Warning: Permanently added '[localhost]:39887' (ECDSA) to the list of known hosts. 2025/01/28 19:18:37 fuzzer started 2025/01/28 19:18:38 dialing manager at localhost:40187 syzkaller login: [ 69.688983] cgroup: Unknown subsys name 'net' [ 69.772354] cgroup: Unknown subsys name 'cpuset' [ 69.812324] cgroup: Unknown subsys name 'rlimit' [ 77.570681] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/28 19:19:07 syscalls: 201 2025/01/28 19:19:07 code coverage: enabled 2025/01/28 19:19:07 comparison tracing: enabled 2025/01/28 19:19:07 extra coverage: enabled 2025/01/28 19:19:07 setuid sandbox: enabled 2025/01/28 19:19:07 namespace sandbox: enabled 2025/01/28 19:19:07 Android sandbox: enabled 2025/01/28 19:19:07 fault injection: enabled 2025/01/28 19:19:07 leak checking: enabled 2025/01/28 19:19:07 net packet injection: enabled 2025/01/28 19:19:07 net device setup: enabled 2025/01/28 19:19:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/28 19:19:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/28 19:19:07 USB emulation: enabled 2025/01/28 19:19:07 hci packet injection: enabled 2025/01/28 19:19:07 wifi device emulation: enabled 2025/01/28 19:19:07 802.15.4 emulation: enabled 2025/01/28 19:19:07 fetching corpus: 0, signal 0/0 (executing program) 2025/01/28 19:19:09 starting 8 fuzzer processes 19:19:09 executing program 0: io_setup(0x7f, &(0x7f0000000000)=0x0) io_setup(0x10001, &(0x7f0000000040)=0x0) io_destroy(r1) io_setup(0x54a, &(0x7f0000000080)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1f, r3, &(0x7f00000000c0)="89c67f37cba709b5edd53b5196947b34f98cccf48a863c188fb5af96a4dfc2040b3ef1dc278f79c7a89a5ce705006676e1b66a3bd50f53f77b5548f4e205412494a2f50121d5fb0556979bcafdbd7dfb9e0f4aa693711377f460143a65816e", 0x5f, 0x6, 0x0, 0x1}, &(0x7f0000000180)) io_setup(0x4, &(0x7f00000001c0)=0x0) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000240)=0x1c, 0x800) io_cancel(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xfe01, r5, &(0x7f0000000280)="1ee306b25b692e136e71b9f5cbe1f4b3c9582341acbcf31b90e2e6914a8a71ba4069fd42a334416ca6c224707cf353f134d006c67213166e8081865705ecf8cb80e10d8756f4a41f81a31537cef29abb0b644f43502344e0eab91f5f43e4e945ab75f403e8eade81e7130207fc414631080552d9870356c7e1beedb5e46acbc934dda4028588dd132e11711b87df80f988fe63250e8c2c6532e353a05ae06905a6f928b2bd2ce9d03af7fd83b3dbd05de0", 0xb1, 0x4, 0x0, 0x1}, &(0x7f0000000380)) write$tcp_mem(0xffffffffffffffff, &(0x7f00000003c0)={0x1, 0x20, 0x3, 0x20, 0x5b}, 0x48) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="8e2dfea3363d4c2248fede4609682f7fb0276aeeaa746cfed06e8b8b3d87d9adeffdcd4df7f51c1fe1252334bd4d67c184d5ddb34aada5ed8f4476eed1a0732f76f295daec66a1fd8c87e7a1f1042aa1c930f19088aa081d29c1e8c29e711fa6679f4cbfc9419cc988732c49efcc4c1ac00d107bdda476e5fa72b35f86010dda7896c4aee6309738a27c452d55c4e9c363ac6804cdb5d90ec5f7f12f455dbd5b977a0222561bc5b7bd02bc48c9eaa4ee75abb83b3b0822ac3b895c01bcd9885b7f", 0xc1, 0x5000, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000540), 0x8, 0x200000) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000580)={0xfd}) io_uring_setup(0x46eb, &(0x7f00000005c0)={0x0, 0xef42, 0x8, 0x3, 0x20f}) io_getevents(r0, 0x5, 0x9, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)={0x77359400}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000007c0), 0x20002, 0x0) openat$cgroup_type(r7, &(0x7f0000000800), 0x2, 0x0) io_getevents(r4, 0x10001, 0x3, &(0x7f0000000840)=[{}, {}, {}], &(0x7f00000008c0)={0x0, 0x3938700}) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000900)={@empty}, 0x14) io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0x8001, r6, &(0x7f0000000940)="fee9f7bc", 0x4, 0x24, 0x0, 0x2, r7}]) 19:19:09 executing program 2: ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@local, 0x43}) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000040)={0x1ff, {{0xa, 0x4e21, 0x1, @mcast1, 0x3f}}}, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0x281, 0x8, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x65, 0x0, 0x5, 0x29, 0x0, @multicast2, @multicast1, {[@rr={0x7, 0x1f, 0x45, [@multicast1, @loopback, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0x2f, [@loopback, @private=0xa010100, @loopback, @rand_addr=0x64010102]}, @timestamp={0x44, 0x24, 0xdc, 0x0, 0x3, [0xf9f4, 0x101, 0x1ff, 0x8, 0x2, 0x8000, 0x645, 0x7]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x0, 0x2, 0x2, 0x0, 0x8001, 0x100001, r0}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x4200, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)={[{0x2d, 'perf_event'}, {0x2d, 'perf_event'}, {0x2d, 'rlimit'}, {0x2d, 'net_prio'}]}, 0x2a) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast1, 0x9, 0x4f48, 0x8000, 0x100, 0x1, 0x1000030, r0}) socketpair(0x8, 0x800, 0x400, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000003c0)={{0xa, 0x4e21, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, {0xa, 0x4e23, 0xa2000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400}, 0x401, [0x5, 0x6, 0x1f, 0x5, 0xffffffff, 0x8, 0x2, 0xd8]}, 0x5c) socketpair(0x12, 0xa, 0x3, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f00000004c0)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x4e23, @private=0xa010102}, 0x0, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000480)='ipvlan0\x00', 0x8, 0x1}) accept$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000580)=0x1c) getsockopt$inet6_buf(r4, 0x29, 0x45, &(0x7f00000005c0), &(0x7f0000000600)) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000640)) bind$inet6(r1, &(0x7f0000000680)={0xa, 0x4e21, 0x4, @mcast1, 0x3f}, 0x1c) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000006c0)={0xfffffffffffffff9, 0x9, 0x7fffffff, 