Warning: Permanently added '[localhost]:37880' (ECDSA) to the list of known hosts. 2025/01/22 00:02:42 fuzzer started 2025/01/22 00:02:43 dialing manager at localhost:44689 syzkaller login: [ 69.997010] cgroup: Unknown subsys name 'net' [ 70.094994] cgroup: Unknown subsys name 'cpuset' [ 70.133266] cgroup: Unknown subsys name 'rlimit' [ 75.623296] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 86.043450] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 00:02:59 syscalls: 207 2025/01/22 00:02:59 code coverage: enabled 2025/01/22 00:02:59 comparison tracing: enabled 2025/01/22 00:02:59 extra coverage: enabled 2025/01/22 00:02:59 setuid sandbox: enabled 2025/01/22 00:02:59 namespace sandbox: enabled 2025/01/22 00:02:59 Android sandbox: enabled 2025/01/22 00:02:59 fault injection: enabled 2025/01/22 00:02:59 leak checking: enabled 2025/01/22 00:02:59 net packet injection: enabled 2025/01/22 00:02:59 net device setup: enabled 2025/01/22 00:02:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 00:02:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 00:02:59 USB emulation: enabled 2025/01/22 00:02:59 hci packet injection: enabled 2025/01/22 00:02:59 wifi device emulation: enabled 2025/01/22 00:02:59 802.15.4 emulation: enabled 2025/01/22 00:02:59 fetching corpus: 0, signal 0/0 (executing program) 2025/01/22 00:03:01 starting 8 fuzzer processes 00:03:01 executing program 0: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x364a, &(0x7f0000000040)={0x0, 0xc114, 0x20, 0x2, 0x89}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x54, &(0x7f0000000180)={0x0, 0x7b8d, 0x1, 0x1, 0xe5, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000280)={0x67446698, 0x1, 0x1, 0x4, 0x3, "9b7b167350c5c003c5c7066e848ef6f5004b04750cbe1637ed48d90d1996f0976bc7d29517"}, 0x35) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c4, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x76}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}, @NL80211_ATTR_REG_RULES={0x17c, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffeffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x800}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x36}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x339d}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x705c49}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb83}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4008004}, 0x4004000) pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$cgroup_devices(r4, &(0x7f0000000640)={'b', ' *:* ', 'w\x00'}, 0x8) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10011012}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0xb5226669139a64b8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x2, 0x7, 0x0, {0x7ff, 0x40, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3}, 0x300, 0x401}}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000780)={0x7fffffff, 0x8, 0x6, 0x5, 0x1000}, 0x14) r5 = syz_io_uring_complete(r1) io_uring_setup(0x20ac, &(0x7f00000007c0)={0x0, 0xf45f, 0x10, 0x0, 0x38a, 0x0, r5}) r6 = syz_io_uring_complete(r1) bind$bt_hci(r6, &(0x7f0000000840)={0x1f, 0x1, 0x4}, 0x6) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000880), 0x2) getrusage(0x0, &(0x7f00000008c0)) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000980), 0x2, 0x0) 00:03:01 executing program 1: sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x15, 0x8, 0x70bd26, 0x25dfdbfd, {0x1d, 0x81}, [@INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "8d8dcefd4c2e4c0b731235dd1202b654223595866948ca15b23de894a8b8bd8c4891c78db37eb4ee2e4c2535bc30cd13c7e4b0080c0f24b17109e5cde8a65c228428962d34b19982deff9bf93f44b8f7602e4bcdbe1d"}, @INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "0a55c13615cb42b520c86f72128f36acff3d227830ad111274cd704cd9870e478609b1c3455bb7114345d85e0bcee2da1371bc39728291e0dba71af1104b58963cf8feed5d6c"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24004001}, 0x4004001) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:initrc_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8800) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400), 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x23c, 0x14, 0x1, 0x70bd28, 0x25dfdbfe, {0x2, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x70, 0x1, "306060a1b9a0d841f0ceb4fc6ddd355fa5f71b37f8a18aa46200bacfb760df87bab88fc058380f75083d09df6a13cf48965af7ffcdc977e7227dca2b48ea3ace5f7ffeae7f7e29b88e5aefa1c47357f7877a0d488fcfea1ef6f98cf2f4c6f3c54b77b222698bc461491e977c"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "24878365c3dbc718de8c435688fc042157d71887bfc872a3118ebe9b0ddb9ec6a3f6397eeda55ab49648ad369d2d1f32f45405a057f70bd0528bc292c30d0b9e963806149be427ac3a2ed5728bd5189f7b6a294e54e139db5f0bcd0237c0fa220002663c74ed97ff857adcc7d846e57f167b0d5fc620bd0ce828d83a7746d2c566d9b8e46910e16d9b9a7049de93e3fb0702"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "f30cc9aef290afe58129112bb268789dcef21fe60ee270b76ce9a7447a11b2aa86c3817ba63b3eccfcd599b643dd57e2"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "da77369e19bfd9c340b8b9c22a3548a774f42f375f68e5a2cd7570e13ff27538f95fcb725bd7b76b260638dd65cf32340c5f4a47b11451cce141b242e857d59e67cce82cc0608cdbc07eb5bb4cb598cb5f"}, @INET_DIAG_REQ_BYTECODE={0x93, 0x1, "8c90b6133c2b119bf49e5fac22badf74da692f046077d631f866fcf35dd02ba546d8362727022bd2d321a1386b07beda30435ed99ddaf397d027467ea6e5bfaea8309c93680c2fe2d410aa8421b92bada2468f695002640b5c15ba27f6c287ce537fd86d255d5777188fdc7f6f018ad538380d8cb90310ccf7a4055b40a4b41f39d6a84069fbf8e187dd3297cf6fb1"}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4008004}, 