Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 67.683207] scp (236) used greatest stack depth: 22944 bytes left Warning: Permanently added '[localhost]:41404' (ECDSA) to the list of known hosts. 2025/01/23 01:28:54 fuzzer started 2025/01/23 01:28:54 dialing manager at localhost:38529 [ 71.103661] cgroup: Unknown subsys name 'net' [ 71.194915] cgroup: Unknown subsys name 'cpuset' [ 71.226378] cgroup: Unknown subsys name 'rlimit' [ 76.936008] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 87.935836] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 01:29:12 syscalls: 200 2025/01/23 01:29:12 code coverage: enabled 2025/01/23 01:29:12 comparison tracing: enabled 2025/01/23 01:29:12 extra coverage: enabled 2025/01/23 01:29:12 setuid sandbox: enabled 2025/01/23 01:29:12 namespace sandbox: enabled 2025/01/23 01:29:12 Android sandbox: enabled 2025/01/23 01:29:12 fault injection: enabled 2025/01/23 01:29:12 leak checking: enabled 2025/01/23 01:29:12 net packet injection: enabled 2025/01/23 01:29:12 net device setup: enabled 2025/01/23 01:29:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 01:29:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 01:29:12 USB emulation: enabled 2025/01/23 01:29:12 hci packet injection: enabled 2025/01/23 01:29:12 wifi device emulation: enabled 2025/01/23 01:29:12 802.15.4 emulation: enabled 2025/01/23 01:29:12 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 01:29:14 starting 8 fuzzer processes 01:29:14 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x8c, 0x0, &(0x7f0000000040)="853bffb87dbf683633d7f71748079ff632ef2b3ee7b869db9bfedc4e76083d438dd418b27c76b37488b6d0d37cf5ceae6a0d99ca87d8000c4d6efcddcf6882c6d1ecd15459307500b16a7a420c9ac887204e16be95974572a95fb1de1bbc9fbfb2cf678d29fda70d78d8deca7d7877498aad6741382d4f7aee9b6aeab7a6e3c3a8bf3b0f227cede8f54fbbf4"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_io_uring_complete(0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x100, 0x70bd28, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xe080) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004004}, 0x8080) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000801) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x8000, 0x0) setsockopt$packet_int(r3, 0x107, 0x3, &(0x7f00000005c0)=0x6, 0x4) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000600)=0x9, 0x4) r4 = accept4$packet(r0, 0x0, &(0x7f0000000640), 0x80000) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x1) r5 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x7f, 0x20, 0x7, 0xff, 0x0, 0x3, 0x80a01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000680), 0x2}, 0x200, 0x1000, 0x20, 0x5, 0x3, 0x6, 0x2, 0x0, 0x9, 0x0, 0x3000000000}, 0xffffffffffffffff, 0xc, r0, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x6) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs2/binder0\x00', 0xd607a51893fd2371, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0xde9) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000840)={&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x1, &(0x7f00000007c0)=""/104, 0x68}, &(0x7f0000000880)=0x40) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000008c0)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x10) 01:29:14 executing program 1: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r1 = socket$inet(0x2, 0xa, 0x385c8713) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@broadcast}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x20, 0x101) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), 0x0, r2}, 0x68) r3 = accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x0) setsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000000340)="ddd2b5b7a1ac2a103cd2797e068e588e2072777c25db86147d769699d8229430ccd2a1a560dc5256c4bbc53d6553e2fdbb015c96c57a7e52e656399af1c25b268dcf7ba8c5e0a578a7d28bd1bb2b306b5ee8a6d3c96d9e2a69388455e4efbad8d78d0bb15502604172e0c66a58a326d5450c1cc9573d5d03ec645fcc", 0x7c) io_uring_setup(0x4ab5, &(0x7f00000003c0)={0x0, 0x53a0, 0x0, 0x1, 0x52, 0x0, r0}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x16, 0x1f}, {0x5}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x5}}, {0x8}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xbc0d}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x4}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) ioctl$TUNSETLINK(r0, 0x400454cd, 0x206) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000006c0)) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x15c, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x48800}, 0x80) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x10, 0x3fb, 0x300, 0x70bd27, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000000) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r7, 0x0, 0x2, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004018}, 0x8) 01:29:14 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}}, 0x9) r0 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x20008001) fstat(0xffffffffffffffff, &(0x7f00000001c0)) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0xc0000) sendto$packet(r1, &(0x7f0000000280)="af076142593d109e77effd5722d8e61276f7242f79dae61f26afbedd7e19938c075d7124923e94954f20c51031fe009dd37e8ce953e040e7855ed62aa4464204c3a832763a81864ccac5eea011dea2f6d5048187642772fbd4f17b22f37f9148770fd622be301a268f315f9425e03aed125113ac417b5c9956677cf8ea9a181c27a41e1b06d3ee357790040bf2586f8e396a30b77e4487f276cf00e0964c5f23e40461", 0xa3, 0x20004000, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xc8, 0x8c, 0x4, 0x0, 0x0, 0x1c, 0x410c, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0x3}, 0x4880, 0x6a9, 0x9, 0x4, 0x100000000, 0x8, 0xffff, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r2 = accept$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) setns(0xffffffffffffffff, 