Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:1171' (ECDSA) to the list of known hosts. 2025/06/22 20:31:42 fuzzer started 2025/06/22 20:31:42 dialing manager at localhost:33119 syzkaller login: [ 95.628259] cgroup: Unknown subsys name 'net' [ 95.794202] cgroup: Unknown subsys name 'cpuset' [ 95.834815] cgroup: Unknown subsys name 'rlimit' 2025/06/22 20:32:00 syscalls: 200 2025/06/22 20:32:00 code coverage: enabled 2025/06/22 20:32:00 comparison tracing: enabled 2025/06/22 20:32:00 extra coverage: enabled 2025/06/22 20:32:00 setuid sandbox: enabled 2025/06/22 20:32:00 namespace sandbox: enabled 2025/06/22 20:32:00 Android sandbox: enabled 2025/06/22 20:32:00 fault injection: enabled 2025/06/22 20:32:00 leak checking: enabled 2025/06/22 20:32:00 net packet injection: enabled 2025/06/22 20:32:00 net device setup: enabled 2025/06/22 20:32:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/22 20:32:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/22 20:32:00 USB emulation: enabled 2025/06/22 20:32:00 hci packet injection: enabled 2025/06/22 20:32:00 wifi device emulation: enabled 2025/06/22 20:32:00 802.15.4 emulation: enabled 2025/06/22 20:32:00 fetching corpus: 0, signal 0/0 (executing program) 2025/06/22 20:32:01 starting 8 fuzzer processes 20:32:01 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x3, 0x1f, 0x0, @loopback, @private2, 0x40, 0x7, 0x8, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r0, 0x2f, 0x0, 0x1f, 0x51, 0x20, @ipv4={'\x00', '\xff\xff', @empty}, @remote, 0x80, 0x80, 0x0, 0x1}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', r0, 0x2f, 0x1f, 0x1, 0x100, 0x69, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x7, 0x80, 0x3, 0x1}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_team\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', r0, 0x2f, 0x62, 0x40, 0xdf4, 0x10, @dev={0xfe, 0x80, '\x00', 0xe}, @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x7800, 0x6, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'sit0\x00', r4, 0x2f, 0x0, 0xf9, 0x820, 0xa, @dev={0xfe, 0x80, '\x00', 0x24}, @empty, 0x7, 0x700, 0x400, 0x1}}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) timer_create(0x6, &(0x7f0000000400)={0x0, 0x1e, 0x4}, &(0x7f0000000440)) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x10f02, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {0xee01}}, './file0\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x7f, 0xad, 0x9, 0x8, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x700, 0x8, 0x8a, 0xfffffff8}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'syztnl0\x00', r3, 0x2f, 0x0, 0xaf, 0xdcd, 0x21, @dev={0xfe, 0x80, '\x00', 0x18}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x8, 0x0, 0x8d}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl2\x00', r1, 0x2f, 0x0, 0x40, 0x8000, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x10, 0x40, 0x7, 0xdaf5}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl0\x00', r8, 0x29, 0x89, 0x3, 0x80000001, 0x46, @mcast1, @mcast1, 0x700, 0x20, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'ip6tnl0\x00', r10, 0x29, 0x8, 0x6d, 0x0, 0x36, @loopback, @loopback, 0x8000, 0x20, 0x9, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl0\x00', r9, 0x2f, 0xff, 0x9, 0x86, 0x34, @remote, @private0, 0x7816, 0x0, 0x5, 0x1}}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r11, 0x89f8, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl1\x00', r9, 0x2f, 0x5, 0x80, 0x400, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0x701, 0x7, 0x7ff, 0x7fffffff}}) 20:32:01 executing program 1: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/202) r0 = geteuid() r1 = fork() r2 = clone3(&(0x7f0000000280)={0x40098100, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, {0x11}, &(0x7f00000001c0)=""/28, 0x1c, &(0x7f0000000200)=""/33, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{0x3, r0, 0xee01, 0x0, 0x0, 0x28, 0x1}, 0x7942, 0x5, 0x8001, 0x9, r1, r3}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000380)) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000003c0)=""/92) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) pidfd_open(r1, 0x0) r5 = shmget$private(0x0, 0x2000, 0x2c001043, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) r6 = fork() clone3(&(0x7f0000001580)={0x4081000, &(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, {0x37}, &(0x7f0000000500)=""/59, 0x3b, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=[r6, r4, r2, r3, r3, r3], 0x6}, 0x58) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x556}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80d1}, 0x0) clone3(&(0x7f0000001a40)={0x8000000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)=0x0, {0x4}, &(0x7f0000001940)=""/76, 0x4c, &(0x7f00000019c0), &(0x7f0000001a00)=[r7, r8, r4, 0xffffffffffffffff], 0x4}, 0x58) r10 = fork() r11 = fork() clone3(&(0x7f0000001d40)={0x8000800, &(0x7f0000001ac0), &(0x7f0000001b00)=0x0, &(0x7f0000001b40), {0x1d}, &(0x7f0000001b80)=""/154, 0x9a, &(0x7f0000001c40)=""/129, &(0x7f0000001d00)=[r3, r3, r1, r7, r4, 0x0, r3], 0x7}, 0x58) clone3(&(0x7f0000001e00)={0x212822300, &(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0), {0x13}, &(0x7f0000001800)=""/42, 0x2a, &(0x7f0000001840)=""/15, &(0x7f0000001dc0)=[r9, r8, r10, r1, r11, r12, r2], 0x7}, 0x58) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 20:32:01 executing program 2: r0 = geteuid() geteuid() r1 = socket$inet(0x2, 0x2, 0x6f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r3, 0xee01}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x7c, 0x2, 0xfffff001, 0x8, @remote, @mcast1, 0x0, 0x700, 0x28}}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x280}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x34f}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x4c0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x4042, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x6, @bearer=@l2={'ib', 