Warning: Permanently added '[localhost]:38463' (ECDSA) to the list of known hosts. 2025/01/23 03:41:21 fuzzer started 2025/01/23 03:41:21 dialing manager at localhost:38529 syzkaller login: [ 69.551963] cgroup: Unknown subsys name 'net' [ 69.653498] cgroup: Unknown subsys name 'cpuset' [ 69.686651] cgroup: Unknown subsys name 'rlimit' [ 74.491995] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 86.367897] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 03:41:39 syscalls: 2217 2025/01/23 03:41:39 code coverage: enabled 2025/01/23 03:41:39 comparison tracing: enabled 2025/01/23 03:41:39 extra coverage: enabled 2025/01/23 03:41:39 setuid sandbox: enabled 2025/01/23 03:41:39 namespace sandbox: enabled 2025/01/23 03:41:39 Android sandbox: enabled 2025/01/23 03:41:39 fault injection: enabled 2025/01/23 03:41:39 leak checking: enabled 2025/01/23 03:41:39 net packet injection: enabled 2025/01/23 03:41:39 net device setup: enabled 2025/01/23 03:41:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 03:41:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 03:41:39 USB emulation: enabled 2025/01/23 03:41:39 hci packet injection: enabled 2025/01/23 03:41:39 wifi device emulation: enabled 2025/01/23 03:41:39 802.15.4 emulation: enabled 2025/01/23 03:41:39 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/23 03:41:39 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/23 03:41:39 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/23 03:41:39 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/23 03:41:39 fetching corpus: 0, signal 0/9473 (executing program) 2025/01/23 03:41:39 fetching corpus: 0, signal 0/9473 (executing program) 2025/01/23 03:41:41 starting 8 fuzzer processes 03:41:41 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'erspan0\x00', {0x2, 0x0, @multicast2}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000140)) r2 = fsmount(r1, 0x1, 0x80) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/172}) r3 = openat$incfs(r2, &(0x7f00000002c0)='.pending_reads\x00', 0x5082, 0x60) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000300)={0x2}, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r5 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x80, 0x34, 0x7, 0x2, 0x0, 0x42, 0x400, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x6, 0xfffffffffffffffa}, 0x20, 0x10001, 0x7f, 0x3, 0x4c, 0x9, 0x100, 0x0, 0x8, 0x0, 0x40}, r4, 0x6, r1, 0x1) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) sendmsg$AUDIT_TTY_SET(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x3f9, 0x20, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40011}, 0x4048001) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000580)) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000005c0)) fchmod(r5, 0x8) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000600)={0x6, 0xfff8, 0xd869, 0x0, 0x6, "e7b48962dce5885f"}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640), 0x2c4800, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xe0, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x81, 0xa8, @random="49248423588392741ba07dd19c3cd6e7d4ca43b0ac717ff83fb8ef9b8be906bf6ba41f5f26009aec86f4e403acdd0e819ced7e3bfa3454e39c1c0d588ee2b46f657c9ea584be18f385156a9a2dfa80cb1b09788d95bf41151198038e6f950bdef1c3bf12da4b21338bb10a7d5c59310cb7c0246b8c2e7d7282661ec92d"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 03:41:41 executing program 1: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x7fff) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2000, 0x120) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) faccessat2(r0, &(0x7f0000000080)='./file0\x00', 0x108, 0x1000) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/145) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0xba50, 0x5, 0x0, 'queue0\x00'}) r2 = openat(r1, &(0x7f0000000280)='./file0\x00', 0x0, 0x1e) read$char_usb(r2, &(0x7f00000002c0)=""/233, 0xe9) r3 = dup3(r0, r2, 0x80000) connect$bt_sco(r3, &(0x7f00000003c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000400)={'macvlan1\x00', {0x2, 0x0, @remote}}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000440)=0x2000, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) r4 = accept(r1, &(0x7f00000005c0)=@phonet, &(0x7f0000000640)=0x80) getsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000700)={0x1, 0x1, 0xf}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000740)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 03:41:41 executing program 2: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x200, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd25, 0x3, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffff800}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x8000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48044) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x24008084) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000540), 0x2) r2 = fsmount(r0, 0x0, 0x82) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x40010) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000006c0)=0x6, 0x4) r3 = accept4(r0, &(0x7f0000000700)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000780)=0x80, 0x800) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x4008080) r6 = dup3(r0, r2, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, 0x0, 0xb, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0xf, 0x1, '/dev/vcsa#\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xf, 0x1, '/dev/vcsa#\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x7, 0x1, '\xeb:\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f0000000a40)={0x81, 0x610c}) [ 89.010657] audit: type=1400 audit(1737603701.474:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:41:41 