Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:30073' (ECDSA) to the list of known hosts. 2025/06/22 15:39:22 fuzzer started 2025/06/22 15:39:23 dialing manager at localhost:33119 syzkaller login: [ 94.003935] cgroup: Unknown subsys name 'net' [ 94.158718] cgroup: Unknown subsys name 'cpuset' [ 94.201304] cgroup: Unknown subsys name 'rlimit' 2025/06/22 15:39:41 syscalls: 200 2025/06/22 15:39:41 code coverage: enabled 2025/06/22 15:39:41 comparison tracing: enabled 2025/06/22 15:39:41 extra coverage: enabled 2025/06/22 15:39:41 setuid sandbox: enabled 2025/06/22 15:39:41 namespace sandbox: enabled 2025/06/22 15:39:41 Android sandbox: enabled 2025/06/22 15:39:41 fault injection: enabled 2025/06/22 15:39:41 leak checking: enabled 2025/06/22 15:39:41 net packet injection: enabled 2025/06/22 15:39:41 net device setup: enabled 2025/06/22 15:39:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/22 15:39:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/22 15:39:41 USB emulation: enabled 2025/06/22 15:39:41 hci packet injection: enabled 2025/06/22 15:39:41 wifi device emulation: enabled 2025/06/22 15:39:41 802.15.4 emulation: enabled 2025/06/22 15:39:41 fetching corpus: 0, signal 0/0 (executing program) 2025/06/22 15:39:43 starting 8 fuzzer processes 15:39:43 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x41) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044004}, 0x40000) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r0, 0xb82, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4054}, 0x41) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/class/wmi_bus', 0x4000, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x602, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x36}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IPPROTO={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000004}, 0x4000000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x84, r0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd0, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x811}, 0x404c090) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000a40), r3) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000897) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000b80)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001300)={'erspan0\x00', &(0x7f0000001240)={'syztnl1\x00', r5, 0x7, 0x8000, 0xfffffffe, 0x4, {{0x1d, 0x4, 0x2, 0x2, 0x74, 0x68, 0x0, 0x97, 0x4, 0x0, @empty, @private=0xa010101, {[@noop, @timestamp={0x44, 0x10, 0xb4, 0x0, 0x0, [0x457, 0xff, 0xd8]}, @lsrr={0x83, 0xf, 0x61, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x20, 0x5, 0x0, 0x3, [0x2, 0x0, 0x3, 0x8, 0x1, 0x10000, 0xffffffff]}, @noop, @timestamp={0x44, 0x10, 0x4f, 0x0, 0xe, [0x3f, 0x988, 0x4]}, @generic={0x88, 0xc, "242086e182913d7844a9"}]}}}}}) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000001400)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x4000080) r7 = fsmount(0xffffffffffffffff, 0x0, 0x4) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x4c, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc8001) 15:39:43 executing program 1: getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) socketpair(0x1, 0x2, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/rcupdate', 0x101000, 0xa8) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/virtio_pci_legacy_dev', 0xa4000, 0x11) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2d4, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x752e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x813}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3e000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffff001, @local, 0x1}}}}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "1be51588123d82eb0b4c518aa8039c950ea2aff25dcda8751b881838c70bfc4f"}}, @TIPC_NLA_NODE_ID={0x24, 0x3, "a420d43f1ed313b21d8604a05dbe6e0ebfb9c5561fe1a01b4868de0910c1234a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ID={0x44, 0x3, "8f6d064447c42a1e2457a9e5b1f2ab49f35f58831864114bd0b275762d1c6ce84fe711e6894613ebc03cdda1fed6b7956a820287e9a523ebd911e25019d122b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xd6d8, @private2, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @private2, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x671}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x66c}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x44849}, 0x8010) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/module/processor', 0x2000, 0x9) r6 = openat$cgroup_pressure(r5, &(0x7f00000006c0)='memory.pressure\x00', 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000740)={0x5, 0x80, 0x80, 0x4, 0x0, 0x6, 0x0, 0x101, 0x22007, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000700), 0xf}, 0x4010, 0x5, 0x7ff, 0x7, 0x3, 0x3, 0xfff, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0xd, r4, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000e40)={0x138, 