0x2000c000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b7a06cf95e"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0xc011) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000840)) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x11) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, 0x0, 0x100, 0x70bd2a, 0x40, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:watchdog_device_t:s0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b00), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x6c, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, '-**\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ']-\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '([\'[\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000820}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c40), r5) syz_genetlink_get_family_id$net_dm(&(0x7f0000000c80), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4a}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004084}, 0x800) 00:03:01 executing program 2: r0 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x2}) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000000c0)={0xb0002005}) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000d, 0x12, r2, 0x8000000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000340)={0x5, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, r0, r2, r4, r3, r5]}, 0x6) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:default_context_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:framebuf_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x961e5121b3fea334, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008}, 0x4011) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r8, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c800}, 0x1) epoll_wait(r0, &(0x7f0000000740)=[{}], 0x1, 0x3) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000007c0)={'macvlan1\x00'}) 00:03:01 executing program 3: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {r0, r1+10000000}}, &(0x7f0000000080)) clock_gettime(0x6, &(0x7f00000000c0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) sched_rr_get_interval(r2, &(0x7f0000000140)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc0000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1ac, r5, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xd3, 0x2a, [@ibss={0x6, 0x2, 0xf000}, @supported_rates={0x1, 0x2, [{0x60, 0x1}, {0x4}]}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7f, 0xb1, 0x1}}, @fast_bss_trans={0x37, 0xbf, {0x1, 0x3, "0369b67445d9dc6ddbd4dd229cfc34f0", "c4ea037cf0e88f6a3a7ac6558b4d4ae662ae5984f0b7e2ecf37b73ffc491292a", "ae37e4b6b2305b4e583d75985ba2e552a5862df805ca6639b3494f89366defe9", [{0x1, 0x23, "34043302c1825a820f83edde6c2c00e44c8bdc8cdaf1abd79cc1a3b0c16ea10832f0b3"}, {0x1, 0x24, "7803205964f4a30bcf8a8da58150eff8efecd3e00a5a116601de8620eda841453067e030"}, {0x4, 0x20, "2f9b18bd035e47ecfd261d153a6ca8feb3adaa87c8462147ee82ed847ab9eda8"}]}}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0b}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_AKM_SUITES={0x1c, 0x4c, [0xfac0f, 0xfac05, 0xfac11, 0xfac02, 0xfac02, 0xfac0f]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac04}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40080}, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r6, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0xa000) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000005c0)=""/25, &(0x7f0000000600)=0x19) sched_rr_get_interval(r2, &(0x7f0000000640)) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000680)=0x7, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r7, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x64}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x30008000}, 0x4004044) r8 = syz_io_uring_complete(0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r8, 0x54a1) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x7c}}, 0x4000) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, 0xffffffffffffffff, &(0x7f0000000940)={0x3000000a}) 00:03:01 executing program 4: write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @io_capability_neg_reply={{0x434, 0x7}, {@none, 0x80}}}, 0xb) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x1ff, 0x4) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000080)=0xffffff4e) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000000c0)=0x101, &(0x7f0000000100)=0x2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000001c0)={{0x2, 0x3, 0x9, 0x1, 0x88}}) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000200)) r1 = syz_open_dev$hiddev(&(0x7f0000000240), 0x1, 0x42000) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000280)={0xf1, "45f94ba94989a0bdc63112575027110a8f80a56f2d7f68befa5351bcea78d8ab691b2deec169db6c8c935e2309736a7bef631a1cb805c265d59e5f28b206bb2b78c68df56582c376987d46fec5068ad157d70090af82ea95ba542d1eb5716f1f6bee94e370b0ec8706dfd2d8a8eed520f7fc641b2208eddbaaad13ac0c529fde0a4741f8362adc70b2e9692c2b3c0bf7186a3ed676cd66670a4f768bd4652a321b0c4bd23b2bad361418135a8f6e7ba4080a51188f3f3394ceda797044130d661f1a93e17b03b226b9ad2997c9fd992a8525d52e8a3efef2c727bdf45e6c91f39a370366459287740f7ba37aff35a2e4dc"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/185, 0xb9, 0x1, &(0x7f0000000440)=""/244, 0xf4}, &(0x7f0000000580)=0x40) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000005c0)=""/4096, &(0x7f00000015c0)=0x1000) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000001600)) syz_open_dev$evdev(&(0x7f0000001640), 0x400, 0x509042) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000001680)) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000016c0), 