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000045}, 0x4004000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000380)={&(0x7f00000002c0)=""/177, 0xb1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000003c0)={{r1}, 0x0, 0x1c, @unused=[0x9, 0xffffffffffffffc0, 0x3ff, 0x90b], @devid}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000013c0)={0x0, 0x2, 0x2, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000017c0)={r2, 0x4, 0x200}) r4 = openat$cgroup(r1, &(0x7f0000001bc0)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000001c00)={0x1, 0x3}) write$binfmt_script(r1, &(0x7f0000001c40)={'#! ', './file0', [{}, {0x20, '-9\\n\xd4/'}, {0x20, '\\$)^,%}-^,]#^([#F[\\@,V#^'}]}, 0x2c) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000001c80)={0x0, "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"}) r5 = openat$cgroup_ro(r4, &(0x7f0000001ec0)='memory.events.local\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000001f00)) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001f80)={{r4}, 0x0, 0x9, @unused=[0x100000000, 0x5, 0x1, 0x62], @devid=r3}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000002f80)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003000), r1) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000003180)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003140)={&(0x7f0000003040)={0xdc, r7, 0x114, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffe}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x693313dc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x611}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffff65}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x35}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x68}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x91}, 0x400c085) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000031c0)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0/file0\x00'}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f00000033c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003380)={&(0x7f0000003240)={0x118, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 03:41:41 executing program 4: r0 = open(&(0x7f0000000300)='./file0\x00', 0x682000, 0x1) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004004}, 0x8800) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000480)) r1 = fsmount(r0, 0x0, 0x5) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '\'/'}, {0x20, '(*[\'\\'}, {0x20, '(%#/$'}, {}], 0xa, "9f6e830475dce92242596e3340859cec656d09bcc7b4388662666c394c088cdc43c2041ae13e4160c3b01002e363768a1aaa1f1d5bf0aabdf7455fae313095a0716cd3b07001656ae303a23f57067c17994bd7a2acce5803412c7c7382e797de2c121ca169a0c79ad926ed49a65b2202f9e24da288b76af4e4e6ddef58c14a"}, 0x9a) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000580), &(0x7f00000005c0)=0x8) r2 = syz_io_uring_complete(0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000600)={'veth1_to_bond\x00', 0x3}) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000640), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000680)={0x0, 0x3f, [0x3, 0x3f, 0x0, 0x100, 0x80, 0x2]}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000700)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) getpeername$unix(r5, &(0x7f0000000840)=@abs, &(0x7f00000008c0)=0x6e) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000900)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r8, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x3, 0x7ff, 0x0, 0xffffffff}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x4011) sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r8, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}}, 0x4040005) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000b80)) 03:41:41 executing program 5: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x3, 0x2}) write$hidraw(0xffffffffffffffff, &(0x7f0000000080)="0eb7e1364ad6b583b26ec0857820413446797ca73d73ddfade38e3f598eb313a4a6ee97b28ceb19bb3b14a017dc827ab1f7bf6aafd63084522112c8846a60e01b019dcce01ccfa0ab689e9da5dfe115219d3d7bb6da617", 0x57) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048080}, 0x1) syz_io_uring_setup(0x5075, &(0x7f0000000280)={0x0, 0x5e2e, 0x20, 0x3, 0x67, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r4 = syz_io_uring_complete(r3) r5 = openat(r4, &(0x7f0000000380)='./file0\x00', 0x4102, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) epoll_pwait2(r5, &(0x7f00000003c0)=[{}], 0x1, &(0x7f0000000440)={r6, r7+10000000}, &(0x7f0000000480)={[0x155]}, 0x8) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x86166ca319f6bfe6}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44000) mknodat$loop(r4, &(0x7f00000005c0)='./file0\x00', 0xc000, 0x1) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x111200, 0x0) ioctl$SNAPSHOT_S2RAM(r8, 0x330b) ioctl$KDSETLED(r4, 0x4b32, 0x3) lsetxattr$trusted_overlay_upper(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680), &(0x7f00000006c0)={0x0, 0xfb, 0x7b, 0x3, 0x0, "60d90d2a40db5332974a60c4bebd9721", "3bac872a887920a6d90a641c9f26bba2d1e72afc525d22d070badcde3784351576dd0f8ba2a9274fe38a4a75f2bef4d953f90aeaad215b6069dc4288fa48cdb95f8e60c518e737208de172dd359d4fc521bdd492a3f01c6e80faab9ac03370a30de476e23922"}, 0x7b, 0x1) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r5) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x48000) 03:41:41 executing program 6: clock_gettime(0x0, &(0x7f0000002980)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002880)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f00000000c0)=""/27, 0x1b}], 0x2}, 0x5}, {{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/247, 0xf7}, {&(0x7f00000002c0)=""/195, 0xc3}], 0x2, &(0x7f0000000400)=""/4096, 