Warning: Permanently added '[localhost]:42046' (ECDSA) to the list of known hosts. 2025/04/30 09:42:06 fuzzer started 2025/04/30 09:42:06 dialing manager at localhost:46073 syzkaller login: [ 94.138220] cgroup: Unknown subsys name 'net' [ 94.256636] cgroup: Unknown subsys name 'cpuset' [ 94.302066] cgroup: Unknown subsys name 'rlimit' 2025/04/30 09:42:20 syscalls: 205 2025/04/30 09:42:20 code coverage: enabled 2025/04/30 09:42:20 comparison tracing: enabled 2025/04/30 09:42:20 extra coverage: enabled 2025/04/30 09:42:20 setuid sandbox: enabled 2025/04/30 09:42:20 namespace sandbox: enabled 2025/04/30 09:42:20 Android sandbox: enabled 2025/04/30 09:42:20 fault injection: enabled 2025/04/30 09:42:20 leak checking: enabled 2025/04/30 09:42:20 net packet injection: enabled 2025/04/30 09:42:20 net device setup: enabled 2025/04/30 09:42:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/30 09:42:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/30 09:42:20 USB emulation: enabled 2025/04/30 09:42:20 hci packet injection: enabled 2025/04/30 09:42:20 wifi device emulation: enabled 2025/04/30 09:42:20 802.15.4 emulation: enabled 2025/04/30 09:42:20 fetching corpus: 0, signal 0/0 (executing program) 2025/04/30 09:42:21 starting 8 fuzzer processes 09:42:21 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000000)={0xffffffc1, 0x0, 'client0\x00', 0x0, "6873e1b6e5ca9788", "fae4d3a7ad01eca123d405cdecb08785e39af5df75f89ef767a5e87892b9288c", 0x1, 0x2}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffb, 0xea, 0x7, @scatter={0x2, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/135, 0x87}, {&(0x7f0000000180)=""/171, 0xab}]}, &(0x7f0000000280)="993de0a4457493b0b576b468879da23a6c9d6d257c2b2b7ea86482c6825092ee8103d8a8db4132b9fe45d24ab7bf1977febbefc3c8e547dc841bc65874a39bbd92cbe5bad842a82824ea09788e453466d07815d7d68031e4b57c311e443852280d7f2cc70086c5890be6f0cb4bedfe86a1d3b2ce96a6687b45454c29f38e5335eb7741bd566937ea5d9563e369ef799f2cc5ffb0a436d8f87e4f89c96d558c9c889190d7d4ab6642d710b0c06593af6fa69307dc7b356271693f2ca4ebbcdaab5ca87e5a56d082e3efa8cfebc6df1059f710873810a203f6b2b849d8866507030d59291412c4ada72600", &(0x7f0000000380)=""/117, 0x2, 0x1, 0x2, &(0x7f0000000400)}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000500)={0x1ff, 0x81, 0xfffffffd}) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000005c0)={0x81, 0x1, 0x0, 'queue1\x00', 0x3}) r3 = syz_open_dev$sg(&(0x7f0000000680), 0x5, 0x60100) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f00000006c0)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000700)={{0x3f, 0x5}, 'port0\x00', 0x80, 0x20800, 0x7, 0x5, 0x0, 0x56d7, 0x9, 0x0, 0x3, 0x1}) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000007c0)) pipe2(&(0x7f0000000800)={0xffffffffffffffff}, 0x81800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000840)={0x0, 0x3, 0x20, 0x40, 0x1, 0x2}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x242) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f0000000900)={0x1f, 0x8d, 0x7f}) pipe2(&(0x7f0000000940)={0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, &(0x7f0000000980)) r7 = accept(0xffffffffffffffff, &(0x7f0000000ac0)=@nl=@unspec, &(0x7f0000000b40)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000000b80)={0xfffffe01}, 0x4) accept(r6, &(0x7f0000000bc0)=@l2, &(0x7f0000000c40)=0x80) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2004238c}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) 09:42:21 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '[%$-', 0x20, 0xb4d}, 0x2e, 0x0) r0 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="7e22f1d50b59b860e5434f132446d8e6a50fce6a611361d5679e7f89470dfbca3c84e226f40bdb312b118078b823179dbf25a701f6429c747d635e3106f345533eb3d43d7a5b4a00fe7732606bb5a4d73b7e05addab8b4e2f0aef3361d198f78d08b9d7c6a263f3fbd00d2a56b96d3cad61078c69b0aec1e3bc13fea12e3e1cd78c3beaf76221205b2d1983aaf38", 0x8e, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='encrypted\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r0}) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) keyctl$set_timeout(0xf, 0x0, 0x7fff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000200)='trusted\x00', 0x0) r1 = add_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="019f36bd58516cc3408006e234230c438ad9f193c9cc07669f4c9dcb713919b538b0942de5d6ae9abf580dc08d72d0782189586161c44162a1b4a3052184ef4c456cf1125ae4098841bef71329da24000bc0e695c8ed4244aba5bd343a0765986b279d04248213a18fd669b1987e5435421758982dc7c3ddd53a2644af3639e89890770fbd8df6baad7eea15ff56292589ecd84b0c0460b2b38905", 0x9b, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000440)='syzkaller\x00') request_key(&(0x7f0000000480)='id_resolver\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='\x00', r0) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$invalidate(0x15, r3) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f00000005c0)='keyring\x00') pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6800) write$P9_RWSTAT(r4, &(0x7f0000000640)={0x7, 0x7f, 0x1}, 0x7) syz_genetlink_get_family_id$fou(&(0x7f0000000680), 0xffffffffffffffff) r5 = add_key(&(0x7f00000006c0)='blacklist\x00', &(0x7f0000000700)={'syz', 