Warning: Permanently added '[localhost]:18474' (ECDSA) to the list of known hosts. 2025/01/25 19:47:12 fuzzer started 2025/01/25 19:47:12 dialing manager at localhost:40883 syzkaller login: [ 69.986598] cgroup: Unknown subsys name 'net' [ 70.096927] cgroup: Unknown subsys name 'cpuset' [ 70.132148] cgroup: Unknown subsys name 'rlimit' [ 75.297435] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 19:47:30 syscalls: 209 2025/01/25 19:47:30 code coverage: enabled 2025/01/25 19:47:30 comparison tracing: enabled 2025/01/25 19:47:30 extra coverage: enabled 2025/01/25 19:47:30 setuid sandbox: enabled 2025/01/25 19:47:30 namespace sandbox: enabled 2025/01/25 19:47:30 Android sandbox: enabled 2025/01/25 19:47:30 fault injection: enabled 2025/01/25 19:47:30 leak checking: enabled 2025/01/25 19:47:30 net packet injection: enabled 2025/01/25 19:47:30 net device setup: enabled 2025/01/25 19:47:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 19:47:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 19:47:30 USB emulation: enabled 2025/01/25 19:47:30 hci packet injection: enabled 2025/01/25 19:47:30 wifi device emulation: enabled 2025/01/25 19:47:30 802.15.4 emulation: enabled 2025/01/25 19:47:30 fetching corpus: 0, signal 0/0 (executing program) 2025/01/25 19:47:31 starting 8 fuzzer processes 19:47:31 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x200) r1 = syz_open_pts(r0, 0x48000) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x6, 0x7}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000040)={"18f831ca32e178ce493934724b409699", 0x0, 0x0, {0x3f, 0xd}, {0x100000000000000, 0x5}, 0x3, [0x7f, 0x7a7, 0x3, 0x9, 0x5, 0x1ff, 0x3, 0x8, 0xffff, 0x1, 0x0, 0x6, 0x80000001, 0x9, 0x80000000, 0x20]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000180)=0xa38a) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000001c0)={0x5, 0x4}) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000200)={0xc5fe, 0xcb1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x48, 0x0, &(0x7f0000000340)=[@exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/49, 0x31, 0x2, 0x2c}, @flat=@weak_binder={0x77622a85, 0xa}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}}], 0xb8, 0x0, &(0x7f00000003c0)="8af9f0e75c9de66acf31154f4ef2e8014859873fa31ac2904b64976e10a1ddf61fe4bcf8888e9a18c0b70ac07851189f21b5c8bd2edbc9b3808aafffb72f721eb03ff20ab0067211b465648e716af53b212efced40c87571d1a9be3c1eb511ac3f21b7a5ccf73cc2d275600743a1f9ba08dfcbe12c5ffadcfbb8c5018ec4d4f446b6faabd3e88b459525ae1ff3f905c627e452c30c6bcfc3fa35b40996791e2974b0bc909ff51365f579f3514e77bdc6d1fab5482f0665cb"}) r4 = socket$inet(0x2, 0x3, 0x934) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000004c0)="45b43a0bf3db13107c494d3e889c8394", 0x10) r5 = syz_open_pts(0xffffffffffffffff, 0x408800) ioctl$TIOCGPTPEER(r5, 0x5441, 0x4) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000500)=@gcm_256={{0x304}, "5004493ed6f554db", "0fb8d9386add583b60b5e311227d7fbf4cd60ac95121d6097b0305b4678a0c42", "27b216b3", "446e3d39aef98860"}, 0x38) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000580)=0x3) r7 = socket(0x11, 0x3, 0x7) sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x2, 0x9, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4004) 19:47:31 executing program 2: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = accept$inet6(r0, 0x0, &(0x7f00000000c0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x280000, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0xc, 0x6, 0x102, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x24000000) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000280)={0x1f, {{0xa, 0x4e24, 0x200, @ipv4={'\x00', '\xff\xff', @local}, 0xfff}}}, 0x88) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000340)) r3 = accept$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000003c0)=0x1c) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, {0xa, 0x4e23, 0x3a, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0xfff, [0x400, 0xc8de, 0x3ff, 0xe2, 0x0, 0x0, 0x5e75, 0xffffff00]}, 0x5c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "c0312157f931cb79", "f370b3016bce52cd538db0a397480ac493b9f9e3c3b2a5ccaa9cfd13dd05570a", 'i?qr', "76bf94f0895ec4dc"}, 0x38) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000004c0), &(0x7f0000000500)=0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/binder1\x00', 0x2, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x9, 0x4, 0x301, 0x70bd2b, 0x25dfdbfe, {0xc, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x440c2, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x210, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) recvmsg(r2, &(0x7f0000000d80)={&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000840)=""/197, 0xc5}, {&(0x7f0000000940)=""/28, 0x1c}, {&(0x7f0000000980)=""/213, 0xd5}, {&(0x7f0000000a80)=""/229, 0xe5}, {&(0x7f0000000b80)=""/72, 0x48}], 0x5, &(0x7f0000000c80)=""/195, 0xc3}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000dc0)=[@mss={0x2, 0x69}, @sack_perm, @sack_perm, @sack_perm, @mss={0x2, 0x2}, @timestamp], 0x6) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000e00)={0x1, 0xc0000000, 0x6, 0x0, 0x7}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) 19:47:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000001880)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001600)={0x240, 0x1, 0x3, 0x0, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x5}}, @NFQA_CT={0xf8, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0xc, 0x17, [0x0, 0x9]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x78, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0xe8}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, @NFQA_CT={0x58, 0xb, 0x0, 0x1, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x6, 0xc568, 0x100, 0xe4c, 0x1, 0x22a]}, @CTA_NAT_DST={0x4}, @CTA_MARK={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, @NFQA_CT={0x3c, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x3}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}, @NFQA_EXP={0x1c, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffffb}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1}}, @NFQA_PAYLOAD={0x4e, 0xa, "606459eefc819feb31ee7e4bd492a71d3c811fb84608144f16a258d90c09ee7d7644edb6ac75921ed6a4508cae170bfead5f02488322bf8bab83a61f888b882f68c385d4e493fce1bd65"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffb}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1ff}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000044}, 