0x2000000) getsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f0000000480)=""/154, &(0x7f0000000540)=0x9a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'erspan0\x00', &(0x7f00000005c0)={'gre0\x00', r3, 0x40, 0xa9a9813e8daa66d3, 0x0, 0x7fffffff, {{0x2d, 0x4, 0x3, 0x4, 0xb4, 0x67, 0x0, 0x6, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x1c, 0xd7, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x10000}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2b}}]}, @timestamp_addr={0x44, 0x54, 0x1f, 0x1, 0x1, [{@multicast1, 0x3}, {@remote, 0x6}, {@local, 0x4}, {@rand_addr=0x64010100, 0xb05}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast2, 0x81}, {@local, 0x20}, {@rand_addr=0x64010100, 0x400}, {@private=0xa010101, 0x7db5868b}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x65, 0x0, 0x5, [0x0, 0x1000, 0xfffffffc, 0x1]}, @timestamp_addr={0x44, 0x4, 0x6, 0x1, 0x2}, @ssrr={0x89, 0x13, 0x9e, [@local, @rand_addr=0x64010102, @empty, @empty]}]}}}}}) socketpair(0x7, 0x1, 0x1f, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) accept4$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x14, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) socketpair(0x28, 0x4, 0x401, &(0x7f0000000900)={0xffffffffffffffff}) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000940)=@req3={0x8, 0x88d, 0x40, 0x8, 0x80000001, 0x80000001, 0xffffffff}, 0x1c) r8 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r8) 01:29:14 executing program 3: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xc0, 0x453, 0x102, 0x70bd26, 0x25dfdbfc, "1044fd688d531e3081a01e9fabd7d21b2949e3c6e7d1a8ba5e83e536affe20271876dfee03076b511aafdbb947f8e1b14d8b9a4efe9bb0614fc3ef8258b2d8d2d09b604bb247ad50a1a235a74849eab3903fd8cc5d737e96d9f7802515ad346f5fc99f45ce2e03fbae1e2e7e362a8551b56885c7ee4513c204b6b32c9460511153268864cb3e3cd73f8d1ee2bbeee8661e110ed4e0b7d13dd11151b229f805065c3d293113c10830358f9cee71359f", [""]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x404c090) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) socketpair(0x10, 0x80000, 0x6, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r3 = syz_io_uring_complete(0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1a4, r0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004085) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x4140, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000700)='pci\x00') socketpair(0x29, 0x6, 0x9, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r0, 0x4, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000080) ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f) r6 = accept$packet(r3, 0x0, &(0x7f0000000880)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000900), 0x200400, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xcc, r8, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x7}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), 0xffffffffffffffff) 01:29:14 executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x26004044}, 0x8115) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x34000000}, 0x40000) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1a0, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1a0}}, 0x8040) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x10000000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) fstat(r2, &(0x7f0000000600)) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x814}, 0x20000004) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000800)={'netpci0\x00', @broadcast}) socketpair(0x26, 0x5, 0x65, &(0x7f0000000840)={0xffffffffffffffff}) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x453, 0x8, 0x70bd2a, 0x25dfdbff, "4ebf6e74b1d1735debbe", ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0xfff) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x464, 0x100, 0x70bd27, 0x25dfdbfc, "38c19a59a2c0309f6929db7a4ff94e6af51955d22803c2fc616da2bc72ec7b0f1d19893866a0c7", ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8804}, 0x4000040) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000a80)='\xff\xff\xff\xff\xff\xff') sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) [ 90.500719] audit: type=1400 audit(1737595754.167:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:29:14 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6a63}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000800}, 0x5) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6}, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x110, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x800}, 0x1000) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000002c0)=@req={0x2, 0xfffffffc, 0xd316, 0x1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r3, 0x1, 0x4, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8801) recvfrom$packet(r2, &(0x7f0000000480)=""/252, 0xfc, 0x40002001, &(0x7f0000000580)={0x11, 0x16, 0x0, 0x1, 0x7f, 0x6, @local}, 0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 01:29:14 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x80010, r0, 0xdfe58000) socketpair(0xb, 0x80000, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x8, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40840}, 0x44) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000180)="32fd7d5c1b294f1fac5fd335a785022351ee112a6c07a02b713358", 0x1b}, 0x68) shmget(0x1, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000012c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, &(0x7f0000001240)=""/70, 0x46}, &(0x7f0000001300)=0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r3) r4 = syz_io_uring_setup(0x12eb, &(0x7f0000001380)={0x0, 0x53a2, 0x2, 0x0, 0x79, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001400), &(0x7f0000001440)) syz_io_uring_setup(0x5934, &(0x7f0000001480)={0x0, 0xe3bc, 0x2, 0x1, 0xc9, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001500), &(0x7f0000001540)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001580), 