Warning: Permanently added '[localhost]:17806' (ECDSA) to the list of known hosts. 2025/01/22 06:43:17 fuzzer started 2025/01/22 06:43:18 dialing manager at localhost:44689 syzkaller login: [ 68.160177] cgroup: Unknown subsys name 'net' [ 68.245205] cgroup: Unknown subsys name 'cpuset' [ 68.269249] cgroup: Unknown subsys name 'rlimit' [ 73.114190] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 85.576357] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 06:43:36 syscalls: 2217 2025/01/22 06:43:36 code coverage: enabled 2025/01/22 06:43:36 comparison tracing: enabled 2025/01/22 06:43:36 extra coverage: enabled 2025/01/22 06:43:36 setuid sandbox: enabled 2025/01/22 06:43:36 namespace sandbox: enabled 2025/01/22 06:43:36 Android sandbox: enabled 2025/01/22 06:43:36 fault injection: enabled 2025/01/22 06:43:36 leak checking: enabled 2025/01/22 06:43:36 net packet injection: enabled 2025/01/22 06:43:36 net device setup: enabled 2025/01/22 06:43:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 06:43:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 06:43:36 USB emulation: enabled 2025/01/22 06:43:36 hci packet injection: enabled 2025/01/22 06:43:36 wifi device emulation: enabled 2025/01/22 06:43:36 802.15.4 emulation: enabled 2025/01/22 06:43:36 fetching corpus: 50, signal 8484/9515 (executing program) 2025/01/22 06:43:36 fetching corpus: 59, signal 8959/10907 (executing program) 2025/01/22 06:43:36 fetching corpus: 59, signal 8959/11871 (executing program) 2025/01/22 06:43:36 fetching corpus: 59, signal 8959/12867 (executing program) 2025/01/22 06:43:36 fetching corpus: 59, signal 8959/13874 (executing program) 2025/01/22 06:43:36 fetching corpus: 59, signal 8959/14886 (executing program) 2025/01/22 06:43:36 fetching corpus: 59, signal 8959/15904 (executing program) 2025/01/22 06:43:36 fetching corpus: 59, signal 8959/16899 (executing program) 2025/01/22 06:43:36 fetching corpus: 59, signal 8959/17704 (executing program) 2025/01/22 06:43:36 fetching corpus: 59, signal 8959/17704 (executing program) 2025/01/22 06:43:39 starting 8 fuzzer processes 06:43:39 executing program 0: acct(&(0x7f0000000000)='./file0\x00') ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000440)={{'\x00', 0x3}, {0xb1}, 0x20, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="d9cc802d2c652597a99cd405d67a791533b66741b3913c90ebe4b48b7442c165ea271405e1f311a27ab87bbbc095a15d3f06109101de34a9629011d35977edd494ad90d9fdbf00c66e7be21b2bc32b5f519ca720c3c502989c7bac36bb03ae7deb16153f195f60b3dad1cd507c184553358b786662cc3df2995fff00706a2941386caada430e1b650e6fbe48439db65fb7c6d9bac06a91396351c87cbedc41f6e40fb51cde639e05cef4eb6cda6663eb5c46b7dbefe9fa37c46f79f40fa50f518539235de6610dc7b5f1fc603ebdd052113f8f8275f8f3aa628375311cc926d3e516c7e73846185b37b686b4dc2c89bd982f041a56a6c4c2186ee53cafd4261750297963c07d4b863e52034de7e956ed56146d2bf12957fcb5126be4ffd4c529fe0eb35d377cd5b8738b7d71873d919476596ce7355fb3bd138940a1e0c5506b02e88a4bdca155f57fec67663adef5b94e671c2e7dddc79643b23c550b2543917a41595f87af2fd608e72bca4fada9dfd2422096a1280b52c8271f48d11d7144376fdeac", 0x184, 0x0, &(0x7f0000000280)={0x2, 0xf8, {0x0, 0xc, 0x81, "c9863550a8f310f7b05d0a3aa47b1c62af9c3a94510b692d450a5680b5259f0bfb59ca8fed39ffdfee639eccf5430cec09ce833eb2a4be641fa79e5ded1d2e37e1163f8621ed902afe659493c9165186ef761ee9419af4d64a97d138ea2bb10d5c06c4632b05fca398914331b734e999893af9cbe0b84ada2b7d543deae4080758", 0x6a, "f88556e93b88ba70bfec524b10a762a1d4552b3a0b38fd3334f8488ed120e8c80af2228c3427ab583cea578a12aa8c448014fe91a70667f0227b0411aad2c76802d834f5c720d85ad7fc348cced1a54fbdcf85cf954993a375703218b713d0843b7748e1830cf1c33f1a"}, 0xbc, "729f0c11129306e6480189b2ca860a44e2e0dd727ab04b4700e08a9db17c066d54db40740ae45684e9f5705ed1a8205d378d73c799e6edb38af10b0cee1c30d2d6c6fe08487a044f3ff84ec451a6c7105c682214d7733d1c24c7ece491f64c1d2ea74c4080bf8e976b6e0c81faa238d59aca8c2d7da00774ae96b4290b9b3bf42ecc3948bb483bbb1882fb3048ffab205573ef9de527266f25ca14788b01595dfc17fd64bc7ebf794721e9c73874de4eab4e6532f4e594babd8130f1"}, 0x1c0}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x280000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) mknodat$null(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x2000, 0x103) unlink(&(0x7f0000000580)='./file1\x00') unlink(&(0x7f00000005c0)='./file1\x00') sendto$unix(r0, &(0x7f0000000600)="2a839efdb7e796ae3986fc3fba89c67cb3a6372ef9dd9ea689ed73ce7d613d6fdd0f4be5c3a52edd7d99d593dc81df9231696dd38eb9362d584c72b267d237f5145a5db243b3b7591328461312a03ae2f6035b9c2674a7e71abd24e5e12059161acee6582d8694590ee31bc98dd0065aed77cee6b5dc9de974cf8547c979472675be9a853704217e890935b9b9ec34df303b47ef8897c835f5471aa97c20c726", 0xa0, 0x48810, &(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000740)) mount(&(0x7f0000000780)=@nullb, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='ext4\x00', 0x2000, &(0x7f0000000840)='#-(&*-#6(]\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0x5}}, './file1\x00'}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x6c, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40448d0}, 