Warning: Permanently added '[localhost]:31334' (ECDSA) to the list of known hosts. 2025/01/25 21:34:00 fuzzer started 2025/01/25 21:34:01 dialing manager at localhost:40883 syzkaller login: [ 69.233499] cgroup: Unknown subsys name 'net' [ 69.328623] cgroup: Unknown subsys name 'cpuset' [ 69.352652] cgroup: Unknown subsys name 'rlimit' [ 74.678581] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 21:34:17 syscalls: 2217 2025/01/25 21:34:17 code coverage: enabled 2025/01/25 21:34:17 comparison tracing: enabled 2025/01/25 21:34:17 extra coverage: enabled 2025/01/25 21:34:17 setuid sandbox: enabled 2025/01/25 21:34:17 namespace sandbox: enabled 2025/01/25 21:34:17 Android sandbox: enabled 2025/01/25 21:34:17 fault injection: enabled 2025/01/25 21:34:17 leak checking: enabled 2025/01/25 21:34:17 net packet injection: enabled 2025/01/25 21:34:17 net device setup: enabled 2025/01/25 21:34:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 21:34:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 21:34:17 USB emulation: enabled 2025/01/25 21:34:17 hci packet injection: enabled 2025/01/25 21:34:17 wifi device emulation: enabled 2025/01/25 21:34:17 802.15.4 emulation: enabled 2025/01/25 21:34:17 fetching corpus: 50, signal 7542/8821 (executing program) 2025/01/25 21:34:17 fetching corpus: 54, signal 7560/10141 (executing program) 2025/01/25 21:34:17 fetching corpus: 54, signal 7560/11481 (executing program) 2025/01/25 21:34:17 fetching corpus: 54, signal 7560/12790 (executing program) 2025/01/25 21:34:17 fetching corpus: 54, signal 7560/14118 (executing program) 2025/01/25 21:34:17 fetching corpus: 54, signal 7560/15399 (executing program) 2025/01/25 21:34:17 fetching corpus: 54, signal 7560/16736 (executing program) 2025/01/25 21:34:17 fetching corpus: 54, signal 7560/18060 (executing program) 2025/01/25 21:34:17 fetching corpus: 54, signal 7560/19359 (executing program) 2025/01/25 21:34:18 fetching corpus: 54, signal 7560/20693 (executing program) 2025/01/25 21:34:18 fetching corpus: 54, signal 7560/22010 (executing program) 2025/01/25 21:34:18 fetching corpus: 54, signal 7560/22035 (executing program) 2025/01/25 21:34:18 fetching corpus: 54, signal 7560/22035 (executing program) 2025/01/25 21:34:21 starting 8 fuzzer processes 21:34:21 executing program 0: ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000080)) r2 = syz_open_pts(0xffffffffffffffff, 0x402040) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x840, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000180)="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") r3 = syz_open_dev$vcsu(&(0x7f0000001180), 0x6, 0x0) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f00000011c0)) r4 = openat$cgroup_ro(r0, &(0x7f0000001200)='blkio.bfq.io_queued\x00', 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000001640)={&(0x7f0000001240)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f00000012c0)=""/62, 0x3e}, {&(0x7f0000001300)=""/133, 0x85}, {&(0x7f00000013c0)=""/72, 0x48}, {&(0x7f0000001440)=""/132, 0x84}, {&(0x7f0000001500)=""/33, 0x21}, {&(0x7f0000001540)=""/60, 0x3c}], 0x6, &(0x7f0000001600)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x20) r8 = creat(&(0x7f0000001680)='./file0\x00', 0x3b1) ioctl$TIOCL_SETVESABLANK(r8, 0x541c, &(0x7f00000016c0)) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000001700)={0x7fffffff, 0x3, 0x1f, 0x49, 0x8001, 0x4}) ioctl$KDGKBENT(r8, 0x4b46, &(0x7f0000001740)={0x80, 0x8, 0xd27}) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000001780)) fsetxattr$security_ima(r5, &(0x7f00000017c0), &(0x7f0000001800)=@md5={0x1, "5c5a8bc230a93465cafa33bb9882343c"}, 0x11, 0x1) ioctl$TCFLSH(r7, 0x540b, 0x2) ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f0000001840)) ioctl$FS_IOC_READ_VERITY_METADATA(r8, 0xc0286687, &(0x7f0000001940)={0x1, 0x7, 0x82, &(0x7f0000001880)=""/130}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000001d80)={0xaf, 0x1, &(0x7f0000001980)="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"}) 21:34:21 executing program 3: ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x8, 0x100000000, 0x7f, 0x9, 0x7, 0x800}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x81, 0x2, 0x6, 0x596, 0x2, 0x5, 0x7ff, 0x1, 0x38, 0x233, 0x1f, 0x535, 0x20, 0x2, 0x5, 0x8, 0x8}, [{0x6, 0x5, 0x7, 0x200, 0x8, 0xfff, 0x80000001, 0xffffffff}], "bc9f54b25aec7f2c0f79bc4b675089d1128597e463cc6512e05e76e17af878ec828379a69b58aa1c47dd9ecfb70a48f3c8ae167ebadd3d2c"}, 0x90) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x7) open(&(0x7f0000000140)='./file0\x00', 0x441440, 0x100) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/3, 0x3}], 0x4, 0x26c2, 0x400, 