0x3a, 'erspan0\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', r5, 0x2f, 0x7, 0x63, 0x9, 0x10, @remote, @private1, 0x8, 0x700, 0x81, 0xfffffff8}}) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x200001, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x82000c1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x7f}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4bd800e3a9dd42ad89c7a5cb72c19077"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x14}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x50}, @NL80211_ATTR_PMK={0x14, 0xfe, "d0854de8ecf3416e02aef29ebf1e313f"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b7823abc3a1e"}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x40050) ioctl$PTP_EXTTS_REQUEST(r7, 0x40103d02, &(0x7f0000000600)={0x100, 0x8}) chroot(&(0x7f0000000640)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r8) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x80000001, @bearer=@l2={'eth', 0x3a, 'ip_vti0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4044) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r4) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r9, 0x200, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x101}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2004801}, 0x800) [ 114.171924] audit: type=1400 audit(1750624321.428:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:32:01 executing program 3: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1c97}}, './file0\x00'}) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x5) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x5) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x40001, 0x26) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x10f31e) io_cancel(0x0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000000080)="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", 0x1000, 0x1503, 0x0, 0x3}, &(0x7f00000010c0)) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000011c0)={&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001140)=""/110, 0x6e}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001240), r2) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x64, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x857}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001880)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000001940)={'syztnl2\x00', &(0x7f00000018c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6b, 0x2, 0x605, 0x24, @private0, @empty, 0x8, 0x8, 0x10001, 0x1f}}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x4022010, r2, 0x10000000) r7 = accept4$packet(r2, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000019c0)=0x14, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001a40)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0xd8, &(0x7f0000001a00)=[r7, 0xffffffffffffffff], 0x2, 0x0, 0x1}, 0x101) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r4, 0x10000000) syz_io_uring_submit(r5, r8, &(0x7f0000001f00)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001a80)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-generic\x00'}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)="c0aece769c75773d1daa6379a5", 0xd}, {&(0x7f0000001b40)="77de1394", 0x4}, {&(0x7f0000001b80)="d5464494fbba956d6ec3c49d646bbb30fb98038f76d8af1e7f3048450701f02ebdceac2b1c6db7c2874704862a006622f847c2b38331529f581490e1d8b51557423417", 0x43}], 0x3, &(0x7f0000001c40)=[{0x98, 0x1, 0x0, "6c065906648b647ad2821de753e4ad8eaf6f5225519e29efbd300cbebda4d3e43a4bc34e3d46f9c4de89d2cc0e8d6cca39a8ffab4cd10324e4d159bd492a99366ed9e32802d3f674125b69e9c97bd0444817d93712efc6c3546902df953d97d0cf0b06170f0685c3c3389f8a46069bee6dc94d3669f03e63442a14cd838b26de6547b85179b2"}, {0xd0, 0x119, 0x80000, "34f460c65c05e260c49ffaabaa9e78259caad60ee08c082ef4ad4b917e3d82f454c4073f37a6ea94c2d4059ce4ee759e62bc12135c1d2289929509c1150ccdb2dbab536de968c47c630afdc3813cb1d7ae60c4177a01b476abbf72ec71eac9af86fd7a6cb75609c8eba96723a1d073892ed1482f5de91e50f44336d2af999b240ccfdf2ca39daf75bf62f5b625d24bfff1308568156f27ad6bd821a9b131a19eb8cacae488d45f8886f9f7ab433a3215a47e39942b7e39179b"}, {0x30, 0x9c0a7fe1cfc88c40, 0x182, "233591ad8cb1e9c8ee35d124c2208089c9e0bd571c9da11346d3d1025e903f"}, {0x40, 0xff, 0x100, "7d5c16b9e9a5a43bec7f145c890f510e65cdfdf8db251746cf2da3ea0f7277dc4931ad826639417c2c2e46945068"}, {0x90, 0x119, 0x6, "3969cb00412853bcd9548400da985ab4d050441c30e603bd58c473d65a4382111031232f7287c56b8a59325138671ec8c152406331b6acc820bc2172e5f09e2aeee9dd1d50ea9004148b7458804b55a30cc1efacb79d8a08f79c940ccdc255d980efdc396126724b438b002772aa9fa0a37d31a1e2423f02c2787889ef3f"}], 0x268}, 0x0, 0x4040015, 0x1}, 0x3) 20:32:01 executing program 4: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x304, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72e9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe6d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff8be}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc9a1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x66}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe835e38}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK={0xe4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff8110}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xab5f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x25c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff521}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xce15}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x35e}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x20000830}, 0x60) r0 = socket(0x0, 0x3, 