Warning: Permanently added '[localhost]:15166' (ECDSA) to the list of known hosts. 2025/01/24 03:49:48 fuzzer started 2025/01/24 03:49:48 dialing manager at localhost:45511 syzkaller login: [ 69.953030] cgroup: Unknown subsys name 'net' [ 70.045987] cgroup: Unknown subsys name 'cpuset' [ 70.066991] cgroup: Unknown subsys name 'rlimit' [ 74.635982] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/24 03:50:03 syscalls: 2217 2025/01/24 03:50:03 code coverage: enabled 2025/01/24 03:50:03 comparison tracing: enabled 2025/01/24 03:50:03 extra coverage: enabled 2025/01/24 03:50:03 setuid sandbox: enabled 2025/01/24 03:50:03 namespace sandbox: enabled 2025/01/24 03:50:03 Android sandbox: enabled 2025/01/24 03:50:03 fault injection: enabled 2025/01/24 03:50:03 leak checking: enabled 2025/01/24 03:50:03 net packet injection: enabled 2025/01/24 03:50:03 net device setup: enabled 2025/01/24 03:50:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/24 03:50:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/24 03:50:03 USB emulation: enabled 2025/01/24 03:50:03 hci packet injection: enabled 2025/01/24 03:50:03 wifi device emulation: enabled 2025/01/24 03:50:03 802.15.4 emulation: enabled 2025/01/24 03:50:03 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/24 03:50:03 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/24 03:50:03 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/24 03:50:03 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/24 03:50:03 fetching corpus: 0, signal 0/8321 (executing program) 2025/01/24 03:50:03 fetching corpus: 0, signal 0/8321 (executing program) 2025/01/24 03:50:05 starting 8 fuzzer processes 03:50:05 executing program 0: sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4c010) r0 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x4000, 0x8, 0x1}, 0x18) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r1, 0xf67939b643624038, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5ce}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10008}, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x3) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4008080) futimesat(r0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x40, 0x0) ioctl$TIOCCONS(r3, 0x541d) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000600)={0x569, 0xfff, 0x0, 0x8e72, 0x4}) r5 = syz_open_dev$vcsu(&(0x7f0000000640), 0x232, 0x0) bind$netlink(r5, &(0x7f0000000680)={0x10, 0x0, 0x25dfdbff, 0x80}, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x98, 0x1, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x400}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xda9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @NFACCT_PKTS={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x26e}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8800) lsetxattr$trusted_overlay_nlink(&(0x7f0000000980)='./file1\x00', &(0x7f00000009c0), &(0x7f0000000a00)={'L+', 0xfad}, 0x16, 0x0) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000000a40)) ioctl$RTC_UIE_ON(r5, 0x7003) 03:50:05 executing program 1: setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="1425729eec44ac8be1cfe7fcaa9de05e", 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) prctl$PR_SET_ENDIAN(0x14, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f00000001c0)={0xd, 0x3}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40810) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000340)={0x5f4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf52, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x69}, @device_b}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0xa8, 0x33, @mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3}, @device_a, @broadcast, @from_mac, {0x1, 0x20}}, @ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}}, @val={0x0, 0x4, @random="e488af17"}, @void, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x78, "7fb57b45d050f1479da29866d2f91230893bcae5d60bcc614dee0ddc493d3d8e04cf651a8562f32e2e944b4159a769f0fe0e0c01da9450617d260d4c77560d51c3c00b7c18bb8663e0aaf949f0569dbf206c5bda36870c8d47e782d710fa775ff8b6ad6da17c61c837a8d3f480f0a7f652eae9e47cfbdb39"}]}}, @NL80211_ATTR_FRAME={0x37, 0x33, @mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8e}, @device_a, @broadcast, @from_mac, {0x6, 0x8}}, @ver_80211n={0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @tdls_setup_req={0xc, 0x0, "", 0x7, @void, @void, @void, @val={0x65, 0x12, {@initial, @broadcast, @broadcast}}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x494, 0x33, @mgmt_frame=@assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {}, @device_a, @device_a, @initial, {0x2, 0x9}}, 0x10, 0x9, {0x0, 0x11, @random="fc83f7d63c8f8275807c4716f53973b779"}, @void, @void, [{0xdd, 0xcb, "db74146817692659253320ef3f32604efb1b55958ebe2a53ae54c284133bf4cb98b64581867df1e39482e655a419aa1eb11ebfb43912ab15d6faea639bf2d9c222503c38114fa59b8a7a577040fd2240674103c657c5be84a863dda5dd1233159803aa126d803c99bf85aa4f9c746b35b12465d2e7dc8b470ec99dcfc13a3f540193f799b0a6597656730ee05a71714681ce8952adaf8644f6b57f923168a2282a05065aef3ed78914e80aece5c3bfbfb587eb621b9f88885bbea600de7a4a29c4872b6ec776eeedac3648"}, {0xdd, 0xe0, "a2e72f2d83cc6af5b794149311320d8db54ddc7cc770ae0ea3a057fe63b06a6b6cbf5997119671ba5a93a1cd08e99a65cb1a158583625e0fac798583ac02aff6a82d38835849325250605e202aa0a4ba77309eec63f2372624fd4dc0854cc0de21cbd76417926f945a3b21d111eb2409342f80a44ced48845404bd40ebe971a8f3b45773b2ba5e1e9b1df198cb1b304c793afbeda5e470500faedb4622fe1139ed699ca591f1f9f0584c9336e5a2054ae10db113ec9c7abad00b38b5bfefb9aa1ebb50ddcc7e3bf12946fbff820109098cb6b8506759621080515985c49fad30"}, {0xdd, 0xe9, "0cf0f750d3dd8a8ddc2a08d5617c166e16b7507b96c023f71d6b6f23064fb2da190724ee88b6325a099b7ea2da5fae81a0aa4e2e2297733a1b4f586d2fb6dd58d62751705b4b2a5e80880094d1a741eefb30d68a72215958f2283816d24d899be0fc5cbff2bb48d4eaeaa775cd576c0b16d49889ceeb0afa3c0738ccc8fc89f9a9a6d792a1f8a85ad395147dcca5aca788609b8a46d0e9be96528d323bff6da3381ed4eaaa06b77fc6ff4d2b9e79ce286bdbca238577c05112880a4d919b7556518333a29ba3bd039dcb363a0605851fe126176febd3eccf7a8b89bcb068922b71c825ae26d0a70623"}, {0xdd, 0xb8, "936d410c8d15ddcde08cb4c1536fc3ff2b4af4f8bc17bf1f219529b4372aa1b2e145e993b31e5e788c6d9c0f372bc77c41972e3ad3e99e2d06deceec95ec2caa635b5145d1b3b8cb47fe0ca568eaf5f01420e17d0bf358fdb4678e29b9ad80c00f58e1e35e30178f48e45f12696c6dc353905dc8d95e4b7513fb7d17fef206b361fc1110c64fc3d2ade0687e1c2dd91817b486998fe23e8e4062ff9e0b6e14c58216d806c11a54e636414fa6bd83ff7fea8bfe44b91ed155"}, {0xdd, 