0x24e333b8d55e4cc8) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x440, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000540)) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0xff) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000580)) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f00000005c0)={'ah\x00'}, &(0x7f0000000600)=0x1e) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000640)=0x3) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000680)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x6404c850}, 0x24040891) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000940)={'broute\x00', 0x0, 0x4, 0xa0, [0x1, 0xfffffffffffff0e0, 0x8, 0xdadd, 0x2d08fa2b, 0x10001], 0x6, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000880)=""/160}, &(0x7f00000009c0)=0x78) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x164, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffff8000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TUPLE_MASTER={0x10c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) r4 = fspick(0xffffffffffffffff, &(0x7f0000000c40)='./file0\x00', 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000c80)=0x9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000cc0)={0x1, 0x8, 0x0, 'queue0\x00', 0x10000}) 21:34:21 executing program 1: modify_ldt$write(0x1, &(0x7f0000000000)={0x5, 0x1000, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) set_thread_area(&(0x7f0000000040)={0x6, 0x0, 0xfffffffffffffbff, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}) get_thread_area(&(0x7f0000000080)={0x2, 0x20000800, 0x400, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x4, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) get_thread_area(&(0x7f0000000100)={0xaee5, 0x0, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) set_thread_area(&(0x7f0000000140)={0x100, 0x20000800, 0x2000, 0x0, 0x1, 0x1, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f0000000180)={0x9, 0x20000000, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x8, 0x10000800, 0x400, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10) set_thread_area(&(0x7f0000000200)={0x94, 0x20001000, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}) modify_ldt$write2(0x11, &(0x7f0000000240)={0x5, 0x100000, 0x2000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) get_thread_area(&(0x7f0000000280)={0x1, 0x20000800, 0xfffffffffffffbff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}) get_thread_area(&(0x7f00000002c0)={0x0, 0x0, 0x2000, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1}) set_thread_area(&(0x7f0000000300)={0xfffffe00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}) modify_ldt$write(0x1, &(0x7f0000000340)={0xfffff584, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000380)={0x1f, 0x20001000, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, 0xfffffffffffffffd, 0x0) set_thread_area(&(0x7f00000003c0)={0x6, 0x20000800, 0x2000, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1}) get_thread_area(&(0x7f0000000400)={0x40, 0x20001000, 0x4000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}) set_thread_area(&(0x7f0000000440)={0x7, 0x1000, 0x2000, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}) modify_ldt$write2(0x11, &(0x7f0000000480)={0x6, 0xffffffffffffffff, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) 21:34:21 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e21, 0x0, 0x4e24, 0x2, 0xa, 0x80, 0x20, 0x87, 0x0, 0xee00}, {0x8001, 0x5, 0x8, 0x7, 0x9, 0x0, 0x5, 0x3}, {0x2, 0x10001, 0x3, 0x3}, 0xffffffff, 0x6e6bb4, 0x2, 0x1}, {{@in=@multicast1, 0x4d4, 0x32}, 0xa, @in=@multicast1, 0x34ff, 0x4, 0x3, 0x4, 0x9, 0x2, 0x1}}, 0xe8) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x5e0, [0x0, 0x20000200, 0x2000037e, 0x200004c4], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x22, 0x8884, 'geneve0\x00', 'veth1_to_bond\x00', 'netdevsim0\x00', 'macsec0\x00', @local, [0x0, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0xa6, 0x11e, 0x14e, [@mac={{'mac\x00', 0x0, 0x10}, {{@empty, 0x1}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x9, 0x5, 0x3, 0x0, 0x0, "3412d975fe241e642eb14585a276363e844d25cc50c44d249383d96fbdd68612526ab09255d5a58c0f3441603e3158cb4f194e9f7de38db360a6df13e9d47758"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x3, 0x20, 0x9000, 'syz_tun\x00', 'lo\x00', 'vlan0\x00', 'veth1_to_bond\x00', @random="1e765d275ba3", [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0xe6, 0xe6, 0x116, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff00, 0x0, 0xffffff00], [0x1f0ebf4993a0b5b6, 0xffffffff, 0xffffffff, 0xffffffff], 0x0, 0x3b, 0x2, 0x25, 0x4e24, 0x4e22, 0x4e21, 0x4e22}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xde8d}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x3, 0x44, 0x888e, 'macsec0\x00', 'sit0\x00', 'bond0\x00', 'veth1_macvtap\x00', @remote, [0xff, 0x0, 0xff, 0x0, 0x80], @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0x1fe], 0xde, 0x126, 0x16e, [@quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x3, {0x9}}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x5, 