Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:40705' (ECDSA) to the list of known hosts. 2024/10/31 00:02:17 fuzzer started 2024/10/31 00:02:17 dialing manager at localhost:45639 syzkaller login: [ 65.911365] cgroup: Unknown subsys name 'net' [ 66.028369] cgroup: Unknown subsys name 'cpuset' [ 66.061864] cgroup: Unknown subsys name 'rlimit' 2024/10/31 00:02:34 syscalls: 210 2024/10/31 00:02:34 code coverage: enabled 2024/10/31 00:02:34 comparison tracing: enabled 2024/10/31 00:02:34 extra coverage: enabled 2024/10/31 00:02:34 setuid sandbox: enabled 2024/10/31 00:02:34 namespace sandbox: enabled 2024/10/31 00:02:34 Android sandbox: enabled 2024/10/31 00:02:34 fault injection: enabled 2024/10/31 00:02:34 leak checking: enabled 2024/10/31 00:02:34 net packet injection: enabled 2024/10/31 00:02:34 net device setup: enabled 2024/10/31 00:02:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/31 00:02:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/31 00:02:34 USB emulation: enabled 2024/10/31 00:02:34 hci packet injection: enabled 2024/10/31 00:02:34 wifi device emulation: enabled 2024/10/31 00:02:34 802.15.4 emulation: enabled 2024/10/31 00:02:34 fetching corpus: 0, signal 0/0 (executing program) 2024/10/31 00:02:36 starting 8 fuzzer processes 00:02:36 executing program 0: r0 = syz_io_uring_setup(0x3187, &(0x7f0000000000)={0x0, 0x78bc, 0x8, 0x0, 0x3b1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$inet(0x2, 0x4, 0x3) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1, &(0x7f0000000240)=""/225, 0xe1}, 0x0, 0x0, 0x0, {0x1, r4}}, 0x8) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000003c0)={0x9, 0x7ff, 0x2, 0x78, 0x4, 0x10001, 0x400, 0x40393838}, &(0x7f0000000400)={0x4, 0x4, 0x9, 0x4, 0x1, 0x1, 0x5, 0x7}, &(0x7f0000000440)={0x5, 0xff, 0x6, 0xa0e, 0x6, 0xc261, 0x10000, 0xfffffffffffffffb}, &(0x7f0000000480)={0x0, 0x989680}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x10000]}, 0x8}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540), 0x27e201, 0x0) clock_getres(0x1, &(0x7f0000000580)) syz_io_uring_setup(0x53ec, &(0x7f00000005c0)={0x0, 0xf741, 0x4, 0x3, 0xf, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) recvmmsg(r3, &(0x7f0000005880)=[{{&(0x7f00000006c0)=@can, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000740)=""/149, 0x95}, {&(0x7f0000000800)=""/220, 0xdc}, {&(0x7f0000000900)=""/169, 0xa9}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/115, 0x73}, {&(0x7f0000002a40)=""/104, 0x68}, {&(0x7f0000002ac0)=""/73, 0x49}, {&(0x7f0000002b40)=""/176, 0xb0}], 0x9, &(0x7f0000002cc0)=""/215, 0xd7}, 0xe62}, {{&(0x7f0000002dc0)=@x25, 0x80, &(0x7f0000004040)=[{&(0x7f0000002e40)=""/19, 0x13}, {&(0x7f0000002e80)=""/86, 0x56}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/12, 0xc}, {&(0x7f0000003f40)=""/238, 0xee}], 0x5, &(0x7f00000040c0)=""/164, 0xa4}, 0x1}, {{&(0x7f0000004180)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000004280)=[{&(0x7f0000004200)=""/37, 0x25}, {&(0x7f0000004240)=""/10, 0xa}], 0x2, &(0x7f00000042c0)=""/163, 0xa3}, 0x20}, {{&(0x7f0000004380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/135, 0x87}, {&(0x7f00000054c0)=""/19, 0x13}, {&(0x7f0000005500)=""/178, 0xb2}, {&(0x7f00000055c0)=""/183, 0xb7}, {&(0x7f0000005680)=""/5, 0x5}, {&(0x7f00000056c0)=""/129, 0x81}], 0x7, &(0x7f0000005800)=""/96, 0x60}}], 0x4, 0x40000001, &(0x7f0000005980)) r7 = semget$private(0x0, 0x1, 0x10) clock_gettime(0x0, &(0x7f0000005a00)={0x0, 0x0}) semtimedop(r7, &(0x7f00000059c0)=[{0x0, 0x1b97}, {0x3, 0x3, 0x1000}, {0x0, 0x5, 0x800}, {0x0, 0x8, 0x400}, {0x0, 0x74b3}], 0x5, &(0x7f0000005a40)={r8, r9+10000000}) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) syz_io_uring_submit(r1, r6, &(0x7f0000005b00)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000005ac0)={r10, r11+10000000}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000008a00)=[{{&(0x7f0000005b40)=@phonet, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005bc0)=""/185, 0xb9}], 0x1, &(0x7f0000005cc0)=""/29, 0x1d}, 0x8}, {{&(0x7f0000005d00)=@rc={0x1f, @none}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005d80)=""/41, 0x29}, {&(0x7f0000005dc0)=""/43, 0x2b}], 0x2, &(0x7f0000005e40)=""/220, 0xdc}}, {{&(0x7f0000005f40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000005fc0)}}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000006000)=""/158, 0x9e}, {&(0x7f00000060c0)=""/25, 0x19}], 0x2}, 0x1}, {{&(0x7f0000006140)=@rc={0x1f, @none}, 0x80, &(0x7f00000062c0)=[{&(0x7f00000061c0)=""/195, 0xc3}], 0x1, &(0x7f0000006300)=""/27, 0x1b}, 0x3}, {{&(0x7f0000006340)=@nfc_llcp, 0x80, &(0x7f0000006480)=[{&(0x7f00000063c0)=""/166, 0xa6}], 0x1, &(0x7f00000064c0)=""/143, 0x8f}, 0x9}, {{&(0x7f0000006580)=@nl=@unspec, 0x80, &(0x7f0000006600), 0x0, &(0x7f0000006640)=""/173, 0xad}, 0x400}, {{&(0x7f0000006700)=@hci, 0x80, &(0x7f00000079c0)=[{&(0x7f0000006780)=""/138, 0x8a}, {&(0x7f0000006840)=""/169, 0xa9}, {&(0x7f0000006900)=""/4096, 0x1000}, {&(0x7f0000007900)=""/132, 0x84}], 0x4, &(0x7f0000007a00)=""/4096, 0x1000}, 0x5}], 0x8, 0x4094b9034a88a4a1, &(0x7f0000008c00)={0x77359400}) ioctl$SNAPSHOT_CREATE_IMAGE(r5, 0x40043311, &(0x7f0000008c40)) pselect6(0x40, &(0x7f0000008c80)={0x20, 0x7010, 0x52, 0xdc7, 0xdc7, 0x0, 0xe00c, 0x8}, &(0x7f0000008cc0)={0x7, 0x100, 0xffff, 0x7, 0x9, 0x2c6d, 0x1}, &(0x7f0000008d00)={0x1000, 0x82ee, 0x8, 0x6, 0x3, 0x1bc4, 0x0, 0x3}, &(0x7f0000008d40)={0x0, 0x3938700}, &(0x7f0000008dc0)={&(0x7f0000008d80)={[0x5]}, 0x8}) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) syz_io_uring_submit(r1, 0x0, &(0x7f0000008e00)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x7) 00:02:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8023088}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6e3b242515f29806}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4004) semop(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x1, 