0xfffffffc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r1, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1ff}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8001}, @NL80211_ATTR_SSID={0xe, 0x34, @random="6e261556ac285334a825"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_PMK={0x14, 0xfe, "daf52a48a90214857b72959af08551fb"}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x4000001) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x60, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@flat=@weak_handle={0x77682a85, 0x100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/158, 0x9e, 0x1, 0x14}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000740)={0x0, 0x18, 0x40}}, 0x40}, @acquire_done={0x40106309, 0x2}], 0xd4, 0x0, &(0x7f0000000800)="5c57adc0bafdcdb8c0d2b57c77a94b615a2307fe17a932bb221c348998d33ff3d892851cfe9c19f9227bc5f7f1be6f937754de3e1b0db031bc3d9a99abc007975a5e49a25fcef32b7967f016749ae58deef7eb28e333bd6b497e63a8e2f7118448e4523270c893fe11364e650652d3be1cd8d56c92c471a8702579495827102cad2ace5206e649af3584d33dce18e04f93eaa1daf9e10e22940ffa31c5c9c37b76477d47d60751a9baf45e82cd104f9c3b259ac4262b977692b0641c2b04f9edeb40c0566e49cb3435538ec935b1e1d325c9ac55"}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x3, 0x289, 0x41, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x700, 0x40, 0x7, 0x2}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf725}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20050}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r0) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0x800) r7 = socket$inet6(0xa, 0x6, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000cc0)={'ip6gre0\x00', r3, 0x4, 0xa9, 0x3, 0x2605, 0x4, @local, @mcast2, 0x80, 0x1, 0x2, 0x1}}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42}, 0x800) r8 = socket(0xf, 0x1, 0x12e0) r9 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r8, {r9}}, './file0\x00'}) 20:32:01 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000a}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x1000, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x8, 0x3, @udp='udp:syz0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x20041005}, 0x20000000) r1 = socket(0x8, 0x1, 0x3ff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x300, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000841) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4080) io_cancel(0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000000480)="a1455863e9ddd5cd8d0bf165216ddc80d99fc59c03575afc4155f74de819855e3a3778bc9ec75e7d020de32966f971f01ef5f4e9821c234ee122cbe39894bb5fb1f5f5541bbf23138dfecc342144c38df1653be6556879994dda0bf0ce67196653b3a4771be90403d3705295d55d15c8844b38456e3ee9542d39eda7e58b014014fcf3ceb221ad0dcdc0da00a901816774f9d1f95687f80dfe66b32783144ab3accca2a133536c21cd354e8a", 0xac, 0x1, 0x0, 0x1}, &(0x7f0000000580)) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10c002}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9f}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004080}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x84, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x51}}}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="99b3fef6aa7057dec187f58b565c36ea97ce561c97d0cbfe80afbb17"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMKID={0x14, 0x55, "3435519bfe3d525c242cef02e121302f"}, @NL80211_ATTR_PMKID={0x14, 0x55, "aa27ccb91ea10113589556fc1b877653"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r4, 0x800, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000009c0)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0xd515332e48b97ecd}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, r3, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8a, 0x7}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "cc3e22039c6b0252f0f7d34015f306b4"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d8085ef0950aa373ce3a00007be1fd5b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x43}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x100}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40000010) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10010, r5, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000bc0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x1f, &(0x7f0000000b80)=[r2], 0x1}, 0xf0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000c40)=0x7, 0x4) 20:32:01 executing program 6: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0x4040040) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x288, r0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x64, 0x3, "ceb4ad0da5f4a123acdc19a0d5c5257a017dae8997766c2f2a326298a49624a8f0007df02738963d873a9623197a4e7109b4f5686cd7d01d571bb0f22d08efef59b02d120ac11480bbe62fbf08de11381456e56c3d8925a04c8b527946a33c29"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "6c1f6e015b21e457619b2a28313e0383cc11c19eb377"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "08f961ca17dc17008d58aa9c0233b223014131e99f7e5eccf94a74"}}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x413d70b4}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfe0}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "22357fcd0facd20eac592768446d78fb11d5bc485edca9bcf9d926f228"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "09bb19fd41f93ecdb2686a60c23340c5ad02441f141d4aaf61542bc74a134c"}}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000600), 0x10000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5a9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, 0x0, 0x410, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xbc5d}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9f2f}]}, 0x74}, 0x1, 0x0, 0x0, 0xaf21d2be868b9d92}, 0x10040004) r3 = socket(0x18, 0x800, 