Warning: Permanently added '[localhost]:31017' (ECDSA) to the list of known hosts. 2025/06/11 02:56:01 fuzzer started 2025/06/11 02:56:01 dialing manager at localhost:37235 syzkaller login: [ 109.597290] cgroup: Unknown subsys name 'net' [ 109.730171] cgroup: Unknown subsys name 'cpuset' [ 109.781425] cgroup: Unknown subsys name 'rlimit' 2025/06/11 02:56:24 syscalls: 200 2025/06/11 02:56:24 code coverage: enabled 2025/06/11 02:56:24 comparison tracing: enabled 2025/06/11 02:56:24 extra coverage: enabled 2025/06/11 02:56:24 setuid sandbox: enabled 2025/06/11 02:56:24 namespace sandbox: enabled 2025/06/11 02:56:24 Android sandbox: enabled 2025/06/11 02:56:24 fault injection: enabled 2025/06/11 02:56:24 leak checking: enabled 2025/06/11 02:56:24 net packet injection: enabled 2025/06/11 02:56:24 net device setup: enabled 2025/06/11 02:56:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/11 02:56:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/11 02:56:24 USB emulation: enabled 2025/06/11 02:56:24 hci packet injection: enabled 2025/06/11 02:56:24 wifi device emulation: enabled 2025/06/11 02:56:24 802.15.4 emulation: enabled 2025/06/11 02:56:24 fetching corpus: 0, signal 0/0 (executing program) 2025/06/11 02:56:26 starting 8 fuzzer processes 02:56:26 executing program 0: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x15c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4c}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x25}}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9121}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2368}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r0 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xe4, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x11}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x1d}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x4000094) socketpair(0x28, 0x2, 0xd9, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @phonet={0x23, 0x1f, 0x9, 0x2}, @tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}}}, @isdn={0x22, 0x0, 0xac, 0xc1, 0xec}, 0xfff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x80000000, 0xe859}) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) setxattr$trusted_overlay_nlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680), &(0x7f00000006c0)={'U-', 0x3}, 0x16, 0x1) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/cgroup\x00') ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000740)={0x3, 0x200, 0x1}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000780), &(0x7f00000007c0)=0xc) getpeername$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'syztnl2\x00', r4, 0x2f, 0x40, 0x3, 0x5, 0x48, @private2, @empty, 0x10, 0x1, 0x1f, 0x7095}}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000a40), &(0x7f0000000a80)=0xc) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1535}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40040010) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x526}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d40)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r3, 0x7, 0x0, 0x7, 0x1}, 0xa1) 02:56:26 executing program 2: ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x10200) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x81, 0x2080) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)={'full', 0x20, 0x80000001, 0x20, 0x9}, 0x2f) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000140)) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x168, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x47f3}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffff7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x76b}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8ec}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc0000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffff8ba}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5cff8a4a}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x40090) r2 = syz_open_dev$hiddev(&(0x7f0000000400), 0x0, 0x400) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000440)={0x1, 0xffffffff, 0x5, 0x65f3, 0xfffffff9, 0x5b3f, 0x80000001, 0x2e, 0x2, 0x7, 0x6, 0x2, 0x9, 0x7f57}) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000480)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000, 0x0) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000500)) r4 = syz_io_uring_complete(0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000540)=0x8) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000580)=0x1) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps\x00') ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f0000000600)) 02:56:26 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x1000}, 0x4) r1 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) bind$packet(r1, &(0x7f0000000100)={0x11, 0x18, 0x0, 0x1, 0x3}, 