0x1}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"351a56de15b682b44eb5d4b2d8dd4732b4a2a997a34393bd2c510927aa98"}}], @common=@ERROR={'ERROR\x00', 0x20, {"f3c2d4ee81baad221bfb4102fb6c3ee591212563a91c59c336d4773ab998"}}}, {0x3, 0x0, 0x88be, 'veth0_vlan\x00', 'veth0_to_bond\x00', 'veth0_to_hsr\x00', 'wlan1\x00', @random="e6aa90e8f49e", [0x0, 0xff, 0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x11e, 0x11e, 0x14e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'vlan0\x00', 'sit0\x00', 0x17, 0x3, 0xf1e8, 0x9, 0x7, 0x8f, {0xe1}, {0x8000}}}}, @time={{'time\x00', 0x0, 0x18}, {{0xb2b4, 0x7fff, 0x121c9, 0x10858, 0x9, 0x5}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}]}, 0x658) r1 = syz_open_dev$vcsa(&(0x7f0000000880), 0x3, 0x101) connect$inet(r1, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000900)=""/206, &(0x7f0000000a00)=0xce) r2 = syz_io_uring_setup(0xf0a, &(0x7f0000000a40)={0x0, 0xcaec, 0x1, 0x1, 0x2fb, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000b40)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x400, 0x0, 0x0, 0x0, 0x1}, 0x8) r4 = socket$inet(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000b80)={'filter\x00', 0x2, [{}, {}]}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000d80)=0xe8) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000001080)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000dc0)={0x24c, 0x13, 0x0, 0x70bd25, 0x25dfdbfc, {0x10, 0x0, 0xc, 0x1f, {0x4e23, 0x4e22, [0x1, 0x5bf57ebd, 0x6, 0xffffe000], [0xfffffff9, 0x5, 0x5, 0xfffff001], r5, [0x7fffffff, 0x8]}, 0xffff2f0e, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x20, 0x1, "3d2156a47af11dbae29f8dedf3a0744447a8c6462e710a85ba8b736b"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "296296645ec36910bf601dc8c87cc43fffce65ed02ac97229edb1f66ede494f3708742df07004266877a15a51a99d81f61d9f63ef3f2ed7d7c4cb48fec3688cd98b730677cabb60e1bd88dae8fc4aa07b5e0e6f78bd7ac8a50630a061822ac46bdefdb3b3f9a9a7f24fc7d9116ff577d37e5a7429bbc68cd7c14ba0fdd6a03e1d1569899c2e66758bbb76584b74dc82a6d6e9fc4eeb39a5e66505464e3c645b6a2e3ae43f8ba1c461cbec1aab4063f19ea05df483de3ad372754c8e4dfdfcbdcf1ac134b6c15a5edb071a818115e2e24fd6cca530a6df21f520a33078cfbe653d000043e957fc07fa378a75dba"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "995b7942b86ef7f56329e7b9211f1fce6258b3af9711dc1ee13fd156068cf35f8f5d90792fce70cbaa14fdc1929092aed412342c409aa975645d014544ab8db67c08f86b145ee7ec5e8084798c2cad80d2dc25a1227c50fde75d9b5e9f9355db00c1c3ebdf99177d1a6a605992c212f99eef72d205d97683117f865755d297c0e0bc04572280c26a6a14685af4811c386eb548c50c1907e3ace0dbbf88efca54a7f22043eaef0f32f307532c906d15a850f57b2dc25b89b6e842433a20df02eb8f26a479f143198a0ff36ad42a76a692dcdf6448d212136b123a1ef406ed415a8f7d5213d6"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20048050}, 0x80) r7 = fcntl$dupfd(r1, 0x0, r2) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000010c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0, 0x4e24, 0x2, 0x4e20, 0x20, 0x2, 0x20, 0x0, 0x73, r0, r6}, {0x8, 0x3, 0x7f, 0x2, 0x4, 0x3, 0x2, 0x9}, {0x100000000, 0x7f, 0x2, 0xfff}, 0xff, 0x6e6bba, 0x2, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d3, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1, 0xfffffffd, 0x9, 0x2}}, 0xe8) write$P9_ROPEN(r1, &(0x7f00000011c0)={0x18, 0x71, 0x2, {{0x80, 0x3, 0x5}, 0x10000}}, 0x18) ioctl$sock_netdev_private(r7, 0x89f7, &(0x7f0000001200)="e32a253f7e05cfbeda") getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001240)={{{@in=@broadcast, @in=@private}}, {{@in6=@private0}, 0x0, @in6=@private2}}, &(0x7f0000001340)=0xe8) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000001380)={0x0, 0xffffffff, 0x6d, 0x1, 0x7f, 0xaa}) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x50, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x10001, 0x8001, 0x6]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x44080}, 0x4011) [ 89.434336] audit: type=1400 audit(1737840861.421:7): avc: denied { execmem } for pid=279 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:34:21 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$getenv(0x4201, r0, 0x3f, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ptrace$cont(0x20, r1, 0xfffffffffffffffe, 0x1) fork() setpriority(0x1, r0, 0xd88) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000100)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/keys\x00', 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000a80)={&(0x7f0000000540), 0x6e, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000680)=""/46, 0x2e}, {&(0x7f00000006c0)=""/142, 0x8e}, {&(0x7f0000000780)=""/201, 0xc9}, {&(0x7f0000000880)=""/98, 0x62}, {&(0x7f0000000900)=""/90, 0x5a}], 0x6, &(0x7f0000000a00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x10000) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000ac0), 0x4) r6 = getpgid(r1) capset(&(0x7f0000001040)={0x0, r6}, &(0x7f0000001080)={0x0, 0x9, 0x401, 0xd2, 0x6, 0x4}) r7 = getpid() ioprio_set$pid(0x1, r7, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/block/loop1', 