0x4000000) r4 = dup(r0) accept4(r4, &(0x7f0000000a40)=@ax25={{}, [@remote, @netrom, @null, @rose, @remote, @bcast, @bcast]}, &(0x7f0000000ac0)=0x80, 0x0) setxattr$security_ima(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), &(0x7f0000000b80)=@sha1={0x1, "5c042f7d36f89e2708b3ae5717cec91c2a88e842"}, 0x15, 0x2) r5 = openat$incfs(r1, &(0x7f0000000bc0)='.pending_reads\x00', 0x408002, 0x149) renameat2(r5, &(0x7f0000000c00)='./file1\x00', r1, &(0x7f0000000c40)='./file1\x00', 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000cc0)=@abs, &(0x7f0000000d40)=0x6e) 06:43:39 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000040)={'team0\x00', @ifru_settings={0x0, 0x0, @fr_pvc=&(0x7f0000000000)={0x1}}}) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2c93be424aee44a6cbd9e8aba18cf228c855fe718f3116c3b04f37b5db1e1ffe4b1562e5b6f7895ff09906b06284c4040e091bb8df4afaf228821b57068f250e372e67a72933f89dd326c87dbc4b2970c045f8b7bf83d8141281ddf0f6e55f5d208f296b6389278e31bbb642a921d9580b4edaf350c584311b988c9262400d2562696f788d2685c721141ca939b6639b8227abb7b00b900a2ea722836a5de1abeccea0d7b5d110e67691ca17a06fbc13e551db1f411614edc5e9e73c162b8165c0e0798eecac682979", 0xc9}], 0x1, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_retopts={{0x50, 0x0, 0x7, {[@cipso={0x86, 0x40, 0xffffffffffffffff, [{0x2, 0xe, "bbbdfd2d8ee1d3a25c37ff86"}, {0x2, 0x5, "e233be"}, {0x6, 0x5, "43f930"}, {0x7, 0x9, "35d7d67a91e65c"}, {0x0, 0x2}, {0x1, 0xa, "574da787107c09f0"}, {0x5, 0x2}, {0x0, 0x9, "ea1025e60fca32"}, {0x0, 0x2}]}]}}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@generic={0x7, 0x10, "95eaf2c526727d8c6c7534b5705b"}, @timestamp_prespec={0x44, 0x34, 0x9a, 0x3, 0x9, [{@local, 0x5}, {@loopback, 0x6}, {@local, 0x7ff}, {@loopback, 0x6}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x7}]}, @cipso={0x86, 0x48, 0x1, [{0x2, 0xa, "fd80ae2f92302b94"}, {0x6, 0x12, "de7ddbfbf2f1f51f4ed6d3b57002d652"}, {0x6, 0x11, "41f2ccb97a95831ce0b53f99a7c02e"}, {0x0, 0x3, "c1"}, {0x5, 0x2}, {0x2, 0x10, "930cbf4874f764f90d5d041079ff"}]}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x170}}], 0x1, 0x8000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400c001) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x108, r1, 0x230, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff6534}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008001}, 0x40040) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000700)={0x6, 'ipvlan1\x00', {0xa941}, 0x20}) r2 = syz_open_dev$vcsu(&(0x7f0000000780), 0x62, 0x48201) syz_genetlink_get_family_id$SEG6(&(0x7f0000000740), r2) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000007c0)) r3 = accept4$inet6(r2, &(0x7f0000000800)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000840)=0x1c, 0x80000) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000008c0)=@req={0x28, &(0x7f0000000880)={'ip6gre0\x00', @ifru_flags}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000900)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xcc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc4c7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfa0c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x40015) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000b00)={{r4}, 0x7, 0x2, 0x6}) accept(r0, &(0x7f0000000b40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000bc0)=0x80) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000c00)={{{@in6=@local, @in=@empty, 0x4e21, 0x1f, 0x4e24, 0x14af, 0xa, 0xa0, 0x20, 0x2c}, {0x40, 0x10000, 0x1ed, 0x3, 0xb3f8, 0x7f, 0x7, 0x9}, {0x80000000, 0x40, 0xc2, 0x7fffffff}, 0x800, 0x6e6bb7, 0x2, 0x1, 0x3, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d2, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x1, 0x1, 0x1, 0x400, 0xfffffff9, 0x5}}, 0xe8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r5) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, r6, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000e80)={'team_slave_1\x00', {0x2, 0x0, @loopback}}) 06:43:39 executing program 3: prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) 06:43:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x16c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x600}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x128, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x8001}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x25c26776de935741}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x45d831904a0017f2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x60}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048054) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x14004114) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x3f80c4f709cf6e82, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000844}, 