0x20000, 0x0) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f00000015c0)) sigaltstack(&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000001600)) write$tun(r5, &(0x7f0000001640)={@void, @void, @ipv6=@generic={0xc, 0x6, "d3c944", 0x11d8, 0x33, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}, @private2, {[@dstopts={0x0, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x401}, @calipso={0x7, 0x20, {0x1, 0x6, 0x2, 0xe8, [0x537, 0x1, 0x47]}}, @jumbo={0xc2, 0x4, 0x8e}, @enc_lim, @calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0x5, [0x7, 0x40, 0x0, 0x0]}}]}, @dstopts={0xff, 0x1f, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x8000}, @generic={0x1, 0xdf, "29c7e8331ecb0701aa8be079763bd0027139947e4a9b063fbf310ca028c77e9011ef54e44f73c204246cf5b25bc57fcd09779abe67fd53fdc798889ee89da55004602807d6d2f1f020204333887639697728517a153338f8902c89ac016c1acf20dbf996350b1958f06c2dcc195e12644c322297aba82ad6d25511a84be4808325fd57397c4af9a88ffe05ba5ef8f7e9df9a0a6250e429ab29d7f14a133a2b02c939b36bcaa9d0849148900c9d4b6aecfc50ec4e16d80bec9fdfaf6e66e5ecaecfb085a2b6612e2f784fa736eee4c72f5717a4b11df3c1d42f092e0400ded7"}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0xa48}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x5c, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0xebaf}, @hao={0xc9, 0x10, @empty}]}, @hopopts={0x6, 0x1, '\x00', [@pad1, @pad1, @ra={0x5, 0x2, 0x7}]}, @hopopts={0x3a, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xcc}, @enc_lim={0x4, 0x1, 0x5}]}], "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"}}}, 0x1200) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1ff}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x40080) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000002b80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x90000204}, 0xc, &(0x7f0000002b40)={&(0x7f00000029c0)={0x150, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0x150}, 0x1, 0x0, 0x0, 0x44041}, 0x4004090) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002bc0), 0x408003, 0x0) io_uring_setup(0x4306, &(0x7f0000002c00)={0x0, 0x6ebe, 0x0, 0x0, 0x285, 0x0, r6}) 01:29:14 executing program 7: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}}, 0x4000000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) sendmsg$AUDIT_TRIM(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f6, 0x800, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x5}, 0x41) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x12c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x1ff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44810}, 0x4810) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @handle=@pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, r0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80c}, 0x20048010) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x94, r0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40080}, 0x804) r4 = syz_io_uring_complete(0x0) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x18, 0x3f9, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, r0, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0x40}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000d80)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/29, 0x1d, 0x0, &(0x7f0000000cc0)=""/186, 0xba}, &(0x7f0000000dc0)=0x40) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xf8, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffc1}, {0x6, 0x11, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001000), 0x20080, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f00000011c0)={&(0x7f0000001040), 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x84, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000010}, 0x10) [ 91.918094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.921872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.926232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.928437] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.930732] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.936833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.938429] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.944513] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.946577] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.947827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.953789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.959058] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.995646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.996863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.999494] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.002986] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.004153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.006020] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.007037] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.012696] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.023658] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.037861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.043253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.048718] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.058022] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.058515] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.072204] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.096623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.119225] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.123037] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.123518] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.125854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.140660] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.141896] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