0x8) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, r0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x99}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r4 = openat(r2, &(0x7f0000000b40)='./file0\x00', 0x300c0, 0x1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}}, 0x8000) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x7, @bearer=@l2={'ib', 0x3a, 'netpci0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000800) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xcc, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x35fe}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff0001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x2}, 0x8010) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000f40), 0x90000, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xe8, r6, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xee58}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xdedd}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffff9}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r4) 20:32:01 executing program 7: recvfrom$unix(0xffffffffffffffff, &(0x7f0000000000)=""/74, 0x4a, 0x0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1180c001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r3, 0x482, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x2404c010}, 0x20000088) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x10, 0x5, @udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20044000}, 0x10) r5 = pidfd_getfd(r4, r4, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r4) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r6, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x7c, r7, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x26}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r8, 0x4, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r5) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x18000080}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xb8, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x67}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4801}, 0x4c850) [ 115.514082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.522101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.525339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.533025] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.538996] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.588055] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.593054] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.596010] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.609124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.620040] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.629271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.638111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.644165] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.664169] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.671832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.693270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.706241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.714722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.723052] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.728981] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.786356] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.788941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.793793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.797896] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.800331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.804153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.818911] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.823188] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.835204] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.843263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.890369] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.905832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.910928] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.912082] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.921176] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.926889] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.950905] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.960294] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.991390] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 116.002995] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 117.597096] Bluetooth: hci0: command tx timeout [ 117.661472] Bluetooth: hci1: command tx timeout [ 117.723792] Bluetooth: hci2: command tx timeout [ 117.788785] Bluetooth: hci3: command tx timeout [ 117.915742] Bluetooth: hci4: command tx timeout [ 117.916601] Bluetooth: hci5: command tx timeout [ 118.043726] Bluetooth: hci6: command tx timeout [ 118.043754] Bluetooth: hci7: command tx timeout [ 119.643627] Bluetooth: hci0: command tx timeout [ 119.707850] Bluetooth: hci1: command tx timeout [ 119.771912] Bluetooth: hci2: command tx timeout [ 119.837317] Bluetooth: hci3: command tx timeout [ 119.963833] Bluetooth: hci5: command tx timeout [ 119.963853] Bluetooth: hci4: command tx timeout [ 120.092286] Bluetooth: hci6: command tx timeout [ 120.093156] Bluetooth: hci7: command tx timeout [ 121.691588] Bluetooth: hci0: command tx timeout [ 121.756475] Bluetooth: hci1: command tx timeout [ 121.821774] Bluetooth: hci2: command tx timeout [ 121.883708] Bluetooth: hci3: command tx timeout [ 122.011521] Bluetooth: hci5: command tx timeout [ 122.012061] Bluetooth: hci4: command tx timeout [ 122.139635] Bluetooth: hci7: command tx timeout [ 122.139949] Bluetooth: hci6: command tx timeout [ 123.739507] Bluetooth: hci0: command tx timeout [ 123.803784] Bluetooth: hci1: command tx timeout [ 123.868448] Bluetooth: hci2: command tx timeout [ 123.932432] Bluetooth: hci3: command tx timeout [ 124.059505] Bluetooth: hci4: command tx timeout [ 124.059550] Bluetooth: hci5: command tx timeout [ 124.187558] Bluetooth: hci6: command tx timeout [ 124.189512] Bluetooth: hci7: command tx timeout [ 175.739784] syz-executor.0 (282) used greatest stack depth: 24544 bytes left [ 178.366044] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.372890] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.375299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.377387] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.381501] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.385098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.394917] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.406113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.409505] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.430080] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.480301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.491173] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.494209] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.496631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.503784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.511240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.514464] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.518062] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.520072] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.524947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.530927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.534002] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.542902] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.555744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.559893] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.565214] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.570807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.572327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.577920] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.581766] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.583858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.600815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.601785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.603553] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.607029] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.610972] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.613793] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.636954] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.693774] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.697346] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.443517] Bluetooth: hci0: command tx timeout [ 180.507482] Bluetooth: hci1: command tx timeout [ 180.571558] Bluetooth: hci5: command tx timeout [ 180.699787] Bluetooth: hci6: command tx timeout [ 180.700702] Bluetooth: hci2: command tx timeout [ 180.827514] Bluetooth: hci4: command tx timeout [ 180.891475] Bluetooth: hci3: command tx timeout [ 181.083538] Bluetooth: hci7: command tx timeout [ 182.491674] Bluetooth: hci0: command tx timeout [ 182.556537] Bluetooth: hci1: command tx timeout [ 182.619808] Bluetooth: hci5: command tx timeout [ 182.748706] Bluetooth: hci6: command tx timeout [ 182.749200] Bluetooth: hci2: command tx timeout [ 182.876540] Bluetooth: hci4: command tx timeout [ 182.939483] Bluetooth: hci3: command tx timeout [ 183.132159] Bluetooth: hci7: command tx timeout [ 184.540432] Bluetooth: hci0: command tx timeout [ 184.603653] Bluetooth: hci1: command tx timeout [ 184.669762] Bluetooth: hci5: command tx timeout [ 184.796501] Bluetooth: hci6: command tx timeout [ 184.797011] Bluetooth: hci2: command tx timeout [ 184.923891] Bluetooth: hci4: command tx timeout [ 184.988470] Bluetooth: hci3: command tx timeout [ 185.180367] Bluetooth: hci7: command tx timeout [ 186.589357] Bluetooth: hci0: command tx timeout [ 186.651794] Bluetooth: hci1: command tx timeout [ 186.717497] Bluetooth: hci5: command tx timeout [ 186.844496] Bluetooth: hci6: command tx timeout [ 186.844928] Bluetooth: hci2: command tx timeout [ 186.972635] Bluetooth: hci4: command tx timeout [ 187.036674] Bluetooth: hci3: command tx timeout [ 187.229349] Bluetooth: hci7: command tx timeout [ 240.363292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.365820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.369166] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.372565] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.373437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.376347] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.387819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.391266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.397668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.406475] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.495738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.502220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.517907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.529150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.537212] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.579276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.586283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.596315] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.614777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.617831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.624226] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.627889] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.638223] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.649149