0x0}, &(0x7f0000000740)="3e63e448712e1d16d601314ec21dcacc41efe25ca7c3a5c091a07ab452f4170fedf2d7d1fa40948d39db510cb672b9e4bf1934bec37d819bc57e63a54a247c1be4446b2387332cbc86705b07ee6cbf341e7385a79bec3a51d3e92dbb237f2ea12295566eab666200917aa853dfd320a91afb2a12e9ba3631d484118745c5bdee0d6837f12c347f424cbe8e5b1884f88b70ab1e70ac94e1b51c65662dda9437cbfb2a969dab1a08ac0e573affc0acd9bc3b62cc", 0xb3, r3) r6 = request_key(&(0x7f0000000800)='pkcs7_test\x00', &(0x7f0000000840)={'syz', 0x3}, &(0x7f0000000880)='\'-($Y\x00', r3) keyctl$unlink(0x9, r5, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000009c0)='syzkaller\x00', &(0x7f0000000a00)=@secondary) 09:42:21 executing program 2: alarm(0x7) alarm(0x101) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x210, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x210}, 0x1, 0x0, 0x0, 0x200048c0}, 0x40810) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x71, 0x1, {{0x40, 0x3, 0x2}, 0x2}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000440)={{0x74, 0x3}, 'port0\x00', 0x30, 0x4, 0x19, 0x3, 0x7, 0x5, 0x3, 0x0, 0x5, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000500)={0xfffffffe, 0x1, 'client1\x00', 0x4, "bd759b1fef10138d", "bf9e37a273db873744c3d4943f39120eb4c3b415f7c6279bef7eeb837d0315eb", 0x7, 0x2}) r2 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000640)='big_key\x00', &(0x7f0000000680)='enabled\x00') sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xac, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) alarm(0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb0, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa23}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd99b}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x67}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004040}, 0x48000) r5 = accept(0xffffffffffffffff, &(0x7f0000000a00)=@generic, &(0x7f0000000a80)=0x80) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x1c}}, 0x20044810) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000bc0)={{0x60, 0x4}, 0x0, 0x3, 0x3, {0x1, 0x9}, 0x4, 0x6}) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x78, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x78}}, 0x4800) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r4, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 09:42:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x451}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001000000000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008044) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x1}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x81}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x14) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r8, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x4800) keyctl$instantiate(0xc, 0x0, &(0x7f0000000680)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '$]&,)&', 0x20, 0x100, 0x20, [0x34, 0x34, 0x31, 0x33, 0x38, 0x39, 0x66, 0x62, 0x39]}, 0x3c, 0xfffffffffffffff9) write$P9_RCLUNK(r2, &(0x7f00000006c0)={0x7, 0x79, 0x2}, 0x7) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r11, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r12, 0x300, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2404c085}, 0x0) [ 108.851903] audit: type=1400 audit(1746006141.613:7): avc: denied { execmem } for pid=275 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:42:21 executing program 5: io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)="ad1b12dd1b33149d2c8c43f5dff241e56114b0d675ea135350864759fa37194719e9790bbcb96960952b58d76a02db535167919f67615326e59725ac508d62369151afb959932c9590ab08ade95a1cc95605229e53789437e312b26893b2414ac0ecde439e68f2c888864ae4d44c13b1207bd3cdb82f792c54efd0bc2ea93f66a24c26368388ae488feb602de648eec58d64d3411bddce37191a615deae1f082b0c774c202fd1e6293509a3b44663b4af0695b683c45c6adc5b4ec56890f", 0xbe, 0x7c89}, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@hci, &(0x7f0000000200)=0x80) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="13acd28641cb56a8f63274ac38039a30", 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6b}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x33}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffdc67}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x80) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4c00) write$P9_RMKNOD(r2, &(0x7f0000000440)={0x14, 0x13, 0x1, {0x10, 0x3, 0x6}}, 0x14) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x131000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000004c0)={{0x1f, 0x20}, 'port1\x00', 0x1, 0x400, 0x3, 0x10001, 0x4, 0x7, 0x5, 0x0, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000580)={0x2000, 0xffffffff, 0x5, {0x6, 0x81}, 0x7f, 0x3}) pipe2(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc810}, 0x4000880) pipe2(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, &(0x7f0000000e40)) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000f00)) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f80), r1) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r8, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x40014) socketpair(0x25, 0x4, 0x7, &(0x7f0000001080)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f00000012c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001280)={&(0x7f0000001100)={0x160, r8, 