0x14) setsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000140)="4c34de94048e9ffb7579b00718ae04c8662860899ff89e97b94eda19bf5cbfbffdf9f7ddd04e051575d0ee953a3dc5a8efb1e25e6888c7705ea7194a5cc6b8e709597ff0d7def21d3858933dc54a4a4dc79b4d75faa3f307615f8a3577ae0cf59e9b90835c534f6dd6f6f8d5937c5771125ee39e7d8a727528dd232bb430f37ab67a1017c8", 0x85) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000200)="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", 0xfc) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfd}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x51d}]}, 0x64}, 0x1, 0x0, 0x0, 0x15}, 0x80) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) write$rfkill(r0, &(0x7f00000004c0)={0x90, 0x9, 0x3, 0x0, 0x1}, 0x8) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r2, r2) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000005c0)={0x0, &(0x7f0000000580)}, 0x10) r3 = syz_io_uring_setup(0x700f, &(0x7f0000000600)={0x0, 0x6337, 0x10, 0x1, 0x2fe, 0x0, r0}, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) io_uring_setup(0x52dc, &(0x7f0000000700)={0x0, 0xc33d, 0x20, 0x3, 0x34f, 0x0, r3}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r4, 0x435, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x48801) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000900)={0x3, &(0x7f00000008c0)=[{0xfff7, 0x3, 0x0, 0x9}, {0x0, 0x1, 0x3f, 0x785}, {0x1, 0x7, 0x1, 0x9}]}, 0x10) keyctl$reject(0x13, r2, 0x80000001, 0xff, r2) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000980), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc044}, 0x4000800) 02:56:26 executing program 3: r0 = fork() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip6_tables_matches\x00') r2 = pidfd_open(r0, 0x0) pidfd_open(0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000000}, 0x5) keyctl$link(0x8, 0x0, 0xfffffffffffffffa) pidfd_send_signal(r2, 0x20, &(0x7f0000000180)={0x3d, 0x2, 0x4}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000200)) r4 = syz_open_procfs(r0, &(0x7f0000000240)='net/ip_vs\x00') r5 = accept4$packet(r4, 0x0, &(0x7f0000000280), 0x80800) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={0x0, @llc={0x1a, 0x201, 0x7, 0x7f, 0x7f, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, @phonet={0x23, 0xe6, 0x1, 0x1f}, @nfc={0x27, 0x1, 0x1, 0x5}, 0x200, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x2, 0x1, 0x80}) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0x37, 0x40, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e36b75"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x79e, 0x93}, {0x6, 0x24, 0x1a, 0x900, 0x11}, [@mdlm={0x15, 0x24, 0x12, 0xcc1}]}, {{0x9, 0x5, 0x81, 0x3, 0x4739599cee1361a7, 0x98, 0x0, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x80, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x80, 0x1, 0xf8}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x110, 0x7, 0x0, 0x9, 0x28, 0x7f}, 0x16, &(0x7f0000000440)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xa, 0xd, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xff, 0xfd, 0xc8f}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}]}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000500)={0x0, 0xe6, 0x42}, &(0x7f0000000540)={'enc=', 'raw', ' hash=', {'ghash-ce\x00'}}, &(0x7f00000005c0)="de3124d4faa701be4123552e32fe3f7eda7a6813733b2d1a0a72f8169884751f0f01f9490ca792315451503849bd8fc9a17b8d7a2e35072dead487c84f287d23c0ea789a214cb86898e5bcf8f70fd81e6a58ccb3ae5358e68411b3b60b1d0cf61746a5137180ea69f3f0df4ebb92a6ee12b7172b8e0ba746b74caed0d3b569a1916643ff3e425565ef266303bbc48603e56d4ca3870a76e5b706f1e92bd82c8fdb605d134875462719551beb67fbd3c70316d73c2b047b530dc51d65ffcc3c72b750b43018982967bab70f2251ba8cf0ae1cffd5eabeaba976713a3fce4a3c5966dce853aa13", &(0x7f00000006c0)=""/66) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x10000, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r4) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xac, r7, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xac}, 0x1, 0x0, 0x0, 0x801}, 0x1) r8 = add_key(&(0x7f0000000940)='encrypted\x00', &(0x7f0000000980)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r8, 0x20) ioctl$SG_SET_TIMEOUT(r6, 0x2201, &(0x7f00000009c0)=0x5) [ 133.990544] audit: type=1400 audit(1749610586.436:7): avc: denied { execmem } for pid=283 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:56:26 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x4) r1 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='syz', r0) keyctl$unlink(0x9, r1, 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$search(0xa, 0x0, &(0x7f0000000140)='blacklist\x00', &(0x7f0000000180)={'syz', 0x3}, r2) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$reject(0x13, r3, 0x8, 0x9, r1) r4 = request_key(&(0x7f0000000340)='.dead\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='&^\x00', 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f00000002c0)='id_resolver\x00', &(0x7f0000000300)={'syz', 0x0}, r4) keyctl$unlink(0x9, r2, r4) r5 = add_key(&(0x7f0000000400)='blacklist\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, r3) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, r5, 0xffff, 0x3f, r6) request_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)='*\':&}$+@@*)@\x00', 0xfffffffffffffff8) r7 = geteuid() keyctl$chown(0x4, r0, r7, 0x0) r8 = request_key(&(0x7f00000005c0)='cifs.spnego\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)='big_key\x00', 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r3, r8, r0, 0x1) 02:56:26 executing program 5: r0 = request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r0) r4 = request_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='\x00', 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x1) r5 = request_key(&(0x7f0000000300)='big_key\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='logon\x00', r2) keyctl$setperm(0x5, r4, 0x0) r6 = request_key(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', r5) r7 = request_key(&(0x7f0000000480)='ceph\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='\x00', r5) keyctl$unlink(0x9, r6, r7) r8 = request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='\x00', r1) keyctl$link(0x8, r0, r8) add_key(&(0x7f0000000600)='id_resolver\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="0f8d2e434ce02f3cd23ce5f287749e2a921fed061765fdff15dfa248af02f0991146a8576ddcbcf6ed93d45cc0e262be1a353008dbf289a4d1e8c15726bfb8000fd30d9aceb51bdc6274ba046145b352123d952542a1a343c201394f38a5ad50e7fc3248bdb76119679e4dcb489932f014e02aedaa92257970e6a2ceb062dc23b09a153b27f6b37f84f5de95ec5e414e8d266075710f39c14dad083dfc69ef995552a6e95a7e3bcf475fd3c03312838f112fbb0aa8b0181cf6b03918c4aaa36b97f3f4a925c2bc9399f3ddf3dcda37", 0xcf, 0x0) add_key(&(0x7f0000000780)='pkcs7_test\x00', &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800)="b5f2cb0b4444ef91e9f198f087445e15a0a4e76eaa67a5422b6b9404dbd4a8e79e22f0fb4523918f7437d652bb18d934ad60ea170560fad7a3f120263b2aaabacd3e7c2f212b9008f4de8ec5e5f3bc378f6958cf6d35", 0x56, 0xfffffffffffffffe) r9 = request_key(&(0x7f0000000880)='id_resolver\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)='\x00', r0) keyctl$setperm(0x5, r9, 0x1000000) r10 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$unlink(0x9, r0, r10) 02:56:26 executing program 6: ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000000)={0xfffffeff, 0x3, 0x0, 0x9}) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000040)={0x2, 0x2, 0xc2, 0x3, 0x81, 0x5, 0x200, 0x0, 0x6, 0x1f, 0x10001, 0x1, 0x8, 0x7fff}) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x2, 0x0, 0x8001, 0x8e9, 0x1}) clone3(&(0x7f00000002c0)={0xe000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x35}, &(0x7f0000000180)=""/163, 0xa3, &(0x7f0000000240)=""/18, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) r1 = syz_open_procfs(r0, &(0x7f0000000340)='net/ip_tables_names\x00') ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000380)={0x3, 0x1, 0x2, 0x88, 0x0, 0x9}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmsg(r2, &(0x7f0000000780)={&(0x7f00000003c0)=@l2, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)}, {&(0x7f0000000480)=""/56, 0x38}, {&(0x7f00000004c0)=""/130, 0x82}, {&(0x7f0000000580)=""/209, 0xd1}, {&(0x7f0000000680)=""/45, 0x2d}], 0x5, &(0x7f0000000740)}, 0x12101) r3 = syz_open_procfs(r0, &(0x7f00000007c0)='net/packet\x00') ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000800)=0x2) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000840)) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000880)={0x3, 0x100, 0x9, 0x9, 0xa8cc}) syz_io_uring_setup(0x425, &(0x7f00000008c0)={0x0, 0x2b62, 0x20, 0x3, 0x1be}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000940)=0x0, &(0x7f0000000980)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000a00)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x9, &(0x7f00000009c0), 0x1, 0x1, 0x1, {0x0, r5}}, 0x80000000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r1) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r6, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000bc0), &(0x7f0000000c00)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000d00)={0x0, 0x4c, 0x5b}, &(0x7f0000000d40)={'enc=', 'pkcs1', ' hash=', {'sha256\x00'}}, &(0x7f0000000dc0)="cc957bccfa00b48ae338784253bb405c1d067777da3fb888264b96a704ee0d8856c3f3700c69adb4805927af36c2a686a9d89072c48a51034ff11c74d5e5403cd0cf58db6711f9295992750a", &(0x7f0000000e40)=""/91) 02:56:26 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) clock_gettime(0x6, &(0x7f00000000c0)) pidfd_open(0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) r1 = accept4(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000200)=0x80, 0x40000) pselect6(0x40, &(0x7f0000000240)={0xa000000000000000, 0x88, 0x9f, 0x6, 0x3, 0x8, 0x80, 0x6}, &(0x7f0000000280)={0x7, 0x800, 0xff6e, 0xffffffffffff4da4, 0x10001, 0xbc, 0x2, 0x81}, &(0x7f00000002c0)={0x6, 0x59a, 0x2, 0x5, 0x7, 0x4, 0x5, 0x30000000}, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000380)={&(0x7f0000000340)={[0x4]}, 