0x90, "b6c680edf2fe5614f3279b7ce397238b3a2bc8af44d3ccb25180b40e1d74e6d6e17bb32dc5c5c13a62b943ba59c698f17e88e98b155bd2dde9377496acc927f4bee065b092f0e0e837785e10aa032b8de8f20c8903d547c4b5be4774fb68fe7e4c8d6ea00f796645e29da0870f2fd07070d7363cda9f4ae28f24a5184ed0d900d2f4da31115d4e494227706459fe1117"}, {0xdd, 0x79, "a6d7c81fac2e124feea9f48efa0c286af3ff7ccbd931e56556687e05c013ed585bb1119f62edd35681eb6dd2723c3c7141ce4069ff73802ad9e23636f39a826e160d0213d62b18eb3d4b88e03a711a9bd0b377c6362644de106125b39c1bed63dc447c5f6faf2d138bb03160a0d02ebd17d0262b7afa748fa9"}]}}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x8010}, 0x20040001) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000b80)=0xe8) mount$9p_virtio(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x182201d, &(0x7f0000000bc0)={'trans=virtio,', {[{@access_any}, {@access_client}, {@access_client}, {@privport}, {@uname={'uname', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@version_L}, {@cache_fscache}], [{@euid_lt={'euid<', 0xee00}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '&'}}, {@smackfsroot={'smackfsroot', 0x3d, 'wg0\x00'}}, {@fowner_gt={'fowner>', r2}}]}}) ioctl$TIOCEXCL(r0, 0x540c) mkdirat(r0, &(0x7f0000000cc0)='./file0\x00', 0x3) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000d00)={0x6, 0x1}) write$binfmt_elf64(r0, &(0x7f0000000d40)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x43, 0xda, 0x80, 0x44, 0x2, 0x3e, 0x2, 0xae, 0x40, 0x2d3, 0x913e, 0x1, 0x38, 0x2, 0xcf53, 0x2, 0x3}, [{0x70000000, 0x4, 0x9, 0x7f, 0xfffffffffffffff9, 0x8, 0xfffffffffffffffd, 0x5}, {0x3, 0xf164, 0xa66, 0x4, 0x8, 0x200, 0x1, 0x2}], "81f3e55076da202a0abca46b5bf7c623cc15bd0ea1384be8de2b167b89e00e1086c26227f3191af722b6b78e0a46260b3c8108bfea81b8eb85cdb4f5ddbc1cfae2858f536036d0b3b3476e18922d7969ab87d88a57bb24809fe659ddd7"}, 0x10d) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000e80)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000ec0)="f6cd79aa1344a1ae0e4e1008b0ad8a29", 0x10) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000f00), 0x200000, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6c}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80000001}, @NL80211_ATTR_VENDOR_DATA={0x10, 0xc5, "a96c3e72446e60e4437c5eb3"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x260c0) r4 = open(&(0x7f0000001040)='./file0\x00', 0x4082, 0x0) sendfile(r4, r3, &(0x7f0000001080)=0x5a, 0x5) 03:50:05 executing program 2: sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x3289853b}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xcd0a1402}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x100, 0x70bd27, 0x7, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7e}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008821}, 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "8b7074ed755d3e15", "3494e97cfd62b6138309d2309b0abe4c", "97200eeb", "8032465571206e2b"}, 0x28) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:insmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x129001, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r2) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004001}, 0x90) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000600)=@ccm_128={{0x304}, "5b71b6c22ef59d04", "e9910f663012b487741064f2b4bea8dc", "0f3c866a", "371d6b0b5edb100d"}, 0x28) r4 = syz_open_dev$vcsn(&(0x7f0000000700), 0x6b2, 0x400) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000740), 0x4) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000780)={0x0, 0x1, {0x2b, 0xe, 0x2, 0x4, 0x7, 0xb76, 0x4, 0x0, 0xffffffffffffffff}}) r5 = openat$incfs(r2, &(0x7f00000007c0)='.pending_reads\x00', 0x20080, 0x0) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000800)=0x8) r6 = openat$cgroup_ro(r5, &(0x7f0000000840)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000880)) 03:50:05 executing program 3: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000000)=""/11) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x2) r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000100)=""/49) write$binfmt_misc(r0, &(0x7f0000000140)={'syz0', "20722f38102246c5c38a8dadf05a9d9332931778a74b85b1f1435a5b4c4ff1f9244d2f72e57eb478e5e62aee196938aed3bf0662e94200e17f8b7fc8d7e5f37f50b9a4d2401837f40126275ce7a8"}, 0x52) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1, 0xa, 0x101, 0x0, 0x0, {0x16, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$TCXONC(r0, 0x540a, 0x2) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="d3cc51d225d33f8d025cc90707aa60291b5ec443c0e226f240d2265bf8f761a87753eb47b6a5cf98f587db71e412ec4632e05ba755", 0x35}, {&(0x7f0000000300)="a1060f333fc1b151e7e3362a", 0xc}], 0x2, 0x99, 0x1, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x26c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @mcast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffa0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4c}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "1f6c9937f2063484f75fb353ea22adc6486b69557f722d90729b5cf2ddd224d7351344b8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0xf3, 0x3, "9917ba440c4352326c3b974881ec6faa4d76454507c18641436ee4959a997c280cc6fc40670a06a2f201ea4870fbfb740533d85dc680a86836f3c2ab94211fabe1da8f188b0c7f2b2cdbcbdbc11bbe2f6ca786bcbbcac3984a955064caa19d3012c80c1f8e305b5218816601134f13814a72caf21b60b20bf7ea186418ac50466887b4bc87e57bc088a985753215a32eb6b06f80e72405e827f4fde67ea5235e62a65c4210477ddbfa7651d11eec5475f780ed70f083e04a37fba80b7a18b4ca75d01193fa789ee2f50c00177882c0809409961e3bd3b8e0730b2880dc396b3259e069d262dcda1f13c0f4f031e006"}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4c816}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000005600)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000005640)={0x3}, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000005680), 0x3, 0x20800) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000056c0)={0xf0, {0xc, 0x73, 0x1010000, 0x7, 0xfffffffffffffffb}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000005700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = openat$cgroup_ro(r0, &(0x7f0000005b00)='cpuacct.stat\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000005b40)={0xfffffffffffffff7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "ff9eca43ec5e75"}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000006b40)={r4, 