Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:35790' (ECDSA) to the list of known hosts. 2025/01/22 22:39:28 fuzzer started 2025/01/22 22:39:29 dialing manager at localhost:38529 syzkaller login: [ 69.222441] cgroup: Unknown subsys name 'net' [ 69.359382] cgroup: Unknown subsys name 'cpuset' [ 69.391146] cgroup: Unknown subsys name 'rlimit' [ 74.270369] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 85.310163] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 22:39:46 syscalls: 2217 2025/01/22 22:39:46 code coverage: enabled 2025/01/22 22:39:46 comparison tracing: enabled 2025/01/22 22:39:46 extra coverage: enabled 2025/01/22 22:39:46 setuid sandbox: enabled 2025/01/22 22:39:46 namespace sandbox: enabled 2025/01/22 22:39:46 Android sandbox: enabled 2025/01/22 22:39:46 fault injection: enabled 2025/01/22 22:39:46 leak checking: enabled 2025/01/22 22:39:46 net packet injection: enabled 2025/01/22 22:39:46 net device setup: enabled 2025/01/22 22:39:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 22:39:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 22:39:46 USB emulation: enabled 2025/01/22 22:39:46 hci packet injection: enabled 2025/01/22 22:39:46 wifi device emulation: enabled 2025/01/22 22:39:46 802.15.4 emulation: enabled 2025/01/22 22:39:46 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/22 22:39:46 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/22 22:39:46 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/22 22:39:46 fetching corpus: 0, signal 0/6463 (executing program) 2025/01/22 22:39:46 fetching corpus: 0, signal 0/6463 (executing program) 2025/01/22 22:39:48 starting 8 fuzzer processes 22:39:48 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/243) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000026c0)={{0x1, 0x1, 0x18, r0, {0x8c48, 0x81}}, './file0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002700)={{0x0, 0xffffffff, 0x9, 0x4, 0x31d, 0xe22, 0x2, 0x2, 0x5, 0x0, 0xff, 0x22, 0x6, 0x0, 0x7fff}}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000003700)={r2, 0xffffffffffff0000}) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000004700)=0x6b06, 0x2) r3 = openat2(0xffffffffffffffff, &(0x7f0000004740)='./file0\x00', &(0x7f0000004780)={0x80000, 0x20, 0x14}, 0x18) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000047c0)={{0x2, 0x4e21, @loopback}, {0x6, @random='=)(G2r'}, 0x14, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 'veth1_to_batadv\x00'}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000004840), 0x480002, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000004880)={0x3b, 0x4, 0x0, 0x5, 0x0, [@private1, @private2={0xfc, 0x2, '\x00', 0x1}]}, 0x28) statx(0xffffffffffffff9c, &(0x7f0000004a40)='./file0\x00', 0x4000, 0x200, &(0x7f0000004a80)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000007b00)=[{{&(0x7f0000004b80), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000004c00)=""/75, 0x4b}, {&(0x7f0000004c80)=""/157, 0x9d}, {&(0x7f0000004d40)=""/185, 0xb9}, {&(0x7f0000004e00)}, {&(0x7f0000004e40)=""/191, 0xbf}, {&(0x7f0000004f00)=""/6, 0x6}, {&(0x7f0000004f40)=""/194, 0xc2}, {&(0x7f0000005040)=""/84, 0x54}], 0x8, &(0x7f0000005140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}, {{0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000005280)=""/49, 0x31}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/45, 0x2d}], 0x3, &(0x7f0000006340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f00000063c0)=""/229, 0xe5}, {&(0x7f00000064c0)=""/106, 0x6a}, {&(0x7f0000006540)=""/178, 0xb2}, {&(0x7f0000006600)=""/149, 0x95}, {&(0x7f00000066c0)=""/111, 0x6f}, {&(0x7f0000006740)=""/160, 0xa0}, {&(0x7f0000006800)=""/96, 0x60}, {&(0x7f0000006880)=""/244, 0xf4}], 0x8, &(0x7f0000006a00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000006a40), 0x6e, &(0x7f0000007ac0)=[{&(0x7f0000006ac0)=""/4096, 0x1000}], 0x1}}], 0x4, 0x2001, &(0x7f0000007c00)) sendmmsg$unix(r3, &(0x7f0000007c80)=[{{&(0x7f00000048c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004a00)=[{&(0x7f0000004940)="8399b6f59ae0246e323ff7a65d26a0e76784cbe3916f982f5b6ebfa42d282cf16863e1ef89a57cf32917f7bb911181b7010cd54ddaabbb83f5f0d59b98275bea0749e76cc8f8e290328d09bd0cc23eb8709b1fd9a62619ec7883a1171f635a99bba5fd04ecc4ff01d1aa653d31c097370198d61a5ee0b46900b5e85fa63eaba2b02c23e97dce16f5a681af0420f54ca315218df074b56d3b005a0b26", 0x9c}], 0x1, &(0x7f0000007c40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0x40, 0x2c008845}}], 0x1, 0x4004020) pipe(&(0x7f0000007cc0)={0xffffffffffffffff}) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000007d00)) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000007dc0), 0x1) pwrite64(r8, &(0x7f0000007e00)="1628b89f5bd4c56cbd2545bccbe7ab9896a5f42cfcd2bd6b45f3d360ee9115d72186ea72d320d74c03c504e1447e3ffd4d84a7791493dbef5f8e22214fa7256f922e6308dca39671bacb69c7050e510d1b726363b4adf2803bea4c71a986b33b2637bb1c93667382077a4c6092f30ddba72eaf8cf756d5e1d82791221f53a181cddbba9ac627a7766472e182c748f55ad06a36b0bed3f7a7a76c0bce", 0x9c, 0x8) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000007ec0), 0x20000, 0x0) ioctl$TUNSETVNETLE(r9, 0x400454dc, &(0x7f0000007f00)=0x1) unlink(&(0x7f0000007f40)='./file0\x00') 22:39:48 executing program 1: ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/109, 0x6d}, {&(0x7f0000001080)=""/75, 0x4b}, {&(0x7f0000001100)=""/36, 0x24}, {&(0x7f0000001140)=""/1, 0x1}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/140, 0x8c}], 0x7, 0x40, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000013c0)=""/242, &(0x7f00000014c0)=0xf2) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000001500)={0x200, {0x34, 0x3ff, 0x2, 0x5e7, 0xffffffffffffffff}}) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000001540), &(0x7f0000001580)=0x30) finit_module(0xffffffffffffffff, &(0x7f00000015c0)='^}*\x05{}-*\xe6][]*\x00', 0x1) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000001600), &(0x7f0000001640), 0x2, 