Warning: Permanently added '[localhost]:7720' (ECDSA) to the list of known hosts. 2025/01/27 13:05:29 fuzzer started 2025/01/27 13:05:29 dialing manager at localhost:40883 syzkaller login: [ 66.890611] cgroup: Unknown subsys name 'net' [ 67.006105] cgroup: Unknown subsys name 'cpuset' [ 67.037867] cgroup: Unknown subsys name 'rlimit' [ 72.393239] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/27 13:05:47 syscalls: 201 2025/01/27 13:05:47 code coverage: enabled 2025/01/27 13:05:47 comparison tracing: enabled 2025/01/27 13:05:47 extra coverage: enabled 2025/01/27 13:05:47 setuid sandbox: enabled 2025/01/27 13:05:47 namespace sandbox: enabled 2025/01/27 13:05:47 Android sandbox: enabled 2025/01/27 13:05:47 fault injection: enabled 2025/01/27 13:05:47 leak checking: enabled 2025/01/27 13:05:47 net packet injection: enabled 2025/01/27 13:05:47 net device setup: enabled 2025/01/27 13:05:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/27 13:05:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/27 13:05:47 USB emulation: enabled 2025/01/27 13:05:47 hci packet injection: enabled 2025/01/27 13:05:47 wifi device emulation: enabled 2025/01/27 13:05:47 802.15.4 emulation: enabled 2025/01/27 13:05:47 fetching corpus: 0, signal 0/0 (executing program) 2025/01/27 13:05:50 starting 8 fuzzer processes 13:05:50 executing program 0: msgctl$IPC_RMID(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CDROMREADAUDIO(r1, 0x530e, &(0x7f0000000080)={@msf={0xff, 0x1f, 0xf8}, 0x2, 0x8, &(0x7f0000000040)=""/8}) ioctl$CDROMSTOP(r0, 0x5307) r2 = epoll_create1(0x80000) r3 = eventfd(0x1) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x40) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000200)) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xedf5960199642910}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48014}, 0x4008004) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r5) epoll_wait(r0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x9) inotify_init1(0x800) r6 = fsmount(r1, 0x0, 0x2) ioctl$RTC_PIE_OFF(r6, 0x7006) r7 = fsmount(r6, 0x0, 0x84) ioctl$EVIOCGID(r7, 0x80084502, &(0x7f0000000400)=""/4096) ioctl$CDROM_DEBUG(r0, 0x5330, 0x0) 13:05:50 executing program 1: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8) fstat(0xffffffffffffffff, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x1010, 0xffffffffffffffff, 0x10000000) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='\x00', 0x0, 0xffffffffffffffff) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffd, 0x6e, 0x80, @scatter={0x2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/61, 0x3d}]}, &(0x7f0000000200)="4c9524a4d2014d77e56fdd2eed6e4c5ed2223f709a03f42d387b396bbbb7fb5d2b3af6c1726feedbba114100d0a4e42edbffa0810ff624898baf954c96a16a5ba2ae94b4cc98c6034d7579d78cb6e97d67aedc654669b62f8c9721bdee80d3300e80d1504afddf22adc6ec8d893d", &(0x7f0000000280)=""/247, 0x4, 0x10010, 0xffffffffffffffff, &(0x7f0000000380)}) r0 = fsopen(&(0x7f0000000440)='aio\x00', 0x2c64d7ec1b609a4c) r1 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r1, &(0x7f0000000480)) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000500), 0x4) statx(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x800, 0x40, &(0x7f0000000580)) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x20802, 0xc0, 0x10}, 0x18) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000680)='\x00', &(0x7f00000006c0)='./file0\x00', r2) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x1, 0x2, &(0x7f00000009c0)=[{&(0x7f0000000800)="6fc00a5cecee1a84a4f3dff46f079efe5837f7f706237f6e3250e5dfed2d28fa058a5b5180c3feebbca9a1f6e4b4157af1009a9d922d1ba4ae4508d98a7f394c618a3763a71fe8ceda2a2e236df862a81d902cd42fbd544c05e206a452b68658c793f4005fc2370dcc423b109601a6c114b6915a04b1cc1ccb3d7ccf5070504662e7e28d68665c2f7167a40cf8076a6f9f2148834c49f556e708fa22a1aa9ad1dce8f2", 0xa3, 0x9}, {&(0x7f00000008c0)="badb1ddc37b5fd117903b5f0b68424782d20f427d30ebe6c602210262ea87c6e2d24156215bcf2e27f51f8c4f351fe9818cb84053d45f9e058e6d6ee8952b7aca46b5a56499547d792cfa26c3a27a7e7fa3d69a1185bac56e95d077e6cc54201d199a8a07d5f8a0517cd3fa17aea5ddfd916e734410744de6b2e8a0167ed22e800b8291e8cbc082a74f04220fe43c04e0c9a6ad2c595f2d4a71718e3de8668caacdbe9c79de5baad1f5c0879203645c09a0b525a66ae06f0b26c45c9c148793e5d40100d6e82b6f3cdebc1d23125e887547d", 0xd2, 0xb91e}], 0x800000, &(0x7f0000000a00)={[{@utf8no}, {@shortname_mixed}, {@numtail}, {@utf8}, {@rodir}], [{@smackfsdef={'smackfsdef', 0x3d, 'aio\x00'}}]}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) epoll_create1(0x80000) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000b80)={0x4, 0xc2, &(0x7f0000000a80)="a1a871bb1ae2927c37ccaf616d3dc072ee1e503dfdf66552918511157c25847c470b83adc718ea96b8e07bc7c1966f17733290416cb477272e85493445445c1ec8fcdc97a5c615c0f5ad3ec6be2527fe1487f2c170744e27c1c834630f555b012e4b3bde2c639eb11c0c1018b19da09918ade6cf52d49a6b868d887a315977cc5a7d04095a62d393300020732e6b0da6c40a0b4a23fec52925b40913f059bfe6fee7b98fc437f4985f1d4b6e3908740c11454daebfbdeecf8a7e393126e1968b8a8d"}) r3 = fsmount(r0, 0x0, 0x2) r4 = syz_mount_image$tmpfs(&(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0xffff, 0x3, &(0x7f0000000e80)=[{&(0x7f0000000c80)="87b07dd41ba4352fa70f682e61414f1d553acb08f4506b3a754d165634a42f10d7184a54fa2144c4b7ccdddce2bb726b9a3254dd6d4cb426bbaf4d026d6f6f318ea60d8fbd5094fd57fe7694809076e781f8f1d9ef554e7971085403c87eea0d03c54d4383ed19c3a1dc7a180a7e657fb6b5c173e6408c4c3aa0554e3c5a14222a687f1b4b568766666246e5772ce75052097a7b8166c3f729938c05ceb5b885837520a4d564c9a9c1f18df513be9249adc50d5ba5023b9c3d55f89d9d522c72bbf7b15adc9918", 0xc7}, {&(0x7f0000000d80)="02886ead037e3ddc25e80cf7bcd46b33a2a62b3d7d2021e28a1a3f2f3bee20643671b6b7604999e76d34a57df433cc978521caa38559f7edcd28ff40e89de6cde2ad9ab8d6665c702246974c9a581e17722a32fd2b7060e16288228707b85bca1b7145d63b7d13d73f27497520c9e3b2df5afe4ddfda510d6794b5e61c4fedd5", 0x80, 0xfffffffffffffff9}, {&(0x7f0000000e00)="f6fda471aa27899935e496beafc475da5a4b4a645516a470f0a627e558c97a509c7b31de9ced0728cea27dad1a14046c51a2c85f25d19548ddc1e9425315d42cd14f28fdd15e58a9bd28bd0781a2aa07aff83c6eefab", 0x56, 0x80}], 0x340800, &(0x7f0000000f00)={[{@huge_never}, {@huge_within_size}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x78, 0x74, 0x15, 0x2d, 0x6b, 0x31, 0x34]}}, {@mpol={'mpol', 0x3d, {'local', '', @val={0x3a, [0x35, 0x33, 0x2f, 0x39]}}}}, {@huge_advise}], [{@context={'context', 0x3d, 'user_u'}}]}) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000bc0)='aio\x00', 0x0, r4) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff, 0x10001}) 13:05:50 executing program 2: ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000)) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000680)={0x53, 0xfffffffffffffffb, 0xb0, 0x2, @scatter={0x6, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000100)=""/28, 0x1c}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f0000000280)=""/147, 0x93}, {&(0x7f0000000340)=""/165, 0xa5}]}, &(0x7f0000000480)="c12be5f3f296e0a3194570d2788f7df949bb6d02669aa61b964ebaf59ee351a27ae9fe6b3bb1ec3e5229a2ff674541384f0d2dd2e5f85a4d007c4ea5d0d29cbcc989949e5579e418484af3a6c702497f44fbf328091e8f479a55366078f9cd95a1382f81b4399448671e0b0e2b1b78bd35fd1b9113279ba316df653f312799ad8b9df0a3e7d178cc6ff6b4a0febb898a4a604b46bc54a87d5d047ec77992425e6a84ce1261f58dfdb78ed1783a5a9935", &(0x7f0000000540)=""/219, 0x0, 0x22, 0x0, &(0x7f0000000640)}) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000900)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x4, &(0x7f00000008c0)=[{&(0x7f0000000700)="1e4606e4161bbe04177c153a907d590cc47abe43d88211983f5b6bf3691378397407a0237dac4acf5c807e", 0x2b}, {&(0x7f0000000740)="ced290c67c26a0a8d68a4b6828615763f78e0004f04e71e55d5644feb7ad6ed9fb7431206e067c50d5634de1d8bbb8b6fe44ce233b82dc9e22cd51f836633749265ea704ad8f5bae73d12124c44d200d85db74542c6537db2542a3b6068b63f5945d0f67f53edc8c0975ffd2f5a78963ab07ea366017b0ce2682c538b15f", 0x7e}, {&(0x7f00000007c0)="a14f97d515061605ad53768049357e5d959df75ac6e73980bf86539c0c19fd126d15cf0078e4de60947a29cd596ac2cabe30c37d7004f998e6729968af85cddbbdfc920a5ec9a23589dc9839d3461da0df8eec5d199799649ee7ae2c5a172007251e9393d8623000df0801f080b2f7111b582ab4dadad1b14c3ffee18041271eab06cd53a1dd8720ad14698681b73b2528743e35a2f7974e358c61b1459ea3b4f3209bb899e224bd026682af78d853cdee0a11c4874bec224df2cada227625b964df743fd1d19694c0b0a39bb04d36b4620f9443ffb8feaddb16635d145b4ee06ad4cea22de18580f6153f72cf14f794ead6f37f3e89", 0xf6}], 0x3, 0x6, 0x0, {0x3}}, 0x3ff) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000980)=""/181) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000a40)) r3 = io_uring_setup(0x3b47, &(0x7f0000000a80)={0x0, 0x610, 0x0, 0x1, 0x3af, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x80010, r3, 0x10000000) sync() sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x50000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4084) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4b85}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x400c800) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e00), r2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008010) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000f00)) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x20010, r2, 0x10000000) syz_io_uring_submit(r0, r6, &(0x7f0000000f40)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r1, 0x0, 0x0, 0x0, 0x2001, 0x1}, 0x1) 13:05:50 executing program 3: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) r4 = inotify_init1(0x80800) pipe(&(0x7f0000000280)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040800) fstat(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_mount_image$tmpfs(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, 0x1, &(0x7f0000000600)=[{&(0x7f0000000580)="7b26da75124a53dd8e71117bc96597d8ed9b27b73aaa1914b825ff3232aa2f6b8c922c50195d256ba94c05017cb7093bc446a097aad56984064214adacffc8ed57e72c0364dc", 0x46, 0x6}], 0x104000, &(0x7f00000006c0)={[{@huge_never}], [{@euid_eq={'euid', 0x3d, r7}}, {@subj_user={'subj_user', 0x3d, 'batadv_slave_1\x00'}}, {@fowner_lt={'fowner<', 0xee00}}, {@pcr={'pcr', 0x3d, 0x3e}}, {@smackfsdef={'smackfsdef', 0x3d, '\\'}}, {@fowner_lt}, {@dont_appraise}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '*%)!