0x8}) clock_getres(0x2, &(0x7f00000003c0)) r2 = clone3(&(0x7f0000000680)={0x8000, &(0x7f0000000400)=0xffffffffffffffff, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, {0x22}, &(0x7f00000004c0)=""/125, 0x7d, &(0x7f0000000540)=""/238, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r0}}, 0x58) process_madvise(r3, &(0x7f0000000a00)=[{&(0x7f0000000700)="b69d5364093dd36782a67014943d0abd5f1d5c98f1f824761b5f09eb16df4fd4", 0x20}, {&(0x7f0000000740)="27946c373f8e8e0092ca64f71f2d59b15a1e8801180ad138fb65dc246415d0068be6cf1026f197f183756b3087ffb6d06aeec074564aed6966c7c1169b87f89edf879f41c41a099b2d89c9e0d28065cd50651032cf40c2bf47224cfbebfffc7d140ece9dd73846ec667e95e75d9ef92fa5632084be1b4740e2e961001713da5e19eda27084808897154216", 0x8b}, {&(0x7f0000000800)="20d477818498a784fab8833b82a8d47a500a31d45133306fbc6edaf236f4fbd2d9e1e458a3dd1702bd03c53e762d076d413eb9b67c062c57780eee064712be17890dce8110efe176ca3a1f1f2084ea73fd4d5c183c94f4d4f82d605c393f88a401d1e4791b7e1705a32f10a1edaa5d2ce11989e49bc2f88b5b2776d42c92e463f3ab631d6465b0be9cc4fe1b7b152271aeff5d9024a703860e38254baaf2fff29246adbf6d67c3cd0b355cea7a66a64d13ecd37307ca15977b71cab5562a1b8bc8d5894d3906b1775c5185cab7acad993277c06ba3451fef45", 0xd9}, {&(0x7f0000000900)="7096de74715d83a99af6b5c7a80def3b343481d65d1138e4a4b5501489cfb8c9e7c17864b9b98cbf28b98eb02f2f1e743734e1612d4bb249b73670671aae7006eb8a9a64c3c90fdf403d796c9a2f799b593873b40499903639d05b07b84de575cf3a9bbfefa26500af1be16634b8192545b2ee1a963cad300b18b0f44b6d759605e988247700c27318e3867f1d506c6e8dd61131b10f709b53747c22f620dd528fca00bcf6108d36022b1849145768aa9d4f11dda8c2eb28bb7f8a772558345934d7bb43b6b0f368c22a6d0c97c7b87cbacba89d45f64fea", 0xd8}], 0x4, 0xa, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000a40), &(0x7f0000000a80)=0x6) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000ac0), &(0x7f0000000b00)=0xc) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) clone3(&(0x7f0000001d00)={0x10000000, &(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)=0x0, {0x1f}, &(0x7f0000000c00)=""/184, 0xb8, &(0x7f0000000cc0)=""/4096, &(0x7f0000001cc0)=[r2, 0xffffffffffffffff, r2, r4, r5, 0xffffffffffffffff, r2, r2, r4, 0xffffffffffffffff], 0xa, {r6}}, 0x58) sched_setparam(r7, &(0x7f0000001d80)=0x101) pidfd_open(r5, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001dc0)={0x0, 0xb2, 0xa4}, &(0x7f0000001e00)={'enc=', 'pkcs1', ' hash=', {'poly1305-neon\x00'}}, &(0x7f0000001e80)="9cabaccea8f73fda63d92fa8d414a7495243edf842a36289a8eb13966713786b763a26bb5e537f963741fbb0c6093d2e839058025dafbd5c679aea7744fc179cf554b2447754de1f4ab89113c92ffcb6ff6639f823f1bc426faa6e2a706a69aada8d994ec1b6455264a7dd3391798e9009409b183bb43be88e7e9b790dce5b35383203760a97ffe4478807a81dbaf071425e294d8b344cfcc73ef528bcb1ba7e8ef3821516fdc1120a47237b3b06c46e927b", &(0x7f0000001f40)=""/164) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000002000)) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x24, 0x0, 0x206, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) connect$bt_l2cap(r6, &(0x7f0000002140)={0x1f, 0x401, @any, 0x7ff}, 0xe) [ 135.527086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.535114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.537357] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.544540] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.548426] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.554377] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.554892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.559687] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.568553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.570134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.578436] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.586576] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.594451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.600384] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.607183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.608998] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.617020] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.623615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.629891] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.643742] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 135.646590] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.648227] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 135.650485] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 135.652640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.658568] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 135.662670] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 