0x3) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000001680)=0x1) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000016c0)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c4}, 0x4c040) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001800), 0x440000, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xdc, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe03}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf70325ed}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x62e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xeac1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x44050}, 0x50) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000001a00)={@remote, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x9, 0x5, 0x500, 0xfe2, 0x84}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001a80)='/sys/devices/cpu', 0x100, 0x185) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000001b00)=0x9) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55aaefaadc6af48d}, 0x80) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000001c80)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r2, {0x400, 0x20000}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000001dc0)={'sit0\x00', &(0x7f0000001d40)={'ip6tnl0\x00', 0x0, 0x4, 0x20, 0x3f, 0x0, 0x33, @empty, @mcast1, 0x700, 0x700, 0x3, 0x183e}}) 22:39:48 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4008010) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000200)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair(0x5, 0x80000, 0x200, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000280)={'mangle\x00', 0x50, "dce51fc7cde97d523737a739eaec4e394b2ce593f1914531f4a471912a1f9cb74906b08c025a4d780cb73ddbbeef4c5518b7d99167a63680fd2ac489e801f9313bc0fbeaf170f015f8e7da60016e295b"}, &(0x7f0000000300)=0x74) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x2, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) write$rfkill(0xffffffffffffffff, &(0x7f0000000440)={0x3, 0x4, 0x1, 0x1}, 0x8) r3 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000) r4 = fork() kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r2, &(0x7f0000000580)={r3, r3, 0x8}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000600)={0x40, 0x6, 0x1, 0x5, 0x408, 0x9}) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000001700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000000680)={0x1010, 0x464, 0x300, 0x70bd2c, 0x25dfdbfb, "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", ["", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000001740)={0xfff, 0x6, 0x1, 'queue1\x00', 0x3}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001800), 0x202000, 0x0) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000001840)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r2) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x50, r7, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x315616d7e9f30dc9}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x4) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000001a00)=0x20, 0x4) 22:39:48 executing program 3: setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x2, [{}, {}]}, 0x48) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="895d41f113d2"}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x20}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044845}, 0x4008800) r3 = mq_open(&(0x7f0000000300)='@\x00', 0x0, 0x140, &(0x7f0000000340)={0x9, 0x4, 0xffffffffffffffff, 0x6}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000003c0)={0xffffffff, 0x0, &(0x7f0000000380)=[r0, r0, r3, r0]}, 0x4) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000400), 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'}) write$selinux_attr(r5, &(0x7f0000000480)='system_u:object_r:qemu_device_t:s0\x00', 0x23) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f00000004c0)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x121100, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000540), &(0x7f0000000580)=@v3={0x3000000, [{0x6, 0x2}, {0x8, 0x6}], r2}, 0x18, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r4, {r3}}, './file0\x00'}) bind$802154_raw(r7, &(0x7f0000000600)={0x24, @none={0x0, 0x1}}, 0x14) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000640)=0x4, 0x4) r9 = syz_open_dev$mouse(&(0x7f0000000680), 0xa22f, 0x0) vmsplice(r9, &(0x7f0000000700)=[{&(0x7f00000006c0)="535eb697cf29a6600300284b7a44213cce3da0754a8bec9caafc11391e11114e7d97490818", 0x25}], 0x1, 0xc) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x80840, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r10, 0x40309439, &(0x7f0000000780)={0x3, 0x0, 0x6}) [ 88.363046] audit: type=1400 audit(1737585588.831:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:39:48 executing program 4: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000100)=""/72) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000180)={'team0\x00', @broadcast}) r1 = memfd_secret(0x80000) write$binfmt_aout(r1, &(0x7f00000001c0)={{0x107, 0x1, 0x81, 0xb9, 0x119, 0x4, 0x83, 0x7fff}, "c8c7a468d15b54b5cd646aaa6ea15d4a5cf77f89cced787bbffdc7bf5defa18ba36afa98374826824232cffaab6610534d54ee45c97c6d4f0af98b0ae25fbb37cedb55e924246ba1852d87220c7d2bd895eab6d4405f36e93e36365ab2b7cb453185e2b31c79ae234265e1fa0090b1d111ad5be3a9fc92", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x997) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000bc0)={0x2, &(0x7f0000000b80)=[{0x5, 0x4, 0xfe, 0x9}, {0x9, 0x1, 0x1f, 0x9}]}, 0x10) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000c00)=0xffff) fcntl$getownex(r1, 0x10, &(0x7f0000000c80)={0x0, 0x0}) sendmsg$AUDIT_SET(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, 0x3e9, 0x300, 0x70bd28, 0x25dfdbfc, {0x14, 0x1, 0x1, r2, 0x2, 0x7fffffff, 0x401, 0x8000, 0x0, 0x9}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r3, 0xf505, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000d80)={0x401, 0x4, 0x8, 0x5, 0x1, 0x2}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket(0x1e, 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x2) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000dc0)={'nr0\x00'}) 