-,%(/#'}}]}) read$eventfd(r1, &(0x7f00000007c0), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x40, 0x0, {0x2}}, 0xeae) write$eventfd(r5, &(0x7f0000000840)=0x1000, 0x8) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r5, &(0x7f0000000880)) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000008c0)='nolazytime\x00', 0x0, 0x0) inotify_init() r9 = fsopen(&(0x7f0000000900)='logfs\x00', 0x0) fstat(r9, &(0x7f0000000940)) [ 87.115031] audit: type=1400 audit(1737983150.309:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:05:50 executing program 4: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x5, 0x81, 0x4, 0x24d, 0x3ff, 0x81}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x4996, 0x100) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/142) r1 = fsmount(0xffffffffffffffff, 0x1, 0x3) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/137) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000240)=""/239) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000340)={0x1, 0xf, 0x6, 0x0, "7f046ef3aaed1d7fe44688597fa587596091806ab96172ddda9fe6016307e612"}) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000380)=""/36) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202, 0x12) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000440)='-*^\x00', 0x0, r5) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000500)='/dev/input/event#\x00', &(0x7f0000000540)='./file0\x00', r5) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x41}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4084) socketpair(0x6, 0x6, 0x3f, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r7) unshare(0x6040000) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000700)="1e58e847fb8f4977736f62dc7ca7bb6fd1dcacca884e15bfd0e35cf53374778fb2a4e03620396e1398e2c4ce80fdede36a2037ffdeb9c96790c6043c9ed3d0f1f58e60d6eb2f15b1e72a6cf1b779ee486ed4406ff3b510a91e02d652539ba6292b66dc4b2dad47e76e2e1df298d6f9a1", 0x70) 13:05:50 executing program 5: fsopen(&(0x7f0000000000)='mqueue\x00', 0x1) r0 = fsopen(&(0x7f0000000040)='befs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40800) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x101}, 0x2000c005) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) eventfd(0x3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = fsopen(&(0x7f0000000440)='pvfs2\x00', 0x1) r2 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x5, 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)="463d5a78104ed18f69eb994bebd56d94d50fdb8329c035421688d7eb9644ffb73e2c71ebe7f1172a545f2af182f83fe8dfe8302fbd405b9d4be0f2434770cfecbe6c1a82c5315249ef90167d1ba44e1ebde6319fd59a7a50fe1161467ea06e1d01cc4d368c5d58ba4bfd89273564eeccf5822e89fe0c8407e2a068ef59470a59a45a15023b6b4cf28f79bfdcf12407", 0x8f, 0x2}], 0x4880, &(0x7f0000000680)={[{@fat=@fmask={'fmask', 0x3d, 0x2}}], [{@fowner_lt={'fowner<', 0xee01}}, {@measure}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000480)='mqueue\x00', &(0x7f00000004c0)='./file0\x00', r2) r3 = syz_mount_image$tmpfs(&(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x2aa, 0x3, &(0x7f00000018c0)=[{&(0x7f0000000780)="cebc78403ce0f3034f05d07bdbe3369529643ee84626b3ffd2c1e312c2d3d87c17a264f9c433d5329fe17fc574731b754ca1da2d4b6b4985e3c5f9a66a1496e1bba756b17ca1162900e6d37e9fe46c5c", 0x50, 0x4}, {&(0x7f0000000800)="d624b7da133f61f77051f8848d61a3d843c36c012dc7b14823f7ab2d4df88a6529669618be5b70b49c9fc25182c3e140b1ce103bc95df20d359596b7b06d2ca88826c41adc5657c70dbf63b9e4585ce77e4b748dc22d91c1ddcb3f39dd01b0ef7c481e4a66cb7bdd92c557b8807ffb38be32996dc16d11080a871badb00cbad3b92d09c9a2722c1df0b3332dccd94ab7ea8a62cc16ede7ea1672d87eaa4e68cf5ffc7f84384975", 0xa7, 0x7}, {&(0x7f00000008c0)="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", 0x1000, 0x4}], 0x64c469386228dd75, &(0x7f0000001940)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x36, 0x30, 0x65, 0x25, 0x34]}}, {@huge_within_size}, {@uid={'uid', 0x3d, 0xee01}}, {@huge_never}, {@size={'size', 0x3d, [0x74, 0x65, 0x38]}}], [{@appraise}, {@subj_role={'subj_role', 0x3d, '\'\xdb@;\\'}}, {@measure}, {@fsname={'fsname', 0x3d, '\x9b'}}, {@subj_role={'subj_role', 0x3d, 'pvfs2\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '0000:00:10.0\x00'}}]}) fspick(r3, &(0x7f0000001a00)='./file0\x00', 0x1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000002c80)={0x53, 0xffffffffffffffff, 0x0, 0x5, @buffer={0x0, 0x1000, &(0x7f0000001b40)=""/4096}, &(0x7f0000002b40), &(0x7f0000002b80)=""/160, 0x16c, 0x23, 0x2, &(0x7f0000002c40)}) fsmount(r1, 0x0, 0xb) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000002d00)=[0x3, 0x6737]) r4 = fspick(r3, &(0x7f0000002d40)='./file0\x00', 0x1) fsmount(r4, 0x1, 