135.693461] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.699761] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.700507] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.716188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.726512] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.735495] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.766088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.790753] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.795215] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 135.800149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.802546] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 135.811346] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 135.874209] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 135.922482] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 137.650846] Bluetooth: hci2: command tx timeout [ 137.715086] Bluetooth: hci0: command tx timeout [ 137.716267] Bluetooth: hci1: command tx timeout [ 137.842997] Bluetooth: hci6: command tx timeout [ 137.844614] Bluetooth: hci3: command tx timeout [ 137.906761] Bluetooth: hci4: command tx timeout [ 137.908335] Bluetooth: hci5: command tx timeout [ 137.970591] Bluetooth: hci7: command tx timeout [ 139.699113] Bluetooth: hci2: command tx timeout [ 139.762053] Bluetooth: hci0: command tx timeout [ 139.762497] Bluetooth: hci1: command tx timeout [ 139.890080] Bluetooth: hci3: command tx timeout [ 139.890538] Bluetooth: hci6: command tx timeout [ 139.954015] Bluetooth: hci5: command tx timeout [ 139.954497] Bluetooth: hci4: command tx timeout [ 140.020327] Bluetooth: hci7: command tx timeout [ 141.745994] Bluetooth: hci2: command tx timeout [ 141.810281] Bluetooth: hci1: command tx timeout [ 141.810756] Bluetooth: hci0: command tx timeout [ 141.938049] Bluetooth: hci6: command tx timeout [ 141.938531] Bluetooth: hci3: command tx timeout [ 142.002271] Bluetooth: hci4: command tx timeout [ 142.002729] Bluetooth: hci5: command tx timeout [ 142.068965] Bluetooth: hci7: command tx timeout [ 143.794014] Bluetooth: hci2: command tx timeout [ 143.860087] Bluetooth: hci0: command tx timeout [ 143.860583] Bluetooth: hci1: command tx timeout [ 143.987052] Bluetooth: hci6: command tx timeout [ 143.987531] Bluetooth: hci3: command tx timeout [ 144.051998] Bluetooth: hci5: command tx timeout [ 144.052867] Bluetooth: hci4: command tx timeout [ 144.114027] Bluetooth: hci7: command tx timeout [ 195.280281] syz-executor.2 (291) used greatest stack depth: 24912 bytes left [ 195.406631] syz-executor.0 (293) used greatest stack depth: 24512 bytes left [ 198.090881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.098359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.101890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.112403] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.120963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.248304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.256416] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 198.262454] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 198.267768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.281772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.287734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.291821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.292119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.302775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.305273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.319080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.324481] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.331223] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 198.340964] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 198.347095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.353417] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.355134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 198.372423] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.392833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 198.433693] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.464120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.475169] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 198.481893] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.486801] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 198.490550] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 198.501672] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 198.504538] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 198.506256] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.521867] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 198.524197] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 198.536467] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.551661] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 198.561661] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 198.576098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.579286] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 200.178028] Bluetooth: hci0: command tx timeout [ 200.370073] Bluetooth: hci1: command