22:39:48 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40801) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x20}, @NL80211_ATTR_PMKID={0x14, 0x55, "fc23f77aa9eb489a8a3297c04c66be1d"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1d}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x24000001) write$sndseq(r0, &(0x7f0000000380)=[{0x3f, 0x0, 0xff, 0x1, @time={0x1000, 0x7f}, {0x0, 0x7}, {0x1, 0x6}, @time=@tick=0x8000}, {0xff, 0x6d, 0x63, 0x81, @tick=0x4, {0x4, 0x1}, {0xf1, 0x9e}, @connect={{0x58, 0x8}, {0x5, 0x5}}}, {0x3, 0xf8, 0x5, 0x5, @time={0x10000, 0x20}, {0x20, 0x1}, {0xb5, 0x5}, @addr={0x40, 0x8}}, {0x5, 0x80, 0x6, 0x28, @time={0x8, 0x2}, {0x2, 0x5}, {0x0, 0x3}, @quote={{0x0, 0xad}, 0x3, &(0x7f0000000340)={0x2, 0x81, 0x20, 0xf8, @tick=0x2, {0x0, 0x20}, {0x3f, 0xf9}, @result={0x1000}}}}, {0x2, 0x4, 0x0, 0x2, @time={0x9, 0x280000}, {0x1, 0x5}, {0x1, 0x9}, @note={0x8, 0x80, 0xa7, 0x1, 0x400}}, {0x3, 0xc2, 0x1, 0x6, @time={0x4, 0xd20}, {0x5, 0x81}, {0x3f, 0x20}, @queue={0x74, {0x200, 0x51}}}], 0xa8) lsetxattr$trusted_overlay_nlink(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480), &(0x7f00000004c0)={'L+', 0x7ff}, 0x16, 0x2) r4 = signalfd(r0, &(0x7f0000000500)={[0x27415f72]}, 0x8) ioctl$RTC_UIE_ON(r4, 0x7003) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x4100, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x100, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd28}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @mcast1, 0x88b}}}}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x20000880) r6 = dup(r4) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r2, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x78}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40804}, 0x40010) ioctl$CDROMREADMODE2(r5, 0x530c, &(0x7f0000000840)={0x9, 0x5, 0x52, 0x92, 0x9, 0x8}) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, 0x3f7, 0x300, 0x70bd2c, 0x25dfdbff, {0x7, 0x7, './file2', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8082000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", ""]}, 0x14}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r5, {r1}}, './file2\x00'}) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f0000001500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xf8, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x14be}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xb1f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe0000000}, {0x6, 0x11, 0xffff}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008001}, 0x800) 22:39:48 executing program 6: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000040}, 0x4000000) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x21}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x5b}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x8}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x80}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c1}, 0x8108) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000004c0), 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000084}, 0xc0d5) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4042040}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000880), 0x100, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000009c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r5, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x60, r6, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x64, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '@{y\x00'}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz0\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x64}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x50, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:etc_runtime_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x48010}, 0x20000800) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000e00)) 22:39:48 executing program 7: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0xa84, 0xdbfc, 0x7f, 0x7, 0x80000000]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x5, 0xfffffffd, 0x1ff, 0x1, 0x1ff]}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x6e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x40000c0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x202002, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffe00, 0x48}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4884}, 0x8000040) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "91a49bf3ab4b7c3f", "dc0ffa5823e68eb7eae9bfacc93178c33715cef084810d949d4fdfee44a50318", "e74e22e8", "1a27728bbb879f52"}, 0x38) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x20}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x81}]}, 0x30}}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x66d}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x70}, 0x4001) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000700)={r1, 0x6, 0x6, 0x9}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x55}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000880)={[0x8]}, 0x8, 0x800) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f00000008c0)=""/133, &(0x7f0000000980)=0x85) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0), 0xc4800, 0x0) connect$bt_sco(r5, &(0x7f0000000a00), 0x8) syz_genetlink_get_family_id$fou(&(0x7f0000000a40), r4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000000ac0)) connect$bt_sco(r1, &(0x7f0000000b00)={0x1f, @none}, 0x8) [ 