0x200, 0x7, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x11}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf2b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x50}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x13}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1d1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1e}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x400}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20004010}, 0x28004010) 09:42:21 executing program 4: r0 = getgid() getgroups(0x1, &(0x7f0000000000)=[r0]) getgroups(0x1, &(0x7f0000000040)=[0xee01]) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x0) getgroups(0x6, &(0x7f0000000140)=[r0, r1, r1, r2, r0, r4]) r9 = getgid() getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) getgroups(0x8, &(0x7f0000000300)=[r3, r6, r4, r8, r7, r9, r10, r11]) r13 = getgid() r14 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, 0x0, r14, 0x0, 0x1) getgroups(0x1, &(0x7f00000003c0)=[r13]) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5f7bd12ee75742c5) getgroups(0x2, &(0x7f0000000500)=[r12, r5]) r17 = geteuid() write$P9_RSTATu(r15, &(0x7f0000000540)={0x64, 0x7d, 0x1, {{0x0, 0x4c, 0x61ea, 0x401, {0x91, 0x1, 0x4}, 0x40000000, 0xffff, 0x101, 0xfffffffffffeffff, 0x5, '.@^[]', 0x8, 'keyring\x00', 0x4, '\\+^#', 0x8, 'keyring\x00'}, 0x3, 'syz', 0xffffffffffffffff, r16, r17}}, 0x64) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x8}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000780)=0x80) 09:42:21 executing program 6: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000011) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x49}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfd}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040800) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xf3}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xc4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x9}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x27}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x80}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xf1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x98}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40044}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan4\x00'}) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x400c0d5) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xef}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400d4}, 0x40) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, r5, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "b61340712cc1e8afcf9116e37434ed5f"}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "1fb726fe6eea26c9975eaa1fc948fc286b56798b3a29566941fe40a9edc3010d"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) socketpair(0x1e, 0x4, 0xfff, &(0x7f0000000ac0)={0xffffffffffffffff}) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4080) 09:42:21 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000140)={0x2, 0x2, 'client1\x00', 0xffffffff80000000, "bd266860fe4c7d8c", "91bd85d224697cc33bb24d709ab58fc2c9f06835047b0cc034354b4cbdb0ca33", 0x6aa, 0xf35}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x2, 0x1}, 'port1\x00', 0x4, 0x80000, 0xfa9, 0x6, 0x20, 0x4, 0x40, 0x0, 0xa, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000002c0)={0x8001, 0x2, 'client0\x00', 0x77fda7aef8bae81a, "bdf2542d68402b89", "2149539ce092433fce8d73547012ddb11250450e934657d4148d9f65d669369d", 0xa659, 0x8}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000380)={0x5, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000440)={0x200, @tick=0x9, 0x8, {0x3, 0x4}, 0x3f, 0x2, 0xa2}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r1) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4880}, 0x20000084) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xef52}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000780)={0x101, 0x8, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000800)={0x2, 0x2, 'client0\x00', 0x5, "2aa20370b4b07bb0", "66343e670b906eb10fd97dc4a535f65fed995f73f08bad7d0866f612900d9dc9", 0x2}) pipe2(&(0x7f00000008c0)={0xffffffffffffffff}, 0x2000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000900)={{0x9, 0xff}, 0x0, 0x2, 0x7fff, {0xf8, 0x9}, 0x6, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000980)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000a40)={0xef6, 0x7ff, 0x1, 'queue1\x00', 0x3}) pipe2(&(0x7f0000000b00)={0xffffffffffffffff}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r5) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xb0, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5fc9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x39}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}]}]}, 0xb0}}, 0x8000) [ 110.278624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.283494] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.288733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.297846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.302596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.345988] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.353512] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.355689] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.362056] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.369683] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.376458] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.378967] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.384052] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.421210] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 