0x5}) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000700)={'IDLETIMER\x00'}, &(0x7f0000000740)=0x1e) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r5) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000007c0)) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000840)=""/128) 19:19:09 executing program 1: r0 = syz_io_uring_setup(0x7825, &(0x7f0000000000)={0x0, 0x4a2a, 0x1373335d8a6e5b44, 0x2, 0x31a}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x6e18, 0xcdb5, 0x2, &(0x7f0000000100)={[0x41f]}, 0x8) clock_settime(0x5, &(0x7f0000000140)={0x0, 0x989680}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000001c0)=0x8) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000200)={@rand_addr=' \x01\x00'}, 0x14) r2 = accept$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, &(0x7f0000000280)=0x1c) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x15}) syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0xb4280) clock_settime(0x2, &(0x7f0000000340)) syz_io_uring_setup(0x7327, &(0x7f0000000380)={0x0, 0xe9c5, 0x20, 0x2, 0x172, 0x0, r0}, &(0x7f0000ff8000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000480)) clock_settime(0x6, &(0x7f00000004c0)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000500)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x9, 0xe9c9, 0x40}, &(0x7f0000000540)=0x20) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000580)={'binder1\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000006c0)={@loopback, 0x8, 0x1, 0x3, 0x0, 0x8000, 0x6}, 0x20) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700), 0x410341, 0x0) syz_io_uring_setup(0x6466, &(0x7f0000000740)={0x0, 0xf573, 0x0, 0x3, 0x214, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) [ 100.941085] audit: type=1400 audit(1738091949.545:7): avc: denied { execmem } for pid=270 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:19:09 executing program 4: timer_create(0x0, &(0x7f0000000180)={0x0, 0x2f, 0x4, @thr={&(0x7f0000000000)="6f8eb1bedfe28192e0736367a0b2ac14a12520408d888ee267a8e5f745ebf2336478af72f2a92422b07ef6932ccafc3d7b6aa38308fc75bf6cd4ddcffe61403f2389833a5044788b9037c16c8be44545e57dfdb2b6ef5358010cd3a8c146935eebdb56eb", &(0x7f0000000080)="6e3bff408333a245668c29bcff38627b4020c3417f2bcc6c2e88f1e49b190a753dc2b4e5b08efdf090cfd8eb51b42782f932c22a5860511d9d14d64496bf7f1778308a777c551423aaf4fab83ade216bd939884eca28d3ccad43acddc3ced9864565700b96517f2ec93c20ecd32dac79763f3586bca84df72eb8137108e4957c94f83515bc7034450b7ba53b355da768585d37023ad630e7029cc6a30ae0cf7a50e6227901a5028db1fe6c1ca173043863a6116f3aa9bf7c8854c99f56ae01adc869d9e35ae57c9d96a712ecdaf2ed2a0191b0f0b67bad79866d4c57f4c06ecdab4c9f3d6a6f657f81f56d6c7d27c9dd8e949a"}}, &(0x7f00000001c0)=0x0) timer_getoverrun(r0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x1c, 0x800) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000280)={{0xa, 0x4e20, 0x3ff, @remote, 0x8000}, {0xa, 0x4e23, 0xa8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10001}, 0xffff, [0x1, 0x0, 0xffffffff, 0x4, 0x6, 0x4, 0x0, 0x195]}, 0x5c) recvfrom$inet6(r1, &(0x7f0000000300)=""/139, 0x8b, 0x2020, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @private2, 0x100}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000400)={0x210b0d4f2e129b6f, 0x0, '\x00', [@ra={0x5, 0x2, 0x1000}]}, 0x10) r2 = accept$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000480)=0x1c) setsockopt$inet6_buf(r2, 0x29, 0x15, &(0x7f00000004c0)="041df3d224de0f0c7dc3281a69779856", 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000540)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r4}, 0x14) getpeername$inet6(r1, &(0x7f0000000580)={0xa, 0x0, 0x0, @remote}, &(0x7f00000005c0)=0x1c) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000600)={0x3, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000740)={@empty, r4}, 0x14) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x17) getsockname$inet6(r1, &(0x7f0000000880)={0xa, 0x0, 0x0, @remote}, &(0x7f00000008c0)=0x1c) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000900)={0x2, {{0xa, 0x4e23, 0x2, @loopback, 0x7f}}}, 0x88) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000009c0)=0x3, 0x4) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 19:19:09 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x143800, 0x0) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3e0, 0xe8, 0xe8, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f00000000c0), {[{{@arp={@multicast2, @private=0xa010101, 0xff000000, 0xff000000, 0x10, 0x1, {@mac=@local, {[0x1fe, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x6, 0x2, 0x0, 0x4, 0xf3, 'vlan1\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x80}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x80, 0x3}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x49, 0xa3, {0x80000001}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x37}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000680)=""/94) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x800) getpeername$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, &(0x7f0000000880)=0x10) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000008c0)={0x48, @broadcast, 0x4e23, 0x1, 'none\x00', 0x1d, 0x40, 0x4}, 0x2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000900)={'IDLETIMER\x00'}, &(0x7f0000000940)=0x1e) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f0000000980)={'gretap0\x00', 0x0, 0x80, 0x8, 0x1, 0x3, {{0x23, 0x4, 0x1, 0x8, 0x8c, 0x68, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @empty, {[@ssrr={0x89, 0x7, 0xe1, [@empty]}, @noop, @timestamp={0x44, 0x1c, 0xad, 0x0, 0x6, [0x8, 0x6, 0x0, 0x8, 0xffffffe1, 0x2]}, @generic={0x86, 0xa, "2a72a0bc4e15e331"}, @rr={0x7, 0x17, 0x1e, [@remote, @remote, @private=0xa010100, @private=0xa010101, @multicast2]}, @timestamp_addr={0x44, 0x14, 