0x2) openat2$dir(0xffffffffffffff9c, &(0x7f0000002d80)='./file0\x00', &(0x7f0000002dc0)={0x101, 0x1, 0x14}, 0x18) 13:05:50 executing program 6: ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000)) r0 = syz_open_dev$rtc(&(0x7f0000000040), 0x3, 0x28001) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x0, 0xe, 0x80, 0x8, "97ecbcfb09341e605d2a03deac97fc28fe6627594f7c5307688fd32aa3b92a7c"}) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000000c0)={0xfff, 0x3, 0x9, 0x10, 0x3, 0x9}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/208) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000200)=""/248) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000380)={0x5, 0x4e, &(0x7f0000000300)="8b6c7cfe6c3dc03132e746499da38a23ae890a08ef39cbd9bcb7d736e0aec0c40d9c274ca1bcc67f80f3c4610bd6cb2607bc8d8e4d7b6220a59bf7df8a4cec4248ba26c0651cda37c46075c2f72e"}) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000003c0)) r2 = syz_open_dev$evdev(&(0x7f0000000400), 0xffffffffffff8000, 0x82) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000440)=""/66) r3 = fsopen(&(0x7f00000004c0)='sysfs\x00', 0x1) r4 = fsmount(r3, 0x1, 0x70) r5 = syz_open_dev$evdev(&(0x7f0000000500), 0x100000000, 0x408000) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000540)=""/152) r6 = inotify_add_watch(r4, &(0x7f0000000600)='./file0\x00', 0x60) inotify_rm_watch(r4, r6) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000640)=""/7) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000680)) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f00000006c0)=""/4096) 13:05:50 executing program 7: ioctl$CDROM_DEBUG(0xffffffffffffffff, 0x5330, 0x0) ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5394, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) r1 = gettid() r2 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x193a00) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, r2, &(0x7f0000000080)={0xffffffffffffffff, r0}) epoll_pwait2(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}], 0x2, &(0x7f0000000100), &(0x7f0000000140)={[0xffffffffffffffff]}, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CDROM_DEBUG(r3, 0x5330, 0x0) gettid() ioctl$CDROMVOLCTRL(r3, 0x530a, &(0x7f00000001c0)={0x66, 0x0, 0x5, 0xd2}) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f0000000200)) ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5394, &(0x7f0000000240)) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x9}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xda}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8d4}, 0x20000010) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe0}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004084}, 0x2008001) ioctl$SG_IO(r4, 0x2285, &(0x7f0000001a00)={0x0, 0xffffffffffffffff, 0x22, 0x80, @scatter={0x6, 0x0, &(0x7f0000000900)=[{&(0x7f0000000500)=""/65, 0x41}, {&(0x7f0000000580)=""/221, 0xdd}, {&(0x7f0000000680)=""/54, 0x36}, {&(0x7f00000006c0)=""/100, 0x64}, {&(0x7f0000000740)=""/134, 0x86}, {&(0x7f0000000800)=""/225, 0xe1}]}, &(0x7f0000000980)="7233bdb22ed0505a58afabbd47764f98c6dc22184da2c722e7efe118f30ecc4e07a3", &(0x7f00000009c0)=""/4096, 0xce2, 0x10000, 0x0, &(0x7f00000019c0)}) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001a80), 0x0, 0x0) ioctl$CDROM_DEBUG(r5, 0x5330, 0x1) ioctl$CDROM_CHANGER_NSLOTS(r3, 0x5328) [ 88.543613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.547905] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.550533] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.554736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.557578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.560919] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.563299] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.571277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.571445] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.573066] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.581838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.585319] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.585562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.590580] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.595125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.602567] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.607172] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.609317] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.615914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.617650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.640756] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.646552] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.650960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.651737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.666684] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.676117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.678255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.683947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