0x800}, {0x1, 0xaebd, 0x800}, {0x3, 0x8000}], 0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x4000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x80) r4 = semget$private(0x0, 0x3, 0x441) semctl$SETVAL(r4, 0x1, 0x10, &(0x7f00000003c0)=0x4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xd}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004044}, 0x20004040) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x6}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1f}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x12}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x4000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000900)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/104, 0x68, 0x0, &(0x7f0000000800)=""/206, 0xce}, &(0x7f0000000940)=0x40) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000980)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000009c0)={'wpan1\x00'}) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r6, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x8050) 00:02:36 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x8a8f, 0x4) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x4, [0x8, 0x400], 0x100}, 0x10) r0 = getpgrp(0x0) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/mnt\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x4, 0x8, 0x35, 0x0, 0x3ff, 0x114204, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000000c0), 0xf}, 0x40840, 0x1, 0x6, 0x0, 0x7e6d, 0x40, 0x200, 0x0, 0x80000000, 0x0, 0x200}, 0xffffffffffffffff, 0x5, r1, 0xb) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sendmsg$AUDIT_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3e8, 0x24, 0x70bd2a, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4050}, 0x22000001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000300)="b88dc50110b3d21bc8c716da410fd252a431b27281a0564aee990bfa2a5ba9354d0ae018e37eb8fe4b7ede3458e2cf3d66e232f47ceed03fdf393a3d6b712845cba3cd6ea7baa17cfba4f2d232deed2fedee79e61037b1c81433ef70379b81b8dbacb52fabe5c2c5cb1a3f72b838701bfbe7b8484d0ec0f6ffa83f66cdd556e7bc918c06c30569c74c45538451bc4fd576ce27735bbf1351b4fd77450bd5068eeca90358b436e9ddcae562025358cb739b5482deb1ed6bd85d1623fbd66293ecf467f680a7d95d0719c0f8c8a3ce94a76574f7adcf", 0xd5, r2}, 0x68) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) accept4$inet(r3, &(0x7f00000004c0)={0x2, 0x0, @local}, &(0x7f0000000500)=0x10, 0x80000) r4 = accept$inet(r3, &(0x7f0000000540)={0x2, 0x0, @private}, &(0x7f0000000580)=0x10) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f00000005c0)={'filter\x00', 0x65, "674e0532512289f1d0ba2dbdfe639357e73af5d1edf5d7957a9741018efe6d5182b4095d7c18bf39f6d03b78f536145f8e41c980c64b18caed978eb3e3e4acbdd50ca3a8b23bb1da505e50c9e673a2d3c0c59b6d119b25af70e0fc067a7575281d7c27c339"}, &(0x7f0000000680)=0x89) r5 = accept(r3, &(0x7f00000006c0)=@caif=@dbg, &(0x7f0000000740)=0x80) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3000006, 0x10, r5, 0xa1a22000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x408c0) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x18, 0x3f9, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4c004}, 0x1) [ 83.827641] audit: type=1400 audit(1730332956.318:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:02:36 executing program 3: r0 = getpgrp(0x0) ptrace$cont(0x20, r0, 0x101, 0xcb6) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0xf0, 0x1, 0x5}, &(0x7f0000000040)=[{}, {}, {}, {}, {}]) ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x1, 0x2}, &(0x7f0000000300)=[{}, {}]) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x17}}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x13}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20010080}, 0x4020090) syz_open_dev$usbmon(&(0x7f0000000540), 0x6, 0x40) ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, 0x9}, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x30, 0xffffffffffffffff, 0x5) sysfs$2(0x2, 0x8, &(0x7f0000000a40)=""/14) ioprio_set$pid(0x3, r0, 0x2004) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a80), 0x10000, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000ac0)={0x2, @remote, 0x4e23, 0x1, 'dh\x00', 0x3b, 0x56, 0x22}, 0x2c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8}, @val={0xc, 0x99, {0x478, 0x42}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x76}}]}, 0x54}, 0x1, 0x0, 0x0, 0x808}, 0x4040000) ptrace$peeksig(0x4209, r0, &(0x7f0000000cc0)={0xa2, 0x0, 0x3}, &(0x7f0000000d00)=[{}, {}, {}]) getsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x5345, &(0x7f0000000f00)={0x0, 0x62ea, 0x2, 0x3, 0x53}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000f80), &(0x7f0000000fc0)) 00:02:36 executing program 4: r0 = syz_io_uring_setup(0x1365, &(0x7f0000000000)={0x0, 0x764f, 0x1, 0x2, 0x254}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_setup(0x4ee9, &(0x7f0000000100)={0x0, 0x9dfb, 0x2, 0x2, 0x6e, 0x0, r0}) syz_io_uring_setup(0x40b, &(0x7f0000000180)={0x0, 0x51c5, 0x10, 0x0, 0x3a5, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x2010, r0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x90000, 0x0) mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f00000002c0)="0d934ca49ae6e6d8e4c88e82294a19aa759b56e289bb4252e4db4d1f1107e9dd402b2d9b064f62d28259702c8ccf48d6d438b222ebc932cdd341c8d332e877a004a71d6f058cbddfc6b58be21085c8ca9c23137ff1281f85e220494cec539e056ed926f8a44b6bca20e1be1797a4d5b45b4fae8f", 0x74}, 0x68) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000400)={0x7fffffff, 0x8}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000480), 0x4) ioctl$SNAPSHOT_S2RAM(r4, 0x330b) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$AUDIT_USER(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa8, 