0x0, &(0x7f0000000c80)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000007c0)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000840)={0x0, 0x18, 0x30}}, 0x1000}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x1, &(0x7f0000000880)=""/111, 0x6f, 0x2, 0x21}, @flat=@binder={0x73622a85, 0x10a}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/18, 0x12, 0x0, 0x38}}, &(0x7f00000009c0)={0x0, 0x28, 0x40}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000a80)={@fda={0x66646185, 0x9, 0x0, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000a00)=""/80, 0x50, 0x2, 0x12}, @flat=@handle={0x73682a85, 0x100}}, &(0x7f0000000b00)={0x0, 0x20, 0x48}}, 0x1000}, @increfs={0x40046304, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000bc0)={@flat=@weak_binder={0x77622a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000b40)=""/92, 0x5c, 0x2, 0x2a}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000c40)={0x0, 0x18, 0x40}}, 0x400}], 0x61, 0x0, &(0x7f0000000dc0)="00a3f77d660d0cab6ca5b0600cc0555d13098366bbfce0ed5cfcdc3bf21ccc72b797fc9cc01902a54aed5de603cbcc6afea1edadaefa1c9c1d2f1b443524ffff157eaca9f6252c142b8d07a4e9475d39c23b82446cb73047c00c8af4cdf1173b50"}) r8 = fsmount(r3, 0x1, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000001180)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000ec0)={0x244, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @private1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x101, @private2, 0x1000}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x82}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "c643155826bdcdcff15dbeed13ab61440097ca0d14b61b0b9eb13da160ce05c9b0d0e3db"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "80709f6c69afb06c89485cfd26aee4484ce671c4"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x70, 0x3, "166bef99bdbea0183cb488674312fcdf57ce57373f17845a094876bbfe27593f5124cafb71120edc088ba81ea60175d29b7d69712a2f371aa53571ee58908b510c1f8fead5d8c80bb868f4807ae990ec16f703058aa8e77f7b4f4599357a3e4793e62480bee8485fa4704e30"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "25b1c99b0e21694c1a3d2169ccbb81ea71fc5417acbfcfcb5625e058a1"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x244}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) 15:39:43 executing program 2: r0 = semget$private(0x0, 0x0, 0x408) semctl$GETVAL(r0, 0x0, 0xc, &(0x7f0000000000)=""/62) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/236) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000000140)=""/169) r1 = semget(0x3, 0x1, 0x14) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f0000000200)=""/201) r2 = semget(0x1, 0x4, 0x100) semctl$SEM_STAT_ANY(r2, 0x1, 0x14, &(0x7f0000000300)=""/237) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000400)=""/181) r3 = semget$private(0x0, 0x0, 0x20) semop(r1, &(0x7f00000004c0)=[{0x4, 0x8000, 0x800}, {0x2, 0xffff, 0x1800}, {0x3, 0x101, 0x800}, {0x4, 0x8001, 0x1000}, {0x1, 0x8, 0x1000}, {0x4, 0x0, 0x800}, {0x3, 0x9}, {0x1, 0x8001, 0x800}], 0x8) r4 = semget(0x3, 0x0, 0x90) statx(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x2000, 0x200, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000640)={{0x0, r5, 0x0, 0xee00, 0xee01, 0x8a, 0x2}, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0xff62}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0/file0\x00', 0x101000, 0x61) r8 = semget(0x2, 0x4, 0x30) semctl$SETVAL(r8, 0x4, 0x10, &(0x7f0000000700)) statx(r7, &(0x7f0000000740)='./file0/file0\x00', 0x400, 0x200, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000880)={{0x3, r5, r9, r5, r6, 0x88, 0x20}, 0x6, 0xffff}) semctl$GETNCNT(r3, 0x1, 0xe, &(0x7f0000000900)=""/12) 15:39:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x20001) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="8c095bf243ad06f58508256edcebeb43d132e96cb746714ff87e222bb824afa7197c7b21ccac393c9ebe8828a191272fb5b8a4a85754794dbaae308b64ae38f5aa7cedcc1041271d68c03425fdacc6267311f2ac987d98e5c18a529b2141f60de1e75651fbde1e7aee02da99cca1ad09236192881f9c971ae118f506c6c300bd553bbfb304156a26d7a38f4dc5668b75cf3c8c7d6abfdb0a442830abd67c76bbcd3a2ee36eb868bbcd0e40ed45a234c666c4cd6163d54d361441c823cb0605014abce8f32ce191d61bbd20f0979a3a2b", 0xd0, 0xfffffffffffffffa) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="a0713868cc5baa6dc22138d425403a2951c30d36427124840a9480a00f58841939adb0457b243704e14a5af74e2508c6655c876eeef583c28da0a96aecce3e05264d17b6ab72ee179882ecd0906f8ced1bc200494faadf46a303f5f32b31e5c2108bdc34aeac7bcb23660f01548c605a1a15ff33aa587245751a7d378f8933fd420c1532aa69c5c42522f91d75596104f2406740740ae10a2ebd4c2289", 0x9d, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, 0x0, r2}, &(0x7f0000000340)=""/219, 0xdb, &(0x7f0000000580)={&(0x7f0000000440)={'rmd320\x00'}, &(0x7f0000000480)="abaff16c831b347c13f8241fd17b782cfcc1e5b393030e0ee34fed0eed6ec2832fe1dc1ed41c666e3daf2246388cef6d73cc1c921d51a9796e46e10f71a05288e3e3a673d022de193efa68a40993c9ce0b4843b4bccd73d30d966b1dd305ed595612a577da8f6636d52b65b53bd32d948b67eebd238d41640ff5447aa46c811241e08515b79576f917500b6c0be488e419feedef9767203fda3ea0f9327dda529b154760e6af79cadaa30fb6565a3120e1ecd0ebca40233cd93257322cd55882f5a17f6ada98c4cbd75cce249cb0706bf3983a674f9f1d25a286435e88464d67a346d0a54c3a8a385e", 