0x200001, 0xfb) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001100)={0x0, 0xde, 0x1, [0x144e, 0x480, 0x3, 0x8, 0x10000], [0x5, 0x67, 0xa26b00000, 0x91d7, 0x1, 0xd9, 0x100, 0x4, 0x9, 0xfff, 0x100, 0x2, 0x7fff, 0x9, 0x0, 0x3, 0x7, 0x6, 0x8, 0x5, 0x80000001, 0x4208, 0x7c1, 0x2, 0x9, 0x4, 0x7, 0x4, 0x3, 0xffffffff, 0x1ff, 0x5a99, 0x2, 0x70cd, 0x1, 0x3ff, 0x40, 0x6, 0x2, 0x6000, 0x4, 0x3, 0x200, 0x7, 0x4, 0x7, 0x9, 0x5, 0x0, 0x1f85279f, 0x5, 0x1, 0x0, 0x0, 0x4833, 0x14000000000, 0xffffffff, 0x3, 0x200, 0x9, 0x5, 0x5, 0x7fff, 0xd8, 0x8, 0x1, 0x6, 0xec29, 0x80, 0x4, 0xfffffffeffffffff, 0x7f, 0xfffffffffffffff8, 0x3, 0x1, 0x1, 0x1f, 0xfff, 0xc9c5, 0x9, 0x1ff, 0x6, 0xfc, 0x5, 0xffffffff, 0x1, 0x100000001, 0x4, 0x7fff, 0x6cc, 0xef31, 0x3f, 0x1, 0x400, 0xddca, 0x8, 0xff, 0x80000001, 0x9, 0x3, 0x7, 0x401, 0x8, 0x101, 0xe88, 0x87d, 0x8001, 0x2, 0x1, 0x10000, 0x45729567, 0x800, 0x7fffffff, 0x6, 0x4, 0x1, 0x0, 0x4, 0x6, 0x7fffffff, 0xb28]}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001540)={r8, "1cac7562ebfad72a0a291f1e81686758"}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002540)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r5, 0x40082102, &(0x7f00000025c0)=r9) sendmsg$AUDIT_SET(r5, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbfb, {0x4d, 0x1, 0x0, 0x0, 0xff, 0x0, 0xffff, 0x0, 0x0, 0x16}, ["", "", "", ""]}, 0x38}}, 0x10) 21:34:21 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0xffffff00, 0x7f, 0x2, 0x4, 0xa, "229f7676f70227cd2c28d99e6e35d011bcb036"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, '\x00'}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1, 0x7}}, '.\x00'}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x2, 0xffff, 0xffffffff, 0x7fff, 0x8, 0x80}, {0x5, 0x40000000, 0x1ff, 0x3, 0x1, 0x10000}], ['\x00', '\x00', '\x00']}) r4 = dup2(r2, r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0x4) write$P9_RLERRORu(r0, &(0x7f0000000380)={0xe, 0x7, 0x2, {{0x1, '\x00'}}}, 0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000400)=0xff) r6 = socket$netlink(0x10, 0x3, 0x7) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, &(0x7f0000000440)) symlink(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00') r7 = fcntl$getown(r2, 0x9) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000500)=0x0) kcmp(r7, r8, 0x2, r6, r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000009c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x13c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_MASK={0xbe, 0x5, "ca8296dcd05fc95fdb4604242de14a55a0e5bef05327214644fe3050c372463fe8962107a04edd573e8d223f9acc220d9e1dc5699553d94986809d96e5a6aa870dc3ca508b5728a429c14a60fd7469a8a8395c3273f4fb51c182f0d7ff5bc8db97415c3710f9754bb84d8c9a51ed7b89bdb3b3d1e454fce8d45d6b730ae046a93dd82c093482adcda74c1c8e67c36ea615a5fa627952069c38681d74704d982e7b5f63a70d4e720272cb6c9e16fd6b2dfbaa9658abff8ca6cc12"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4040) 21:34:21 executing program 6: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0x3) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000100)=0x9) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000140)="840d9b1f741990eeabf9aec1f8e5908924b41bd2a520d2fc856da94c7615fd0bafb17e1a7d0c6ecd35a98ae064bb") ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000180)={0x0, 0x6, 0x0, [0x1000, 0x4, 0x6, 0x3, 0xffffffffffffff8d], [0xffff, 0x4a, 0x32ec, 0x200, 0x19, 0x3, 0x7fffffff, 0x3, 0x3, 0x0, 0x7fe, 0x412fafaf, 0x9, 0x0, 0x3c6d1a00, 0x1f5f, 0x5, 0x81, 0x10000, 0x4, 0x8, 0x2, 0x5, 0x40, 0x80000000, 0x200, 0x9, 0x6, 0xfffffffffffffff9, 0x9, 0x8, 0x58, 0x3, 0x0, 0x1, 0x7fff, 0x20, 0x8001, 0xfffffffffffffffe, 0x7, 0x5, 0x3f, 0x4b29, 0x1ff, 0x5820000000000000, 0x17, 0x6, 0x6cc, 0x7fff, 0x8, 0x7, 0xbfc6, 0x101, 0x4000000000000000, 0x4, 0x800, 0x8001, 0x7, 0x20, 0x193e, 0x40, 0x7, 0x0, 0x81, 0xfffffffffffffff9, 0x100000000, 0xfffffffffffff800, 0x20, 0x2, 0x1, 0x1ff, 0x9, 0x5, 0xff, 0x2, 0x1, 0x20, 0xfffffffffffffbd2, 0x9, 0x4, 0x4, 0x8, 0x3f, 0x3, 0x1f, 0xa17, 0x3, 0x8, 0xb02, 0x1000, 0x100, 0x7fffffff, 0x1654, 0xbf, 0x4, 0x83, 0x8, 0x2, 0xdc2, 0x9, 0xffff, 0x2, 0x200, 0x5, 0x100000000, 0x5, 0x9b1, 0x6, 0x8, 0x4, 0x81, 0x5, 0x6c9f, 0xea8a, 0x2, 0x10001, 0x3d2, 0x7, 0x0, 0x2, 0x9]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000600)=0x4) preadv2(0xffffffffffffffff, &(0x7f0000001ac0)=[{&(0x7f0000000640)=""/172, 0xac}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/132, 0x84}, {&(0x7f0000001800)=""/229, 0xe5}, {&(0x7f0000001900)=""/136, 0x88}, {&(0x7f00000019c0)=""/194, 0xc2}], 0x7, 0x29, 0x7ff, 0x9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000001b80)) fcntl$notify(r3, 0x402, 0xa) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000001bc0)=0x21022cef) r4 = signalfd4(r3, &(0x7f0000001c00)={[0xffffffffffff0000]}, 0x8, 0x80000) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000001c40)={0x3, 