.149876] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.168245] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.186251] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.187591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.194563] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.195846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.199978] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.201143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.203700] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.215663] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.226020] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.254800] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.267743] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.270066] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.996813] Bluetooth: hci0: command tx timeout [ 94.059512] Bluetooth: hci3: command tx timeout [ 94.060414] Bluetooth: hci1: command tx timeout [ 94.123477] Bluetooth: hci2: command tx timeout [ 94.187454] Bluetooth: hci4: command tx timeout [ 94.253481] Bluetooth: hci6: command tx timeout [ 94.315441] Bluetooth: hci5: command tx timeout [ 94.380516] Bluetooth: hci7: command tx timeout [ 96.043529] Bluetooth: hci0: command tx timeout [ 96.107375] Bluetooth: hci1: command tx timeout [ 96.107460] Bluetooth: hci3: command tx timeout [ 96.171374] Bluetooth: hci2: command tx timeout [ 96.235369] Bluetooth: hci4: command tx timeout [ 96.299456] Bluetooth: hci6: command tx timeout [ 96.365406] Bluetooth: hci5: command tx timeout [ 96.427442] Bluetooth: hci7: command tx timeout [ 98.091467] Bluetooth: hci0: command tx timeout [ 98.155458] Bluetooth: hci1: command tx timeout [ 98.155625] Bluetooth: hci3: command tx timeout [ 98.219385] Bluetooth: hci2: command tx timeout [ 98.283524] Bluetooth: hci4: command tx timeout [ 98.347478] Bluetooth: hci6: command tx timeout [ 98.412025] Bluetooth: hci5: command tx timeout [ 98.475520] Bluetooth: hci7: command tx timeout [ 100.139487] Bluetooth: hci0: command tx timeout [ 100.203374] Bluetooth: hci1: command tx timeout [ 100.203483] Bluetooth: hci3: command tx timeout [ 100.267475] Bluetooth: hci2: command tx timeout [ 100.331528] Bluetooth: hci4: command tx timeout [ 100.395604] Bluetooth: hci6: command tx timeout [ 100.460515] Bluetooth: hci5: command tx timeout [ 100.523440] Bluetooth: hci7: command tx timeout [ 154.193909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.196691] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.200698] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.208207] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.212122] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.217312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.375872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.378676] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.382507] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.391475] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.393956] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.397028] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.553518] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.556508] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.558219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.568281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.570667] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.571984] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.627993] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.640338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.640997] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.642084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.646878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.648689] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.651792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.659568] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.664951] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.667469] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.667897] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.670374] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.711742] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.728483] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.735470] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.736157] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.745510] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.746637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.747023] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.752049] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.756749] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.760132] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.766482] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.775833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.776117] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.777010] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.793659] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.832761] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.870019] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.872111] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.269585] Bluetooth: hci0: command tx timeout [ 156.459397] Bluetooth: hci1: command tx timeout [ 156.652343] Bluetooth: hci2: command tx timeout [ 156.715354] Bluetooth: hci4: command tx timeout [ 156.779692] Bluetooth: hci3: command tx timeout [ 156.844449] Bluetooth: hci5: command tx timeout [ 156.907460] Bluetooth: hci7: command tx timeout [ 156.907832] Bluetooth: hci6: command tx timeout [ 158.315511] Bluetooth: hci0: command tx timeout [ 158.507420] Bluetooth: hci1: command tx timeout [ 158.699963] Bluetooth: hci2: command tx timeout [ 158.763558] Bluetooth: hci4: command tx timeout [ 158.827547] Bluetooth: hci3: command tx timeout [ 158.893324] Bluetooth: hci5: command tx timeout [ 158.955361] Bluetooth: hci7: command tx timeout [ 158.955454] Bluetooth: hci6: command tx timeout [ 160.363493] Bluetooth: hci0: command tx timeout [ 160.555781] Bluetooth: hci1: command tx timeout [ 160.747351] Bluetooth: hci2: command tx timeout [ 160.812018] Bluetooth: hci4: command tx timeout [ 160.875562] Bluetooth: hci3: command tx timeout [ 160.940499] Bluetooth: hci5: command tx timeout [ 161.003343] Bluetooth: hci6: command tx timeout [ 161.003440] Bluetooth: hci7: command tx timeout [ 162.411715] Bluetooth: hci0: command tx timeout [ 162.603415] Bluetooth: hci1: command tx timeout [ 162.795593] Bluetooth: hci2: command tx timeout [ 162.860100] Bluetooth: hci4: command tx timeout [ 162.923383] Bluetooth: hci3: command tx timeout [ 162.987326] Bluetooth: hci5: command tx timeout [ 163.051815] Bluetooth: hci7: command tx timeout [ 163.051904] Bluetooth: hci6: command tx timeout [ 216.184423] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.187144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.190401] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.194220] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.195950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.200097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.201905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.205185] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.208500] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.234731] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.243534] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.247955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.385939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.397534] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.400987] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.404331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.406619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.417426] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.418985] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.420316] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.420674] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.422850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.438306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.441025] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.467571] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.472362] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.474354] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.477958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.485669] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.488094] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.491729] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.492741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.494533] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.497649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.522029] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.543980] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.580019] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.603712] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.606594] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.617287] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.621370] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.623003] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.624206] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.629745] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.648464] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.659596] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.661881] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.666525] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.284024] Bluetooth: hci1: command tx timeout [ 218.284533] Bluetooth: hci0: command tx timeout [ 218.475392] Bluetooth: hci2: command tx timeout [ 218.603471] Bluetooth: hci4: command tx timeout [ 218.603906] Bluetooth: hci5: command tx timeout [ 218.604146] Bluetooth: hci3: command tx timeout [ 218.731339] Bluetooth: hci6: command tx timeout [ 218.797070] Bluetooth: hci7: command tx timeout [ 220.334405] Bluetooth: hci1: command tx timeout [ 220.334973] Bluetooth: hci0: command tx timeout [ 220.524260] Bluetooth: hci2: command tx timeout [ 220.653269] Bluetooth: hci4: command tx timeout [ 220.653366] Bluetooth: hci5: command tx timeout [ 220.653456] Bluetooth: hci3: command tx timeout [ 220.781369] Bluetooth: hci6: command tx timeout [ 220.843407] Bluetooth: hci7: command tx timeout [ 222.380445] Bluetooth: hci0: command tx timeout [ 222.380617] Bluetooth: hci1: command tx timeout [ 222.572670] Bluetooth: hci2: command tx timeout [ 222.699520] Bluetooth: hci3: command tx timeout [ 222.699735] Bluetooth: hci5: command tx timeout [ 222.699856] Bluetooth: hci4: command tx timeout [ 222.828923] Bluetooth: hci6: command tx timeout [ 222.893303] Bluetooth: hci7: command tx timeout [ 224.427414] Bluetooth: hci0: command tx timeout [ 224.427729] Bluetooth: hci1: command tx timeout [ 224.620474] Bluetooth: hci2: command tx timeout [ 224.747347] Bluetooth: hci3: command tx timeout [ 224.747449] Bluetooth: hci4: command tx timeout [ 224.747539] Bluetooth: hci5: command tx timeout [ 224.875362] Bluetooth: hci6: command tx timeout [ 224.939396] Bluetooth: hci7: command tx timeout [ 