0xe9}) r3 = add_key$user(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)="ad9a197a666790391f3c704031b5bbf1188aecdb68a111a4eb46448c6ad9953e7d98548d60a90591e41cce5618d42bbffb98c31e40070951cf4f5ced82f59369b4acff699f80340ae2cdc6db113be7f91099a7c56d660460f419d9cf564b75071ebe00f6a47ee313e1d9a13f1b3dc4ca0e32a79da7231ace997ba297fbf5ef3c3cf337cf0988dbfc4a7cee286a056ec117ecd35296e9afea4597ce1bf7f979846b5dd89dc02bba718f1e9724f58e7db2e8d11e1746268410d2d88f2f56601b1521aed87665adfdb761c7ad7667db79bbb9178add40ef0e61b06ff6a7bf91fb5e9fc3", 0xe2, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000740)={r2, r1, r3}, &(0x7f0000000780)=""/50, 0x32, &(0x7f0000000900)={&(0x7f00000007c0)={'cmac(anubis)\x00'}, &(0x7f0000000800)="36aa4c7927f8590f2fe4cc2f215c41da4d9a485c3f0c2ed6a122b0a2f339764e2912e35b5d864c7195be16150b2e892086c014561906c37b1bf40c928189ae8737ca6fcab60715ebcb72352fb23bff03934be9137f8d9c7e761029dfc880e2da952a677bd0a510af86c12d547c2cce23d9658b23316f9106cb1731289b21cc0ed9f36cf200509b246efd1ae39f2b9815da56456106266b0f0bc81281598d9db13d5069ea6deace770b4dace19139caec91915154f4d9619c273f3d2d4139d1abab5797d845950bf17a0834f58d773855ed718c3a4ba60523bbbe4fd938aff03c865af2785bce48bfb848608f724f8e83f5", 0xf1}) getuid() semctl$IPC_INFO(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000940)=""/31) r4 = add_key$user(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x3}, &(0x7f0000000a00)="03d0822979f01cb4b7fa617f7eb37ff17a881564b1cc43a21b7d8bfd412586e108f70df6b8652df87e65aa4cafc20c0472df60532a1f62c4b2dfbc14e7e59959e436f5a6892a0d78cf70433aef6ca9e7f24d63038e4957f2d77ae2fb4942256386b740e6416542b246de680737c5ea0a766a76fcfcdf6056aec1f0af2db8df85500ecea6b4f899bc167c624ad91de4a715b16313ed059e31c62e58f73c31715a4bb734c5dfb3f346bd7b39ff375295f1456dcea8b7e89c475ceb", 0xba, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x3}, &(0x7f0000000b40)="26b6ed3d0019aafa8ccc6f7efac561573cf449f6b3c52609787b46a2256da57b40123bb0eed43a43ea48cda5a442a2bc4b3d1373cf14ca02651451beb25650e9", 0x40, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000b80)={r4, r3, r5}, &(0x7f0000000bc0)=""/102, 0x66, &(0x7f0000000d00)={&(0x7f0000000c40)={'xcbc-aes-ce\x00'}, &(0x7f0000000c80)="368bcc8c46fe5b3307693e3134e79177eeb4b649618b98413cb859cae855d57112118e6001afbba444ad4a91321380dc8f04d66df63d992bb21d8789b40527ff7c39", 0x42}) r6 = getpid() sched_rr_get_interval(r6, &(0x7f0000000d40)) r7 = semget(0x2, 0x1, 0x139) semctl$GETNCNT(r7, 0x1, 0xe, &(0x7f0000000d80)=""/36) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000dc0), r8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r8) renameat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00') 15:39:43 executing program 4: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x85000c80) r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x14000000) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x1) getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@can, &(0x7f0000000140)=0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000200)={r1, 0x0, 0x7fff}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000300)='.pending_reads\x00', 0x44800, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000280)='!@*\x8c%),$\x00', &(0x7f00000002c0)='./file0\x00', r3) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000340)={r1}) inotify_rm_watch(r3, r0) mknodat$loop(r3, &(0x7f0000000380)='./file0/file0\x00', 0xc000, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/class/devcoredump', 0x80000, 0x20) linkat(r2, &(0x7f00000003c0)='./file0/file0\x00', r4, &(0x7f0000000440)='./file0\x00', 0x1000) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000480)={{0x2, 0x4}, {0x400, 0x2}, 0x2}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x12040, 0x4) linkat(r4, &(0x7f00000004c0)='./file0/file0\x00', r5, &(0x7f0000000540)='./file0/file0\x00', 0x1400) fspick(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x284401, 0x1) mknodat$loop(r6, &(0x7f0000000600)='./file1\x00', 0x200, 0x0) [ 113.653796] audit: type=1400 audit(1750606783.355:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:39:43 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hci_vhci', 0x803e0, 0x80) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sg', 0x44000, 0x21) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x84000001) r4 = inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x4000000) inotify_rm_watch(r0, r4) mknodat$loop(r0, &(0x7f0000000100)='./file0\x00', 0x200, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x8a400, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r1) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) socketpair(0x18, 0x800, 