0x1000}}, {{&(0x7f0000001400)=@generic, 0x80, &(0x7f0000002580)=[{&(0x7f0000001480)=""/92, 0x5c}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/122, 0x7a}], 0x3, &(0x7f00000025c0)=""/31, 0x1f}, 0x2fbb}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002600)=""/227, 0xe3}, {&(0x7f0000002700)=""/249, 0xf9}], 0x2, &(0x7f0000002840)=""/1, 0x1}}], 0x4, 0x2163, &(0x7f00000029c0)={r0, r1+60000000}) bind$802154_raw(r2, &(0x7f0000002a00)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000002a40)=0x5, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000002a80), 0x800000, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000002ac0)=0x51, 0x4) mount$cgroup(0x0, &(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40), 0xa, &(0x7f0000002b80)={[], [{@obj_type={'obj_type', 0x3d, '/dev/full\x00'}}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) fstat(r4, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000002bc0)='./file0/file0\x00', &(0x7f0000002c00), 0x18, &(0x7f0000002cc0)={[{@memory_recursiveprot}, {}, {@memory_localevents}, {@memory_recursiveprot}], [{@euid_gt={'euid>', r5}}, {@obj_type}]}) close(r3) io_uring_enter(r3, 0x51c8, 0x505c, 0x1, &(0x7f0000002d40)={[0x1]}, 0x8) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000002d80)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000002dc0)={{0x1, 0x1, 0x18, r4, {0x436}}, './file0\x00'}) copy_file_range(r6, 0x0, r2, &(0x7f0000002e00)=0x3, 0xfffffffffffffff9, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r7 = memfd_secret(0x0) r8 = dup2(0xffffffffffffffff, r2) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) 03:41:41 executing program 7: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x6, 0x3f}, 'port0\x00', 0x5, 0x7, 0x5983, 0x0, 0x7f, 0x7, 0x2, 0x0, 0x4, 0xff}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f00000000c0)={0x1, 0x1, 0x9}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0xb, 0x4}, {0x80, 0x4}, 0x2, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000200)) r2 = dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0xd, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}}, 0x840) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x3, 0x6, 0x102, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x8041) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000004c0)={{r1}, 0x2, 0x93, 0x20}) r5 = syz_open_dev$vcsa(&(0x7f0000000500), 0x5, 0x800) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x28, 0x0, &(0x7f0000000540)=[@increfs_done, @increfs_done], 0x30, 0x0, &(0x7f0000000580)="82956490fe2e248580c5a9b03e28bf8d3c795b290f2c4242faa5e0b0c4eb61612cc40777ae4e09204e1c3387e010f8bf"}) r6 = syz_open_dev$mouse(&(0x7f0000000600), 0x1ff, 0x0) fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000640)) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x406400, 0x0) ioctl$RTC_UIE_OFF(r7, 0x7004) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x134, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc0000000}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff20c}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffc0}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x68e2}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6baa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe056}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b83}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) [ 90.343430] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.347111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.349531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.358823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.362500] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.364935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.534634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.540102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.544791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.554929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.560717] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.563021] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.679134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.685943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.689632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.694577] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.700697] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.705110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.725057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.730162] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.733751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.736776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.741654] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.746997] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.748120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.762047] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.778499] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.782878] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.787580] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.792202] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.794453] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.866701] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.869958] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.875522] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.883733] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.889760] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.894751] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.898735] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.902406] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.908698] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.912169] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.917458] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.920747] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.931511] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.936961] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.940138] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.943025] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.944033] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.430435] Bluetooth: hci0: command tx timeout [ 92.622370] Bluetooth: hci1: command tx timeout [ 92.878379] Bluetooth: hci3: command tx timeout [ 92.878412] Bluetooth: hci2: command tx timeout [ 92.942386] Bluetooth: hci4: command tx timeout [ 93.006425] Bluetooth: hci5: command tx timeout [ 93.006474] Bluetooth: hci6: command tx timeout [ 93.071039] Bluetooth: hci7: command tx timeout [ 94.477319] Bluetooth: hci0: command tx timeout [ 94.669419] Bluetooth: hci1: command tx timeout [ 94.926422] Bluetooth: hci3: command tx timeout [ 94.926501] Bluetooth: hci2: command tx timeout [ 94.989331] Bluetooth: hci4: command tx timeout [ 95.053366] Bluetooth: hci5: command tx timeout [ 95.054376] Bluetooth: hci6: command tx timeout [ 95.118410] Bluetooth: hci7: command tx timeout [ 96.525645] Bluetooth: hci0: command tx timeout [ 96.717319] Bluetooth: hci1: command tx timeout [ 96.973545] Bluetooth: hci3: command tx timeout [ 96.973590] Bluetooth: hci2: command tx timeout [ 97.038272] Bluetooth: hci4: command tx timeout [ 97.101567] Bluetooth: hci6: command tx timeout [ 97.101676] Bluetooth: hci5: command tx timeout [ 97.166290] Bluetooth: hci7: command tx timeout [ 98.573307] Bluetooth: hci0: command tx timeout [ 98.765340] Bluetooth: hci1: command tx timeout [ 99.021329] Bluetooth: hci2: command tx timeout [ 99.021349] Bluetooth: hci3: command tx timeout [ 99.085420] Bluetooth: hci4: command tx timeout [ 99.149405] Bluetooth: hci5: command tx timeout [ 99.149503] Bluetooth: hci6: command tx timeout [ 99.214472] Bluetooth: hci7: command tx timeout [ 153.006818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.010143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.010729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.012764] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.019991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.025577] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.027986] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.029200] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.033518] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.035927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.038472] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.040408] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.052131] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.054817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.058080] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.058434] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.062708] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.069661] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.075770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.077181] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.080472] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.086598] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.089572] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.091968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.130080] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.136997] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.142054] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.145439] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.150833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.151141] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.152416] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.154011] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.165389] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.165565] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.174570] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.175676] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.176701] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.179702] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.183137] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.186900] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.199565] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.203607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.259607] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.271568] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.283539] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.307704] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.328649] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.340593] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.085636] Bluetooth: hci0: command tx timeout [ 155.085689] Bluetooth: hci1: command tx timeout [ 155.149443] Bluetooth: hci3: command tx timeout [ 155.149453] Bluetooth: hci2: command tx timeout [ 155.277308] Bluetooth: hci6: command tx timeout [ 155.277376] Bluetooth: hci4: command tx timeout [ 155.341370] Bluetooth: hci5: command tx timeout [ 155.405395] Bluetooth: hci7: command tx timeout [ 157.134277] Bluetooth: hci1: command tx timeout [ 157.134305] Bluetooth: hci0: command tx timeout [ 157.198281] Bluetooth: hci2: command tx timeout [ 157.198358] Bluetooth: hci3: command tx timeout [ 157.325323] Bluetooth: hci6: command