278.272522] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.280628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.283737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.292981] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.298400] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.309727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.458754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.464978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.469124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.478350] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.485185] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.488170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.517811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.531842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.534772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.539908] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.546593] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.549450] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.559792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.562130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.568974] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.575410] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.581655] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.583925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.622031] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.631750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.635462] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.679014] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.701941] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.718183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.719731] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.728833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.738026] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.751880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.755990] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.767861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.768581] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.769522] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.774450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.896030] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.908870] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.945361] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.129528] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.134511] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.136423] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.142667] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.149661] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.154204] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.363390] Bluetooth: hci0: command tx timeout [ 280.555530] Bluetooth: hci1: command tx timeout [ 280.619641] Bluetooth: hci2: command tx timeout [ 280.686311] Bluetooth: hci3: command tx timeout [ 280.875390] Bluetooth: hci4: command tx timeout [ 281.195389] Bluetooth: hci7: command tx timeout [ 281.195828] Bluetooth: hci6: command tx timeout [ 281.323331] Bluetooth: hci5: command tx timeout [ 282.411425] Bluetooth: hci0: command tx timeout [ 282.603754] Bluetooth: hci1: command tx timeout [ 282.669305] Bluetooth: hci2: command tx timeout [ 282.731536] Bluetooth: hci3: command tx timeout [ 282.923312] Bluetooth: hci4: command tx timeout [ 283.243445] Bluetooth: hci6: command tx timeout [ 283.243540] Bluetooth: hci7: command tx timeout [ 283.371815] Bluetooth: hci5: command tx timeout [ 284.459324] Bluetooth: hci0: command tx timeout [ 284.651362] Bluetooth: hci1: command tx timeout [ 284.715390] Bluetooth: hci2: command tx timeout [ 284.780567] Bluetooth: hci3: command tx timeout [ 284.971525] Bluetooth: hci4: command tx timeout [ 285.291355] Bluetooth: hci7: command tx timeout [ 285.291462] Bluetooth: hci6: command tx timeout [ 285.419521] Bluetooth: hci5: command tx timeout [ 286.508290] Bluetooth: hci0: command tx timeout [ 286.699427] Bluetooth: hci1: command tx timeout [ 286.763325] Bluetooth: hci2: command tx timeout [ 286.829259] Bluetooth: hci3: command tx timeout [ 287.019355] Bluetooth: hci4: command tx timeout [ 287.339408] Bluetooth: hci7: command tx timeout [ 287.340094] Bluetooth: hci6: command tx timeout [ 287.469270] Bluetooth: hci5: command tx timeout [ 336.652425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.652548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.953511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.953604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.365735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.365815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.777649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.777734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.682648] [ 338.683133] ====================================================== [ 338.684436] WARNING: possible circular locking dependency detected [ 338.685744] 6.13.0-next-20250122 #1 Not tainted [ 338.687556] ------------------------------------------------------ [ 338.691605] kworker/u8:2/14081 is trying to acquire lock: [ 338.692782] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.694956] [ 338.694956] but task is already holding lock: [ 338.696193] ffff88801b870768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 338.698306] [ 338.698306] which lock already depends on the new lock. [ 338.698306] [ 338.699968] [ 338.699968] the existing dependency chain (in reverse order) is: [ 338.701517] [ 338.701517] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 338.702947] __mutex_lock+0x13d/0xb50 [ 338.703949] wiphy_register+0x1b2e/0x25d0 [ 338.705025] ieee80211_register_hw+0x23a4/0x3d60 [ 338.706193] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 338.707580] init_mac80211_hwsim+0x389/0x870 [ 338.708842] do_one_initcall+0xf9/0x640 [ 