0xff, 0xff00}) openat2(r4, &(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)={0x244480, 0x128, 0x5}, 0x18) r5 = syz_open_dev$evdev(&(0x7f0000001d00), 0xfffffffffffffe00, 0x400000) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000001ec0)={0x1, 0x0, 0x1000, 0x4d, &(0x7f0000001d40)="78438f68beccfc394b69fed2717c916e82ef82068dd8644fa5c5f69052370d27a7540dcc703579a68b8e8e4ffa1fac3d53e831ce964d77b3ff35d47ce7143be69543dcb8274c7d265f382bbbe5", 0xf3, 0x0, &(0x7f0000001dc0)="e924573a7662e329d347935546ffe60bae9e98e2d0233fe36325457f5b4c4f098a73752af47575b66b97b4cb6367db36d77d7d6bd7e9e27bcdb8c8b5410bf5418d94e769016aab161e2e187df91d1e542802bfff5ea7a988d39e416b7fce86eb0611a6c945f6bad4c12bb9f9f0d0e9fe5c12eccb7e2ca5c05fda9b0ca798686a5b067f542424e03b3342a0e42e774490cbaeb31bc5cd08781a677b110125fe520bb6f8bbd2905e428330c73ea11721351c4cbec2523ad28cac9724a349af4fa073b00f72f5d9328289a989cdd821f8d430d4269950a85f71c9300868a939e4dcf742b4644054cbb87c744980b832f1a017ec07"}) syncfs(0xffffffffffffffff) 21:34:21 executing program 7: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x8c) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x2, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x45}, @CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x20, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = inotify_init() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f00000001c0)) r2 = memfd_secret(0x80000) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) ppoll(&(0x7f0000000840)=[{r0, 0x4}, {r2, 0xc240}], 0x2, &(0x7f00000008c0)={r3, r4+10000000}, &(0x7f0000000900)={[0x4]}, 0x8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x18c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5e62f32}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xb7b}, {0x6, 0x11, 0xfff7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x101}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xd18}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4d}, {0x6, 0x11, 0x7ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1dc}, {0x6, 0x11, 0x8}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8005}, 0x40000) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x400c001) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000cc0)={0x1, 0xe96, 0x3}) write$P9_RLCREATE(r2, &(0x7f0000000d00)={0x18, 0xf, 0x2, {{0x4, 0x4, 0x5}, 0x1000}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) io_getevents(0x0, 0xba, 0x4, &(0x7f0000000d80)=[{}, {}, {}, {}], &(0x7f0000000e00)={0x77359400}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x3c}}, 0x440d0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000f80)=0x0) sched_rr_get_interval(r6, &(0x7f0000000fc0)) clock_gettime(0x0, &(0x7f0000001040)={0x0, 0x0}) ppoll(&(0x7f0000001000)=[{0xffffffffffffffff, 0x120}, {r1, 0x10}, {0xffffffffffffffff, 0x402}], 0x3, &(0x7f0000001080)={r7, r8+10000000}, &(0x7f00000010c0)={[0xf3]}, 0x8) ppoll(&(0x7f0000001200)=[{0xffffffffffffffff, 0x2008}, {0xffffffffffffffff, 0x400}], 0x2, &(0x7f0000001240)={0x0, 0x989680}, &(0x7f0000001280)={[0x3]}, 0x8) [ 90.856772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.861843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.868426] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.879597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.884437] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.887760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.929182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.937104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.939976] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.942466] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.944031] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.946558] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.948080] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.949814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.952901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.957568] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.960724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.962150] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.966455] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.974276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.976787] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.981809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.987744] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.988711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.997281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.999929] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.002651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.004761] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.006569] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.008176] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.011338] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