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), r2) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000001740)=0x1f) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000001780)={0x1000, "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"}) [ 88.137304] audit: type=1400 audit(1737504181.385:7): avc: denied { execmem } for pid=278 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:03:01 executing program 5: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:crond_exec_t:s0\x00', 0x22) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hald_mac_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:crond_unit_file_t:s0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x24048880) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9e}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_SSID={0xd, 0x34, @random="d6a283e56c1b7ccf5a"}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x93}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x5) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40402000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, r5, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x367}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x2, {0x3, 0x800, 0x3, 0x3f}}}, @NL80211_ATTR_SSID={0x23, 0x34, @random="204048d089a83aef836f7d81cd6c662c198fbb2e7dac0be3558cbdcfa9553a"}]}, 0x80}, 0x1, 0x0, 0x0, 0x8b0}, 0x25673fa64c18bfde) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r1) r7 = syz_open_dev$hiddev(&(0x7f0000000940), 0x10000, 0x10002) ioctl$HIDIOCGVERSION(r7, 0x80044801, &(0x7f0000000980)) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0), 0x2, 0x0) r8 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x6c, r5, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) 00:03:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2010}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000140)=0x7fff, 0x0, 0x4) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r1, 0x400, 0x70bd2d, 0x7, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x50}, 0x1, 0x0, 0x0, 0x84801}, 0x4008001) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_complete(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r5, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000841}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x2, 0x1, 0x2, 0x1, 0x1f}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r6, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ec, 0x4b}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x20008000) r7 = syz_io_uring_complete(r2) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x80, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x53}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}]}, 0x80}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x840) write$selinux_attr(r7, &(0x7f0000000800)='system_u:object_r:ssh_keysign_exec_t:s0\x00', 0x28) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r6, 0x500, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xa, 0x4, "3246573646a6"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ca9082966e"}]}, 0x64}, 0x1, 0x0, 0x0, 0x20080800}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, 0x0, 0x41a, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d6}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x40) 00:03:01 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x8d, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x1, "5d8437", 0x0, 0x3}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000001c0)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x325) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000200)="9db07153b4b0880379666d9a7d9667460d3aa835e94785f00d48b75c576e30269bfb1340aefd504e31602a3e4c849e1f8c4285e6e9e2e045871afac86f5183259e52b3224f23e52fe46406674e4f4045db76", 0x52) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x5f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x41) add_key$fscrypt_provisioning(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffc) add_key$fscrypt_provisioning(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffc) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000580)=0x4, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f00000005c0)=0x8, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x703, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004881}, 0x4000000) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x102004b}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x276}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048000}, 0x20004815) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000840)={0x3, 0x3, 0xfffff800}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000880)="b3bdc422f59164be74b3d326490be57d5b045365642a") setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f00000008c0)=0x1, 0x4) [ 