338.709615] kernel_init_freeable+0x53d/0x7a0 [ 338.710444] kernel_init+0x1e/0x2d0 [ 338.711117] ret_from_fork+0x48/0x80 [ 338.711794] ret_from_fork_asm+0x1a/0x30 [ 338.712564] [ 338.712564] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 338.713468] __lock_acquire+0x29fd/0x4580 [ 338.714169] lock_acquire+0x19b/0x520 [ 338.714830] __mutex_lock+0x13d/0xb50 [ 338.715526] unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.716474] unregister_netdevice_queue+0x224/0x2e0 [ 338.717696] _cfg80211_unregister_wdev+0x57b/0x700 [ 338.718961] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 338.720157] ieee80211_unregister_hw+0x55/0x3a0 [ 338.721296] hwsim_exit_net+0x3a0/0x730 [ 338.722335] ops_exit_list+0xb3/0x180 [ 338.723312] cleanup_net+0x546/0xad0 [ 338.724305] process_one_work+0x8ee/0x1a10 [ 338.725406] worker_thread+0x674/0xe70 [ 338.726442] kthread+0x3ab/0x720 [ 338.727367] ret_from_fork+0x48/0x80 [ 338.728340] ret_from_fork_asm+0x1a/0x30 [ 338.729428] [ 338.729428] other info that might help us debug this: [ 338.729428] [ 338.731063] Possible unsafe locking scenario: [ 338.731063] [ 338.732339] CPU0 CPU1 [ 338.733333] ---- ---- [ 338.734319] lock(&rdev->wiphy.mtx); [ 338.735213] lock(rtnl_mutex); [ 338.736523] lock(&rdev->wiphy.mtx); [ 338.737906] lock(rtnl_mutex); [ 338.738685] [ 338.738685] *** DEADLOCK *** [ 338.738685] [ 338.739956] 4 locks held by kworker/u8:2/14081: [ 338.740989] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 338.743228] #1: ffff888033e2fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 338.745153] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 338.746519] #3: ffff88801b870768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 338.748029] [ 338.748029] stack backtrace: [ 338.748660] CPU: 1 UID: 0 PID: 14081 Comm: kworker/u8:2 Not tainted 6.13.0-next-20250122 #1 [ 338.749428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 338.750173] Workqueue: netns cleanup_net [ 338.750593] Call Trace: [ 338.750856] [ 338.751083] dump_stack_lvl+0xca/0x120 [ 338.751493] print_circular_bug+0x47b/0x750 [ 338.751933] check_noncircular+0x2e9/0x3c0 [ 338.752365] ? lock_repin_lock+0x207/0x320 [ 338.752817] ? __pfx_check_noncircular+0x10/0x10 [ 338.753285] ? hlock_class+0x4e/0x130 [ 338.753654] ? mark_lock+0xac/0xed0 [ 338.754010] ? __pfx_lock_repin_lock+0x10/0x10 [ 338.754479] ? timerqueue_del+0x83/0x150 [ 338.754894] ? lockdep_lock+0xba/0x1b0 [ 338.755299] ? __pfx_lockdep_lock+0x10/0x10 [ 338.755756] __lock_acquire+0x29fd/0x4580 [ 338.756187] ? __pfx___lock_acquire+0x10/0x10 [ 338.756635] ? lock_release+0x20f/0x6f0 [ 338.757053] ? __pfx_lock_release+0x10/0x10 [ 338.757486] lock_acquire+0x19b/0x520 [ 338.757885] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.758456] ? __pfx_lock_acquire+0x10/0x10 [ 338.758889] ? srso_return_thunk+0x5/0x5f [ 338.759325] ? lock_release+0x20f/0x6f0 [ 338.759737] ? srso_return_thunk+0x5/0x5f [ 338.760178] ? lock_is_held_type+0x9e/0x120 [ 338.760624] ? srso_return_thunk+0x5/0x5f [ 338.761091] __mutex_lock+0x13d/0xb50 [ 338.761495] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.762063] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.762641] ? srso_return_thunk+0x5/0x5f [ 338.763084] ? synchronize_rcu_expedited+0x38a/0x420 [ 338.763605] ? __pfx___mutex_lock+0x10/0x10 [ 338.764150] ? __pfx_autoremove_wake_function+0x10/0x10 [ 338.764694] ? srso_return_thunk+0x5/0x5f [ 338.765213] ? kasan_quarantine_put+0x84/0x1e0 [ 338.765794] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 338.766332] ? srso_return_thunk+0x5/0x5f [ 338.766866] unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.767498] ? __virt_addr_valid+0x2e8/0x5d0 [ 338.767956] ? __pfx_lock_release+0x10/0x10 [ 338.768400] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 338.768993] ? find_held_lock+0x2c/0x110 [ 338.769414] ? srso_return_thunk+0x5/0x5f [ 338.769868] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 338.770371] ? srso_return_thunk+0x5/0x5f [ 338.770810] ? lock_release+0x20f/0x6f0 [ 338.771216] ? __pfx_lock_release+0x10/0x10 [ 338.771642] ? srso_return_thunk+0x5/0x5f [ 338.772076] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 338.772601] ? srso_return_thunk+0x5/0x5f [ 338.773043] unregister_netdevice_queue+0x224/0x2e0 [ 338.773536] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 338.774089] ? up_write+0x195/0x520 [ 338.774481] _cfg80211_unregister_wdev+0x57b/0x700 [ 338.774986] ? srso_return_thunk+0x5/0x5f [ 338.775432] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 338.775937] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 338.776485] ? srso_return_thunk+0x5/0x5f [ 338.776924] ? srso_return_thunk+0x5/0x5f [ 338.777357] ? synchronize_rcu+0x1ff/0x260 [ 338.777792] ieee80211_unregister_hw+0x55/0x3a0 [ 338.778258] hwsim_exit_net+0x3a0/0x730 [ 338.778662] ? __pfx_hwsim_exit_net+0x10/0x10 [ 338.779119] ? srso_return_thunk+0x5/0x5f [ 338.779550] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 338.780079] ? __pfx_hwsim_exit_net+0x10/0x10 [ 338.780550] ops_exit_list+0xb3/0x180 [ 338.780949] cleanup_net+0x546/0xad0 [ 338.781339] ? __pfx_cleanup_net+0x10/0x10 [ 338.781789] process_one_work+0x8ee/0x1a10 [ 338.782242] ? __pfx_lock_acquire+0x10/0x10 [ 338.782673] ? __pfx_process_one_work+0x10/0x10 [ 338.783169] ? srso_return_thunk+0x5/0x5f [ 338.783604] ? move_linked_works+0x172/0x270 [ 338.784058] ? srso_return_thunk+0x5/0x5f [ 338.784503] ? assign_work+0x196/0x240 [ 338.784927] worker_thread+0x674/0xe70 [ 338.785344] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 338.785880] ? srso_return_thunk+0x5/0x5f [ 338.786314] ? __pfx_worker_thread+0x10/0x10 [ 338.786785] kthread+0x3ab/0x720 [ 338.787148] ? __pfx_kthread+0x10/0x10 [ 338.787553] ? srso_return_thunk+0x5/0x5f [ 338.787970] ? finish_task_switch.isra.0+0x206/0x840 [ 338.788460] ? __pfx_kthread+0x10/0x10 [ 