0x3ed, 0x4, 0x70bd29, 0x25dfdbfc, "66f061c68ef3cc895383a68ba86ae4e92a9fccf6ce1603145d5f580cab7696768dae31c93000910ca5b30a2a4b5551c2da2c7ba4b16c6dacb78505656de1b563eb98d968578f891599f7a7b355798d9dfb1fed23fbebfce3ec0f7d51ef10f123b90ac9e3e1e8af9f46ed14419e5a4b0387126bc30e301de96002bfcc97f0aa5645a3283295824bd733ca17cb1dd1beb6580ccfa8f8", ["", "", ""]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000740), 0x10080, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000780)={0x55, 0xa33}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000003, 0x11, 0xffffffffffffffff, 0x8000000) 00:02:36 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc814}, 0x4000000) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x3fa, 0x0, 0x70bd2b, 0x25dfdbff, {0x1, 0x0, 0x1, 0x1}, [""]}, 0x20}}, 0x4050) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008041}, 0x40000) accept4$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @broadcast}, &(0x7f0000000600)=0x10, 0x0) epoll_create1(0x80000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f5, 0x2, 0x70bd29, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x18, 0x464, 0x300, 0x70bd25, 0x25dfdbfd, "b98fe5c23583", ["", "", "", "", "", ""]}, 0x18}}, 0x8841) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan4\x00'}) ioctl$SNAPSHOT_FREE(r1, 0x3305) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000008c0)={'filter\x00', 0x5e, "9320ef0cf788bc16831772f50b6dbf24a9b73f7c0503f49d26be97bad5b09654ee28d9a68e98066b242b8e7cc1ec87a148bb608d140b4e1ab7845ce8184a6d2ed22c62c820d0af1a9188c27c73c008bf837378186181b6996bd6b85be3d4"}, &(0x7f0000000980)=0x82) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f00000009c0)) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) 00:02:36 executing program 7: clock_gettime(0x0, &(0x7f00000078c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000007680)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/149, 0x95}], 0x1}, 0x3}, {{&(0x7f0000000180)=@isdn, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/201, 0xc9}], 0x1}, 0xef}, {{&(0x7f0000000340)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/173, 0xad}, {&(0x7f0000001480)=""/128, 0x80}, {0xffffffffffffffff}, {&(0x7f0000001500)=""/100, 0x64}], 0x5, &(0x7f0000001600)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000002600)=@hci, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002680)=""/65, 0x41}, {&(0x7f0000002700)=""/142, 0x8e}], 0x2}, 0x8}, {{&(0x7f0000002800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002880)=""/213, 0xd5}], 0x1, &(0x7f00000029c0)=""/44, 0x2c}, 0x10001}, {{&(0x7f0000002a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1, &(0x7f0000003ac0)=""/10, 0xa}, 0x8}, {{&(0x7f0000003b00)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000003b80)=""/151, 0x97}, {&(0x7f0000003c40)=""/50, 0x32}, {&(0x7f0000003c80)=""/208, 0xd0}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x4, &(0x7f0000004dc0)=""/101, 0x65}, 0x1}, {{&(0x7f0000004e40)=@can, 0x80, &(0x7f0000006240)=[{&(0x7f0000004ec0)=""/233, 0xe9}, {&(0x7f0000004fc0)=""/124, 0x7c}, {&(0x7f0000005040)=""/25, 0x19}, {&(0x7f0000005080)=""/36, 0x24}, {&(0x7f00000050c0)=""/61, 0x3d}, {&(0x7f0000005100)=""/114, 0x72}, {&(0x7f0000005180)=""/162, 0xa2}, {&(0x7f0000005240)=""/4096, 0x1000}], 0x8, &(0x7f00000062c0)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, &(0x7f0000007640)=[{&(0x7f00000063c0)=""/4096, 0x1000}, {&(0x7f00000073c0)=""/245, 0xf5}, {&(0x7f00000074c0)=""/162, 0xa2}, {&(0x7f0000007580)=""/190, 0xbe}], 0x4}}], 0x9, 0x2, &(0x7f0000007900)={r0, r1+10000000}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000079c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r2, 0x0, &(0x7f0000007940)="6d2684089530dd76e1c4cc9caad5307855bb608ac390a0856e3e19042776863bb603feb03534554db8b4a3c9c6edb0a8ef9ad550b965da214f3ba5ffbd4900206bc66e691c88545baed1315215c8ce1ac71e62fbd70c8e8c12a0d887669d93759109a6c6aec38a24715278149da22f3ea0bd", 0x72, 0xc000, 0x1}, 0xf60) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000007a00)=""/5) r4 = io_uring_setup(0x569d, &(0x7f0000007a40)={0x0, 0xfe0c, 0x0, 0x1, 0x3c2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x4010, r4, 0x0) syz_io_uring_setup(0x679d, &(0x7f0000007ac0)={0x0, 0x219f, 0x8, 0x3, 0x164, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000007b40), &(0x7f0000007b80)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x48010, 0xffffffffffffffff, 0x8000000) semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000007bc0)=""/177) pselect6(0x40, &(0x7f0000007c80)={0x31c3, 0xeb9, 0x1, 0x3f, 0x2, 0x9, 0x9, 0x7db}, &(0x7f0000007cc0)={0x1f, 0xffff, 0x1, 0xd756, 0x1, 0x2, 0x84c, 0x5}, &(0x7f0000007d00)={0x2, 0x2, 0x5, 0x3, 0x100000000, 0xfbcf, 0x3, 0x7}, &(0x7f0000007d40)={0x0, 0x989680}, &(0x7f0000007dc0)={&(0x7f0000007d80)={[0x7]}, 0x8}) r5 = io_uring_setup(0x2c38, &(0x7f0000007e00)={0x0, 0x502a, 0x20, 0x2, 0x68, 0x0, r4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x110, r5, 0x0) clock_gettime(0x0, &(0x7f000000dfc0)={0x0, 0x0}) recvmmsg(r2, &(0x7f000000df40)=[{{&(0x7f000000d900)=@nl=@unspec, 0x80, &(0x7f000000db00)=[{&(0x7f000000d980)=""/221, 0xdd}, {&(0x7f000000da80)=""/107, 0x6b}], 0x2, &(0x7f000000db40)=""/61, 0x3d}, 0x4}, {{&(0x7f000000db80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f000000dec0)=[{&(0x7f000000dc00)=""/223, 0xdf}, {&(0x7f000000dd00)=""/252, 0xfc}, {&(0x7f000000de00)=""/141, 0x8d}], 0x3, &(0x7f000000df00)=""/49, 0x31}, 0x7f}], 0x2, 0x10000, &(0x7f000000e000)={r6, r7+60000000}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f000000e100)={&(0x7f0000007e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f000000e0c0)={&(0x7f000000e040)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8015}, 