110.423641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.426264] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 110.427974] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.430073] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.431451] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 110.439310] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.443645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 110.446755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.451033] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.461447] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.461486] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 110.469298] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.483987] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.486330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.493705] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.504534] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.509514] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.522661] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.551747] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.587052] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.596583] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.597267] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 110.624276] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 110.627420] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 110.636920] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 110.649512] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 112.364026] Bluetooth: hci0: command tx timeout [ 112.490502] Bluetooth: hci1: command tx timeout [ 112.554968] Bluetooth: hci6: command tx timeout [ 112.556705] Bluetooth: hci3: command tx timeout [ 112.618453] Bluetooth: hci5: command tx timeout [ 112.618481] Bluetooth: hci2: command tx timeout [ 112.682741] Bluetooth: hci4: command tx timeout [ 112.748457] Bluetooth: hci7: command tx timeout [ 114.409931] Bluetooth: hci0: command tx timeout [ 114.540480] Bluetooth: hci1: command tx timeout [ 114.601923] Bluetooth: hci6: command tx timeout [ 114.603715] Bluetooth: hci3: command tx timeout [ 114.666034] Bluetooth: hci2: command tx timeout [ 114.667323] Bluetooth: hci5: command tx timeout [ 114.732901] Bluetooth: hci4: command tx timeout [ 114.794414] Bluetooth: hci7: command tx timeout [ 116.458285] Bluetooth: hci0: command tx timeout [ 116.586416] Bluetooth: hci1: command tx timeout [ 116.649952] Bluetooth: hci3: command tx timeout [ 116.649975] Bluetooth: hci6: command tx timeout [ 116.714142] Bluetooth: hci5: command tx timeout [ 116.714215] Bluetooth: hci2: command tx timeout [ 116.779862] Bluetooth: hci4: command tx timeout [ 116.842042] Bluetooth: hci7: command tx timeout [ 118.505971] Bluetooth: hci0: command tx timeout [ 118.634386] Bluetooth: hci1: command tx timeout [ 118.698374] Bluetooth: hci6: command tx timeout [ 118.699621] Bluetooth: hci3: command tx timeout [ 118.763865] Bluetooth: hci5: command tx timeout [ 118.763885] Bluetooth: hci2: command tx timeout [ 118.825931] Bluetooth: hci4: command tx timeout [ 118.889887] Bluetooth: hci7: command tx timeout [ 170.247737] syz-executor.6 (285) used greatest stack depth: 24584 bytes left [ 172.853352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.854887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.856641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.860751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.863607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.989665] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.993214] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.996658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.004284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.017424] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.025426] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.047086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.071312] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.076312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.081277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.082484] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.086589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.094093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.095891] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.096610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.099049] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.100126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.102429] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.103746] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.105488] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.107755] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.113567] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.115641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.115900] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.123816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.125044] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.125074] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.126990] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.136090] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.141490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.295457] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.309449] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.313596] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.321759] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.332269] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 174.890093] Bluetooth: hci0: command tx timeout [ 175.081955] Bluetooth: hci1: command tx timeout [ 175.209888] Bluetooth: hci2: command tx timeout [ 175.273860] Bluetooth: hci4: command tx timeout [ 175.274590] Bluetooth: hci6: command tx timeout [ 175.275223] Bluetooth: hci5: command tx timeout [ 175.275853] Bluetooth: hci3: command tx timeout [ 175.402904] Bluetooth: hci7: command tx timeout [ 176.938323] Bluetooth: hci0: command tx timeout [ 177.130630] Bluetooth: hci1: command tx timeout [ 177.260001] Bluetooth: hci2: command tx timeout [ 177.322323] Bluetooth: hci6: command tx timeout [ 177.323327] Bluetooth: hci4: command tx timeout [ 177.324324] Bluetooth: hci5: command tx timeout [ 177.324403] Bluetooth: hci3: command tx timeout [ 177.449898] Bluetooth: hci7: command tx timeout [ 178.987829] Bluetooth: hci0: command tx timeout [ 179.180002] Bluetooth: hci1: command tx timeout [ 179.305865] Bluetooth: hci2: command tx timeout [ 179.370213] Bluetooth: hci4: command tx timeout [ 179.370709] Bluetooth: hci3: command tx timeout [ 179.371271] Bluetooth: hci5: command tx timeout [ 179.371698] Bluetooth: hci6: command tx timeout [ 179.498120] Bluetooth: hci7: command tx timeout [ 181.033867] Bluetooth: hci0: command tx timeout [ 181.225851] Bluetooth: hci1: command tx timeout [ 181.354124] Bluetooth: hci2: command tx timeout [ 181.417910] Bluetooth: hci6: command tx timeout [ 181.418398] Bluetooth: hci5: command tx timeout [ 181.419755] Bluetooth: hci3: command tx timeout [ 181.420228] Bluetooth: hci4: command tx timeout [ 181.545898] Bluetooth: hci7: command tx timeout [ 235.077018] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.081167] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.084862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.088910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.094473] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.136621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.141660] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.143359] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.154351] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.157453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.253090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.259179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.261639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.269194] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.274747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.328445] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.344472] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.357127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.369924] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.381001] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.425621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.441597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.445009] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.458440] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.469133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.472012] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.485134] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.487044] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.495576] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.509605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.516568] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.522520] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.522677] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 235.523442] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.527335] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.528179] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.552717] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 235.583074] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.585704] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 235.603122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.161869] Bluetooth: hci0: command tx timeout [ 237.225958] Bluetooth: hci1: command tx timeout [ 237.355096] Bluetooth: hci2: command tx timeout [ 237.482325] Bluetooth: hci3: command tx timeout [ 237.609998] Bluetooth: hci4: command tx timeout [ 237.673865] Bluetooth: hci6: command tx timeout [ 237.674878] Bluetooth: hci5: command tx timeout [ 237.738112] Bluetooth: hci7: command tx timeout [ 239.210927] Bluetooth: hci0: command tx timeout [ 239.275862] Bluetooth: hci1: command tx timeout [ 239.403796] Bluetooth: hci2: command tx timeout [ 239.531177] Bluetooth: hci3: command tx timeout [ 239.658082] Bluetooth: hci4: command tx timeout [ 239.723687] Bluetooth: hci5: command tx timeout [ 239.723746] Bluetooth: hci6: command tx timeout [ 239.788004] Bluetooth: hci7: command tx timeout [ 241.258034] Bluetooth: hci0: command tx timeout [ 241.323022] Bluetooth: hci1: command tx timeout [ 241.452106] Bluetooth: hci2: command tx timeout [ 241.577849] Bluetooth: hci3: command tx timeout [ 241.705899] Bluetooth: hci4: command tx timeout [ 241.770101] Bluetooth: hci6: command tx timeout [ 241.770848] Bluetooth: hci5: command tx timeout [ 241.833964] Bluetooth: hci7: command tx timeout [ 243.305855] Bluetooth: hci0: command tx timeout [ 243.369840] Bluetooth: hci1: command tx timeout [ 243.498128] Bluetooth: hci2: command tx timeout [ 243.625878] Bluetooth: hci3: command tx timeout [ 243.753942] Bluetooth: hci4: command tx timeout [ 243.818003] Bluetooth: hci5: command tx timeout [ 243.818068] Bluetooth: hci6: command tx timeout [ 243.881863] Bluetooth: hci7: command tx timeout [ 297.728638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.733585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.736742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.747436] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.758233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.909887] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.921402] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.928092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.931691] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.938386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.946620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.960728] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.967582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.972989] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.979445] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.004827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.026027] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.045275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.055579] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.063827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.067963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.078053] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.087756] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.103336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.110695] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.151296] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.198072] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.203634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.231045] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.252333] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.434986] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.448193] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.475476] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.502295] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.507475] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.518617] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.583080] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.584897] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.627565] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.627585] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.818036] Bluetooth: hci0: command tx timeout [ 300.074552] Bluetooth: hci1: command tx timeout [ 300.075416] Bluetooth: hci2: command tx timeout [ 300.139134] Bluetooth: hci3: command tx timeout [ 300.202278] Bluetooth: hci4: command tx timeout [ 300.457942] Bluetooth: hci5: command tx timeout [ 300.841852] Bluetooth: hci6: command tx timeout [ 301.803063] Bluetooth: hci7: command tx timeout [ 301.866001] Bluetooth: hci0: command tx timeout [ 302.121909] Bluetooth: hci1: command tx timeout [ 302.122858] Bluetooth: hci2: command tx timeout [ 302.186059] Bluetooth: hci3: command tx timeout [ 302.249850] Bluetooth: hci4: command tx timeout [ 302.506890] Bluetooth: hci5: command tx timeout [ 302.890048] Bluetooth: hci6: command tx timeout [ 303.850074] Bluetooth: hci7: command tx timeout [ 303.915089] Bluetooth: hci0: command tx timeout [ 304.171807] Bluetooth: hci2: command tx timeout [ 304.171831] Bluetooth: hci1: command tx timeout [ 304.233952] Bluetooth: hci3: command tx timeout [ 304.297863] Bluetooth: hci4: command tx timeout [ 304.553949] Bluetooth: hci5: command tx timeout [ 304.937994] Bluetooth: hci6: command tx timeout [ 305.897872] Bluetooth: hci7: command tx timeout [ 305.963139] Bluetooth: hci0: command tx timeout [ 306.217901] Bluetooth: hci2: command tx timeout [ 306.217969] Bluetooth: hci1: command tx timeout [ 306.281907] Bluetooth: hci3: command tx timeout [ 306.345841] Bluetooth: hci4: command tx timeout [ 306.602179] Bluetooth: hci5: command tx timeout [ 306.987061] Bluetooth: hci6: command