0x4000001) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x24004800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r6) sendmsg$IEEE802154_LLSEC_DEL_KEY(r8, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r9, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x11426da8636d2c9e}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x50) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x90, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xfa, 0x3}, {0x2, 0x2}, {0xde, 0x5}, {0x1, 0x3}, {0x40}, {0x6, 0x3}, {0x81, 0x7}, {0x4, 0x1}], "838cd902c8777596"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x7, 0x3}, {0x65, 0x3}, {0x0, 0x6}, {0x9, 0x6}, {0x3}, {0x20, 0x3}, {0x0, 0x7}, {0x5, 0x2}, {0x9, 0x4}, {0x93, 0x1}, {0x3f, 0x3}, {0x0, 0x2}, {0x1, 0x1}, {0x3}], "55f546db76361686"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x5}, {0xfe, 0x4}, {0x67, 0x7}, {0xbd, 0x3}, {0x7c, 0x2}, {0x80, 0x6}, {0x4, 0x4}, {0x3, 0x1}, {0x9, 0x7}, {}, {0x9c, 0x2}, {0x7, 0x7}, {0x3, 0x5}, {0x1, 0x5}, {0x6}, {0x9, 0x3}, {0x6, 0x3}, {0x80, 0x1}, {0x1, 0x2}, {0x97, 0x5}, {0x81, 0x5}], "3ba6b0baa17890c4"}}]}, 0x90}, 0x1, 0x0, 0x0, 0x5}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r9, 0x28, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xf98}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x10000040) 06:43:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4000014) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4c}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000095}, 0x81) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x4080000) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'NLBL_UNLBL\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x80, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x60, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e83}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b26}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f2a00a3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a42efc0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be4da5e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bea}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x393e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1bc6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24d89ea0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ee77fd7}]}]}]}, 0x80}}, 0x4008c10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc9}, 0x11) getsockname$packet(r6, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000007c0)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000840)={'wpan4\x00'}) [ 89.725809] audit: type=1400 audit(1737528219.868:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:43:39 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = getuid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100806, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_gt={'euid>', 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x62, 0x34, 0x65, 0x64, 0xf, 0x34, 0x63], 0x2d, [0x32, 0x66, 0x39, 0x61], 0x2d, [0x37, 0x36, 0x36, 0x37], 0x2d, [0x38, 0x37, 0x35, 0x65], 0x2d, [0x31, 0x37, 0x61, 0x33, 0x31, 0x61, 0x33, 0x63]}}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xc7'}}]}}) close(r0) fcntl$getflags(r0, 0x3) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f00000005c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in=@loopback, @in=@local, 0x4e21, 0x4, 0x4e23, 0xffff, 0xa, 0x20, 0x40, 0xc, r3, r2}, {0x1, 0x77, 0x6, 0x401, 0x400, 0x80000001, 0x7fffffff, 0x96a}, {0x1200000000000, 0xfff, 0x0, 0x4}, 0x400, 0x6e6bb2, 0x2, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x1, 0x80, 0x1ff, 0xa79}}, 0xe8) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = syz_open_pts(0xffffffffffffffff, 0x10080) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f0000000940)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000980)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, {0x1, @random="c5fb03be8f9c"}, 0x10, {0x2, 0x4e23, @local}, 'sit0\x00'}) r5 = syz_open_dev$vcsn(&(0x7f0000000a00), 0x3, 0x100) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000a40)={0x0, r5, 0x4, 0xff, 0x148c, 0x80000001}) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000ac0)={0xd43b, 0x10, [0x3ca, 0x343e65ca, 0x80, 0xffff], &(0x7f0000000a80)=[0x0, 0x0]}) r6 = openat$incfs(r5, &(0x7f0000000c80)='.pending_reads\x00', 0x80000, 0x14) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000cc0)=""/18) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000d40)={0x6, 0x10, '\x00', 0x1, &(0x7f0000000d00)=[0x0, 0x0]}) unlinkat(0xffffffffffffffff, &(0x7f0000000dc0)='\x00', 0x0) 06:43:39 executing program 6: sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0xd, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x81}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xcc92acf2d0739428, 0xffff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffc1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c890}, 0x60048000) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x40, 0x4, 0x40, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x781f, 0x2, 0x8}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @initdev, @broadcast}, &(0x7f0000000500)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000780)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1ac, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000094}, 