Warning: Permanently added '[localhost]:57870' (ECDSA) to the list of known hosts. 2025/05/31 20:38:19 fuzzer started 2025/05/31 20:38:20 dialing manager at localhost:34361 syzkaller login: [ 107.568851] cgroup: Unknown subsys name 'net' [ 107.709641] cgroup: Unknown subsys name 'cpuset' [ 107.747186] cgroup: Unknown subsys name 'rlimit' 2025/05/31 20:38:40 syscalls: 202 2025/05/31 20:38:40 code coverage: enabled 2025/05/31 20:38:40 comparison tracing: enabled 2025/05/31 20:38:40 extra coverage: enabled 2025/05/31 20:38:40 setuid sandbox: enabled 2025/05/31 20:38:40 namespace sandbox: enabled 2025/05/31 20:38:40 Android sandbox: enabled 2025/05/31 20:38:40 fault injection: enabled 2025/05/31 20:38:40 leak checking: enabled 2025/05/31 20:38:40 net packet injection: enabled 2025/05/31 20:38:40 net device setup: enabled 2025/05/31 20:38:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/31 20:38:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/31 20:38:40 USB emulation: enabled 2025/05/31 20:38:40 hci packet injection: enabled 2025/05/31 20:38:40 wifi device emulation: enabled 2025/05/31 20:38:40 802.15.4 emulation: enabled 2025/05/31 20:38:40 fetching corpus: 0, signal 0/0 (executing program) 2025/05/31 20:38:42 starting 8 fuzzer processes 20:38:42 executing program 0: ioprio_set$pid(0x0, 0x0, 0x4007) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x80000000, 0x400) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x90) ptrace$getregs(0xe, 0xffffffffffffffff, 0x7ea, &(0x7f00000001c0)=""/245) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80a0}, 0x20004805) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r4, 0x408, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x80}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000041}, 0xc010) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x58, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x44845}, 0x20000040) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4) 20:38:42 executing program 2: migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x7ff, &(0x7f0000000040)=0x401) waitid(0x0, 0x0, 0x0, 0x70000004, &(0x7f0000000080)) r0 = fork() ptrace(0x4207, r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x53}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c400}, 0x2400c840) fork() r2 = gettid() ptrace$setopts(0x4200, r2, 0x68, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "0913aa9776aaa57cb17c6e6c332d3c73"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x40008c4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40014) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x98, r5, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x54, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "853429d2a5b533b9ee9fa8209e53566550ddc26183029b850bf1f319c7406b4b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0a7345db37be179c5802d6afd8fd465bab8ac3d8b2badaa631896072c08facfc"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x98}, 0x1, 0x0, 0x0, 0x8054}, 0x4000000) r7 = getpgid(r2) getpgid(r7) ptrace(0x4207, r0) 20:38:42 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x0, 0x3, 0x8}, 0x6b}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x3, 0x3, 0x6d8, 0x2, 0x400}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000140)) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000180)) r1 = inotify_init() r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x5, 0x40) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x3, 0x40000) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x104}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x4000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000003c0)={{0xfffffffffffffffe, 0x3, 0x5, 0x3, 0x8}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0xa8000) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1c8, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0a1f399119921ba4258a13be51458b2e"}]}, @NL802154_ATTR_SEC_KEY={0xac, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "65fbcc52c8a709de5b9c176a1ab194a8"}, @NL802154_KEY_ATTR_ID={0x7c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xac5b52332448f5af}, @NL802154_ATTR_SEC_KEY={0xe4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xe8210169ffd435e4}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3d8912413df8485c3ee117c788e8ac9718e25a4da17fe1b9b661b9d991d435ae"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e72f4fb9e22f509581be7f285d7906716f941e6d904e3f2970ff408d56cf337e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "fac489c732cdde876f8760c24a6e27db"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4014}, 0x50) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000700), 0x280) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000740)={{0x0, 0x3, 0x200, 0x3, 0x7fffffff}, 0x1, 0x3f}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x80, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x17}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) 20:38:42 executing program 3: ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x78, 0x141000) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x9, 0x28100) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x33, 0x20000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000180)={0x48, ""/72}) r3 = syz_open_dev$sg(&(0x7f0000000200), 0x7, 0x2080) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000240)=0x3f) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffffffffffffec69, 0x40000) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000002c0)={0x8}, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000300), 0x5e29, 0x610240) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r2) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000340)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x5, 0x12, 0x8, "9bb7cac546bd54afb9fc78bc3db055c7f71684c5752a0030e0fa43e41823c9d5380c356fd04715aa7935b5d69ae34c49465252b264e1364e658efde29a928870", "cd2d1608d46e24f6bba11e3499e7ddd5b47cae5508c645dfd9ae4f2bfe1b625ce555a7d7a69651a5eea714f14d1b5dde5d2b36c654b5c2f61d3eee561d2670fc", "9fbce20dcd7cfcfdcc14fac91b36e5e223f4910139c26ea06b071f907771535b", [0x0, 0xa6]}) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000540)={0x10000}, 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) 20:38:42 executing program 4: munlockall() mlockall(0x4) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) mlockall(0x0) munlockall() sysinfo(&(0x7f0000000000)=""/193) sysinfo(&(0x7f0000000100)=""/196) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}}, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth1_to_team\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', r1, 0x2f, 0x0, 0x6, 0xdd, 0x63, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, 0x1, 0x8, 0xcf, 0xdf71}}) socketpair(0x18, 0x3, 0x9, &(0x7f0000000480)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x440d1) clock_getres(0x6, &(0x7f0000000600)) setfsuid(0x0) r4 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x172f, 0x501, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1f, 0x90, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x140}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0x1}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x201, 0x7f, 0x7, 0x7, 0x10, 0x5}, 0x111, &(0x7f00000006c0)={0x5, 0xf, 0x111, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "cdda2281c47826b562845ecce4645748"}, @generic={0xe1, 0x10, 0xb, "fa1f1ec72e943b1562e438f4f781e0d96d3b56fba728620d0a6a20ef40028ad7d36903183d7a4e6c95eb68a94a95b4a4846b7245a962a5b818959e3a9c409f7591980f8d2a375708c4f2cadee79f5c6cdbdf5613111bfba772516300d5de5ba97bc5378453291974bad1d9933059722dcb00a009f9d95f791ca18fc3f62be07df8dd33b0819226c5d929c3a73398bb5bf73447895d04d6d72169009ad2cd6fa447fd5b631460441de8d61e88fdeff800b334b05dc04fc5563811762b0ff82695e75e26ee53abcdde48a5e45cd46c1e9766858358fa1deae2b86214eeaa1f"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x35, "569db93e5bffad0fe3013d1740b43d1c"}]}, 0x2, [{0x3e, &(0x7f0000000800)=@string={0x3e, 0x3, "9e230275f50c2700f8665a2f6cedb0861361d9ba5c54ae764978134e0f4dc458ee07bf626d69425e8ff15de167c692126302400101699d578969bd4b"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x3c0a}}]}) syz_usb_ep_write(r4, 0x9, 0x3d, &(0x7f00000008c0)="c04a5566ad18773ded731400f22084b34774adcecafcad93f610f2eeac9c319f29c54eeba9f7c8208b9d4b9adfdabc8beee6c03fef640b842a566c2f31") sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xfc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x40040861) syz_open_dev$hiddev(&(0x7f0000000a00), 0x3, 0x80001) [ 129.977209] audit: type=1400 audit(1748723922.918:7): avc: denied { execmem } for pid=283 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:38:42 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x10000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x3, 0x80000000, 0x2, 0x11}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x3, 0x1, 0x7fff}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x800) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x2, 0x2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000180)={0x1, 0x0, 0x3, 0x0, 0x2}) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000200)) prctl$PR_PAC_RESET_KEYS(0x36, 0x2) r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5a4, 0x2000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xf0, 0xff, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x2, 0x1e, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x42d}}, {{{0x9, 0x5, 0x81, 0x3, 0x7d121796e112ea07, 0x6, 0x7, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xc7, 0xfb, 0x4c}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x87, 0xff, 0xaa, 0xff, 0x1}, 0x31, &(0x7f00000002c0)={0x5, 0xf, 0x31, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0x8, 0xff, 0x40, 0xd1}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x26, "4ed3cac945b82e042d5ef8a1a69656d7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x1, 0x1f, 0xff}]}, 0x4, [{0x51, &(0x7f0000000300)=@string={0x51, 0x3, "fc71f3a6fa58ab2279c0d0a48150b893965015063e9cf55725aba9c63a42dc89e9754fbbd23a1418697ae569fafc84f8c6f438f02ecd79bf1267389e6dbba0e5190fab8d78a6b57192e46eced7c509"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x446}}, {0x39, &(0x7f00000003c0)=@string={0x39, 0x3, "28293b2aeaa2a7e8ad8ab8624666227eec1326f0299182cf932f9235d978a8ab0e48e131640571ce00317db442be41e36ab01867e3cb0d"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x402}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000680)={0x24, &(0x7f00000004c0)={0x20, 0x3, 0x2f, {0x2f, 