tx timeout [ 200.435060] Bluetooth: hci2: command tx timeout [ 200.498488] Bluetooth: hci3: command tx timeout [ 200.563111] Bluetooth: hci5: command tx timeout [ 200.627059] Bluetooth: hci6: command tx timeout [ 200.690654] Bluetooth: hci7: command tx timeout [ 200.754061] Bluetooth: hci4: command tx timeout [ 202.226636] Bluetooth: hci0: command tx timeout [ 202.420022] Bluetooth: hci1: command tx timeout [ 202.482200] Bluetooth: hci2: command tx timeout [ 202.546513] Bluetooth: hci3: command tx timeout [ 202.610993] Bluetooth: hci5: command tx timeout [ 202.675166] Bluetooth: hci6: command tx timeout [ 202.738609] Bluetooth: hci7: command tx timeout [ 202.802480] Bluetooth: hci4: command tx timeout [ 204.274158] Bluetooth: hci0: command tx timeout [ 204.466885] Bluetooth: hci1: command tx timeout [ 204.529973] Bluetooth: hci2: command tx timeout [ 204.593991] Bluetooth: hci3: command tx timeout [ 204.658159] Bluetooth: hci5: command tx timeout [ 204.723306] Bluetooth: hci6: command tx timeout [ 204.786095] Bluetooth: hci7: command tx timeout [ 204.849978] Bluetooth: hci4: command tx timeout [ 206.322106] Bluetooth: hci0: command tx timeout [ 206.514951] Bluetooth: hci1: command tx timeout [ 206.578021] Bluetooth: hci2: command tx timeout [ 206.642062] Bluetooth: hci3: command tx timeout [ 206.706139] Bluetooth: hci5: command tx timeout [ 206.770079] Bluetooth: hci6: command tx timeout [ 206.834270] Bluetooth: hci7: command tx timeout [ 206.898133] Bluetooth: hci4: command tx timeout [ 260.037857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.043591] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.046875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.059527] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.064707] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.240651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 260.245576] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 260.250378] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 260.262325] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 260.272632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.383128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.389439] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.392583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.432599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.455021] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.487758] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.511151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.515692] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.517455] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.525191] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.557299] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.557311] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.557697] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.568747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.576718] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.581290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.583695] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 260.588319] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.596456] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.630997] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.670278] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 260.700016] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 260.731700] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 260.746562] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 260.755454] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 260.757107] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 260.763317] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 260.776484] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 260.804230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 260.828450] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 262.131016] Bluetooth: hci0: command tx timeout [ 262.322003] Bluetooth: hci1: command tx timeout [ 262.514156] Bluetooth: hci2: command tx timeout [ 262.705998] Bluetooth: hci3: command tx timeout [ 262.834008] Bluetooth: hci7: command tx timeout [ 262.834078] Bluetooth: hci5: command tx timeout [ 262.898003] Bluetooth: hci6: command tx timeout [ 262.898049] Bluetooth: hci4: command tx timeout [ 264.178229] Bluetooth: hci0: command tx timeout [ 264.370031] Bluetooth: hci1: command tx timeout [ 264.561985] Bluetooth: hci2: command tx timeout [ 264.754038] Bluetooth: hci3: command tx timeout [ 264.882312] Bluetooth: hci7: command tx timeout [ 264.883429] Bluetooth: hci5: command tx timeout [ 264.946397] Bluetooth: hci6: command tx timeout [ 264.946842] Bluetooth: hci4: command tx timeout [ 266.226296] Bluetooth: hci0: command tx timeout [ 266.418349] Bluetooth: hci1: command tx timeout [ 266.610217] Bluetooth: hci2: command tx timeout [ 266.802071] Bluetooth: hci3: command tx timeout [ 266.930535] Bluetooth: hci5: command tx timeout [ 266.930717] Bluetooth: hci7: command tx timeout [ 266.994365] Bluetooth: hci6: command tx timeout [ 266.994875] Bluetooth: hci4: command tx timeout [ 268.275439] Bluetooth: hci0: command tx timeout [ 268.466122] Bluetooth: hci1: command tx timeout [ 268.658177] Bluetooth: hci2: command tx timeout [ 268.851023] Bluetooth: hci3: command tx timeout [ 268.978082] Bluetooth: hci5: command tx timeout [ 268.981045] Bluetooth: hci7: command tx timeout [ 269.042330] Bluetooth: hci6: command tx timeout [ 269.043852] Bluetooth: hci4: command tx timeout [ 322.514887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.518251] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.520788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.527555] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.534432] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.756331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.760186] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.762438] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.777829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.780482] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.786086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.788098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.795888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.801209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.811485] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 322.947152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.988473] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.032300] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.038552] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.046311] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.054168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.065371] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 323.069804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 323.074074] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 323.081185] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 323.086123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.090471] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 323.097461] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.103502] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 323.105562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.109856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 323.114107] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 323.118581] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 323.124972] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.127845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.131624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.132396] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.141060] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.143702] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.147197] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 324.594120] Bluetooth: hci0: command tx timeout [ 324.850014] Bluetooth: hci1: command tx timeout [ 324.914568] Bluetooth: hci2: command tx timeout [ 325.298975] Bluetooth: hci4: command tx timeout [ 325.299029] Bluetooth: hci6: command tx timeout [ 325.299789] Bluetooth: hci7: command tx timeout [ 325.300529] Bluetooth: hci3: command tx timeout [ 325.301314] Bluetooth: hci5: command tx timeout [ 326.642993] Bluetooth: hci0: command tx timeout [ 326.899947] Bluetooth: hci1: command tx timeout [ 326.961974] Bluetooth: hci2: command tx timeout [ 327.346066] Bluetooth: hci5: command tx timeout [ 327.346557] Bluetooth: hci3: command tx timeout [ 327.347696] Bluetooth: hci7: command tx timeout [ 327.348168] Bluetooth: hci6: command tx timeout [ 327.348597] Bluetooth: hci4: command tx timeout [ 328.690081] Bluetooth: hci0: command tx timeout [ 328.946001] Bluetooth: hci1: command tx timeout [ 329.010233] Bluetooth: hci2: command tx timeout [ 329.394199] Bluetooth: hci7: command tx timeout [ 329.394716] Bluetooth: hci4: command tx timeout [ 329.395234] Bluetooth: hci6: command tx timeout [ 329.395688] Bluetooth: hci3: command tx timeout [ 329.396253] Bluetooth: hci5: command tx timeout [ 330.738302] Bluetooth: hci0: command tx timeout [ 330.994152] Bluetooth: hci1: command tx timeout [ 331.058276] Bluetooth: hci2: command tx timeout [ 331.442519] Bluetooth: hci7: command tx timeout [ 331.443877] Bluetooth: hci5: command tx timeout [ 331.445445] Bluetooth: hci3: command tx timeout [ 331.445487] Bluetooth: hci6: command tx timeout [ 331.445570] Bluetooth: hci4: command tx timeout [ 