0x40090) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x4c}}, 0x20008801) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048800}, 0x40000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000c80)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4e20, @multicast2}, 0x81, 0x0, 0x0, 0x0, 0x1e13, &(0x7f0000000c40)='team_slave_0\x00', 0x4, 0x93}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffe}}, './file0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x200480c0}, 0x95) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0xa0, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xa0}, 0x1, 0x0, 0x0, 0x891}, 0x10000) sendto$inet(r5, &(0x7f0000001040)="aa71cc22ab47d50ae02d0101c9e017504edaf55aa0cd8238c2924c347ef3665a2eee5cb3a7148480282305e4ddcc027bd6e92a800158f46ca7e7d6bbe21ba97468027a77a9dff0a318053bbcff22e7a3f7206fe0aec0d57696183fd5fdb1c1f6496341da99af6fc1603529038d90fb647f654815310cda527d773f17f844a4dc4bb35985ef6b1ba2df1893a2fb1eeb6b8151053d7aea1fbcf990faf646cceb5d5d6b5e", 0xa3, 0x40000, &(0x7f0000001100)={0x2, 0x4e21, @empty}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) getpeername$inet6(r8, &(0x7f0000001180)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000011c0)=0x1c) 06:43:40 executing program 7: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1f8, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40}, 0x488c0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r1, 0x102, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x46}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000841) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r1, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffe, 0x35}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0xc000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0xc30, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8052}, 0x50) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r3, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f00000007c0)={0x2, 0x4a7e}) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) ppoll(&(0x7f0000000800)=[{r2, 0x40}, {r2, 0x1000}, {0xffffffffffffffff, 0x8100}, {r2, 0x2008}, {r2, 0x40}], 0x5, &(0x7f0000000880)={r4, r5+60000000}, &(0x7f00000008c0)={[0x27]}, 0x8) r6 = openat$incfs(r2, &(0x7f0000000900)='.pending_reads\x00', 0x303400, 0x0) ioctl$RTC_UIE_OFF(r6, 0x7004) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x13, 0x1, '.pending_reads\x00'}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'pci\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x801) r8 = dup(r6) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa0, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x69}}}}, [@NL80211_ATTR_BSS_SELECT={0x28, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0x8d}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0x2c}}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac02, 0xfac0a, 0xfac0a]}], @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x3f}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1e, {0x605, 0x4, 0x636, 0x2}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400, {0x3, 0x7, 0x1000, 0x5}}}, @NL80211_ATTR_MAC={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x640000a1) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000854}, 0x4081) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x20, r1, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x20}}}}, [""]}, 0x20}}, 0x44005) [ 91.207260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.213209] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.215599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.222065] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.226152] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.228511] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.278658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.283061] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.285080] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.287924] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.294923] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.298476] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.304130] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.306058] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.308564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.318266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.324233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.327633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.350215] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.359277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.381559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.395985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.405354] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.406399] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.415273