.014733] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.018108] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.021139] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.024971] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.028001] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.034475] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.035839] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.044619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.054358] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.059556] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.059846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.069045] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.071365] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.077062] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.095341] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.135915] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.156430] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.940754] Bluetooth: hci0: command tx timeout [ 93.006329] Bluetooth: hci3: command tx timeout [ 93.068277] Bluetooth: hci1: command tx timeout [ 93.132350] Bluetooth: hci2: command tx timeout [ 93.132949] Bluetooth: hci5: command tx timeout [ 93.196386] Bluetooth: hci7: command tx timeout [ 93.197019] Bluetooth: hci6: command tx timeout [ 93.197688] Bluetooth: hci4: command tx timeout [ 94.988396] Bluetooth: hci0: command tx timeout [ 95.052275] Bluetooth: hci3: command tx timeout [ 95.117227] Bluetooth: hci1: command tx timeout [ 95.180344] Bluetooth: hci5: command tx timeout [ 95.180786] Bluetooth: hci2: command tx timeout [ 95.244567] Bluetooth: hci4: command tx timeout [ 95.245007] Bluetooth: hci6: command tx timeout [ 95.245708] Bluetooth: hci7: command tx timeout [ 97.036279] Bluetooth: hci0: command tx timeout [ 97.100274] Bluetooth: hci3: command tx timeout [ 97.164625] Bluetooth: hci1: command tx timeout [ 97.230343] Bluetooth: hci5: command tx timeout [ 97.230792] Bluetooth: hci2: command tx timeout [ 97.292326] Bluetooth: hci6: command tx timeout [ 97.292776] Bluetooth: hci7: command tx timeout [ 97.293763] Bluetooth: hci4: command tx timeout [ 99.084375] Bluetooth: hci0: command tx timeout [ 99.148416] Bluetooth: hci3: command tx timeout [ 99.212297] Bluetooth: hci1: command tx timeout [ 99.276425] Bluetooth: hci2: command tx timeout [ 99.276876] Bluetooth: hci5: command tx timeout [ 99.341107] Bluetooth: hci4: command tx timeout [ 99.341629] Bluetooth: hci7: command tx timeout [ 99.342055] Bluetooth: hci6: command tx timeout [ 150.772489] syz-executor.1 (289) used greatest stack depth: 24352 bytes left [ 151.036548] [ 151.036965] ====================================================== [ 151.038004] WARNING: possible circular locking dependency detected [ 151.039057] 6.13.0-next-20250124 #1 Not tainted [ 151.040388] ------------------------------------------------------ [ 151.046336] kworker/u8:0/11 is trying to acquire lock: [ 151.047266] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.049099] [ 151.049099] but task is already holding lock: [ 151.050091] ffff88803a390768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 151.051596] [ 151.051596] which lock already depends on the new lock. [ 151.051596] [ 151.052787] [ 151.052787] the existing dependency chain (in reverse order) is: [ 151.053917] [ 151.053917] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 151.054947] __mutex_lock+0x13d/0xb50 [ 151.055680] wiphy_register+0x1b2e/0x25d0 [ 151.056465] ieee80211_register_hw+0x23a4/0x3d60 [ 151.057314] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 151.058207] init_mac80211_hwsim+0x389/0x870 [ 151.059023] do_one_initcall+0xf9/0x640 [ 151.060069] kernel_init_freeable+0x53d/0x7a0 [ 151.061098] kernel_init+0x1e/0x2d0 [ 151.061952] ret_from_fork+0x48/0x80 [ 151.062668] ret_from_fork_asm+0x1a/0x30 [ 151.063489] [ 151.063489] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 151.064532] __lock_acquire+0x29fd/0x4580 [ 151.065400] lock_acquire+0x19b/0x520 [ 151.066165] __mutex_lock+0x13d/0xb50 [ 151.066963] unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.068038] unregister_netdevice_queue+0x224/0x2e0 [ 151.068997] _cfg80211_unregister_wdev+0x57b/0x700 [ 151.069910] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 151.070887] ieee80211_unregister_hw+0x55/0x3a0 [ 151.071833] hwsim_exit_net+0x3a0/0x730 [ 151.072671] ops_exit_list+0xb3/0x180 [ 151.073479] cleanup_net+0x546/0xad0 [ 151.074244] process_one_work+0x8ee/0x1a10 [ 151.075047] worker_thread+0x674/0xe70 [ 151.075810] kthread+0x3ab/0x720 [ 151.076603] ret_from_fork+0x48/0x80 [ 151.077385] ret_from_fork_asm+0x1a/0x30 [ 151.078304] [ 151.078304] other info that might help us debug this: [ 151.078304] [ 151.079581] Possible unsafe locking scenario: [ 151.079581] [ 151.080550] CPU0 CPU1 [ 