0xc59577101af7c78f) recvmmsg(r2, &(0x7f0000012200)=[{{&(0x7f000000e140)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f000000f6c0)=[{&(0x7f000000e1c0)=""/69, 0x45}, {&(0x7f000000e240)=""/142, 0x8e}, {&(0x7f000000e300)=""/189, 0xbd}, {&(0x7f000000e3c0)=""/188, 0xbc}, {&(0x7f000000e480)=""/90, 0x5a}, {&(0x7f000000e500)=""/4096, 0x1000}, {&(0x7f000000f500)=""/191, 0xbf}, {&(0x7f000000f5c0)=""/231, 0xe7}], 0x8, &(0x7f000000f740)=""/228, 0xe4}, 0x4}, {{&(0x7f000000f840)=@nfc_llcp, 0x80, &(0x7f0000010900)=[{&(0x7f000000f8c0)=""/4096, 0x1000}, {&(0x7f00000108c0)=""/17, 0x11}], 0x2, &(0x7f0000010940)=""/155, 0x9b}, 0xad}, {{&(0x7f0000010a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000011dc0)=[{&(0x7f0000010a80)=""/224, 0xe0}, {&(0x7f0000010b80)=""/235, 0xeb}, {&(0x7f0000010c80)=""/78, 0x4e}, {&(0x7f0000010d00)=""/4096, 0x1000}, {&(0x7f0000011d00)=""/144, 0x90}], 0x5, &(0x7f0000011e40)=""/247, 0xf7}, 0x7fffffff}, {{&(0x7f0000011f40)=@tipc=@id, 0x80, &(0x7f00000120c0)=[{&(0x7f0000011fc0)=""/41, 0x29}, {&(0x7f0000012000)=""/74, 0x4a}, {&(0x7f0000012080)=""/24, 0x18}], 0x3, &(0x7f0000012100)=""/238, 0xee}}], 0x4, 0x0, &(0x7f0000012300)={0x77359400}) clock_gettime(0x0, &(0x7f0000014740)={0x0, 0x0}) recvmmsg(r9, &(0x7f00000145c0)=[{{&(0x7f0000012340)=@can, 0x80, &(0x7f0000013600)=[{&(0x7f00000123c0)=""/234, 0xea}, {&(0x7f00000124c0)=""/60, 0x3c}, {&(0x7f0000012500)=""/244, 0xf4}, {&(0x7f0000012600)=""/4096, 0x1000}], 0x4, &(0x7f0000013640)=""/164, 0xa4}}, {{&(0x7f0000013700)=@phonet, 0x80, &(0x7f0000013ac0)=[{&(0x7f0000013780)=""/248, 0xf8}, {&(0x7f0000013880)=""/181, 0xb5}, {&(0x7f0000013940)=""/246, 0xf6}, {&(0x7f0000013a40)=""/46, 0x2e}, {&(0x7f0000013a80)=""/64, 0x40}], 0x5}}, {{&(0x7f0000013b40)=@nfc, 0x80, &(0x7f0000013cc0)=[{&(0x7f0000013bc0)=""/77, 0x4d}, {&(0x7f0000013c40)=""/93, 0x5d}], 0x2, &(0x7f0000013d00)=""/6, 0x6}, 0x2}, {{&(0x7f0000013d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000014040)=[{&(0x7f0000013dc0)=""/88, 0x58}, {&(0x7f0000013e40)=""/113, 0x71}, {&(0x7f0000013ec0)=""/26, 0x1a}, {&(0x7f0000013f00)=""/254, 0xfe}, {&(0x7f0000014000)=""/30, 0x1e}], 0x5, &(0x7f00000140c0)=""/71, 0x47}, 0xfc}, {{&(0x7f0000014140)=@xdp, 0x80, &(0x7f0000014340)=[{&(0x7f00000141c0)=""/142, 0x8e}, {&(0x7f0000014280)=""/171, 0xab}], 0x2}, 0x101}, {{&(0x7f0000014380)=@ieee802154, 0x80, &(0x7f0000014580)=[{&(0x7f0000014400)=""/71, 0x47}, {&(0x7f0000014480)=""/200, 0xc8}], 0x2}, 0x8}], 0x6, 0x40010000, &(0x7f0000014780)={r10, r11+10000000}) get_mempolicy(&(0x7f00000147c0), &(0x7f0000014800), 0x7f, &(0x7f0000ffe000/0x2000)=nil, 0x4) 00:02:36 executing program 6: prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800) r1 = getgid() r2 = getgid() setgroups(0x8, &(0x7f0000000040)=[r1, r1, r1, r1, r2, r1, r1, r1]) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x40842, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f00000000c0)=0x2, 0x4) clock_gettime(0x0, &(0x7f0000001880)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000016c0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000000280)=""/7, 0x7}], 0x2, &(0x7f0000000300)=""/56, 0x38}, 0x3}, {{&(0x7f0000000340)=@can, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f0000000440)=""/2, 0x2}], 0x2, &(0x7f00000004c0)=""/223, 0xdf}, 0x10001}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/143, 0x8f}, {&(0x7f0000000680)=""/151, 0x97}, {&(0x7f0000000740)=""/8, 0x8}, {&(0x7f0000000780)=""/153, 0x99}, {&(0x7f0000000840)=""/143, 0x8f}, {&(0x7f0000000900)=""/102, 0x66}], 0x6, &(0x7f0000000a00)=""/30, 0x1e}, 0x1f}, {{&(0x7f0000000a40)=@isdn, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)=""/181, 0xb5}, {&(0x7f0000000b80)=""/21, 0x15}, {&(0x7f0000000bc0)=""/204, 0xcc}], 0x3}, 0x3}, {{&(0x7f0000000d00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/40, 0x28}, {&(0x7f0000000dc0)=""/67, 0x43}, {&(0x7f0000000e40)=""/163, 0xa3}, {&(0x7f0000000f00)=""/115, 0x73}], 0x4, &(0x7f0000000fc0)=""/59, 0x3b}, 0xfffffffb}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001000)=""/247, 0xf7}, {&(0x7f0000001100)=""/58, 0x3a}, {&(0x7f0000001140)=""/133, 0x85}, {&(0x7f0000001200)=""/93, 0x5d}, {&(0x7f0000001280)=""/155, 0x9b}, {&(0x7f0000001340)=""/164, 0xa4}], 0x6, &(0x7f0000001480)=""/91, 0x5b}, 0x10000}, {{&(0x7f0000001500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001580)=""/100, 0x64}], 0x1, &(0x7f0000001640)=""/103, 0x67}, 0x3ff}], 0x7, 0x40000101, &(0x7f00000018c0)={r4, r5+60000000}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000001900)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001940)={'wlan1\x00'}) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000001980)) write$bt_hci(r7, &(0x7f00000019c0)={0x1, @switch_role={{0x80b, 0x7}, {@any, 0x4c}}}, 0xb) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001a00), 0x410200, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r8, 0x3312, 0x3) clock_getres(0x1, &(0x7f0000001a40)) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x4010, r3, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000001a80)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r6, 0x1, {0x0, r0}, 0x5, 0x2, 0x0, {0x0, 0x0, r0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000001b00)={{0x2, 0x3, 0xff, 0x2, 0x6}, 0xffffffffffffffff, 0x4, 0x3}) [ 