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.421192] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.422497] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.436257] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.438694] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.440699] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.447553] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.451375] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.453293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.457483] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.460433] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.460908] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.491193] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.493205] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.502477] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.521558] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.522163] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.525197] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.525952] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.529298] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.539099] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.547136] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.560938] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.561958] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.297773] Bluetooth: hci0: command tx timeout [ 93.360896] Bluetooth: hci1: command tx timeout [ 93.424866] Bluetooth: hci2: command tx timeout [ 93.488980] Bluetooth: hci3: command tx timeout [ 93.552911] Bluetooth: hci5: command tx timeout [ 93.553221] Bluetooth: hci4: command tx timeout [ 93.616856] Bluetooth: hci7: command tx timeout [ 93.617029] Bluetooth: hci6: command tx timeout [ 95.344891] Bluetooth: hci0: command tx timeout [ 95.409826] Bluetooth: hci1: command tx timeout [ 95.474412] Bluetooth: hci2: command tx timeout [ 95.538581] Bluetooth: hci3: command tx timeout [ 95.602218] Bluetooth: hci4: command tx timeout [ 95.603341] Bluetooth: hci5: command tx timeout [ 95.664882] Bluetooth: hci6: command tx timeout [ 95.664973] Bluetooth: hci7: command tx timeout [ 97.393940] Bluetooth: hci0: command tx timeout [ 97.457828] Bluetooth: hci1: command tx timeout [ 97.521839] Bluetooth: hci2: command tx timeout [ 97.584832] Bluetooth: hci3: command tx timeout [ 97.651789] Bluetooth: hci5: command tx timeout [ 97.651874] Bluetooth: hci4: command tx timeout [ 97.712857] Bluetooth: hci7: command tx timeout [ 97.712940] Bluetooth: hci6: command tx timeout [ 99.441880] Bluetooth: hci0: command tx timeout [ 99.506022] Bluetooth: hci1: command tx timeout [ 99.569811] Bluetooth: hci2: command tx timeout [ 99.633834] Bluetooth: hci3: command tx timeout [ 99.697826] Bluetooth: hci4: command tx timeout [ 99.698515] Bluetooth: hci5: command tx timeout [ 99.761843] Bluetooth: hci6: command tx timeout [ 99.762509] Bluetooth: hci7: command tx timeout [ 153.665417] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.670172] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.671501] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.679209] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.685511] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.687122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.797065] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.797630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.799293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.801377] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.802120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.804967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.806863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.809166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.809657] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.812637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.814034] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.815986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.864555] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.868572] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.870915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.887478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.889191] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.890375] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.923076] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.926571] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.927544] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.940096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.951490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.954175] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.006389] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.014337] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.018244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.020825