0xbf, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff8}, {@broadcast, 0x7fffffff}]}, @timestamp_addr={0x44, 0x1c, 0x9e, 0x1, 0xf, [{@loopback, 0x8}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x7ff}]}]}}}}}) socketpair(0x22, 0x6, 0x775, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000ac0)={'HL\x00'}, &(0x7f0000000b00)=0x1e) syz_open_dev$evdev(&(0x7f0000000b40), 0x7ff, 0x202) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000b80)={0x0, @private}, &(0x7f0000000bc0)=0xc) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000c00)={0x3, {{0x2, 0x4e21, @private=0xa010102}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x10044051) 19:19:09 executing program 5: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x13, 0x2]) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x4e, "fc95c3e8e454a95dd3b600699a77890afaf101cda7044b20b0cbc53578d11210e7a3712938ff7eb0d6117e7e766dfdca0f344bbb4babbb9b336921a38d531b693f19baefb88517d742012803f0d7"}, &(0x7f00000000c0)=0x72) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0xb}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x40, 0x9, 0xf03, 0x400, 0xfffffffffffeffff, 0x100000, r0}) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e22, 0x6, @private1, 0x9}, {0xa, 0x4e23, 0x8, @loopback, 0x2}, 0x8, [0x7, 0x5, 0x3c4, 0x2, 0x20, 0xac4, 0x6, 0x20]}, 0x5c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000240)={@multicast2, @private=0xa010102}, 0x8) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000002c0)={0x0, 0x1a, &(0x7f0000000280)="c76525aa169db0333404663e1631a220bf608e1c84be7c1e9e7e"}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000340)={0x2, 0x34, &(0x7f0000000300)="5b32d7cceb16f182a3fc629bdcc0f1f2ea7805deb09b05b5b3c6a9764ae851fcb869cd1d495b397e4ca251440ded9033e6a74b11"}) recvfrom$inet(r1, &(0x7f0000000380)=""/181, 0xb5, 0x20, &(0x7f0000000440)={0x2, 0x4e23, @remote}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000580)=0xe8) r3 = socket$inet6(0xa, 0x800, 0xff) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@remote, @empty, @mcast1, 0x2, 0x400, 0x4, 0x0, 0x1d56, 0x8040000, r2}) r4 = syz_open_dev$evdev(&(0x7f0000000640), 0x10001, 0x181001) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000680)=[0x8, 0xffff7fff]) r5 = syz_open_dev$evdev(&(0x7f00000006c0), 0x101, 0xa00) ioctl$EVIOCGNAME(r5, 0x80404506, &(0x7f0000000700)=""/180) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000007c0), 0x80000, 0x0) ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000000800)=""/181) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f00000008c0)=""/224) 19:19:09 executing program 6: io_setup(0x1, &(0x7f0000000000)) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c, 0x80000) io_setup(0x450b, &(0x7f00000000c0)=0x0) io_destroy(0x0) io_cancel(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0xab1, 0xffffffffffffffff, &(0x7f0000000100)="9aa59863ed51bc4c470b8c04b8970c59091278bd2535ce48b9615deeddced017744409880d9d669b8e91d04990c8d55f98c54ceeef951b638c67739097f6477df9f35625739309f5bb58894b4b2b379214920989f6d2b56d918458a5124d7b1b9172283d0e81b8be9926cb371a7d2f0292cf54ceca706e67bdebfcb014eed4c7082ab9b90ec8f4d78570b4dc7960be23004e5c2c6f658cb14af9992088db2b11461b8fc5dd86c8bdd4ad8364d327288e9b5277922b504890ec90a4a38be5c34ca4", 0xc1, 0x8, 0x0, 0x1}, &(0x7f0000000240)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x40, 0x10, 0x7, 0x5, {{0x19, 0x4, 0x1, 0x29, 0x64, 0x67, 0x0, 0x67, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010100, {[@rr={0x7, 0x17, 0x38, [@multicast2, @empty, @multicast2, @broadcast, @broadcast]}, @noop, @timestamp={0x44, 0x24, 0x83, 0x0, 0x6, [0x1, 0x80000000, 0x200, 0x8, 0x7, 0x0, 0x7fff, 0xff]}, @timestamp={0x44, 0xc, 0x75, 0x0, 0x8, [0x81, 0x3]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x37, r2}) r3 = socket$inet6(0xa, 0x800, 0x8) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000003c0)={0x2, {{0xa, 0x4e23, 0x3ff, @remote, 0x8000}}, 0x1, 0x2, [{{0xa, 0x4e21, 0x62, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x10001}}, {{0xa, 0x4e21, 0x9, @remote, 0x80000000}}]}, 0x190) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f00000005c0)={0x3, {{0xa, 0x4e20, 0xfffffffe, @local, 0x100}}}, 0x88) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x9) keyctl$assume_authority(0x10, 0x0) io_setup(0xe522, &(0x7f0000000700)) io_setup(0x2, &(0x7f0000000740)=0x0) io_cancel(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, 0x7f, r3, &(0x7f0000000780), 0x0, 0x1c00000000000000, 0x0, 0x3}, &(0x7f0000000800)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder-control\x00', 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000880)={@ipv4={""/10, ""/2, @initdev}, 0x0}, &(0x7f00000008c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000900)={@local, @dev={0xfe, 0x80, '\x00', 0x13}, @dev={0xfe, 0x80, '\x00', 0xc}, 0x2, 0x1000, 0x7c, 0x0, 0x2, 0x800020, r5}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000009c0)={0x7, 0x7ff}) 19:19:09 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = io_uring_setup(0x2bf9, &(0x7f0000000040)={0x0, 0x8852, 0x20, 0x2, 0x273}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x3}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x13, r1, 0x8000000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x3, 0x4e20, 0x1, 0xa, 0xa0, 0x40, 0x32, r3, r2}, {0x3f, 0x81, 0x4, 0x0, 0x9, 0xffffffffffffffc0, 0x7, 0x1000}, {0xac5e, 0x8fcc, 0x4, 0xac7}, 0xfffffffa, 0x6e6bb8, 0x1, 0x0, 0x1}, {{@in6=@local, 0x4d3, 0xff}, 0xa, @in6=@mcast1, 0x3502, 0x2, 0x2, 0x0, 0x34f, 0x7fffffff, 0x401}}, 0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000440)=0x14) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0xfffffffffffffffd) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000480)={@empty, 