0x800}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000007fc0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) getresgid(&(0x7f0000008040), &(0x7f0000008080), &(0x7f00000080c0)=0x0) lsetxattr$system_posix_acl(&(0x7f0000007b40)='./file0\x00', &(0x7f0000007b80)='system.posix_acl_default\x00', &(0x7f000000e880)={{}, {}, [{0x2, 0x4, 0xee01}], {}, [{0x8, 0x1, r5}, {0x8, 0x0, r6}, {0x8, 0x6}, {0x8, 0x4}, {0x8, 0x5, 0xee01}], {0x10, 0x1}, {0x20, 0x7}}, 0x54, 0x1) [ 86.057049] audit: type=1400 audit(1737690605.205:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:50:05 executing program 4: ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) io_pgetevents(0x0, 0x3, 0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)={r1, r2+10000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x8]}, 0x8}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000002c0)=0xa6, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r3, &(0x7f0000000300)) r4 = dup2(r3, r0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000380)={0x3, 0x1, 0x4, 0x3, 0x4, "0440ad4271b8cac0"}) r5 = dup3(r3, r3, 0x0) fgetxattr(r5, &(0x7f00000003c0)=@random={'btrfs.', '/dev/usbmon#\x00'}, &(0x7f0000000400)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) r7 = gettid() ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, r6, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8}, @val={0xc, 0x99, {0x5, 0x1}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x29}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x41) sched_setattr(r7, &(0x7f0000000600)={0x38, 0x5, 0x11, 0x16, 0x8e6, 0x4, 0x0, 0x7, 0x3000000, 0x7fffffff}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r9, 0x310, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:sendmail_exec_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24080801}, 0x8000) r10 = syz_open_dev$vcsn(&(0x7f00000007c0), 0x3, 0x200080) sendmsg$AUDIT_USER_TTY(r10, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd0, 0x464, 0x200, 0x70bd2a, 0x25dfdbfc, "76a9416a8041087c90462e205604ac8b704dc4d6a5980c080344fbd6254ea5e59ceadf3a28771ff34c930e00bf613c4e6586d06c502653b92cee288b9f4a0b95a7c110d2018a6283b04f6f5ccd7cba64d2fef2e910e75b18955bf21298fd799efad3a17c491373bb4451fedc1093e4cd091d1d9ac4f29a1e01bcbf1166f47aa774e5710d8a26ff17c81027407acfbfb8f22aeff5a15a9594de823fbca2a5ee529fd82a0c539a75c27ce980b49e48413107b7e7aba0d6c2f9022ab10ca60f", ["", "", ""]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 03:50:05 executing program 6: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0xf563) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x1, &(0x7f00000000c0)) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14, 0x800) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) getsockname(r1, &(0x7f00000008c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000940)=0x80) ppoll(&(0x7f0000000980)=[{0xffffffffffffffff, 0x4242}, {0xffffffffffffffff, 0x7c}, {r0, 0x8000}, {r1, 0x100}, {r1, 0x1258}, {r4, 0x4110}], 0x6, &(0x7f00000009c0)={0x0, 0x989680}, &(0x7f0000000a00)={[0xfffffffffffffffb]}, 0x8) pipe2(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008080}, 0x2400c001) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xbc, 0x13, 0x200, 0x70bd26, 0x25dfdbfc, {0x22, 0x39, 0xc1, 0x3, {0x4e23, 0x4e24, [0x5, 0x1, 0x1, 0x101], [0x401, 0xffffffff, 0x10000, 0x6], 0x0, [0x6, 0x9]}, 0x9, 0x10000}, [@INET_DIAG_REQ_BYTECODE={0x16, 0x1, "e5e5025ee385ba72a4db5e1ba497c325f29e"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "6c48412f401a3b9553e7338895c9eb41c9a53f9422154d64d8ade3f2195fd63bc8"}, @INET_DIAG_REQ_BYTECODE={0x30, 0x1, "f3430608fe400bf21ae050a99ee10614f4dcd6d7c53d7748aaa62e4598cfa65482e394a1e7d785e1bbb4c178"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r5, 0x5) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000d00)={0x382, @time={0x8, 0x77}, 0x7, {0xee, 0x3f}, 0x7, 0x0, 0x2}) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1088}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x11c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000f40), 0x8000, 0x0) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, 0x3fa, 0x400, 0x70bd27, 0x25dfdbff, {0x1, 0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000851}, 0x8000) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000001080)={0x62, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x6}]}, 0x10) 03:50:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6_vti0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000004}, 0x20040040) r1 = timerfd_create(0x5, 0x100800) pread64(r1, &(0x7f0000000140)=""/45, 0x2d, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r2 = signalfd(r1, &(0x7f0000000180)={[0x846e]}, 0x8) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20004000) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x50000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f2, 0x200, 0x70bd28, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'veth1_macvtap\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40800}, 0x4) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5b}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0x28}}, 0x20000000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x181000, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000680), 0x10) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000006c0), 0x20000, 0x0) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x84) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000800)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c040}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'veth0\x00'}) 03:50:05 executing program 7: sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x99, 0x4, 0x9, 0x80}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40008c5}, 0x40) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x20c000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x111000, 0x60) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], 0x7) rmdir(&(0x7f00000002c0)='./file0\x00') ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000300)={{r0}, {@void, @actul_num={@void, 0x401, 0x54}}}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000340)={0x0, 0x3, 0x9}) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004080}, 