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.027917] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.031924] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.033437] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.038347] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.050522] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.085294] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.087919] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.092126] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.093503] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.100850] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.101034] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.105233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.109018] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.109354] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.761954] Bluetooth: hci0: command tx timeout [ 155.889006] Bluetooth: hci1: command tx timeout [ 155.890641] Bluetooth: hci2: command tx timeout [ 155.952807] Bluetooth: hci3: command tx timeout [ 156.018479] Bluetooth: hci4: command tx timeout [ 156.144910] Bluetooth: hci6: command tx timeout [ 156.146105] Bluetooth: hci7: command tx timeout [ 156.209894] Bluetooth: hci5: command tx timeout [ 157.808826] Bluetooth: hci0: command tx timeout [ 157.936823] Bluetooth: hci2: command tx timeout [ 157.936907] Bluetooth: hci1: command tx timeout [ 158.001874] Bluetooth: hci3: command tx timeout [ 158.064805] Bluetooth: hci4: command tx timeout [ 158.192970] Bluetooth: hci7: command tx timeout [ 158.193089] Bluetooth: hci6: command tx timeout [ 158.257788] Bluetooth: hci5: command tx timeout [ 159.857837] Bluetooth: hci0: command tx timeout [ 159.986010] Bluetooth: hci1: command tx timeout [ 159.987031] Bluetooth: hci2: command tx timeout [ 160.049802] Bluetooth: hci3: command tx timeout [ 160.113791] Bluetooth: hci4: command tx timeout [ 160.240995] Bluetooth: hci7: command tx timeout [ 160.242380] Bluetooth: hci6: command tx timeout [ 160.305254] Bluetooth: hci5: command tx timeout [ 161.904923] Bluetooth: hci0: command tx timeout [ 162.032848] Bluetooth: hci2: command tx timeout [ 162.032947] Bluetooth: hci1: command tx timeout [ 162.100878] Bluetooth: hci3: command tx timeout [ 162.160865] Bluetooth: hci4: command tx timeout [ 162.289836] Bluetooth: hci7: command tx timeout [ 162.289936] Bluetooth: hci6: command tx timeout [ 162.354746] Bluetooth: hci5: command tx timeout [ 213.723662] [ 213.723894] ====================================================== [ 213.724491] WARNING: possible circular locking dependency detected [ 213.725085] 6.13.0-next-20250121 #1 Not tainted [ 213.725534] ------------------------------------------------------ [ 213.726878] kworker/u8:1/67 is trying to acquire lock: [ 213.728043] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 213.730126] [ 213.730126] but task is already holding lock: [ 213.731320] ffff88803add0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 213.733728] [ 213.733728] which lock already depends on the new lock. [ 213.733728] [ 213.735288] [ 213.735288] the existing dependency chain (in reverse order) is: [ 213.736650] [ 213.736650] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 213.737901] __mutex_lock+0x13d/0xb50 [ 213.738929] wiphy_register+0x1b2e/0x25d0 [ 213.739608] ieee80211_register_hw+0x23a4/0x3d60 [ 213.740338] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 213.741099] init_mac80211_hwsim+0x389/0x870 [ 213.741793] do_one_initcall+0xf9/0x640 [ 213.742428] kernel_init_freeable+0x53d/0x7a0 [ 213.743112] kernel_init+0x1e/0x2d0 [ 213.743685] ret_from_fork+0x48/0x80 [ 213.744261] ret_from_fork_asm+0x1a/0x30 [ 213.744911] [ 213.744911] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 213.745730] __lock_acquire+0x29fd/0x4580 [ 213.746368] lock_acquire+0x19b/0x520 [ 213.746971] __mutex_lock+0x13d/0xb50 [ 213.747595] unregister_netdevice_many_notify+0x1612/0x1c80 [ 213.748414] unregister_netdevice_queue+0x224/0x2e0 [ 213.749149] _cfg80211_unregister_wdev+0x57b/0x700 [ 213.749900] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 213.750645] ieee80211_unregister_hw+0x55/0x3a0 [ 213.751360] hwsim_exit_net+0x3a0/0x730 [ 213.751989] ops_exit_list+0xb3/0x180 [ 213.752590] cleanup_net+0x546/0xad0 [ 213.753185] process_one_work+0x8ee/0x1a10 [ 213.753867] worker_thread+0x674/0xe70 [ 213.754511] kthread+0x3ab/0x720 [ 213.755078] ret_from_fork+0x48/0x80 [ 213.755666] ret_from_fork_asm+0x1a/0x30 [ 213.756328] [ 213.756328] other info that might help us debug this: [ 213.756328] [ 213.757329] Possible unsafe locking scenario: [ 213.757329] [ 213.758070] CPU0 CPU1 [ 213.758657] ---- ---- [ 213.759255] lock(&rdev->wiphy.mtx); [ 213.759887] lock(rtnl_mutex); [ 213.760731] lock(&rdev->wiphy.mtx); [ 213.761560] lock(rtnl_mutex); [ 213.762030] [ 213.762030] *** DEADLOCK *** [ 213.762030] [ 213.762782] 4 locks held by kworker/u8:1/67: [ 213.763379] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 