89.804065] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.811221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.814189] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.824692] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.828446] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.837390] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.858671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.886182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.887116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.888089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.895178] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.899139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.903376] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.909311] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.918161] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.927628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.933332] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.937049] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.969218] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.974316] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.976822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.978340] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.989983] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.999606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.002267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.007178] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.012453] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.016002] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.019473] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.023919] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.028380] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.032979] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.041925] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.042482] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.046633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.056022] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.059288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.062425] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.069024] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.071149] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.101055] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.124296] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.124384] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.125431] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.133208] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.160410] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.163638] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.165123] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.889570] Bluetooth: hci0: command tx timeout [ 92.017756] Bluetooth: hci1: command tx timeout [ 92.080967] Bluetooth: hci2: command tx timeout [ 92.145346] Bluetooth: hci5: command tx timeout [ 92.145378] Bluetooth: hci4: command tx timeout [ 92.209863] Bluetooth: hci7: command tx timeout [ 92.210230] Bluetooth: hci6: command tx timeout [ 92.210238] Bluetooth: hci3: command tx timeout [ 93.936844] Bluetooth: hci0: command tx timeout [ 94.066915] Bluetooth: hci1: command tx timeout [ 94.129843] Bluetooth: hci2: command tx timeout [ 94.192885] Bluetooth: hci5: command tx timeout [ 94.192998] Bluetooth: hci4: command tx timeout [ 94.258765] Bluetooth: hci3: command tx timeout [ 94.258873] Bluetooth: hci7: command tx timeout [ 94.258933] Bluetooth: hci6: command tx timeout [ 95.984993] Bluetooth: hci0: command tx timeout [ 96.112908] Bluetooth: hci1: command tx timeout [ 96.177325] Bluetooth: hci2: command tx timeout [ 96.241819] Bluetooth: hci4: command tx timeout [ 96.241923] Bluetooth: hci5: command tx timeout [ 96.305891] Bluetooth: hci6: command tx timeout [ 96.305984] Bluetooth: hci7: command tx timeout [ 96.306039] Bluetooth: hci3: command tx timeout [ 98.033785] Bluetooth: hci0: command tx timeout [ 98.160861] Bluetooth: hci1: command tx timeout [ 98.224802] Bluetooth: hci2: command tx timeout [ 98.289840] Bluetooth: hci4: command tx timeout [ 98.289951] Bluetooth: hci5: command tx timeout [ 98.352877] Bluetooth: hci3: command tx timeout [ 98.352982] Bluetooth: hci7: command tx timeout [ 98.353040] Bluetooth: hci6: command tx timeout [ 149.792850] syz-executor.2 (283) used greatest stack depth: 23360 bytes left [ 152.204093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.205572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.207388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.210599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.212676] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.213880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.259287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.263306] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.269992] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.275532] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.277339] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.278500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.326278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.328957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.329990] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.335056] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.337965] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.338501] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.463351] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.464612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.473016] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.474064] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.475363] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.477884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.485535] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.486640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.487908] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.494783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.502081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.508280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.508450] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.517860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.534588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.553312] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.568123] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.570528] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.582314] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.587056] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.605422] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.610035] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.612860] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.617926] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.629085] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.647059] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.654467] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.655075] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.664972] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.696469] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.226772] Bluetooth: hci0: command tx timeout [ 154.353783] Bluetooth: hci1: command tx timeout [ 154.419746] Bluetooth: hci2: command tx timeout [ 154.608875] Bluetooth: hci5: command tx timeout [ 154.675756] Bluetooth: hci3: command tx timeout [ 154.736787] Bluetooth: hci4: command tx timeout [ 154.800903] Bluetooth: hci7: command tx timeout [ 154.801768] Bluetooth: hci6: command tx timeout [ 156.272777] Bluetooth: hci0: command tx timeout [ 156.400825] Bluetooth: hci1: command tx timeout [ 156.465727] Bluetooth: hci2: command tx timeout [ 156.656768] Bluetooth: hci5: command tx timeout [ 156.720761] Bluetooth: hci3: command tx timeout [ 156.784889] Bluetooth: hci4: command tx timeout [ 156.848794] Bluetooth: hci7: command tx timeout [ 156.851718] Bluetooth: hci6: command tx timeout [ 158.320840] Bluetooth: hci0: command tx timeout [ 158.448795] Bluetooth: hci1: command tx timeout [ 158.512806] Bluetooth: hci2: command tx timeout [ 158.705898] Bluetooth: hci5: command tx timeout [ 158.768783] Bluetooth: hci3: command tx timeout [ 158.832745] Bluetooth: hci4: command tx timeout [ 158.897401] Bluetooth: hci6: command tx timeout [ 158.897476] Bluetooth: hci7: command tx timeout [ 160.368819] Bluetooth: hci0: command tx timeout [ 160.497092] Bluetooth: hci1: command tx timeout [ 160.561238] Bluetooth: hci2: command tx timeout [ 160.753028] Bluetooth: hci5: command tx timeout [ 160.816789] Bluetooth: hci3: command tx timeout [ 160.880814] Bluetooth: hci4: command tx timeout [ 160.944795] Bluetooth: hci7: command tx timeout [ 160.944933] Bluetooth: hci6: command tx timeout [ 214.411776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.415366] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.418476] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.427551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.432013] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.434624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.679625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.682661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.685047] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.689235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.692171] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.694843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.719530] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.726523] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.730918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.731574] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.744624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.745870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.750408] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.752934] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.757072] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.798970] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.801401] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.807121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.809236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.809570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.816862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.831136] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.847300] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.856092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.890170] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.893514] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.897598] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.913169] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.916193] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.918229] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.923431] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.927234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.940460] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.943017] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.947019] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.949115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.963058] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.964766] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.971337] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.974412] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.977894] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.981054] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.496809] Bluetooth: hci0: command tx timeout [ 216.753777] Bluetooth: hci1: command tx timeout [ 216.816779] Bluetooth: hci3: command tx timeout [ 216.880792] Bluetooth: hci2: command tx timeout [ 216.944782] Bluetooth: hci4: command tx timeout [ 217.072743] Bluetooth: hci6: command tx timeout [ 217.136830] Bluetooth: hci7: command tx timeout [ 217.137107] Bluetooth: hci5: command tx timeout [ 218.545899] Bluetooth: hci0: command tx timeout [ 218.800895] Bluetooth: hci1: command tx timeout [ 218.866786] Bluetooth: hci3: command tx timeout [ 218.931750] Bluetooth: hci2: command tx timeout [ 218.992868] Bluetooth: hci4: command tx timeout [ 219.122117] Bluetooth: hci6: command tx timeout [ 219.184917] Bluetooth: hci7: command tx timeout [ 219.185080] Bluetooth: hci5: command tx timeout [ 220.592899] Bluetooth: hci0: command tx timeout [ 220.848919] Bluetooth: hci1: command tx timeout [ 220.912818] Bluetooth: hci3: command tx timeout [ 220.976840] Bluetooth: hci2: command tx timeout [ 221.040917] Bluetooth: hci4: command tx timeout [ 221.168927] Bluetooth: hci6: command tx timeout [ 221.232980] Bluetooth: hci5: command tx timeout [ 221.233378] Bluetooth: hci7: command tx timeout [ 222.640852] Bluetooth: hci0: command tx timeout [ 222.897755] Bluetooth: hci1: command tx timeout [ 222.961799] Bluetooth: hci3: command tx timeout [ 223.026317] Bluetooth: hci2: command tx timeout [ 223.089805] Bluetooth: hci4: command tx timeout [ 223.216819] Bluetooth: hci6: command tx timeout [ 223.281749] Bluetooth: hci7: command tx timeout [ 223.281849] Bluetooth: hci5: command tx timeout [ 276.991872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.995750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.998447] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.008291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.020016] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.022639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.060816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.066075] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.068136] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.078348] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.082610] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.091324] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.386490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.391614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.394365] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.401868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.406935] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.411427] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.455169] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.459147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.461476] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.469588] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.489315] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.496921] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.513826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.545098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.548338] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.585588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.589053] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.592211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.624330] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.626221] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.639183] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.641628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.642348] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.653893] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.662169] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.662874] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.668939] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.721542] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.722613] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.726849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.728486] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.742222] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.747604] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.763239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.766518] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.775548] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.088943] Bluetooth: hci0: command tx timeout [ 279.152772] Bluetooth: hci1: command tx timeout [ 279.473782] Bluetooth: hci2: command tx timeout [ 279.664732] Bluetooth: hci3: command tx timeout [ 279.728776] Bluetooth: hci4: command tx timeout [ 279.793089] Bluetooth: hci6: command tx timeout [ 279.856775] Bluetooth: hci5: command tx timeout [ 279.921100] Bluetooth: hci7: command tx timeout [ 281.138233] Bluetooth: hci0: command tx timeout [ 281.202738] Bluetooth: hci1: command tx timeout [ 281.520814] Bluetooth: hci2: command tx timeout [ 281.712812] Bluetooth: hci3: command tx timeout [ 281.778788] Bluetooth: hci4: command tx timeout [ 281.840983] Bluetooth: hci6: command tx timeout [ 281.904837] Bluetooth: hci5: command tx timeout [ 281.969911] Bluetooth: hci7: command tx timeout [ 283.184755] Bluetooth: hci0: command tx timeout [ 283.249736] Bluetooth: hci1: command tx timeout [ 283.570960] Bluetooth: hci2: command tx timeout [ 283.761835] Bluetooth: hci3: command tx timeout [ 283.825049] Bluetooth: hci4: command tx timeout [ 283.888719] Bluetooth: hci6: command tx timeout [ 283.952895] Bluetooth: hci5: command tx timeout [ 284.016755] Bluetooth: hci7: command tx timeout [ 285.234757] Bluetooth: hci0: command tx timeout [ 285.297875] Bluetooth: hci1: command tx timeout [ 285.616780] Bluetooth: hci2: command tx timeout [ 285.809847] Bluetooth: hci3: command tx timeout [ 285.872720] Bluetooth: hci4: command tx timeout [ 285.939691] Bluetooth: hci6: command tx timeout [ 286.000711] Bluetooth: hci5: command tx timeout [ 286.064850] Bluetooth: hci7: command tx timeout [ 335.250932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.251059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.640453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.640545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.787528] [ 337.788071] ====================================================== [ 337.789575] WARNING: possible circular locking dependency detected [ 337.791048] 6.13.0-next-20250122 #1 Not tainted [ 337.792831] ------------------------------------------------------ [ 