tx timeout [ 157.326441] Bluetooth: hci4: command tx timeout [ 157.389631] Bluetooth: hci5: command tx timeout [ 157.455443] Bluetooth: hci7: command tx timeout [ 159.181359] Bluetooth: hci1: command tx timeout [ 159.182613] Bluetooth: hci0: command tx timeout [ 159.245336] Bluetooth: hci2: command tx timeout [ 159.246287] Bluetooth: hci3: command tx timeout [ 159.374375] Bluetooth: hci4: command tx timeout [ 159.374515] Bluetooth: hci6: command tx timeout [ 159.439258] Bluetooth: hci5: command tx timeout [ 159.502346] Bluetooth: hci7: command tx timeout [ 161.230316] Bluetooth: hci0: command tx timeout [ 161.230418] Bluetooth: hci1: command tx timeout [ 161.294423] Bluetooth: hci3: command tx timeout [ 161.294516] Bluetooth: hci2: command tx timeout [ 161.421415] Bluetooth: hci6: command tx timeout [ 161.422039] Bluetooth: hci4: command tx timeout [ 161.486303] Bluetooth: hci5: command tx timeout [ 161.552298] Bluetooth: hci7: command tx timeout [ 214.559732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.562762] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.565135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.570353] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.573875] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.577777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.805751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.808677] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.811788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.816174] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.825602] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.827800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.884122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.888389] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.896557] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.903839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.906705] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.909396] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.938910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.950095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.958371] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.962854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.966574] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.968752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.039989] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.047519] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.050537] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.069301] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.086644] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.091556] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.203122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.213601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.222464] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.228368] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.236593] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.239586] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.246062] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.249014] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.262682] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.265822] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.271471] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.289911] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.299035] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.335997] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.341513] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.359614] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.371382] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.396993] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.717361] Bluetooth: hci0: command tx timeout [ 216.909797] Bluetooth: hci1: command tx timeout [ 216.973374] Bluetooth: hci2: command tx timeout [ 217.039326] Bluetooth: hci3: command tx timeout [ 217.230166] Bluetooth: hci4: command tx timeout [ 217.357356] Bluetooth: hci5: command tx timeout [ 217.421600] Bluetooth: hci6: command tx timeout [ 217.486418] Bluetooth: hci7: command tx timeout [ 218.765359] Bluetooth: hci0: command tx timeout [ 218.957421] Bluetooth: hci1: command tx timeout [ 219.021347] Bluetooth: hci2: command tx timeout [ 219.086857] Bluetooth: hci3: command tx timeout [ 219.277399] Bluetooth: hci4: command tx timeout [ 219.405298] Bluetooth: hci5: command tx timeout [ 219.469372] Bluetooth: hci6: command tx timeout [ 219.534224] Bluetooth: hci7: command tx timeout [ 220.813458] Bluetooth: hci0: command tx timeout [ 221.005506] Bluetooth: hci1: command tx timeout [ 221.069461] Bluetooth: hci2: command tx timeout [ 221.133501] Bluetooth: hci3: command tx timeout [ 221.325308] Bluetooth: hci4: command tx timeout [ 221.453468] Bluetooth: hci5: command tx timeout [ 221.523427] Bluetooth: hci6: command tx timeout [ 221.584311] Bluetooth: hci7: command tx timeout [ 222.861760] Bluetooth: hci0: command tx timeout [ 223.053653] Bluetooth: hci1: command tx timeout [ 223.118463] Bluetooth: hci2: command tx timeout [ 223.182236] Bluetooth: hci3: command tx timeout [ 223.373821] Bluetooth: hci4: command tx timeout [ 223.503303] Bluetooth: hci5: command tx timeout [ 223.565304] Bluetooth: hci6: command tx timeout [ 223.629408] Bluetooth: hci7: command tx timeout [ 