0x4054) socketpair(0x21, 0x6, 0x200, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000004c0), &(0x7f0000000500)=0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r6, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x10001}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x20}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20002001}, 0x40) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x480200, 0x0) ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f0000000700)=""/8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}}, 0x20000) [ 87.560929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.564609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.586079] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.592865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.596150] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.598190] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.698655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.702909] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.707911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.713471] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.716174] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.718106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.758690] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.761041] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.762938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.769749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.773423] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.775657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.834510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.840125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.844508] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.853870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.856279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.858695] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.875421] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.877899] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.885227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.896723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.898008] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.898866] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.900155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.903448] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.906747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.929978] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.945704] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.984777] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.987336] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.997439] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.998811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.000081] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.005003] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.009086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.012989] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.018026] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.031115] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.033725] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.055799] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.075962] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.647018] Bluetooth: hci0: command tx timeout [ 89.773734] Bluetooth: hci1: command tx timeout [ 89.838089] Bluetooth: hci2: command tx timeout [ 89.965615] Bluetooth: hci3: command tx timeout [ 90.030844] Bluetooth: hci4: command tx timeout [ 90.093706] Bluetooth: hci5: command tx timeout [ 90.158661] Bluetooth: hci7: command tx timeout [ 90.159377] Bluetooth: hci6: command tx timeout [ 91.694706] Bluetooth: hci0: command tx timeout [ 91.823093] Bluetooth: hci1: command tx timeout [ 91.886603] Bluetooth: hci2: command tx timeout [ 92.015268] Bluetooth: hci3: command tx timeout [ 92.078602] Bluetooth: hci4: command tx timeout [ 92.142654] Bluetooth: hci5: command tx timeout [ 92.208688] Bluetooth: hci6: command tx timeout [ 92.209140] Bluetooth: hci7: command tx timeout [ 93.741641] Bluetooth: hci0: command tx timeout [ 93.871573] Bluetooth: hci1: command tx timeout [ 93.933885] Bluetooth: hci2: command tx timeout [ 94.061751] Bluetooth: hci3: command tx timeout [ 94.125641] Bluetooth: hci4: command tx timeout [ 94.189635] Bluetooth: hci5: command tx timeout [ 94.254748] Bluetooth: hci7: command tx timeout [ 94.255203] Bluetooth: hci6: command tx timeout [ 95.790730] Bluetooth: hci0: command tx timeout [ 95.918886] Bluetooth: hci1: command tx timeout [ 95.983703] Bluetooth: hci2: command tx timeout [ 96.110870] Bluetooth: hci3: command tx timeout [ 96.174759] Bluetooth: hci4: command tx timeout [ 96.237727] Bluetooth: hci5: command tx timeout [ 96.301853] Bluetooth: hci6: command tx timeout [ 96.302339] Bluetooth: hci7: command tx timeout [ 149.751741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.754661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.757239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.768176] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.773904] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.775405] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.819805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.825824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.828797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.829588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.831219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.833414] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.836820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.841828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.843341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.848180] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.849661] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.851329] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.853377] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.854358] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.857431] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.882352] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.885319] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.887202] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.949840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.953008] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.955482] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.960360] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.971335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.979010] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.979751] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.981204] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.982459] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.008403] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.013752] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.017127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.019663] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.024649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.024924] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.026906] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.040748] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.041710] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.049346] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.070965] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.076803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.079662] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.082051] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.084213] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.853818] Bluetooth: hci0: command tx timeout [ 151.917870] Bluetooth: hci2: command tx timeout [ 151.918924] Bluetooth: hci1: command tx timeout [ 151.981679] Bluetooth: hci3: command tx timeout [ 152.110629] Bluetooth: hci6: command tx timeout [ 152.175653] Bluetooth: hci7: command tx timeout [ 152.175928] Bluetooth: hci5: command tx timeout [ 152.176629] Bluetooth: hci4: command tx timeout [ 153.902634] Bluetooth: hci0: command tx timeout [ 153.966624] Bluetooth: hci1: command tx timeout [ 153.967114] Bluetooth: hci2: command tx timeout [ 154.029660] Bluetooth: hci3: command tx timeout [ 154.157572] Bluetooth: hci6: command tx timeout [ 154.221757] Bluetooth: hci5: command tx timeout [ 154.222249] Bluetooth: hci7: command tx timeout [ 154.223666] Bluetooth: hci4: command tx timeout [ 155.950753] Bluetooth: hci0: command tx timeout [ 156.014618] Bluetooth: hci1: command tx timeout [ 156.015073] Bluetooth: hci2: command tx timeout [ 156.079193] Bluetooth: hci3: command tx timeout [ 156.205658] Bluetooth: hci6: command tx timeout [ 156.269686] Bluetooth: hci7: command tx timeout [ 156.270162] Bluetooth: hci4: command tx timeout [ 156.270959] Bluetooth: hci5: command tx timeout [ 157.997760] Bluetooth: hci0: command tx timeout [ 158.061925] Bluetooth: hci1: command tx timeout [ 158.062549] Bluetooth: hci2: command tx timeout [ 158.125676] Bluetooth: hci3: command tx timeout [ 158.253637] Bluetooth: hci6: command tx timeout [ 158.317774] Bluetooth: hci7: command tx timeout [ 158.317955] Bluetooth: hci5: command tx timeout [ 158.318455] Bluetooth: hci4: command tx timeout [ 211.965574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.975081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.981944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.995199] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.003576] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.006221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.090016] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.100876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.105685] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.111042] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.115616] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.117625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.155249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.164878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.175850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.181485] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.188773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.193967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.230337] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.233387] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.237829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.252991] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.255935] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.259969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.280134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.290039] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.295953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.306898] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.325121] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.326333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.363741] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.369209] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.372343] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.374244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.395334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.396209] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.430714] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.437702] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.441843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.443373] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.444304] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.455349] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.456900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.466765] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.467610] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.471709] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.475460] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.478958] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.062609] Bluetooth: hci0: command tx timeout [ 214.190622] Bluetooth: hci1: command tx timeout [ 214.253640] Bluetooth: hci2: command tx timeout [ 214.318602] Bluetooth: hci3: command tx timeout [ 214.445820] Bluetooth: hci4: command tx timeout [ 214.575759] Bluetooth: hci6: command tx timeout [ 214.576691] Bluetooth: hci5: command tx timeout [ 214.576760] Bluetooth: hci7: command tx timeout [ 216.110657] Bluetooth: hci0: command tx timeout [ 216.238566] Bluetooth: hci1: command tx timeout [ 216.303540] Bluetooth: hci2: command tx timeout [ 216.367605] Bluetooth: hci3: command tx timeout [ 216.494665] Bluetooth: hci4: command tx timeout [ 216.621743] Bluetooth: hci7: command tx timeout [ 216.622023] Bluetooth: hci6: command tx timeout [ 216.622175] Bluetooth: hci5: command tx timeout [ 218.157613] Bluetooth: hci0: command tx timeout [ 218.286344] Bluetooth: hci1: command tx timeout [ 218.349609] Bluetooth: hci2: command tx timeout [ 218.413589] Bluetooth: hci3: command tx timeout [ 218.541674] Bluetooth: hci4: command tx timeout [ 218.669651] Bluetooth: hci5: command tx timeout [ 218.669721] Bluetooth: hci6: command tx timeout [ 218.670101] Bluetooth: hci7: command tx timeout [ 220.205577] Bluetooth: hci0: command tx timeout [ 220.333595] Bluetooth: hci1: command tx timeout [ 220.397715] Bluetooth: hci2: command tx timeout [ 220.462615] Bluetooth: hci3: command tx timeout [ 220.589572] Bluetooth: hci4: command tx timeout [ 220.717613] Bluetooth: hci6: command tx timeout [ 220.717715] Bluetooth: hci7: command tx timeout [ 220.718097] Bluetooth: hci5: command tx timeout [ 274.377857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.381133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.384598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.387348] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.394205] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.398982] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.401463] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.404183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.406395] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.412343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.426842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.439736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.557950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.568891] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.573164] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.575108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.580262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.584167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.593754] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.596040] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.596108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.620994] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.625868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.634569] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.636417] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.644714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.668458] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.689809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.705693] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.711698] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.907322] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.926823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.935373] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.943934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.948713] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.975071] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.979973] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.982808] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.983917] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.014906] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.028022] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.029046] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.032316] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.036264] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.049411] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.063074] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.068202] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.079009] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.462586] Bluetooth: hci0: command tx timeout [ 276.525719] Bluetooth: hci1: command tx timeout [ 276.653667] Bluetooth: hci3: command tx timeout [ 276.654653] Bluetooth: hci2: command tx timeout [ 276.845812] Bluetooth: hci4: command tx timeout [ 277.165654] Bluetooth: hci5: command tx timeout [ 277.229797] Bluetooth: hci7: command tx timeout [ 277.231101] Bluetooth: hci6: command tx timeout [ 278.509639] Bluetooth: hci0: command tx timeout [ 278.573636] Bluetooth: hci1: command tx timeout [ 278.703560] Bluetooth: hci3: command tx timeout [ 278.703701] Bluetooth: hci2: command tx timeout [ 278.895606] Bluetooth: hci4: command tx timeout [ 279.213700] Bluetooth: hci5: command tx timeout [ 279.277619] Bluetooth: hci6: command tx timeout [ 279.277663] Bluetooth: hci7: command tx timeout [ 280.558861] Bluetooth: hci0: command tx timeout [ 280.621607] Bluetooth: hci1: command tx timeout [ 280.749928] Bluetooth: hci3: command tx timeout [ 280.750572] Bluetooth: hci2: command tx timeout [ 280.942026] Bluetooth: hci4: command tx timeout [ 281.264077] Bluetooth: hci5: command tx timeout [ 281.325672] Bluetooth: hci7: command tx timeout [ 281.326227] Bluetooth: hci6: command tx timeout [ 282.605572] Bluetooth: hci0: command tx timeout [ 282.669631] Bluetooth: hci1: command tx timeout [ 282.797587] Bluetooth: hci2: command tx timeout [ 282.798088] Bluetooth: hci3: command tx timeout [ 282.990586] Bluetooth: hci4: command tx timeout [ 283.309703] Bluetooth: hci5: command tx timeout [ 283.373577] Bluetooth: hci7: command tx timeout [ 283.376101] Bluetooth: hci6: command tx timeout [ 334.284209] [ 334.284435] ====================================================== [ 334.284964] WARNING: possible circular locking dependency detected [ 334.285488] 6.13.0-next-20250123 #1 Not tainted [ 334.285890] ------------------------------------------------------ [ 334.287337] kworker/u8:0/11 is trying to acquire lock: [ 334.292838] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.294803] [ 334.294803] but task is already holding lock: [ 