syzkaller login: [ 55.452338] sshd (228) used greatest stack depth: 23712 bytes left Warning: Permanently added '[localhost]:2253' (ECDSA) to the list of known hosts. 2025/01/25 22:44:35 fuzzer started 2025/01/25 22:44:36 dialing manager at localhost:40883 [ 58.074092] cgroup: Unknown subsys name 'net' [ 58.175681] cgroup: Unknown subsys name 'cpuset' [ 58.210215] cgroup: Unknown subsys name 'rlimit' [ 63.245142] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 22:44:54 syscalls: 203 2025/01/25 22:44:54 code coverage: enabled 2025/01/25 22:44:54 comparison tracing: enabled 2025/01/25 22:44:54 extra coverage: enabled 2025/01/25 22:44:54 setuid sandbox: enabled 2025/01/25 22:44:54 namespace sandbox: enabled 2025/01/25 22:44:54 Android sandbox: enabled 2025/01/25 22:44:54 fault injection: enabled 2025/01/25 22:44:54 leak checking: enabled 2025/01/25 22:44:54 net packet injection: enabled 2025/01/25 22:44:54 net device setup: enabled 2025/01/25 22:44:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 22:44:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 22:44:54 USB emulation: enabled 2025/01/25 22:44:54 hci packet injection: enabled 2025/01/25 22:44:54 wifi device emulation: enabled 2025/01/25 22:44:54 802.15.4 emulation: enabled 2025/01/25 22:44:54 fetching corpus: 0, signal 0/0 (executing program) 2025/01/25 22:44:55 starting 8 fuzzer processes 22:44:55 executing program 0: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000080)={0x20, 0x8}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x101) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x6a2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x37fe, 0x1}, 0xe) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x210400, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a0000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1, 0x7fffffff}}, './file0\x00'}) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000280)={0xfffffffffffffffe, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, &(0x7f0000000300)) r6 = memfd_secret(0x80000) ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, &(0x7f0000000340)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000380)=0x5, 0x4) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x7, 0x40, 0x6, 0x2, {{0x25, 0x4, 0x2, 0x2c, 0x94, 0x66, 0x0, 0x0, 0x29, 0x0, @broadcast, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0x8, 0x1, 0x4, [{@multicast2, 0x7c}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x4}, {@multicast2, 0x8}]}, @end, @rr={0x7, 0x1b, 0x89, [@multicast1, @rand_addr=0x64010102, @private=0xa010102, @multicast1, @remote, @rand_addr=0x64010100]}, @timestamp={0x44, 0x2c, 0xaa, 0x0, 0x8, [0x4, 0x7, 0x80, 0x2, 0x1, 0x0, 0xcd, 0x3ff, 0x1f, 0x20]}]}}}}}) 22:44:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x566cec5e, 0x0, 0x0, 'queue0\x00', 0x6}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000440)=r4) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x40089416, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000580)={0x5, &(0x7f0000000540)=[{0xfffe, 0x1f, 0xb0, 0xb3c}, {0xffff, 0xfe, 0x5, 0x7ff}, {0x800, 0x0, 0x8, 0xffffffff}, {0x401, 0x0, 0x7f, 0x7}, {0x9, 0x1, 0x0, 0xb82c}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x685}}, './file0\x00'}) r10 = openat$cgroup_subtree(r3, &(0x7f0000000600), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r10, {0x2}}, './file0\x00'}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000006c0)={'macvtap0\x00'}) 22:44:55 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1e80, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000040)={{0xf6, 0x20}, 'port1\x00', 0x1, 0x0, 0x50f, 0x4fe0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000100)={0x101, 0xcd, 0x4, {0x10000, 0x3}, 0xda, 0x8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x222000, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/net\x00') ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000840)={0x0, 0x548, 0x1, [0x8, 0xffffffffffffff74, 0x62, 0x3, 0x9], [0x2, 0x222, 0x9, 0x2000000000000000, 0x0, 0x80000000, 0x2, 0x100, 0x7fffffff, 0x80000000, 0xff, 0x5, 0x0, 0x7fffffff, 0x101, 0x7ff, 0x4, 0x5, 0x6, 0x5, 0xb9, 0x4, 0x1, 0x8, 0x100, 0x1ff, 0xffffffffffffff81, 0x80, 0x9, 0x166, 0x3ff, 0x1, 0x280000000000000, 0x8, 0x5, 0x6, 0x80, 0x6, 0x1, 0x5, 0x4, 0xf8e2, 0x10001, 0x40, 0xffffffff, 0x7fff, 0x91, 0xffffffffffffffff, 0x7, 0x1, 0x5, 0x2e, 0x660, 0x7f, 0x5, 