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.666849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.738191] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.746195] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.759636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.786800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.820983] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.862926] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.873990] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.875615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.882936] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.902571] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.933717] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.950663] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.972759] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.976646] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.000061] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.459611] Bluetooth: hci1: command tx timeout [ 242.460378] Bluetooth: hci0: command tx timeout [ 242.587501] Bluetooth: hci2: command tx timeout [ 242.715470] Bluetooth: hci3: command tx timeout [ 242.907519] Bluetooth: hci6: command tx timeout [ 242.908268] Bluetooth: hci4: command tx timeout [ 243.035497] Bluetooth: hci7: command tx timeout [ 243.099876] Bluetooth: hci5: command tx timeout [ 244.509600] Bluetooth: hci0: command tx timeout [ 244.510082] Bluetooth: hci1: command tx timeout [ 244.637436] Bluetooth: hci2: command tx timeout [ 244.764698] Bluetooth: hci3: command tx timeout [ 244.955709] Bluetooth: hci6: command tx timeout [ 244.956202] Bluetooth: hci4: command tx timeout [ 245.083795] Bluetooth: hci7: command tx timeout [ 245.147542] Bluetooth: hci5: command tx timeout [ 246.556434] Bluetooth: hci1: command tx timeout [ 246.556892] Bluetooth: hci0: command tx timeout [ 246.683662] Bluetooth: hci2: command tx timeout [ 246.811524] Bluetooth: hci3: command tx timeout [ 247.004812] Bluetooth: hci4: command tx timeout [ 247.005266] Bluetooth: hci6: command tx timeout [ 247.131484] Bluetooth: hci7: command tx timeout [ 247.196165] Bluetooth: hci5: command tx timeout [ 248.603722] Bluetooth: hci0: command tx timeout [ 248.604180] Bluetooth: hci1: command tx timeout [ 248.731534] Bluetooth: hci2: command tx timeout [ 248.860493] Bluetooth: hci3: command tx timeout [ 249.051496] Bluetooth: hci6: command tx timeout [ 249.051946] Bluetooth: hci4: command tx timeout [ 249.180823] Bluetooth: hci7: command tx timeout [ 249.243515] Bluetooth: hci5: command tx timeout [ 302.769379] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.776584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.780819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.792612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.800596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.910194] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.914328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.916873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.923603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.928996] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.998209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.006753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.023217] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.031297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.048200] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.050104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.055917] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.071955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.078926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.120926] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.320006] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.332016] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.346249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.354828] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.358457] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.374848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.376478] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.394618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.395908] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.413767] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.415645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.423248] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.434944] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.444347] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.451026] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.455991] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.485119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.503117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.514182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.524480] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.859485] Bluetooth: hci0: command tx timeout [ 304.988503] Bluetooth: hci1: command tx timeout [ 305.179617] Bluetooth: hci3: command tx timeout [ 305.180369] Bluetooth: hci2: command tx timeout [ 305.499540] Bluetooth: hci7: command tx timeout [ 305.627718] Bluetooth: hci5: command tx timeout [ 305.692139] Bluetooth: hci4: command tx timeout [ 305.692957] Bluetooth: hci6: command tx timeout [ 306.907515] Bluetooth: hci0: command tx timeout [ 307.036745] Bluetooth: hci1: command tx timeout [ 307.227727] Bluetooth: hci3: command tx timeout [ 307.228166] Bluetooth: hci2: command tx timeout [ 307.547763] Bluetooth: hci7: command tx timeout [ 307.675662] Bluetooth: hci5: command tx timeout [ 307.739525] Bluetooth: hci6: command tx timeout [ 