tx timeout [ 307.947067] Bluetooth: hci7: command tx timeout [ 360.146665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.147399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.155514] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.157977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.164401] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.171392] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.172693] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.182107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.188084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.191623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.407059] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.414447] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.417085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.439158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.457279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.493237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.507663] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.527647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.543356] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.546680] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.618194] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.658677] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.697570] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.726726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.765152] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.780087] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.787519] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.789284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.801944] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.813505] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.832977] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.833020] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.878190] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.890577] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.903311] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.937340] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.969375] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.975142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.068542] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 361.104291] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 362.282923] Bluetooth: hci1: command tx timeout [ 362.284154] Bluetooth: hci0: command tx timeout [ 362.537872] Bluetooth: hci2: command tx timeout [ 362.601856] Bluetooth: hci3: command tx timeout [ 362.986088] Bluetooth: hci4: command tx timeout [ 363.050216] Bluetooth: hci6: command tx timeout [ 363.113890] Bluetooth: hci5: command tx timeout [ 363.242927] Bluetooth: hci7: command tx timeout [ 364.329865] Bluetooth: hci0: command tx timeout [ 364.330365] Bluetooth: hci1: command tx timeout [ 364.585903] Bluetooth: hci2: command tx timeout [ 364.650085] Bluetooth: hci3: command tx timeout [ 365.034799] Bluetooth: hci4: command tx timeout [ 365.098454] Bluetooth: hci6: command tx timeout [ 365.163120] Bluetooth: hci5: command tx timeout [ 365.290064] Bluetooth: hci7: command tx timeout [ 366.377853] Bluetooth: hci0: command tx timeout [ 366.378347] Bluetooth: hci1: command tx timeout [ 366.636030] Bluetooth: hci2: command tx timeout [ 366.697825] Bluetooth: hci3: command tx timeout [ 367.082808] Bluetooth: hci4: command tx timeout [ 367.145869] Bluetooth: hci6: command tx timeout [ 367.209839] Bluetooth: hci5: command tx timeout [ 367.338191] Bluetooth: hci7: command tx timeout [ 368.425873] Bluetooth: hci1: command tx timeout [ 368.426354] Bluetooth: hci0: command tx timeout [ 368.681959] Bluetooth: hci2: command tx timeout [ 368.746008] Bluetooth: hci3: command tx timeout [ 369.130094] Bluetooth: hci4: command tx timeout [ 369.194116] Bluetooth: hci6: command tx timeout [ 369.257903] Bluetooth: hci5: command tx timeout [ 369.385877] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 09:47:25 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888029d0fd90 RCX=ffffffff818cc859 RDX=ffff888034785340 RSI=0000000000000008 RDI=ffffea00001d8e00 RBP=ffffea00001d8e00 RSP=ffff888029d0fb80 R8 =0000000000000001 R9 =fffff9400003b1c0 R10=0000000000000000 R11=0000000000000000 R12=00000000000002d4 R13=dffffc0000000000 R14=ffff88801569b800 R15=ffff88800932b620 RIP=ffffffff81ae0ff8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f78279f7540 00000000 00000000 GS =0000 ffff8880e5648000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7827eba000 CR3=00000000169e4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff8880094b4040 RCX=ffffffff818fddd9 RDX=ffff88802f30b780 RSI=ffffffff818fd5d5 RDI=ffffea0000702980 RBP=ffffea0000702980 RSP=ffff888030077b80 R8 =0000000000000005 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=ffff88806cf31900 R14=0000000000000001 R15=ffff888030077c18 RIP=ffffffff818fd5d8 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5748000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f52270bc170 CR3=00000000357fb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000