384.982835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.989749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.995304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.004579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.016537] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.108096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.111514] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.118380] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.122571] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.125397] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.131993] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.134861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.140466] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.157539] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.163323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.185226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.188463] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.190807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.222214] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.228218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.232375] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.243601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.246566] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.252723] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.253659] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 385.256682] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.288003] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 385.311551] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 385.316736] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.354015] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.358862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 385.363161] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.367885] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 385.374163] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.380555] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 385.383665] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 385.385839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 385.429520] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 385.444609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 385.458464] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 387.060550] Bluetooth: hci0: command tx timeout [ 387.186640] Bluetooth: hci2: command tx timeout [ 387.250660] Bluetooth: hci1: command tx timeout [ 387.314362] Bluetooth: hci5: command tx timeout [ 387.378867] Bluetooth: hci3: command tx timeout [ 387.506310] Bluetooth: hci4: command tx timeout [ 387.570094] Bluetooth: hci7: command tx timeout [ 387.571278] Bluetooth: hci6: command tx timeout [ 389.106192] Bluetooth: hci0: command tx timeout [ 389.234368] Bluetooth: hci2: command tx timeout [ 389.298035] Bluetooth: hci1: command tx timeout [ 389.363503] Bluetooth: hci5: command tx timeout [ 389.426039] Bluetooth: hci3: command tx timeout [ 389.554057] Bluetooth: hci4: command tx timeout [ 389.618083] Bluetooth: hci6: command tx timeout [ 389.618552] Bluetooth: hci7: command tx timeout [ 391.154633] Bluetooth: hci0: command tx timeout [ 391.282033] Bluetooth: hci2: command tx timeout [ 391.345968] Bluetooth: hci1: command tx timeout [ 391.410188] Bluetooth: hci5: command tx timeout [ 391.474984] Bluetooth: hci3: command tx timeout [ 391.603996] Bluetooth: hci4: command tx timeout [ 391.666005] Bluetooth: hci7: command tx timeout [ 391.666490] Bluetooth: hci6: command tx timeout [ 393.201978] Bluetooth: hci0: command tx timeout [ 393.330964] Bluetooth: hci2: command tx timeout [ 393.394011] Bluetooth: hci1: command tx timeout [ 393.457994] Bluetooth: hci5: command tx timeout [ 393.521969] Bluetooth: hci3: command tx timeout [ 393.650933] Bluetooth: hci4: command tx timeout [ 393.714197] Bluetooth: hci6: command tx timeout [ 393.714671] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 03:01:30 Registers: info registers vcpu 0 RAX=0000000000000189 RBX=ffff8880343c5280 RCX=ffffffff87a691d0 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000003 RBP=ffff8880343c5cd8 RSP=ffff888028c3f120 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=ffff8880343c5d50 R13=0000000000000001 R14=0000000000000000 R15=0000000000000004 RIP=ffffffff81518fe6 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe824995540 00000000 00000000 GS =0000 ffff8880e561a000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe824e6f000 CR3=00000000297ab000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080000000 RBX=ffff8880282cd310 RCX=ffffffff813ae524 RDX=ffff888015fc9b80 RSI=0000000000000000 RDI=0000000000000007 RBP=ffff888015fc9b80 RSP=ffff8880282cfdf8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=dffffc0000000000 R14=ffff8880282c8000 R15=dffffc0000000000 RIP=ffffffff817384d7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571a000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f36dc249000 CR3=00000000354d2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000