0x3d, r3}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', r4, 0x40, 0x20, 0x5, 0x3ab2, {{0x23, 0x4, 0x1, 0x3, 0x8c, 0x65, 0x0, 0x3, 0x2f, 0x0, @multicast1, @empty, {[@noop, @timestamp_prespec={0x44, 0x24, 0xfa, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x2c7}, {@private=0xa010101, 0x2000000}, {@empty, 0x10000}]}, @ssrr={0x89, 0xb, 0x56, [@rand_addr=0x64010101, @empty]}, @lsrr={0x83, 0x1f, 0x8, [@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @rand_addr=0x64010100, @remote]}, @lsrr={0x83, 0x13, 0x31, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp_addr={0x44, 0x14, 0x2d, 0x1, 0x6, [{@local, 0x81}, {@local, 0x401}]}]}}}}}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@broadcast, @in=@loopback, 0x4e23, 0xffff, 0x4e24, 0x0, 0xa, 0xa0, 0x30, 0x2c, r5, r2}, {0x9a00000000000000, 0x401, 0x8, 0x7, 0x81, 0x3f, 0x1f, 0x2}, {0x5, 0x100000001, 0xe96, 0xec}, 0x3, 0x6e6bb2, 0x0, 0x0, 0x2, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x2b}, 0x2, @in=@multicast1, 0x3504, 0x3, 0x2, 0x1, 0x3, 0x9, 0x855f}}, 0xe8) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000006c0)=""/118, &(0x7f0000000740)=0x76) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000780)={{0xa, 0x4e22, 0x8, @local, 0x6}, {0xa, 0x4e23, 0x9, @mcast1, 0x1}, 0x8, [0x3c2c, 0x1, 0x5, 0x0, 0x9, 0x4, 0x1, 0x5]}, 0x5c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000800)={@empty, 0x8, 0x2, 0x2, 0x4, 0x86b, 0x9c63}, 0x20) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000840)={'TPROXY\x00'}, &(0x7f0000000880)=0x1e) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000008c0)={0x2e, 0x17, '\x00', [@calipso={0x7, 0x58, {0x1, 0x14, 0x3f, 0x6a60, [0x9, 0x1, 0xfffffffffffffffb, 0x8e, 0x7ff, 0x100000000, 0x2, 0x7fffffff, 0x2, 0x0]}}, @padn, @calipso={0x7, 0x38, {0x0, 0xc, 0x6b, 0x1ff, [0xfffffffffffffff9, 0x7, 0x96, 0x2, 0xffff, 0xfffffffffffffffa]}}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffff20f4}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0xc8) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000009c0)) [ 102.477241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.482651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.489640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.492189] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.495084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.500957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.507181] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.510280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.516154] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 102.520116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.523996] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.541195] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 102.560621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.565185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.567761] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.574359] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.577947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.580718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.589291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.596175] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.598970] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 102.603010] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.604831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.615706] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.617385] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 102.621305] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 102.622817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.627836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.629644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 102.634920] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 102.648829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.662232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 102.665360] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 102.667523] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 102.667663] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 102.669668] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 102.670684] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 102.674480] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 102.679789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.689527] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 102.691306] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 102.712132] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 102.716309] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 102.719294] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 102.723569] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 102.728172] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 102.730299] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 102.732057] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 104.621993] Bluetooth: hci0: command tx timeout [ 104.683575] Bluetooth: hci3: command tx timeout [ 104.684380] Bluetooth: hci2: command tx timeout [ 104.684522] Bluetooth: hci1: command tx timeout [ 104.748594] Bluetooth: hci4: command tx timeout [ 104.749236] Bluetooth: hci5: command tx timeout [ 104.812506] Bluetooth: hci7: command tx timeout [ 104.813147] Bluetooth: hci6: command tx timeout [ 106.667513] Bluetooth: hci0: command tx timeout [ 106.731671] Bluetooth: hci1: command tx timeout [ 106.732516] Bluetooth: hci2: command tx timeout [ 106.732976] Bluetooth: hci3: command tx timeout [ 106.796061] Bluetooth: hci5: command tx timeout [ 106.796682] Bluetooth: hci4: command tx timeout [ 106.861467] Bluetooth: hci6: command tx timeout [ 106.862028] Bluetooth: hci7: command tx timeout [ 108.715488] Bluetooth: hci0: command tx timeout [ 108.779806] Bluetooth: hci3: command tx timeout [ 108.780985] Bluetooth: hci2: command tx timeout [ 108.781931] Bluetooth: hci1: command tx timeout [ 108.844277] Bluetooth: hci4: command tx timeout [ 108.845133] Bluetooth: hci5: command tx timeout [ 108.908632] Bluetooth: hci7: command tx timeout [ 108.909650] Bluetooth: hci6: command tx timeout [ 110.763587] Bluetooth: hci0: command tx timeout [ 110.827692] Bluetooth: hci1: command tx timeout [ 110.828311] Bluetooth: hci2: command tx timeout [ 110.828369] Bluetooth: hci3: command tx timeout [ 110.891574] Bluetooth: hci5: command tx timeout [ 110.892152] Bluetooth: hci4: command tx timeout [ 110.955758] Bluetooth: hci6: command tx timeout [ 110.956847] Bluetooth: hci7: command tx timeout [ 164.749902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.754337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.755234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.757939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.761982] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.766928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.772657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.778493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.778645] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 164.782884] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.784168] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.787034] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.813841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.824846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.829647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.831793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.836837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.841304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.844796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 164.849840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.851746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.868670] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.875171] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 164.876114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.880359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.886830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.888886] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 164.893688] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.897310] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 164.897994] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 164.900517] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 164.902367] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.908892] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.917750] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 164.924748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.927878] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 164.944032] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.948978] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.950487] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 164.959633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 164.964754] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.967754] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 164.970862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 164.975765] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 164.977909] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 165.000205] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 165.014190] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 165.029665] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 166.829491] Bluetooth: hci0: command tx timeout [ 166.892546] Bluetooth: hci1: command tx timeout [ 166.955505] Bluetooth: hci3: command tx timeout [ 167.019509] Bluetooth: hci5: command tx timeout [ 167.019561] Bluetooth: hci2: command tx timeout [ 167.083480] Bluetooth: hci4: command tx timeout [ 167.148536] Bluetooth: hci6: command tx timeout [ 167.787574] Bluetooth: hci7: command tx timeout [ 168.875549] Bluetooth: hci0: command tx timeout [ 168.940344] Bluetooth: hci1: command tx timeout [ 169.004511] Bluetooth: hci3: command tx timeout [ 169.067662] Bluetooth: hci5: command tx timeout [ 169.067729] Bluetooth: hci2: command tx timeout [ 169.131965] Bluetooth: hci4: command tx timeout [ 169.195633] Bluetooth: hci6: command tx timeout [ 169.835994] Bluetooth: hci7: command tx timeout [ 170.923615] Bluetooth: hci0: command tx timeout [ 170.987514] Bluetooth: hci1: command tx timeout [ 171.051620] Bluetooth: hci3: command tx timeout [ 171.117638] Bluetooth: hci2: command tx timeout [ 171.119025] Bluetooth: hci5: command tx timeout [ 171.180220] Bluetooth: hci4: command tx timeout [ 171.243544] Bluetooth: hci6: command tx timeout [ 171.883610] Bluetooth: hci7: command tx timeout [ 172.971465] Bluetooth: hci0: command tx timeout [ 173.036576] Bluetooth: hci1: command tx timeout [ 173.100416] Bluetooth: hci3: command tx timeout [ 173.165477] Bluetooth: hci5: command tx timeout [ 173.166897] Bluetooth: hci2: command tx timeout [ 173.227521] Bluetooth: hci4: command tx timeout [ 173.291879] Bluetooth: hci6: command tx timeout [ 173.931573] Bluetooth: hci7: command tx timeout [ 226.628025] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.636039] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.643205] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.652944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.660487] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 