0xa7, 0x1564, 0x5, 0x4, 0x8000, 0x2, 0x2, 0x7fff, 0x6d7d, 0x7, 0x7fff, 0xea0, 0x7fff, 0x3f, 0x4, 0xd01, 0x2, 0x9, 0x4, 0x7ff, 0x80000001, 0xb7be, 0x5, 0x50000000000000, 0x0, 0x9, 0x2, 0xffff, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x8, 0x3fffc00000000000, 0x1, 0x0, 0x100000001, 0xffffffffffff77bb, 0x7fffffff, 0x20, 0xe4, 0x9, 0x7fffffff, 0x40, 0xfffffffffffffffd, 0x0, 0x401, 0x100, 0x10001, 0x8, 0x8, 0xfffffffffffffffd, 0x7fffffff, 0xdc1b, 0xffffffff, 0x8, 0x0, 0x40, 0x4, 0x3f, 0x1, 0x80, 0x2, 0x3, 0xff, 0x400]}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000c80)={{0x6, 0x40}, {0x4a, 0x40}, 0x9, 0x1, 0x1f}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000d00)={r3, 0x9, 0x48be}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000001100)={{r1}, 0x0, 0x1e, @unused=[0x101, 0xfffffffffffff1de, 0xfff, 0x5], @devid=r4}) syz_genetlink_get_family_id$smc(&(0x7f0000002100), r0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000002140)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x3}}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3}, @l2tp={0x2, 0x0, @multicast2, 0x4}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x7ff, 0x68}) r5 = openat$cgroup_subtree(r1, &(0x7f00000021c0), 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000002200)={"73b0cfa46ae2e474bd869e2e29cb4900", 0x0, 0x0, {0x7f, 0x1f}, {0x3, 0x120}, 0x7, [0x6, 0x1, 0x8000, 0x1, 0x0, 0xfffffffffffffffe, 0x62, 0x8001, 0x9, 0x7, 0xecc, 0x2, 0xfffffffffffffffb, 0x2, 0x0, 0x8]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000002380)={{r6}, r7, 0xc, @inherit={0x78, &(0x7f0000002300)={0x0, 0x6, 0x4, 0x7000000, {0x8, 0x0, 0x6, 0x806c, 0x1}, [0x7, 0x821, 0xfffffffffffffff8, 0x0, 0x4, 0x4]}}, @subvolid=0xdf02}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000003380)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003440)={0xc, 0x0, &(0x7f00000033c0)=[@acquire={0x40046305, 0x1}, @exit_looper], 0x3f, 0x0, &(0x7f0000003400)="17df7853e264c57cd340f2a036f8977ce59550430cfb4686df19064b547da06eee81795bba271d71cf0ff4153611ad73550eb4d3b41da460c4d7bf3d4b85f9"}) r8 = syz_genetlink_get_family_id$smc(&(0x7f00000034c0), r1) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000003600)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003500)={0x9c, r8, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000003640)=0x3, 0x4) 22:44:55 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12042000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x2008810}, 0x84) getpeername$packet(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x14) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000240)={{0xee, 0x40}, 'port0\x00', 0x0, 0x81000, 0x2, 0x6, 0x4, 0x971f, 0x1f, 0x0, 0x3}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0xa000, 0x0) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x1ff}}, './file0\x00'}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x41, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)) openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x204440, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r6, {0xffff8001, 0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x3ff}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, 0x0}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r9, 0x80605414, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r8, {r10, r11}}, './file0\x00'}) ioctl$SIOCGIFHWADDR(r12, 0x8927, &(0x7f0000000680)={'wg1\x00'}) [ 77.611992] audit: type=1400 audit(1737845095.851:7): avc: denied { execmem } for pid=270 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:44:55 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x890}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x2}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xbb}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x44}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x3}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r6, 0xc0305302, &(0x7f0000000540)={0x80000001, 0x80000001, 0x1, 0x5, 0x52, 0x2}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r7, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1d}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x880) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000700), r2) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), r2) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r3, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r9, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x84, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:depmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x28}}]}, 