89.619933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.623292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.626741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.633161] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.635842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.636514] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.641192] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.641710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.655893] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.666962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.669199] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.678113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.684490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.689779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.694739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.699393] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.699797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.700485] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.706037] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.713502] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.714301] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.717701] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.730526] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.732966] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.735356] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.742667] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.745454] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.747265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.753080] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.758856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.772688] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.782165] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.793510] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.795743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.798057] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.799662] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.803002] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.805752] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.810353] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.812443] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.815914] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.838099] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.858457] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.860050] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.867322] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.886173] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.903293] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.906671] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.820700] Bluetooth: hci1: command tx timeout [ 91.821111] Bluetooth: hci0: command tx timeout [ 91.821289] Bluetooth: hci2: command tx timeout [ 91.882642] Bluetooth: hci4: command tx timeout [ 91.884074] Bluetooth: hci5: command tx timeout [ 91.946713] Bluetooth: hci6: command tx timeout [ 91.947118] Bluetooth: hci3: command tx timeout [ 92.010624] Bluetooth: hci7: command tx timeout [ 93.867666] Bluetooth: hci2: command tx timeout [ 93.868259] Bluetooth: hci0: command tx timeout [ 93.868355] Bluetooth: hci1: command tx timeout [ 93.930733] Bluetooth: hci5: command tx timeout [ 93.930837] Bluetooth: hci4: command tx timeout [ 93.997632] Bluetooth: hci3: command tx timeout [ 93.997716] Bluetooth: hci6: command tx timeout [ 94.058785] Bluetooth: hci7: command tx timeout [ 95.916723] Bluetooth: hci1: command tx timeout [ 95.917001] Bluetooth: hci0: command tx timeout [ 95.917088] Bluetooth: hci2: command tx timeout [ 95.978791] Bluetooth: hci4: command tx timeout [ 95.978921] Bluetooth: hci5: command tx timeout [ 96.044624] Bluetooth: hci6: command tx timeout [ 96.044721] Bluetooth: hci3: command tx timeout [ 96.106939] Bluetooth: hci7: command tx timeout [ 97.962878] Bluetooth: hci2: command tx timeout [ 97.963466] Bluetooth: hci0: command tx timeout [ 97.964061] Bluetooth: hci1: command tx timeout [ 98.026780] Bluetooth: hci5: command tx timeout [ 98.028987] Bluetooth: hci4: command tx timeout [ 98.090698] Bluetooth: hci3: command tx timeout [ 98.090794] Bluetooth: hci6: command tx timeout [ 98.155181] Bluetooth: hci7: command tx timeout [ 152.318970] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.320681] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.321816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.323481] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.324667] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.325940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.377609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.385330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.393328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.404881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.410892] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.412889] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.525617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.528792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.529858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.537979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.539051] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.539496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.672612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.693043] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.707216] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.745735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.746613] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.747021] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.888493] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.909982] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.934104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.937353] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.942262] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.959165] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.967136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.974097] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.981051] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.985961] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.990240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.992091] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.003652] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.010633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.011066] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.012207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.013039] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.013498] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.019175] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.019770] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.022694] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.023083] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.033683] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.043692] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.348016] Bluetooth: hci0: command tx timeout [ 154.474972] Bluetooth: hci1: command tx timeout [ 154.602871] Bluetooth: hci3: command tx timeout [ 154.794718] Bluetooth: hci2: command tx timeout [ 155.115441] Bluetooth: hci5: command tx timeout [ 155.115996] Bluetooth: hci6: command tx timeout [ 155.116013] Bluetooth: hci4: command tx timeout [ 155.178690] Bluetooth: hci7: command tx timeout [ 156.394757] Bluetooth: hci0: command tx timeout [ 156.522629] Bluetooth: hci1: command tx timeout [ 156.650687] Bluetooth: hci3: command tx timeout [ 156.842634] Bluetooth: hci2: command tx timeout [ 157.162910] Bluetooth: hci4: command tx timeout [ 157.163074] Bluetooth: hci6: command tx timeout [ 157.163238] Bluetooth: hci5: command tx timeout [ 157.226753] Bluetooth: hci7: command tx timeout [ 158.443721] Bluetooth: hci0: command tx timeout [ 158.570975] Bluetooth: hci1: command tx timeout [ 158.698650] Bluetooth: hci3: command tx timeout [ 158.890845] Bluetooth: hci2: command tx timeout [ 159.210765] Bluetooth: hci5: command tx timeout [ 159.210935] Bluetooth: hci6: command tx timeout [ 159.211034] Bluetooth: hci4: command tx timeout [ 159.275157] Bluetooth: hci7: command tx timeout [ 160.490632] Bluetooth: hci0: command tx timeout [ 160.619923] Bluetooth: hci1: command tx timeout [ 160.746586] Bluetooth: hci3: command tx timeout [ 160.938597] Bluetooth: hci2: command tx timeout [ 161.259237] Bluetooth: hci4: command tx timeout [ 161.259345] Bluetooth: hci6: command tx timeout [ 161.259399] Bluetooth: hci5: command tx timeout [ 161.323592] Bluetooth: hci7: command tx timeout [ 214.779972] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.786004] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.786266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.788783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.792318] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.796030] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.804307] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.807218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.812332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.834141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.834934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.836935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.843817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.848921] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.851125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.852441] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.881740] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.892810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.064665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.082771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.086312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.095846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.102911] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.117297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.170226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.188212] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.189971] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.196443] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.199870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.207048] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.212659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.213788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.220383] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.221285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.223700] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.224403] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.257041] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.275880] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.284743] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.285144] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.286777] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.290810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.344834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.362804] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.372639] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.437698] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.516147] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.536983] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.938762] Bluetooth: hci0: command tx timeout [ 216.939243] Bluetooth: hci1: command tx timeout [ 