0xa16, &(0x7f0000004400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000004500)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000044c0)={&(0x7f0000004480)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040840}, 0x4040001) r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r8) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000007480)={&(0x7f00000073c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000007440)={&(0x7f0000007400)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x4800) 15:39:43 executing program 6: getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x2}) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r0, 0x1ff, 0x80000}) r1 = getuid() setuid(r1) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)={0x2}) setuid(r1) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x8) linkat(r3, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000200)='#{\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c) read$snapshot(r2, &(0x7f0000000280)=""/87, 0x57) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000380)={r4, 0x3, 0xffffffffffffffff, 0xfffffff8, 0x80000}) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000003c0)='rw\x00', 0x0, 0x0) r5 = semget$private(0x0, 0x1, 0x614) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000400)={{0x2, r1, 0xffffffffffffffff, 0x0, 0x0, 0x124, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 15:39:43 executing program 7: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/time\x00') r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80460c0}, 0x8000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/iommu_groups', 0x10080, 0xd06c4f9d6b8a1237) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xd8, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x5, 0x2, 0xb}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @flat=@weak_handle={0x77682a85, 0x110a, 0x3}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @increfs={0x40046304, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/63, 0x3f, 0x800, 0xf}, @fda={0x66646185, 0x8, 0x0, 0x15}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000003c0)={0x0, 0x28, 0x48}}}, @acquire_done={0x40106309, 0x3}, @release, @request_death={0x400c630e, 0x3}, @clear_death], 0x75, 0x0, &(0x7f0000000500)="66badcd81de4fe0038c34429de225c4bbcac294a503a43b502771b5b9cfbe25e8763c82ad01d42994d93bf4b9af9b0502df52978de06ee59a722b5a8c133dca37a4a496fbebd9e50c2c00c2b9082efbafb7dc5e1c4ded09dac3e7c024f8ae1a01c333accdf2113aeb13755aa8b80e9aba30aaf5040"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x98, r5, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x48085) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000780), 0x4) ioctl$LOOP_SET_FD(r3, 0x4c00, r3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000007c0)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r3) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r6, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48010) socketpair(0xb, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r5, 0xa, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x2}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) getpeername(r3, &(0x7f0000000ac0)=@ax25={{0x3, @bcast}, [@default, @bcast, @remote, @netrom, @bcast, @default, @netrom, @null]}, &(0x7f0000000b40)=0x80) clock_gettime(0x5, &(0x7f0000000b80)) [ 115.191173] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.199693] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.204256] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.219543] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.223544] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.230064] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.244542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.247001] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.251274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.254318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.258690] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.262070] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.262251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.266204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.271447] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.273699] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.311187] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.319024] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.321446] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.333389] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.337246] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.337440] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.343337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.348093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.349014] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.354804] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.357890] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.359968] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.371237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.371855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.375194] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.381344] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.381476] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.409362] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.415964] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.441052] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.448516] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.456679] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.460105] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.484019] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.326317] Bluetooth: hci1: command tx timeout [ 117.326332] Bluetooth: hci0: command tx timeout [ 117.453906] Bluetooth: hci3: command tx timeout [ 117.454698] Bluetooth: hci2: command tx timeout [ 117.455280] Bluetooth: hci4: command tx timeout [ 117.517902] Bluetooth: hci5: command tx timeout [ 117.517952] Bluetooth: hci7: command tx timeout [ 117.582186] Bluetooth: hci6: command tx timeout [ 119.374186] Bluetooth: hci0: command tx timeout [ 119.374429] Bluetooth: hci1: command tx timeout [ 119.502674] Bluetooth: hci4: command tx timeout [ 119.503150] Bluetooth: hci2: command tx timeout [ 119.503231] Bluetooth: hci3: command tx timeout [ 119.566594] Bluetooth: hci5: command tx timeout [ 119.568860] Bluetooth: hci7: command tx timeout [ 119.629955] Bluetooth: hci6: command tx timeout [ 121.423267] Bluetooth: hci0: command tx timeout [ 121.423737] Bluetooth: hci1: command tx timeout [ 121.551011] Bluetooth: hci4: command tx timeout [ 121.551934] Bluetooth: hci2: command tx timeout [ 121.552352] Bluetooth: hci3: command tx timeout [ 121.615028] Bluetooth: hci5: command tx timeout [ 121.615456] Bluetooth: hci7: command tx timeout [ 121.679799] Bluetooth: hci6: command tx timeout [ 123.469853] Bluetooth: hci1: command tx timeout [ 123.470324] Bluetooth: hci0: command tx timeout [ 123.598788] Bluetooth: hci3: command tx timeout [ 123.599240] Bluetooth: hci2: command tx timeout [ 123.599650] Bluetooth: hci4: command tx timeout [ 123.662075] Bluetooth: hci7: command tx timeout [ 123.662267] Bluetooth: hci5: command tx timeout [ 123.726823] Bluetooth: hci6: command tx timeout [ 178.078223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.083176] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.086563] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.096680] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.108271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.173316] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.179730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.188023] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.193431] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.197955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.237095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.258192] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.266795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.270661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.281229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.285188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.295247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.305919] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.314392] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.318594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.399959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.414352] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.420436] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.435122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.445257] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.486598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.488467] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.492958] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.493178] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.502475] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.506427] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.508661] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.522840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.524727] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.530072] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.532536] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.538704] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.546533] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.563611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.588467] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.174283] Bluetooth: hci0: command tx timeout [ 180.302607] Bluetooth: hci1: command tx timeout [ 180.366921] Bluetooth: hci2: command tx