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r3, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x20000000) 22:44:55 executing program 5: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x7, 0x0) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/83, 0x53}, {&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f0000000240)=""/150, 0x96}, {&(0x7f0000000300)=""/173, 0xad}], 0x4, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x20e1) r5 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r6 = memfd_secret(0x0) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r7 = syz_open_procfs(r3, &(0x7f0000000cc0)='coredump_filter\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000dc0)={'syztnl0\x00', &(0x7f0000000d00)={'gretap0\x00', 0x0, 0x700, 0x10, 0x0, 0x643b, {{0x27, 0x4, 0x0, 0x15, 0x9c, 0x65, 0x0, 0x1f, 0x2f, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x8, 0xde, 0x0, 0x4, [0x0]}, @end, @ssrr={0x89, 0x2b, 0x39, [@broadcast, @multicast1, @multicast1, @multicast2, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ssrr={0x89, 0x17, 0xd0, [@remote, @empty, @private=0xa010100, @broadcast, @local]}, @timestamp_prespec={0x44, 0x3c, 0x58, 0x3, 0xc, [{@private=0xa010101, 0x3}, {@multicast2, 0xfdd}, {@loopback, 0xfe000000}, {@multicast2, 0x1}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast2, 0x64f1870f}]}]}}}}}) clock_gettime(0x0, &(0x7f00000052c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000005040)=[{{&(0x7f0000000e00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000e80)}, {&(0x7f0000000ec0)=""/40, 0x28}, {&(0x7f0000000f00)=""/37, 0x25}, {&(0x7f0000000f40)=""/16, 0x10}, {&(0x7f0000000f80)=""/225, 0xe1}, {&(0x7f0000001080)=""/173, 0xad}, {&(0x7f0000001140)=""/210, 0xd2}, {&(0x7f0000001240)=""/49, 0x31}], 0x8, &(0x7f0000001300)=""/39, 0x27}, 0x3a}, {{&(0x7f0000001340)=@nfc, 0x80, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002400)=""/129, 0x81}, 0x400}, {{&(0x7f00000024c0)=@qipcrtr, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002540)=""/122, 0x7a}, {&(0x7f00000025c0)=""/121, 0x79}, {&(0x7f0000002640)=""/31, 0x1f}, {&(0x7f0000002680)=""/61, 0x3d}], 0x4, &(0x7f0000002700)=""/165, 0xa5}, 0x100}, {{&(0x7f00000027c0)=@ax25={{}, [@bcast, @bcast, @default, @null, @default, @null, @rose, @null]}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002840)=""/29, 0x1d}, {&(0x7f0000002880)=""/71, 0x47}, {&(0x7f0000002900)=""/26, 0x1a}, {&(0x7f0000002940)=""/63, 0x3f}, {&(0x7f0000002980)=""/83, 0x53}, {&(0x7f0000002a00)=""/235, 0xeb}, {&(0x7f0000002b00)=""/27, 0x1b}], 0x7, &(0x7f0000002bc0)=""/178, 0xb2}, 0x2}, {{&(0x7f0000002c80)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d00)=""/211, 0xd3}], 0x1}, 0xfff}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000002e40)=""/183, 0xb7}, {&(0x7f0000002f00)}, {&(0x7f0000002f40)=""/160, 0xa0}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/51, 0x33}], 0x5, &(0x7f00000040c0)=""/254, 0xfe}, 0x2}, {{&(0x7f00000041c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000004580)=[{&(0x7f0000004240)=""/136, 0x88}, {&(0x7f0000004300)=""/190, 0xbe}, {&(0x7f00000043c0)=""/149, 0x95}, {&(0x7f0000004480)=""/211, 0xd3}], 0x4, &(0x7f00000045c0)=""/151, 0x97}, 0x6}, {{&(0x7f0000004680)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004700)=""/5, 0x5}, {&(0x7f0000004740)=""/124, 0x7c}, {&(0x7f00000047c0)=""/13, 0xd}, {&(0x7f0000004800)=""/152, 0x98}, {&(0x7f00000048c0)=""/222, 0xde}], 0x5, &(0x7f0000004a40)=""/58, 0x3a}, 0x10001}, {{&(0x7f0000004a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004b00)=""/237, 0xed}, {&(0x7f0000004c00)=""/177, 0xb1}], 0x2}, 0x9}, {{&(0x7f0000004d00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004d80)=""/193, 0xc1}, {&(0x7f0000004e80)=""/33, 0x21}, {&(0x7f0000004ec0)=""/32, 0x20}], 0x3, &(0x7f0000004f40)=""/204, 0xcc}, 0x6}], 0xa, 0x80000000, &(0x7f0000005300)={r8, r9+60000000}) r10 = socket(0xa, 0x1, 0x101) recvmmsg(0xffffffffffffffff, &(0x7f00000125c0)=[{{&(0x7f0000005340)=@ethernet, 0x80, &(0x7f00000097c0)=[{&(0x7f00000053c0)=""/239, 0xef}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/133, 0x85}, {&(0x7f0000006580)=""/238, 0xee}, {&(0x7f0000006680)=""/4096, 0x1000}, {&(0x7f0000007680)=""/235, 0xeb}, {&(0x7f0000007780)=""/4096, 