226.663668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.707229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.710095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.711591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.721956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.724852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 226.726811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.754022] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.761668] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.763444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.767172] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.769852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 226.775044] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.823170] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 226.827505] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 226.840670] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 226.848619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 226.852276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 226.857554] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 226.858623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 226.878658] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 226.897281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 226.902993] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 226.907000] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 226.916806] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 226.918570] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 226.923967] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 226.928631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 226.930966] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.936862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 226.938761] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 226.968346] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 226.979794] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 226.982969] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 226.989826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 226.991518] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 226.999594] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 227.016227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 227.033099] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 227.035683] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 227.152850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 227.161309] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 227.177522] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 228.718277] Bluetooth: hci0: command tx timeout [ 228.779672] Bluetooth: hci1: command tx timeout [ 228.843492] Bluetooth: hci2: command tx timeout [ 228.972516] Bluetooth: hci4: command tx timeout [ 229.035672] Bluetooth: hci6: command tx timeout [ 229.036566] Bluetooth: hci3: command tx timeout [ 229.099492] Bluetooth: hci5: command tx timeout [ 229.227563] Bluetooth: hci7: command tx timeout [ 230.763902] Bluetooth: hci0: command tx timeout [ 230.827478] Bluetooth: hci1: command tx timeout [ 230.892752] Bluetooth: hci2: command tx timeout [ 231.022614] Bluetooth: hci4: command tx timeout [ 231.084190] Bluetooth: hci6: command tx timeout [ 231.085232] Bluetooth: hci3: command tx timeout [ 231.147617] Bluetooth: hci5: command tx timeout [ 231.275632] Bluetooth: hci7: command tx timeout [ 232.812560] Bluetooth: hci0: command tx timeout [ 232.876408] Bluetooth: hci1: command tx timeout [ 232.939456] Bluetooth: hci2: command tx timeout [ 233.067485] Bluetooth: hci4: command tx timeout [ 233.132654] Bluetooth: hci3: command tx timeout [ 233.133155] Bluetooth: hci6: command tx timeout [ 233.195446] Bluetooth: hci5: command tx timeout [ 233.324657] Bluetooth: hci7: command tx timeout [ 234.859567] Bluetooth: hci0: command tx timeout [ 234.924483] Bluetooth: hci1: command tx timeout [ 234.987535] Bluetooth: hci2: command tx timeout [ 235.116826] Bluetooth: hci4: command tx timeout [ 235.179776] Bluetooth: hci6: command tx timeout [ 235.181049] Bluetooth: hci3: command tx timeout [ 235.243677] Bluetooth: hci5: command tx timeout [ 235.371770] Bluetooth: hci7: command tx timeout [ 284.304552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.305271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.497238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.498049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.974852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.976070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.158091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.158891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.509324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.510532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.929482] [ 285.929830] ====================================================== [ 285.930763] WARNING: possible circular locking dependency detected [ 285.931686] 6.13.0-next-20250128 #1 Not tainted [ 285.932412] ------------------------------------------------------ [ 285.938666] kworker/u8:0/11 is trying to acquire lock: [ 285.939615] ffffffff8621d9a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 285.941196] [ 285.941196] but task is already holding lock: [ 285.942073] ffff888034340768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 285.943573] [ 285.943573] which lock already depends on the new lock. [ 285.943573] [ 285.944772] [ 285.944772] the existing dependency chain (in reverse order) is: [ 285.945880] [ 