213.764603] #1: ffff88800e4c7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 213.765563] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 213.766425] #3: ffff88803add0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 213.767394] [ 213.767394] stack backtrace: [ 213.767812] CPU: 1 UID: 0 PID: 67 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250121 #1 [ 213.768549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 213.769300] Workqueue: netns cleanup_net [ 213.769717] Call Trace: [ 213.769965] [ 213.770186] dump_stack_lvl+0xca/0x120 [ 213.770591] print_circular_bug+0x47b/0x750 [ 213.771003] check_noncircular+0x2e9/0x3c0 [ 213.771410] ? srso_return_thunk+0x5/0x5f [ 213.771835] ? __pfx_check_noncircular+0x10/0x10 [ 213.772300] ? hlock_class+0x4e/0x130 [ 213.772672] ? mark_lock+0xac/0xed0 [ 213.773040] ? srso_return_thunk+0x5/0x5f [ 213.773471] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 213.773926] ? lockdep_lock+0xba/0x1b0 [ 213.774341] ? __pfx_lockdep_lock+0x10/0x10 [ 213.774788] __lock_acquire+0x29fd/0x4580 [ 213.775217] ? __pfx___lock_acquire+0x10/0x10 [ 213.775651] ? lock_release+0x20f/0x6f0 [ 213.776033] ? __pfx_lock_release+0x10/0x10 [ 213.776444] lock_acquire+0x19b/0x520 [ 213.776813] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 213.777352] ? __pfx_lock_acquire+0x10/0x10 [ 213.777761] ? srso_return_thunk+0x5/0x5f [ 213.778178] ? lock_release+0x20f/0x6f0 [ 213.778558] ? srso_return_thunk+0x5/0x5f [ 213.778974] ? lock_is_held_type+0x9e/0x120 [ 213.779424] ? srso_return_thunk+0x5/0x5f [ 213.779860] __mutex_lock+0x13d/0xb50 [ 213.780260] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 213.780836] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 213.781408] ? srso_return_thunk+0x5/0x5f [ 213.781842] ? synchronize_rcu_expedited+0x38a/0x420 [ 213.782348] ? __pfx___mutex_lock+0x10/0x10 [ 213.782793] ? __pfx_autoremove_wake_function+0x10/0x10 [ 213.783339] ? srso_return_thunk+0x5/0x5f [ 213.783772] ? kasan_quarantine_put+0x84/0x1e0 [ 213.784260] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 213.784691] ? srso_return_thunk+0x5/0x5f [ 213.785133] unregister_netdevice_many_notify+0x1612/0x1c80 [ 213.785693] ? __virt_addr_valid+0x2e8/0x5d0 [ 213.786144] ? __pfx_lock_release+0x10/0x10 [ 213.786577] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 213.787165] ? find_held_lock+0x2c/0x110 [ 213.787593] ? srso_return_thunk+0x5/0x5f [ 213.788039] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 213.788536] ? srso_return_thunk+0x5/0x5f [ 213.788973] ? lock_release+0x20f/0x6f0 [ 213.789379] ? __pfx_lock_release+0x10/0x10 [ 213.789812] ? srso_return_thunk+0x5/0x5f [ 213.790240] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 213.790767] ? srso_return_thunk+0x5/0x5f [ 213.791210] unregister_netdevice_queue+0x224/0x2e0 [ 213.791698] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 213.792239] ? up_write+0x195/0x520 [ 213.792632] _cfg80211_unregister_wdev+0x57b/0x700 [ 213.793126] ? srso_return_thunk+0x5/0x5f [ 213.793582] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 213.794076] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 213.794616] ? srso_return_thunk+0x5/0x5f [ 213.795047] ? srso_return_thunk+0x5/0x5f [ 213.795482] ? synchronize_rcu+0x1ff/0x260 [ 213.795908] ieee80211_unregister_hw+0x55/0x3a0 [ 213.796383] hwsim_exit_net+0x3a0/0x730 [ 213.796782] ? __pfx_hwsim_exit_net+0x10/0x10 [ 213.797224] ? srso_return_thunk+0x5/0x5f [ 213.797655] ? netdev_run_todo+0x788/0x1040 [ 213.798090] ? srso_return_thunk+0x5/0x5f [ 213.798527] ? __pfx_hwsim_exit_net+0x10/0x10 [ 213.798976] ops_exit_list+0xb3/0x180 [ 213.799367] cleanup_net+0x546/0xad0 [ 213.799755] ? __pfx_cleanup_net+0x10/0x10 [ 213.800193] process_one_work+0x8ee/0x1a10 [ 213.800640] ? __pfx_lock_acquire+0x10/0x10 [ 213.801069] ? __pfx_process_one_work+0x10/0x10 [ 213.801525] ? srso_return_thunk+0x5/0x5f [ 213.801933] ? move_linked_works+0x172/0x270 [ 213.802352] ? srso_return_thunk+0x5/0x5f [ 213.802763] ? assign_work+0x196/0x240 [ 213.803153] worker_thread+0x674/0xe70 [ 213.803549] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 213.804041] ? srso_return_thunk+0x5/0x5f [ 213.804449] ? __pfx_worker_thread+0x10/0x10 [ 213.804888] kthread+0x3ab/0x720 [ 213.805230] ? __pfx_kthread+0x10/0x10 [ 213.805612] ? srso_return_thunk+0x5/0x5f [ 213.806019] ? finish_task_switch.isra.0+0x206/0x840 [ 213.806536] ? __pfx_kthread+0x10/0x10 [ 213.806939] ret_from_fork+0x48/0x80 [ 213.807319] ? __pfx_kthread+0x10/0x10 [ 213.807729] ret_from_fork_asm+0x1a/0x30 [ 213.808159] [ 