337.797262] kworker/u8:0/11 is trying to acquire lock: [ 337.798445] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.800819] [ 337.800819] but task is already holding lock: [ 337.802128] ffff88802f338768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.804431] [ 337.804431] which lock already depends on the new lock. [ 337.804431] [ 337.806225] [ 337.806225] the existing dependency chain (in reverse order) is: [ 337.807874] [ 337.807874] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 337.809392] __mutex_lock+0x13d/0xb50 [ 337.810450] wiphy_register+0x1b2e/0x25d0 [ 337.811590] ieee80211_register_hw+0x23a4/0x3d60 [ 337.812823] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 337.814103] init_mac80211_hwsim+0x389/0x870 [ 337.815300] do_one_initcall+0xf9/0x640 [ 337.816405] kernel_init_freeable+0x53d/0x7a0 [ 337.817614] kernel_init+0x1e/0x2d0 [ 337.818574] ret_from_fork+0x48/0x80 [ 337.819570] ret_from_fork_asm+0x1a/0x30 [ 337.820674] [ 337.820674] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 337.822085] __lock_acquire+0x29fd/0x4580 [ 337.823263] lock_acquire+0x19b/0x520 [ 337.824272] __mutex_lock+0x13d/0xb50 [ 337.825287] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.826640] unregister_netdevice_queue+0x224/0x2e0 [ 337.827877] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.829110] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.830317] ieee80211_unregister_hw+0x55/0x3a0 [ 337.831486] hwsim_exit_net+0x3a0/0x730 [ 337.832514] ops_exit_list+0xb3/0x180 [ 337.833490] cleanup_net+0x546/0xad0 [ 337.834457] process_one_work+0x8ee/0x1a10 [ 337.835577] worker_thread+0x674/0xe70 [ 337.836620] kthread+0x3ab/0x720 [ 337.837556] ret_from_fork+0x48/0x80 [ 337.838500] ret_from_fork_asm+0x1a/0x30 [ 337.839573] [ 337.839573] other info that might help us debug this: [ 337.839573] [ 337.841187] Possible unsafe locking scenario: [ 337.841187] [ 337.842429] CPU0 CPU1 [ 337.843594] ---- ---- [ 337.844748] lock(&rdev->wiphy.mtx); [ 337.845641] lock(rtnl_mutex); [ 337.846884] lock(&rdev->wiphy.mtx); [ 337.848260] lock(rtnl_mutex); [ 337.849043] [ 337.849043] *** DEADLOCK *** [ 337.849043] [ 337.850287] 4 locks held by kworker/u8:0/11: [ 337.851245] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 337.853458] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 337.855567] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 337.857561] #3: ffff88802f338768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.859743] [ 337.859743] stack backtrace: [ 337.860505] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250122 #1 [ 337.861856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 337.863273] Workqueue: netns cleanup_net [ 337.864039] Call Trace: [ 337.864477] [ 337.864888] dump_stack_lvl+0xca/0x120 [ 337.865647] print_circular_bug+0x47b/0x750 [ 337.866450] check_noncircular+0x2e9/0x3c0 [ 337.867229] ? lock_repin_lock+0x207/0x320 [ 337.868046] ? __pfx_check_noncircular+0x10/0x10 [ 337.868917] ? hlock_class+0x4e/0x130 [ 337.869621] ? mark_lock+0xac/0xed0 [ 337.870311] ? __pfx_lock_repin_lock+0x10/0x10 [ 337.871211] ? lockdep_lock+0xba/0x1b0 [ 337.871981] ? __pfx_lockdep_lock+0x10/0x10 [ 337.872817] __lock_acquire+0x29fd/0x4580 [ 337.873612] ? __pfx___lock_acquire+0x10/0x10 [ 337.874441] ? lock_release+0x20f/0x6f0 [ 337.875193] ? __pfx_lock_release+0x10/0x10 [ 337.876009] lock_acquire+0x19b/0x520 [ 337.876742] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.877819] ? __pfx_lock_acquire+0x10/0x10 [ 337.878626] ? srso_return_thunk+0x5/0x5f [ 337.879449] ? lock_release+0x20f/0x6f0 [ 337.880199] ? srso_return_thunk+0x5/0x5f [ 337.881016] ? lock_is_held_type+0x9e/0x120 [ 337.881852] ? srso_return_thunk+0x5/0x5f [ 337.882671] __mutex_lock+0x13d/0xb50 [ 337.883436] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.884485] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.885544] ? srso_return_thunk+0x5/0x5f [ 337.886358] ? synchronize_rcu_expedited+0x38a/0x420 [ 337.887302] ? __pfx___mutex_lock+0x10/0x10 [ 337.888137] ? __pfx_autoremove_wake_function+0x10/0x10 [ 337.889127] ? srso_return_thunk+0x5/0x5f [ 337.889937] ? kasan_quarantine_put+0x84/0x1e0 [ 337.890810] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 337.891633] ? srso_return_thunk+0x5/0x5f [ 337.892561] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.893721] ? __virt_addr_valid+0x2e8/0x5d0 [ 337.894545] ? __pfx_lock_release+0x10/0x10 [ 337.895375] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 337.896450] ? find_held_lock+0x2c/0x110 [ 337.897225] ? srso_return_thunk+0x5/0x5f [ 337.898036] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 337.899007] ? srso_return_thunk+0x5/0x5f [ 337.899919] ? lock_release+0x20f/0x6f0 [ 337.900666] ? __pfx_lock_release+0x10/0x10 [ 337.901458] ? srso_return_thunk+0x5/0x5f [ 337.902239] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.903209] ? srso_return_thunk+0x5/0x5f [ 337.904024] unregister_netdevice_queue+0x224/0x2e0 [ 337.904930] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 337.906035] ? up_write+0x195/0x520 [ 337.906771] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.907722] ? srso_return_thunk+0x5/0x5f [ 337.908527] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.909471] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 337.910467] ? srso_return_thunk+0x5/0x5f [ 337.911277] ? srso_return_thunk+0x5/0x5f [ 337.912094] ? synchronize_rcu+0x1ff/0x260 [ 337.912898] ieee80211_unregister_hw+0x55/0x3a0 [ 337.913773] hwsim_exit_net+0x3a0/0x730 [ 337.914503] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.915492] ? srso_return_thunk+0x5/0x5f [ 337.916424] ? netdev_run_todo+0x788/0x1040 [ 337.917268] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.918157] ops_exit_list+0xb3/0x180 [ 337.918909] cleanup_net+0x546/0xad0 [ 337.919654] ? __pfx_cleanup_net+0x10/0x10 [ 337.920482] process_one_work+0x8ee/0x1a10 [ 337.921335] ? __pfx_lock_acquire+0x10/0x10 [ 337.922148] ? __pfx_process_one_work+0x10/0x10 [ 337.923061] ? srso_return_thunk+0x5/0x5f [ 