307.739950] Bluetooth: hci4: command tx timeout [ 308.956516] Bluetooth: hci0: command tx timeout [ 309.083465] Bluetooth: hci1: command tx timeout [ 309.276653] Bluetooth: hci2: command tx timeout [ 309.277935] Bluetooth: hci3: command tx timeout [ 309.595506] Bluetooth: hci7: command tx timeout [ 309.723456] Bluetooth: hci5: command tx timeout [ 309.787676] Bluetooth: hci4: command tx timeout [ 309.788104] Bluetooth: hci6: command tx timeout [ 311.005655] Bluetooth: hci0: command tx timeout [ 311.132449] Bluetooth: hci1: command tx timeout [ 311.323677] Bluetooth: hci2: command tx timeout [ 311.324155] Bluetooth: hci3: command tx timeout [ 311.644434] Bluetooth: hci7: command tx timeout [ 311.771675] Bluetooth: hci5: command tx timeout [ 311.835733] Bluetooth: hci4: command tx timeout [ 311.836349] Bluetooth: hci6: command tx timeout [ 365.178943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.185995] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.192642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.204935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.214000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.225504] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.229594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.235451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.256896] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.260815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.278893] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.285443] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.295267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.300725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.303042] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.431337] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.443038] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.451878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.453226] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.457058] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.459359] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.486113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.487722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.493734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.504853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.518044] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.521870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.527011] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.543035] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.552727] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.574919] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.579877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.595006] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.645649] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.661677] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.684090] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.704041] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.719837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.772804] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.817027] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 367.260474] Bluetooth: hci0: command tx timeout [ 367.325481] Bluetooth: hci2: command tx timeout [ 367.326048] Bluetooth: hci1: command tx timeout [ 367.516486] Bluetooth: hci4: command tx timeout [ 367.643544] Bluetooth: hci5: command tx timeout [ 367.644121] Bluetooth: hci3: command tx timeout [ 367.772878] Bluetooth: hci6: command tx timeout [ 367.899694] Bluetooth: hci7: command tx timeout [ 369.309804] Bluetooth: hci0: command tx timeout [ 369.373624] Bluetooth: hci1: command tx timeout [ 369.374069] Bluetooth: hci2: command tx timeout [ 369.564658] Bluetooth: hci4: command tx timeout [ 369.692595] Bluetooth: hci5: command tx timeout [ 369.693040] Bluetooth: hci3: command tx timeout [ 369.821441] Bluetooth: hci6: command tx timeout [ 369.948629] Bluetooth: hci7: command tx timeout [ 371.355868] Bluetooth: hci0: command tx timeout [ 371.420538] Bluetooth: hci2: command tx timeout [ 371.420998] Bluetooth: hci1: command tx timeout [ 371.611469] Bluetooth: hci4: command tx timeout [ 371.739782] Bluetooth: hci5: command tx timeout [ 371.740263] Bluetooth: hci3: command tx timeout [ 371.868875] Bluetooth: hci6: command tx timeout [ 371.996551] Bluetooth: hci7: command tx timeout [ 373.404626] Bluetooth: hci0: command tx timeout [ 373.468612] Bluetooth: hci1: command tx timeout [ 373.469038] Bluetooth: hci2: command tx timeout [ 373.660717] Bluetooth: hci4: command tx timeout [ 373.787463] Bluetooth: hci3: command tx timeout [ 373.787896] Bluetooth: hci5: command tx timeout [ 373.916476] Bluetooth: hci6: command tx timeout [ 374.045136] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 20:37:10 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85c1cb80 RDI=ffff8880095d0a80 RBP=ffffffff8521e380 RSP=ffff8880095dfb38 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001 R12=0000000000000647 R13=00000000000066df R14=ffff8880095d0000 R15=dffffc0000000000 RIP=ffffffff814644da RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe991c95288 CR3=00000000312f8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84b4cada RDI=ffffed1001189523 RBP=ffff888008c4a918 RSP=ffff88802a24faa8 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff86414657 R11=0000000000000001 R12=0000000000000001 R13=ffffffff84b4cada R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81aedae7 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa8f0174540 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa8f035e810 CR3=0000000013661000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000