0x8559eb393c6e2ea8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x30, 0x6, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000001a00)=@ccm_128={{0x303}, "5933f9ef2add7437", "65b7753c85cae5ea3a2ea6f477f41537", "925c359a", "a8769710c300f93b"}, 0x28) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x30, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0xc080) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20008000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c40), 0x800, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x4c, r4, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x4e}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xe89d}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400000c}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x2c, r6, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000085}, 0x20000001) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x2c, r4, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x804) syz_io_uring_submit(0x0, 0x0, &(0x7f0000003780)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f0000003740)={&(0x7f0000002180)=@can, 0x80, &(0x7f0000002680)=[{&(0x7f0000002200)=""/47, 0x2f}, {&(0x7f0000002240)=""/143, 0x8f}, {&(0x7f0000002300)=""/100, 0x64}, {&(0x7f0000002380)=""/177, 0xb1}, {&(0x7f0000002440)=""/17, 0x11}, {&(0x7f0000002480)=""/55, 0x37}, {&(0x7f00000024c0)=""/81, 0x51}, {&(0x7f0000002540)}, {&(0x7f0000002580)=""/138, 0x8a}, {&(0x7f0000002640)=""/45, 0x2d}], 0xa, &(0x7f0000002740)=""/4096, 0x1000}, 0x0, 0x40010000, 0x1b2dcde6e102f2bb, {0x3}}, 0x7) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000037c0), 0x900, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r8, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) [ 88.953714] audit: type=1400 audit(1737834451.995:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:47:32 executing program 4: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/110) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0x1f, 0x4) r0 = shmget(0x3, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(r0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1018000, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_any}, {@version_L}]}}) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) r2 = socket$inet6(0xa, 0x2, 0x8001) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x2, 0x4000, @fd=r2, 0x2, &(0x7f00000002c0)="54c9960886", 0x5, 0x18, 0x1}, 0x80000000) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e24, 0x1, @private2, 0xe8}, {0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x7, [0x0, 0x7, 0xb7, 0x1f, 0x0, 0xfff, 0xb661, 0x42]}, 0x5c) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r3, 0x301, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffda35}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x200408c1) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000540)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000580)=[@sack_perm, @sack_perm, @mss={0x2, 0x10001}, @timestamp, @window={0x3, 0x3, 0x3}, @mss, @window={0x3, 0x3, 0x7f}, @sack_perm, @window={0x3, 0x1, 0x101}, @mss={0x2, 0x1}], 0xa) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x400, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb4, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x12}}}}, [@NL80211_ATTR_SSID={0x1c, 0x34, @random="b55f4dbeaa3c55822738df155b900b686c3eb3724ae66ecf"}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3f}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3b}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x10}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x2}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xa}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xa}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x1}]}]}, 0xb4}}, 0x11) 19:47:32 executing program 6: r0 = fork() sched_rr_get_interval(r0, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x100, 0x8, 0x4, 0x9fa5, 0x9}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$inet(0x2, 0x80000, 0x97) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x9, 0x1}, @window={0x3, 0xfffd}, @timestamp], 0x3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x107, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x101}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fork() r4 = socket(0x15, 0x800, 0x1ff) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000002c0)="09d92e0a0f9bf4521116fdbc318421c9", 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, "651ee97aecf35cd5", "4d69aea885fc4eddce717e8f375c63c8", "ab05c2ec", "dddd9988bddef5c5"}, 0x28) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x10) clock_gettime(0x1, &(0x7f0000000580)) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f00000005c0)=""/9, &(0x7f0000000600)=0x9) 19:47:32 executing program 7: shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/165) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c, 0x800) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0xfffff7ed, {{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}}}, 0x88) r1 = socket(0xb, 0x4, 0x6) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000200)={0x3b, 0x1c, '\x00', [@generic={0x0, 0xe0, "1b3075fa5f926d8a70e47712ca939d08b3947cf649326eb0c3c40bd54d66e1133b6bd71145e3f8b0eba1f62a54f403479293a2a1e1c2138a6f1cd2d9744fd888ef91facfa30eda548d7661ef8f8d2fd3b183344692ac0beac66a62429108864f1c792b6c35eccc0c1f167d936312f025eddb8bbf991c76bdd8ad49e129d6e6d91b991885ba6f6cfb26b4438b1d24dad09a0360883d93fea5fe8a211efda75cb47737ff90c62f783defc38980a96160edd7209805a822f2a8640d9410fe13925a26f483fab5ea04650618a9519b18366c540497f9de4021a2c9ac5ccebf377d80"}]}, 0xf0) r2 = accept4$inet6(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x1c, 0x40800) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000540)={'ah\x00'}, &(0x7f0000000580)=0x1e) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000005c0)={0x71a0, {{0xa, 0x4e24, 0x1000, @mcast2, 0x3}}}, 0x88) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x220000, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000006c0)=0xfffff36c) ioctl$TCSBRKP(r3, 0x5425, 0x8000) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x420000, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0xff) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000840)={0x2, {{0xa, 0x4e23, 0x7fffffff, @empty, 0x60}}}, 0x88) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000900)={0x7ff}) ioctl$TCSBRKP(r3, 0x5425, 