215.498492] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.505115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.509451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.510908] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.514641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.516996] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.522144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.522485] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.526838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.538319] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.555538] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.557869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.574148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.580050] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.583690] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.598260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.601322] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.603629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.699762] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.707586] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.722895] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.723317] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.743587] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.747199] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.749485] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.754504] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.757463] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.759456] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.761542] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.775248] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.777428] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.779477] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.779849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.784944] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.785288] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.789127] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.789177] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.792904] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.814011] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.830377] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.834651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.834689] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.836194] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.837422] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.838554] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.851893] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.879085] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.909237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.585783] Bluetooth: hci0: command tx timeout [ 217.585855] Bluetooth: hci1: command tx timeout [ 217.648775] Bluetooth: hci2: command tx timeout [ 217.968782] Bluetooth: hci4: command tx timeout [ 217.969347] Bluetooth: hci7: command tx timeout [ 217.969420] Bluetooth: hci5: command tx timeout [ 217.969469] Bluetooth: hci3: command tx timeout [ 218.032769] Bluetooth: hci6: command tx timeout [ 219.633723] Bluetooth: hci1: command tx timeout [ 219.634238] Bluetooth: hci0: command tx timeout [ 219.696840] Bluetooth: hci2: command tx timeout [ 220.016932] Bluetooth: hci4: command tx timeout [ 220.017539] Bluetooth: hci3: command tx timeout [ 220.018213] Bluetooth: hci5: command tx timeout [ 220.018262] Bluetooth: hci7: command tx timeout [ 220.081104] Bluetooth: hci6: command tx timeout [ 221.680757] Bluetooth: hci1: command tx timeout [ 221.681323] Bluetooth: hci0: command tx timeout [ 221.745016] Bluetooth: hci2: command tx timeout [ 222.066771] Bluetooth: hci4: command tx timeout [ 222.067585] Bluetooth: hci7: command tx timeout [ 222.067650] Bluetooth: hci5: command tx timeout [ 222.067736] Bluetooth: hci3: command tx timeout [ 222.128750] Bluetooth: hci6: command tx timeout [ 223.728828] Bluetooth: hci1: command tx timeout [ 223.729439] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 06:45:44 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806f10af60 RCX=ffffffff81429a4a RDX=1ffff11001ea4880 RSI=0000000000000008 RDI=ffff88800f524400 RBP=0000000000000000 RSP=ffff88800bbdfdc8 R8 =0000000000000000 R9 =ffffed1001ea4880 R10=ffff88800f524407 R11=ffff88800b9457f8 R12=ffff88806f10aff9 R13=ffffffff8864e730 R14=ffff88800b945340 R15=0000000000000086 RIP=ffffffff81ab92c0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ff24640de8 CR3=00000000160f2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffff0000ff000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055ff571a2e20000055ff57118350 XMM06=000055ff571182600000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283eb10 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88800e4c6b40 R8 =0000000000000001 R9 =ffffed1001c98d57 R10=0000000000000001 R11=5f20202020202020 R12=ffffffff886990b0 R13=ffff88800e4c6e38 R14=ffffffff88699320 R15=0000000000000000 RIP=ffffffff8283eb65 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ff5719fe00 CR3=0000000015818000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000000000000000000000000000000 XMM05=000055ff57118240000055ff571480f0 XMM06=000055ff571900c00000000200000003 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000