338.788854] ret_from_fork+0x48/0x80 [ 338.789204] ? __pfx_kthread+0x10/0x10 [ 338.789596] ret_from_fork_asm+0x1a/0x30 [ 338.790018] [ 340.665779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.668047] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.668797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.669607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.670324] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.674121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.678676] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.679674] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.682709] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.683889] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.685940] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.690602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.798167] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.804755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.809905] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.816623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.817018] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.823417] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.834477] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.841550] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.847443] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.849316] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.851049] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.857499] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.861994] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.862512] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.866028] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.884385] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.886585] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.890511] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.905058] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.913582] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.915850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.919564] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.924869] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.925809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.931655] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.937754] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.945689] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.947149] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.948963] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.952647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.953774] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.958665] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.966492] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.974739] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.987742] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.989456] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.763251] Bluetooth: hci0: command tx timeout [ 342.764322] Bluetooth: hci1: command tx timeout [ 342.955352] Bluetooth: hci3: command tx timeout [ 342.955523] Bluetooth: hci2: command tx timeout [ 342.955906] Bluetooth: hci4: command tx timeout [ 343.019257] Bluetooth: hci7: command tx timeout [ 343.019330] Bluetooth: hci5: command tx timeout [ 343.083786] Bluetooth: hci6: command tx timeout [ 344.811501] Bluetooth: hci1: command tx timeout [ 344.811534] Bluetooth: hci0: command tx timeout [ 345.005345] Bluetooth: hci4: command tx timeout [ 345.005366] Bluetooth: hci3: command tx timeout [ 345.005419] Bluetooth: hci2: command tx timeout [ 345.068278] Bluetooth: hci7: command tx timeout [ 345.068364] Bluetooth: hci5: command tx timeout [ 345.133253] Bluetooth: hci6: command tx timeout [ 346.859323] Bluetooth: hci0: command tx timeout [ 346.859822] Bluetooth: hci1: command tx timeout [ 347.051293] Bluetooth: hci2: command tx timeout [ 347.052435] Bluetooth: hci4: command tx timeout [ 347.053442] Bluetooth: hci3: command tx timeout [ 347.116404] Bluetooth: hci5: command tx timeout [ 347.116546] Bluetooth: hci7: command tx timeout [ 347.180359] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 01:33:22 Registers: info registers vcpu 0 RAX=000000000005d88b RBX=0000000000000000 RCX=ffffffff84a8e9d7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b1bba RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000001 R9 =ffffed100d9c6c4a R10=ffff88806ce36253 R11=0000000000000001 R12=ffffffff864057d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8f97e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4951aba1e0 CR3=000000000ccc0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004156910e00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e865 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff888033e2ebb8 R8 =0000000000000001 R9 =ffffed10067c5d67 R10=0000000000000020 R11=2d2d2d2d2d2d2d2d R12=0000000000000020 R13=0000000000000001 R14=ffff888008fea00f R15=ffff888033e2eeb8 RIP=ffffffff8283e8bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe7f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555e0f998b78 CR3=000000000ccc0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003fd0000000000000 XMM02=00000000000000004116730000000000 XMM03=00000000000000003ff0000000000000 XMM04=00000000000000003fd3333333333333 XMM05=000000c0000860f0000000c0000860c0 XMM06=000000c000086150000000c000086120 XMM07=000000c000085760000000c00005b4d0 XMM08=000000c0000864b0000000c000086480 XMM09=000000c000086510000000c0000864e0 XMM10=000000c000086540000000c00005b530 XMM11=000000c0000865a0000000c000086570 XMM12=000000c000086600000000c0000865d0 XMM13=000000c000086660000000c000086630 XMM14=000000c0000866c0000000c000086690 XMM15=000000c0000a1080000000c0000866f0