285.945880] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 285.946904] __mutex_lock+0x13d/0xb50 [ 285.947641] wiphy_register+0x1b2e/0x25d0 [ 285.948425] ieee80211_register_hw+0x23a4/0x3d60 [ 285.949273] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 285.950160] init_mac80211_hwsim+0x389/0x870 [ 285.950984] do_one_initcall+0xf9/0x640 [ 285.951754] kernel_init_freeable+0x53d/0x7a0 [ 285.952585] kernel_init+0x1e/0x2d0 [ 285.953251] ret_from_fork+0x48/0x80 [ 285.953928] ret_from_fork_asm+0x1a/0x30 [ 285.954708] [ 285.954708] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 285.955664] __lock_acquire+0x29fd/0x4580 [ 285.956448] lock_acquire+0x19b/0x520 [ 285.957162] __mutex_lock+0x13d/0xb50 [ 285.957889] unregister_netdevice_many_notify+0x1612/0x1c80 [ 285.958863] unregister_netdevice_queue+0x224/0x2e0 [ 285.959744] _cfg80211_unregister_wdev+0x57b/0x700 [ 285.960626] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 285.961503] ieee80211_unregister_hw+0x55/0x3a0 [ 285.962332] hwsim_exit_net+0x3a0/0x730 [ 285.963069] ops_exit_list+0xb3/0x180 [ 285.963779] cleanup_net+0x546/0xad0 [ 285.964472] process_one_work+0x8ee/0x1a10 [ 285.965273] worker_thread+0x674/0xe70 [ 285.966024] kthread+0x3ab/0x720 [ 285.966693] ret_from_fork+0x48/0x80 [ 285.967373] ret_from_fork_asm+0x1a/0x30 [ 285.968155] [ 285.968155] other info that might help us debug this: [ 285.968155] [ 285.969322] Possible unsafe locking scenario: [ 285.969322] [ 285.970211] CPU0 CPU1 [ 285.970910] ---- ---- [ 285.971609] lock(&rdev->wiphy.mtx); [ 285.972240] lock(rtnl_mutex); [ 285.973140] lock(&rdev->wiphy.mtx); [ 285.974113] lock(rtnl_mutex); [ 285.974672] [ 285.974672] *** DEADLOCK *** [ 285.974672] [ 285.975560] 4 locks held by kworker/u8:0/11: [ 285.976260] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 285.977837] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 285.979363] #2: ffffffff862119d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 285.980792] #3: ffff888034340768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 285.982387] [ 285.982387] stack backtrace: [ 285.983066] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250128 #1 [ 285.983133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 285.983173] Workqueue: netns cleanup_net [ 285.983248] Call Trace: [ 285.983265] [ 285.983285] dump_stack_lvl+0xca/0x120 [ 285.983390] print_circular_bug+0x47b/0x750 [ 285.983474] check_noncircular+0x2e9/0x3c0 [ 285.983552] ? __pfx_check_noncircular+0x10/0x10 [ 285.983628] ? hlock_class+0x4e/0x130 [ 285.983684] ? mark_lock+0xac/0xed0 [ 285.983766] ? srso_return_thunk+0x5/0x5f [ 285.983869] ? sched_clock+0x37/0x60 [ 285.983973] ? lockdep_lock+0xba/0x1b0 [ 285.984079] ? __pfx_lockdep_lock+0x10/0x10 [ 285.984193] __lock_acquire+0x29fd/0x4580 [ 285.984293] ? __pfx___lock_acquire+0x10/0x10 [ 285.984372] ? lock_release+0x20f/0x6f0 [ 285.984454] ? __pfx_lock_release+0x10/0x10 [ 285.984542] lock_acquire+0x19b/0x520 [ 285.984622] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 285.984713] ? __pfx_lock_acquire+0x10/0x10 [ 285.984795] ? srso_return_thunk+0x5/0x5f [ 285.984898] ? lock_release+0x20f/0x6f0 [ 285.984978] ? srso_return_thunk+0x5/0x5f [ 285.985085] ? lock_is_held_type+0x9e/0x120 [ 285.985186] ? srso_return_thunk+0x5/0x5f [ 285.985296] __mutex_lock+0x13d/0xb50 [ 285.985392] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 285.985476] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 285.985561] ? srso_return_thunk+0x5/0x5f [ 285.985664] ? synchronize_rcu_expedited+0x38a/0x420 [ 285.985744] ? __pfx___mutex_lock+0x10/0x10 [ 285.985844] ? __pfx_autoremove_wake_function+0x10/0x10 [ 285.985949] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 285.986022] unregister_netdevice_many_notify+0x1612/0x1c80 [ 285.986107] ? __virt_addr_valid+0x2e8/0x5d0 [ 285.986203] ? __pfx_lock_release+0x10/0x10 [ 285.986286] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 285.986371] ? find_held_lock+0x2c/0x110 [ 285.986478] ? srso_return_thunk+0x5/0x5f [ 285.986585] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 285.986695] ? srso_return_thunk+0x5/0x5f [ 285.986797] ? lock_release+0x20f/0x6f0 [ 285.986879] ? __pfx_lock_release+0x10/0x10 [ 285.986958] ? srso_return_thunk+0x5/0x5f [ 285.987061] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 285.987149] ? srso_return_thunk+0x5/0x5f [ 285.987261] unregister_netdevice_queue+0x224/0x2e0 [ 285.987342] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 285.987422] ? up_write+0x195/0x520 [ 285.987524] _cfg80211_unregister_wdev+0x57b/0x700 [ 285.987621] ? srso_return_thunk+0x5/0x5f [ 285.987739] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 285.987811] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 285.987883] ? srso_return_thunk+0x5/0x5f [ 285.987986] ? srso_return_thunk+0x5/0x5f [ 285.988088] ? synchronize_rcu+0x1ff/0x260 [ 285.988166] ieee80211_unregister_hw+0x55/0x3a0 [ 285.988249] hwsim_exit_net+0x3a0/0x730 [ 285.988327] ? __pfx_hwsim_exit_net+0x10/0x10 [ 285.988402] ? srso_return_thunk+0x5/0x5f [ 285.988505] ? netdev_run_todo+0x788/0x1040 [ 285.988595] ? __pfx_hwsim_exit_net+0x10/0x10 [ 285.988674] ops_exit_list+0xb3/0x180 [ 285.988753] cleanup_net+0x546/0xad0 [ 285.988836] ? __pfx_cleanup_net+0x10/0x10 [ 285.988935] process_one_work+0x8ee/0x1a10 [ 285.989055] ? __pfx_lock_acquire+0x10/0x10 [ 285.989138] ? __pfx_process_one_work+0x10/0x10 [ 285.989246] ? srso_return_thunk+0x5/0x5f [ 285.989348] ? move_linked_works+0x172/0x270 [ 285.989431] ? srso_return_thunk+0x5/0x5f [ 285.989533] ? assign_work+0x196/0x240 [ 285.989639] worker_thread+0x674/0xe70 [ 285.989746] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 285.989843] ? __pfx_worker_thread+0x10/0x10 [ 285.989953] kthread+0x3ab/0x720 [ 