0x22, "dfc47479a45e9a81bd6fa1d828420d3830d2c29e610913fe5774d5c6eb9055b4ef905ab3fb268d254bad465755"}}, &(0x7f0000000500)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "a6ee844b6d562ed0941e60594d5cb81048f544581453291441fc784ab0c49fc157555e711199baa61e5971e24440bb441036a34190dfc979b8a9bfd001694640240542dbd3e27c9eca5a4fac7713768e9c6d09e41030550b745f4b350d7cc9624a5be1e4dcaa20b2b70e611b91e67cb20dddb06d7c78d10f3bfdcb81c0ac5f35f4695985e07d16b27af53cf26740c83e4bc7ce149c9971df6affba4e78c8386418e7b80f2b5b7a06e9dbb399d11da96a0dbfdc32be984b8ecb624a13569e7385a48094a1ced8c95c8e2abe3a41c4dcf63e2cdbd33515a2495a17fab13d4cb4ab0a404f19b8495d6cd64bcc072b42475623d7"}}, &(0x7f0000000600)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x6}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0x471}}}}, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)={0x60, 0x8, 0x82, "35495a052a69f07296c92febeafc0915ebb7bd92e4016d87480dcea617a1617698c01e1b7e45da6251abc1ecb1e267e8b7b9ec2fbb5edb2d364138b88ffa3c4a2b72c087271a66b5cf8704ae29010715e9929e2ccdae55eecd3064a68b13d2c05ca1b75a9f1320c022599f9bf044f8c5a155e0a7c5ac370e981d69a65f38aa7c4542"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xe1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000800)={0x20, 0x1, 0x9a, "fdf22dab0983a26a4df49d5ce782aa5e4c03a8bedcf8c26b0377d748f2a30b4218bd19effa253f34cc29ab294373262d53b54f97fbeaae63dda44cfd85df8506970642ad963a9f91f420933b1977be8c019e5ee815424df340a4623fd2f89bf5f059b9375e48a406e05a607fc27b1da8eb3defae43debe63fa0be35ed39c080bf866337cefc90b9ff6d67a52be057c12718e0b8e92d3f65425fc"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x9}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000940)) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000980)={0x0, 0x0, 0x0, 0xdb16, 0xb5f, 0x0, 0x6, 0x4, 0x8, "9dc6bd9d7be6023cc023faeb9dbc0b3c2ff24eb0a9bd6864a392c9f194452745a88c525764fc019c99b36e811417288e2ae0f8ae5faa23db93dd6819765e0847", "a589883bf2ab3c6140693e88bae25609e6d1b5886b05aa34867723f27bd73f150cc47bf376f0973e913e1d1b2e4a92c573390046e2c96bf33e34e9d98cfd630c", "c0df9fdb1effdfa303afeed921cb2def4c0192fe1ddb0b9ecc772727e93a57a8", [0x8, 0x81]}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000a80)) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b00), r0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, r5, 0x4, 0x70bd25, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x38}}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x643c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x40001) 20:38:42 executing program 6: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffff, 0x20040) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040)) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x28141) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000180)) r2 = inotify_init() ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x4, 0x4, 0x7, 0x8, "2cf35d72bf308b8f3f64575445accd7f525bc3009f1e24f8a5ec4e66ff0c59d138d2e656e7f3f8310ea508353ac9c0fe929ec25d93280b9dd777689edc413cdd", "43e95446eadfef05bd1179cd29b69f60514244822fa73358200a56f27f0dfbcd", [0x80, 0x10001]}) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x54}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1e}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000010) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x40, 0x204300) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f00000004c0)) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb4, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x67}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1581}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0xc}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2ca}]}, 0xb4}, 0x1, 0x0, 0x0, 0x480c0}, 0x40) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000740), 0x642401, 0x0) ioctl$SNAPSHOT_S2RAM(r4, 0x330b) r5 = syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0x8c0) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, &(0x7f00000007c0)={0x1, 0xfffffbfd, 0x2}) r6 = syz_open_dev$hiddev(&(0x7f0000000800), 0x5, 0x400600) ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000000840)={0x2, 0xffffffff, 0xffffffff}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044090}, 0x40) 20:38:43 executing program 7: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x4e851c676ac9e4e2}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000081) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r6, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x663c}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x4000) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) write$snapshot(r9, &(0x7f0000000840)="17b1ded86ed2a15ef1b6ee3b7fc3523cb81ff752c5779b3999a3ad5663f7db", 0x1f) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, r10, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x60}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004094) [ 