0x1000}, {&(0x7f0000008780)=""/4096, 0x1000}, {&(0x7f0000009780)=""/51, 0x33}], 0x9, &(0x7f0000009880)=""/4096, 0x1000}, 0x200}, {{&(0x7f000000a880)=@rc={0x1f, @none}, 0x80, &(0x7f000000be00)=[{&(0x7f000000a900)=""/78, 0x4e}, {&(0x7f000000a980)=""/4096, 0x1000}, {&(0x7f000000b980)=""/32, 0x20}, {&(0x7f000000b9c0)=""/200, 0xc8}, {&(0x7f000000bac0)=""/31, 0x1f}, {&(0x7f000000bb00)=""/229, 0xe5}, {&(0x7f000000bc00)=""/239, 0xef}, {&(0x7f000000bd00)=""/60, 0x3c}, {&(0x7f000000bd40)=""/142, 0x8e}], 0x9, &(0x7f000000bec0)=""/128, 0x80}, 0x6}, {{&(0x7f000000bf40)=@rc={0x1f, @none}, 0x80, &(0x7f000000d180)=[{&(0x7f000000bfc0)=""/35, 0x23}, {&(0x7f000000c000)=""/96, 0x60}, {&(0x7f000000c080)=""/4096, 0x1000}, {&(0x7f000000d080)=""/246, 0xf6}], 0x4, &(0x7f000000d1c0)=""/190, 0xbe}, 0x5}, {{&(0x7f000000d280)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000d3c0)=[{&(0x7f000000d300)=""/21, 0x15}, {&(0x7f000000d340)=""/105, 0x69}], 0x2, &(0x7f000000d400)=""/155, 0x9b}, 0xff}, {{0x0, 0x0, &(0x7f000000d8c0)=[{&(0x7f000000d4c0)=""/235, 0xeb}, {&(0x7f000000d5c0)=""/210, 0xd2}, {&(0x7f000000d6c0)=""/87, 0x57}, {&(0x7f000000d740)=""/166, 0xa6}, {&(0x7f000000d800)=""/94, 0x5e}, {&(0x7f000000d880)=""/58, 0x3a}], 0x6, &(0x7f000000d940)=""/102, 0x66}, 0x219c}, {{0x0, 0x0, &(0x7f000000dbc0)=[{&(0x7f000000d9c0)=""/138, 0x8a}, {&(0x7f000000da80)=""/30, 0x1e}, {&(0x7f000000dac0)=""/70, 0x46}, {&(0x7f000000db40)=""/27, 0x1b}, {&(0x7f000000db80)=""/37, 0x25}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f000000ec40)=[{&(0x7f000000dc40)=""/4096, 0x1000}], 0x1, &(0x7f000000ec80)=""/22, 0x16}, 0x400}, {{&(0x7f000000ecc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f000000ed80)=[{&(0x7f000000ed40)=""/13, 0xd}], 0x1, &(0x7f000000edc0)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f0000010180)=[{&(0x7f000000fdc0)=""/131, 0x83}, {&(0x7f000000fe80)=""/86, 0x56}, {&(0x7f000000ff00)=""/55, 0x37}, {&(0x7f000000ff40)=""/56, 0x38}, {&(0x7f000000ff80)=""/72, 0x48}, {&(0x7f0000010000)=""/93, 0x5d}, {&(0x7f0000010080)=""/202, 0xca}], 0x7, &(0x7f0000010200)=""/4096, 0x1000}}, {{&(0x7f0000011200)=@ethernet={0x0, @random}, 0x80, &(0x7f0000011540)=[{&(0x7f0000011280)=""/76, 0x4c}, {&(0x7f0000011300)=""/138, 0x8a}, {0x0}, {&(0x7f00000113c0)=""/253, 0xfd}, {&(0x7f00000114c0)=""/85, 0x55}], 0x5, &(0x7f00000115c0)=""/4096, 0x1000}, 0x3f}], 0xa, 0x20, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000012840)={[{0x6, 'pids'}, {0x2d, 'hugetlb'}]}, 0xf) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000012880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f00000128c0)={'veth0_to_bond\x00'}) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) accept(r10, 0x0, &(0x7f0000012900)) 22:44:55 executing program 6: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @llc={0x1a, 0x325, 0x9, 0x1, 0x40, 0x95, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @l2tp={0x2, 0x0, @private=0xa010102, 0x4}, 0x5, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)='gretap0\x00', 0x0, 0x4d9938d5}) r1 = socket(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r3 = fork() r4 = syz_open_procfs(r3, &(0x7f0000000380)='environ\x00') ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f00000003c0)={0x0, 0x400, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f00000007c0)={{0x9, 0x1}, 'port0\x00', 0x82, 0x40018, 0x64fbc3be, 0x1f, 0x1, 0x8, 0x385d8491, 0x0, 0x5, 0x7}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000880)) write$vga_arbiter(r4, &(0x7f00000008c0)=@target={'target ', {'PCI:', '6', ':', '10', ':', '1c', '.', '1b'}}, 0x16) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000900), 0x400000, 0x0) connect$bt_l2cap(r6, &(0x7f0000000940)={0x1f, 0x37a, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x2}, 0xe) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x5000c000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000c00)={{r0}, r2, 0x14, @inherit={0x68, &(0x7f0000000b80)={0xf75706016f562005, 0x4, 0x8000, 0x5, {0x31, 0x1, 0x3, 0x1, 0x3}, [0x1000, 0xff, 0x419, 0x3ff]}}, @devid=r5}) 22:44:56 executing program 7: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x10, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ba7}]}, {0x4}, {0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x1) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc8c0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "9cd2052f473af4d37f04102b592d589c78ec265142f2f5042ca7c2bc1b456e09"}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "57d7c4b12884c89e443aaf86959bbc18"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4002}, 