276.962121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.971741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.974783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.980784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.987664] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.989000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.101047] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.104888] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.116291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.118072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.119534] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.123995] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.128747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.133988] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.136136] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.140065] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.161552] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.172441] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.188818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.208702] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.224719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.239880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.245614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.245951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.255625] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.273845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.281971] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.311576] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.320561] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.322453] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.434029] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.436517] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.459743] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.478989] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.496432] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.509666] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.513268] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.526659] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.555737] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.563613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.567106] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.586003] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.595565] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.604677] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.612975] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.617522] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.633707] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.637797] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.053335] Bluetooth: hci0: command tx timeout [ 279.183353] Bluetooth: hci2: command tx timeout [ 279.245381] Bluetooth: hci1: command tx timeout [ 279.309266] Bluetooth: hci3: command tx timeout [ 279.501254] Bluetooth: hci4: command tx timeout [ 279.565288] Bluetooth: hci6: command tx timeout [ 279.822274] Bluetooth: hci5: command tx timeout [ 279.822672] Bluetooth: hci7: command tx timeout [ 281.101275] Bluetooth: hci0: command tx timeout [ 281.231026] Bluetooth: hci2: command tx timeout [ 281.293236] Bluetooth: hci1: command tx timeout [ 281.357454] Bluetooth: hci3: command tx timeout [ 281.549317] Bluetooth: hci4: command tx timeout [ 281.613255] Bluetooth: hci6: command tx timeout [ 281.869435] Bluetooth: hci5: command tx timeout [ 281.870107] Bluetooth: hci7: command tx timeout [ 283.149304] Bluetooth: hci0: command tx timeout [ 283.278254] Bluetooth: hci2: command tx timeout [ 283.343212] Bluetooth: hci1: command tx timeout [ 283.405403] Bluetooth: hci3: command tx timeout [ 283.597496] Bluetooth: hci4: command tx timeout [ 283.661378] Bluetooth: hci6: command tx timeout [ 283.917282] Bluetooth: hci5: command tx timeout [ 283.917877] Bluetooth: hci7: command tx timeout [ 285.198215] Bluetooth: hci0: command tx timeout [ 285.327236] Bluetooth: hci2: command tx timeout [ 285.389328] Bluetooth: hci1: command tx timeout [ 285.453287] Bluetooth: hci3: command tx timeout [ 285.645292] Bluetooth: hci4: command tx timeout [ 285.710149] Bluetooth: hci6: command tx timeout [ 285.965370] Bluetooth: hci5: command tx timeout [ 285.966218] Bluetooth: hci7: command tx timeout [ 334.853230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.853436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.518817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.518927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.473037] [ 337.473294] ====================================================== [ 337.473897] WARNING: possible circular locking dependency detected [ 337.474479] 6.13.0-next-20250122 #1 Not tainted [ 337.474941] ------------------------------------------------------ [ 337.476114] kworker/u8:1/65 is trying to acquire lock: [ 337.477240] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.479053] [ 337.479053] but task is already holding lock: [ 337.480113] ffff888009bb8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.482227] [ 337.482227] which lock already depends on the new lock. [ 337.482227] [ 337.483680] [ 337.483680] the existing dependency chain (in reverse order) is: [ 337.485088] [ 337.485088] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 337.485747] __mutex_lock+0x13d/0xb50 [ 337.486206] wiphy_register+0x1b2e/0x25d0 [ 337.486690] ieee80211_register_hw+0x23a4/0x3d60 [ 337.487232] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 337.487792] init_mac80211_hwsim+0x389/0x870 [ 337.488306] do_one_initcall+0xf9/0x640 [ 337.488780] kernel_init_freeable+0x53d/0x7a0 [ 337.489296] kernel_init+0x1e/0x2d0 [ 337.489725] ret_from_fork+0x48/0x80 [ 