timeout [ 180.493896] Bluetooth: hci3: command tx timeout [ 180.559082] Bluetooth: hci4: command tx timeout [ 180.622191] Bluetooth: hci6: command tx timeout [ 180.623627] Bluetooth: hci5: command tx timeout [ 180.687116] Bluetooth: hci7: command tx timeout [ 182.222913] Bluetooth: hci0: command tx timeout [ 182.349806] Bluetooth: hci1: command tx timeout [ 182.416871] Bluetooth: hci2: command tx timeout [ 182.543491] Bluetooth: hci3: command tx timeout [ 182.606868] Bluetooth: hci4: command tx timeout [ 182.671052] Bluetooth: hci6: command tx timeout [ 182.671487] Bluetooth: hci5: command tx timeout [ 182.733853] Bluetooth: hci7: command tx timeout [ 184.269861] Bluetooth: hci0: command tx timeout [ 184.398835] Bluetooth: hci1: command tx timeout [ 184.463160] Bluetooth: hci2: command tx timeout [ 184.590859] Bluetooth: hci3: command tx timeout [ 184.654998] Bluetooth: hci4: command tx timeout [ 184.718946] Bluetooth: hci5: command tx timeout [ 184.719405] Bluetooth: hci6: command tx timeout [ 184.781951] Bluetooth: hci7: command tx timeout [ 186.318874] Bluetooth: hci0: command tx timeout [ 186.447078] Bluetooth: hci1: command tx timeout [ 186.510847] Bluetooth: hci2: command tx timeout [ 186.638993] Bluetooth: hci3: command tx timeout [ 186.702834] Bluetooth: hci4: command tx timeout [ 186.768384] Bluetooth: hci6: command tx timeout [ 186.769142] Bluetooth: hci5: command tx timeout [ 186.831118] Bluetooth: hci7: command tx timeout [ 238.153962] syz-executor.7 (2852) used greatest stack depth: 24544 bytes left [ 240.349526] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.351098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.352711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.361922] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.363963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.421298] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.427011] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.429392] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.430240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.432426] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.433212] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.436949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.438012] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.440651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.441588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.474104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.476517] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.487514] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.493249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.501381] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.532896] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.547076] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.566845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.591912] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.601464] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.602536] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.610021] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.620918] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.665935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.678005] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.697153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.715287] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.737202] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.746027] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.749400] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.753586] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.778266] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.780191] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.805016] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.810895] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.445831] Bluetooth: hci0: command tx timeout [ 242.509845] Bluetooth: hci1: command tx timeout [ 242.510636] Bluetooth: hci2: command tx timeout [ 242.573974] Bluetooth: hci3: command tx timeout [ 242.639915] Bluetooth: hci4: command tx timeout [ 242.765889] Bluetooth: hci5: command tx timeout [ 242.829854] Bluetooth: hci6: command tx timeout [ 242.958866] Bluetooth: hci7: command tx timeout [ 244.494041] Bluetooth: hci0: command tx timeout [ 244.557924] Bluetooth: hci1: command tx timeout [ 244.558407] Bluetooth: hci2: command tx timeout [ 244.621894] Bluetooth: hci3: command tx timeout [ 244.686976] Bluetooth: hci4: command tx timeout [ 244.815103] Bluetooth: hci5: command tx timeout [ 244.878810] Bluetooth: hci6: command tx timeout [ 245.006820] Bluetooth: hci7: command tx timeout [ 246.543781] Bluetooth: hci0: command tx timeout [ 246.606854] Bluetooth: hci1: command tx timeout [ 246.607368] Bluetooth: hci2: command tx timeout [ 246.669883] Bluetooth: hci3: command tx timeout [ 246.735974] Bluetooth: hci4: command tx timeout [ 246.861836] Bluetooth: hci5: command tx timeout [ 246.927147] Bluetooth: hci6: command tx timeout [ 247.054853] Bluetooth: hci7: command tx timeout [ 248.589843] Bluetooth: hci0: command tx timeout [ 248.653932] Bluetooth: hci2: command tx timeout [ 248.654437] Bluetooth: hci1: command tx timeout [ 248.720826] Bluetooth: hci3: command tx timeout [ 248.781859] Bluetooth: hci4: command tx timeout [ 248.910819] Bluetooth: hci5: command tx timeout [ 248.974984] Bluetooth: hci6: command tx timeout [ 249.101965] Bluetooth: hci7: command tx timeout [ 303.273383] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.278106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.281716] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.296262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.306389] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.357520] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.361269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.367238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.376182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.383427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.462498] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.471002] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.493022] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.524106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.533910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.542389] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.544027] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.587006] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.600928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.615637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.632347] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.657148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.669649] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.673623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.676536] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.678968] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.681735] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.684110] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.686105] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.688655] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.690723] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.701148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.704621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.716641] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.718279] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.723402] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.735548] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.739499] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.741638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.759442] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.359261] Bluetooth: hci0: command tx timeout [ 305.422909] Bluetooth: hci1: command tx timeout [ 305.614862] Bluetooth: hci2: command tx timeout [ 305.806492] Bluetooth: hci3: command tx timeout [ 305.808480] Bluetooth: hci7: command tx timeout [ 305.808656] Bluetooth: hci4: command tx timeout [ 305.810675] Bluetooth: hci6: command tx timeout [ 305.871825] Bluetooth: hci5: command tx timeout [ 307.405871] Bluetooth: hci0: command tx timeout [ 307.469868] Bluetooth: hci1: command tx timeout [ 307.661975] Bluetooth: hci2: command tx timeout [ 307.853906] Bluetooth: hci4: command tx timeout [ 307.854393] Bluetooth: hci7: command tx timeout [ 307.854850] Bluetooth: hci6: command tx timeout [ 307.855261] Bluetooth: hci3: command tx timeout [ 307.917870] Bluetooth: hci5: command tx timeout [ 309.454055] Bluetooth: hci0: command tx timeout [ 309.519861] Bluetooth: hci1: command tx timeout [ 309.710139] Bluetooth: hci2: command tx timeout [ 309.901876] Bluetooth: hci3: command tx timeout [ 309.902340] Bluetooth: hci6: command tx timeout [ 309.902391] Bluetooth: hci7: command tx timeout [ 309.902949] Bluetooth: hci4: command tx timeout [ 309.965819] Bluetooth: hci5: command tx timeout [ 311.502810] Bluetooth: hci0: command tx timeout [ 311.567045] Bluetooth: hci1: command tx timeout [ 311.758039] Bluetooth: hci2: command tx timeout [ 311.950802] Bluetooth: hci4: command tx timeout [ 311.951003] Bluetooth: hci3: command tx timeout [ 311.951251] Bluetooth: hci7: command tx timeout [ 311.951698] Bluetooth: hci6: command tx timeout [ 312.014959] Bluetooth: hci5: command tx timeout [ 