131.490168] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.500200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.508399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.510992] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.519034] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.521206] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.527647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.528460] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.533730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.539023] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.541101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.543273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.559742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.568064] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.573414] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.576641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.579972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.587416] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.591041] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.593422] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.595672] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.598114] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 131.601108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.620996] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.623229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.630216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.633002] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.634758] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 131.638154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.649366] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.653708] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 131.655940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.678213] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.681416] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.687881] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 131.690055] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.695284] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.704725] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 131.718726] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.765054] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 133.622999] Bluetooth: hci0: command tx timeout [ 133.688528] Bluetooth: hci1: command tx timeout [ 133.749907] Bluetooth: hci2: command tx timeout [ 133.750915] Bluetooth: hci3: command tx timeout [ 133.814750] Bluetooth: hci6: command tx timeout [ 133.814865] Bluetooth: hci4: command tx timeout [ 133.877961] Bluetooth: hci7: command tx timeout [ 133.879054] Bluetooth: hci5: command tx timeout [ 135.670056] Bluetooth: hci0: command tx timeout [ 135.733858] Bluetooth: hci1: command tx timeout [ 135.797602] Bluetooth: hci2: command tx timeout [ 135.797720] Bluetooth: hci3: command tx timeout [ 135.861634] Bluetooth: hci4: command tx timeout [ 135.862117] Bluetooth: hci6: command tx timeout [ 135.925515] Bluetooth: hci5: command tx timeout [ 135.925562] Bluetooth: hci7: command tx timeout [ 137.717525] Bluetooth: hci0: command tx timeout [ 137.781741] Bluetooth: hci1: command tx timeout [ 137.845657] Bluetooth: hci2: command tx timeout [ 137.845685] Bluetooth: hci3: command tx timeout [ 137.909535] Bluetooth: hci6: command tx timeout [ 137.910004] Bluetooth: hci4: command tx timeout [ 137.973580] Bluetooth: hci5: command tx timeout [ 137.974370] Bluetooth: hci7: command tx timeout [ 139.765539] Bluetooth: hci0: command tx timeout [ 139.830252] Bluetooth: hci1: command tx timeout [ 139.893698] Bluetooth: hci2: command tx timeout [ 139.894637] Bluetooth: hci3: command tx timeout [ 139.958611] Bluetooth: hci4: command tx timeout [ 139.959076] Bluetooth: hci6: command tx timeout [ 140.021727] Bluetooth: hci7: command tx timeout [ 140.021920] Bluetooth: hci5: command tx timeout [ 193.928046] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.934271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.944401] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.957826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.966393] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.015328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.023145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.026814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.030772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.038638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.046112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.054285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.066209] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.072376] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.078894] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.080948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.091071] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.104397] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.117917] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.130592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.135605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.141950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.176055] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.205966] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.210481] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.324702] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.331954] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.346007] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.361337] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.368911] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.552411] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.556946] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.586223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.633034] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.649742] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 