337.923873] ? move_linked_works+0x172/0x270 [ 337.924717] ? srso_return_thunk+0x5/0x5f [ 337.925527] ? assign_work+0x196/0x240 [ 337.926302] worker_thread+0x674/0xe70 [ 337.927068] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.928054] ? __pfx_worker_thread+0x10/0x10 [ 337.928917] kthread+0x3ab/0x720 [ 337.929592] ? __pfx_kthread+0x10/0x10 [ 337.930340] ? srso_return_thunk+0x5/0x5f [ 337.931128] ? finish_task_switch.isra.0+0x206/0x840 [ 337.932096] ? __pfx_kthread+0x10/0x10 [ 337.932858] ret_from_fork+0x48/0x80 [ 337.933557] ? __pfx_kthread+0x10/0x10 [ 337.934327] ret_from_fork_asm+0x1a/0x30 [ 337.935153] [ 339.584913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.588078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.592996] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.598349] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.606357] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.608946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.660395] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.664116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.670172] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.677744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.684890] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.691816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.707115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.714529] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.717235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.728485] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.731512] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.733844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.776042] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.778166] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.780322] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.793203] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.811720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.816432] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.816846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.817621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.822185] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.822735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.824865] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.825264] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.838932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.847057] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.849964] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.853199] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.865847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.866195] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.892903] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.905885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.906331] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.908344] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.912366] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.912826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.937786] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.944801] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 339.947293] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.950229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.957180] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.958055] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.680798] Bluetooth: hci0: command tx timeout [ 341.744782] Bluetooth: hci1: command tx timeout [ 341.808695] Bluetooth: hci2: command tx timeout [ 341.873484] Bluetooth: hci3: command tx timeout [ 341.938791] Bluetooth: hci4: command tx timeout [ 342.001667] Bluetooth: hci7: command tx timeout [ 342.001730] Bluetooth: hci5: command tx timeout [ 342.064691] Bluetooth: hci6: command tx timeout [ 343.729816] Bluetooth: hci0: command tx timeout [ 343.792740] Bluetooth: hci1: command tx timeout [ 343.856706] Bluetooth: hci2: command tx timeout [ 343.920746] Bluetooth: hci3: command tx timeout [ 343.984731] Bluetooth: hci4: command tx timeout [ 344.048768] Bluetooth: hci5: command tx timeout [ 344.048842] Bluetooth: hci7: command tx timeout [ 344.112988] Bluetooth: hci6: command tx timeout [ 345.776984] Bluetooth: hci0: command tx timeout [ 345.842933] Bluetooth: hci1: command tx timeout [ 345.904744] Bluetooth: hci2: command tx timeout [ 345.968850] Bluetooth: hci3: command tx timeout [ 346.034747] Bluetooth: hci4: command tx timeout [ 346.096904] Bluetooth: hci7: command tx timeout [ 346.096921] Bluetooth: hci5: command tx timeout [ 346.160841] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 22:43:58 Registers: info registers vcpu 0 RAX=ffff88806ce00000 RBX=0000000000000000 RCX=ffffffff84a8e9d7 RDX=ffffed100d9c6c4b RSI=0000000000000004 RDI=ffffffff814b1bba RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000000 R9 =ffffed100d9c6c4a R10=ffff88806ce36253 R11=00000000dbfbb796 R12=ffffffff864057d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8f97e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb082433d50 CR3=000000000eb36000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=dec58cc7c6b08493fe4a1ccbdc29756b XMM02=00000000000fcf30a3797342f9eb3dd9 XMM03=000000000013303868a8aee3740b9fad XMM04=775a74708cde57e200000000000ae988 XMM05=d1fe47a012a5b1dd000000000014f678 XMM06=9f165a4fe6c971ad0000000000137188 XMM07=711fbe8126c5d3440000000000137080 XMM08=68a8aee3740b9fad00000000000fd050 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e865 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=000000000000002d R11=2d2d2d2d2d2d2d2d R12=000000000000002d R13=0000000000000001 R14=ffff888008fea02d R15=ffff8880095deeb8 RIP=ffffffff8283e8bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560b06c43900 CR3=000000000e958000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004170164d00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000