365.863579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.867072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.873159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.881595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.887446] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.940160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.948312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.958434] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.961112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.963288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.963627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.975602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.978568] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.982372] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.985013] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.214472] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.249469] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.273452] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.292022] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.316096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.326522] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.328230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.332027] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.335988] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.344343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.367237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.376125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.389681] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.394245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.409169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.416429] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.432201] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.432695] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 366.473494] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.483914] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.506598] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.526034] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.558368] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.611676] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.635162] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 367.950260] Bluetooth: hci0: command tx timeout [ 368.077996] Bluetooth: hci2: command tx timeout [ 368.079658] Bluetooth: hci1: command tx timeout [ 368.526036] Bluetooth: hci5: command tx timeout [ 368.526879] Bluetooth: hci3: command tx timeout [ 368.590109] Bluetooth: hci4: command tx timeout [ 368.655123] Bluetooth: hci6: command tx timeout [ 368.718168] Bluetooth: hci7: command tx timeout [ 369.998226] Bluetooth: hci0: command tx timeout [ 370.126301] Bluetooth: hci1: command tx timeout [ 370.126933] Bluetooth: hci2: command tx timeout [ 370.573880] Bluetooth: hci5: command tx timeout [ 370.574329] Bluetooth: hci3: command tx timeout [ 370.637900] Bluetooth: hci4: command tx timeout [ 370.703847] Bluetooth: hci6: command tx timeout [ 370.767874] Bluetooth: hci7: command tx timeout [ 372.046421] Bluetooth: hci0: command tx timeout [ 372.174056] Bluetooth: hci1: command tx timeout [ 372.174487] Bluetooth: hci2: command tx timeout [ 372.622258] Bluetooth: hci5: command tx timeout [ 372.622719] Bluetooth: hci3: command tx timeout [ 372.685957] Bluetooth: hci4: command tx timeout [ 372.749810] Bluetooth: hci6: command tx timeout [ 372.814894] Bluetooth: hci7: command tx timeout [ 374.093819] Bluetooth: hci0: command tx timeout [ 374.222083] Bluetooth: hci2: command tx timeout [ 374.222515] Bluetooth: hci1: command tx timeout [ 374.669898] Bluetooth: hci3: command tx timeout [ 374.670370] Bluetooth: hci5: command tx timeout [ 374.733814] Bluetooth: hci4: command tx timeout [ 374.797830] Bluetooth: hci6: command tx timeout [ 374.862300] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:44:51 Registers: info registers vcpu 0 RAX=0000000080086992 RBX=0000000093572ccf RCX=ffff88803412ea70 RDX=0000000000000010 RSI=00000000df821768 RDI=0000000000000002 RBP=0000000000000001 RSP=ffff88802a89f6d8 R8 =00000000e79732a0 R9 =ffff88806c22ccf0 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000092cc0 R14=ffff88802a89f740 R15=0000000000000010 RIP=ffffffff825b3566 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556c4ff400 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f20deae26f4 CR3=0000000014d0b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f20deaf147000007f20deaf0f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff814031bf RCX=ffff88802a88747c RDX=1ffff11005510eb0 RSI=ffffffff85c1cc40 RDI=ffffffff814031bf RBP=ffffffff814031bf RSP=ffff88802a8874e8 R8 =0000000000000001 R9 =ffff88802a887568 R10=000000000003b53d R11=0000000000026f0f R12=ffff88802a8875f0 R13=0000000000000000 R14=ffff8880361dd280 R15=0000000000000cc0 RIP=ffffffff8142fa63 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561662c53080 CR3=0000000032b27000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f1796c9b47000007f1796c9af20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000