151.081337] ---- ---- [ 151.082114] lock(&rdev->wiphy.mtx); [ 151.082821] lock(rtnl_mutex); [ 151.083812] lock(&rdev->wiphy.mtx); [ 151.084848] lock(rtnl_mutex); [ 151.085465] [ 151.085465] *** DEADLOCK *** [ 151.085465] [ 151.086520] 4 locks held by kworker/u8:0/11: [ 151.087269] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 151.088930] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 151.090541] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 151.092009] #3: ffff88803a390768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 151.093687] [ 151.093687] stack backtrace: [ 151.094435] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 151.094504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 151.094545] Workqueue: netns cleanup_net [ 151.094621] Call Trace: [ 151.094640] [ 151.094663] dump_stack_lvl+0xca/0x120 [ 151.094771] print_circular_bug+0x47b/0x750 [ 151.094856] check_noncircular+0x2e9/0x3c0 [ 151.094932] ? srso_return_thunk+0x5/0x5f [ 151.095037] ? __pfx_check_noncircular+0x10/0x10 [ 151.095119] ? __pfx_mark_lock+0x10/0x10 [ 151.095201] ? lockdep_lock+0xba/0x1b0 [ 151.095308] ? __pfx_lockdep_lock+0x10/0x10 [ 151.095424] __lock_acquire+0x29fd/0x4580 [ 151.095525] ? __pfx___lock_acquire+0x10/0x10 [ 151.095613] ? srso_return_thunk+0x5/0x5f [ 151.095722] lock_acquire+0x19b/0x520 [ 151.095803] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.095894] ? __pfx_lock_acquire+0x10/0x10 [ 151.095982] ? srso_return_thunk+0x5/0x5f [ 151.096091] ? lock_is_held_type+0x9e/0x120 [ 151.096201] __mutex_lock+0x13d/0xb50 [ 151.096299] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.096382] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.096468] ? srso_return_thunk+0x5/0x5f [ 151.096571] ? synchronize_rcu_expedited+0x38a/0x420 [ 151.096652] ? __pfx___mutex_lock+0x10/0x10 [ 151.096752] ? __pfx_autoremove_wake_function+0x10/0x10 [ 151.096852] ? srso_return_thunk+0x5/0x5f [ 151.096954] ? kasan_quarantine_put+0x84/0x1e0 [ 151.097067] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 151.097132] ? srso_return_thunk+0x5/0x5f [ 151.097242] unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.097328] ? __virt_addr_valid+0x2e8/0x5d0 [ 151.097425] ? __pfx_lock_release+0x10/0x10 [ 151.097508] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 151.097594] ? find_held_lock+0x2c/0x110 [ 151.097719] ? srso_return_thunk+0x5/0x5f [ 151.097825] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 151.097941] ? srso_return_thunk+0x5/0x5f [ 151.098044] ? lock_release+0x20f/0x6f0 [ 151.098126] ? __pfx_lock_release+0x10/0x10 [ 151.098206] ? srso_return_thunk+0x5/0x5f [ 151.098308] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 151.098396] ? srso_return_thunk+0x5/0x5f [ 151.098509] unregister_netdevice_queue+0x224/0x2e0 [ 151.098590] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 151.098671] ? up_write+0x195/0x520 [ 151.098773] _cfg80211_unregister_wdev+0x57b/0x700 [ 151.098870] ? srso_return_thunk+0x5/0x5f [ 151.098980] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 151.099052] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 151.099124] ? srso_return_thunk+0x5/0x5f [ 151.099226] ? srso_return_thunk+0x5/0x5f [ 151.099329] ? synchronize_rcu+0x1ff/0x260 [ 151.099408] ieee80211_unregister_hw+0x55/0x3a0 [ 151.099491] hwsim_exit_net+0x3a0/0x730 [ 151.099570] ? __pfx_hwsim_exit_net+0x10/0x10 [ 151.099645] ? srso_return_thunk+0x5/0x5f [ 151.099748] ? netdev_run_todo+0x788/0x1040 [ 151.099839] ? __pfx_hwsim_exit_net+0x10/0x10 [ 151.099919] ops_exit_list+0xb3/0x180 [ 151.099998] cleanup_net+0x546/0xad0 [ 151.100082] ? __pfx_cleanup_net+0x10/0x10 [ 151.100181] process_one_work+0x8ee/0x1a10 [ 151.100303] ? __pfx_lock_acquire+0x10/0x10 [ 151.100386] ? __pfx_process_one_work+0x10/0x10 [ 151.100494] ? srso_return_thunk+0x5/0x5f [ 151.100597] ? move_linked_works+0x172/0x270 [ 151.100680] ? srso_return_thunk+0x5/0x5f [ 151.100782] ? assign_work+0x196/0x240 [ 151.100889] worker_thread+0x674/0xe70 [ 151.100997] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 151.101095] ? __pfx_worker_thread+0x10/0x10 [ 151.101206] kthread+0x3ab/0x720 [ 151.101302] ? __pfx_kthread+0x10/0x10 [ 151.101398] ? srso_return_thunk+0x5/0x5f [ 151.101506] ? finish_task_switch.isra.0+0x206/0x840 [ 151.101601] ? __pfx_kthread+0x10/0x10 [ 151.101712] ret_from_fork+0x48/0x80 [ 151.101770] ? __pfx_kthread+0x10/0x10 [ 151.101868] ret_from_fork_asm+0x1a/0x30 [ 151.101992] [ 