.687449] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.706767] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.709505] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.713988] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.724261] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.735625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.738650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.739598] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.742417] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.748090] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.755754] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.757591] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.760530] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.762854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.783317] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.791729] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.811058] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.819843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.823797] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.830850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.682965] Bluetooth: hci0: command tx timeout [ 90.683767] Bluetooth: hci1: command tx timeout [ 90.748173] Bluetooth: hci4: command tx timeout [ 90.748211] Bluetooth: hci3: command tx timeout [ 90.749710] Bluetooth: hci2: command tx timeout [ 90.812094] Bluetooth: hci5: command tx timeout [ 90.812208] Bluetooth: hci6: command tx timeout [ 90.876630] Bluetooth: hci7: command tx timeout [ 92.730562] Bluetooth: hci0: command tx timeout [ 92.731083] Bluetooth: hci1: command tx timeout [ 92.794499] Bluetooth: hci4: command tx timeout [ 92.795159] Bluetooth: hci3: command tx timeout [ 92.795883] Bluetooth: hci2: command tx timeout [ 92.858544] Bluetooth: hci6: command tx timeout [ 92.859159] Bluetooth: hci5: command tx timeout [ 92.922521] Bluetooth: hci7: command tx timeout [ 94.778492] Bluetooth: hci1: command tx timeout [ 94.779047] Bluetooth: hci0: command tx timeout [ 94.842578] Bluetooth: hci2: command tx timeout [ 94.843094] Bluetooth: hci3: command tx timeout [ 94.843592] Bluetooth: hci4: command tx timeout [ 94.908383] Bluetooth: hci5: command tx timeout [ 94.908845] Bluetooth: hci6: command tx timeout [ 94.970383] Bluetooth: hci7: command tx timeout [ 96.826470] Bluetooth: hci1: command tx timeout [ 96.826969] Bluetooth: hci0: command tx timeout [ 96.890397] Bluetooth: hci3: command tx timeout [ 96.890837] Bluetooth: hci4: command tx timeout [ 96.891259] Bluetooth: hci2: command tx timeout [ 96.955365] Bluetooth: hci6: command tx timeout [ 96.955805] Bluetooth: hci5: command tx timeout [ 97.018628] Bluetooth: hci7: command tx timeout [ 148.616587] syz-executor.6 (286) used greatest stack depth: 23504 bytes left [ 151.088880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.095273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.098581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.110865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.112617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.114418] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.114609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.116666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.116713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.117942] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.118680] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.121757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.123670] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.129833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.135129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.138215] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.151561] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.152936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.182617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.184145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.186683] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.190071] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.192192] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.193618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.195627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.196984] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.200568] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.201576] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.213911] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.215765] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.220458] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.221906] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.224479] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.225236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.226486] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