0x8094) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0xa325ee3648f6c84c) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mqueue_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4011) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r7) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r8, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c004}, 0xc010) [ 79.258313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.261438] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.265279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.267313] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.274203] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.276574] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.280601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.285223] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.290759] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.292915] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.306231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.325728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.328952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.331381] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.333453] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.341773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.344791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.347451] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.374297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.378858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.392414] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.398439] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.400384] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.402581] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.410386] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 79.412335] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.425553] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.427545] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 79.429270] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.431498] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.432273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.437317] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.439937] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 79.440288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.442851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.445315] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 79.448253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.453518] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.456590] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.458557] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 79.462527] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 79.464291] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.466513] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.479670] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 79.481750] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 79.487425] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.490183] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 79.498155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.338175] Bluetooth: hci1: command tx timeout [ 81.400134] Bluetooth: hci2: command tx timeout [ 81.400910] Bluetooth: hci0: command tx timeout [ 81.528512] Bluetooth: hci3: command tx timeout [ 81.529164] Bluetooth: hci4: command tx timeout [ 81.592165] Bluetooth: hci7: command tx timeout [ 81.592783] Bluetooth: hci6: command tx timeout [ 81.593386] Bluetooth: hci5: command tx timeout [ 83.384438] Bluetooth: hci1: command tx timeout [ 83.448830] Bluetooth: hci0: command tx timeout [ 83.449681] Bluetooth: hci2: command tx timeout [ 83.576422] Bluetooth: hci4: command tx timeout [ 83.577311] Bluetooth: hci3: command tx timeout [ 83.640165] Bluetooth: hci5: command tx timeout [ 83.640894] Bluetooth: hci6: command tx timeout [ 83.641748] Bluetooth: hci7: command tx timeout [ 85.432177] Bluetooth: hci1: command tx timeout [ 85.496155] Bluetooth: hci0: command tx timeout [ 85.496642] Bluetooth: hci2: command tx timeout [ 85.624163] Bluetooth: hci4: command tx timeout [ 85.624662] Bluetooth: hci3: command tx timeout [ 85.688968] Bluetooth: hci6: command tx timeout [ 85.689505] Bluetooth: hci7: command tx timeout [ 85.689922] Bluetooth: hci5: command tx timeout [ 87.480120] Bluetooth: hci1: command tx timeout [ 87.545068] Bluetooth: hci2: command tx timeout [ 87.545571] Bluetooth: hci0: command tx timeout [ 87.672204] Bluetooth: hci3: command tx timeout [ 87.672715] Bluetooth: hci4: command tx timeout [ 87.736124] Bluetooth: hci5: command tx timeout [ 87.736620] Bluetooth: hci7: command tx timeout [ 87.737126] Bluetooth: hci6: command tx timeout [ 137.963477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.964401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.176937] [ 139.177169] ====================================================== [ 139.177693] WARNING: possible circular locking dependency detected [ 139.178221] 6.13.0-next-20250124 #1 Not tainted [ 139.178617] ------------------------------------------------------ [ 139.179840] kworker/u8:0/11 is trying to acquire lock: [ 139.181015] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 139.182969] [ 139.182969] but task is already holding lock: [ 139.184658] ffff88800a8a0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 139.186612] [ 139.186612] which lock already depends on the new lock. [ 139.186612] [ 139.187842] [ 139.187842] the existing dependency chain (in reverse order) is: [ 139.188465] [ 139.188465] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 139.189035] __mutex_lock+0x13d/0xb50 [ 139.189439] wiphy_register+0x1b2e/0x25d0 [ 139.189865] ieee80211_register_hw+0x23a4/0x3d60 [ 139.190338] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 139.190836] init_mac80211_hwsim+0x389/0x870 [ 139.191313] do_one_initcall+0xf9/0x640 [ 139.191742] kernel_init_freeable+0x53d/0x7a0 [ 139.192219] kernel_init+0x1e/0x2d0 [ 139.192599] ret_from_fork+0x48/0x80 [ 139.192985] ret_from_fork_asm+0x1a/0x30 [ 139.193419] [ 139.193419] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 139.193960] __lock_acquire+0x29fd/0x4580 [ 139.194393] lock_acquire+0x19b/0x520 [ 139.194795] __mutex_lock+0x13d/0xb50 [ 139.195214] unregister_netdevice_many_notify+0x1612/0x1c80 [ 139.195768] unregister_netdevice_queue+0x224/0x2e0 [ 139.196265] _cfg80211_unregister_wdev+0x57b/0x700 [ 139.196765] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 139.197264] ieee80211_unregister_hw+0x55/0x3a0 [ 139.197735] hwsim_exit_net+0x3a0/0x730 [ 139.198151] ops_exit_list+0xb3/0x180 [ 139.198553] cleanup_net+0x546/0xad0 [ 139.198955] process_one_work+0x8ee/0x1a10 [ 139.199408] worker_thread+0x674/0xe70 [ 139.199832] kthread+0x3ab/0x720 [ 139.200209] ret_from_fork+0x48/0x80 [ 139.200590] ret_from_fork_asm+0x1a/0x30 [ 139.201027] [ 139.201027] other info that might help us debug this: [ 139.201027] [ 139.201690] Possible unsafe locking scenario: [ 139.201690] [ 139.202201] CPU0 CPU1 [ 139.202598] ---- ---- [ 139.203003] lock(&rdev->wiphy.mtx); [ 139.203357] lock(rtnl_mutex); [ 139.203868] lock(&rdev->wiphy.mtx); [ 139.204405] lock(rtnl_mutex); [ 139.204710] [ 139.204710] *** DEADLOCK *** [ 139.204710] [ 139.205207] 4 locks held by kworker/u8:0/11: [ 139.205588] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 139.206468] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 139.207339] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 139.208148] #3: ffff88800a8a0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 139.209055] [ 139.209055] stack backtrace: [ 139.209444] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 139.209482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.209504] Workqueue: netns cleanup_net [ 139.209545] Call Trace: [ 139.209554] [ 139.209566] dump_stack_lvl+0xca/0x120 [ 139.209624] print_circular_bug+0x47b/0x750 [ 139.209670] check_noncircular+0x2e9/0x3c0 [ 139.209711] ? srso_return_thunk+0x5/0x5f [ 139.209768] ? __pfx_check_noncircular+0x10/0x10 [ 139.209810] ? hlock_class+0x4e/0x130 [ 139.209840] ? mark_lock+0xac/0xed0 [ 139.209880] ? srso_return_thunk+0x5/0x5f [ 139.209935] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 139.209981] ? lockdep_lock+0xba/0x1b0 [ 139.210038] ? __pfx_lockdep_lock+0x10/0x10 [ 139.210101] __lock_acquire+0x29fd/0x4580 [ 139.210154] ? __pfx___lock_acquire+0x10/0x10 [ 139.210198] ? lock_release+0x20f/0x6f0 [ 