153.171460] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.175032] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.179573] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.183483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.188702] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.192812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.309863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.311100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.313091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.323490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.327837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.330714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.333795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.343612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.345574] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.349788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.352479] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.355717] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.357100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.362159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.363307] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.366545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.368391] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.369863] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.374384] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.376435] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.377971] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.380463] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.393795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.398324] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.400964] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.407097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.412905] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.414143] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.415925] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.417214] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.418625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.421468] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.422986] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.428472] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.430321] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.433306] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.443256] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.456134] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.457290] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.460303] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.467460] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.474263] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.213265] Bluetooth: hci0: command tx timeout [ 155.405926] Bluetooth: hci1: command tx timeout [ 155.468350] Bluetooth: hci3: command tx timeout [ 155.469589] Bluetooth: hci5: command tx timeout [ 155.470027] Bluetooth: hci2: command tx timeout [ 155.470058] Bluetooth: hci4: command tx timeout [ 155.533420] Bluetooth: hci6: command tx timeout [ 155.534849] Bluetooth: hci7: command tx timeout [ 157.262230] Bluetooth: hci0: command tx timeout [ 157.452345] Bluetooth: hci1: command tx timeout [ 157.516241] Bluetooth: hci4: command tx timeout [ 157.517449] Bluetooth: hci5: command tx timeout [ 157.517961] Bluetooth: hci2: command tx timeout [ 157.518727] Bluetooth: hci3: command tx timeout [ 157.580263] Bluetooth: hci7: command tx timeout [ 157.581253] Bluetooth: hci6: command tx timeout [ 159.308303] Bluetooth: hci0: command tx timeout [ 159.500241] Bluetooth: hci1: command tx timeout [ 159.564259] Bluetooth: hci2: command tx timeout [ 159.564765] Bluetooth: hci4: command tx timeout [ 159.565342] Bluetooth: hci3: command tx timeout [ 159.565669] Bluetooth: hci5: command tx timeout [ 159.628303] Bluetooth: hci6: command tx timeout [ 159.628864] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 21:35:23 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88807afe7410 RCX=ffffffff81429a4a RDX=1ffff11001cc5100 RSI=0000000000000008 RDI=ffff88800e628800 RBP=0000000000000000 RSP=ffff88800f207dd0 R8 =0000000000000000 R9 =ffffed1001cc5100 R10=ffff88800e628807 R11=0000000000000001 R12=ffff88807afe7ff9 R13=ffffffff88651d48 R14=ffff88800ea21bc0 R15=0000000000000086 RIP=ffffffff81aefb34 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000001f27f60 CR3=000000000e190000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ef8900fce32dc9882344c2ca391dfad2 XMM02=f61f520134a0d9c200000000000fd930 XMM03=f9980df3bdc2dbad0000000000134ba0 XMM04=1df7f8fcb376461800000000000ae988 XMM05=9f165a4fe6c971ad0000000000138f30 XMM06=7c8d2a4f1e787a980000000000138e90 XMM07=9baf0a5ac092637b0000000000134bf8 XMM08=ee7587d5db12e8e300000000000fd988 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed1001c5a046 R10=000000000000002d R11=2d2d2d2d2d2d2d2d R12=000000000000002d R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc5f1fee48 CR3=000000000c500000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=0000000100000002000056163e035830 XMM05=00000000000000000000000000000000 XMM06=000056163e000b500000000000000004 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000