216.939419] Bluetooth: hci2: command tx timeout [ 217.194642] Bluetooth: hci3: command tx timeout [ 217.322605] Bluetooth: hci4: command tx timeout [ 217.578654] Bluetooth: hci5: command tx timeout [ 217.706660] Bluetooth: hci7: command tx timeout [ 217.898627] Bluetooth: hci6: command tx timeout [ 218.987635] Bluetooth: hci2: command tx timeout [ 218.987747] Bluetooth: hci1: command tx timeout [ 218.987841] Bluetooth: hci0: command tx timeout [ 219.243889] Bluetooth: hci3: command tx timeout [ 219.371740] Bluetooth: hci4: command tx timeout [ 219.626716] Bluetooth: hci5: command tx timeout [ 219.757662] Bluetooth: hci7: command tx timeout [ 219.947784] Bluetooth: hci6: command tx timeout [ 221.034719] Bluetooth: hci2: command tx timeout [ 221.034769] Bluetooth: hci0: command tx timeout [ 221.034843] Bluetooth: hci1: command tx timeout [ 221.290995] Bluetooth: hci3: command tx timeout [ 221.418668] Bluetooth: hci4: command tx timeout [ 221.674618] Bluetooth: hci5: command tx timeout [ 221.802652] Bluetooth: hci7: command tx timeout [ 221.994654] Bluetooth: hci6: command tx timeout [ 223.082769] Bluetooth: hci2: command tx timeout [ 223.082824] Bluetooth: hci1: command tx timeout [ 223.083002] Bluetooth: hci0: command tx timeout [ 223.338723] Bluetooth: hci3: command tx timeout [ 223.466640] Bluetooth: hci4: command tx timeout [ 223.723554] Bluetooth: hci5: command tx timeout [ 223.850745] Bluetooth: hci7: command tx timeout [ 224.042815] Bluetooth: hci6: command tx timeout [ 276.991436] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.993858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.996163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.008480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.015084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.019898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.239064] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.243759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.245977] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.252861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.257355] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.259460] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.501972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.504777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.511112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.519100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.522005] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.529204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.652178] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.660206] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.681944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.695895] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.703166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.704942] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.707861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.710226] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.713106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.748997] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.756637] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.771467] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.791248] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.791754] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.803879] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.805807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.845921] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.850710] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.867713] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.871544] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.873170] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.876015] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.881735] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.889134] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.901457] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.924856] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.927262] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.946261] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.952471] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.959694] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.084691] Bluetooth: hci0: command tx timeout [ 279.274963] Bluetooth: hci1: command tx timeout [ 279.595380] Bluetooth: hci2: command tx timeout [ 279.786583] Bluetooth: hci3: command tx timeout [ 279.850890] Bluetooth: hci4: command tx timeout [ 279.914857] Bluetooth: hci5: command tx timeout [ 279.979581] Bluetooth: hci6: command tx timeout [ 280.042644] Bluetooth: hci7: command tx timeout [ 281.131156] Bluetooth: hci0: command tx timeout [ 281.322644] Bluetooth: hci1: command tx timeout [ 281.643603] Bluetooth: hci2: command tx timeout [ 281.835536] Bluetooth: hci3: command tx timeout [ 281.899715] Bluetooth: hci4: command tx timeout [ 281.963588] Bluetooth: hci5: command tx timeout [ 282.027630] Bluetooth: hci6: command tx timeout [ 282.091572] Bluetooth: hci7: command tx timeout [ 283.180195] Bluetooth: hci0: command tx timeout [ 283.370724] Bluetooth: hci1: command tx timeout [ 283.690567] Bluetooth: hci2: command tx timeout [ 283.883572] Bluetooth: hci3: command tx timeout [ 283.947523] Bluetooth: hci4: command tx timeout [ 284.010578] Bluetooth: hci5: command tx timeout [ 284.075578] Bluetooth: hci6: command tx timeout [ 284.141527] Bluetooth: hci7: command tx timeout [ 285.227585] Bluetooth: hci0: command tx timeout [ 285.418682] Bluetooth: hci1: command tx timeout [ 285.739127] Bluetooth: hci2: command tx timeout [ 285.932642] Bluetooth: hci3: command tx timeout [ 285.995600] Bluetooth: hci4: command tx timeout [ 286.059679] Bluetooth: hci5: command tx timeout [ 286.123577] Bluetooth: hci6: command tx timeout [ 286.186691] Bluetooth: hci7: command tx timeout [ 334.602699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.602826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.909583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.909659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.071994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.072077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.429158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.429250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.479698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.479779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.577592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.577694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.745204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.745381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.928883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.928979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.028091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.028188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.094404] audit: type=1400 audit(1737504429.342:8): avc: denied { block_suspend } for pid=13244 comm="syz-executor.2" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 336.150262] audit: type=1400 audit(1737504429.398:9): avc: denied { map } for pid=13244 comm="syz-executor.2" path="pipe:[11031]" dev="pipefs" ino=11031 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 336.150917] audit: type=1400 audit(1737504429.398:10): avc: denied { execute } for pid=13244 comm="syz-executor.2" path="pipe:[11031]" dev="pipefs" ino=11031 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 336.163694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.163781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.388065] [ 336.388514] ====================================================== [ 336.389694] WARNING: possible circular locking dependency detected [ 336.390848] 6.13.0-next-20250121 #1 Not tainted [ 336.391721] ------------------------------------------------------ [ 336.391978] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 336.399731] kworker/u8:0/11 is trying to acquire lock: [ 336.400719] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.402727] [ 336.402727] but task is already holding lock: [ 336.403810] ffff888015880768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 336.405682] [ 336.405682] which lock already depends on the new lock. [ 336.405682] [ 336.407185] [ 336.407185] the existing dependency chain (in reverse order) is: [ 336.408581] [ 336.408581] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 336.409893] __mutex_lock+0x13d/0xb50 [ 336.410816] wiphy_register+0x1b2e/0x25d0 [ 336.411780] ieee80211_register_hw+0x23a4/0x3d60 [ 336.412814] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 336.413925] init_mac80211_hwsim+0x389/0x870 [ 336.414950] do_one_initcall+0xf9/0x640 [ 336.415891] kernel_init_freeable+0x53d/0x7a0 [ 336.416928] kernel_init+0x1e/0x2d0 [ 336.417763] ret_from_fork+0x48/0x80 [ 336.418593] ret_from_fork_asm+0x1a/0x30 [ 336.419553] [ 336.419553] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 336.420746] __lock_acquire+0x29fd/0x4580 [ 336.421697] lock_acquire+0x19b/0x520 [ 336.422576] __mutex_lock+0x13d/0xb50 [ 336.423459] unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.424656] unregister_netdevice_queue+0x224/0x2e0 [ 336.425735] _cfg80211_unregister_wdev+0x57b/0x700 [ 336.426808] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 336.427870] ieee80211_unregister_hw+0x55/0x3a0 [ 336.428887] hwsim_exit_net+0x3a0/0x730 [ 336.429814] ops_exit_list+0xb3/0x180 [ 336.430672] cleanup_net+0x546/0xad0 [ 336.431522] process_one_work+0x8ee/0x1a10 [ 336.432492] worker_thread+0x674/0xe70 [ 336.433415] kthread+0x3ab/0x720 [ 336.434229] ret_from_fork+0x48/0x80 [ 336.435068] ret_from_fork_asm+0x1a/0x30 [ 336.436009] [ 336.436009] other info that might help us debug this: [ 336.436009] [ 336.437471] Possible unsafe locking scenario: [ 336.437471] [ 336.438572] CPU0 CPU1 [ 336.439431] ---- ---- [ 336.440299] lock(&rdev->wiphy.mtx); [ 336.441076] lock(rtnl_mutex); [ 336.442174] lock(&rdev->wiphy.mtx); [ 336.443384] lock(rtnl_mutex); [ 336.444074] [ 336.444074] *** DEADLOCK *** [ 336.444074] [ 336.445173] 4 locks held by kworker/u8:0/11: [ 336.446017] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 336.447963] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 336.449866] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 336.451616] #3: ffff888015880768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 336.453609] [ 336.453609] stack backtrace: [ 336.454452] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250121 #1 [ 336.455938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 336.457438] Workqueue: netns cleanup_net [ 336.458244] Call Trace: [ 336.458742] [ 336.459189] dump_stack_lvl+0xca/0x120 [ 336.459989] print_circular_bug+0x47b/0x750 [ 336.460850] check_noncircular+0x2e9/0x3c0 [ 336.461682] ? __pfx_check_noncircular+0x10/0x10 [ 336.462605] ? hlock_class+0x4e/0x130 [ 336.463331] ? mark_lock+0xac/0xed0 [ 336.464064] ? srso_return_thunk+0x5/0x5f [ 336.464912] ? lockdep_lock+0xba/0x1b0 [ 