0x7) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000940)={0x32, 0x1e, '\x00', [@jumbo, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1, @jumbo={0xc2, 0x4, 0x9}, @pad1, @generic={0x2, 0xbb, "99524c348a33c1906bf6d2765c04e80aaaebb65ddfbcb3e999181015ffd8555ddad180282f1ddf7c27969a78784b80ad070dbdb22786d21e9f2cc2ac81c7429ee2ffc1b4c8d114654991de237aa6d5e486a9a43d1df5ebe89728615d589e9684487c1f876cdec9eae02b3caacad6c84845114b5920972ac639b6452f459e21ffad62070cc5e5905481744d266562ed519439736a8df915d22154edfc6d9e447e0dacdf275367082759c17ab3f67a091cdb8db131864a9151424f93"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000a40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001c40)={r5, 0x0, "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", "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"}) 19:47:32 executing program 5: setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "06f1af0fd640cf05", "4abf0b180852192d2d162dd4d0b61028b792007c3bfedcebbc2fb2e2b155088d", "f311eb77", "03aced28275bb3f8"}, 0x38) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="43ef3dbace6b2fb5772676a65c578f0a", 0x10) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x304}, "4b33c50eaa489b11", "016565be1880d1dfc9b8f3d8e4b1da20", "942f034c", "4c3d339342cc8eaf"}, 0x28) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f00000000c0)=""/199, &(0x7f00000001c0)=0xc7) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "962abe8e197b55a0", "12210e7a2d9fbb0c0be1a53383ade7bbc222d5f4dc9cf2ba797cd5aa9ac42ba3", "1eda67b1", "cec5eb922f5db4e4"}, 0x38) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x220002, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000001680)=@gcm_128={{0x303}, "e785d6e3ec679ef4", "c750e5c36a4bdd50127cc5ba4ab4db17", "b9ad2230", "c5ccc3e6d77c1a45"}, 0x28) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000016c0)="123bfe8da010ca36ab29492a43af0867", 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000001700)="2eab65b92779f422142edd5ed26160", 0xf) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = inotify_init1(0x80800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001740)={0x0, ""/256, 0x0, 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000001940)="a88ad16d4057f773428f5906217e63b8", 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000019c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x8, &(0x7f0000001980)={0x0, 0x3938700}, 0x1, 0x1}, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001a00)={@private2, 0x19, 0x1, 0xff, 0xb, 0x101, 0xfff}, 0x20) r7 = epoll_create1(0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000001a40)) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001a80)={{0x0, 0x6, 0x9, 0x6, 0x3b3, 0x3f, 0x1ff, 0x7a, 0x4693, 0x8001, 0x7ff, 0x0, 0x7, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000081e80)={0x7, [{r4, r6}, {r8, r6}, {}, {r5, r6}, {r5, r6}, {r4, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {r5}, {0x0, r6}, {r5, r6}, {r5}, {r5}, {r4, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4}, {}, {r4}, {r5}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r4, r6}, {r4, r6}, {r4, r6}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r4, r6}, {r4, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5}, {r5, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {r4}, {r5}, {r4}, {r5}, {r5, r6}, {r4}, {0x0, r6}, {r4}, {r4}, {r5}, {r4}, {0x0, r6}, {r5, r6}, {r4}, {0x0, r6}, {r5}, {r4, r6}, {r5}, {r4, r6}, {r4}, {r4, r6}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {r4, r6}, {r5, r6}, {r5}, {r4, r6}, {0x0, r6}, {r4, r6}, {r4, r6}, {0x0, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r5, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {r4}, {}, {}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4, r6}, {r4, r6}, {r4, r6}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {r5, r6}, {r4, r6}, {r5, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {r4, r6}, {r5, r6}, {r5, r6}, {r4}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {0x0, r6}, {r5}, {r5, r6}, {r5}, {0x0, r6}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {r4}, {}, {}, {r5, r6}, {r4, r6}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r5, r6}, {r5}, {r5}, {r5}, {r4}, {r4, r6}, {0x0, r6}, {}, {r4}, {}, {0x0, r6}, {r5}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5, r6}, {0x0, r6}, {}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {r5, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {0x0, r6}, {r4}, {r4, r6}, {r4}, {r4}, {r4}, {r5}, {r5, r6}, {0x0, r6}, {r5, r6}, {r5, r6}, {r5}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r4, r6}, {r4, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r5, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r4, r6}, {r5}, {}, {r4, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r4}, {r4, r6}, {}, {0x0, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {r5}, {}, {r4, r6}, {r5, r6}, {r5}], 0x6f, "63fc02d1e01a3e"}) 19:47:32 executing program 1: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x20}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x58}}, 0x4000080) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x402000, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x98}, 0x1, 0x0, 0x0, 0x20}, 0x5f05c84ec850f39f) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80c1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r10, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4840) r11 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000880)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000a80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000c80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000000e80)={{r7, 0x4, 0x4, 0x0, 0x7, 0x1, 0x8001, 0x7, 0x7ff, 0x5, 0x6, 0x5, 0x7fff, 0x80000001, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r11, 