.226663] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.252923] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.257480] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.258443] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.274887] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.284914] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.285659] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.303147] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.303898] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.316773] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.321784] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.323759] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.330566] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.211570] Bluetooth: hci2: command tx timeout [ 153.212279] Bluetooth: hci1: command tx timeout [ 153.212887] Bluetooth: hci0: command tx timeout [ 153.276504] Bluetooth: hci4: command tx timeout [ 153.277142] Bluetooth: hci3: command tx timeout [ 153.338408] Bluetooth: hci5: command tx timeout [ 153.402579] Bluetooth: hci7: command tx timeout [ 153.402600] Bluetooth: hci6: command tx timeout [ 155.258456] Bluetooth: hci1: command tx timeout [ 155.260334] Bluetooth: hci0: command tx timeout [ 155.260379] Bluetooth: hci2: command tx timeout [ 155.323457] Bluetooth: hci3: command tx timeout [ 155.323472] Bluetooth: hci4: command tx timeout [ 155.388423] Bluetooth: hci5: command tx timeout [ 155.452372] Bluetooth: hci7: command tx timeout [ 155.452519] Bluetooth: hci6: command tx timeout [ 157.306961] Bluetooth: hci0: command tx timeout [ 157.307414] Bluetooth: hci2: command tx timeout [ 157.308527] Bluetooth: hci1: command tx timeout [ 157.370816] Bluetooth: hci4: command tx timeout [ 157.371380] Bluetooth: hci3: command tx timeout [ 157.435461] Bluetooth: hci5: command tx timeout [ 157.498493] Bluetooth: hci7: command tx timeout [ 157.498638] Bluetooth: hci6: command tx timeout [ 159.354447] Bluetooth: hci2: command tx timeout [ 159.354608] Bluetooth: hci1: command tx timeout [ 159.354898] Bluetooth: hci0: command tx timeout [ 159.418502] Bluetooth: hci3: command tx timeout [ 159.418941] Bluetooth: hci4: command tx timeout [ 159.482408] Bluetooth: hci5: command tx timeout [ 159.546559] Bluetooth: hci6: command tx timeout [ 159.546577] Bluetooth: hci7: command tx timeout [ 211.198150] [ 211.198390] ====================================================== [ 211.198999] WARNING: possible circular locking dependency detected [ 211.199611] 6.13.0-next-20250124 #1 Not tainted [ 211.200139] ------------------------------------------------------ [ 211.201496] kworker/u8:0/11 is trying to acquire lock: [ 211.202685] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 211.205300] [ 211.205300] but task is already holding lock: [ 211.206585] ffff88802bce0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 211.208738] [ 211.208738] which lock already depends on the new lock. [ 211.208738] [ 211.209517] [ 211.209517] the existing dependency chain (in reverse order) is: [ 211.210221] [ 211.210221] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 211.210880] __mutex_lock+0x13d/0xb50 [ 211.211356] wiphy_register+0x1b2e/0x25d0 [ 211.211857] ieee80211_register_hw+0x23a4/0x3d60 [ 211.212401] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 211.212979] init_mac80211_hwsim+0x389/0x870 [ 211.213524] do_one_initcall+0xf9/0x640 [ 211.214016] kernel_init_freeable+0x53d/0x7a0 [ 211.214553] kernel_init+0x1e/0x2d0 [ 211.214943] ret_from_fork+0x48/0x80 [ 211.215405] ret_from_fork_asm+0x1a/0x30 [ 211.215864] [ 211.215864] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 211.216432] __lock_acquire+0x29fd/0x4580 [ 211.216885] lock_acquire+0x19b/0x520 [ 211.217297] __mutex_lock+0x13d/0xb50 [ 211.217733] unregister_netdevice_many_notify+0x1612/0x1c80 [ 211.218304] unregister_netdevice_queue+0x224/0x2e0 [ 211.218801] _cfg80211_unregister_wdev+0x57b/0x700 [ 211.219310] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 211.219819] ieee80211_unregister_hw+0x55/0x3a0 [ 211.220298] hwsim_exit_net+0x3a0/0x730 [ 211.220721] ops_exit_list+0xb3/0x180 [ 211.221137] cleanup_net+0x546/0xad0 [ 211.221555] process_one_work+0x8ee/0x1a10 [ 211.222020] worker_thread+0x674/0xe70 [ 211.222468] kthread+0x3ab/0x720 [ 211.222867] ret_from_fork+0x48/0x80 [ 211.223269] ret_from_fork_asm+0x1a/0x30 [ 211.223726] [ 211.223726] other info that might help us debug this: [ 211.223726] [ 211.224410] Possible unsafe locking scenario: [ 211.224410] [ 211.224923] CPU0 CPU1 [ 211.225567] ---- ---- [ 211.226254] lock(&rdev->wiphy.mtx); [ 211.229334] lock(rtnl_mutex); [ 211.230418] lock(&rdev->wiphy.mtx); [ 211.231525] lock(rtnl_mutex); [ 211.232118] [ 211.232118] *** DEADLOCK *** [ 211.232118] [ 211.233028] 4 locks held by kworker/u8:0/11: [ 211.233825] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 211.235669] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 