337.490158] ret_from_fork_asm+0x1a/0x30 [ 337.490643] [ 337.490643] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 337.491256] __lock_acquire+0x29fd/0x4580 [ 337.491732] lock_acquire+0x19b/0x520 [ 337.492176] __mutex_lock+0x13d/0xb50 [ 337.492627] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.493235] unregister_netdevice_queue+0x224/0x2e0 [ 337.493779] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.494340] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.494897] ieee80211_unregister_hw+0x55/0x3a0 [ 337.495419] hwsim_exit_net+0x3a0/0x730 [ 337.495878] ops_exit_list+0xb3/0x180 [ 337.496325] cleanup_net+0x546/0xad0 [ 337.496767] process_one_work+0x8ee/0x1a10 [ 337.497269] worker_thread+0x674/0xe70 [ 337.497741] kthread+0x3ab/0x720 [ 337.498163] ret_from_fork+0x48/0x80 [ 337.498592] ret_from_fork_asm+0x1a/0x30 [ 337.499085] [ 337.499085] other info that might help us debug this: [ 337.499085] [ 337.499798] Possible unsafe locking scenario: [ 337.499798] [ 337.500357] CPU0 CPU1 [ 337.500798] ---- ---- [ 337.501238] lock(&rdev->wiphy.mtx); [ 337.501630] lock(rtnl_mutex); [ 337.502200] lock(&rdev->wiphy.mtx); [ 337.502812] lock(rtnl_mutex); [ 337.503145] [ 337.503145] *** DEADLOCK *** [ 337.503145] [ 337.503675] 4 locks held by kworker/u8:1/65: [ 337.504080] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 337.505029] #1: ffff88800ea3fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 337.505950] #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 337.506806] #3: ffff888009bb8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.507780] [ 337.507780] stack backtrace: [ 337.508213] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250122 #1 [ 337.508966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 337.509681] Workqueue: netns cleanup_net [ 337.510071] Call Trace: [ 337.510323] [ 337.510550] dump_stack_lvl+0xca/0x120 [ 337.510973] print_circular_bug+0x47b/0x750 [ 337.511415] check_noncircular+0x2e9/0x3c0 [ 337.511822] ? __pfx_check_noncircular+0x10/0x10 [ 337.512266] ? hlock_class+0x4e/0x130 [ 337.512620] ? srso_return_thunk+0x5/0x5f [ 337.513055] ? mark_lock+0xac/0xed0 [ 337.513436] ? lockdep_lock+0xba/0x1b0 [ 337.513847] ? __pfx_lockdep_lock+0x10/0x10 [ 337.514314] __lock_acquire+0x29fd/0x4580 [ 337.514718] ? __pfx___lock_acquire+0x10/0x10 [ 337.515151] ? lock_release+0x20f/0x6f0 [ 337.515538] ? __pfx_lock_release+0x10/0x10 [ 337.515982] ? srso_return_thunk+0x5/0x5f [ 337.516425] lock_acquire+0x19b/0x520 [ 337.516817] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.517403] ? __pfx_lock_acquire+0x10/0x10 [ 337.517838] ? __pfx_lock_release+0x10/0x10 [ 337.518273] ? __pfx_try_to_wake_up+0x10/0x10 [ 337.518720] ? srso_return_thunk+0x5/0x5f [ 337.519163] ? lock_is_held_type+0x9e/0x120 [ 337.519606] ? srso_return_thunk+0x5/0x5f [ 337.520039] __mutex_lock+0x13d/0xb50 [ 337.520438] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.521007] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.521578] ? srso_return_thunk+0x5/0x5f [ 337.521996] ? synchronize_rcu_expedited+0x38a/0x420 [ 337.522499] ? __pfx___mutex_lock+0x10/0x10 [ 337.522941] ? srso_return_thunk+0x5/0x5f [ 337.523352] ? srso_return_thunk+0x5/0x5f [ 337.523759] ? kasan_quarantine_put+0x84/0x1e0 [ 337.524210] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 337.524631] ? srso_return_thunk+0x5/0x5f [ 337.525055] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.525577] ? __virt_addr_valid+0x2e8/0x5d0 [ 337.526003] ? __pfx_lock_release+0x10/0x10 [ 337.526419] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 337.526980] ? find_held_lock+0x2c/0x110 [ 337.527382] ? srso_return_thunk+0x5/0x5f [ 337.527797] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 337.528272] ? srso_return_thunk+0x5/0x5f [ 337.528679] ? lock_release+0x20f/0x6f0 [ 337.529058] ? __pfx_lock_release+0x10/0x10 [ 337.529494] ? srso_return_thunk+0x5/0x5f [ 337.529928] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.530456] ? srso_return_thunk+0x5/0x5f [ 337.530903] unregister_netdevice_queue+0x224/0x2e0 [ 337.531401] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 337.531949] ? up_write+0x195/0x520 [ 337.532334] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.532828] ? srso_return_thunk+0x5/0x5f [ 337.533261] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.533752] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 337.534292] ? srso_return_thunk+0x5/0x5f [ 337.534722] ? srso_return_thunk+0x5/0x5f [ 337.535161] ? synchronize_rcu+0x1ff/0x260 [ 337.535584] ieee80211_unregister_hw+0x55/0x3a0 [ 337.536029] hwsim_exit_net+0x3a0/0x730 [ 337.536438] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.536883] ? srso_return_thunk+0x5/0x5f [ 337.537312] ? netdev_run_todo+0x788/0x1040 [ 337.537750] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.538182] ops_exit_list+0xb3/0x180 [ 337.538549] cleanup_net+0x546/0xad0 [ 337.538930] ? __pfx_cleanup_net+0x10/0x10 [ 337.539343] process_one_work+0x8ee/0x1a10 [ 337.539764] ? __pfx_lock_acquire+0x10/0x10 [ 337.540173] ? __pfx_process_one_work+0x10/0x10 [ 337.540637] ? srso_return_thunk+0x5/0x5f [ 337.541066] ? move_linked_works+0x172/0x270 [ 337.541519] ? srso_return_thunk+0x5/0x5f [ 337.541941] ? assign_work+0x196/0x240 [ 337.542330] worker_thread+0x674/0xe70 [ 337.542717] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.543234] ? srso_return_thunk+0x5/0x5f [ 337.543669] ? __pfx_worker_thread+0x10/0x10 [ 337.544132] kthread+0x3ab/0x720 [ 337.544497] ? __pfx_kthread+0x10/0x10 [ 337.544909] ? srso_return_thunk+0x5/0x5f [ 337.545347] ? finish_task_switch.isra.0+0x206/0x840 [ 337.545860] ? __pfx_kthread+0x10/0x10 [ 337.546273] ret_from_fork+0x48/0x80 [ 337.546645] ? __pfx_kthread+0x10/0x10 [ 337.547061] ret_from_fork_asm+0x1a/0x30 [ 337.547498] [ 339.558623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.561009] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.561814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.567361] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.569062] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.569865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.755376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.757326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.762435] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.765835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.769455] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.771140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.820900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.825379] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.827112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.833762] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.835402] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.836697] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.838435] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.838467] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.841743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.846089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.854592] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.861365] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.872648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.881090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.884639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.887854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.888154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.891813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.897837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.900567] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.902432] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.905017] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.906684] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.912199] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.962975] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.970645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.973108] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.978430] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.980855] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.981501] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.986955] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.001979] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.015301] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.026607] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.032500] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.043891] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.647203] Bluetooth: hci0: command tx timeout [ 341.837227] Bluetooth: hci1: command tx timeout [ 341.903201] Bluetooth: hci3: command tx timeout [ 341.965246] Bluetooth: hci5: command tx timeout [ 341.965297] Bluetooth: hci4: command tx timeout [ 342.093245] Bluetooth: hci7: command tx timeout [ 342.093271] Bluetooth: hci2: command tx timeout [ 342.222363] Bluetooth: hci6: command tx timeout [ 343.696177] Bluetooth: hci0: command tx timeout [ 343.885208] Bluetooth: hci1: command tx timeout [ 343.949225] Bluetooth: hci3: command tx timeout [ 344.013218] Bluetooth: hci5: command tx timeout [ 344.013799] Bluetooth: hci4: command tx timeout [ 344.143189] Bluetooth: hci2: command tx timeout [ 344.143262] Bluetooth: hci7: command tx timeout [ 344.269342] Bluetooth: hci6: command tx timeout [ 345.741312] Bluetooth: hci0: command tx timeout [ 345.934389] Bluetooth: hci1: command tx timeout [ 345.997248] Bluetooth: hci3: command tx timeout [ 346.061246] Bluetooth: hci5: command tx timeout [ 346.061258] Bluetooth: hci4: command tx timeout [ 346.189241] Bluetooth: hci7: command tx timeout [ 346.189328] Bluetooth: hci2: command tx timeout [ 346.318217] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 03:45:50 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283e7d0 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88800ea3eb30 R8 =0000000000000001 R9 =ffffed1001d47d55 R10=0000000000000001 R11=3038383866666666 R12=ffffffff886990b0 R13=ffff88800ea3ee28 R14=ffffffff88699320 R15=0000000000000000 RIP=ffffffff8283e825 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4a45a26428 CR3=000000000c40e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c0000560f0000000c0003056b0 XMM04=000000c000086090000000c000086060 XMM05=000000c0000860f0000000c0000860c0 XMM06=000000c000086150000000c000086120 XMM07=000000c000085760000000c00005b4d0 XMM08=000000c0000864b0000000c000086480 XMM09=000000c000086510000000c0000864e0 XMM10=000000c000086540000000c00005b530 XMM11=000000c0000865a0000000c000086570 XMM12=000000c000086600000000c0000865d0 XMM13=000000c000086660000000c000086630 XMM14=000000c0000866c0000000c000086690 XMM15=000000c0000a1080000000c0000866f0 info registers vcpu 1 RAX=ffff88806cf00000 RBX=0000000000000001 RCX=ffffffff84a8e9d7 RDX=ffffed100d9e6c4b RSI=0000000000000004 RDI=ffffffff814b1bba RBP=dffffc0000000000 RSP=ffff8880096a7e68 R8 =0000000000000000 R9 =ffffed100d9e6c4a R10=ffff88806cf36253 R11=0000000000000001 R12=ffffffff864057d0 R13=1ffff110012d4fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8f97e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f19e53f268 CR3=000000000c40e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000411e264000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000