000340)='batadv_slave_0\x00', 0x9, 0x200, 0x6e7e}) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$RTC_PIE_ON(r3, 0x7005) r4 = syz_open_dev$vcsn(&(0x7f0000000540), 0x10000, 0x240) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000580)=0xff, 0x4) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000005c0)={@empty, @multicast1}, &(0x7f0000000600)=0xc) r5 = accept4(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000006c0)=0x80, 0x80800) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000740)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, @xdp={0x2c, 0x0, r1, 0x31}, @in={0x2, 0x4e20, @empty}, 0xaa1, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000700)='vlan0\x00', 0x5, 0x1000, 0x8}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x128, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x49a72858}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x81}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x128}, 0x1, 0x0, 0x0, 0xecff7dfdbf2b3454}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'sit0\x00', r2, 0x2f, 0x7, 0xc0, 0x0, 0x1, @remote, @remote, 0x8000, 0x8000, 0x4, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'syztnl0\x00', r7, 0x6, 0x0, 0x2, 0x43, 0x2a, @private1, @mcast2, 0x10, 0x80, 0xfffffffd, 0x8}}) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000b40), 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4044041) getpeername$packet(r5, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000cc0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000d80)={'ip6_vti0\x00', &(0x7f0000000d00)={'syztnl2\x00', r8, 0x2b, 0x80, 0x1, 0x8, 0x48, @private0, @loopback, 0x1, 0x7, 0x7, 0x99}}) 13:27:51 executing program 7: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0xff, 0x4, 0x20, @private2, @private1, 0x8, 0x8, 0x1, 0x40}}) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) getsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', r1, 0x29, 0x8, 0x7f, 0x5, 0x2, @remote, @loopback, 0x1, 0x80, 0x7, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x7, 0x5, 0x4, @private2, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x8000, 0x1, 0x8, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000003c0)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000380)="62142e1576b3c3da4f858a9e3435d988d8efa4d4bf62fdeb5501386d45359340"}) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000400)=@gcm_256={{0x303}, "cba6b2b2de323728", "7b4ce4cc3f09df2dfb23ebfdca10e15285a3976ef15b82fe6059d2a42ea65f54", "23c626ed", "39a06c6fb7ec28c1"}, 0x38) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000640)={&(0x7f0000000440), 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x10c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x25}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd59}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2ba}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40090}, 0x1) socketpair(0x22, 0x3, 0x20, &(0x7f0000000680)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0xc081}, 0x20000814) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x20040090) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000980)=0x1, 0x4) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000009c0)={@multicast1, @multicast2}, &(0x7f0000000a00)=0xc) symlink(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='./file0\x00') perf_event_open(&(0x7f0000000ac0)={0x4, 0x80, 0x20, 0x11, 0x71, 0x1c, 0x0, 0x2, 0x218, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0x5, 0xfffffffffffffffe}, 0x10478, 0xbf, 0x9df, 0x2, 0xe00f, 0xd24c, 0x2, 0x0, 0x2, 0x0, 0x20}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) [ 122.923102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.925572] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.929128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.930416] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.933566] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.939680] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.941377] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.942799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.943913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.947445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.947616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.951481] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.954594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.958448] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.960478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.992997] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.001550] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.003315] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.018109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.019979] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.078647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.085179] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.090275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.095156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.096329] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.099353] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.102730] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 123.104568] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 123.105944] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.107396] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.109007] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.116112] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 123.123519] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 123.124090] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.126476] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.126616] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 123.127506] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.131186] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.137662] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.139084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.010550] Bluetooth: hci2: command tx timeout [ 125.011273] Bluetooth: hci1: command tx timeout [ 125.072897] Bluetooth: hci3: command tx timeout [ 125.073722] Bluetooth: hci0: command tx timeout [ 125.201127] Bluetooth: hci4: command tx timeout [ 125.202000] Bluetooth: hci6: command tx timeout [ 125.202618] Bluetooth: hci5: command tx timeout [ 125.203996] Bluetooth: hci7: command tx timeout [ 127.056983] Bluetooth: hci1: command tx timeout [ 127.057543] Bluetooth: hci2: command tx timeout [ 127.123047] Bluetooth: hci0: command tx timeout [ 127.123646] Bluetooth: hci3: command tx timeout [ 127.248957] Bluetooth: hci5: command tx timeout [ 127.249533] Bluetooth: hci7: command tx timeout [ 127.250418] Bluetooth: hci6: command tx timeout [ 127.251028] Bluetooth: hci4: command tx timeout [ 129.104952] Bluetooth: hci1: command tx timeout [ 129.105559] Bluetooth: hci2: command tx timeout [ 129.169223] Bluetooth: hci3: command tx timeout [ 129.169936] Bluetooth: hci0: command tx timeout [ 129.298204] Bluetooth: hci6: command tx timeout [ 129.299130] Bluetooth: hci7: command tx timeout [ 129.299625] Bluetooth: hci5: command tx timeout [ 129.300155] Bluetooth: hci4: command tx timeout [ 131.152881] Bluetooth: hci2: command tx timeout [ 131.153449] Bluetooth: hci1: command tx timeout [ 131.217137] Bluetooth: hci0: command tx timeout [ 131.217692] Bluetooth: hci3: command tx timeout [ 131.345161] Bluetooth: hci5: command tx timeout [ 131.345742] Bluetooth: hci4: command tx timeout [ 131.346512] Bluetooth: hci7: command tx timeout [ 131.347334] Bluetooth: hci6: command tx timeout [ 185.189605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.197514] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.199535] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.210661] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.220960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.453744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.460761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.464412] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.466693] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.470472] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.472682] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.491910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.494682] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.502497] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.505289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.527703] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.533471] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.538197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.545107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.549246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.556883] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.560119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.564984] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 185.567562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 185.568238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 185.570371] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 185.573720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.587502] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 185.588932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 185.591680] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 185.600934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 185.623324] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.632723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.634398] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 185.638042] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.663137] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 185.665316] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 185.681316] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 185.693670] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 185.700132] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 187.281206] Bluetooth: hci0: command tx timeout [ 187.600950] Bluetooth: hci2: command tx timeout [ 187.664973] Bluetooth: hci1: command tx timeout [ 187.665951] Bluetooth: hci6: command tx timeout [ 187.729951] Bluetooth: hci5: command tx timeout [ 187.792874] Bluetooth: hci3: command tx timeout [ 187.793234] Bluetooth: hci4: command tx timeout [ 187.920898] Bluetooth: hci7: command tx timeout [ 189.329872] Bluetooth: hci0: command tx timeout [ 189.649838] Bluetooth: hci2: command tx timeout [ 189.712967] Bluetooth: hci1: command tx timeout [ 189.713846] Bluetooth: hci6: command tx timeout [ 189.778990] Bluetooth: hci5: command tx timeout [ 189.841337] Bluetooth: hci4: command tx timeout [ 189.841825] Bluetooth: hci3: command tx timeout [ 189.968910] Bluetooth: hci7: command tx timeout [ 191.376830] Bluetooth: hci0: command tx timeout [ 191.696833] Bluetooth: hci2: command tx timeout [ 191.760975] Bluetooth: hci1: command tx timeout [ 191.761458] Bluetooth: hci6: command tx timeout [ 191.826788] Bluetooth: hci5: command tx timeout [ 191.889125] Bluetooth: hci4: command tx timeout [ 191.889141] Bluetooth: hci3: command tx timeout [ 192.016850] Bluetooth: hci7: command tx timeout [ 193.427816] Bluetooth: hci0: command tx timeout [ 193.745888] Bluetooth: hci2: command tx timeout [ 193.809882] Bluetooth: hci6: command tx timeout [ 193.809896] Bluetooth: hci1: command tx timeout [ 193.876018] Bluetooth: hci5: command tx timeout [ 193.936864] Bluetooth: hci3: command tx timeout [ 193.938150] Bluetooth: hci4: command tx timeout [ 194.065243] Bluetooth: hci7: command tx timeout [ 