139.210242] ? __pfx_lock_release+0x10/0x10 [ 139.210290] lock_acquire+0x19b/0x520 [ 139.210333] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 139.210382] ? __pfx_lock_acquire+0x10/0x10 [ 139.210426] ? srso_return_thunk+0x5/0x5f [ 139.210481] ? lock_release+0x20f/0x6f0 [ 139.210525] ? srso_return_thunk+0x5/0x5f [ 139.210580] ? lock_is_held_type+0x9e/0x120 [ 139.210635] ? srso_return_thunk+0x5/0x5f [ 139.210694] __mutex_lock+0x13d/0xb50 [ 139.210746] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 139.210791] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 139.210837] ? srso_return_thunk+0x5/0x5f [ 139.210892] ? synchronize_rcu_expedited+0x38a/0x420 [ 139.210944] ? __pfx___mutex_lock+0x10/0x10 [ 139.210998] ? __pfx_autoremove_wake_function+0x10/0x10 [ 139.211057] ? srso_return_thunk+0x5/0x5f [ 139.211112] ? kasan_quarantine_put+0x84/0x1e0 [ 139.211173] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 139.211208] ? srso_return_thunk+0x5/0x5f [ 139.211267] unregister_netdevice_many_notify+0x1612/0x1c80 [ 139.211313] ? __virt_addr_valid+0x2e8/0x5d0 [ 139.211366] ? __pfx_lock_release+0x10/0x10 [ 139.211411] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 139.211457] ? find_held_lock+0x2c/0x110 [ 139.211515] ? srso_return_thunk+0x5/0x5f [ 139.211572] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 139.211633] ? srso_return_thunk+0x5/0x5f [ 139.211688] ? lock_release+0x20f/0x6f0 [ 139.211732] ? __pfx_lock_release+0x10/0x10 [ 139.211775] ? srso_return_thunk+0x5/0x5f [ 139.211830] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 139.211878] ? srso_return_thunk+0x5/0x5f [ 139.211938] unregister_netdevice_queue+0x224/0x2e0 [ 139.211982] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 139.212025] ? up_write+0x195/0x520 [ 139.212081] _cfg80211_unregister_wdev+0x57b/0x700 [ 139.212132] ? srso_return_thunk+0x5/0x5f [ 139.212191] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 139.212230] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 139.212269] ? srso_return_thunk+0x5/0x5f [ 139.212324] ? srso_return_thunk+0x5/0x5f [ 139.212379] ? synchronize_rcu+0x1ff/0x260 [ 139.212421] ieee80211_unregister_hw+0x55/0x3a0 [ 139.212466] hwsim_exit_net+0x3a0/0x730 [ 139.212508] ? __pfx_hwsim_exit_net+0x10/0x10 [ 139.212549] ? srso_return_thunk+0x5/0x5f [ 139.212604] ? netdev_run_todo+0x788/0x1040 [ 139.212653] ? __pfx_hwsim_exit_net+0x10/0x10 [ 139.212696] ops_exit_list+0xb3/0x180 [ 139.212738] cleanup_net+0x546/0xad0 [ 139.212783] ? __pfx_cleanup_net+0x10/0x10 [ 139.212836] process_one_work+0x8ee/0x1a10 [ 139.212902] ? __pfx_lock_acquire+0x10/0x10 [ 139.212946] ? __pfx_process_one_work+0x10/0x10 [ 139.213005] ? srso_return_thunk+0x5/0x5f [ 139.213060] ? move_linked_works+0x172/0x270 [ 139.213104] ? srso_return_thunk+0x5/0x5f [ 139.213159] ? assign_work+0x196/0x240 [ 139.213217] worker_thread+0x674/0xe70 [ 139.213275] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 139.213327] ? __pfx_worker_thread+0x10/0x10 [ 139.213387] kthread+0x3ab/0x720 [ 139.213439] ? __pfx_kthread+0x10/0x10 [ 139.213490] ? srso_return_thunk+0x5/0x5f [ 139.213545] ? finish_task_switch.isra.0+0x206/0x840 [ 139.213597] ? __pfx_kthread+0x10/0x10 [ 139.213651] ret_from_fork+0x48/0x80 [ 139.213681] ? __pfx_kthread+0x10/0x10 [ 139.213734] ret_from_fork_asm+0x1a/0x30 [ 139.213801] [ 141.183745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.185613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.187560] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.192931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.198668] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 141.200848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.310813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.312327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.319157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.319810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.320450] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.321604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.321599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.323486] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.326101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.328283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.328890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.332222] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 