334.295905] ffff888017400768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 334.297841] [ 334.297841] which lock already depends on the new lock. [ 334.297841] [ 334.299346] [ 334.299346] the existing dependency chain (in reverse order) is: [ 334.300706] [ 334.300706] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 334.301976] __mutex_lock+0x13d/0xb50 [ 334.302887] wiphy_register+0x1b2e/0x25d0 [ 334.303853] ieee80211_register_hw+0x23a4/0x3d60 [ 334.304899] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 334.306034] init_mac80211_hwsim+0x389/0x870 [ 334.307060] do_one_initcall+0xf9/0x640 [ 334.308032] kernel_init_freeable+0x53d/0x7a0 [ 334.309073] kernel_init+0x1e/0x2d0 [ 334.309923] ret_from_fork+0x48/0x80 [ 334.310774] ret_from_fork_asm+0x1a/0x30 [ 334.311725] [ 334.311725] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 334.312934] __lock_acquire+0x29fd/0x4580 [ 334.313889] lock_acquire+0x19b/0x520 [ 334.314781] __mutex_lock+0x13d/0xb50 [ 334.315671] unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.316896] unregister_netdevice_queue+0x224/0x2e0 [ 334.317977] _cfg80211_unregister_wdev+0x57b/0x700 [ 334.319076] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 334.320180] ieee80211_unregister_hw+0x55/0x3a0 [ 334.321239] hwsim_exit_net+0x3a0/0x730 [ 334.322167] ops_exit_list+0xb3/0x180 [ 334.323046] cleanup_net+0x546/0xad0 [ 334.323927] process_one_work+0x8ee/0x1a10 [ 334.324927] worker_thread+0x674/0xe70 [ 334.325868] kthread+0x3ab/0x720 [ 334.326707] ret_from_fork+0x48/0x80 [ 334.327544] ret_from_fork_asm+0x1a/0x30 [ 334.328612] [ 334.328612] other info that might help us debug this: [ 334.328612] [ 334.330299] Possible unsafe locking scenario: [ 334.330299] [ 334.331540] CPU0 CPU1 [ 334.332409] ---- ---- [ 334.333285] lock(&rdev->wiphy.mtx); [ 334.334045] lock(rtnl_mutex); [ 334.335155] lock(&rdev->wiphy.mtx); [ 334.336332] lock(rtnl_mutex); [ 334.337024] [ 334.337024] *** DEADLOCK *** [ 334.337024] [ 334.338103] 4 locks held by kworker/u8:0/11: [ 334.338905] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 334.340837] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 334.342709] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 334.344459] #3: ffff888017400768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 334.346438] [ 334.346438] stack backtrace: [ 334.347273] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250123 #1 [ 334.347358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 334.347408] Workqueue: netns cleanup_net [ 334.347503] Call Trace: [ 334.347526] [ 334.347553] dump_stack_lvl+0xca/0x120 [ 334.347684] print_circular_bug+0x47b/0x750 [ 334.347790] check_noncircular+0x2e9/0x3c0 [ 334.347884] ? srso_return_thunk+0x5/0x5f [ 334.348016] ? __pfx_check_noncircular+0x10/0x10 [ 334.348111] ? hlock_class+0x4e/0x130 [ 334.348181] ? mark_lock+0xac/0xed0 [ 334.348273] ? srso_return_thunk+0x5/0x5f [ 334.348402] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 334.348505] ? lockdep_lock+0xba/0x1b0 [ 334.348637] ? __pfx_lockdep_lock+0x10/0x10 [ 334.348780] __lock_acquire+0x29fd/0x4580 [ 334.348926] ? __pfx___lock_acquire+0x10/0x10 [ 334.349026] ? lock_release+0x20f/0x6f0 [ 334.349128] ? __pfx_lock_release+0x10/0x10 [ 334.349238] lock_acquire+0x19b/0x520 [ 334.349337] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.349452] ? __pfx_lock_acquire+0x10/0x10 [ 334.349554] ? srso_return_thunk+0x5/0x5f [ 334.349647] ? lock_release+0x20f/0x6f0 [ 334.349718] ? srso_return_thunk+0x5/0x5f [ 334.349810] ? lock_is_held_type+0x9e/0x120 [ 334.349902] ? srso_return_thunk+0x5/0x5f [ 334.350000] __mutex_lock+0x13d/0xb50 [ 334.350088] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.350163] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.350240] ? srso_return_thunk+0x5/0x5f [ 334.350332] ? synchronize_rcu_expedited+0x38a/0x420 [ 334.350404] ? __pfx___mutex_lock+0x10/0x10 [ 334.350493] ? __pfx_autoremove_wake_function+0x10/0x10 [ 334.350582] ? srso_return_thunk+0x5/0x5f [ 334.350674] ? kasan_quarantine_put+0x84/0x1e0 [ 334.350772] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 334.350830] ? srso_return_thunk+0x5/0x5f [ 334.350929] unregister_netdevice_many_notify+0x1612/0x1c80 [ 334.351006] ? __virt_addr_valid+0x2e8/0x5d0 [ 334.351092] ? __pfx_lock_release+0x10/0x10 [ 334.351166] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 334.351243] ? find_held_lock+0x2c/0x110 [ 334.351338] ? srso_return_thunk+0x5/0x5f [ 334.351434] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 334.351532] ? srso_return_thunk+0x5/0x5f [ 334.351624] ? lock_release+0x20f/0x6f0 [ 334.351697] ? __pfx_lock_release+0x10/0x10 [ 334.351768] ? srso_return_thunk+0x5/0x5f [ 334.351860] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 334.351938] ? srso_return_thunk+0x5/0x5f [ 334.352039] unregister_netdevice_queue+0x224/0x2e0 [ 334.352111] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 334.352184] ? up_write+0x195/0x520 [ 334.352274] _cfg80211_unregister_wdev+0x57b/0x700 [ 334.352362] ? srso_return_thunk+0x5/0x5f [ 334.352461] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 334.352534] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 334.352604] ? srso_return_thunk+0x5/0x5f [ 334.352706] ? srso_return_thunk+0x5/0x5f [ 334.352811] ? synchronize_rcu+0x1ff/0x260 [ 334.352909] ieee80211_unregister_hw+0x55/0x3a0 [ 334.352995] hwsim_exit_net+0x3a0/0x730 [ 334.353074] ? __pfx_hwsim_exit_net+0x10/0x10 [ 334.353150] ? srso_return_thunk+0x5/0x5f [ 334.353252] ? netdev_run_todo+0x788/0x1040 [ 334.353340] ? srso_return_thunk+0x5/0x5f [ 334.353445] ? __pfx_hwsim_exit_net+0x10/0x10 [ 334.353524] ops_exit_list+0xb3/0x180 [ 334.353601] cleanup_net+0x546/0xad0 [ 334.353655] ? __pfx_cleanup_net+0x10/0x10 [ 334.353717] process_one_work+0x8ee/0x1a10 [ 334.353790] ? __pfx_lock_acquire+0x10/0x10 [ 334.353840] ? __pfx_process_one_work+0x10/0x10 [ 334.353909] ? srso_return_thunk+0x5/0x5f [ 334.353973] ? move_linked_works+0x172/0x270 [ 334.354019] ? srso_return_thunk+0x5/0x5f [ 334.354075] ? assign_work+0x196/0x240 [ 334.354132] worker_thread+0x674/0xe70 [ 334.354191] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 334.354243] ? __pfx_worker_thread+0x10/0x10 [ 334.354303] kthread+0x3ab/0x720 [ 334.354355] ? __pfx_kthread+0x10/0x10 [ 334.354407] ? srso_return_thunk+0x5/0x5f [ 334.354463] ? finish_task_switch.isra.0+0x206/0x840 [ 334.354514] ? __pfx_kthread+0x10/0x10 [ 334.354568] ret_from_fork+0x48/0x80 [ 334.354601] ? __pfx_kthread+0x10/0x10 [ 334.354653] ret_from_fork_asm+0x1a/0x30 [ 334.354721] [ 335.932203] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.934353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.940902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.948621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.954330] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.956443] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.056927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.059911] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.065762] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.071451] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.074157] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 336.076047] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.134977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.142990] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.149616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.162917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.168849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.171664] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.253155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.261402] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.263542] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.279346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.285216] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.289775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.324370] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.326183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.332620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.336831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 336.338280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.340254] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.346360] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 336.347972] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.356967] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 336.359900] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 336.361657] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.365017] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 336.373983] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.378389] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.384941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.435625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 336.435700] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.461685] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 336.478776] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 336.508712] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.513024] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 336.558751] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 336.572766] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 336.575807] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.030566] Bluetooth: hci0: command tx timeout [ 338.094630] Bluetooth: hci1: command tx timeout [ 338.222627] Bluetooth: hci2: command tx timeout [ 338.349528] Bluetooth: hci3: command tx timeout [ 338.479545] Bluetooth: hci6: command tx timeout [ 338.541572] Bluetooth: hci4: command tx timeout [ 338.605662] Bluetooth: hci5: command tx timeout [ 338.670618] Bluetooth: hci7: command tx timeout [ 340.077528] Bluetooth: hci0: command tx timeout [ 340.141565] Bluetooth: hci1: command tx timeout [ 340.271502] Bluetooth: hci2: command tx timeout [ 340.397591] Bluetooth: hci3: command tx timeout [ 340.525508] Bluetooth: hci6: command tx timeout [ 340.589704] Bluetooth: hci4: command tx timeout [ 340.655376] Bluetooth: hci5: command tx timeout [ 340.717510] Bluetooth: hci7: command tx timeout [ 342.126157] Bluetooth: hci0: command tx timeout [ 342.191493] Bluetooth: hci1: command tx timeout [ 342.317668] Bluetooth: hci2: command tx timeout [ 342.445514] Bluetooth: hci3: command tx timeout [ 342.573673] Bluetooth: hci6: command tx timeout [ 342.637665] Bluetooth: hci4: command tx timeout [ 342.701559] Bluetooth: hci5: command tx timeout [ 342.765616] Bluetooth: hci7: command tx timeout [ 344.174508] Bluetooth: hci0: command tx timeout [ 344.237581] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 03:54:13 Registers: info registers vcpu 0 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283eaa5 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed1001dbb046 R10=0000000000000033 R11=2f72656b726f776b R12=0000000000000033 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283ea90 RIP=ffffffff8283eafd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555654402540 CR3=00000000163ee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c000326190000000c000302ab0 XMM02=000000c000302ed0000000c000302b10 XMM03=000000c0003262d0000000c0003261e0 XMM04=000000c000086090000000c000086060 XMM05=000000c0000860f0000000c0000860c0 XMM06=000000c000086150000000c000086120 XMM07=000000c000085760000000c00005b4d0 XMM08=000000c0000864b0000000c000086480 XMM09=000000c000086510000000c0000864e0 XMM10=000000c000086540000000c00005b530 XMM11=000000c0000865a0000000c000086570 XMM12=000000c000086600000000c0000865d0 XMM13=000000c000086660000000c000086630 XMM14=000000c0000866c0000000c000086690 XMM15=000000c0000a1080000000c0000866f0 info registers vcpu 1 RAX=00000000000315af RBX=0000000000000001 RCX=ffffffff84a8e9d7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b1bba RBP=dffffc0000000000 RSP=ffff88800970fe68 R8 =0000000000000001 R9 =ffffed100d9e6c4a R10=ffff88806cf36253 R11=0000000000000001 R12=ffffffff864043d0 R13=1ffff110012e1fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8f97e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f075882a7e0 CR3=000000000b55e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=822a27c47d60fe984c4642ddd9d40c94 XMM02=00000000000ff1d8ee7587d5db12e8e3 XMM03=0000000000136810f9980df3bdc2dbad XMM04=74218b0ca0880e7400000000000ae988 XMM05=ebfae20747c011c5000000000014e7c8 XMM06=9f165a4fe6c971ad0000000000136918 XMM07=711fbe8126c5d3440000000000136810 XMM08=a3797342f9eb3dd900000000000ff1d8 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000