247.780277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.784192] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.789276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.796981] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.806209] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.861748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.864623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.867676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.876715] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.881286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.911477] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.917042] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.921236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.930740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.943746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.336283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.349193] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.371056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.388571] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.409063] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.482673] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.506354] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.518706] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.525584] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.540959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.562711] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.567114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.579604] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 248.581979] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.588288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.595155] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.612275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.612507] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 248.615585] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.627651] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 248.637810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 248.669628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.675102] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.685462] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 248.688554] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 249.873886] Bluetooth: hci0: command tx timeout [ 249.937933] Bluetooth: hci1: command tx timeout [ 250.000863] Bluetooth: hci2: command tx timeout [ 250.448954] Bluetooth: hci3: command tx timeout [ 250.704978] Bluetooth: hci4: command tx timeout [ 250.768996] Bluetooth: hci7: command tx timeout [ 250.769016] Bluetooth: hci6: command tx timeout [ 250.833371] Bluetooth: hci5: command tx timeout [ 251.921999] Bluetooth: hci0: command tx timeout [ 251.985446] Bluetooth: hci1: command tx timeout [ 252.048898] Bluetooth: hci2: command tx timeout [ 252.497128] Bluetooth: hci3: command tx timeout [ 252.752979] Bluetooth: hci4: command tx timeout [ 252.817550] Bluetooth: hci6: command tx timeout [ 252.818552] Bluetooth: hci7: command tx timeout [ 252.881943] Bluetooth: hci5: command tx timeout [ 253.970001] Bluetooth: hci0: command tx timeout [ 254.033827] Bluetooth: hci1: command tx timeout [ 254.096955] Bluetooth: hci2: command tx timeout [ 254.546374] Bluetooth: hci3: command tx timeout [ 254.802172] Bluetooth: hci4: command tx timeout [ 254.864852] Bluetooth: hci7: command tx timeout [ 254.866349] Bluetooth: hci6: command tx timeout [ 254.929181] Bluetooth: hci5: command tx timeout [ 256.018805] Bluetooth: hci0: command tx timeout [ 256.080841] Bluetooth: hci1: command tx timeout [ 256.145947] Bluetooth: hci2: command tx timeout [ 256.592861] Bluetooth: hci3: command tx timeout [ 256.850830] Bluetooth: hci4: command tx timeout [ 256.914017] Bluetooth: hci6: command tx timeout [ 256.914125] Bluetooth: hci7: command tx timeout [ 256.978324] Bluetooth: hci5: command tx timeout [ 310.499439] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.509511] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.514317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.521690] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.527706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.684973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.688842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.692998] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.699537] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.704720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.851366] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.855298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.858074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.864610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.872347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.905254] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.922558] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.956479] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.973930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.993405] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.013383] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.041252] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 311.051279] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.053272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.057601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.060118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.065060] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.077922] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.078787] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.091404] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.098307] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.104712] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 311.114101] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.123361] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.130281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.136514] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 311.142339] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.148313] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.157873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.174712] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.593039] Bluetooth: hci0: command tx timeout [ 312.785228] Bluetooth: hci1: command tx timeout [ 312.977822] Bluetooth: hci2: command tx timeout [ 313.105183] Bluetooth: hci3: command tx timeout [ 313.169797] Bluetooth: hci4: command tx timeout [ 313.233133] Bluetooth: hci6: command tx timeout [ 313.296955] Bluetooth: hci5: command tx timeout [ 313.296997] Bluetooth: hci7: command