141.333183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.335251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.339904] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 141.344320] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.345090] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 141.358700] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.457315] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.462498] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.470355] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.472333] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.486352] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.490579] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.500923] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.512140] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 141.513453] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.517574] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 141.518167] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 141.530414] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 141.550527] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 141.568542] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 141.577237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 141.578555] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.588759] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 141.594132] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 141.610715] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 141.612360] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 141.620134] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 141.660777] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 141.672550] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 141.676369] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 143.225130] Bluetooth: hci0: command tx timeout [ 143.418054] Bluetooth: hci3: command tx timeout [ 143.418085] Bluetooth: hci1: command tx timeout [ 143.418531] Bluetooth: hci2: command tx timeout [ 143.672071] Bluetooth: hci6: command tx timeout [ 143.672544] Bluetooth: hci4: command tx timeout [ 143.672946] Bluetooth: hci5: command tx timeout [ 143.736062] Bluetooth: hci7: command tx timeout [ 145.272212] Bluetooth: hci0: command tx timeout [ 145.464184] Bluetooth: hci1: command tx timeout [ 145.464661] Bluetooth: hci3: command tx timeout [ 145.465668] Bluetooth: hci2: command tx timeout [ 145.721094] Bluetooth: hci5: command tx timeout [ 145.721556] Bluetooth: hci4: command tx timeout [ 145.721970] Bluetooth: hci6: command tx timeout [ 145.784246] Bluetooth: hci7: command tx timeout [ 147.322040] Bluetooth: hci0: command tx timeout [ 147.512195] Bluetooth: hci3: command tx timeout [ 147.512670] Bluetooth: hci2: command tx timeout [ 147.513910] Bluetooth: hci1: command tx timeout [ 147.768164] Bluetooth: hci6: command tx timeout [ 147.769188] Bluetooth: hci4: command tx timeout [ 147.769614] Bluetooth: hci5: command tx timeout [ 147.832086] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 22:45:57 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800ea75340 RCX=ffffffff81429a0f RDX=ffff88800ea75340 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000200000 RSP=ffff88800efb7db0 R8 =0000000000000000 R9 =ffffed1001d60800 R10=0000000000200000 R11=0000000000000001 R12=ffff88807bbd1ff9 R13=ffffffff886522b8 R14=ffff88800ea75340 R15=0000000000000086 RIP=ffffffff8171a340 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c005767000 CR3=000000001af06000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffff0000000700005653d9385260 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005653d93bc38000005653d93a9880 XMM06=00005653d93bc3a0ffffffff00000004 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed1001c52046 R10=0000000000000020 R11=6f6c206863696877 R12=0000000000000020 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c0056fd000 CR3=000000000ca7e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=99ac6308bee42eb5fc4cb885382e2ddc XMM02=00000000000fbfb8f61f520134a0d9c2 XMM03=0000000000133e10f9980df3bdc2dbad XMM04=03270f8e9f41859400000000000ae988 XMM05=9f165a4fe6c971ad0000000000138548 XMM06=7c8d2a4f1e787a9800000000001384a8 XMM07=dc17d54c07c38ac70000000000133e10 XMM08=ee7587d5db12e8e300000000000fbfb8 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000