85.270440] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.274260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.275876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.279417] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.281459] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.282702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.321579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.330059] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.331124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.333176] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.336490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.338388] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.340852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.342520] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.344816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.347180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.349222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.350832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.352335] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.353821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.355331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.373208] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.383821] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.388810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.390590] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.391764] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.407754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.414313] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.416056] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.421609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.425200] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.429246] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.430148] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.431431] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.432457] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.434601] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.436589] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.438181] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.439223] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.452984] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.453878] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.455721] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.458843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.467012] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.468245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.470568] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.473232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.476982] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.352140] Bluetooth: hci0: command tx timeout [ 87.415092] Bluetooth: hci2: command tx timeout [ 87.417007] Bluetooth: hci1: command tx timeout [ 87.479166] Bluetooth: hci5: command tx timeout [ 87.480307] Bluetooth: hci3: command tx timeout [ 87.545166] Bluetooth: hci7: command tx timeout [ 87.545273] Bluetooth: hci6: command tx timeout [ 87.546975] Bluetooth: hci4: command tx timeout [ 89.401957] Bluetooth: hci0: command tx timeout [ 89.463015] Bluetooth: hci1: command tx timeout [ 89.464051] Bluetooth: hci2: command tx timeout [ 89.528974] Bluetooth: hci3: command tx timeout [ 89.530631] Bluetooth: hci5: command tx timeout [ 89.591190] Bluetooth: hci4: command tx timeout [ 89.592586] Bluetooth: hci6: command tx timeout [ 89.592619] Bluetooth: hci7: command tx timeout [ 91.447049] Bluetooth: hci0: command tx timeout [ 91.511172] Bluetooth: hci1: command tx timeout [ 91.512839] Bluetooth: hci2: command tx timeout [ 91.575094] Bluetooth: hci5: command tx timeout [ 91.576540] Bluetooth: hci3: command tx timeout [ 91.639028] Bluetooth: hci6: command tx timeout [ 91.640396] Bluetooth: hci7: command tx timeout [ 91.641597] Bluetooth: hci4: command tx timeout [ 93.496220] Bluetooth: hci0: command tx timeout [ 93.560012] Bluetooth: hci1: command tx timeout [ 93.560521] Bluetooth: hci2: command tx timeout [ 93.624241] Bluetooth: hci5: command tx timeout [ 93.624749] Bluetooth: hci3: command tx timeout [ 93.687113] Bluetooth: hci7: command tx timeout [ 93.687619] Bluetooth: hci6: command tx timeout [ 93.688547] Bluetooth: hci4: command tx timeout [ 147.786785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.790494] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.791565] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.793965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.795453] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.796470] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.972570] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.975326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.976637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.977696] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.981316] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.981358] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.984144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.986199] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.988389] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.989486] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.991160] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.993331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.995560] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.997343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.000313] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.001316] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.012490] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.013518] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.028794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.032147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.033216] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.038228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.040137] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.041284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.095534] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.103756] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.105319] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.109700] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.111182] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.112451] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.127386] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.129484] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.130652] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.133749] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.137243] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.139145] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.140455] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.142111] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.146157] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.195173] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.203054] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.212146] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.880173] Bluetooth: hci0: command tx timeout [ 150.074276] Bluetooth: hci3: command tx timeout [ 150.075122] Bluetooth: hci1: command tx timeout [ 150.075755] Bluetooth: hci2: command tx timeout [ 150.136131] Bluetooth: hci5: command tx timeout [ 150.137681] Bluetooth: hci4: command tx timeout [ 150.200018] Bluetooth: hci6: command tx timeout [ 150.327965] Bluetooth: hci7: command tx timeout [ 151.928077] Bluetooth: hci0: command tx timeout [ 152.119930] Bluetooth: hci2: command tx timeout [ 152.120493] Bluetooth: hci1: command tx timeout [ 152.121201] Bluetooth: hci3: command tx timeout [ 152.183250] Bluetooth: hci5: command tx timeout [ 152.184724] Bluetooth: hci4: command tx timeout [ 152.253032] Bluetooth: hci6: command tx timeout [ 152.376034] Bluetooth: hci7: command tx timeout [ 153.975963] Bluetooth: hci0: command tx timeout [ 154.168394] Bluetooth: hci2: command tx timeout [ 154.169764] Bluetooth: hci3: command tx timeout [ 154.170448] Bluetooth: hci1: command tx timeout [ 154.231073] Bluetooth: hci5: command tx timeout [ 154.231545] Bluetooth: hci4: command tx timeout [ 154.295950] Bluetooth: hci6: command tx timeout [ 154.445652] Bluetooth: hci7: command tx timeout [ 156.023020] Bluetooth: hci0: command tx timeout [ 156.216068] Bluetooth: hci1: command tx timeout [ 156.216610] Bluetooth: hci3: command tx timeout [ 156.217159] Bluetooth: hci2: command tx timeout [ 156.279981] Bluetooth: hci5: command tx timeout [ 156.280518] Bluetooth: hci4: command tx timeout [ 156.342954] Bluetooth: hci6: command tx timeout [ 156.472037] Bluetooth: hci7: command tx timeout [ 210.122472] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.124096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.125556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.127013] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.128444] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.129624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.140821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.143805] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.147289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.149193] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.151558] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.152912] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.240130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.243459] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.245967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.250745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.256960] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.260170] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.377789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.382550] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.386502] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.389103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.392572] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.395274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.397248] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.397467] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.440246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.458650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.470123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.476268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.496261] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.534352] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.540423] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.550616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.561457] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.566228] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.567773] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.570229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.575999] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.580359] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.584109] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.588112] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.603730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.610955] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.616258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.623194] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.653173] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.662188] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.215040] Bluetooth: hci0: command tx timeout [ 212.217371] Bluetooth: hci1: command tx timeout [ 212.345739] Bluetooth: hci2: command tx timeout [ 212.472221] Bluetooth: hci4: command