285.990049] ? __pfx_kthread+0x10/0x10 [ 285.990144] ? srso_return_thunk+0x5/0x5f [ 285.990247] ? finish_task_switch.isra.0+0x206/0x840 [ 285.990340] ? __pfx_kthread+0x10/0x10 [ 285.990440] ret_from_fork+0x48/0x80 [ 285.990497] ? __pfx_kthread+0x10/0x10 [ 285.990595] ret_from_fork_asm+0x1a/0x30 [ 285.990717] [ 288.251277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 288.254851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 288.258259] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 288.262215] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 288.267531] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 288.271071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 288.504581] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.506901] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.511049] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.514835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.521139] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 288.524012] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.763132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.765857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.768816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.772919] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.776179] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.782057] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 288.786636] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 288.790226] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.793312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.803772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.813576] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 288.827150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 288.834742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.857265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.863692] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.865866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.872638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.876515] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 288.884646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.889232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 288.905184] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 288.906846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.911150] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 288.916558] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.917769] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 288.925604] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 288.930310] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 288.931614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 288.931859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.934026] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 288.935737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.942734] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 288.944709] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 288.960174] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 289.024654] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 289.026739] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 290.284015] Bluetooth: hci0: command tx timeout [ 290.539713] Bluetooth: hci1: command tx timeout [ 290.863410] Bluetooth: hci2: command tx timeout [ 290.923429] Bluetooth: hci3: command tx timeout [ 290.989396] Bluetooth: hci4: command tx timeout [ 291.052408] Bluetooth: hci7: command tx timeout [ 291.052994] Bluetooth: hci5: command tx timeout [ 291.179438] Bluetooth: hci6: command tx timeout [ 292.332418] Bluetooth: hci0: command tx timeout [ 292.588486] Bluetooth: hci1: command tx timeout [ 292.908464] Bluetooth: hci2: command tx timeout [ 292.971482] Bluetooth: hci3: command tx timeout [ 293.035406] Bluetooth: hci4: command tx timeout [ 293.099453] Bluetooth: hci5: command tx timeout [ 293.099884] Bluetooth: hci7: command tx timeout [ 293.228662] Bluetooth: hci6: command tx timeout [ 294.380423] Bluetooth: hci0: command tx timeout [ 294.635406] Bluetooth: hci1: command tx timeout [ 294.956387] Bluetooth: hci2: command tx timeout [ 295.019531] Bluetooth: hci3: command tx timeout [ 295.084567] Bluetooth: hci4: command tx timeout [ 295.147624] Bluetooth: hci5: command tx timeout [ 295.148059] Bluetooth: hci7: command tx timeout [ 295.275487] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 19:22:14 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806cf412c0 RCX=ffffffff81664972 RDX=ffff888033585340 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88802f31f7c8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=ffffed100d9e8259 R13=ffff88806cf412c8 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81664975 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc99a0e0000 CR3=0000000009e62000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004151f05800000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283f415 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed1001659046 R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000005 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f400 RIP=ffffffff8283f46d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558ca253feb8 CR3=000000003138c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffff0000000a0000563b0ab30250 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=0000000000313d45544154535f4c4c49 XMM05=494b465200367968703d454d414e5f4c XMM06=5359534255530030336c6c696b66722f XMM07=6d697377682f6d697377685f31313230 XMM08=3a56000a73253a51000a73253a47000a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000