tx timeout [ 314.640851] Bluetooth: hci0: command tx timeout [ 314.834961] Bluetooth: hci1: command tx timeout [ 315.026864] Bluetooth: hci2: command tx timeout [ 315.152838] Bluetooth: hci3: command tx timeout [ 315.217281] Bluetooth: hci4: command tx timeout [ 315.280993] Bluetooth: hci6: command tx timeout [ 315.346060] Bluetooth: hci5: command tx timeout [ 315.346910] Bluetooth: hci7: command tx timeout [ 316.689841] Bluetooth: hci0: command tx timeout [ 316.881779] Bluetooth: hci1: command tx timeout [ 317.072815] Bluetooth: hci2: command tx timeout [ 317.201866] Bluetooth: hci3: command tx timeout [ 317.266834] Bluetooth: hci4: command tx timeout [ 317.330013] Bluetooth: hci6: command tx timeout [ 317.393051] Bluetooth: hci7: command tx timeout [ 317.393119] Bluetooth: hci5: command tx timeout [ 318.737102] Bluetooth: hci0: command tx timeout [ 318.930096] Bluetooth: hci1: command tx timeout [ 319.121998] Bluetooth: hci2: command tx timeout [ 319.249844] Bluetooth: hci3: command tx timeout [ 319.313491] Bluetooth: hci4: command tx timeout [ 319.377194] Bluetooth: hci6: command tx timeout [ 319.441211] Bluetooth: hci5: command tx timeout [ 319.442966] Bluetooth: hci7: command tx timeout [ 372.969956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.973977] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.976657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.990943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.996947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.102028] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.114260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.122294] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.128465] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.149115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.180584] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.183406] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.186111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.194576] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.208848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.383742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 373.412372] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 373.415080] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.430649] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 373.432926] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 373.438272] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.443666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 373.455176] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 373.460136] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 373.470991] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.478601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 373.485476] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 373.488309] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 373.490733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.498781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 373.538101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.545365] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 373.580303] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 373.589508] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.601004] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.806802] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 373.817365] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 373.821931] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 373.849810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 373.878495] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 375.057834] Bluetooth: hci0: command tx timeout [ 375.249101] Bluetooth: hci2: command tx timeout [ 375.249897] Bluetooth: hci1: command tx timeout [ 375.632867] Bluetooth: hci3: command tx timeout [ 375.633167] Bluetooth: hci5: command tx timeout [ 375.825351] Bluetooth: hci4: command tx timeout [ 375.952844] Bluetooth: hci7: command tx timeout [ 376.080874] Bluetooth: hci6: command tx timeout [ 377.104848] Bluetooth: hci0: command tx timeout [ 377.297155] Bluetooth: hci2: command tx timeout [ 377.299829] Bluetooth: hci1: command tx timeout [ 377.680934] Bluetooth: hci3: command tx timeout [ 377.681101] Bluetooth: hci5: command tx timeout [ 377.874893] Bluetooth: hci4: command tx timeout [ 378.000920] Bluetooth: hci7: command tx timeout [ 378.130840] Bluetooth: hci6: command tx timeout [ 379.152840] Bluetooth: hci0: command tx timeout [ 379.345270] Bluetooth: hci1: command tx timeout [ 379.346151] Bluetooth: hci2: command tx timeout [ 379.729868] Bluetooth: hci3: command tx timeout [ 379.730054] Bluetooth: hci5: command tx timeout [ 379.920868] Bluetooth: hci4: command tx timeout [ 380.049962] Bluetooth: hci7: command tx timeout [ 380.177836] Bluetooth: hci6: command tx timeout [ 381.204240] Bluetooth: hci0: command tx timeout [ 381.392912] Bluetooth: hci2: command tx timeout [ 381.392965] Bluetooth: hci1: command tx timeout [ 381.777089] Bluetooth: hci3: command tx timeout [ 381.777624] Bluetooth: hci5: command tx timeout [ 381.969524] Bluetooth: hci4: command tx timeout [ 382.097382] Bluetooth: hci7: command tx timeout [ 382.225129] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 13:32:57 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff8880304a7240 RCX=ffffffff867fc9f4 RDX=0000000000000000 RSI=ffffffff81354012 RDI=ffff88806ce31850 RBP=ffffffff85c1cc40 RSP=ffff88806ce089c0 R8 =ffffffff867fc9f8 R9 =ffff88806ce08ab8 R10=000000000003b53d R11=0000000000012b30 R12=ffffffff81354012 R13=ffff88806ce08ac0 R14=ffff8880304a7240 R15=ffff88806ce08a78 RIP=ffffffff8151ad79 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc902d90000 CR3=000000002989a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81741447 RDX=ffff888036c50000 RSI=ffffffff81741388 RDI=ffffffff85c1cc40 RBP=0000000000000001 RSP=ffff888031c27618 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffffff85c75228 R15=ffff88800a059ba0 RIP=ffffffff8174138f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe27f2f7620 CR3=0000000031495000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000