211.237473] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 211.239193] #3: ffff88802bce0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 211.241153] [ 211.241153] stack backtrace: [ 211.241912] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 211.241998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 211.242049] Workqueue: netns cleanup_net [ 211.242145] Call Trace: [ 211.242168] [ 211.242195] dump_stack_lvl+0xca/0x120 [ 211.242330] print_circular_bug+0x47b/0x750 [ 211.242441] check_noncircular+0x2e9/0x3c0 [ 211.242539] ? lock_repin_lock+0x207/0x320 [ 211.242680] ? __pfx_check_noncircular+0x10/0x10 [ 211.242780] ? hlock_class+0x4e/0x130 [ 211.242853] ? mark_lock+0xac/0xed0 [ 211.242949] ? __pfx_lock_repin_lock+0x10/0x10 [ 211.243100] ? lockdep_lock+0xba/0x1b0 [ 211.243240] ? __pfx_lockdep_lock+0x10/0x10 [ 211.243392] __lock_acquire+0x29fd/0x4580 [ 211.243523] ? __pfx___lock_acquire+0x10/0x10 [ 211.243626] ? lock_release+0x20f/0x6f0 [ 211.243733] ? __pfx_lock_release+0x10/0x10 [ 211.243849] lock_acquire+0x19b/0x520 [ 211.243953] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 211.244072] ? __pfx_lock_acquire+0x10/0x10 [ 211.244179] ? srso_return_thunk+0x5/0x5f [ 211.244312] ? lock_release+0x20f/0x6f0 [ 211.244417] ? srso_return_thunk+0x5/0x5f [ 211.244549] ? lock_is_held_type+0x9e/0x120 [ 211.244682] ? srso_return_thunk+0x5/0x5f [ 211.244823] __mutex_lock+0x13d/0xb50 [ 211.244949] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 211.245058] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 211.245172] ? srso_return_thunk+0x5/0x5f [ 211.245306] ? synchronize_rcu_expedited+0x38a/0x420 [ 211.245434] ? __pfx___mutex_lock+0x10/0x10 [ 211.245563] ? __pfx_autoremove_wake_function+0x10/0x10 [ 211.245692] ? srso_return_thunk+0x5/0x5f [ 211.245824] ? kasan_quarantine_put+0x84/0x1e0 [ 211.245969] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 211.246053] ? srso_return_thunk+0x5/0x5f [ 211.246197] unregister_netdevice_many_notify+0x1612/0x1c80 [ 211.246308] ? __virt_addr_valid+0x2e8/0x5d0 [ 211.246434] ? __pfx_lock_release+0x10/0x10 [ 211.246542] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 211.246653] ? find_held_lock+0x2c/0x110 [ 211.246793] ? srso_return_thunk+0x5/0x5f [ 211.246931] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 211.247078] ? srso_return_thunk+0x5/0x5f [ 211.247214] ? lock_release+0x20f/0x6f0 [ 211.247323] ? __pfx_lock_release+0x10/0x10 [ 211.247428] ? srso_return_thunk+0x5/0x5f [ 211.247561] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 211.247677] ? srso_return_thunk+0x5/0x5f [ 211.247825] unregister_netdevice_queue+0x224/0x2e0 [ 211.247930] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 211.248036] ? up_write+0x195/0x520 [ 211.248171] _cfg80211_unregister_wdev+0x57b/0x700 [ 211.248298] ? srso_return_thunk+0x5/0x5f [ 211.248443] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 211.248536] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 211.248629] ? srso_return_thunk+0x5/0x5f [ 211.248764] ? srso_return_thunk+0x5/0x5f [ 211.248898] ? synchronize_rcu+0x1ff/0x260 [ 211.249002] ieee80211_unregister_hw+0x55/0x3a0 [ 211.249112] hwsim_exit_net+0x3a0/0x730 [ 211.249218] ? __pfx_hwsim_exit_net+0x10/0x10 [ 211.249317] ? srso_return_thunk+0x5/0x5f [ 211.249466] ? netdev_run_todo+0x788/0x1040 [ 211.249587] ? __pfx_hwsim_exit_net+0x10/0x10 [ 211.249691] ops_exit_list+0xb3/0x180 [ 211.249795] cleanup_net+0x546/0xad0 [ 211.249904] ? __pfx_cleanup_net+0x10/0x10 [ 211.250035] process_one_work+0x8ee/0x1a10 [ 211.250196] ? __pfx_lock_acquire+0x10/0x10 [ 211.250301] ? __pfx_process_one_work+0x10/0x10 [ 211.250472] ? srso_return_thunk+0x5/0x5f [ 211.250607] ? move_linked_works+0x172/0x270 [ 211.250716] ? srso_return_thunk+0x5/0x5f [ 211.250851] ? assign_work+0x196/0x240 [ 211.250992] worker_thread+0x674/0xe70 [ 211.251134] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 211.251265] ? __pfx_worker_thread+0x10/0x10 [ 211.251411] kthread+0x3ab/0x720 [ 211.251539] ? __pfx_kthread+0x10/0x10 [ 211.251666] ? srso_return_thunk+0x5/0x5f [ 211.251800] ? finish_task_switch.isra.0+0x206/0x840 [ 211.251917] ? __pfx_kthread+0x10/0x10 [ 211.252043] ret_from_fork+0x48/0x80 [ 211.252118] ? __pfx_kthread+0x10/0x10 [ 211.252250] ret_from_fork_asm+0x1a/0x30 [ 211.252414] [ 