tx timeout [ 212.535000] Bluetooth: hci3: command tx timeout [ 212.665022] Bluetooth: hci7: command tx timeout [ 212.728004] Bluetooth: hci5: command tx timeout [ 212.791014] Bluetooth: hci6: command tx timeout [ 214.262985] Bluetooth: hci0: command tx timeout [ 214.264494] Bluetooth: hci1: command tx timeout [ 214.391998] Bluetooth: hci2: command tx timeout [ 214.519960] Bluetooth: hci4: command tx timeout [ 214.583994] Bluetooth: hci3: command tx timeout [ 214.710983] Bluetooth: hci7: command tx timeout [ 214.775922] Bluetooth: hci5: command tx timeout [ 214.839949] Bluetooth: hci6: command tx timeout [ 216.312055] Bluetooth: hci1: command tx timeout [ 216.312634] Bluetooth: hci0: command tx timeout [ 216.439972] Bluetooth: hci2: command tx timeout [ 216.567965] Bluetooth: hci4: command tx timeout [ 216.632142] Bluetooth: hci3: command tx timeout [ 216.759965] Bluetooth: hci7: command tx timeout [ 216.824117] Bluetooth: hci5: command tx timeout [ 216.887932] Bluetooth: hci6: command tx timeout [ 218.359062] Bluetooth: hci1: command tx timeout [ 218.359624] Bluetooth: hci0: command tx timeout [ 218.487969] Bluetooth: hci2: command tx timeout [ 218.615960] Bluetooth: hci4: command tx timeout [ 218.679967] Bluetooth: hci3: command tx timeout [ 218.808939] Bluetooth: hci7: command tx timeout [ 218.871971] Bluetooth: hci5: command tx timeout [ 218.935960] Bluetooth: hci6: command tx timeout [ 272.483875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.498993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.503811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.508874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.520306] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.521658] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.740607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.742112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.758735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.761172] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.763334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.768635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.771591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.781460] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.785415] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.787293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.797690] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.818110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.849781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.853041] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.857009] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.873533] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.877348] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.880519] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.902693] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.912275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.915101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.917353] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.926096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.928449] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.933811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.935984] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.937350] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.947213] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.951144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.954959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.994826] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 273.002771] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 273.004139] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 273.060032] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 273.069270] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 273.071510] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 273.074621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 273.081359] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 273.088115] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 273.089226] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 273.090285] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 273.093283] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.551959] Bluetooth: hci0: command tx timeout [ 274.806954] Bluetooth: hci2: command tx timeout [ 274.870928] Bluetooth: hci1: command tx timeout [ 274.934938] Bluetooth: hci3: command tx timeout [ 274.999924] Bluetooth: hci5: command tx timeout [ 275.000642] Bluetooth: hci4: command tx timeout [ 275.190995] Bluetooth: hci6: command tx timeout [ 275.191979] Bluetooth: hci7: command tx timeout [ 276.598948] Bluetooth: hci0: command tx timeout [ 276.854991] Bluetooth: hci2: command tx timeout [ 276.918961] Bluetooth: hci1: command tx timeout [ 276.982950] Bluetooth: hci3: command tx timeout [ 277.046947] Bluetooth: hci4: command tx timeout [ 277.047431] Bluetooth: hci5: command tx timeout [ 277.238961] Bluetooth: hci7: command tx timeout [ 277.239486] Bluetooth: hci6: command tx timeout [ 278.647898] Bluetooth: hci0: command tx timeout [ 278.903006] Bluetooth: hci2: command tx timeout [ 278.967050] Bluetooth: hci1: command tx timeout [ 279.030953] Bluetooth: hci3: command tx timeout [ 279.094985] Bluetooth: hci5: command tx timeout [ 279.096514] Bluetooth: hci4: command tx timeout [ 279.297981] Bluetooth: hci7: command tx timeout [ 279.298539] Bluetooth: hci6: command tx timeout [ 280.695033] Bluetooth: hci0: command tx timeout [ 280.950937] Bluetooth: hci2: command tx timeout [ 281.014996] Bluetooth: hci1: command tx timeout [ 281.079080] Bluetooth: hci3: command tx timeout [ 281.143028] Bluetooth: hci5: command tx timeout [ 281.143572] Bluetooth: hci4: command tx timeout [ 281.334986] Bluetooth: hci6: command tx timeout [ 281.335536] Bluetooth: hci7: command tx timeout [ 334.876747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.880479] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.882618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.886852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.889505] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.893952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.913559] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.914801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.916024] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.921048] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.922587] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.923588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.048058] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.050608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.051752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.060072] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.064151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.066464] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.069069] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.070067] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.071707] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.074041] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.076442] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 335.077615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.085805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.091205] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.094677] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 335.098440] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.101571] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.105644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.118931] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.123185] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.124344] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.124787] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.134254] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.135253] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.141394] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.159125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.161542] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.165103] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.169118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.185490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.188167] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.197412] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.209795] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.257111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.286461] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.287503] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.951620] Bluetooth: hci1: command tx timeout [ 336.952950] Bluetooth: hci0: command tx timeout [ 337.144027] Bluetooth: hci2: command tx timeout [ 337.209048] Bluetooth: hci3: command tx timeout [ 337.270996] Bluetooth: hci4: command tx timeout [ 337.271665] Bluetooth: hci7: command tx timeout [ 337.272342] Bluetooth: hci6: command tx timeout [ 337.399091] Bluetooth: hci5: command tx timeout [ 338.999001] Bluetooth: hci1: command tx timeout [ 338.999022] Bluetooth: hci0: command tx timeout [ 339.192861] Bluetooth: hci2: command tx timeout [ 339.255042] Bluetooth: hci3: command tx timeout [ 339.319156] Bluetooth: hci6: command tx timeout [ 339.319267] Bluetooth: hci7: command tx timeout [ 339.319727] Bluetooth: hci4: command tx timeout [ 339.446928] Bluetooth: hci5: command tx timeout [ 341.046941] Bluetooth: hci1: command tx timeout [ 341.048798] Bluetooth: hci0: command tx timeout [ 341.238904] Bluetooth: hci2: command tx timeout [ 341.302907] Bluetooth: hci3: command tx timeout [ 341.366949] Bluetooth: hci6: command tx timeout [ 341.368276] Bluetooth: hci4: command tx timeout [ 341.368316] Bluetooth: hci7: command tx timeout [ 341.496907] Bluetooth: hci5: command tx timeout [ 343.094927] Bluetooth: hci0: command tx timeout [ 343.094963] Bluetooth: hci1: command tx timeout [ 343.286943] Bluetooth: hci2: command tx timeout [ 343.351028] Bluetooth: hci3: command tx timeout [ 343.415158] Bluetooth: hci6: command tx timeout [ 343.416491] Bluetooth: hci4: command tx timeout [ 343.416984] Bluetooth: hci7: command tx timeout [ 343.543896] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 00:07:47 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000148 RCX=ffffffff812fb082 RDX=fffffbfff0fda9da RSI=0000000000000008 RDI=ffffffff87ed4ec8 RBP=ffff88802dfec140 RSP=ffff88802dfdf938 R8 =0000000000000000 R9 =fffffbfff0fda9d9 R10=ffffffff87ed4ecf R11=00000000ffffffff R12=ffff88802dfeb700 R13=0000000000000003 R14=dffffc0000000000 R15=0000000000000002 RIP=ffffffff812fb08a RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb800ab8170 CR3=0000000035618000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff888023a07970 RCX=0000000000000001 RDX=1ffff11004740f46 RSI=ffffffff818f8143 RDI=ffff888023a0797c RBP=ffff888023a07a30 RSP=ffff888023a07888 R8 =0000000000000001 R9 =ffff888023a078e8 R10=000000000003c001 R11=00000000000250e6 R12=ffff888023a07970 R13=0000000000000000 R14=ffff888033c09b80 R15=0000000000092cc0 RIP=ffffffff813e9049 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8572121540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f85722bc4a1 CR3=0000000022ce0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000