0xd000943d, &(0x7f0000077480)={0x552, [{r12, r9}, {r8, r13}, {r8, r14}, {r15, r9}, {0x0, r9}, {}, {0x0, r9}, {r7}, {r7, r9}, {r7, r9}, {0x0, r9}, {r8, r9}, {r8}, {0x0, r9}, {r7, r9}, {r8}, {r7, r9}, {r8}, {r7, r9}, {}, {0x0, r9}, {}, {r7}, {r8}, {r7}, {r7}, {r7, r9}, {}, {0x0, r9}, {r7, r9}, {r8}, {r8}, {r8, r9}, {r8}, {0x0, r9}, {r8, r9}, {r8, r9}, {}, {r7}, {r8, r9}, {r8, r9}, {r8}, {r7, r9}, {r8}, {r8, r9}, {}, {r7}, {r8}, {r8, r9}, {r8}, {r8}, {r7}, {r8}, {r8}, {r8}, {r8, r9}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {}, {r7}, {r7}, {r8, r9}, {}, {0x0, r9}, {r7}, {}, {0x0, r9}, {r8}, {r8, r9}, {r7, r9}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8}, {r7, r9}, {r8}, {r8, r9}, {r8, r9}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {r8}, {r8, r9}, {}, {r7}, {r8, r9}, {0x0, r9}, {r8, r9}, {0x0, r9}, {}, {}, {r8}, {r8}, {r7}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {r7, r9}, {0x0, r9}, {r7, r9}, {}, {}, {r8}, {0x0, r9}, {r7, r9}, {r7}, {}, {0x0, r9}, {r8, r9}, {}, {r8, r9}, {}, {r8, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {r8}, {r8, r9}, {0x0, r9}, {r8}, {r7, r9}, {0x0, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r8}, {r7, r9}, {}, {r7, r9}, {r7, r9}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8}, {r8, r9}, {0x0, r9}, {}, {0x0, r9}, {r8, r9}, {r7}, {r8}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r8}, {r8, r9}, {r8}, {}, {r8, r9}, {0x0, r9}, {0x0, r9}, {r8}, {r7, r9}, {r8}, {r7}, {}, {r7, r9}, {}, {0x0, r9}, {r7}, {r8}, {r8, r9}, {}, {r7}, {r8}, {r8, r9}, {0x0, r9}, {r8}, {r8, r9}, {0x0, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r8}, {r7, r9}, {r8}, {r7, r9}, {r8, r9}, {}, {r8, r9}, {0x0, r9}, {0x0, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {}, {r7, r9}, {}, {r8, r9}, {r7, r9}, {}, {}, {r8, r9}, {0x0, r9}, {}, {0x0, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {}, {r7}, {r7}, {0x0, r9}, {r8}, {r8, r9}, {}, {r8}, {r7}, {r7, r9}, {r8, r9}, {0x0, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7}, {0x0, r9}, {r8}, {0x0, r9}, {r7, r9}, {r8}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8}], 0x2, "becc43557f08a4"}) [ 90.444696] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.459555] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.462605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.467105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.471531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.475287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.483644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.491489] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.495800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.501832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.515210] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.518317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.527876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.547291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.558149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.569114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.576375] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.583707] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.586106] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.588560] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.590651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.594196] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.595741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.601755] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.603405] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.606779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.608185] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.610019] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.611630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.618763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.620910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.631614] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.639430] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.661167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.692357] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.695782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.906470] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.919254] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.919266] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.922544] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.930551] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.935150] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.939708] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.941819] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.950729] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.963585] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.972498] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.978237] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.592282] Bluetooth: hci0: command tx timeout [ 92.592288] Bluetooth: hci1: command tx timeout [ 92.654448] Bluetooth: hci5: command tx timeout [ 92.655341] Bluetooth: hci4: command tx timeout [ 92.719256] Bluetooth: hci2: command tx timeout [ 92.782622] Bluetooth: hci3: command tx timeout [ 93.038310] Bluetooth: hci6: command tx timeout [ 93.102103] Bluetooth: hci7: command tx timeout [ 94.638058] Bluetooth: hci1: command tx timeout [ 94.638523] Bluetooth: hci0: command tx timeout [ 94.702074] Bluetooth: hci4: command tx timeout [ 94.702207] Bluetooth: hci5: command tx timeout [ 94.766162] Bluetooth: hci2: command tx timeout [ 94.830027] Bluetooth: hci3: command tx timeout [ 95.086241] Bluetooth: hci6: command tx timeout [ 95.150513] Bluetooth: hci7: command tx timeout [ 96.687000] Bluetooth: hci0: command tx timeout [ 96.687059] Bluetooth: hci1: command tx timeout [ 96.750148] Bluetooth: hci5: command tx timeout [ 96.750621] Bluetooth: hci4: command tx timeout [ 96.814046] Bluetooth: hci2: command tx timeout [ 96.878182] Bluetooth: hci3: command tx timeout [ 97.136000] Bluetooth: hci6: command tx timeout [ 97.198085] Bluetooth: hci7: command tx timeout [ 98.734047] Bluetooth: hci0: command tx timeout [ 98.735106] Bluetooth: hci1: command tx timeout [ 98.798107] Bluetooth: hci5: command tx timeout [ 98.799385] Bluetooth: hci4: command tx timeout [ 98.862028] Bluetooth: hci2: command tx timeout [ 98.927021] Bluetooth: hci3: command tx timeout [ 99.183062] Bluetooth: hci6: command tx timeout [ 99.246859] Bluetooth: hci7: command tx timeout [ 