194.652763] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.683240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 194.687055] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 194.724288] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.757035] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 196.021716] Bluetooth: hci0: command tx timeout [ 196.149643] Bluetooth: hci2: command tx timeout [ 196.150789] Bluetooth: hci1: command tx timeout [ 196.405644] Bluetooth: hci3: command tx timeout [ 196.599719] Bluetooth: hci5: command tx timeout [ 196.600734] Bluetooth: hci4: command tx timeout [ 196.789582] Bluetooth: hci6: command tx timeout [ 196.919289] Bluetooth: hci7: command tx timeout [ 198.070746] Bluetooth: hci0: command tx timeout [ 198.198645] Bluetooth: hci1: command tx timeout [ 198.199123] Bluetooth: hci2: command tx timeout [ 198.453626] Bluetooth: hci3: command tx timeout [ 198.646601] Bluetooth: hci4: command tx timeout [ 198.647091] Bluetooth: hci5: command tx timeout [ 198.838641] Bluetooth: hci6: command tx timeout [ 198.967314] Bluetooth: hci7: command tx timeout [ 200.120472] Bluetooth: hci0: command tx timeout [ 200.245533] Bluetooth: hci2: command tx timeout [ 200.246018] Bluetooth: hci1: command tx timeout [ 200.501506] Bluetooth: hci3: command tx timeout [ 200.693796] Bluetooth: hci5: command tx timeout [ 200.694280] Bluetooth: hci4: command tx timeout [ 200.885782] Bluetooth: hci6: command tx timeout [ 201.013727] Bluetooth: hci7: command tx timeout [ 202.165538] Bluetooth: hci0: command tx timeout [ 202.294136] Bluetooth: hci2: command tx timeout [ 202.295100] Bluetooth: hci1: command tx timeout [ 202.549965] Bluetooth: hci3: command tx timeout [ 202.741541] Bluetooth: hci5: command tx timeout [ 202.742017] Bluetooth: hci4: command tx timeout [ 202.933531] Bluetooth: hci6: command tx timeout [ 203.061536] Bluetooth: hci7: command tx timeout [ 255.755204] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.760037] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.763379] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.770009] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.776005] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.897569] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.900905] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.903349] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.908667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.913559] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.952344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.961103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.975982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.985976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.008960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.160981] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.179099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.186129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.205907] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.239227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.241939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.258272] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.311903] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.320837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.323938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.329000] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.331104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.338025] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.340403] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.436189] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 256.441607] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 256.451978] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 256.490837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 256.501016] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 256.516761] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 256.527031] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 256.541991] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.544184] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 256.574060] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 256.597536] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.845732] Bluetooth: hci0: command tx timeout [ 257.973990] Bluetooth: hci1: command tx timeout [ 258.101559] Bluetooth: hci2: command tx timeout [ 258.421831] Bluetooth: hci4: command tx timeout [ 258.421855] Bluetooth: hci3: command tx timeout [ 258.550148] Bluetooth: hci5: command tx timeout [ 258.677783] Bluetooth: hci7: command tx timeout [ 258.678038] Bluetooth: hci6: command tx timeout [ 259.894524] Bluetooth: hci0: command tx timeout [ 260.021500] Bluetooth: hci1: command tx timeout [ 260.149719] Bluetooth: hci2: command tx timeout [ 260.469734] Bluetooth: hci4: command tx timeout [ 260.470507] Bluetooth: hci3: command tx timeout [ 260.600527] Bluetooth: hci5: command tx timeout [ 260.726467] Bluetooth: hci7: command tx timeout [ 260.726551] Bluetooth: hci6: command tx timeout [ 261.942475] Bluetooth: hci0: command tx timeout [ 262.069678] Bluetooth: hci1: command tx timeout [ 262.199485] Bluetooth: hci2: command tx timeout [ 262.517704] Bluetooth: hci3: command tx timeout [ 262.517833] Bluetooth: hci4: command tx timeout [ 262.645920] Bluetooth: hci5: command tx timeout [ 262.773575] Bluetooth: hci6: command tx timeout [ 262.773595] Bluetooth: hci7: command tx timeout [ 263.990650] Bluetooth: hci0: command tx timeout [ 264.117903] Bluetooth: hci1: command tx timeout [ 264.246556] Bluetooth: hci2: command tx timeout [ 264.566494] Bluetooth: hci4: command tx timeout [ 264.566516] Bluetooth: hci3: command tx timeout [ 264.693508] Bluetooth: hci5: command tx timeout [ 264.823621] Bluetooth: hci6: command tx timeout [ 264.823701] Bluetooth: hci7: command tx timeout [ 318.347950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.352014] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.357097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.365203] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.370128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.476914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.491144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.496055] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.509341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.521976] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.605849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.614190] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.618972] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.635731] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.643989] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.698396] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.733970] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.739700] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.760806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.785564] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 318.790358] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.812646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 318.817131] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 318.819605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 318.821898] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.825596] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 318.827853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 318.849117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.866029] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 318.877668] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 318.880947] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.884708] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.901053] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.905267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.930708] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.939023] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 318.969932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.972008] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.997827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.019075] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.437582] Bluetooth: hci0: command tx timeout [ 320.629522] Bluetooth: hci1: command tx timeout [ 320.757528] Bluetooth: hci2: command tx timeout [ 320.887283] Bluetooth: hci3: command tx timeout [ 321.013632] Bluetooth: hci7: command tx timeout [ 321.077624] Bluetooth: hci6: command tx timeout [ 321.144561] Bluetooth: hci5: command tx timeout [ 321.145339] Bluetooth: hci4: command tx timeout [ 322.485715] Bluetooth: hci0: command tx timeout [ 322.677494] Bluetooth: hci1: command tx timeout [ 322.805635] Bluetooth: hci2: command tx timeout [ 322.933558] Bluetooth: hci3: command tx timeout [ 323.061492] Bluetooth: hci7: command tx timeout [ 323.125490] Bluetooth: hci6: command tx timeout [ 323.189509] Bluetooth: hci4: command tx timeout [ 323.189950] Bluetooth: hci5: command tx timeout [ 324.534994] Bluetooth: hci0: command tx timeout [ 324.726497] Bluetooth: hci1: command tx timeout [ 324.853503] Bluetooth: hci2: command tx timeout [ 324.982481] Bluetooth: hci3: command tx timeout [ 325.109520] Bluetooth: hci7: command tx timeout [ 325.174507] Bluetooth: hci6: command tx timeout [ 325.237523] Bluetooth: hci4: command tx timeout [ 325.238010] Bluetooth: hci5: command tx timeout [ 326.582500] Bluetooth: hci0: command tx timeout [ 326.774038] Bluetooth: hci1: command tx timeout [ 326.901925] Bluetooth: hci2: command tx timeout [ 327.029656] Bluetooth: hci3: command tx timeout [ 327.157519] Bluetooth: hci7: command tx timeout [ 327.221766] Bluetooth: hci6: command tx timeout [ 327.285904] Bluetooth: hci5: command tx timeout [ 327.286769] Bluetooth: hci4: command tx timeout [ 380.880048] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.887120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.892745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.901367] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.908088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.010875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.022745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.029073] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.040107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.053235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.067312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.071316] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.076915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.109023] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.119782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.138407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.145035] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.161934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.181318] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.192064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 381.327902] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.330994] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.333348] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.339231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.347514] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.384366] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.429981] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.432497] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.434258] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 381.438955] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.440691] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 381.443015] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.444973] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 381.480935] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.485158] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 381.487017] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 381.494906] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.549869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.552151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 381.597200] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.966530] Bluetooth: hci0: command tx timeout [ 383.094532] Bluetooth: hci1: command tx timeout [ 383.285653] Bluetooth: hci2: command tx timeout [ 383.285731] Bluetooth: hci3: command tx timeout [ 383.414971] Bluetooth: hci4: command tx timeout [ 383.669636] Bluetooth: hci7: command tx timeout [ 383.669646] Bluetooth: hci5: command tx timeout [ 383.669928] Bluetooth: hci6: command tx timeout [ 385.014396] Bluetooth: hci0: command tx timeout [ 385.141476] Bluetooth: hci1: command tx timeout [ 385.333550] Bluetooth: hci2: command tx timeout [ 385.334138] Bluetooth: hci3: command tx timeout [ 385.464530] Bluetooth: hci4: command tx timeout [ 385.717592] Bluetooth: hci7: command tx timeout [ 385.717971] Bluetooth: hci5: command tx timeout [ 385.718066] Bluetooth: hci6: command tx timeout [ 387.061644] Bluetooth: hci0: command tx timeout [ 387.190481] Bluetooth: hci1: command tx timeout [ 387.381804] Bluetooth: hci3: command tx timeout [ 387.381865] Bluetooth: hci2: command tx timeout [ 387.511587] Bluetooth: hci4: command tx timeout [ 387.766536] Bluetooth: hci5: command tx timeout [ 387.766754] Bluetooth: hci7: command tx timeout [ 387.767040] Bluetooth: hci6: command tx timeout [ 389.110499] Bluetooth: hci0: command tx timeout [ 389.237579] Bluetooth: hci1: command tx timeout [ 389.429675] Bluetooth: hci3: command tx timeout [ 389.430618] Bluetooth: hci2: command tx timeout [ 389.558525] Bluetooth: hci4: command tx timeout [ 389.813549] Bluetooth: hci7: command tx timeout [ 389.816478] Bluetooth: hci5: command tx timeout [ 389.816621] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 20:43:48 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=0000000000001400 RCX=000000000000b99d RDX=0000000000000324 RSI=ffff88806ce36fc0 RDI=ffff88806ce36fd8 RBP=ffff88806ce36fc0 RSP=ffff88806ce08c50 R8 =0000000000000005 R9 =0000000000000278 R10=000000000009e000 R11=0000000000000001 R12=0000000000000000 R13=ffff88806ce3705c R14=00000000000000ac R15=0000000000000005 RIP=ffffffff814d07ad RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4d769df540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe0100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4d76bca620 CR3=0000000031d26000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff81604940 RCX=ffff88806cf089cc RDX=1ffff1100d9e117f RSI=ffffffff84b3fad0 RDI=ffff88806cf08b4c RBP=ffff88806cf08b10 RSP=ffff88806cf08a78 R8 =ffffffff867cc9d8 R9 =ffff88806cf08ab8 R10=000000000003b6bd R11=00000000000086ac R12=ffff88806cf08b40 R13=0000000000000000 R14=ffff888025585280 R15=ffff888035bb7b90 RIP=ffffffff812d99c8 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcb40387540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcb4058bd5c CR3=000000003420c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000