212.751512] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.754962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.759108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.761836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.765023] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.766144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.880034] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.882440] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.884085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.887169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.889409] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.891150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.942016] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.952774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.956664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.962052] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.966020] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.969877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.057239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.058411] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.062547] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.067133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.068818] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.071537] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.131743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.134077] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.151609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.159566] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.171096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.179025] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.179532] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.190622] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.192113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.198059] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.207922] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.209558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.225922] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.232542] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.266562] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.301703] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.302932] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.303959] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.304640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.307012] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.308419] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.309778] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.334661] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.339857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.781448] Bluetooth: hci0: command tx timeout [ 214.906480] Bluetooth: hci1: command tx timeout [ 215.034366] Bluetooth: hci2: command tx timeout [ 215.099505] Bluetooth: hci3: command tx timeout [ 215.226489] Bluetooth: hci4: command tx timeout [ 215.290358] Bluetooth: hci5: command tx timeout [ 215.354429] Bluetooth: hci7: command tx timeout [ 215.418439] Bluetooth: hci6: command tx timeout [ 216.826360] Bluetooth: hci0: command tx timeout [ 216.954371] Bluetooth: hci1: command tx timeout [ 217.083405] Bluetooth: hci2: command tx timeout [ 217.146386] Bluetooth: hci3: command tx timeout [ 217.274362] Bluetooth: hci4: command tx timeout [ 217.339317] Bluetooth: hci5: command tx timeout [ 217.402762] Bluetooth: hci7: command tx timeout [ 217.467335] Bluetooth: hci6: command tx timeout [ 218.875797] Bluetooth: hci0: command tx timeout [ 219.003521] Bluetooth: hci1: command tx timeout [ 219.130430] Bluetooth: hci2: command tx timeout [ 219.194353] Bluetooth: hci3: command tx timeout [ 219.323322] Bluetooth: hci4: command tx timeout [ 219.387616] Bluetooth: hci5: command tx timeout [ 219.450407] Bluetooth: hci7: command tx timeout [ 219.514360] Bluetooth: hci6: command tx timeout [ 220.922388] Bluetooth: hci0: command tx timeout [ 221.052349] Bluetooth: hci1: command tx timeout [ 221.178331] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 13:07:54 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095dec90 R8 =0000000000000000 R9 =ffffed1001d56046 R10=0000000000000032 R11=6666666666666666 R12=0000000000000032 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055baa28ff890 CR3=000000001ad92000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004123636000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88800e74b780 RCX=ffffffff81429a0f RDX=1ffff11001ce97bd RSI=ffffffff81429a18 RDI=ffff88800e74bde8 RBP=0000000000200000 RSP=ffff88800f59fdb8 R8 =0000000000000000 R9 =ffffed1001e78c80 R10=0000000000200000 R11=0000000000000001 R12=ffffffff86356ff9 R13=ffff888008c50378 R14=ffff88800e74b780 R15=0000000000000086 RIP=ffffffff81429a34 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c0057fe008 CR3=000000001ad92000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c00015eb00000000c00014fe30 XMM02=000000c00014ff20000000c00014fef0 XMM03=000000c00014ff80000000c00014ff50 XMM04=000000c00014fec0000000c00014fe90 XMM05=000000c00014ff20000000c00014fef0 XMM06=000000c00014ff80000000c00014ff50 XMM07=000000c000160000000000c00014ffb0 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=000000c0007db18000000000004643c1 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=000000c00014e8d0000000c00014e8a0 XMM14=000000c00014e930000000c00014e900 XMM15=000000c00007ab00000000c00014e960