152.502404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.504129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.505448] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.509160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.510783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.512034] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.649697] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.653401] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.655758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.661318] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.664262] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.666833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.711362] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.716915] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.718907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.725144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.729211] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.731459] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.769199] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.772698] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.775625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.782522] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.785472] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.787573] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.815076] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.835369] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.842499] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.851253] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.852178] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.858154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.859791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.863720] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.865143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.866272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.875611] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.882254] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.897076] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.906668] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.914721] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.983057] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.009263] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.018522] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.019786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.080343] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.086305] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.104256] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.112132] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.113636] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.542218] Bluetooth: hci0: command tx timeout [ 154.734131] Bluetooth: hci1: command tx timeout [ 154.798161] Bluetooth: hci2: command tx timeout [ 154.862052] Bluetooth: hci3: command tx timeout [ 154.926050] Bluetooth: hci4: command tx timeout [ 155.118137] Bluetooth: hci6: command tx timeout [ 155.119147] Bluetooth: hci5: command tx timeout [ 155.182034] Bluetooth: hci7: command tx timeout [ 156.590198] Bluetooth: hci0: command tx timeout [ 156.784990] Bluetooth: hci1: command tx timeout [ 156.846001] Bluetooth: hci2: command tx timeout [ 156.910248] Bluetooth: hci3: command tx timeout [ 156.974198] Bluetooth: hci4: command tx timeout [ 157.166263] Bluetooth: hci6: command tx timeout [ 157.166737] Bluetooth: hci5: command tx timeout [ 157.230020] Bluetooth: hci7: command tx timeout [ 158.638048] Bluetooth: hci0: command tx timeout [ 158.830021] Bluetooth: hci1: command tx timeout [ 158.895112] Bluetooth: hci2: command tx timeout [ 158.959203] Bluetooth: hci3: command tx timeout [ 159.022113] Bluetooth: hci4: command tx timeout [ 159.214046] Bluetooth: hci6: command tx timeout [ 159.214547] Bluetooth: hci5: command tx timeout [ 159.278042] Bluetooth: hci7: command tx timeout [ 160.686080] Bluetooth: hci0: command tx timeout [ 160.878124] Bluetooth: hci1: command tx timeout [ 160.942121] Bluetooth: hci2: command tx timeout [ 161.006077] Bluetooth: hci3: command tx timeout [ 161.070404] Bluetooth: hci4: command tx timeout [ 161.262497] Bluetooth: hci6: command tx timeout [ 161.263024] Bluetooth: hci5: command tx timeout [ 161.326317] Bluetooth: hci7: command tx timeout [ 214.848854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.851983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.857325] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.863409] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.870500] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.871673] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.970442] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.975124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.978123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.992233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.996178] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.999014] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.059502] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.065543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.069292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.075710] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.080598] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.084434] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.110442] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.114849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.126156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.127126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.131979] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.140391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.149994] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.159313] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.161440] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.163200] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.178358] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.184529] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.219771] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.229346] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.239416] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.246620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.257315] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.264301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.364854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.370845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.378268] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.457721] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.473337] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.475331] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.477400] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.496242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.496989] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.504332] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.509130] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.523346] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.942042] Bluetooth: hci0: command tx timeout [ 217.070207] Bluetooth: hci1: command tx timeout [ 217.136042] Bluetooth: hci2: command tx timeout [ 217.262172] Bluetooth: hci3: command tx timeout [ 217.262196] Bluetooth: hci4: command tx timeout [ 217.390120] Bluetooth: hci5: command tx timeout [ 217.582011] Bluetooth: hci7: command tx timeout [ 217.582099] Bluetooth: hci6: command tx timeout [ 218.990972] Bluetooth: hci0: command tx timeout [ 219.117992] Bluetooth: hci1: command tx timeout [ 219.182001] Bluetooth: hci2: command tx timeout [ 219.310003] Bluetooth: hci3: command tx timeout [ 219.311959] Bluetooth: hci4: command tx timeout [ 219.441135] Bluetooth: hci5: command tx timeout [ 219.630164] Bluetooth: hci7: command tx timeout [ 219.630187] Bluetooth: hci6: command tx timeout [ 221.038295] Bluetooth: hci0: command tx timeout [ 221.166199] Bluetooth: hci1: command tx timeout [ 221.231027] Bluetooth: hci2: command tx timeout [ 221.358099] Bluetooth: hci4: command tx timeout [ 221.358335] Bluetooth: hci3: command tx timeout [ 221.486033] Bluetooth: hci5: command tx timeout [ 221.678052] Bluetooth: hci7: command tx timeout [ 221.678082] Bluetooth: hci6: command tx timeout [ 223.085993] Bluetooth: hci0: command tx timeout [ 223.214992] Bluetooth: hci1: command tx timeout [ 223.278096] Bluetooth: hci2: command tx timeout [ 223.406038] Bluetooth: hci4: command tx timeout [ 223.406072] Bluetooth: hci3: command tx timeout [ 223.534022] Bluetooth: hci5: command tx timeout [ 223.726133] Bluetooth: hci6: command tx timeout [ 223.726159] Bluetooth: hci7: command tx timeout [ 277.118110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.121452] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.135226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.140051] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.142525] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.146251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.179223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.192784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.194719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.197466] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.201738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.205017] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.206997] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.220557] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.222855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.227494] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.238705] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.242442] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.326993] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.334208] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.356357] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.365378] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.371790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.377355] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.380387] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.385588] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.389122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.392408] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.397146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.409471] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.413432] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.416603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.444490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.453297] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.488537] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.502358] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.511346] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.519149] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.550404] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.553278] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.561248] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.572008] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.575437] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.598086] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.601501] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.603829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.620316] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.631862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.215016] Bluetooth: hci0: command tx timeout [ 279.279003] Bluetooth: hci2: command tx timeout [ 279.279775] Bluetooth: hci1: command tx timeout [ 279.471078] Bluetooth: hci3: command tx timeout [ 279.535451] Bluetooth: hci4: command tx timeout [ 279.662970] Bluetooth: hci5: command tx timeout [ 279.726367] Bluetooth: hci7: command tx timeout [ 279.726511] Bluetooth: hci6: command tx timeout [ 281.262039] Bluetooth: hci0: command tx timeout [ 281.327074] Bluetooth: hci1: command tx timeout [ 281.327117] Bluetooth: hci2: command tx timeout [ 281.518045] Bluetooth: hci3: command tx timeout [ 281.582955] Bluetooth: hci4: command tx timeout [ 281.710695] Bluetooth: hci5: command tx timeout [ 281.774051] Bluetooth: hci7: command tx timeout [ 281.776152] Bluetooth: hci6: command tx timeout [ 283.311025] Bluetooth: hci0: command tx timeout [ 283.374007] Bluetooth: hci2: command tx timeout [ 283.374472] Bluetooth: hci1: command tx timeout [ 283.566034] Bluetooth: hci3: command tx timeout [ 283.630036] Bluetooth: hci4: command tx timeout [ 283.758467] Bluetooth: hci5: command tx timeout [ 283.822952] Bluetooth: hci6: command tx timeout [ 283.823033] Bluetooth: hci7: command tx timeout [ 285.358072] Bluetooth: hci0: command tx timeout [ 285.422027] Bluetooth: hci1: command tx timeout [ 285.422096] Bluetooth: hci2: command tx timeout [ 285.614340] Bluetooth: hci3: command tx timeout [ 285.678042] Bluetooth: hci4: command tx timeout [ 285.806014] Bluetooth: hci5: command tx timeout [ 285.870104] Bluetooth: hci7: command tx timeout [ 285.870561] Bluetooth: hci6: command tx timeout [ 334.805708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.806965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.059969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.060597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.389953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.390631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.699171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.699837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.569467] [ 336.569709] ====================================================== [ 336.570242] WARNING: possible circular locking dependency detected [ 336.570762] 6.13.0-next-20250124 #1 Not tainted [ 336.571164] ------------------------------------------------------ [ 336.571682] kworker/u8:1/65 is trying to acquire lock: [ 336.572961] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.575185] [ 336.575185] but task is already holding lock: [ 336.576889] ffff88802e7f0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 336.578876] [ 336.578876] which lock already depends on the new lock. [ 336.578876] [ 336.580617] [ 336.580617] the existing dependency chain (in reverse order) is: [ 336.581235] [ 336.581235] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 336.581814] __mutex_lock+0x13d/0xb50 [ 336.582231] wiphy_register+0x1b2e/0x25d0 [ 336.582669] ieee80211_register_hw+0x23a4/0x3d60 [ 336.583144] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 336.583643] init_mac80211_hwsim+0x389/0x870 [ 336.584106] do_one_initcall+0xf9/0x640 [ 336.584535] kernel_init_freeable+0x53d/0x7a0 [ 336.584999] kernel_init+0x1e/0x2d0 [ 336.585383] ret_from_fork+0x48/0x80 [ 336.585760] ret_from_fork_asm+0x1a/0x30 [ 336.586196] [ 336.586196] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 336.586727] __lock_acquire+0x29fd/0x4580 [ 336.587156] lock_acquire+0x19b/0x520 [ 336.587555] __mutex_lock+0x13d/0xb50 [ 336.587958] unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.588494] unregister_netdevice_queue+0x224/0x2e0 [ 336.588977] _cfg80211_unregister_wdev+0x57b/0x700 [ 336.589465] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 336.589953] ieee80211_unregister_hw+0x55/0x3a0 [ 336.590411] hwsim_exit_net+0x3a0/0x730 [ 336.590814] ops_exit_list+0xb3/0x180 [ 336.591203] cleanup_net+0x546/0xad0 [ 336.591587] process_one_work+0x8ee/0x1a10 [ 336.592028] worker_thread+0x674/0xe70 [ 336.592438] kthread+0x3ab/0x720 [ 336.592807] ret_from_fork+0x48/0x80 [ 336.593177] ret_from_fork_asm+0x1a/0x30 [ 336.593601] [ 336.593601] other info that might help us debug this: [ 336.593601] [ 336.594248] Possible unsafe locking scenario: [ 336.594248] [ 336.594739] CPU0 CPU1 [ 336.595127] ---- ---- [ 336.595519] lock(&rdev->wiphy.mtx); [ 336.595864] lock(rtnl_mutex); [ 336.596362] lock(&rdev->wiphy.mtx); [ 336.596897] lock(rtnl_mutex); [ 336.597204] [ 336.597204] *** DEADLOCK *** [ 336.597204] [ 336.597705] 4 locks held by kworker/u8:1/65: [ 336.598091] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 336.598978] #1: ffff88800bca7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 336.599831] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 336.600620] #3: ffff88802e7f0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 336.601506] [ 336.601506] stack backtrace: [ 336.601885] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250124 #1 [ 336.601924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 336.601947] Workqueue: netns cleanup_net [ 336.601996] Call Trace: [ 336.602006] [ 336.602017] dump_stack_lvl+0xca/0x120 [ 336.602079] print_circular_bug+0x47b/0x750 [ 336.602126] check_noncircular+0x2e9/0x3c0 [ 336.602169] ? __pfx_check_noncircular+0x10/0x10 [ 336.602213] ? hlock_class+0x4e/0x130 [ 336.602244] ? srso_return_thunk+0x5/0x5f [ 336.602301] ? mark_lock+0xac/0xed0 [ 336.602346] ? lockdep_lock+0xba/0x1b0 [ 336.602404] ? __pfx_lockdep_lock+0x10/0x10 [ 336.602466] __lock_acquire+0x29fd/0x4580 [ 336.602520] ? __pfx___lock_acquire+0x10/0x10 [ 336.602564] ? lock_release+0x20f/0x6f0 [ 336.602608] ? __pfx_lock_release+0x10/0x10 [ 336.602651] ? srso_return_thunk+0x5/0x5f [ 336.602711] lock_acquire+0x19b/0x520 [ 336.602754] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.602803] ? __pfx_lock_acquire+0x10/0x10 [ 336.602847] ? __pfx_lock_release+0x10/0x10 [ 336.602890] ? __pfx_try_to_wake_up+0x10/0x10 [ 336.602934] ? srso_return_thunk+0x5/0x5f [ 336.602989] ? lock_is_held_type+0x9e/0x120 [ 336.603044] ? srso_return_thunk+0x5/0x5f [ 336.603104] __mutex_lock+0x13d/0xb50 [ 336.603156] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.603201] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.603247] ? srso_return_thunk+0x5/0x5f [ 336.603302] ? synchronize_rcu_expedited+0x38a/0x420 [ 336.603347] ? __pfx___mutex_lock+0x10/0x10 [ 336.603401] ? srso_return_thunk+0x5/0x5f [ 336.603458] ? srso_return_thunk+0x5/0x5f [ 336.603513] ? kasan_quarantine_put+0x84/0x1e0 [ 336.603575] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 336.603610] ? srso_return_thunk+0x5/0x5f [ 336.603670] unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.603715] ? __virt_addr_valid+0x2e8/0x5d0 [ 336.603768] ? __pfx_lock_release+0x10/0x10 [ 336.603813] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 336.603859] ? find_held_lock+0x2c/0x110 [ 336.603917] ? srso_return_thunk+0x5/0x5f [ 336.603975] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 336.604036] ? srso_return_thunk+0x5/0x5f [ 336.604091] ? lock_release+0x20f/0x6f0 [ 336.604136] ? __pfx_lock_release+0x10/0x10 [ 336.604179] ? srso_return_thunk+0x5/0x5f [ 336.604234] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 336.604281] ? srso_return_thunk+0x5/0x5f [ 336.604342] unregister_netdevice_queue+0x224/0x2e0 [ 336.604385] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 336.604429] ? up_write+0x195/0x520 [ 336.604484] _cfg80211_unregister_wdev+0x57b/0x700 [ 336.604536] ? srso_return_thunk+0x5/0x5f [ 336.604595] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 336.604633] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 336.604672] ? srso_return_thunk+0x5/0x5f [ 336.604727] ? srso_return_thunk+0x5/0x5f [ 336.604782] ? synchronize_rcu+0x1ff/0x260 [ 336.604825] ieee80211_unregister_hw+0x55/0x3a0 [ 336.604869] hwsim_exit_net+0x3a0/0x730 [ 336.604911] ? __pfx_hwsim_exit_net+0x10/0x10 [ 336.604952] ? srso_return_thunk+0x5/0x5f [ 336.605007] ? netdev_run_todo+0x788/0x1040 [ 336.605056] ? __pfx_hwsim_exit_net+0x10/0x10 [ 