336.465730] ? __pfx_lockdep_lock+0x10/0x10 [ 336.466621] __lock_acquire+0x29fd/0x4580 [ 336.467459] ? __pfx___lock_acquire+0x10/0x10 [ 336.468338] ? lock_release+0x20f/0x6f0 [ 336.469142] ? __pfx_lock_release+0x10/0x10 [ 336.470016] lock_acquire+0x19b/0x520 [ 336.470782] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.471927] ? __pfx_lock_acquire+0x10/0x10 [ 336.472774] ? srso_return_thunk+0x5/0x5f [ 336.473634] ? lock_release+0x20f/0x6f0 [ 336.474441] ? srso_return_thunk+0x5/0x5f [ 336.475291] ? lock_is_held_type+0x9e/0x120 [ 336.476166] ? srso_return_thunk+0x5/0x5f [ 336.477024] __mutex_lock+0x13d/0xb50 [ 336.477800] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.478912] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.480038] ? srso_return_thunk+0x5/0x5f [ 336.480877] ? synchronize_rcu_expedited+0x38a/0x420 [ 336.481858] ? __pfx___mutex_lock+0x10/0x10 [ 336.482727] ? __pfx_autoremove_wake_function+0x10/0x10 [ 336.483779] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 336.484663] unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.485752] ? __virt_addr_valid+0x2e8/0x5d0 [ 336.486629] ? __pfx_lock_release+0x10/0x10 [ 336.487472] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 336.488612] ? find_held_lock+0x2c/0x110 [ 336.489441] ? srso_return_thunk+0x5/0x5f [ 336.490297] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 336.491276] ? srso_return_thunk+0x5/0x5f [ 336.492109] ? lock_release+0x20f/0x6f0 [ 336.492899] ? __pfx_lock_release+0x10/0x10 [ 336.493742] ? srso_return_thunk+0x5/0x5f [ 336.494580] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 336.495586] ? srso_return_thunk+0x5/0x5f [ 336.496444] unregister_netdevice_queue+0x224/0x2e0 [ 336.497435] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 336.498477] ? up_write+0x195/0x520 [ 336.499234] _cfg80211_unregister_wdev+0x57b/0x700 [ 336.500236] ? srso_return_thunk+0x5/0x5f [ 336.501095] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 336.502063] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 336.503116] ? srso_return_thunk+0x5/0x5f [ 336.503962] ? srso_return_thunk+0x5/0x5f [ 336.504794] ? synchronize_rcu+0x1ff/0x260 [ 336.505629] ieee80211_unregister_hw+0x55/0x3a0 [ 336.506546] hwsim_exit_net+0x3a0/0x730 [ 336.507335] ? __pfx_hwsim_exit_net+0x10/0x10 [ 336.508204] ? srso_return_thunk+0x5/0x5f [ 336.509046] ? netdev_run_todo+0x788/0x1040 [ 336.509898] ? __pfx_hwsim_exit_net+0x10/0x10 [ 336.510774] ops_exit_list+0xb3/0x180 [ 336.511535] cleanup_net+0x546/0xad0 [ 336.512280] ? __pfx_cleanup_net+0x10/0x10 [ 336.513150] process_one_work+0x8ee/0x1a10 [ 336.514026] ? __pfx_lock_acquire+0x10/0x10 [ 336.514856] ? __pfx_process_one_work+0x10/0x10 [ 336.515859] ? srso_return_thunk+0x5/0x5f [ 336.516848] ? move_linked_works+0x172/0x270 [ 336.517868] ? srso_return_thunk+0x5/0x5f [ 336.518785] ? assign_work+0x196/0x240 [ 336.519665] worker_thread+0x674/0xe70 [ 336.520536] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 336.521681] ? __pfx_worker_thread+0x10/0x10 [ 336.522677] kthread+0x3ab/0x720 [ 336.523473] ? __pfx_kthread+0x10/0x10 [ 336.524271] ? srso_return_thunk+0x5/0x5f [ 336.525131] ? finish_task_switch.isra.0+0x206/0x840 [ 336.526151] ? __pfx_kthread+0x10/0x10 [ 336.527001] ret_from_fork+0x48/0x80 [ 336.527771] ? __pfx_kthread+0x10/0x10 [ 336.528568] ret_from_fork_asm+0x1a/0x30 [ 336.529404] [ 338.485564] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.489892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.491980] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.500204] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.503840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.506869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.684611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.688910] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.690404] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.693380] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.696030] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.697529] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.586753] Bluetooth: hci0: command tx timeout [ 340.714775] Bluetooth: hci2: command tx timeout [ 342.641524] Bluetooth: hci0: command tx timeout [ 342.762699] Bluetooth: hci2: command tx timeout [ 344.682704] Bluetooth: hci0: command tx timeout [ 344.810673] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 00:07:09 Registers: info registers vcpu 0 RAX=ffff8880220ebdc0 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff8880307a7b01 RSI=ffff8880307a7b28 RDI=ffff8880307a7b28 RBP=ffff8880307a6d10 RSP=ffff8880307a6c48 R8 =0000000000000001 R9 =ffff8880307a6cf8 R10=000000000003ab7c R11=000000000009d2b2 R12=ffff8880307a6d18 R13=ffff8880307a6d00 R14=ffff8880307a7b28 R15=ffff8880307a6cb8 RIP=ffffffff81349aba RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555641db400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556b7d6a00a0 CR3=000000003328e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00524f52524500400000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283eba5 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=000000000000002d R11=2d2d2d2d2d2d2d2d R12=000000000000002d R13=0000000000000001 R14=ffff888008fea038 R15=ffff8880095deeb8 RIP=ffffffff8283ebfd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556b82298060 CR3=0000000028ef4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff000000000000000000000000000000 XMM01=01000000000000000000000000000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f0036ff07c800007f0036ff07c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000