336.605099] ops_exit_list+0xb3/0x180 [ 336.605141] cleanup_net+0x546/0xad0 [ 336.605186] ? __pfx_cleanup_net+0x10/0x10 [ 336.605239] process_one_work+0x8ee/0x1a10 [ 336.605305] ? __pfx_lock_acquire+0x10/0x10 [ 336.605350] ? __pfx_process_one_work+0x10/0x10 [ 336.605408] ? srso_return_thunk+0x5/0x5f [ 336.605464] ? move_linked_works+0x172/0x270 [ 336.605508] ? srso_return_thunk+0x5/0x5f [ 336.605564] ? assign_work+0x196/0x240 [ 336.605621] worker_thread+0x674/0xe70 [ 336.605680] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 336.605732] ? srso_return_thunk+0x5/0x5f [ 336.605787] ? __pfx_worker_thread+0x10/0x10 [ 336.605847] kthread+0x3ab/0x720 [ 336.605899] ? __pfx_kthread+0x10/0x10 [ 336.605960] ? srso_return_thunk+0x5/0x5f [ 336.606015] ? finish_task_switch.isra.0+0x206/0x840 [ 336.606067] ? __pfx_kthread+0x10/0x10 [ 336.606121] ret_from_fork+0x48/0x80 [ 336.606152] ? __pfx_kthread+0x10/0x10 [ 336.606205] ret_from_fork_asm+0x1a/0x30 [ 336.606272] [ 338.869540] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.871691] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.876473] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.883686] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.888329] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.890772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.126556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.129429] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.134330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.140239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.143161] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.147045] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.195463] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.205276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.208575] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.217276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.222212] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.224653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.272576] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.276656] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.292675] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.298366] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.302235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.327006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.332162] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.333346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.336933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.339272] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.343739] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.346222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.347654] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.349827] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.352165] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.353682] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.359338] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.365475] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.367723] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.374743] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.382249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.395335] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.397560] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.404140] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 339.408986] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.416759] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 339.418801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.447547] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.464258] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.469986] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.909934] Bluetooth: hci0: command tx timeout [ 341.166916] Bluetooth: hci1: command tx timeout [ 341.294953] Bluetooth: hci2: command tx timeout [ 341.421979] Bluetooth: hci6: command tx timeout [ 341.422465] Bluetooth: hci4: command tx timeout [ 341.422789] Bluetooth: hci3: command tx timeout [ 341.549927] Bluetooth: hci5: command tx timeout [ 341.550423] Bluetooth: hci7: command tx timeout [ 342.959924] Bluetooth: hci0: command tx timeout [ 343.213954] Bluetooth: hci1: command tx timeout [ 343.342064] Bluetooth: hci2: command tx timeout [ 343.469967] Bluetooth: hci3: command tx timeout [ 343.470499] Bluetooth: hci4: command tx timeout [ 343.471048] Bluetooth: hci6: command tx timeout [ 343.598239] Bluetooth: hci7: command tx timeout [ 343.600090] Bluetooth: hci5: command tx timeout [ 345.006088] Bluetooth: hci0: command tx timeout [ 345.261980] Bluetooth: hci1: command tx timeout [ 345.389951] Bluetooth: hci2: command tx timeout [ 345.519923] Bluetooth: hci4: command tx timeout [ 345.520379] Bluetooth: hci6: command tx timeout [ 345.520755] Bluetooth: hci3: command tx timeout [ 345.647918] Bluetooth: hci7: command tx timeout [ 345.648379] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 19:51:39 Registers: info registers vcpu 0 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800bca6d20 R8 =0000000000000000 R9 =ffffed1001901046 R10=000000000000006c R11=3a6b636f6c206762 R12=000000000000006c R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8f3a6bd344 CR3=0000000009e68000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c0000ae000000000c005841f40 XMM02=000000c000728fd800000000008e84e0 XMM03=00000000000000000000000000000000 XMM04=00000000000000080000000000b12868 XMM05=000000c000728fd800000000008e84e0 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=000000c005841f0000000000004643c1 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=650908737472617473657220726f7475 XMM14=7320636578650a007a7a756620636578 XMM15=00086e65672063657865080073646565 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce42cc0 RCX=ffffffff816643a2 RDX=ffff88800bb43780 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff8880158e7820 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=ffffed100d9c8599 R13=ffff88806ce42cc8 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff84ab2f40 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8f3aff98c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055dae330bc18 CR3=0000000015eb6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000415ca8e000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000